last executing test programs:

10.193021667s ago: executing program 2 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40012020)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000)

6.789482452s ago: executing program 2 (id=329):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10050}, 0x20004880)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000400)=""/168) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0xa, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa5fc}, [@generic={0x1, 0x3, 0x3, 0x552, 0xe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0xd, 0x6, 0x3, 0x30, 0x1}]}, &(0x7f0000001a00)='syzkaller\x00', 0x3, 0x4, &(0x7f0000001a40)=""/4, 0x20800, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x4000001, 0x1}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0xf, 0x6, 0x7b168cd3}, 0x10, 0x177ce, 0xffffffffffffffff, 0x4, &(0x7f0000001c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001cc0)=[{0x0, 0x3, 0x1, 0xc}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x4, 0x4, 0xa}, {0x3, 0x2, 0x4, 0xc}], 0x10, 0x7}, 0x94)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async)
write$binfmt_elf32(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4605069e0d000000000000000003000300d9000000ca020000380000005e02000004040000000020000300f8ffff0300020000000001000000"], 0x98) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000140), 0x12)
close(r4) (async)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
socket(0x1e, 0x4, 0x5) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2404c014}, 0xc000) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip_tables_matches\x00') (async, rerun: 32)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (rerun: 32)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) (async)
ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x2, 0x0, 0xff}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x8, 0x7, 0x4, 0x1000, 0x7, {0x0, 0x2710}, {0x2, 0x2, 0x5, 0x5, 0x5d, 0x0, '$\x00'}, 0x1, 0x2, {&(0x7f0000000340)=[{0x0, 0x93b1, {&(0x7f00000000c0)}, 0xcf6}, {0x1, 0x0, {&(0x7f0000000100)}, 0x751a}]}, 0x100, 0x0, r7})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) (async)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x280003, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000580)={r10, 0x0, 0x9, 0xca, 0xfffffffffffffff7, 0x4}) (async)
write(r1, &(0x7f0000000880)="536e8f8d5e03747eaf77e9f8534f4091ec64dcb7a9029189c2087919af26358f132ee37a058b53c92fd951511284368d5f8373dae7dcab60cd136dafcd08e99edb1fde5121208cce159da1008468a94f96a4c4fa444f120dedf9b1945b2ea10781ed4e1ed42f9ad1475805375ea4d6dbb1ef19e9bf259d4e8e9b06be37252b8b73c1df7853f3668370b9995ca0c993ccbf0c6e8fb04e72e52bd64c34a526575332fdcd973b52ce0e4b66751286b2ad6e26a3cd51b78a50e5135156d7fa46577727497d7577db9ed55638e34ef8b16c94a7c0324754a0c271482dff927470dfce6d85f4ce28de8609e4fcf3e99a7c815fe39616226eaeeb1b2736657b02634c4f5ecf485de46b50883a71aeab18ca7b51eca0f2d3a140631c4195778fb737f59021096e5dc49f50a276282a8974d3c3a6360cf58213130b3b34e6db9264629da85b65f91704f578cd88c8ee479f7d3a272bbaec70e4e88d3eac6a3257371f59d3f9534e610bc4a6143f75498680a35080b9e88391e5ddcfdaa73dc97ee6884b3aa73b10350b2a917a7f650169a043c4d1bc2ffaf873a2b8800260525988a47157594dc2b1c6b200100f733d8aed7e6ec5624d27de516f2d9210a5cf78754fb7a1c78a670a96dc084ccbe3e78d7fd97509fb6206e025dd1276c061482be893119f167a3245a731530368d3947677a204016c5886e74b412d74e304b05337111a29839b96c1d6b76c88b4fb108eb5d6f2733fb3215781164ebdc5035ab56cb43532065f3407e638e857fad75b20d32e97c5ab366abf311cddabe9837