last executing test programs:

16m16.310031074s ago: executing program 0 (id=2243):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfc, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2})
r4 = socket(0x21, 0x2, 0xa)
r5 = io_uring_setup(0x177f, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4})
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000001c0)="66b91a03000066b80f00000066ba000000000f30e386f30f46405b2ef20f1a347c000f20e06635004000000f22e066b9240300000f3266b9030b000066b80d00000066ba000000000f30b803008ed066660f600d", 0x54}], 0x1, 0x42, &(0x7f0000000340)=[@cr0={0x0, 0x40020020}, @dstype3={0x7, 0xd}], 0x2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8417f, 0x0)
close_range(r4, r5, 0x0)
close(r3)

16m14.81534508s ago: executing program 0 (id=2247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8923, &(0x7f0000000480)={'bond0\x00', @ifru_names='bond0\x00'}) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7}, 0x1c) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa"], 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002800c0001800800014000000003240001800800014000000007"], 0x140}}, 0x0) (async)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) (async, rerun: 64)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000780)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) (async, rerun: 32)
connect$inet6(r6, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e21, 0x9, @local, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000980), 0x100000001, 0x0) (async)
syz_open_dev$vim2m(0x0, 0x3, 0x2) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000a00), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000a40)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0}) (rerun: 32)
sendto$packet(r5, &(0x7f00000004c0)="05031cfc", 0x4, 0x4000005, &(0x7f0000000140)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)

16m14.43625002s ago: executing program 0 (id=2249):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000500)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0xff, 0x2001)
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc038563b, &(0x7f0000000280)={0x2, 0x1, @stop_pts=0x2})
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = io_uring_setup(0x8, &(0x7f0000000580)={0x0, 0xfffffffc, 0x0, 0x2})
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000600)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000640)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1)
io_uring_enter(r5, 0x0, 0x1, 0x9, &(0x7f0000000680), 0x18)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
r7 = accept(r6, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000340)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c9754a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757", 0x71, 0x12, 0x0, 0x0)
sendto$unix(r7, &(0x7f00000003c0)="52ab35d9b11663b3bb48ea4aa6f19ecab25728f065fcc2f36901", 0x1a, 0x840, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000140)={0x1, 0x2, 0xdf}, 0x8)
r8 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r8, &(0x7f0000000140), 0xfeb5, 0x0, 0x0, 0x0)

16m13.491952226s ago: executing program 0 (id=2253):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) (async)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3c6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000480), 0x56) (async)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000480), 0x56)
sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) (async)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

16m13.320766315s ago: executing program 0 (id=2254):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x40082104, 0x0)

16m13.119227798s ago: executing program 0 (id=2255):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
utime(&(0x7f0000000380)='./file0\x00', 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e1d, 0x9, @local, 0x8}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='children\x00')
pread64(r3, &(0x7f0000000540)=""/253, 0xfd, 0x4)
write(r0, &(0x7f0000000140)="e0668aed140397eb708f9bd3a64cd144a59b548d3f82f14aa14307fd0b6f21453bdbf66ca581f319e72e4e364ead71862e34536035159bf4ffb6772b3c3018e2a284a42567b5a416f2f3c7ce20fcf994c4208106e84a53c5e734eb2f859de489d0bacd678eaf45ac69dec4596712581e8299c712d5379263df8c8b4268e2193f2bb55e9c8232061894d89ab26b54b51ad2a39b862a32faf6851769a91d10e6229e84f2133165afe8b8c29bb053fb208494d6a902f8cba90aa975ffb128e6739162a1b0a8004e693c080042f4b786aaf80f8d7752acb8ecc707cabd6b38809db001f0f2ccfe72720c86e3b1", 0xeb)

16m12.612775089s ago: executing program 32 (id=2255):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
utime(&(0x7f0000000380)='./file0\x00', 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e1d, 0x9, @local, 0x8}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='children\x00')
pread64(r3, &(0x7f0000000540)=""/253, 0xfd, 0x4)
write(r0, &(0x7f0000000140)="e0668aed140397eb708f9bd3a64cd144a59b548d3f82f14aa14307fd0b6f21453bdbf66ca581f319e72e4e364ead71862e34536035159bf4ffb6772b3c3018e2a284a42567b5a416f2f3c7ce20fcf994c4208106e84a53c5e734eb2f859de489d0bacd678eaf45ac69dec4596712581e8299c712d5379263df8c8b4268e2193f2bb55e9c8232061894d89ab26b54b51ad2a39b862a32faf6851769a91d10e6229e84f2133165afe8b8c29bb053fb208494d6a902f8cba90aa975ffb128e6739162a1b0a8004e693c080042f4b786aaf80f8d7752acb8ecc707cabd6b38809db001f0f2ccfe72720c86e3b1", 0xeb)

9m33.791314977s ago: executing program 2 (id=4000):
r0 = socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x7e, "8487e02b03a39d31360af964f83b6efc5357e6adfb929bc535a3ca45d92d23bafe0ecd0cfae15230433f272f4796424667bdc9a62b48b0213f2b4a88773d3640685a465d6c6ebb7a23c4aa4f5d9dadd27f371fd576afc29f91a18cb769ebcefa780d70ba5e2e7028f7ac1417cdb846b999e47d179d053fa93a2db2e09c03"}, &(0x7f0000000440)=0x86)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}}}]}]}, @NFT_MSG_DELRULE={0x14c, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xec, 0x7, 0x1, 0x0, "e12d796927fb858ae93a68a83203d794af184d161a94297ef12fc10921047f7dfaf170131b69b7a2e9147c4ac643fc5bbea5ffd1f85ac365a14fa97df8b4e5fe16502cb5a1b25ed3645ce679bc5887149ec80f3cdb3d84dc47deb0924e282fd9d5e2c60f9a72875699a1f59010d12b5815c5353c6120ca980d1a3bfa17900fde59a17e092fd3c5c23e3690c107fa6729596714be0e10a2de473d4e80378978bf52d62c214df94766ddcf0545a640130e77b0d5b9eee49ebe89ac38d67ad093db3145a1d773170b142a972e0c4ff90e9f7c50c9137bc2256bdd003910e8db35e1337a36d9f83db349"}]}, @NFT_MSG_DELSET={0x1a8, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x95e9}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f9f}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x733}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x262e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3b4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020)
r8 = semget$private(0x0, 0x7, 0x180)
semop(r8, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0xa7dd, 0x3000}], 0x2)
read$FUSE(r7, &(0x7f0000002800)={0x2020}, 0x2020)
write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14)

9m31.875928381s ago: executing program 2 (id=4007):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0)

9m31.727661637s ago: executing program 2 (id=4008):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88a00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000480)={0xc})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x200, 0x0, 0x2cbfbf})
close_range(r3, 0xffffffffffffffff, 0x0)

9m31.234538201s ago: executing program 2 (id=4010):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={<r3=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x7f, 0x6cc58be9}, 0xc)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000780)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)

9m29.96650512s ago: executing program 2 (id=4018):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0)

9m29.580576639s ago: executing program 2 (id=4021):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c)
syz_emit_ethernet(0x3aa, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x374, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd46"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000100)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r3], 0x44}}, 0x2040800)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

9m29.26156507s ago: executing program 33 (id=4021):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c)
syz_emit_ethernet(0x3aa, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x374, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd46"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000100)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r3], 0x44}}, 0x2040800)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

11.322763342s ago: executing program 4 (id=6727):
r0 = socket$inet6(0xa, 0x3, 0x2000ff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f000043b000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x5)
socket$kcm(0x10, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0x6, 0xfffffffd}, 0x0)
syz_clone(0x20000, &(0x7f00000003c0), 0x0, 0x0, 0x0, &(0x7f0000000400))
ftruncate(0xffffffffffffffff, 0x8008976)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f00000001c0)={0x1, {"ff76fdfffc00", "af86a7d6a3ad6745b0fe9f00", "fa2896391039e5ef6f8200"}, 0xe, 0x2})
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x800000aa46)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xb)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_dev$vivid(&(0x7f00000004c0), 0x2, 0x2)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@multiplanar_mmap={0x7f, 0x5, 0x4, 0xe000, 0x4002, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0x2, 0x2, 0x6}, 0x4, 0x1, {&(0x7f0000000580)=[{0xd, 0x5, {}, 0x9}, {0xa, 0x93, {0x8}, 0xf6}]}, 0x80000000})
r5 = syz_open_dev$media(&(0x7f0000000140), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f0000000a80)=[{}, {}, {<r6=>0x80000000}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000200)={{r6, 0x0, 0x4, [0x2, 0x2]}, {0x80000000, 0x0, 0x0, [0x0, 0x3]}, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1101})
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x111})

10.120686916s ago: executing program 4 (id=6734):
unshare(0x22020600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r0, &(0x7f0000000540), 0x10000000000002bb, 0x0) (fail_nth: 3)

9.336813317s ago: executing program 1 (id=6738):
syz_usb_connect(0x3, 0x46, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x7)
sendfile(r0, r1, 0x0, 0x20000023896)
ioctl$TCSBRKP(r0, 0x5425, 0x9)

9.336563516s ago: executing program 4 (id=6739):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20)
writev(r1, &(0x7f0000000040), 0x0)

9.336323578s ago: executing program 3 (id=6740):
syz_open_dev$sndmidi(0x0, 0x2, 0x102)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x1, 0x5, 0x1, {0xff, 0x4}, 0x1, 0xc357})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020)
r2 = socket$inet(0x2, 0x3, 0x7)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
close(0x3)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000480)="9b", 0x29fff, 0x0, 0x0, 0x0)
write(r6, &(0x7f00000004c0)='e', 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000580), 0x82000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000005c0)={0x20004, <r9=>r7, 0x80000})
mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty, 0xfffffff8}, 0x1c)
move_pages(0x0, 0x1efe, &(0x7f0000000640), 0x0, &(0x7f0000000680), 0x0)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={r10, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x2, 0x2}, 0x90)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000300)=0x6, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000002400)=0x1b32, 0x4)
sendto$inet(r2, &(0x7f0000002440)='v', 0x1, 0x4040, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

8.88041893s ago: executing program 4 (id=6742):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfcbf}, 0x1, 0x0, 0x0, 0x400004d}, 0x20040040)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x50)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
setxattr$system_posix_acl(&(0x7f0000000540)='.\x00', &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000000010"], 0x24, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x2}, 0x10)
write(r6, &(0x7f0000000280)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x980000, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES16, @ANYBLOB="01032909f000fddbdf25240000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4008041}, 0x5)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00033c0000005d03"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x3, @string={0x3, 0x3, 'V'}}, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800), 0x2, 0xa}}, 0x20)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000780)={&(0x7f0000000000), 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="e7acdc5a87", @ANYRES16=r8, @ANYBLOB="20012abd7000fddbdf2507000000080031000600000005003700000000000500330000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0x8)

8.036710733s ago: executing program 3 (id=6745):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
shutdown(r0, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)

7.732400909s ago: executing program 3 (id=6746):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000140)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0x1, 0xffffbfff, 0x1, 0xffffdfff, 0x3, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f00000003c0)=0x7) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000400)=0x5) (async)
syz_usb_connect$uac1(0x3, 0xca, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000020630781204000010203010902b80003010500080904000000010100000a2401070048000201020d240802960002970d869df3ff08240706040080c20924030105030602"], 0x0)

7.61928686s ago: executing program 5 (id=6747):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48)
write$rfkill(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
keyctl$clear(0x7, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, 0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_int(r4, 0x1, 0x1e, 0x0, &(0x7f00000000c0))
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50}}], 0x1, 0x10)
add_key$user(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), 0x390, 0xfffffffffffffffd)
r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000e80)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe2(&(0x7f0000000f80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80000)
splice(r7, 0x0, r9, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f0000000fc0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000001000)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000001080)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f00000010c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r11, 0x0, 0x6, 0xc)
vmsplice(r9, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1, 0x6)

6.340279056s ago: executing program 5 (id=6748):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f00000000c0)={'bridge_slave_0\x00', @random="010000201000"})
r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r3, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50)
read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000004340)={0x20, 0x0, r4, {0x403, 0x0, 0x8, 0xfff}}, 0x20)
getdents64(r2, 0x0, 0x20000)

6.12502373s ago: executing program 3 (id=6750):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x22903)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x56, 0x2, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x34)
set_mempolicy(0x5, &(0x7f0000000380)=0xc, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38)

5.984025389s ago: executing program 1 (id=6751):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000640)={0x40, 0x5, 0x100, "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"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000540)="9001000000000000")
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000580)=""/164, 0xa4)

5.718544838s ago: executing program 6 (id=6752):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20)
writev(r1, &(0x7f0000000040), 0x0)

5.687382464s ago: executing program 3 (id=6753):
unshare(0x66000080)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0xfffe, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x5, 0xfffffffffffffffb}, {0x0, 0x40004000000000, 0x200000000000000, 0x4000000}, 0x2, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x4, 0x0, 0x0, 0xb, 0x0, 0x2}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0xc, 0x5, 0xf, 0x8}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x2, 0x2, 0x1a7, 0x81, 0x4}, {{@in6=@private2, 0x4d4, 0x32}, 0x0, @in=@local, 0x34ff, 0x3, 0x1, 0x9, 0xffff, 0x5, 0x7699}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x0, 0x10, &(0x7f0000000f40), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
syz_usb_control_io(r2, &(0x7f0000001000)={0x2c, &(0x7f00000002c0)={0x40, 0x9, 0x3f, {0x3f, 0x2c, "deb39a187f3d09c5c01bcbb0ff323810cf02ef1e74b15baf1cd9d16b7b5189974c8cb7dd4efc51c53ee9c5f6cdccef86fa03e69a00bcb483ffadbae8b7"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}, &(0x7f00000003c0)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x10, 0x7c, 0x8001}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x6, 0xf00, 0x9, [0xc0, 0xff3f00, 0xc0]}, @generic={0x2d, 0x10, 0x3, "a71727ca9488a663d33b8e68437052025129f5bb420097ff7842228e13cf88b95a7257fa0ce842deee1b"}]}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x80, 0x40, "7114a0b0", "a367fc22"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9d, 0x14, 0x40, 0x9, 0x0, 0x101, 0x1}}}, &(0x7f0000001440)={0x84, &(0x7f0000001040)={0x20, 0x16, 0x1d, "10fa67ca7d75070d404b1fa6bdd486ca0717221085ca42dfc2176c8166"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xcc}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf0f0]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001200)={0x40, 0xb, 0x2, 'PZ'}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001280)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000001300)={0x40, 0x19, 0x2, "08e6"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x70}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0xa7}})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000180)=0x5, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'lo\x00', @random="2a280ddbb0df"})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth1_virt_wifi\x00', @random="94e35d13924a"})
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000001540)={0x84, &(0x7f0000001600)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001680)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f00000016c0)={0x34, &(0x7f0000001700)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r6=>0x0})
r7 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYRES8=r6, @ANYRES32=r7], 0x28}}, 0x0)

5.236059246s ago: executing program 6 (id=6754):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88a00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000480)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000540)={0x44, 0x7, r5, 0x0, 0x10001, 0x0, 0x200, 0x0, 0x2cbfbf})

5.190021211s ago: executing program 5 (id=6755):
syz_open_dev$sndmidi(0x0, 0x2, 0x102)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x1, 0x5, 0x1, {0xff, 0x4}, 0x1, 0xc357})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020)
r2 = socket$inet(0x2, 0x3, 0x7)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
close(0x3)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000480)="9b", 0x29fff, 0x0, 0x0, 0x0)
write(r6, &(0x7f00000004c0)='e', 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x0, 0x0})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000580), 0x82000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000005c0)={0x20004, <r9=>r7, 0x80000})
mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty, 0xfffffff8}, 0x1c)
move_pages(0x0, 0x1efe, &(0x7f0000000640), 0x0, &(0x7f0000000680), 0x0)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={r10, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x2, 0x2}, 0x90)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000300)=0x6, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000002400)=0x1b32, 0x4)
sendto$inet(r2, &(0x7f0000002440)='v', 0x1, 0x4040, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

4.94578092s ago: executing program 4 (id=6756):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82c1, 0x0)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0107000000000000000067"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, <r8=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x9)
r11 = dup(r10)
ioctl$XFS_IOC_SWAPEXT(r8, 0xc0c0586d, &(0x7f0000000a40)={0x0, r0, r1, 0xe8, 0x3, '\x00', {0x5, 0x7, 0x2, 0x800, 0x81, 0x1, 0x10001, 0x7fffffff, {0x8, 0x3}, {0x4, 0x3}, {0x100, 0x437}, 0x3, 0x7, 0x14, 0x3, 0xda, 0x5, 0x7, 0xac36, 0x9f8b, 0x3, '\x00', 0x9, 0x1, 0x2, 0x9}})
r12 = syz_open_dev$loop(&(0x7f0000000800), 0x7, 0x1808e2)
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/mem_sleep', 0x20001, 0x18b)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000b40)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000b80)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r14, 0x84, 0xc, &(0x7f0000000bc0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000c00)={0x1, [<r15=>0x0]}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r14, 0x84, 0x6c, &(0x7f0000000c80)={r15, 0x10, "d1c37d1413a03832244912a3acf2912d"}, &(0x7f0000000cc0)=0x18)
ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000000880)={r13, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
pwritev(r12, &(0x7f00000009c0)=[{&(0x7f0000000a00)='z', 0x1}], 0x1, 0x7aa, 0x7fffffff)
openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/failed_transaction_log\x00', 0x0, 0x0)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x0, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

4.229267731s ago: executing program 6 (id=6757):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x5, '\x00', 0x0, r3, 0x0, 0x5, 0x4}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = dup(r1)
syz_ublk_setup_queues(r11, r10, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)

3.712121289s ago: executing program 5 (id=6758):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="7fa200000000000085000000830000008520000001000001950000bbfd28df058e"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0xe, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x10000042, 0x3}, 0x10)
r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder_logs/state\x00', 0x0, 0x0)
r3 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r3, {r1}}, './file0\x00'})
bind$tipc(r0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x9}, {0x5, 0x5}, 0x1, 0x4, 0x73})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r4)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x284, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d89}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x2, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe69496}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x326}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

3.082398548s ago: executing program 5 (id=6759):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xe, @win={{0x6d4, 0x9, 0x1, 0x3ff}, 0x5, 0x9, &(0x7f0000000100)={{0x701e0bfe, 0x81, 0x2, 0x7af}, &(0x7f00000000c0)={{0x8, 0x3, 0x9}, &(0x7f0000000080)={{0x8001, 0x0, 0x3, 0x400}}}}, 0x3, &(0x7f0000000140)="8bd8145ba02723f966b8011699be3d27e217db123d0d4a8aa9e0dbe08a9e490dbad1def7936774d9a8456b4484f939fcf8806eaff32a4f69810c4fcbea5c9989ea0717233036bfc309b2a089a646bad35f2688fc22206b9920645aceee18091af808836a45c4cad43eca80713598ce318e29275f94edc581b92c92c935761541a579e884414669032366e013e07cf439a7bf4e908d9c68aaf426317705049931e5e7f9154c316e58574a4256320caa", 0x3}})