bf247d75765ebaa2cab5a9762712e30cd061b908b83cff5f797158a50508878f38797fd1d8e95bb474b7359663cb6956385a777b04537d60af8639d4d691cb98ef8adb53263af9d63881c38a7feb4f88fdc031c15abbe1a15f812b68a5e8eed14cf7289e2a0f09b801c18ff70cd1da461d6c232f308fc1d480700d9bfed09c00799b98f86efb2b06cfb0deb4174eb15dd2e1d4c2b6991e074272f342b96e8d2a11eb3aa65e8cbdbda59d38b61833059bee9f47b60d1ac840ae3941a167ed9b5083a9ccef637fe3aefc23a195078da58173606e58041cd50ec4e4b269c7fd90bd20ad50c4e19bdbd28993220eba4f6a8515367d849dcf239a688a7a9a93184fa6ad091b3fd044a9f04929db826c1a8dc6c156ec8373afc02cd9b5945b38aa794abcf6967dfea521752db0266128ac137230c51124f092e888ee98bd676a8d12d251abc9c08d14fa633ce97b43fc491464302cc705c686fa51f769b2773dbe48f8bf33ea0c57110b83219ee8b8412277c34b44cadb10d5add0c6504a63e1c3750fb99f61b05ec5b4b7e54cba7edff625347873c09103fd7354151d8dcc6e8b2b593c3b76887d3a4a2167f51c0afaafbea3c4162787c2217c6d34dfb8b0b64e482b3468d66d3b91e6f35d095942a25f11740f5b80b9358852618413167ac601eaad18c86bd8747cc345b832a54736863c19951e44a16497bc39d4d774597ab063ed439e678785f57257e4ebafaac12051871e17396b4695dd1874fd4ca2c09c65830a42789f1bad592c3a352c6cd6885b82261a65bda1f9d746ed4f15023d78e1cec90c086455669638f7421742d707f2d4ef8495362b308ba6565eb745f29470d388ada23d647139c50790efe98a20cb195a684c9249466085048a33edb0d8b1b04cbb16a3b47c8a1287fbe6be2f4b29ad5a211a6613cc36643e2f119100ab9f04bf43d6f6dc0dc3abd5e8980db7ae1419197e0cd1346eeba9a2936dc1f3d9710b9aecb44186cbe98e2ec4d6c58290846597578806ed0d6677636a9558133e6f9b1fa853efa4608f122262d73db9876fbd8eed8b2261828405c8bb755ea5c3a05df4cfc4a32e224551d70d9d8c8c705c428c9b5464925e362081368d17986c70d530db069ceb3a44c94c16924430762dd8f3689a7cbbe0bc2e00fcaef46a77357c3f76ef47497dcc60da1f5ddf41980df6f54680a63378f10ec371ecaa5b26ae9fde0ab4658ac530c4c031e11360805b423a753115ed249e037a9bfc2884036b881ff0d63b476acb9e452aeb6c99d44ae2755de01736ad0578bb3553513b422d7b5913f1978b1e3f734da9731dea150fcf3186599d7dc65fbb15886fd5cc00a6c35cf38a53e24ff20d388b4bbef46baccc4055c7d517249cafde7928b88907904df4f917e6dca1b55bb42dd9754e4872e81ed03957ed27b4a42fb02f35c8d4d09be90576085cbba3ec0ae4c6600e546764741c5786d4aa8f7a219fbe43dad49b80bb52f8900689419339ea792f76b9e08030b1944c153d9bc8ec628168562b1336916f410ee97f366450b633d57aa680ca9a841853df05b791385e68c88fb58541956cce169bb5d0e5ea631caddaacbdbca70775fb0b57edb5c21ce4a1bfc6136584a3044cb33650c8389708d2a0df95819275ae88351ea1b8ed6a3d18e57b9313ee7dc2357ddce5fccac2783a593e270cfffe5a1cd806b485c1f4ff65a26af8987cd3b3be1eb78b575bf561f9f6871a012b9995c3aa52c4f6877c690c87a61be98766f98c41a14724abc53757f3b2b4fa6f0f6f2bb31305f38ad5ceda10ed4d222bf5c71555a0d39a9cb7bdd6e3dcfdea19f5d6ba674855567f68a6ba498f500251386dde52be28be3ef85530e45f3a32e83369e5ad7d00b4fddf329c6dd654f02884a148aca44fce2bb3904aefb5d8a2242c91b2916d84ff1fd604d9a92af4859a6f27367624679e9ec5daf538ebf801dcf9d16074d1d6621c678ab50a4b71ee97bda45135402129dc54612527ddaf06de2f1fc03d6f6461c4d78b6349e65bc4f881bcf806017f8bc84b397eb0f362986a7f2405ae7edbb97ea77cd35107ce0517b453d4e208db74b7a3186ff60dad331dade9a0e2acbb05f3481de5fd520f39f201d4dd2e65f11a1172e8f2d0d2988147678e30394719f26a0f16729a212e0e0e60a6ea39e28653acfdf3a8ff20bc8ea8759344dbb56be912fc9d79d78a904aed9449c8fa59459dd1cb17ab25e65ba068191d7502ff6df73767b0ee3884ad2f2bf02a468762c8c4d2c74480d4d0ce63c051ec9e6061586f7e5af9591fc051c1a79a24ee6e45598fd3e646133e108f78a1e1e60bd105ae992e4d19b5c9d47ca354d599d7f9b665104c9596f17efacba2a03bf9b98ed1191d8c6dbcc7403b1440761f2e093f73d3b517f8bd0609dab0f64910d59c0dcd92b7da3103c934363507f53895bfcb8f54b62c9b5547700ec4751c8dbf6f3ccfce9d919c54c836097331e621faace74374f39cfc1acec592e3a1afa09a09fbd01eee744e9bce7e73f6870f099cfc0d1f43e4c4e2397fa0c13e2dfc687d7ee0ee7858489c63a613e7c929526c33a1fc670cb7ee84f69400f18bcbe48357f42bcf4fdd1a4ac7af4131cfd31761a55f264a1409cc7ebfb490fd7f0c3e8b2bdd599d56539aa191656e2202ea699767423f43fbe5272c31dd260dba6bb78e449c26b39bd8f88a908f929e12e0b10fc038ba09c3dd91838e0e14f40754e6cebb3744fa6b52ef7f2204d7c3eaf4375174a65dde9f44c12ca8ac7d18ed387d07c1cf76b462f39b2cd256210e504b5570475bb0655c318db5264ca52c4811f1c6990a81a1e1612da7406f92f1fd6c32b0eee4af6de99ae1f2c17c95d500415105e2381c4ba549cb285f64a52157dc336ca8900b7b5be729bdcd4cb1e10c5106231f4b6ad8c8c28c41b59a877ec645d2504d5f87cc63200b610c59b3c12ad6d74c1d265eb76cfffffc7ae3f6103b7dddb960765a1cd9514ff34da881e9c3073a95a1dea6304c7e08d2e159d5cefb8d6cd57565bfefe0f3519e5a80961aa0bb6ffcdc42f79b2d1ee1c4961957c65897f001473ee57c516da41025b675fe3e8b09ce84c3382800fb354261c682b22333550105429a1dbf4e2a240006e59637bb5613efe507b63e0d9fca75b86cdeda84c291f63004c04446d9e1301066b077023d4b7c28615efe7a8e976af02121dfacf78b9e82c0f6b23e06c498bf5a6e949d982c6a7dc5c87b75f8aeba01b7ba2586508f0f11abe000cd32883e593f5617a0ed18f8a65dae2326183d76f182f6e90199abe2dacacf9ef55dd19935a94bf3d2c381bf8a2f465a04cc6029325326f30108d1e8f469c3bb09fc1acb4076d9c1db2e67c35c4678fb5dafebc1bc2c7860d210d781aefdfa2511504252921b03ecf7e5ea5466442838399fb5346e785f440327a3aed8ba04530b93d858971ae3923d2b47f5630e25596ba86bbf76f845c145ecaf2dab1d4c21cd79f4f702b401ce51ce80ee6edfe06159efbb996e28f8809142bd661f29039b6529d197abc6174a9203073e2cf390a93cd17a60d2ae89a138020d843622253c800e1ca58ff43886b66ba2c2d38d2c4991bd28c970833552dbef0cd2c84c550d4c92914b371a94e2928e225e75d61ee39bea14de6f679fa17d213474b91bb9efa0db4e7a2c2dcb18eac832a6747cbc30bc9c9e313c2796a82693b2766ee808d14bf78deccf1763685406eb09f5300f1d76324b7f7061deb5f547c6f7dec7a250150b6d38839d28d977053012fc87c6bca16315dcda10e149cf482339dc22b758439aac1ee82f93362b4f34c9fd9026f453081ecc4ea746516ff68bce4f7fe786a95ee6144150cb5cfbeb8e7dc3eb69ca2aa05b4edcc1bf8f2b3733e69e5eb0e3b2e83a4c2f88d9a3e09e2f005dba46128d29cfeaff722ebf3a935a4613a9450e4d5cf730e6c0ed04aaf686c0bc5e332071d26fd33832176bdbc770f55ce13c6a73c5bd3fbf06bae0a8efcef1ea8e8a629d071859b805f529a534846253462a65cd7d2a25452fee91eeb8ad6cd6180a346e48463eab4dfd68006666b5676b3eea3771355d8b9acc3430530e203c27638ec9eab19f94793cf9c8d3060cb5e530cc400e60a4aed6898f931e306d558cfac86842726ebb8a863a6312e80aedcc26bc0a830c4b761604b41d4107ad59127cbc24a3b3de720f22943efd382923c14b20e06dc35f431869217fc7c9e814c87b35268520a230b9c19d6dc37d3d7bce008b2a7cf2fd59e0bea775058b9a3ac686fa83782ca8c48edcdccb843d07ca521d51b6658266f5d3045bea8288bd5438f2a0b6b91c7e392c9232e14a1421ee088ff09a66d9729739f0693a6ca5efc54d52865a3f6f2b68a7974c336645ee1aee29ef9c6e9eb42fdf50973cbc62a155f3ff673737ee0cd3cec116a3ec3ce39f0b549a327aedc622d3c4b3d3b3394a3293b4c0a7604aa5d0c0fd98134d25c66c8124b0216b35e8aa395bcf87fb218be2c4d8dcb664ecc00c4e77f6a0d782f9790f6c9ba3a6ccae8c869360f2a5c95c87a9fcd348a8c438631cce2b47dfb7669561f3b8b3b28072f5d57776ab2a072d5922dec1533bdd43c121ce6e6946cfa8afb718903093bda44f699338929de669c5327ab1ee3049dd0e3b2a7dffa84f57bce22eca852f8704c867c4f82c004e3a97e1566059d521c11e4c3474526650d83d3bcfac0faccd5dcef4798e1e7fc7e80d47c2baa0f5b5a63446c92ba07e43443e8631156e948b8ea4324b77ea5276a3a86100a7195c599e364e9e8b2a8702764aaaf23cb43e68d4ddb0d36c0d2abcf941c22bd66c925e16084a4fa07b54a8863b7f0e2896549ff9bc8bb19687e24f1054e6f3c1b739b4edfeaf5300f40c5d84d20d3a9659d09a21effad066af5e3469018333dae3f9e567fc89fea3d7695b30b7c69424547df65fd33f410e8e55fff38df8f0bda3654224ec22df3049a126bd1299f", 0x1000)