2.979666058s ago: executing program 4 (id=6760):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x9102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40480, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x56)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGIDLE64(r5, 0x4004743c, 0x0)
sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2f, 0x800000000004, @thr={0x0, &(0x7f0000000040)="62a8b0c4aad5ec39942137"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

2.817180483s ago: executing program 6 (id=6761):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x6, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000300)=0x1, 0x4)

2.768406967s ago: executing program 5 (id=6762):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r3 = socket(0x10, 0x803, 0x2)
syz_open_procfs(0x0, &(0x7f00000005c0)='timerslack_ns\x00') (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4})
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r7 = syz_usb_connect(0x0, 0x47, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60004, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8002, 0x7}, 0x1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r9, 0x0) (async)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) (async)
sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)="d03e5cf54ebf4af12d417897c68806f646bd5ad234df084a7baad630053aa101ffb6c42ef75794b35c870110d368ca8d5fcaef4158dd7da65309712a0ef1b11d711a48972e8bdc8b2d783fcd86d45429bb82de00448e6b48c43a9e2c581d46aa1b82b69e25c775cf33a1528ce6fd77ab7e9c6d3723702fccb10301523cea89a7bea98d8bba914ba8ce085a12292b306943f677a0d91edb05dd08f95c75dd305b807a827ea951a2ffeac78fbc3b11f4e9d4c1bcd2378e46011e12428bd6a3447c0d3af1693130f67d6885b293699ea335bad36de8cceca517970d9dbd5c831fd1eac535b1cbde293a1e3e692db1b6b07793aa765c2e864e71f2bbef7b1f4ed9ccd2dc0decd3aab867f6c32211fcb1747d31cc0907a59c865f377aa0f9118c9d5d2f6433db705e7293551309318a6232e07f2e36b7e25941140af85cac8d7d4bf4d9c22ba1bb61c22709a8c6e0ff528cc28196796781b0012e33f510441867af0f996a5eb144b25335a0dea319e2271526f6da64e64a170e8a19738afc7d495d6f1b545548f9de2bef6cb73375b8b623deb4b23e7a4f180c7c398f09011bf06d202c12e40b13b4b66e555a45213d01de2ba29f415c2aabf9a316b9100aed633902cf6ea9d86c034aad30640fd1f0d2e16ab572b080775b15268066a984638e5558a2071994f6e5602000289c67e3d06f4a2838d8af25256d2691d34c9fd4ecf8a394d5a100f09db5e741cb61d24b7305e2192432e18dc603853e9ae65d46d73a2a4b4a89fc43721180d4cf6dfd8329c75d20abb8b5850c2878cdd2a041da72885dc333b06732b4f1933905af5e25dda3693b76b21bd975fa68070a7a7c0625815c00de8cc826cba12e70ab8cd7cd1e5df5ccf43c93914cfdcedf760fa854832815ddbb085c3edeca6b111b845e6447d6bc390a96ad2676857ef9dde241666ad394f8fc4a6d062ba43af5785c90d6701a29a30b13299a7efd7ba9f3879e3e84acfaae583e6624a07b2d456846f708640fb89e3ca6cd489cd0fbb132b74bbc79799f1343fe6a12c303e32edb78d3b094f8994f19a7f3b2d1eb3e29f9841145132cefc4abb78200c82557ed218f87b1c8d6cd6451a7d88e379fd3f9845738768fef131d0a8e631184446b0bf12e4ffcea0df4feb83356e8e889a88e728dca81a3fab223555c8494af4646b6360051f88be91b083a90deed8025e34f2980ceacfeaa7546486386c592ddf12b291c772e7ba2b3290ae53165ac2bd9a910a59e636b7c8c5a00d0adf203df52e2e9a8990b8664a7431373ebb67ff2d5636dc712dcb03bb07e64ac510fe89d8f27bfbee193f32d552a7264cc1d075ad83005bd74f7857fb39402bc57dbedb49e594c0d6ac554aba2d4133e887d322b94a1d065c34065d42b0cf4859fab738c3cb3e4a86f01df572e5252bd4d831e3f3d7338dc94c41eb425ab3325bba8693f40996f1ac113243fce8f0507e22dfa6b3b11fd2b7cebeacba53c0e2914dbd8e4d0370856470b57faa585cd8b05bf26aac5d2b57692de5142affc174c293b49098ad02ada709bf1ed23eafc0582aa02d5d81a02d5d43ef12f7ef1a93b817ca26867afb1fbcc42b2e1c399782af14cc9171b8c1187624e68a6edfeb20729a4762d00a8170e29c72bc89c3813b655b91b7cad25822a830c93e428dbf47ba5a0a7122cdb13ccedf07f1a7726318086c60a51a499a13cc406144f2e33b73a8b97bf36ca84bddd8b93547b4ca8d1954da3d8bb941468f461eeee6a885ddd6f7d67489e3cb0262eca0b17220d35a2a1ab1631f2851995250fdad573502b9dbfc379285834b6d0c8b204de485730be5cbf3aa6e4e834210d5946bf1fed27cd6c2c82a828b0a457f534e1faa36ae1e3db71b1abd39502ee5412c184f70ee883389dc8c20ad9a04b892626d6ea91c9a40bfefb26873283543c1f84c8e0b1cea17e054acf5ac2f9a98a869d14bf94cf9881c9b81c7662ec07e9725b31c5fece28dc3b759134230dba60844c5b5da4a63108ef112e1fbb7235e18fccc2ddecf194984a05006132e325d4230ef6afec636cd26825c58a62555be178eb9af460c08ab84618a3fb7cceb5186a40a9c8783819e9a038c398e0db295b40f60fe1d54c787e8751832b9e7dbd0200e85396ae9cd1c925fc591d02aa77380a7a47c8a172e2f4b194b3c01945d776b802072a9ec28f69ddcbd300893a7445bf378492dc59ed1638acee443e35428bd3aef262f4006656ea5ead3dc980091b3699b625af5e678287e53de88779aa5e56f118b34a60a5d1bcbb07007e127cdf4d45dbfc96c5ee5fb3683a6721a19e165044c39770b7d683ac00b60a6bc02526757168b9fca3f8ad5da29decad6a424ef4c956d74acc592d9b621f5607d9834d3ed58f0a59bbf25a44391bb8efe64da67d80b9e5c8e9f617434cdad97c35b9fa12143e74a0959eed4f0b8e2d3a135027232acc5d8ed9ea7b050f30bf888d551866d3e696c62b40428e1665c341f8e952236cbfac19e902ce38a2cd305121a8400f94cd7b71a2187669cc0f85f8157665288994bfefd2f369babbe55859ba819c7dcd51355e55fd1a019d019e844617ffd814b3d03aadef3bb911688359a729a37ac1187ac0d170e3bd32fdeaedf0afd4274ebcc35b52001299b8d7c2011c9fb9382c6468dee71f684ae4143cb64eda2fe42c8d322d5521ad9a594c239c42aff75d0f63b1be3e230206552866afc2b659086f14d29bdf7f6a5f097632ee9bbf550f79c064bfce05f6f65e6cf9f65262aa7315c021d4fec7f1556bc14d3b44226d2b45616bb46967fc6212a69dd225bf409826d3d244391767a56b81f01a41fcc28355efcb2cb6b626f0964454cc43eeda64c1308a3cf7332f54bc35213676da791ee549ab9dae814dd33904001477f5cb4f0543b9dedd75819c2f5771da54f7ef50c37ef57f798b39815eb762270fd2ecdc2696ca6e773f9d53c436e279aea158f5e8f6881db32b778d3c3d060016a92a8ccd57c617919a95df1750ff956529b94e6e165d363d46b1a74c79f007d99358bb4057032b6d51fd331ee59d762a949a6768be698c1a6b5a5a899e8a58dece83a64f7257b224940d61b492f2e7b8deecf3be94c4310262064f9cf1fdac99fa1646282c0bc4649fc1b2fe5eeb0b7331afef4e1157e6c25d7a5990d3e2efda5b72b1efdcd2228bed13fd181d125df74c34b201e0cf753ce7750a42582f5b5d90f18cda2c3a9885e4528810ed4b2d4f902cb0f4cc8a462f5278696f742507831d57f9d8cb129494c6c499ae128035cd7208e08d79e34f7ccbc48c2a5d92852b7c1b191d210dce6af49049b21e40f07d2739c0c2bd5cf5aebacdb3b88877da6200c4c4b49410722081641a5a6d8e27a956b8be5949c9692f080462ef9d49140cca5143e32d053029a7016d8da5d3aa897610250d75b5592888529a35bc6ae48d296caf1a39f9177c56256bc20cf73182824845bfca3229220852405e9f80e2968c053aaf82f0173115fbbf265ff3194c533342ab910af2e4cde9a6c73a153ae6a216db7c813ead0870f7d4a6b46f249fd2b98215a09a10468df468257fccd4135155a3c7d47baef5a7467e807547cb1ab2a06b4d3eec089d7cdab0f50ae49d8ff904427016a0880d21a8e32abdb06a2af0489c5b43807bfc9128d7404be4a6f40e0a2eb360be1c67e471300e1b77d482ee007109e94dc38490e5278e06ea83de578cfbf04dfa5429de0f8ae9dabeeeb4db1faa0e6032bef46d559d1f5b81051d75a6be021328a7deb0a433ba60779e0bfb1b14c2d8ad7ebb63285f25efcce27d755337bbd7e32d98c5db17d018351885e61f54a5a356ac43f3e362a8c90d0edbad0f169d86e2c4c4b7e769915d34e60b50db73510cb82e5ee3bc48391766cdaca40f7399afbc7843e100078b65b13fce80097e9ae60e591863ca8072310d4df3227808f46d52bfa554efa9fb186685b3004514388c057d11fbf6e2707d22e0c530f9c897580350a75e2ed90fe01557cf3fe95353c8fd63e6887b38b60cad8bc69da238792e660b69108e41f552a9dcf329c00b0f83d6fa04dceeb3883e76d464737bda9d4481d2a8d618f514d9333a140b0780c87b932aa6a1477eff0ee2420b0cd5f77520f5c685b80704af9f904e7825553338e663a572a23dcf904ce6a31b26153936cfa717734bacdb7d65df4909b73616f518cc92e86678949f47f398194aaad4e9b515762ea70d3ecf37f1b665946b685f66ef11ccc81ad706db7141b15d94bfa1573ce2d55f5049ed0cc2ef44bdc91ce84f08e401967c36c4f6493f693b2f24b893fe8baf3ece8d8c6a638fd03b6737d3279675c7f7954d487cfafd12b83bf49628a337920cbb1d4264976e33f873a559a24be71d9104f613241afbfae51b66d5927505d4de5c21ec25314c5d7f1fb7d8143eac985e78b4c0c227bd2e49cc87df8a31cba24a5b6f29cf09918605dec819894c1f4e82870efff877c334184d78976904a14b4e84713cb0790c3254a9313af59cf258ad90484f9446855c82540994f603ca89e3d34cea082068921c971f2383932ca758723ae168e8bda196b22663ef6cf570f7f0616e5e36a87338f4b9351b7409e484452c99503c0e2c0b536e7c870ecdc271fcd4387e7a7d3ccd7256974ed5f745febf7538baee406597f485f4cc7ca0a9dcad4c4ff90ece258890d5c70e40417e92a077569a793f3cdf5204beb5ec5b2caf6126aa7d62064eee2b8c014e56011a4e54f434a8324312436b0c54151a8ec91e99905bc564e97c0464b54de4eb8e699e5fcf53fa73256ed58814252bd4e300870774cc2748dabd735d0513e50742c7982dccec4cafcfc280cd76211cdaf47d7d5c97ee155046021d6ca14094ccea29c7873b7ee93b3fa9d58c225fa0000602e7ef869bf9713aae1d8e638c6af107a778975b8a60dc85dc0df73563a4563b02c04e861415a2fdc9a8177aa2f71a1297b776ef7050a142b4492f6ada2be2fac2eb88f4cc2a9fb434823f8b54df2c807000408d201e2295a45206a8263f654843f1d93dda1804f8f79badea9dc15e640721714d9442922819d05d798bdc856fe98cd16fae4751ded3a848b16badc7b924478668021cbe1463e2adcde43e302c616a984201f7987601dc5f545b5cf91b2545555d86a404cd24ac281c494b6f9bcc372bec3ab6894360d60d5b3cbca09bdb95d550f0c7255a93f968f32db61c9a4f83b66f3183bae3c7352527196c04f886827370bb09114b2c1e834134b59aa0c985e97461b03698bec98c65379e4c99647b9cb048c3b6a0837ba46eedbe36935102e7c12a94f1638abbd610bfafc4a5be8ace4d7f8cd9d7151720aee3a69866611c28b29fe95dd3965d7b6960761d3aa85233d88913b0fc37888bd48157a9b664434d2b954186b4b23c71292bba6b0da1b52cbba6c3d6a58eaac211d90ab7ce5bf783dfaccaea06600d89929400e569f32eb96ac0eb567dea2616c439797b892a211bbfe77c9afbe1d639451bb936762a21e0d1fdef37fe0df6615320d8fda3f8d291a45795732956b482ef2b898ded2e6caf8286b3f5c623b2dbcb102817cd4b3dbc80cd53cd7348bf86694284b836e9a478ea1763c7cc263341793d33fbcd161f13ce351ff28d4f91d3d0251f43033f28553c6ed5d5a56e46deb1900b814d216bef69d7909d7413e080b753f501fe2c7ecfd40dda63b3e35831f72d9aa442221a21bd63d0d3dcf482b86042b091c12de857a79cda2807a82380da0a607c1f2297d9ced1fb4e5f19c5ec173f725e50", 0x1000}], 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="80000000000000000b01000002000000ceef3c41d049c19f4da6246508f31c4e86d1e7f4304d0c9e4f8f7864bd76faa7557c2385955fa08aff2ab26ba366faec8a6bae3cdd09123e4ee77e608481020067035ebbea01e82e9abbe0ff147e3d04c4692026e6eabd8cf9b32d0dcbb1f8767affdc5dcad792c96f6b644679d700004800000000000000140100000000000056f58c6aa873b01aa181e679e1b0d9c8a986879dd5364f20126b7d997339ed173978ae1d1c94bb0f3b6b148ff3f819367b00000000000000"], 0xc8}, 0x48084) (async)
r10 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x541b, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r11) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local})

2.576776304s ago: executing program 1 (id=6763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000fffffff50000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000090500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

2.563278312s ago: executing program 6 (id=6764):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x2800, 0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000080))
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
userfaultfd(0x801)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.25241518s ago: executing program 1 (id=6765):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000002c0)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000380)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/44, 0x2c, 0x12}}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.025350784s ago: executing program 3 (id=6766):
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2cc83, 0x0) (fail_nth: 5)

1.726109521s ago: executing program 1 (id=6767):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xe22, 0x1fffffff, @empty, 0x2}, 0x1c)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e21, 0x482, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x4044800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x2, 0x6c}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x10000005, 0x562, 0x5, 0x4, 0x4, 0x0, 0x9, 0x3}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

188.196863ms ago: executing program 1 (id=6768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'pim6reg0\x00', @local})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd8c, r8, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24004045)
r9 = io_uring_setup(0x1978, &(0x7f0000000300)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb})
r10 = socket$inet(0x2, 0x80001, 0x84)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x130, 0x0, 0x4, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x200000}}}})
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000880)=@assoc_value, &(0x7f00000008c0)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0xfffffffb)
io_uring_enter(r9, 0x2219, 0x7721, 0x56, 0x0, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x5, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