5.668461724s ago: executing program 0 (id=333):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xbd7a85ef7a8e8fcc}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000540)=""/213, 0xd5}], 0x2}, 0x1f00)
io_setup(0xaf, &(0x7f0000000100)=<r4=>0x0)
io_cancel(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f00000006c0)="7ee88caf70dbe1d5d70e67253974e10a9cdb01eda48363886a1974faa6e19220b3440271fe41f230449d9425d1cc607e8b81ef8a0aa2d672242ea73a25dd9e84897d192089c8bf09aabec827568c77ce9e0c80a25ebc5a28dd43872cf18132d7fc717758de2191af4c5dc6de929e4587815a4d36198f19170bc213396d540c477b495a145e3d5af9af7da47db6908f1ce34d59325a6a75126f49f64e2bacd56f969af570da1d74e7d4ec12be5801f1ac175519e8ec5ce2ad1290052991714165f6d307f1ac86d84f103ed6329e39852c326ea65be2e337fe8f8065e7f0df6feccd0cf0dcb7e9a466dea61023", 0xec, 0x8000000000000000, 0x0, 0x1, r1}, &(0x7f0000000800))
close(r1)
syz_open_dev$loop(0x0, 0x6, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x4, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xfffffffffffffff6, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0002000000010000000000000001410000001c001700000000000000004574683a73"], 0x38}}, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="091a679622e528", @ANYRESHEX=r6, @ANYBLOB=',\x00'])