0s ago: executing program 6 (id=6769):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x8, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x0, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x10009, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x63, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7ffff7ff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x1008007, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2004c084)
landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@fd={0x1000, 0x3, 0x4, 0x0, 0x5, {0x77359400}, {0x0, 0x0, 0x40, 0xd8, 0x8, 0x40, "e5ce1027"}, 0x9, 0x4, {}, 0x4})
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000440)=0x800001, 0x4)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x401}, 0x1c)
bind$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000500)=[{&(0x7f0000000540)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'.
[ 1489.106242][T21889] usb 4-1: USB disconnect, device number 76
[ 1489.146881][ T5679] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1489.307662][ T5679] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1489.333337][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.333377][ T5679] usb 6-1: Product: syz
[ 1489.333389][ T5679] usb 6-1: Manufacturer: syz
[ 1489.333400][ T5679] usb 6-1: SerialNumber: syz
[ 1489.374393][ T5679] usb 6-1: config 0 descriptor??
[ 1489.395573][ T5679] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1489.395605][ T5679] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1489.527542][T15165] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1489.627355][T27710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6511'.
[ 1489.687996][T15165] usb 2-1: Using ep0 maxpacket: 8
[ 1489.690327][T15165] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1489.693791][T15165] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1489.693826][T15165] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1489.693848][T15165] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1489.696463][T15165] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1489.696516][T15165] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1489.696537][T15165] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1489.749434][ T5679] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1489.795797][T15165] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1489.795838][T15165] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1489.795859][T15165] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1489.840945][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1489.841819][T15165] usb 2-1: string descriptor 0 read error: -22
[ 1489.841926][T15165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.844222][ T5679] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1489.844278][ T5679] usb 6-1: media controller created
[ 1489.892358][T15165] adutux 2-1:168.0: interrupt endpoints not found
[ 1489.915160][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1490.030805][ T5679] DVB: Unable to find symbol dib7000p_attach()
[ 1490.030825][ T5679] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1490.091864][T27712] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1490.139730][T27704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1490.140203][T27704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1490.142113][T15165] usb 2-1: USB disconnect, device number 81
[ 1490.181342][T27712] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[ 1490.287220][ T5679] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1490.287243][ T5679] Registered IR keymap rc-empty
[ 1490.287561][ T5679] dvb-usb: could not initialize remote control.
[ 1490.287572][ T5679] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1490.551902][T27717] FAULT_INJECTION: forcing a failure.
[ 1490.551902][T27717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1490.551932][T27717] CPU: 1 UID: 0 PID: 27717 Comm: syz.4.6513 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1490.551954][T27717] Tainted: [L]=SOFTLOCKUP
[ 1490.551960][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1490.551970][T27717] Call Trace:
[ 1490.551976][T27717]  <TASK>
[ 1490.551984][T27717]  dump_stack_lvl+0xe8/0x150
[ 1490.552017][T27717]  should_fail_ex+0x410/0x560
[ 1490.552044][T27717]  _copy_to_user+0x31/0xb0
[ 1490.552062][T27717]  simple_read_from_buffer+0xe1/0x170
[ 1490.552093][T27717]  proc_fail_nth_read+0x1bb/0x230
[ 1490.552112][T27717]  ? common_file_perm+0x20e/0x2b0
[ 1490.552140][T27717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1490.552162][T27717]  ? rw_verify_area+0x24a/0x4c0
[ 1490.552180][T27717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1490.552199][T27717]  vfs_read+0x213/0xa80
[ 1490.552219][T27717]  ? __pfx___mutex_lock+0x10/0x10
[ 1490.552239][T27717]  ? __pfx_vfs_read+0x10/0x10
[ 1490.552257][T27717]  ? __fget_files+0x2a/0x420
[ 1490.552274][T27717]  ? __fget_files+0x3a2/0x420
[ 1490.552288][T27717]  ? __fget_files+0x2a/0x420
[ 1490.552309][T27717]  ksys_read+0x150/0x270
[ 1490.552328][T27717]  ? __pfx_ksys_read+0x10/0x10
[ 1490.552353][T27717]  do_syscall_64+0x166/0x520
[ 1490.552371][T27717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1490.552387][T27717]  ? clear_bhb_loop+0x70/0xc0
[ 1490.552406][T27717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1490.552422][T27717] RIP: 0033:0x7faa6875ea0e
[ 1490.552437][T27717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1490.552451][T27717] RSP: 002b:00007faa69660fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1490.552475][T27717] RAX: ffffffffffffffda RBX: 00007faa696616c0 RCX: 00007faa6875ea0e
[ 1490.552488][T27717] RDX: 000000000000000f RSI: 00007faa696610a0 RDI: 0000000000000004
[ 1490.552499][T27717] RBP: 00007faa69661090 R08: 0000000000000000 R09: 0000000000000000
[ 1490.552510][T27717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1490.552520][T27717] R13: 00007faa68a26038 R14: 00007faa68a25fa0 R15: 00007faa68b4fa48
[ 1490.552545][T27717]  </TASK>
[ 1491.819632][T27729] random: crng reseeded on system resumption
[ 1492.223019][ T5679] usb 6-1: USB disconnect, device number 7
[ 1492.483304][ T5679] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1494.719019][T27764] netlink: 'syz.6.6525': attribute type 10 has an invalid length.
[ 1495.187381][ T5679] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1495.336821][ T5679] usb 6-1: Using ep0 maxpacket: 16
[ 1495.344806][ T5679] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[ 1495.354441][ T5679] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[ 1495.403182][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.403215][ T5679] usb 6-1: Product: syz
[ 1495.403233][ T5679] usb 6-1: Manufacturer: 엫䄞�㴆Ṇ꠴鯧ࣞ㌦ဣ࿊鵃⹂年찻�Ÿ�㗅�稧벥⻸��먉닺輸캈땆ݣ툜�ꮱ腤���ˇ㽒箷Ч�﹔䒨਼ቜꃲ穷
[ 1495.403259][ T5679] usb 6-1: SerialNumber: syz
[ 1495.978078][ T5679] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1496.017747][ T5679] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1496.490324][ T5679] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22
[ 1496.522762][ T5679] usb 6-1: USB disconnect, device number 8
[ 1496.707512][T23323] udevd[23323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1498.407185][ T5679] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1498.559277][T27804] netlink: 'syz.4.6535': attribute type 10 has an invalid length.
[ 1498.588317][ T5679] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 1498.596137][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.596180][ T5679] usb 6-1: Product: syz
[ 1498.596192][ T5679] usb 6-1: Manufacturer: syz
[ 1498.596203][ T5679] usb 6-1: SerialNumber: syz
[ 1498.654275][ T5679] usb 6-1: config 0 descriptor??
[ 1498.679103][ T5679] gspca_main: sonixb-2.14.0 probing 0c45:6005
[ 1498.757940][T21889] usb 2-1: new low-speed USB device number 82 using dummy_hcd
[ 1498.936436][T21889] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1498.961936][T21889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1498.962000][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1498.962021][T21889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1498.962040][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1498.962059][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1498.964906][T21889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1498.964942][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1498.964962][T21889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1498.965005][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1498.965024][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1498.967089][T21889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1498.967124][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1498.967164][T21889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1498.967183][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1498.967203][T21889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1499.139807][T21889] usb 2-1: string descriptor 0 read error: -22
[ 1499.140008][T21889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.187087][ T5679] sonixb 6-1:0.0: Error reading register 00: -110
[ 1499.214653][T21889] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1499.499558][T27814] netlink: 'syz.1.6536': attribute type 9 has an invalid length.
[ 1499.528664][T21889] usb 2-1: USB disconnect, device number 82
[ 1499.564519][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6538'.
[ 1499.917068][T16371] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1499.989679][T27816] FAULT_INJECTION: forcing a failure.
[ 1499.989679][T27816] name failslab, interval 1, probability 0, space 0, times 0
[ 1499.989721][T27816] CPU: 1 UID: 0 PID: 27816 Comm: syz.6.6539 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1499.989752][T27816] Tainted: [L]=SOFTLOCKUP
[ 1499.989761][T27816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1499.989776][T27816] Call Trace:
[ 1499.989785][T27816]  <TASK>
[ 1499.989794][T27816]  dump_stack_lvl+0xe8/0x150
[ 1499.989831][T27816]  should_fail_ex+0x410/0x560
[ 1499.989878][T27816]  ? __alloc_skb+0x1db/0x7a0
[ 1499.989899][T27816]  should_failslab+0xa8/0x100
[ 1499.989931][T27816]  ? __alloc_skb+0x1db/0x7a0
[ 1499.989950][T27816]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1499.989977][T27816]  ? __alloc_skb+0x18d/0x7a0
[ 1499.989998][T27816]  ? __alloc_skb+0x1db/0x7a0
[ 1499.990026][T27816]  __alloc_skb+0x1db/0x7a0
[ 1499.990053][T27816]  alloc_skb_with_frags+0xc6/0x760
[ 1499.990090][T27816]  sock_alloc_send_pskb+0x878/0x990
[ 1499.990138][T27816]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1499.990164][T27816]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1499.990192][T27816]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1499.990222][T27816]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[ 1499.990253][T27816]  ? kmem_cache_free+0x182/0x650
[ 1499.990282][T27816]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 1499.990321][T27816]  unix_dgram_sendmsg+0x4da/0x17b0
[ 1499.990356][T27816]  ? __lock_acquire+0x747/0x2de0
[ 1499.990391][T27816]  ? __lock_acquire+0x747/0x2de0
[ 1499.990422][T27816]  ? __lock_acquire+0x747/0x2de0
[ 1499.990447][T27816]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1499.990484][T27816]  ? aa_sock_msg_perm+0x129/0x210
[ 1499.990525][T27816]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[ 1499.990562][T27816]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[ 1499.990596][T27816]  sock_sendmsg_nosec+0x13a/0x180
[ 1499.990629][T27816]  ____sys_sendmsg+0x54e/0x850
[ 1499.990661][T27816]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1499.990695][T27816]  ? import_iovec+0x73/0xa0
[ 1499.990734][T27816]  ___sys_sendmsg+0x2a5/0x360
[ 1499.990758][T27816]  ? __lock_acquire+0x747/0x2de0
[ 1499.990788][T27816]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1499.990810][T27816]  ? __lock_acquire+0x747/0x2de0
[ 1499.990848][T27816]  ? kstrtouint+0x6e/0xe0
[ 1499.990919][T27816]  __sys_sendmmsg+0x273/0x4d0
[ 1499.990951][T27816]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1499.990986][T27816]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1499.991029][T27816]  ? ksys_write+0x242/0x270
[ 1499.991056][T27816]  ? __pfx_ksys_write+0x10/0x10
[ 1499.991087][T27816]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1499.991115][T27816]  do_syscall_64+0x166/0x520
[ 1499.991142][T27816]  ? trace_irq_disable+0x3b/0x140
[ 1499.991167][T27816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.991191][T27816]  ? clear_bhb_loop+0x70/0xc0
[ 1499.991220][T27816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.991243][T27816] RIP: 0033:0x7fed5b39e1d9
[ 1499.991264][T27816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1499.991285][T27816] RSP: 002b:00007fed5c22b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1499.991310][T27816] RAX: ffffffffffffffda RBX: 00007fed5b625fa0 RCX: 00007fed5b39e1d9
[ 1499.991328][T27816] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[ 1499.991345][T27816] RBP: 00007fed5c22b090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.991361][T27816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1499.991375][T27816] R13: 00007fed5b626038 R14: 00007fed5b625fa0 R15: 00007fed5b74fa48
[ 1499.991412][T27816]  </TASK>
[ 1500.108215][T16371] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1500.344394][T16371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1500.344457][T16371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1500.344482][T16371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1500.344528][T16371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.445646][T16371] usb 4-1: config 0 descriptor??
[ 1500.906953][T16371] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1501.258959][ T5679] usb 6-1: USB disconnect, device number 9
[ 1502.303849][  T189] usb 4-1: USB disconnect, device number 77
[ 1502.727899][T27840] FAULT_INJECTION: forcing a failure.
[ 1502.727899][T27840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1502.727940][T27840] CPU: 0 UID: 0 PID: 27840 Comm: syz.5.6546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1502.727971][T27840] Tainted: [L]=SOFTLOCKUP
[ 1502.727979][T27840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1502.727994][T27840] Call Trace:
[ 1502.728004][T27840]  <TASK>
[ 1502.728012][T27840]  dump_stack_lvl+0xe8/0x150
[ 1502.728044][T27840]  should_fail_ex+0x410/0x560
[ 1502.728074][T27840]  _copy_from_user+0x2d/0xb0
[ 1502.728093][T27840]  generic_map_update_batch+0x6b1/0xae0
[ 1502.728111][T27840]  ? kstrtouint+0x6e/0xe0
[ 1502.728141][T27840]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1502.728167][T27840]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1502.728186][T27840]  bpf_map_do_batch+0x391/0x630
[ 1502.728215][T27840]  __sys_bpf+0xbe5/0xd90
[ 1502.728242][T27840]  ? vfs_write+0x930/0xba0
[ 1502.728261][T27840]  ? __pfx___sys_bpf+0x10/0x10
[ 1502.728308][T27840]  ? ksys_write+0x1fc/0x270
[ 1502.728329][T27840]  ? __pfx_ksys_write+0x10/0x10
[ 1502.728352][T27840]  __x64_sys_bpf+0xba/0xd0
[ 1502.728375][T27840]  do_syscall_64+0x166/0x520
[ 1502.728396][T27840]  ? trace_irq_disable+0x3b/0x140
[ 1502.728416][T27840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.728435][T27840]  ? clear_bhb_loop+0x70/0xc0
[ 1502.728457][T27840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.728475][T27840] RIP: 0033:0x7ff7e2d9e1d9
[ 1502.728491][T27840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1502.728508][T27840] RSP: 002b:00007ff7e3c2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1502.728527][T27840] RAX: ffffffffffffffda RBX: 00007ff7e3026180 RCX: 00007ff7e2d9e1d9
[ 1502.728541][T27840] RDX: 0000000000000038 RSI: 0000200000000880 RDI: 000000000000001a
[ 1502.728553][T27840] RBP: 00007ff7e3c2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1502.728565][T27840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1502.728576][T27840] R13: 00007ff7e3026218 R14: 00007ff7e3026180 R15: 00007ff7e314fa48
[ 1502.728604][T27840]  </TASK>
[ 1503.418823][T27844] batman_adv: batadv0: Adding interface: syzkaller0
[ 1503.418844][T27844] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1503.418883][T27844] batman_adv: batadv0: Interface activated: syzkaller0
[ 1504.076521][T27850] pimreg: entered allmulticast mode
[ 1504.385028][T27854] FAULT_INJECTION: forcing a failure.
[ 1504.385028][T27854] name failslab, interval 1, probability 0, space 0, times 0
[ 1504.385073][T27854] CPU: 1 UID: 0 PID: 27854 Comm: syz.4.6551 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1504.385096][T27854] Tainted: [L]=SOFTLOCKUP
[ 1504.385102][T27854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1504.385112][T27854] Call Trace:
[ 1504.385119][T27854]  <TASK>
[ 1504.385127][T27854]  dump_stack_lvl+0xe8/0x150
[ 1504.385158][T27854]  should_fail_ex+0x410/0x560
[ 1504.385184][T27854]  ? __alloc_skb+0x1db/0x7a0
[ 1504.385199][T27854]  should_failslab+0xa8/0x100
[ 1504.385223][T27854]  ? __alloc_skb+0x1db/0x7a0
[ 1504.385236][T27854]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1504.385261][T27854]  ? __alloc_skb+0x18d/0x7a0
[ 1504.385276][T27854]  ? __alloc_skb+0x1db/0x7a0
[ 1504.385295][T27854]  __alloc_skb+0x1db/0x7a0
[ 1504.385314][T27854]  netlink_sendmsg+0x5d4/0xb40
[ 1504.385343][T27854]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.385372][T27854]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1504.385397][T27854]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1504.385417][T27854]  sock_sendmsg_nosec+0x13a/0x180
[ 1504.385442][T27854]  ____sys_sendmsg+0x54e/0x850
[ 1504.385464][T27854]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1504.385489][T27854]  ? import_iovec+0x73/0xa0
[ 1504.385517][T27854]  ___sys_sendmsg+0x2a5/0x360
[ 1504.385534][T27854]  ? __lock_acquire+0x747/0x2de0
[ 1504.385556][T27854]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1504.385599][T27854]  ? __fget_files+0x2a/0x420
[ 1504.385614][T27854]  ? __fget_files+0x3a2/0x420
[ 1504.385636][T27854]  __x64_sys_sendmsg+0x1b1/0x290
[ 1504.385656][T27854]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1504.385690][T27854]  do_syscall_64+0x166/0x520
[ 1504.385708][T27854]  ? trace_irq_disable+0x3b/0x140
[ 1504.385727][T27854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.385765][T27854]  ? clear_bhb_loop+0x70/0xc0
[ 1504.385792][T27854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.385819][T27854] RIP: 0033:0x7faa6879e1d9
[ 1504.385841][T27854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1504.385871][T27854] RSP: 002b:00007faa69661028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1504.385895][T27854] RAX: ffffffffffffffda RBX: 00007faa68a25fa0 RCX: 00007faa6879e1d9
[ 1504.385913][T27854] RDX: 0000000004009004 RSI: 0000200000000800 RDI: 0000000000000003
[ 1504.385928][T27854] RBP: 00007faa69661090 R08: 0000000000000000 R09: 0000000000000000
[ 1504.385943][T27854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1504.385957][T27854] R13: 00007faa68a26038 R14: 00007faa68a25fa0 R15: 00007faa68b4fa48
[ 1504.385993][T27854]  </TASK>
[ 1504.768108][T27849] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1504.768232][T27849] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1504.852608][T27849] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1505.023965][T27842] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1505.215788][T27842] batman_adv: batadv0: Removing interface: syzkaller0
[ 1506.107269][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[ 1506.585384][T27878] FAULT_INJECTION: forcing a failure.
[ 1506.585384][T27878] name failslab, interval 1, probability 0, space 0, times 0
[ 1506.585415][T27878] CPU: 1 UID: 0 PID: 27878 Comm: syz.1.6557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1506.585437][T27878] Tainted: [L]=SOFTLOCKUP
[ 1506.585443][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1506.585452][T27878] Call Trace:
[ 1506.585459][T27878]  <TASK>
[ 1506.585467][T27878]  dump_stack_lvl+0xe8/0x150
[ 1506.585496][T27878]  should_fail_ex+0x410/0x560
[ 1506.585526][T27878]  should_failslab+0xa8/0x100
[ 1506.585550][T27878]  ? skb_clone+0x212/0x3a0
[ 1506.585569][T27878]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1506.585589][T27878]  ? skb_clone+0x212/0x3a0
[ 1506.585612][T27878]  skb_clone+0x212/0x3a0
[ 1506.585633][T27878]  __netlink_deliver_tap+0x413/0x860
[ 1506.585663][T27878]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1506.585685][T27878]  netlink_deliver_tap+0x19c/0x1b0
[ 1506.585706][T27878]  netlink_sendskb+0x68/0x140
[ 1506.585727][T27878]  netlink_rcv_skb+0x2a4/0x4a0
[ 1506.585747][T27878]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1506.585766][T27878]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1506.585796][T27878]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1506.585816][T27878]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1506.585841][T27878]  netlink_unicast+0x7bd/0x940
[ 1506.585868][T27878]  netlink_sendmsg+0x813/0xb40
[ 1506.585896][T27878]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1506.585923][T27878]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1506.585949][T27878]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1506.585969][T27878]  sock_sendmsg_nosec+0x13a/0x180
[ 1506.585994][T27878]  ____sys_sendmsg+0x54e/0x850
[ 1506.586022][T27878]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1506.586047][T27878]  ? import_iovec+0x73/0xa0
[ 1506.586076][T27878]  ___sys_sendmsg+0x2a5/0x360
[ 1506.586093][T27878]  ? __lock_acquire+0x747/0x2de0
[ 1506.586115][T27878]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1506.586159][T27878]  ? __fget_files+0x2a/0x420
[ 1506.586178][T27878]  ? __fget_files+0x3a2/0x420
[ 1506.586201][T27878]  __x64_sys_sendmsg+0x1b1/0x290
[ 1506.586222][T27878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1506.586256][T27878]  do_syscall_64+0x166/0x520
[ 1506.586274][T27878]  ? trace_irq_disable+0x3b/0x140
[ 1506.586293][T27878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.586310][T27878]  ? clear_bhb_loop+0x70/0xc0
[ 1506.586331][T27878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.586347][T27878] RIP: 0033:0x7fcf5159e1d9
[ 1506.586363][T27878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1506.586377][T27878] RSP: 002b:00007fcf524b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1506.586396][T27878] RAX: ffffffffffffffda RBX: 00007fcf51825fa0 RCX: 00007fcf5159e1d9
[ 1506.586408][T27878] RDX: 0000000020004804 RSI: 0000200000000640 RDI: 0000000000000003
[ 1506.586419][T27878] RBP: 00007fcf524b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1506.586430][T27878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1506.586440][T27878] R13: 00007fcf51826038 R14: 00007fcf51825fa0 R15: 00007fcf5194fa48
[ 1506.586466][T27878]  </TASK>
[ 1506.910703][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[ 1507.607829][ T5679] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1507.804457][ T5679] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1507.822125][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1507.822165][ T5679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1507.822183][ T5679] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1507.822201][ T5679] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1507.822232][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.186988][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[ 1508.388235][T27888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1508.388249][T27888] binder: 27887:27888 ioctl 4018620d 200000000140 returned -16
[ 1510.506181][ T5679] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71)
[ 1510.506245][ T5679] gud 2-1:1.0: Failed to get connectors (error=-71)
[ 1510.506274][ T5679] gud 2-1:1.0: probe with driver gud failed with error -71
[ 1510.577326][ T5679] usb 2-1: USB disconnect, device number 83
[ 1510.845342][T27909] bond2: Unable to set up delay as MII monitoring is disabled
[ 1510.867732][T27909] bond2 (unregistering): Released all slaves
[ 1511.503756][T27917] FAULT_INJECTION: forcing a failure.
[ 1511.503756][T27917] name failslab, interval 1, probability 0, space 0, times 0
[ 1511.503786][T27917] CPU: 1 UID: 0 PID: 27917 Comm: syz.3.6568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1511.503808][T27917] Tainted: [L]=SOFTLOCKUP
[ 1511.503815][T27917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1511.503825][T27917] Call Trace:
[ 1511.503832][T27917]  <TASK>
[ 1511.503839][T27917]  dump_stack_lvl+0xe8/0x150
[ 1511.503867][T27917]  should_fail_ex+0x410/0x560
[ 1511.503899][T27917]  should_failslab+0xa8/0x100
[ 1511.503923][T27917]  __kvmalloc_node_noprof+0x176/0x820
[ 1511.503946][T27917]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1511.503965][T27917]  ? io_alloc_cache_init+0x42/0x140
[ 1511.503983][T27917]  ? io_alloc_cache_init+0x42/0x140
[ 1511.504007][T27917]  io_alloc_cache_init+0x42/0x140
[ 1511.504035][T27917]  io_ring_ctx_alloc+0x527/0xb80
[ 1511.504058][T27917]  io_uring_create+0x50/0x990
[ 1511.504087][T27917]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1511.504110][T27917]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1511.504131][T27917]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1511.504165][T27917]  ? __pfx_ksys_write+0x10/0x10
[ 1511.504192][T27917]  do_syscall_64+0x166/0x520
[ 1511.504210][T27917]  ? trace_irq_disable+0x3b/0x140
[ 1511.504229][T27917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1511.504246][T27917]  ? clear_bhb_loop+0x70/0xc0
[ 1511.504266][T27917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1511.504282][T27917] RIP: 0033:0x7efc6bd9e1d9
[ 1511.504297][T27917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1511.504311][T27917] RSP: 002b:00007efc6cc02ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1511.504329][T27917] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007efc6bd9e1d9
[ 1511.504341][T27917] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26
[ 1511.504353][T27917] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000
[ 1511.504364][T27917] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[ 1511.504376][T27917] R13: 0000200000000b10 R14: 00007efc6cc02fd8 R15: 0000000000000000
[ 1511.504400][T27917]  </TASK>
[ 1512.216980][  T189] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1512.367662][  T189] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1512.370683][  T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.370704][  T189] usb 6-1: Product: syz
[ 1512.370716][  T189] usb 6-1: Manufacturer: syz
[ 1512.370727][  T189] usb 6-1: SerialNumber: syz
[ 1512.727293][ T5679] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1512.869465][ T5679] usb 2-1: device descriptor read/64, error -71
[ 1513.121714][ T5679] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1513.197359][T16371] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1513.278729][ T5679] usb 2-1: device descriptor read/64, error -71
[ 1513.347168][T16371] usb 4-1: Using ep0 maxpacket: 16
[ 1513.350375][T16371] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1513.351660][T16371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1513.351710][T16371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.396821][ T5679] usb usb2-port1: attempt power cycle
[ 1513.397342][T16371] usb 4-1: config 0 descriptor??
[ 1513.441070][T16371] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input155
[ 1513.606896][  T189] rtl8150 6-1:1.0: couldn't reset the device
[ 1513.607134][  T189] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[ 1513.785316][ T5679] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1513.824183][ T5679] usb 2-1: device descriptor read/8, error -71
[ 1513.835287][T27934] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1513.835305][T27934] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1514.069183][ T5679] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1514.102604][ T5679] usb 2-1: device descriptor read/8, error -71
[ 1514.212717][ T5679] usb usb2-port1: unable to enumerate USB device
[ 1514.727933][T27944] bridge_slave_0: left allmulticast mode
[ 1514.727956][T27944] bridge_slave_0: left promiscuous mode
[ 1514.728120][T27944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1514.788504][T27944] bridge_slave_1: left allmulticast mode
[ 1514.788528][T27944] bridge_slave_1: left promiscuous mode
[ 1514.788705][T27944] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.830332][T27946] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6576'.
[ 1514.864950][ T5679] usb 6-1: USB disconnect, device number 10
[ 1514.900910][T27944] bond0: (slave bond_slave_0): Releasing backup interface
[ 1514.984610][T27944] bond0: (slave bond_slave_1): Releasing backup interface
[ 1515.090507][T27944] team0: Port device team_slave_0 removed
[ 1515.165659][T27944] team0: Port device team_slave_1 removed
[ 1515.185703][T27944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1515.185733][T27944] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1515.209297][   T31] kauditd_printk_skb: 96 callbacks suppressed
[ 1515.209319][   T31] audit: type=1326 audit(1791624391.861:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1515.210579][   T31] audit: type=1326 audit(1791624391.861:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1515.213617][   T31] audit: type=1326 audit(1791624391.861:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1515.213868][   T31] audit: type=1326 audit(1791624391.861:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1515.214397][   T31] audit: type=1326 audit(1791624391.861:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1515.215556][   T31] audit: type=1326 audit(1791624391.861:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa6875ea0e code=0x7ffc0000
[ 1515.248964][   T31] audit: type=1326 audit(1791624391.861:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa6879de6b code=0x7ffc0000
[ 1515.249007][   T31] audit: type=1326 audit(1791624391.901:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa6879de6b code=0x7ffc0000
[ 1515.275782][   T31] audit: type=1326 audit(1791624391.931:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa6879de6b code=0x7ffc0000
[ 1515.331375][   T31] audit: type=1326 audit(1791624391.961:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27951 comm="syz.4.6579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa6879de6b code=0x7ffc0000
[ 1515.364610][T27944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1515.364686][T27944] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1515.523578][T27950] FAULT_INJECTION: forcing a failure.
[ 1515.523578][T27950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1515.523609][T27950] CPU: 0 UID: 0 PID: 27950 Comm: syz.5.6578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1515.523630][T27950] Tainted: [L]=SOFTLOCKUP
[ 1515.523637][T27950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1515.523647][T27950] Call Trace:
[ 1515.523654][T27950]  <TASK>
[ 1515.523661][T27950]  dump_stack_lvl+0xe8/0x150
[ 1515.523691][T27950]  should_fail_ex+0x410/0x560
[ 1515.523719][T27950]  _copy_from_user+0x2d/0xb0
[ 1515.523735][T27950]  kstrtouint_from_user+0xd6/0x180
[ 1515.523759][T27950]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1515.523788][T27950]  ? lock_acquire+0x115/0x350
[ 1515.523810][T27950]  proc_fail_nth_write+0x8e/0x210
[ 1515.523830][T27950]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1515.523855][T27950]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1515.523874][T27950]  vfs_write+0x296/0xba0
[ 1515.523898][T27950]  ? __pfx_vfs_write+0x10/0x10
[ 1515.523916][T27950]  ? __fget_files+0x2a/0x420
[ 1515.523935][T27950]  ? __fget_files+0x3a2/0x420
[ 1515.523949][T27950]  ? __fget_files+0x2a/0x420
[ 1515.523970][T27950]  ksys_write+0x150/0x270
[ 1515.524000][T27950]  ? __pfx_ksys_write+0x10/0x10
[ 1515.524026][T27950]  do_syscall_64+0x166/0x520
[ 1515.524045][T27950]  ? trace_irq_disable+0x3b/0x140
[ 1515.524064][T27950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.524081][T27950]  ? clear_bhb_loop+0x70/0xc0
[ 1515.524101][T27950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.524124][T27950] RIP: 0033:0x7ff7e2d5ea0e
[ 1515.524139][T27950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1515.524153][T27950] RSP: 002b:00007ff7e3c6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1515.524170][T27950] RAX: ffffffffffffffda RBX: 00007ff7e3c6d6c0 RCX: 00007ff7e2d5ea0e
[ 1515.524182][T27950] RDX: 0000000000000001 RSI: 00007ff7e3c6d0a0 RDI: 0000000000000003
[ 1515.524193][T27950] RBP: 00007ff7e3c6d090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.524203][T27950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1515.524213][T27950] R13: 00007ff7e3026038 R14: 00007ff7e3025fa0 R15: 00007ff7e314fa48
[ 1515.524238][T27950]  </TASK>
[ 1515.775379][T27944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1516.181982][ T5671] usb 4-1: USB disconnect, device number 78
[ 1516.687014][T27968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6584'.
[ 1517.938831][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6592'.
[ 1518.355994][T27995] FAULT_INJECTION: forcing a failure.
[ 1518.355994][T27995] name failslab, interval 1, probability 0, space 0, times 0
[ 1518.356024][T27995] CPU: 0 UID: 0 PID: 27995 Comm: syz.3.6593 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1518.356046][T27995] Tainted: [L]=SOFTLOCKUP
[ 1518.356053][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1518.356063][T27995] Call Trace:
[ 1518.356070][T27995]  <TASK>
[ 1518.356077][T27995]  dump_stack_lvl+0xe8/0x150
[ 1518.356107][T27995]  should_fail_ex+0x410/0x560
[ 1518.356135][T27995]  should_failslab+0xa8/0x100
[ 1518.356158][T27995]  ? security_inode_alloc+0x39/0x310
[ 1518.356174][T27995]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1518.356198][T27995]  ? security_inode_alloc+0x39/0x310
[ 1518.356219][T27995]  security_inode_alloc+0x39/0x310
[ 1518.356236][T27995]  inode_init_always_gfp+0x97e/0xd30
[ 1518.356264][T27995]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1518.356284][T27995]  alloc_inode+0x82/0x1b0
[ 1518.356308][T27995]  new_inode+0x1f/0x170
[ 1518.356335][T27995]  __debugfs_create_file+0xb8/0x400
[ 1518.356357][T27995]  debugfs_create_file_full+0x3f/0x60
[ 1518.356378][T27995]  ref_tracker_dir_debugfs+0x197/0x360
[ 1518.356403][T27995]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1518.356447][T27995]  ? __kvmalloc_node_noprof+0x52f/0x820
[ 1518.356469][T27995]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1518.356492][T27995]  ? __raw_spin_lock_init+0x45/0x100
[ 1518.356518][T27995]  alloc_netdev_mqs+0x275/0x12a0
[ 1518.356538][T27995]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1518.356585][T27995]  ? __pfx_vlan_setup+0x10/0x10
[ 1518.356615][T27995]  rtnl_create_link+0x321/0xd70
[ 1518.356652][T27995]  rtnl_newlink_create+0x258/0x7b0
[ 1518.356700][T27995]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1518.356730][T27995]  ? __pfx___mutex_lock+0x10/0x10
[ 1518.356768][T27995]  ? full_name_hash+0x89/0xe0
[ 1518.356799][T27995]  ? __dev_get_by_name+0x36/0x130
[ 1518.356834][T27995]  rtnl_newlink+0x166d/0x1c30
[ 1518.356875][T27995]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1518.356896][T27995]  ? do_syscall_64+0x166/0x520
[ 1518.356964][T27995]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1518.356991][T27995]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1518.357021][T27995]  ? nlmon_xmit+0xb0/0x100
[ 1518.357052][T27995]  ? kmem_cache_free+0x182/0x650
[ 1518.357093][T27995]  ? __lock_acquire+0x747/0x2de0
[ 1518.357129][T27995]  ? __local_bh_enable_ip+0xd6/0x140
[ 1518.357153][T27995]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1518.357171][T27995]  ? __dev_queue_xmit+0x29b/0x3920
[ 1518.357192][T27995]  ? __local_bh_enable_ip+0xd6/0x140
[ 1518.357221][T27995]  ? lock_acquire+0x115/0x350
[ 1518.357251][T27995]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1518.357266][T27995]  rtnetlink_rcv_msg+0x802/0xc00
[ 1518.357285][T27995]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1518.357301][T27995]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1518.357315][T27995]  ? ref_tracker_free+0x689/0x830
[ 1518.357342][T27995]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1518.357376][T27995]  netlink_rcv_skb+0x226/0x4a0
[ 1518.357398][T27995]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1518.357416][T27995]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1518.357448][T27995]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1518.357468][T27995]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1518.357494][T27995]  netlink_unicast+0x7bd/0x940
[ 1518.357521][T27995]  netlink_sendmsg+0x813/0xb40
[ 1518.357550][T27995]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1518.357578][T27995]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1518.357604][T27995]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1518.357624][T27995]  sock_sendmsg_nosec+0x13a/0x180
[ 1518.357650][T27995]  ____sys_sendmsg+0x54e/0x850
[ 1518.357673][T27995]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1518.357704][T27995]  ? import_iovec+0x73/0xa0
[ 1518.357733][T27995]  ___sys_sendmsg+0x2a5/0x360
[ 1518.357750][T27995]  ? __lock_acquire+0x747/0x2de0
[ 1518.357772][T27995]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1518.357819][T27995]  ? __fget_files+0x2a/0x420
[ 1518.357833][T27995]  ? __fget_files+0x3a2/0x420
[ 1518.357857][T27995]  __x64_sys_sendmsg+0x1b1/0x290
[ 1518.357878][T27995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1518.357913][T27995]  do_syscall_64+0x166/0x520
[ 1518.357931][T27995]  ? trace_irq_disable+0x3b/0x140
[ 1518.357950][T27995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1518.357967][T27995]  ? clear_bhb_loop+0x70/0xc0
[ 1518.357988][T27995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1518.358004][T27995] RIP: 0033:0x7efc6bd9e1d9
[ 1518.358019][T27995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1518.358034][T27995] RSP: 002b:00007efc6cc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1518.358052][T27995] RAX: ffffffffffffffda RBX: 00007efc6c025fa0 RCX: 00007efc6bd9e1d9
[ 1518.358064][T27995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1518.358075][T27995] RBP: 00007efc6cc03090 R08: 0000000000000000 R09: 0000000000000000
[ 1518.358086][T27995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1518.358095][T27995] R13: 00007efc6c026038 R14: 00007efc6c025fa0 R15: 00007efc6c14fa48
[ 1518.358121][T27995]  </TASK>
[ 1518.770910][T27995] debugfs: out of free dentries, can not create file 'netdev@ffff888059cb2700'
[ 1519.050792][T28004] SET target dimension over the limit!
[ 1519.064395][T28004] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6595'.
[ 1519.064517][T28004] 0·: renamed from hsr0 (while UP)
[ 1519.136456][T28004] 0·: entered allmulticast mode
[ 1519.136476][T28004] hsr_slave_0: entered allmulticast mode
[ 1519.136502][T28004] hsr_slave_1: entered allmulticast mode
[ 1519.165907][T28004] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[ 1520.486622][T28022] netlink: 428 bytes leftover after parsing attributes in process `syz.6.6594'.
[ 1520.500485][T28022] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6594'.
[ 1522.532879][T28052] FAULT_INJECTION: forcing a failure.
[ 1522.532879][T28052] name failslab, interval 1, probability 0, space 0, times 0
[ 1522.532907][T28052] CPU: 0 UID: 0 PID: 28052 Comm: syz.6.6609 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1522.532931][T28052] Tainted: [L]=SOFTLOCKUP
[ 1522.532937][T28052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1522.532948][T28052] Call Trace:
[ 1522.532954][T28052]  <TASK>
[ 1522.532962][T28052]  dump_stack_lvl+0xe8/0x150
[ 1522.532990][T28052]  should_fail_ex+0x410/0x560
[ 1522.533018][T28052]  should_failslab+0xa8/0x100
[ 1522.533044][T28052]  __kmalloc_cache_noprof+0xa3/0x600
[ 1522.533064][T28052]  ? input_allocate_device+0x4e/0x2a0
[ 1522.533082][T28052]  ? input_allocate_device+0x4e/0x2a0
[ 1522.533105][T28052]  input_allocate_device+0x4e/0x2a0
[ 1522.533124][T28052]  uinput_ioctl_handler+0x187/0x15a0
[ 1522.533154][T28052]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[ 1522.533209][T28052]  ? ksys_write+0x1fc/0x270
[ 1522.533241][T28052]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1522.533267][T28052]  ? __pfx_uinput_ioctl+0x10/0x10
[ 1522.533292][T28052]  __se_sys_ioctl+0xfc/0x170
[ 1522.533320][T28052]  do_syscall_64+0x166/0x520
[ 1522.533339][T28052]  ? trace_irq_disable+0x3b/0x140