5.627877631s ago: executing program 2 (id=334):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000040))

4.821226997s ago: executing program 2 (id=337):
unshare(0x400)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x3e8, {0x2, 0x11, 0x100}, 0x14, 0x0, 0x0, 0xfb, 0x8001, 0x6, 0xbf42, 0x20000008000007, 0x45, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x100000004, 0xb, 0x8000000000404, 0xffffffffffffffff, 0xfffffffffffffff7}}, 0xa0)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2)
socket$unix(0x1, 0x5, 0x0)
socket$kcm(0x11, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f0000000000))
fcntl$addseals(r0, 0x409, 0x3)

4.413756352s ago: executing program 1 (id=338):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x20008, 0x20000000001})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
pipe(&(0x7f0000000140))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)

4.086177928s ago: executing program 1 (id=339):
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
dup3(r0, r1, 0x0)
read$rfkill(r1, 0x0, 0x0)

4.084852432s ago: executing program 2 (id=340):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x4, 0x3, 0x2, 0x9a63})
ioctl(r2, 0x4048aecb, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], <r6=>0x0, 0xbb, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001ac0)={r11, &(0x7f0000000a00)='@,', &(0x7f0000001a00)=""/156}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x248c765a44487435, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0xa, 0x9, 0x0, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x400, 0x85, &(0x7f0000000140)=""/133, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x27, r5, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r4, 0x7, &(0x7f00000007c0)=[r7, r8, r4, r3, r11, r3], &(0x7f0000000800)=[{0x2, 0x5, 0x4, 0x9}, {0x5, 0x5, 0xd, 0x9}, {0x1, 0x3, 0xb, 0x9}, {0x1, 0x1, 0xb, 0x6}, {0x0, 0x4, 0x10}, {0x2, 0x2, 0xb, 0x2}, {0x2, 0x3, 0xb, 0x1}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.79346874s ago: executing program 0 (id=341):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, 0x0})

3.501205902s ago: executing program 1 (id=343):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x2)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x27, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/35}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

3.418863302s ago: executing program 4 (id=344):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000040))

3.404872266s ago: executing program 0 (id=345):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x1d})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x20008, 0x20000000001})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvfrom$unix(r4, 0x0, 0x0, 0x40012042, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x10001)
setreuid(0xffffffffffffffff, 0xee01)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000380)="b9f59e4d536219111cb82991eeac20aa64b0dd20ea6e0c126a9db0a599d52c320241059afd31956cb6dbde4c3a09b44c246b34e18e9746f747237208ff7e4031750f9526a2fed349378d69348e36df2904e3e55bd223d92cd71372b24a6634b0b7fd1b93ebe6454343b7d03481b130df96499ac1d7d5f8e9bc4266fa6f3b3924b18f623c41979ef7005a7182a3a4d2e2c130849656ff71993f28527e678d76", 0x9f}, {&(0x7f0000000440)="a4a71e040d2a535a9e8185ea1b2c534d4442f7b309d4347457f2a86782c74af7d1c8016dc52c3b8a", 0x28}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="0409bed90e553b76f3a2daf84774a3a75c7e561668e0e63d574a7c68d5dc8c115e74bbb0de54d0e8", 0x28}], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff4c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0xfffffb54, 0x9})
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0xa0de, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, {0xa, 0x4e21, 0xe1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1, {[0x7d1, 0x8, 0x87c, 0x4, 0x3, 0x8, 0x80000000]}}, 0x5c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x8000)
socket$inet6(0xa, 0xa, 0x8)