[ 1522.533357][T28052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.533374][T28052]  ? clear_bhb_loop+0x70/0xc0
[ 1522.533394][T28052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.533410][T28052] RIP: 0033:0x7fed5b39e1d9
[ 1522.533426][T28052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1522.533440][T28052] RSP: 002b:00007fed5c22b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1522.533457][T28052] RAX: ffffffffffffffda RBX: 00007fed5b625fa0 RCX: 00007fed5b39e1d9
[ 1522.533469][T28052] RDX: 0000000400000223 RSI: 0000000040045565 RDI: 0000000000000003
[ 1522.533480][T28052] RBP: 00007fed5c22b090 R08: 0000000000000000 R09: 0000000000000000
[ 1522.533491][T28052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1522.533501][T28052] R13: 00007fed5b626038 R14: 00007fed5b625fa0 R15: 00007fed5b74fa48
[ 1522.533526][T28052]  </TASK>
[ 1523.365307][T28062] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1523.480571][T28063] FAULT_INJECTION: forcing a failure.
[ 1523.480571][T28063] name failslab, interval 1, probability 0, space 0, times 0
[ 1523.480607][T28063] CPU: 1 UID: 0 PID: 28063 Comm: syz.4.6611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1523.480632][T28063] Tainted: [L]=SOFTLOCKUP
[ 1523.480639][T28063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1523.480651][T28063] Call Trace:
[ 1523.480658][T28063]  <TASK>
[ 1523.480667][T28063]  dump_stack_lvl+0xe8/0x150
[ 1523.480699][T28063]  should_fail_ex+0x410/0x560
[ 1523.480731][T28063]  should_failslab+0xa8/0x100
[ 1523.480759][T28063]  __kmalloc_noprof+0xfe/0x720
[ 1523.480781][T28063]  ? do_replace_table+0x91/0x610
[ 1523.480803][T28063]  ? do_replace_table+0x91/0x610
[ 1523.480826][T28063]  ? net_generic+0x1e/0x240
[ 1523.480850][T28063]  do_replace_table+0x91/0x610
[ 1523.480879][T28063]  xt_replace_table+0x2c/0x140
[ 1523.480903][T28063]  __do_replace+0x161/0x9a0
[ 1523.480932][T28063]  ? __pfx___do_replace+0x10/0x10
[ 1523.480952][T28063]  ? _copy_from_user+0x94/0xb0
[ 1523.480974][T28063]  do_ip6t_set_ctl+0xb45/0xe30
[ 1523.480998][T28063]  ? rcu_is_watching+0x16/0xb0
[ 1523.481024][T28063]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 1523.481055][T28063]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1523.481092][T28063]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1523.481127][T28063]  nf_setsockopt+0x26f/0x290
[ 1523.481171][T28063]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1523.481214][T28063]  do_sock_setsockopt+0x17c/0x1b0
[ 1523.481238][T28063]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1523.481261][T28063]  do_syscall_64+0x166/0x520
[ 1523.481283][T28063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.481304][T28063]  ? clear_bhb_loop+0x70/0xc0
[ 1523.481328][T28063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.481346][T28063] RIP: 0033:0x7faa6879e1d9
[ 1523.481363][T28063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1523.481380][T28063] RSP: 002b:00007faa69640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1523.481399][T28063] RAX: ffffffffffffffda RBX: 00007faa68a26090 RCX: 00007faa6879e1d9
[ 1523.481413][T28063] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[ 1523.481425][T28063] RBP: 00007faa69640090 R08: 00000000000003d0 R09: 0000000000000000
[ 1523.481438][T28063] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000002
[ 1523.481450][T28063] R13: 00007faa68a26128 R14: 00007faa68a26090 R15: 00007faa68b4fa48
[ 1523.481479][T28063]  </TASK>
[ 1523.484462][T28062] team0: left allmulticast mode
[ 1523.484515][T28062] team_slave_0: left allmulticast mode
[ 1523.484532][T28062] team_slave_1: left allmulticast mode
[ 1523.948677][T28062] syzkaller0: left allmulticast mode
[ 1523.949583][T28062] ip6erspan1: left allmulticast mode
[ 1525.172094][   T31] audit: type=1800 audit(1791624401.821:9853): pid=28074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6613" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1525.415427][   T31] audit: type=1326 audit(1791624402.061:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.415506][   T31] audit: type=1326 audit(1791624402.061:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.469868][   T31] audit: type=1326 audit(1791624402.121:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.471416][   T31] audit: type=1326 audit(1791624402.121:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.474017][   T31] audit: type=1326 audit(1791624402.121:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.571204][   T31] audit: type=1326 audit(1791624402.221:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.614712][   T31] audit: type=1326 audit(1791624402.261:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.614922][   T31] audit: type=1326 audit(1791624402.261:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1525.692218][   T31] audit: type=1326 audit(1791624402.341:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28084 comm="syz.4.6616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1526.332255][T28090] FAULT_INJECTION: forcing a failure.
[ 1526.332255][T28090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1526.332297][T28090] CPU: 0 UID: 0 PID: 28090 Comm: syz.6.6618 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1526.332330][T28090] Tainted: [L]=SOFTLOCKUP
[ 1526.332340][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1526.332355][T28090] Call Trace:
[ 1526.332365][T28090]  <TASK>
[ 1526.332376][T28090]  dump_stack_lvl+0xe8/0x150
[ 1526.332417][T28090]  should_fail_ex+0x410/0x560
[ 1526.332459][T28090]  _copy_to_user+0x31/0xb0
[ 1526.332486][T28090]  simple_read_from_buffer+0xe1/0x170
[ 1526.332533][T28090]  proc_fail_nth_read+0x1bb/0x230
[ 1526.332562][T28090]  ? common_file_perm+0x20e/0x2b0
[ 1526.332602][T28090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1526.332636][T28090]  ? rw_verify_area+0x24a/0x4c0
[ 1526.332665][T28090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1526.332694][T28090]  vfs_read+0x213/0xa80
[ 1526.332726][T28090]  ? __pfx___mutex_lock+0x10/0x10
[ 1526.332758][T28090]  ? __pfx_vfs_read+0x10/0x10
[ 1526.332787][T28090]  ? __fget_files+0x2a/0x420
[ 1526.332816][T28090]  ? __fget_files+0x3a2/0x420
[ 1526.332838][T28090]  ? __fget_files+0x2a/0x420
[ 1526.332880][T28090]  ksys_read+0x150/0x270
[ 1526.332908][T28090]  ? __pfx_ksys_read+0x10/0x10
[ 1526.332931][T28090]  ? fdget_raw+0x138/0x180
[ 1526.332967][T28090]  do_syscall_64+0x166/0x520
[ 1526.332995][T28090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.333022][T28090]  ? clear_bhb_loop+0x70/0xc0
[ 1526.333053][T28090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.333077][T28090] RIP: 0033:0x7fed5b35ea0e
[ 1526.333100][T28090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1526.333121][T28090] RSP: 002b:00007fed5c22afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1526.333150][T28090] RAX: ffffffffffffffda RBX: 00007fed5c22b6c0 RCX: 00007fed5b35ea0e
[ 1526.333169][T28090] RDX: 000000000000000f RSI: 00007fed5c22b0a0 RDI: 0000000000000004
[ 1526.333186][T28090] RBP: 00007fed5c22b090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.333202][T28090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1526.333217][T28090] R13: 00007fed5b626038 R14: 00007fed5b625fa0 R15: 00007fed5b74fa48
[ 1526.333256][T28090]  </TASK>
[ 1527.537205][T16371] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[ 1527.739340][T16371] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1527.740050][T16371] usb 2-1: not running at top speed; connect to a high speed hub
[ 1527.740084][T16371] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[ 1527.745407][T16371] usb 2-1: config 5 has an invalid interface number: 246 but max is 0
[ 1527.745440][T16371] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.745455][T16371] usb 2-1: config 5 has no interface number 0
[ 1527.745493][T16371] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1527.745513][T16371] usb 2-1: config 5 interface 246 has no altsetting 0
[ 1527.824047][T16371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.824069][T16371] usb 2-1: Product: syz
[ 1527.824081][T16371] usb 2-1: Manufacturer: syz
[ 1527.824094][T16371] usb 2-1: SerialNumber: syz
[ 1528.064795][T28093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1528.081963][T28093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1528.128861][T16371] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1528.161797][T16371] usb 2-1: USB disconnect, device number 88
[ 1528.164698][T14293] usb 2-1: Failed to submit usb control message: -71
[ 1528.164748][T14293] usb 2-1: unable to send the bmi data to the device: -71
[ 1528.164769][T14293] usb 2-1: unable to get target info from device
[ 1528.164787][T14293] usb 2-1: could not get target info (-71)
[ 1528.164823][T14293] usb 2-1: could not probe fw (-71)
[ 1529.853773][T28132] FAULT_INJECTION: forcing a failure.
[ 1529.853773][T28132] name failslab, interval 1, probability 0, space 0, times 0
[ 1529.853804][T28132] CPU: 0 UID: 0 PID: 28132 Comm: syz.4.6629 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1529.853826][T28132] Tainted: [L]=SOFTLOCKUP
[ 1529.853832][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1529.853843][T28132] Call Trace:
[ 1529.853849][T28132]  <TASK>
[ 1529.853856][T28132]  dump_stack_lvl+0xe8/0x150
[ 1529.853886][T28132]  should_fail_ex+0x410/0x560
[ 1529.853913][T28132]  should_failslab+0xa8/0x100
[ 1529.853946][T28132]  ? do_getname+0x2e/0x250
[ 1529.853969][T28132]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1529.853987][T28132]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1529.854007][T28132]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1529.854025][T28132]  ? do_getname+0x2e/0x250
[ 1529.854052][T28132]  do_getname+0x2e/0x250
[ 1529.854073][T28132]  ? getname_flags+0x11/0x20
[ 1529.854098][T28132]  do_sys_openat2+0xcc/0x200
[ 1529.854124][T28132]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1529.854178][T28132]  ? exc_page_fault+0x6a/0xc0
[ 1529.854207][T28132]  ? do_user_addr_fault+0xc4c/0x1340
[ 1529.854234][T28132]  __x64_sys_openat+0x138/0x170
[ 1529.854273][T28132]  do_syscall_64+0x166/0x520
[ 1529.854299][T28132]  ? trace_irq_disable+0x3b/0x140
[ 1529.854329][T28132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1529.854353][T28132]  ? clear_bhb_loop+0x70/0xc0
[ 1529.854383][T28132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1529.854406][T28132] RIP: 0033:0x7faa6875ea0e
[ 1529.854428][T28132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1529.854448][T28132] RSP: 002b:00007faa69660ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1529.854472][T28132] RAX: ffffffffffffffda RBX: 00007faa696616c0 RCX: 00007faa6875ea0e
[ 1529.854490][T28132] RDX: 0000000000000000 RSI: 00007faa69660f90 RDI: ffffffffffffff9c
[ 1529.854507][T28132] RBP: 00007faa69661090 R08: 0000000000000000 R09: 0000000000000000
[ 1529.854522][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1529.854536][T28132] R13: 00007faa68a26038 R14: 00007faa68a25fa0 R15: 00007faa68b4fa48
[ 1529.854571][T28132]  </TASK>
[ 1531.203208][   T31] kauditd_printk_skb: 21 callbacks suppressed
[ 1531.203226][   T31] audit: type=1326 audit(1791624407.851:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.241323][   T31] audit: type=1326 audit(1791624407.891:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.349310][   T31] audit: type=1326 audit(1791624408.001:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.349831][   T31] audit: type=1326 audit(1791624408.001:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.350200][   T31] audit: type=1326 audit(1791624408.001:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.352350][   T31] audit: type=1326 audit(1791624408.001:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.355171][   T31] audit: type=1326 audit(1791624408.001:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.382368][   T31] audit: type=1326 audit(1791624408.011:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.514542][   T31] audit: type=1326 audit(1791624408.161:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1531.514732][   T31] audit: type=1326 audit(1791624408.161:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.4.6633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7faa6879e1d9 code=0x7ffc0000
[ 1532.071490][T16371] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1532.161575][T28149] kernel profiling enabled (shift: 9)
[ 1532.237345][T16371] usb 6-1: Using ep0 maxpacket: 16
[ 1532.239971][T16371] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1532.272722][T16371] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1532.358707][T16371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.358731][T16371] usb 6-1: Product: syz
[ 1532.358742][T16371] usb 6-1: Manufacturer: syz
[ 1532.358753][T16371] usb 6-1: SerialNumber: syz
[ 1532.401191][T16371] usb 6-1: config 0 descriptor??
[ 1532.434462][T16371] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1532.447575][T16371] usb 6-1: Detected FT232R
[ 1532.703334][T16371] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1532.732770][T28148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1532.733242][T28148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.311045][T16371] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[ 1533.329185][T16371] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1533.368444][T16371] usb 6-1: USB disconnect, device number 11
[ 1533.389696][T16371] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1533.390113][T16371] ftdi_sio 6-1:0.0: device disconnected
[ 1534.369913][T28163] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1535.532179][T28178] FAULT_INJECTION: forcing a failure.
[ 1535.532179][T28178] name failslab, interval 1, probability 0, space 0, times 0
[ 1535.532224][T28178] CPU: 0 UID: 0 PID: 28178 Comm: syz.6.6641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1535.532246][T28178] Tainted: [L]=SOFTLOCKUP
[ 1535.532252][T28178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1535.532262][T28178] Call Trace:
[ 1535.532269][T28178]  <TASK>
[ 1535.532277][T28178]  dump_stack_lvl+0xe8/0x150
[ 1535.532307][T28178]  should_fail_ex+0x410/0x560
[ 1535.532334][T28178]  ? __alloc_skb+0x1db/0x7a0
[ 1535.532357][T28178]  should_failslab+0xa8/0x100
[ 1535.532382][T28178]  ? __alloc_skb+0x1db/0x7a0
[ 1535.532396][T28178]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1535.532414][T28178]  ? __alloc_skb+0x18d/0x7a0
[ 1535.532429][T28178]  ? __alloc_skb+0x1db/0x7a0
[ 1535.532448][T28178]  __alloc_skb+0x1db/0x7a0
[ 1535.532467][T28178]  xfrm_send_policy_notify+0x2a0/0x1c00
[ 1535.532499][T28178]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[ 1535.532523][T28178]  ? lock_acquire+0x115/0x350
[ 1535.532547][T28178]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1535.532566][T28178]  ? __local_bh_enable_ip+0xd6/0x140
[ 1535.532588][T28178]  ? km_policy_notify+0x28/0x200
[ 1535.532613][T28178]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[ 1535.532638][T28178]  km_policy_notify+0x121/0x200
[ 1535.532661][T28178]  ? km_policy_notify+0x28/0x200
[ 1535.532688][T28178]  xfrm_add_policy+0x4a1/0x690
[ 1535.532718][T28178]  ? __pfx_xfrm_add_policy+0x10/0x10
[ 1535.532742][T28178]  ? apparmor_capable+0x126/0x170
[ 1535.532765][T28178]  ? __nla_parse+0x40/0x60
[ 1535.532784][T28178]  xfrm_user_rcv_msg+0x7a8/0xf30
[ 1535.532814][T28178]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1535.532863][T28178]  ? __mutex_trylock_common+0x15f/0x270
[ 1535.532889][T28178]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1535.532914][T28178]  ? rcu_is_watching+0x16/0xb0
[ 1535.532936][T28178]  ? trace_contention_end+0x3d/0x140
[ 1535.532967][T28178]  netlink_rcv_skb+0x226/0x4a0
[ 1535.532989][T28178]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1535.533016][T28178]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1535.533049][T28178]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1535.533069][T28178]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1535.533092][T28178]  xfrm_netlink_rcv+0x79/0x90
[ 1535.533118][T28178]  netlink_unicast+0x7bd/0x940
[ 1535.533144][T28178]  netlink_sendmsg+0x813/0xb40
[ 1535.533173][T28178]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1535.533200][T28178]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1535.533225][T28178]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1535.533246][T28178]  sock_sendmsg_nosec+0x13a/0x180
[ 1535.533271][T28178]  ____sys_sendmsg+0x54e/0x850
[ 1535.533293][T28178]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1535.533318][T28178]  ? import_iovec+0x73/0xa0
[ 1535.533351][T28178]  ___sys_sendmsg+0x2a5/0x360
[ 1535.533368][T28178]  ? __lock_acquire+0x747/0x2de0
[ 1535.533390][T28178]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1535.533435][T28178]  ? __fget_files+0x2a/0x420
[ 1535.533450][T28178]  ? __fget_files+0x3a2/0x420
[ 1535.533473][T28178]  __x64_sys_sendmsg+0x1b1/0x290
[ 1535.533494][T28178]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1535.533530][T28178]  do_syscall_64+0x166/0x520
[ 1535.533548][T28178]  ? trace_irq_disable+0x3b/0x140
[ 1535.533567][T28178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.533584][T28178]  ? clear_bhb_loop+0x70/0xc0
[ 1535.533605][T28178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.533622][T28178] RIP: 0033:0x7fed5b39e1d9
[ 1535.533637][T28178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1535.533652][T28178] RSP: 002b:00007fed5c22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1535.533670][T28178] RAX: ffffffffffffffda RBX: 00007fed5b625fa0 RCX: 00007fed5b39e1d9
[ 1535.533683][T28178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1535.533694][T28178] RBP: 00007fed5c22b090 R08: 0000000000000000 R09: 0000000000000000
[ 1535.533704][T28178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1535.533714][T28178] R13: 00007fed5b626038 R14: 00007fed5b625fa0 R15: 00007fed5b74fa48
[ 1535.533739][T28178]  </TASK>
[ 1536.351424][T28187] fuse: Unknown parameter 'rootmZde'
[ 1536.396519][T28188] Invalid option length (0) for dns_resolver key
[ 1536.893773][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6646'.
[ 1537.024966][T28197] SET target dimension over the limit!
[ 1537.229364][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6647'.
[ 1537.229398][T28200] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1537.270580][T28194] bond1: option arp_interval: invalid value (18446744073356424202)
[ 1537.270614][T28194] bond1: option arp_interval: allowed values 0 - 2147483647
[ 1537.326527][T28194] bond1 (unregistering): Released all slaves
[ 1537.579250][T28204] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1537.885869][T23556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1537.908743][T23556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1537.925421][T23556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1537.945669][T23556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1537.954596][T23556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1538.468571][T28204] ip6erspan0: left allmulticast mode
[ 1538.468722][T28204] syzkaller0: left allmulticast mode
[ 1538.469152][T28204] tipc: Resetting bearer <eth:syzkaller0>
[ 1538.500688][T28204] dummy1: left allmulticast mode
[ 1538.736299][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6650'.
[ 1540.026814][   T52] Bluetooth: hci4: command tx timeout
[ 1540.110731][T28176] syz_tun (unregistering): left allmulticast mode
[ 1541.549485][T28246] FAULT_INJECTION: forcing a failure.
[ 1541.549485][T28246] name failslab, interval 1, probability 0, space 0, times 0
[ 1541.549524][T28246] CPU: 1 UID: 0 PID: 28246 Comm: syz.1.6658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1541.549553][T28246] Tainted: [L]=SOFTLOCKUP
[ 1541.549563][T28246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1541.549577][T28246] Call Trace:
[ 1541.549587][T28246]  <TASK>
[ 1541.549597][T28246]  dump_stack_lvl+0xe8/0x150
[ 1541.549633][T28246]  should_fail_ex+0x410/0x560
[ 1541.549671][T28246]  should_failslab+0xa8/0x100
[ 1541.549709][T28246]  __kmalloc_noprof+0xfe/0x720
[ 1541.549735][T28246]  ? ip_options_get+0x51/0x570
[ 1541.549763][T28246]  ? ip_options_get+0x51/0x570
[ 1541.549798][T28246]  ip_options_get+0x51/0x570
[ 1541.549838][T28246]  do_ip_setsockopt+0x1d80/0x2e30
[ 1541.549869][T28246]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1541.549899][T28246]  ? lock_acquire+0x115/0x350
[ 1541.549936][T28246]  ? aa_sock_opt_perm+0xe1/0x1e0
[ 1541.549975][T28246]  ip_setsockopt+0x66/0x110
[ 1541.549997][T28246]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1541.550032][T28246]  do_sock_setsockopt+0x17c/0x1b0
[ 1541.550071][T28246]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1541.550101][T28246]  do_syscall_64+0x166/0x520
[ 1541.550127][T28246]  ? trace_irq_disable+0x3b/0x140
[ 1541.550152][T28246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.550176][T28246]  ? clear_bhb_loop+0x70/0xc0
[ 1541.550204][T28246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.550227][T28246] RIP: 0033:0x7fcf5159e1d9
[ 1541.550248][T28246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1541.550267][T28246] RSP: 002b:00007fcf52495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1541.550292][T28246] RAX: ffffffffffffffda RBX: 00007fcf51826090 RCX: 00007fcf5159e1d9
[ 1541.550309][T28246] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003
[ 1541.550322][T28246] RBP: 00007fcf52495090 R08: 0000000000000000 R09: 0000000000000000
[ 1541.550336][T28246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1541.550350][T28246] R13: 00007fcf51826128 R14: 00007fcf51826090 R15: 00007fcf5194fa48
[ 1541.550386][T28246]  </TASK>
[ 1541.858847][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1541.858877][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1542.109844][   T52] Bluetooth: hci4: command tx timeout
[ 1542.964887][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1542.964919][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.201444][T28209] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1543.201623][T28209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1543.201784][T28209] bridge_slave_0: entered allmulticast mode
[ 1543.205325][T28209] bridge_slave_0: entered promiscuous mode
[ 1543.246217][T28209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1543.246423][T28209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1543.246591][T28209] bridge_slave_1: entered allmulticast mode
[ 1543.284441][T28209] bridge_slave_1: entered promiscuous mode
[ 1543.513088][   T59] bond0: (slave netdevsim1): Releasing backup interface
[ 1543.565415][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1543.565444][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.587188][ T5679] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[ 1543.741543][T28209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1543.769422][ T5679] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1543.770336][ T5679] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1543.770374][ T5679] usb 4-1: can't read configurations, error -71
[ 1543.888411][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1543.888454][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.951676][T28209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1544.060096][T28209] team0: Port device team_slave_0 added
[ 1544.086553][T28209] team0: Port device team_slave_1 added
[ 1544.187204][   T52] Bluetooth: hci4: command tx timeout
[ 1544.302442][T28209] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1544.302465][T28209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1544.302509][T28209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1544.360651][T28209] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1544.360672][T28209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1544.360702][T28209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1544.681209][T28209] hsr_slave_0: entered promiscuous mode
[ 1544.686172][T28209] hsr_slave_1: entered promiscuous mode
[ 1544.694691][T28209] debugfs: 'hsr0' already exists in 'hsr'
[ 1544.694761][T28209] Cannot create hsr debugfs directory
[ 1544.896757][T16371] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1545.048104][T16371] usb 6-1: Using ep0 maxpacket: 16
[ 1545.049081][T16371] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[ 1545.052287][T16371] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1545.052315][T16371] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1545.095331][T16371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.095362][T16371] usb 6-1: Product: syz
[ 1545.095380][T16371] usb 6-1: Manufacturer: syz
[ 1545.095397][T16371] usb 6-1: SerialNumber: syz
[ 1545.279337][   T59] bridge_slave_1: left allmulticast mode
[ 1545.279368][   T59] bridge_slave_1: left promiscuous mode
[ 1545.279604][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1545.312964][   T59] bridge_slave_0: left allmulticast mode
[ 1545.312996][   T59] bridge_slave_0: left promiscuous mode
[ 1545.318361][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1545.363583][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6665'.
[ 1545.914521][   T31] kauditd_printk_skb: 220 callbacks suppressed
[ 1545.914545][   T31] audit: type=1326 audit(1791624422.561:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1545.914595][   T31] audit: type=1326 audit(1791624422.561:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1545.923658][   T31] audit: type=1326 audit(1791624422.571:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1545.923726][   T31] audit: type=1326 audit(1791624422.571:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1545.923866][   T31] audit: type=1326 audit(1791624422.571:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1545.992922][   T31] audit: type=1326 audit(1791624422.631:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28295 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7efc6bd9e1d9 code=0x7ffc0000
[ 1546.039193][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.039285][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.267082][   T52] Bluetooth: hci4: command tx timeout
[ 1546.456124][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1546.492985][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1546.510881][   T59] bond0 (unregistering): Released all slaves
[ 1546.555091][   T59] bond1 (unregistering): Released all slaves
[ 1546.658973][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1546.695288][T16371] usb 6-1: 0:1 : does not exist
[ 1546.695369][T16371] usb 6-1: BAAD GENERIC IO: no channels?
[ 1546.819857][T16371] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1546.823257][T16371] usb 6-1: USB disconnect, device number 12
[ 1546.920839][T28262] udevd[28262]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1547.458920][T16371] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1547.606770][T16371] usb 4-1: Using ep0 maxpacket: 32
[ 1547.615205][T16371] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1547.615260][T16371] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1547.649857][T16371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1547.649888][T16371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1547.695191][T16371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.695214][T16371] usb 4-1: Product: syz
[ 1547.695226][T16371] usb 4-1: Manufacturer: syz
[ 1547.695237][T16371] usb 4-1: SerialNumber: syz
[ 1547.804007][T16371] usb 4-1: selecting invalid altsetting 1
[ 1548.273728][T16371] usb 4-1: 6:0: failed to get current value for ch 0 (-71)
[ 1548.450400][T16371] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1548.453058][T16371] usb 4-1: USB disconnect, device number 81
[ 1548.487056][T28262] udevd[28262]: setting mode of /dev/bus/usb/004/081 to 020664 failed: No such file or directory
[ 1548.487186][T28262] udevd[28262]: setting owner of /dev/bus/usb/004/081 to uid=0, gid=0 failed: No such file or directory
[ 1548.566995][T28262] udevd[28262]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1549.312991][   T31] audit: type=1326 audit(1791624425.961:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28350 comm="syz.5.6678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1549.313058][   T31] audit: type=1326 audit(1791624425.961:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28350 comm="syz.5.6678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1549.315451][   T31] audit: type=1326 audit(1791624425.961:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28350 comm="syz.5.6678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1549.315509][   T31] audit: type=1326 audit(1791624425.961:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28350 comm="syz.5.6678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1549.671497][   T59] hsr_slave_0: left promiscuous mode
[ 1549.687353][   T59] hsr_slave_1: left promiscuous mode
[ 1549.755142][   T59] veth1_vlan: left promiscuous mode
[ 1549.755223][   T59] veth0_vlan: left promiscuous mode
[ 1549.757191][ T5679] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1549.906951][ T5679] usb 6-1: Using ep0 maxpacket: 16
[ 1550.016871][ T5679] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1550.016927][ T5679] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1550.017822][ T5679] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1550.017859][ T5679] usb 6-1: can't read configurations, error -71
[ 1550.820566][T16371] hid_parser_main: 2085 callbacks suppressed
[ 1550.820605][T16371] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0
[ 1550.856115][T16371] hid-generic 0000:0000:0000.0047: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1551.162759][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1551.265364][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1551.346818][T16371] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1551.479775][T16371] usb 2-1: device descriptor read/64, error -71
[ 1551.716862][T16371] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1551.847214][T16371] usb 2-1: device descriptor read/64, error -71
[ 1551.957127][T16371] usb usb2-port1: attempt power cycle
[ 1552.310985][T16371] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1552.333210][T16371] usb 2-1: device descriptor read/8, error -71
[ 1552.594884][T16371] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1552.621170][T16371] usb 2-1: device descriptor read/8, error -71
[ 1552.727685][T16371] usb usb2-port1: unable to enumerate USB device
[ 1553.823180][T28209] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1553.864845][T28209] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1553.877793][T28209] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1553.916044][T28209] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1553.932761][T28209] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1553.980036][T28209] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1553.980771][T28209] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1554.003757][T28209] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1554.496177][T28440] FAULT_INJECTION: forcing a failure.
[ 1554.496177][T28440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1554.496217][T28440] CPU: 1 UID: 0 PID: 28440 Comm: syz.3.6690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1554.496248][T28440] Tainted: [L]=SOFTLOCKUP
[ 1554.496257][T28440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1554.496271][T28440] Call Trace:
[ 1554.496280][T28440]  <TASK>
[ 1554.496290][T28440]  dump_stack_lvl+0xe8/0x150
[ 1554.496327][T28440]  should_fail_ex+0x410/0x560
[ 1554.496367][T28440]  _copy_from_user+0x2d/0xb0
[ 1554.496391][T28440]  csum_and_copy_from_iter_full+0x210/0x1fb0
[ 1554.496426][T28440]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[ 1554.496468][T28440]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[ 1554.496506][T28440]  ? alloc_pages_mpol+0x256/0x390
[ 1554.496543][T28440]  ip_generic_getfrag+0x149/0x2d0
[ 1554.496591][T28440]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1554.496624][T28440]  ? skb_page_frag_refill+0x119/0x460
[ 1554.496665][T28440]  __ip_append_data+0x2026/0x3cf0
[ 1554.496716][T28440]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1554.496771][T28440]  ? __pfx___ip_append_data+0x10/0x10
[ 1554.496805][T28440]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1554.496843][T28440]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1554.496880][T28440]  ip_append_data+0x10d/0x190
[ 1554.496916][T28440]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1554.496953][T28440]  udp_sendmsg+0x4de/0x2140
[ 1554.496994][T28440]  ? aa_inet_msg_perm+0xb78/0x1010
[ 1554.497040][T28440]  ? __pfx_aa_inet_msg_perm+0x10/0x10
[ 1554.497077][T28440]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1554.497121][T28440]  ? kstrtouint+0x6e/0xe0
[ 1554.497156][T28440]  ? current_check_autobind_udp_socket+0x271/0x5b0
[ 1554.497198][T28440]  ? aa_sock_msg_perm+0xfc/0x210
[ 1554.497230][T28440]  ? sock_rps_record_flow+0x19/0x350
[ 1554.497266][T28440]  ? inet_sendmsg+0x23e/0x320
[ 1554.497296][T28440]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1554.497330][T28440]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1554.497361][T28440]  sock_sendmsg_nosec+0x10e/0x180
[ 1554.497395][T28440]  __sys_sendto+0x408/0x5a0
[ 1554.497417][T28440]  ? ksys_write+0x1e6/0x270
[ 1554.497445][T28440]  ? __pfx___sys_sendto+0x10/0x10
[ 1554.497466][T28440]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1554.497525][T28440]  ? __pfx_ksys_write+0x10/0x10
[ 1554.497562][T28440]  __x64_sys_sendto+0xde/0x100
[ 1554.497588][T28440]  do_syscall_64+0x166/0x520
[ 1554.497613][T28440]  ? trace_irq_disable+0x3b/0x140
[ 1554.497638][T28440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1554.497661][T28440]  ? clear_bhb_loop+0x70/0xc0
[ 1554.497689][T28440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1554.497711][T28440] RIP: 0033:0x7efc6bd9e1d9
[ 1554.497732][T28440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1554.497752][T28440] RSP: 002b:00007efc6cc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1554.497775][T28440] RAX: ffffffffffffffda RBX: 00007efc6c025fa0 RCX: 00007efc6bd9e1d9
[ 1554.497792][T28440] RDX: 0000000000006200 RSI: 00002000000099c0 RDI: 0000000000000004
[ 1554.497807][T28440] RBP: 00007efc6cc03090 R08: 0000000000000000 R09: 0000000000000000
[ 1554.497821][T28440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1554.497835][T28440] R13: 00007efc6c026038 R14: 00007efc6c025fa0 R15: 00007efc6c14fa48
[ 1554.497872][T28440]  </TASK>
[ 1554.944663][   T31] kauditd_printk_skb: 52 callbacks suppressed
[ 1554.944685][   T31] audit: type=1326 audit(1791624431.591:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1554.944852][   T31] audit: type=1326 audit(1791624431.591:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.004669][   T31] audit: type=1326 audit(1791624431.631:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.004731][   T31] audit: type=1326 audit(1791624431.631:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.077049][   T31] audit: type=1326 audit(1791624431.631:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.077236][   T31] audit: type=1326 audit(1791624431.731:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.078378][   T31] audit: type=1326 audit(1791624431.731:10182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.112814][   T31] audit: type=1326 audit(1791624431.731:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.112878][   T31] audit: type=1326 audit(1791624431.741:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.147541][   T31] audit: type=1326 audit(1791624431.771:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.6693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1555.292320][T28209] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1555.336072][T28450] syz.1.6691 (28450): /proc/28450/oom_adj is deprecated, please use /proc/28450/oom_score_adj instead.
[ 1555.418603][T28209] 8021q: adding VLAN 0 to HW filter on device team0
[ 1555.449718][T14298] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1555.449797][T14298] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1555.511474][T11416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1555.511590][T11416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1555.637391][ T5679] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1555.786964][ T5679] usb 6-1: Using ep0 maxpacket: 16
[ 1555.890358][ T5679] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1555.890397][ T5679] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1555.900270][ T5679] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1555.900397][ T5679] usb 6-1: can't read configurations, error -71
[ 1556.048939][T28209] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1556.340403][T28209] veth0_vlan: entered promiscuous mode
[ 1556.368276][T28209] veth1_vlan: entered promiscuous mode
[ 1556.467964][T15165] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1556.656819][T15165] usb 2-1: Using ep0 maxpacket: 16
[ 1556.664751][T15165] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1556.665969][T15165] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1556.666005][T15165] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1556.666025][T15165] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1556.666050][T15165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1556.797353][T15165] usb 2-1: config 0 descriptor??
[ 1556.808121][T28472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6698'.
[ 1556.820427][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6698'.
[ 1556.837452][T28475] FAULT_INJECTION: forcing a failure.
[ 1556.837452][T28475] name failslab, interval 1, probability 0, space 0, times 0
[ 1556.837481][T28475] CPU: 1 UID: 0 PID: 28475 Comm: syz.3.6699 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1556.837507][T28475] Tainted: [L]=SOFTLOCKUP
[ 1556.837513][T28475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1556.837524][T28475] Call Trace:
[ 1556.837531][T28475]  <TASK>
[ 1556.837538][T28475]  dump_stack_lvl+0xe8/0x150
[ 1556.837567][T28475]  should_fail_ex+0x410/0x560
[ 1556.837595][T28475]  should_failslab+0xa8/0x100
[ 1556.837618][T28475]  ? skb_clone+0x212/0x3a0
[ 1556.837640][T28475]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1556.837660][T28475]  ? skb_clone+0x212/0x3a0
[ 1556.837682][T28475]  skb_clone+0x212/0x3a0
[ 1556.837703][T28475]  __netlink_deliver_tap+0x413/0x860
[ 1556.837732][T28475]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1556.837753][T28475]  netlink_deliver_tap+0x19c/0x1b0
[ 1556.837774][T28475]  netlink_unicast+0x781/0x940
[ 1556.837800][T28475]  netlink_sendmsg+0x813/0xb40
[ 1556.837827][T28475]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1556.837854][T28475]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1556.837879][T28475]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1556.837899][T28475]  sock_sendmsg_nosec+0x13a/0x180
[ 1556.837924][T28475]  ____sys_sendmsg+0x54e/0x850
[ 1556.837946][T28475]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1556.837970][T28475]  ? import_iovec+0x73/0xa0
[ 1556.837999][T28475]  ___sys_sendmsg+0x2a5/0x360
[ 1556.838045][T28475]  ? __lock_acquire+0x747/0x2de0
[ 1556.838082][T28475]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1556.838133][T28475]  ? __fget_files+0x2a/0x420
[ 1556.838148][T28475]  ? __fget_files+0x3a2/0x420
[ 1556.838171][T28475]  __x64_sys_sendmsg+0x1b1/0x290
[ 1556.838192][T28475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1556.838227][T28475]  do_syscall_64+0x166/0x520
[ 1556.838246][T28475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1556.838263][T28475]  ? clear_bhb_loop+0x70/0xc0
[ 1556.838283][T28475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1556.838300][T28475] RIP: 0033:0x7efc6bd9e1d9
[ 1556.838315][T28475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1556.838330][T28475] RSP: 002b:00007efc6cc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1556.838348][T28475] RAX: ffffffffffffffda RBX: 00007efc6c025fa0 RCX: 00007efc6bd9e1d9
[ 1556.838360][T28475] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[ 1556.838371][T28475] RBP: 00007efc6cc03090 R08: 0000000000000000 R09: 0000000000000000
[ 1556.838381][T28475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1556.838392][T28475] R13: 00007efc6c026038 R14: 00007efc6c025fa0 R15: 00007efc6c14fa48