2.171313659s ago: executing program 4 (id=348):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

1.911204513s ago: executing program 0 (id=349):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x20008, 0x20000000001})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)

1.810474075s ago: executing program 0 (id=351):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xbd7a85ef7a8e8fcc}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000540)=""/213, 0xd5}], 0x2}, 0x1f00)
io_setup(0xaf, &(0x7f0000000100)=<r4=>0x0)
io_cancel(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f00000006c0)="7ee88caf70dbe1d5d70e67253974e10a9cdb01eda48363886a1974faa6e19220b3440271fe41f230449d9425d1cc607e8b81ef8a0aa2d672242ea73a25dd9e84897d192089c8bf09aabec827568c77ce9e0c80a25ebc5a28dd43872cf18132d7fc717758de2191af4c5dc6de929e4587815a4d36198f19170bc213396d540c477b495a145e3d5af9af7da47db6908f1ce34d59325a6a75126f49f64e2bacd56f969af570da1d74e7d4ec12be5801f1ac175519e8ec5ce2ad1290052991714165f6d307f1ac86d84f103ed6329e39852c326ea65be2e337fe8f8065e7f0df6feccd0cf0dcb7e9a466dea61023", 0xec, 0x8000000000000000, 0x0, 0x1, r1}, &(0x7f0000000800))
close(r1)
syz_open_dev$loop(0x0, 0x6, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x4, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xfffffffffffffff6, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0002000000010000000000000001410000001c001700000000000000004574683a73"], 0x38}}, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="091a679622e528", @ANYRESHEX=r6, @ANYBLOB=',\x00'])

1.574334772s ago: executing program 1 (id=352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0xffffffffffffff98, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x0, 0x1800}, {0x1, 0x9130, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x989680})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x60]}}, 0x0, 0x2d, 0x0, 0x4}, 0x28)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r4 = dup(r2)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)

1.354510327s ago: executing program 2 (id=355):
setresuid(0x0, 0x0, 0xee01)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c030109021b0001000000040904080001030000000905", @ANYBLOB="9fef"], 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0xf18, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006)
r3 = syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r3, r3, 0x13)
socket$kcm(0x10, 0x2, 0x0)
inotify_init1(0x80000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000004100070127bd7000fefdffff017c000008000587993fef000c3b96ce5792996ba931c2a64ace01800600060018ce797c8da39f723ad3d41a86e826cacb2dc6be81315b00f27d22d6b18a9ee208cfa2f8fe1ab6fa4ab665f6b02c7bc66b34ef89cae1a69c"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0xfd28e394f0ad1284)
r6 = socket$inet(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)

1.283826898s ago: executing program 3 (id=356):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r4, 0x10e, 0x8, &(0x7f0000000080)=""/11, &(0x7f00000000c0)=0xb)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'])
socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1)
r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan0\x00'})

1.219565553s ago: executing program 4 (id=357):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf271, @loopback, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x11, 0x5}], 0x10}}], 0x2, 0x44055)

1.217121907s ago: executing program 3 (id=358):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)

929.54653ms ago: executing program 3 (id=359):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x1d})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x20008, 0x20000000001})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvfrom$unix(r4, 0x0, 0x0, 0x40012042, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x10001)
setreuid(0xffffffffffffffff, 0xee01)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000380)="b9f59e4d536219111cb82991eeac20aa64b0dd20ea6e0c126a9db0a599d52c320241059afd31956cb6dbde4c3a09b44c246b34e18e9746f747237208ff7e4031750f9526a2fed349378d69348e36df2904e3e55bd223d92cd71372b24a6634b0b7fd1b93ebe6454343b7d03481b130df96499ac1d7d5f8e9bc4266fa6f3b3924b18f623c41979ef7005a7182a3a4d2e2c130849656ff71993f28527e678d76", 0x9f}, {&(0x7f0000000440)="a4a71e040d2a535a9e8185ea1b2c534d4442f7b309d4347457f2a86782c74af7d1c8016dc52c3b8a", 0x28}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="0409bed90e553b76f3a2daf84774a3a75c7e561668e0e63d574a7c68d5dc8c115e74bbb0de54d0e8", 0x28}], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0xfffffb54, 0x9})
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0xa0de, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, {0xa, 0x4e21, 0xe1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1, {[0x7d1, 0x8, 0x87c, 0x4, 0x3, 0x8, 0x80000000]}}, 0x5c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x8000)
socket$inet6(0xa, 0xa, 0x8)