[ 1556.838417][T28475]  </TASK>
[ 1557.382913][T28209] veth0_macvtap: entered promiscuous mode
[ 1557.438892][T15165] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B4:BCA1.0048/input/input157
[ 1557.454355][T28209] veth1_macvtap: entered promiscuous mode
[ 1557.618054][ T5679] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1557.689002][T28209] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1557.720019][T15165] cypress 0003:04B4:BCA1.0048: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0
[ 1557.788819][ T5679] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1557.794104][ T5679] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1557.794137][ T5679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.794160][ T5679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1557.794206][ T5679] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1557.794401][T15165] usb 2-1: USB disconnect, device number 93
[ 1557.858322][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1557.858355][ T5679] usb 6-1: Product: syz
[ 1557.858372][ T5679] usb 6-1: Manufacturer: syz
[ 1557.867132][T28209] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1557.946211][ T5679] cdc_wdm 6-1:1.0: skipping garbage
[ 1557.946252][ T5679] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1557.967505][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1557.968627][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1557.969853][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1557.970220][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1558.016264][T28480] fido_id[28480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1558.261247][ T5679] usb 6-1: USB disconnect, device number 17
[ 1558.496823][T24931] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1558.658004][T24931] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1558.663108][T24931] usb 4-1: config 2 has an invalid interface number: 43 but max is 0
[ 1558.663140][T24931] usb 4-1: config 2 has no interface number 0
[ 1558.663186][T24931] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[ 1558.663214][T24931] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[ 1558.663241][T24931] usb 4-1: config 2 interface 43 has no altsetting 0
[ 1558.667820][T24931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.667897][T24931] usb 4-1: Product: syz
[ 1558.667953][T24931] usb 4-1: Manufacturer: syz
[ 1558.667990][T24931] usb 4-1: SerialNumber: syz
[ 1558.791793][T28485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1558.791920][T28485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1558.827507][ T5679] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1558.884114][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1558.884140][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1558.978379][ T5679] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1558.981080][ T5679] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1558.981110][ T5679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.981148][ T5679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1558.981203][ T5679] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1558.982937][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1558.982964][ T5679] usb 6-1: Product: syz
[ 1558.982982][ T5679] usb 6-1: Manufacturer: syz
[ 1559.067877][ T5679] cdc_wdm 6-1:1.0: skipping garbage
[ 1559.067922][ T5679] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1559.212014][T28482] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6701'.
[ 1559.243494][T28482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6701'.
[ 1559.354553][T14298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1559.354572][T14298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1559.385010][T24931] ums-usbat 4-1:2.43: USB Mass Storage device detected
[ 1559.425600][T24931] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1
[ 1559.471114][T24931] ums-usbat 4-1:2.43: probe with driver ums-usbat failed with error -5
[ 1559.514859][T24931] usb 4-1: USB disconnect, device number 82
[ 1560.008940][   T31] kauditd_printk_skb: 43 callbacks suppressed
[ 1560.008956][   T31] audit: type=1326 audit(1791624436.661:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98959e1d9 code=0x7ffc0000
[ 1560.009540][   T31] audit: type=1326 audit(1791624436.661:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98959e1d9 code=0x7ffc0000
[ 1560.010789][   T31] audit: type=1326 audit(1791624436.661:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe98959e1d9 code=0x7ffc0000
[ 1560.568577][   T31] audit: type=1326 audit(1791624437.221:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98959e1d9 code=0x7ffc0000
[ 1560.568646][   T31] audit: type=1326 audit(1791624437.221:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98959e1d9 code=0x7ffc0000
[ 1560.897697][T15165] usb 6-1: USB disconnect, device number 18
[ 1561.111217][T28518] FAULT_INJECTION: forcing a failure.
[ 1561.111217][T28518] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.111249][T28518] CPU: 1 UID: 0 PID: 28518 Comm: syz.6.6709 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1561.111272][T28518] Tainted: [L]=SOFTLOCKUP
[ 1561.111285][T28518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1561.111294][T28518] Call Trace:
[ 1561.111301][T28518]  <TASK>
[ 1561.111308][T28518]  dump_stack_lvl+0xe8/0x150
[ 1561.111337][T28518]  should_fail_ex+0x410/0x560
[ 1561.111366][T28518]  should_failslab+0xa8/0x100
[ 1561.111391][T28518]  __kmalloc_cache_noprof+0xa3/0x600
[ 1561.111412][T28518]  ? hugetlb_vm_op_open+0x340/0x5b0
[ 1561.111433][T28518]  ? hugetlb_vm_op_open+0x340/0x5b0
[ 1561.111455][T28518]  ? anon_vma_clone+0x555/0x9f0
[ 1561.111475][T28518]  hugetlb_vm_op_open+0x340/0x5b0
[ 1561.111497][T28518]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[ 1561.111520][T28518]  __split_vma+0x4dd/0xa60
[ 1561.111547][T28518]  ? __pfx___split_vma+0x10/0x10
[ 1561.111575][T28518]  ? kernel_text_address+0xa5/0xe0
[ 1561.111595][T28518]  ? __kernel_text_address+0xd/0x30
[ 1561.111613][T28518]  ? unwind_get_return_address+0x4d/0x90
[ 1561.111637][T28518]  vms_gather_munmap_vmas+0x322/0x1370
[ 1561.111664][T28518]  ? mtree_range_walk+0x707/0x8b0
[ 1561.111692][T28518]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1561.111719][T28518]  ? mas_walk+0x37e/0x490
[ 1561.111742][T28518]  mmap_region+0x925/0x25b0
[ 1561.111779][T28518]  ? __pfx_mmap_region+0x10/0x10
[ 1561.111804][T28518]  ? ktime_get+0x45/0x220
[ 1561.111823][T28518]  ? ktime_get+0x45/0x220
[ 1561.111840][T28518]  ? seqcount_lockdep_reader_access+0xd4/0x100
[ 1561.111864][T28518]  ? ktime_get+0x1f5/0x220
[ 1561.111884][T28518]  ? lapic_next_event+0x11/0x20
[ 1561.111901][T28518]  ? clockevents_program_event+0x491/0x630
[ 1561.111987][T28518]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 1561.112014][T28518]  ? mm_get_unmapped_area_vmaflags+0xd9/0x110
[ 1561.112038][T28518]  ? cap_mmap_addr+0xaf/0x100
[ 1561.112059][T28518]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1561.112074][T28518]  ? security_mmap_addr+0x71/0x240
[ 1561.112096][T28518]  ? shmem_mapping+0xd/0x50
[ 1561.112115][T28518]  ? memfd_check_seals_mmap+0x16f/0x220
[ 1561.112142][T28518]  do_mmap+0xe0a/0x1300
[ 1561.112172][T28518]  ? __pfx_do_mmap+0x10/0x10
[ 1561.112197][T28518]  ? mtree_load+0x6c0/0x780
[ 1561.112215][T28518]  ? mtree_load+0x12a/0x780
[ 1561.112236][T28518]  ? __pfx_mtree_load+0x10/0x10
[ 1561.112254][T28518]  ? down_write_killable+0x17e/0x240
[ 1561.112294][T28518]  __se_sys_remap_file_pages+0x7c8/0x980
[ 1561.112323][T28518]  ? __pfx___se_sys_remap_file_pages+0x10/0x10
[ 1561.112341][T28518]  ? ksys_write+0x242/0x270
[ 1561.112360][T28518]  ? __pfx_ksys_write+0x10/0x10
[ 1561.112382][T28518]  ? __x64_sys_remap_file_pages+0x20/0xc0
[ 1561.112401][T28518]  do_syscall_64+0x166/0x520
[ 1561.112420][T28518]  ? trace_irq_disable+0x3b/0x140
[ 1561.112438][T28518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.112454][T28518]  ? clear_bhb_loop+0x70/0xc0
[ 1561.112475][T28518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.112491][T28518] RIP: 0033:0x7fed5b39e1d9
[ 1561.112507][T28518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1561.112521][T28518] RSP: 002b:00007fed5c20a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[ 1561.112538][T28518] RAX: ffffffffffffffda RBX: 00007fed5b626090 RCX: 00007fed5b39e1d9
[ 1561.112551][T28518] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[ 1561.112561][T28518] RBP: 00007fed5c20a090 R08: 00000000f0ffffff R09: 0000000000000000
[ 1561.112573][T28518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1561.112582][T28518] R13: 00007fed5b626128 R14: 00007fed5b626090 R15: 00007fed5b74fa48
[ 1561.112608][T28518]  </TASK>
[ 1561.534935][T28518] HugeTLB: unable to allocate vma specific lock
[ 1562.921673][   T31] audit: type=1326 audit(1791624439.571:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28536 comm="syz.5.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1562.925293][   T31] audit: type=1326 audit(1791624439.571:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28536 comm="syz.5.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1562.982330][   T31] audit: type=1326 audit(1791624439.631:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28536 comm="syz.5.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1562.984484][   T31] audit: type=1326 audit(1791624439.631:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28536 comm="syz.5.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1562.984701][   T31] audit: type=1326 audit(1791624439.631:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28536 comm="syz.5.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff7e2d9e1d9 code=0x7ffc0000
[ 1563.825826][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6715'.
[ 1563.825845][T28538] netlink: 'syz.5.6715': attribute type 2 has an invalid length.
[ 1564.697059][T16371] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1564.848004][T16371] usb 6-1: Using ep0 maxpacket: 32
[ 1564.848903][T16371] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1564.850478][T16371] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1564.850508][T16371] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1564.850535][T16371] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1564.919048][T16371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.919081][T16371] usb 6-1: Product: syz
[ 1564.919098][T16371] usb 6-1: Manufacturer: syz
[ 1564.919116][T16371] usb 6-1: SerialNumber: syz
[ 1564.963020][T16371] usb 6-1: config 0 descriptor??
[ 1565.583422][T16371] gs_usb 6-1:0.0: Couldn't get device config: (err=-71)
[ 1565.583460][T16371] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[ 1565.684302][T16371] usb 6-1: USB disconnect, device number 19
[ 1565.771391][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6728'.
[ 1566.110964][T28588] binder: 28587:28588 ioctl c058560f 200000000500 returned -22
[ 1566.771046][   T13] IPVS: starting estimator thread 0...
[ 1566.857052][T28604] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1566.904846][T28606] FAULT_INJECTION: forcing a failure.
[ 1566.904846][T28606] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1566.904886][T28606] CPU: 0 UID: 0 PID: 28606 Comm: syz.4.6734 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1566.904917][T28606] Tainted: [L]=SOFTLOCKUP
[ 1566.904927][T28606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1566.904941][T28606] Call Trace:
[ 1566.904951][T28606]  <TASK>
[ 1566.904962][T28606]  dump_stack_lvl+0xe8/0x150
[ 1566.905002][T28606]  should_fail_ex+0x410/0x560
[ 1566.905043][T28606]  prepare_alloc_pages+0x223/0x600
[ 1566.905081][T28606]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1566.905117][T28606]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1566.905153][T28606]  ? __pfx_policy_nodemask+0x10/0x10
[ 1566.905191][T28606]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1566.905232][T28606]  alloc_pages_mpol+0x21e/0x390
[ 1566.905271][T28606]  alloc_pages_noprof+0xb1/0x2b0
[ 1566.905308][T28606]  __pmd_alloc+0x3a/0x5c0
[ 1566.905349][T28606]  handle_mm_fault+0xe9d/0x3750
[ 1566.905397][T28606]  ? handle_mm_fault+0xf1/0x3750
[ 1566.905445][T28606]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1566.905503][T28606]  ? lock_mm_and_find_vma+0xa7/0x340
[ 1566.905533][T28606]  do_user_addr_fault+0x746/0x1340
[ 1566.905574][T28606]  exc_page_fault+0x6a/0xc0
[ 1566.905613][T28606]  asm_exc_page_fault+0x26/0x30
[ 1566.905637][T28606] RIP: 0010:iovec_from_user+0xfe/0x250
[ 1566.905673][T28606] Code: f6 e8 fc 4d 39 e5 0f 82 34 01 00 00 49 39 ed 0f 87 2b 01 00 00 48 89 5c 24 08 0f 01 cb 0f ae e8 49 ff cf 48 8b 1c 24 49 89 dd <49> 8b 6c 24 08 4d 8b 34 24 31 ff 48 89 ee e8 ff f8 e8 fc 48 85 ed
[ 1566.905694][T28606] RSP: 0018:ffffc9000381fa08 EFLAGS: 00050203
[ 1566.905714][T28606] RAX: ffffffff84df1c97 RBX: ffff88803a2c4000 RCX: ffff88803f91ddc0
[ 1566.905732][T28606] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 00002000000030f0
[ 1566.905752][T28606] RBP: 00007ffffffff000 R08: 0000000000000cc0 R09: 00000000ffffffff
[ 1566.905768][T28606] R10: ffffed1007458d76 R11: 0000000000000000 R12: 0000200000000540
[ 1566.905784][T28606] R13: ffff88803a2c4000 R14: 0000000000000008 R15: 00000000000002ba
[ 1566.905809][T28606]  ? iovec_from_user+0xd7/0x250
[ 1566.905850][T28606]  ? iovec_from_user+0xd7/0x250
[ 1566.905888][T28606]  __import_iovec+0x15e/0x7e0
[ 1566.905926][T28606]  ? kstrtoull+0x137/0x1d0
[ 1566.905960][T28606]  import_iovec+0x73/0xa0
[ 1566.905999][T28606]  __se_sys_vmsplice+0x278/0x1660
[ 1566.906026][T28606]  ? get_pid_task+0x20/0x1f0
[ 1566.906058][T28606]  ? get_pid_task+0x20/0x1f0
[ 1566.906082][T28606]  ? get_pid_task+0x20/0x1f0
[ 1566.906109][T28606]  ? __pfx___se_sys_vmsplice+0x10/0x10
[ 1566.906146][T28606]  ? sb_end_write+0xe8/0x190
[ 1566.906178][T28606]  ? vfs_write+0x9ce/0xba0
[ 1566.906223][T28606]  ? __pfx_vfs_write+0x10/0x10
[ 1566.906251][T28606]  ? do_sys_openat2+0x14e/0x200
[ 1566.906283][T28606]  ? kmem_cache_free+0x182/0x650
[ 1566.906329][T28606]  ? ksys_write+0x1fc/0x270
[ 1566.906373][T28606]  do_syscall_64+0x166/0x520
[ 1566.906399][T28606]  ? trace_irq_disable+0x3b/0x140
[ 1566.906425][T28606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1566.906449][T28606]  ? clear_bhb_loop+0x70/0xc0
[ 1566.906478][T28606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1566.906502][T28606] RIP: 0033:0x7fe98959e1d9
[ 1566.906523][T28606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1566.906544][T28606] RSP: 002b:00007fe98a420028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1566.906567][T28606] RAX: ffffffffffffffda RBX: 00007fe989825fa0 RCX: 00007fe98959e1d9
[ 1566.906585][T28606] RDX: 10000000000002bb RSI: 0000200000000540 RDI: 0000000000000003
[ 1566.906632][T28606] RBP: 00007fe98a420090 R08: 0000000000000000 R09: 0000000000000000
[ 1566.906646][T28606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1566.906659][T28606] R13: 00007fe989826038 R14: 00007fe989825fa0 R15: 00007fe98994fa48
[ 1566.906697][T28606]  </TASK>
[ 1567.709434][T15165] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1567.868345][T15165] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1567.869857][T15165] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1567.869886][T15165] usb 6-1: config 0 has no interface number 0
[ 1567.872673][T15165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.872704][T15165] usb 6-1: Product: syz
[ 1567.872717][T15165] usb 6-1: Manufacturer: syz
[ 1567.872728][T15165] usb 6-1: SerialNumber: syz
[ 1567.937961][T15165] usb 6-1: config 0 descriptor??
[ 1567.947647][T28624] FAULT_INJECTION: forcing a failure.
[ 1567.947647][T28624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1567.947684][T28624] CPU: 0 UID: 0 PID: 28624 Comm: syz.6.6741 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1567.947796][T28624] Tainted: [L]=SOFTLOCKUP
[ 1567.947836][T28624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1567.947866][T28624] Call Trace:
[ 1567.947898][T28624]  <TASK>
[ 1567.947941][T28624]  dump_stack_lvl+0xe8/0x150
[ 1567.948040][T28624]  should_fail_ex+0x410/0x560
[ 1567.948131][T28624]  _copy_to_user+0x31/0xb0
[ 1567.948198][T28624]  simple_read_from_buffer+0xe1/0x170
[ 1567.948308][T28624]  proc_fail_nth_read+0x1bb/0x230
[ 1567.948376][T28624]  ? common_file_perm+0x20e/0x2b0
[ 1567.948480][T28624]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1567.948558][T28624]  ? rw_verify_area+0x24a/0x4c0
[ 1567.948624][T28624]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1567.948711][T28624]  vfs_read+0x213/0xa80
[ 1567.948781][T28624]  ? __pfx___mutex_lock+0x10/0x10
[ 1567.948859][T28624]  ? __pfx_vfs_read+0x10/0x10
[ 1567.948925][T28624]  ? __fget_files+0x2a/0x420
[ 1567.949001][T28624]  ? __fget_files+0x3a2/0x420
[ 1567.949048][T28624]  ? __fget_files+0x2a/0x420
[ 1567.949127][T28624]  ksys_read+0x150/0x270
[ 1567.949203][T28624]  ? __pfx_ksys_read+0x10/0x10
[ 1567.949319][T28624]  do_syscall_64+0x166/0x520
[ 1567.949394][T28624]  ? trace_irq_disable+0x3b/0x140
[ 1567.949446][T28624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1567.949511][T28624]  ? clear_bhb_loop+0x70/0xc0
[ 1567.949586][T28624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1567.949642][T28624] RIP: 0033:0x7fed5b35ea0e
[ 1567.949697][T28624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1567.949752][T28624] RSP: 002b:00007fed5c1e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1567.949818][T28624] RAX: ffffffffffffffda RBX: 00007fed5c1e96c0 RCX: 00007fed5b35ea0e
[ 1567.949892][T28624] RDX: 000000000000000f RSI: 00007fed5c1e90a0 RDI: 0000000000000007
[ 1567.949936][T28624] RBP: 00007fed5c1e9090 R08: 0000000000000000 R09: 0000000000000000
[ 1567.949979][T28624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1567.950014][T28624] R13: 00007fed5b626218 R14: 00007fed5b626180 R15: 00007fed5b74fa48
[ 1567.950145][T28624]  </TASK>
[ 1568.204666][T15165] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1568.218628][T15165] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1568.219758][T15165] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1568.219811][T15165] usb 6-1: media controller created
[ 1568.265454][T15165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1568.554221][T15165] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1568.670958][T15165] usb 6-1: USB disconnect, device number 20
[ 1569.486915][T28639] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1569.561951][T28639] bond2 (unregistering): Released all slaves
[ 1569.567346][ T5671] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1569.727057][ T5671] usb 4-1: Using ep0 maxpacket: 32
[ 1569.727840][ T5671] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[ 1569.732015][ T5671] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.732044][ T5671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1569.790425][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1569.790448][ T5671] usb 4-1: Product: syz
[ 1569.790460][ T5671] usb 4-1: Manufacturer: syz
[ 1569.790472][ T5671] usb 4-1: SerialNumber: syz
[ 1570.069618][ T5671] usb 4-1: 0:1 : does not exist
[ 1570.069643][ T5671] usb 4-1: 0:2 : does not exist
[ 1570.684477][ T5671] usb 4-1: USB disconnect, device number 83
[ 1570.938564][T28488] udevd[28488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1571.247113][T16371] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1571.408655][T16371] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1571.411131][T16371] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1571.411160][T16371] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.411182][T16371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1571.411229][T16371] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1571.414632][T16371] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1571.414652][T16371] usb 2-1: Product: syz
[ 1571.414663][T16371] usb 2-1: Manufacturer: syz
[ 1571.535232][T16371] cdc_wdm 2-1:1.0: skipping garbage
[ 1571.535266][T16371] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1571.627656][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1571.644987][ T5679] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1571.742220][ T5671] usb 2-1: USB disconnect, device number 94
[ 1571.802453][ T5679] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1571.803219][ T5679] usb 4-1: config 0 has no interfaces?
[ 1571.805541][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1571.805569][ T5679] usb 4-1: Product: syz
[ 1571.805586][ T5679] usb 4-1: Manufacturer: syz
[ 1571.805603][ T5679] usb 4-1: SerialNumber: syz
[ 1571.859054][ T5679] usb 4-1: config 0 descriptor??
[ 1572.145479][T28671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6756'.
[ 1572.272822][ T5671] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1572.428103][ T5671] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1572.429475][ T5671] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1572.429505][ T5671] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1572.429527][ T5671] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1572.429575][ T5671] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1572.434475][ T5671] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1572.434503][ T5671] usb 2-1: Product: syz
[ 1572.434520][ T5671] usb 2-1: Manufacturer: syz
[ 1572.570388][ T5671] cdc_wdm 2-1:1.0: skipping garbage
[ 1572.570448][ T5671] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1572.679057][T28663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1572.699192][T28663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1572.731451][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6753'.
[ 1572.809123][T28663] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1572.809154][T28663] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1573.441668][T28684] batadv0: entered promiscuous mode
[ 1573.441695][T28684] batadv0: entered allmulticast mode
[ 1574.249002][ T5671] usb 2-1: USB disconnect, device number 95
[ 1574.367498][T28695] netlink: 'syz.5.6762': attribute type 1 has an invalid length.
[ 1574.432933][T28689] syzkaller0: entered promiscuous mode
[ 1574.432954][T28689] syzkaller0: entered allmulticast mode
[ 1574.637620][T28695] bond1: entered promiscuous mode
[ 1574.638119][T28695] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1574.796912][  T189] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1574.806440][ T5671] usb 4-1: USB disconnect, device number 84
[ 1574.914291][T28703] bond1: (slave bridge1): making interface the new active one
[ 1574.914321][T28703] bridge1: entered promiscuous mode
[ 1574.943845][T28703] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1574.956825][  T189] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[ 1574.961222][  T189] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1574.962868][  T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1574.962897][  T189] usb 6-1: Product: syz
[ 1574.962914][  T189] usb 6-1: Manufacturer: syz
[ 1575.467701][   T31] kauditd_printk_skb: 150 callbacks suppressed
[ 1575.467724][   T31] audit: type=1326 audit(1791624452.101:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.467776][   T31] audit: type=1326 audit(1791624452.101:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.467823][   T31] audit: type=1326 audit(1791624452.111:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.467871][   T31] audit: type=1326 audit(1791624452.111:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.467919][   T31] audit: type=1326 audit(1791624452.111:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.467963][   T31] audit: type=1326 audit(1791624452.111:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.468018][   T31] audit: type=1326 audit(1791624452.121:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.468065][   T31] audit: type=1326 audit(1791624452.121:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.474744][   T31] audit: type=1326 audit(1791624452.121:10397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.474804][   T31] audit: type=1326 audit(1791624452.121:10398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28713 comm="syz.1.6767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5159e1d9 code=0x7ffc0000
[ 1575.539007][T16371] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[ 1575.768046][T16371] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[ 1575.773148][T16371] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1575.773179][T16371] usb 4-1: config 0 has no interface number 0
[ 1575.773251][T16371] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1575.773282][T16371] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1575.773309][T16371] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[ 1575.773338][T16371] usb 4-1: config 0 interface 2 has no altsetting 0
[ 1575.776292][T16371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.776324][T16371] usb 4-1: Product: syz
[ 1575.776336][T16371] usb 4-1: Manufacturer: syz
[ 1575.776347][T16371] usb 4-1: SerialNumber: syz
[ 1575.909314][T16371] usb 4-1: config 0 descriptor??
[ 1575.925222][T28712] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1575.925345][T28712] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1575.959183][T16371] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1576.136054][T28712] FAULT_INJECTION: forcing a failure.
[ 1576.136054][T28712] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.136095][T28712] CPU: 0 UID: 0 PID: 28712 Comm: syz.3.6766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1576.136126][T28712] Tainted: [L]=SOFTLOCKUP
[ 1576.136138][T28712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1576.136153][T28712] Call Trace:
[ 1576.136163][T28712]  <TASK>
[ 1576.136173][T28712]  dump_stack_lvl+0xe8/0x150
[ 1576.136213][T28712]  should_fail_ex+0x410/0x560
[ 1576.136252][T28712]  should_failslab+0xa8/0x100
[ 1576.136287][T28712]  __kmalloc_noprof+0xfe/0x720
[ 1576.136312][T28712]  ? rcu_is_watching+0x16/0xb0
[ 1576.136343][T28712]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1576.136366][T28712]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1576.136397][T28712]  tomoyo_realpath_from_path+0xef/0x640
[ 1576.136435][T28712]  tomoyo_check_open_permission+0x229/0x470
[ 1576.136478][T28712]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1576.136510][T28712]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1576.136545][T28712]  ? __asan_memset+0x22/0x50
[ 1576.136604][T28712]  ? tomoyo_file_open+0x163/0x220
[ 1576.136635][T28712]  security_file_open+0xa9/0x240
[ 1576.136667][T28712]  do_dentry_open+0x4a0/0x1380
[ 1576.136712][T28712]  vfs_open+0x3b/0x340
[ 1576.136741][T28712]  ? path_openat+0x1428/0x1d60
[ 1576.136772][T28712]  path_openat+0x1443/0x1d60
[ 1576.136820][T28712]  do_file_open+0x23e/0x4a0
[ 1576.136853][T28712]  ? __pfx_do_file_open+0x10/0x10
[ 1576.136905][T28712]  ? _raw_spin_unlock+0x28/0x50
[ 1576.136936][T28712]  ? alloc_fd+0x651/0x6c0
[ 1576.136981][T28712]  do_sys_openat2+0x115/0x200
[ 1576.137017][T28712]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1576.137052][T28712]  ? ksys_write+0x242/0x270
[ 1576.137079][T28712]  ? __pfx_ksys_write+0x10/0x10
[ 1576.137108][T28712]  __x64_sys_openat+0x138/0x170
[ 1576.137148][T28712]  do_syscall_64+0x166/0x520
[ 1576.137175][T28712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.137199][T28712]  ? clear_bhb_loop+0x70/0xc0
[ 1576.137229][T28712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.137252][T28712] RIP: 0033:0x7efc6bd9e1d9
[ 1576.137274][T28712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1576.137295][T28712] RSP: 002b:00007efc6cc03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1576.137320][T28712] RAX: ffffffffffffffda RBX: 00007efc6c025fa0 RCX: 00007efc6bd9e1d9
[ 1576.137338][T28712] RDX: 000000000002cc83 RSI: 0000200000000200 RDI: ffffffffffffff9c
[ 1576.137355][T28712] RBP: 00007efc6cc03090 R08: 0000000000000000 R09: 0000000000000000
[ 1576.137371][T28712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1576.137386][T28712] R13: 00007efc6c026038 R14: 00007efc6c025fa0 R15: 00007efc6c14fa48
[ 1576.137423][T28712]  </TASK>
[ 1576.137912][T28712] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1576.176568][T28703] syzkaller0: left promiscuous mode
[ 1576.178495][T28703] syzkaller0: left allmulticast mode
[ 1576.498157][  T189] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input158
[ 1576.690409][ T5671] usb 6-1: USB disconnect, device number 21
[ 1576.708336][  T189] usb 4-1: USB disconnect, device number 85
[ 1576.938258][T28721] ==================================================================
[ 1576.938278][T28721] BUG: KASAN: slab-use-after-free in __video_do_ioctl+0x4e4/0xc70
[ 1576.938315][T28721] Read of size 8 at addr ffff88808eafe6d0 by task v4l_id/28721
[ 1576.938345][T28721] 
[ 1576.938361][T28721] CPU: 0 UID: 0 PID: 28721 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1576.938389][T28721] Tainted: [L]=SOFTLOCKUP
[ 1576.938398][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1576.938413][T28721] Call Trace:
[ 1576.938422][T28721]  <TASK>
[ 1576.938433][T28721]  dump_stack_lvl+0xe8/0x150
[ 1576.938467][T28721]  print_address_description+0x55/0x1e0
[ 1576.938498][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1576.938518][T28721]  print_report+0x58/0x70
[ 1576.938540][T28721]  kasan_report+0x117/0x150
[ 1576.938565][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1576.938589][T28721]  kasan_check_range+0x264/0x2c0
[ 1576.938614][T28721]  __video_do_ioctl+0x4e4/0xc70
[ 1576.938637][T28721]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1576.938661][T28721]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1576.938681][T28721]  ? do_vfs_ioctl+0x116f/0x1530
[ 1576.938703][T28721]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1576.938726][T28721]  video_usercopy+0x860/0x1430
[ 1576.938750][T28721]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1576.938772][T28721]  ? __pfx_video_usercopy+0x10/0x10
[ 1576.938798][T28721]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1576.938822][T28721]  ? exc_page_fault+0x6a/0xc0
[ 1576.938844][T28721]  v4l2_ioctl+0x18d/0x1e0
[ 1576.938865][T28721]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1576.938884][T28721]  __se_sys_ioctl+0xfc/0x170
[ 1576.938905][T28721]  do_syscall_64+0x166/0x520
[ 1576.938925][T28721]  ? trace_irq_disable+0x3b/0x140
[ 1576.938944][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.938961][T28721]  ? clear_bhb_loop+0x70/0xc0
[ 1576.938980][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.938996][T28721] RIP: 0033:0x7f3b2c11d378
[ 1576.939026][T28721] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d
[ 1576.939041][T28721] RSP: 002b:00007ffc1b2746a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1576.939060][T28721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3b2c11d378
[ 1576.939073][T28721] RDX: 00007ffc1b2746b0 RSI: 0000000080685600 RDI: 0000000000000003
[ 1576.939084][T28721] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1576.939094][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1576.939105][T28721] R13: 00007ffc1b274860 R14: 00007f3b2c88b000 R15: 000055dd7ac2b4d8
[ 1576.939124][T28721]  </TASK>
[ 1576.939131][T28721] 
[ 1576.939136][T28721] Allocated by task 189:
[ 1576.939144][T28721]  kasan_save_track+0x3e/0x80
[ 1576.939164][T28721]  __kasan_kmalloc+0x93/0xb0
[ 1576.939184][T28721]  __kmalloc_cache_noprof+0x321/0x600
[ 1576.939202][T28721]  sur40_probe+0x16c/0xfa0
[ 1576.939217][T28721]  usb_probe_interface+0x788/0xe50
[ 1576.939232][T28721]  really_probe+0x254/0xae0
[ 1576.939256][T28721]  __driver_probe_device+0x1e8/0x360
[ 1576.939279][T28721]  driver_probe_device+0x4f/0x240
[ 1576.939303][T28721]  __device_attach_driver+0x270/0x410
[ 1576.939327][T28721]  bus_for_each_drv+0x258/0x2f0
[ 1576.939352][T28721]  __device_attach+0x2c4/0x450
[ 1576.939374][T28721]  device_initial_probe+0xa1/0xd0
[ 1576.939398][T28721]  bus_probe_device+0x12a/0x220
[ 1576.939415][T28721]  device_add+0x7d7/0xb80
[ 1576.939437][T28721]  usb_set_configuration+0x1bb5/0x2260
[ 1576.939463][T28721]  usb_generic_driver_probe+0x8d/0x150
[ 1576.939487][T28721]  usb_probe_device+0x1c3/0x3b0
[ 1576.939501][T28721]  really_probe+0x254/0xae0
[ 1576.939523][T28721]  __driver_probe_device+0x1e8/0x360
[ 1576.939547][T28721]  driver_probe_device+0x4f/0x240
[ 1576.939572][T28721]  __device_attach_driver+0x270/0x410
[ 1576.939597][T28721]  bus_for_each_drv+0x258/0x2f0
[ 1576.939614][T28721]  __device_attach+0x2c4/0x450
[ 1576.939637][T28721]  device_initial_probe+0xa1/0xd0
[ 1576.939660][T28721]  bus_probe_device+0x12a/0x220
[ 1576.939678][T28721]  device_add+0x7d7/0xb80
[ 1576.939699][T28721]  usb_new_device+0x9aa/0x1690
[ 1576.939720][T28721]  hub_event+0x28e8/0x4d30
[ 1576.939744][T28721]  process_scheduled_works+0xc3d/0x1630
[ 1576.939768][T28721]  worker_thread+0xa47/0xfb0
[ 1576.939791][T28721]  kthread+0x38b/0x480
[ 1576.939807][T28721]  ret_from_fork+0x514/0xb70
[ 1576.939822][T28721]  ret_from_fork_asm+0x1a/0x30
[ 1576.939838][T28721] 
[ 1576.939844][T28721] Freed by task 5671:
[ 1576.939855][T28721]  kasan_save_track+0x3e/0x80
[ 1576.939877][T28721]  kasan_save_free_info+0x40/0x50
[ 1576.939893][T28721]  __kasan_slab_free+0x5c/0x80
[ 1576.939915][T28721]  kfree+0x1c5/0x650
[ 1576.939931][T28721]  sur40_disconnect+0xaf/0x140
[ 1576.939948][T28721]  usb_unbind_interface+0x295/0x9f0
[ 1576.939962][T28721]  device_release_driver_internal+0x4f5/0x880
[ 1576.939986][T28721]  bus_remove_device+0x444/0x560
[ 1576.940003][T28721]  device_del+0x524/0x8f0
[ 1576.940023][T28721]  usb_disable_device+0x3d4/0x8d0
[ 1576.940046][T28721]  usb_disconnect+0x346/0x9a0
[ 1576.940065][T28721]  hub_event+0x1bbb/0x4d30
[ 1576.940088][T28721]  process_scheduled_works+0xc3d/0x1630
[ 1576.940109][T28721]  worker_thread+0xa47/0xfb0
[ 1576.940131][T28721]  kthread+0x38b/0x480
[ 1576.940148][T28721]  ret_from_fork+0x514/0xb70
[ 1576.940163][T28721]  ret_from_fork_asm+0x1a/0x30
[ 1576.940178][T28721] 
[ 1576.940183][T28721] The buggy address belongs to the object at ffff88808eafe000
[ 1576.940183][T28721]  which belongs to the cache kmalloc-4k of size 4096
[ 1576.940198][T28721] The buggy address is located 1744 bytes inside of
[ 1576.940198][T28721]  freed 4096-byte region [ffff88808eafe000, ffff88808eaff000)
[ 1576.940220][T28721] 
[ 1576.940225][T28721] The buggy address belongs to the physical page:
[ 1576.940237][T28721] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8eaf8
[ 1576.940257][T28721] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1576.940276][T28721] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1576.940296][T28721] page_type: f5(slab)
[ 1576.940316][T28721] raw: 00fff00000000040 ffff88801c042140 dead000000000100 dead000000000122
[ 1576.940335][T28721] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1576.940364][T28721] head: 00fff00000000040 ffff88801c042140 dead000000000100 dead000000000122
[ 1576.940383][T28721] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1576.940402][T28721] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1576.940421][T28721] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1576.940433][T28721] page dumped because: kasan: bad access detected
[ 1576.940454][T28721] page_owner tracks the page as allocated
[ 1576.940462][T28721] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27801, tgid 27800 (syz.5.6534), ts 1499371361920
[ 1576.940496][T28721]  post_alloc_hook+0x1f9/0x250
[ 1576.940518][T28721]  get_page_from_freelist+0x2209/0x2280
[ 1576.940544][T28721]  __alloc_frozen_pages_noprof+0x217/0x5a0
[ 1576.940569][T28721]  allocate_slab+0x7d/0x620
[ 1576.940598][T28721]  refill_objects+0x2d5/0x350
[ 1576.940627][T28721]  __pcs_replace_empty_main+0x2c8/0x6c0
[ 1576.940654][T28721]  __kmalloc_noprof+0x47b/0x720
[ 1576.940676][T28721]  tomoyo_realpath_from_path+0xef/0x640
[ 1576.940696][T28721]  tomoyo_path_number_perm+0x246/0x5f0
[ 1576.940722][T28721]  security_file_ioctl+0xc3/0x2a0
[ 1576.940747][T28721]  __se_sys_ioctl+0x47/0x170
[ 1576.940770][T28721]  do_syscall_64+0x166/0x520
[ 1576.940792][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.940811][T28721] page last free pid 23043 tgid 23043 ts 1499316354369 stack trace:
[ 1576.940827][T28721]  __free_frozen_pages+0xc93/0xd90
[ 1576.940848][T28721]  __slab_free+0x274/0x2c0
[ 1576.940869][T28721]  qlist_free_all+0x99/0x100
[ 1576.940891][T28721]  kasan_quarantine_reduce+0x148/0x160
[ 1576.940915][T28721]  __kasan_slab_alloc+0x22/0x80
[ 1576.940940][T28721]  kmem_cache_alloc_noprof+0x2b9/0x600
[ 1576.940959][T28721]  do_getname+0x2e/0x250
[ 1576.940985][T28721]  do_sys_openat2+0xcc/0x200
[ 1576.941012][T28721]  __x64_sys_openat+0x138/0x170
[ 1576.941040][T28721]  do_syscall_64+0x166/0x520
[ 1576.941061][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.941082][T28721] 
[ 1576.941087][T28721] Memory state around the buggy address:
[ 1576.941100][T28721]  ffff88808eafe580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1576.941115][T28721]  ffff88808eafe600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1576.941130][T28721] >ffff88808eafe680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1576.941142][T28721]                                                  ^
[ 1576.941154][T28721]  ffff88808eafe700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1576.941167][T28721]  ffff88808eafe780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1576.941180][T28721] ==================================================================
[ 1576.941408][T28721] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1577.804229][T28721] CPU: 0 UID: 0 PID: 28721 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1577.814836][T28721] Tainted: [L]=SOFTLOCKUP
[ 1577.819192][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1577.829290][T28721] Call Trace:
[ 1577.832615][T28721]  <TASK>
[ 1577.835569][T28721]  vpanic+0x56d/0xa60
[ 1577.839588][T28721]  ? __pfx_vpanic+0x10/0x10
[ 1577.844141][T28721]  ? __pfx___schedule+0x10/0x10
[ 1577.849019][T28721]  panic+0xc5/0xd0
[ 1577.852773][T28721]  ? __pfx_panic+0x10/0x10
[ 1577.857208][T28721]  ? preempt_schedule_common+0x7f/0xd0
[ 1577.862679][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1577.867721][T28721]  check_panic_on_warn+0x89/0xb0
[ 1577.872672][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1577.877800][T28721]  end_report+0x73/0x170
[ 1577.882065][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1577.887108][T28721]  kasan_report+0x128/0x150
[ 1577.891634][T28721]  ? __video_do_ioctl+0x4e4/0xc70
[ 1577.896684][T28721]  kasan_check_range+0x264/0x2c0
[ 1577.901662][T28721]  __video_do_ioctl+0x4e4/0xc70
[ 1577.906535][T28721]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1577.912182][T28721]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1577.917563][T28721]  ? do_vfs_ioctl+0x116f/0x1530
[ 1577.922431][T28721]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1577.927470][T28721]  video_usercopy+0x860/0x1430
[ 1577.932252][T28721]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1577.937635][T28721]  ? __pfx_video_usercopy+0x10/0x10
[ 1577.942894][T28721]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1577.948114][T28721]  ? exc_page_fault+0x6a/0xc0
[ 1577.952803][T28721]  v4l2_ioctl+0x18d/0x1e0
[ 1577.957172][T28721]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1577.962028][T28721]  __se_sys_ioctl+0xfc/0x170
[ 1577.966656][T28721]  do_syscall_64+0x166/0x520
[ 1577.971288][T28721]  ? trace_irq_disable+0x3b/0x140
[ 1577.976322][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1577.982594][T28721]  ? clear_bhb_loop+0x70/0xc0
[ 1577.987296][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1577.993230][T28721] RIP: 0033:0x7f3b2c11d378
[ 1577.997653][T28721] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d
[ 1578.017443][T28721] RSP: 002b:00007ffc1b2746a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1578.025868][T28721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3b2c11d378
[ 1578.033857][T28721] RDX: 00007ffc1b2746b0 RSI: 0000000080685600 RDI: 0000000000000003
[ 1578.041931][T28721] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1578.049917][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1578.057901][T28721] R13: 00007ffc1b274860 R14: 00007f3b2c88b000 R15: 000055dd7ac2b4d8
[ 1578.065896][T28721]  </TASK>
[ 1578.069545][T28721] Kernel Offset: disabled
[ 1578.073897][T28721] Rebooting in 86400 seconds..