821.420879ms ago: executing program 4 (id=360):
open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8)
setns(0xc9, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0x0, 0x810}, 0x24004014)

655.664457ms ago: executing program 1 (id=361):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x20008, 0x20000000001})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)

626.03205ms ago: executing program 3 (id=362):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000080000000100000002"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)
syz_usb_disconnect(r0)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

622.970873ms ago: executing program 1 (id=363):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, &(0x7f0000000140), 0x0, 0x14, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @random="f7172475a6fd"})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x60c00, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005dc0)={0x18, 0x4f, 0x30d, 0x0, 0x0, "", [@nested={0x6, 0x8a, 0x0, 0x1, [@generic="0639"]}]}, 0x18}], 0x1, 0x0, 0x0, 0x40850}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, 0x1000000, 0xffffffffffffcb0e})
r7 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000200))
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000540), 0x700000000000000)

388.539513ms ago: executing program 4 (id=364):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xf5}], 0x400000000000172, 0x4000000)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x29c0}, 0x1c)
sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf271, @loopback, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x11, 0x5}], 0x10}}], 0x2, 0x44055)

386.849486ms ago: executing program 0 (id=365):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x30020)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/252)
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83b0fa, 0xc574450d1af1b8ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_ISOLATED={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x4001, 0x0)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0xffffffff)

151.240684ms ago: executing program 3 (id=366):
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0), 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x212f0)
r6 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setuid(0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, r2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000d00)={{<r7=>r6, &(0x7f0000000080)='syz', 0x14400, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x1ff]}, {0x1, 0x2, 0x31, 0x6}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x7}, 0xa, &(0x7f0000000bc0)=[{0x1, 0x9, &(0x7f0000000240)='big_key\x00', &(0x7f0000000300)="c9b6cbb631372558bcfbcd720aa122c6d38869b1c1f3c17464e87482a132555aa2123a5ccd4fb773c2cae214530245763b420be56b676dab28ba8f8e881f1fed60ba219f4eafe1c95f79c93ac3803febf4b8b192", 0x54, 0x32}, {0x2, 0x0, &(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)="915819f481c5992a819903332493d89edd273badac14d9ab2365c1952ae1adb6187a5f6dc6d881e6fd0d4e3da595ada5bff1c0f6a26c5f9136759aee5cb2cd865e7de2a0576c93001831cf76edfb126c7d00f2149db3ea856efe49030cc94b54c1b5154ab3a0e51a382e9725ae8bf6c7c52423c41654866624ed5f2d6b0ea0cc1e", 0x81}, {0x3, 0x5, &(0x7f0000000480)='\x00', &(0x7f0000000540)="3a0af200c3b04ee84c0b175d736d276777d99969c55f2b5a999766293e545ee14cf3f1d3a62c4f35ffc79119b99eab3ad3090e86b906ab28ab1566f0a6246154368c19407c40e120559238b3b35cc0772dfb18f3eca75b176aa8881459db7cb79fa28d573d58c07f086389e9a2c8dbfcb3657b429835724d65525e35450efd8eb7e3daab4f35bc488b0bc7f57838ecdc039e2728133f4401a07268fae21e210f13", 0xa1, 0x2}, {0x1, 0xc29, &(0x7f0000000600)='syz', &(0x7f0000000640)="928ec87c7a60f8c743d0c0bff38bafed47c0e917f24194115991319ecac96697a9ec581254f9ea6057a1e14e9a4c6153f8d7cbdb8255ede65a3f3dda1b83dfb383f2d46bcf01ca497f6966a0c424ae35763c5f00864ceccf55aefc6fc07268191da22b87b81b56a5403692f5c4c0eb66087f6720dabbefafcf96b0949765f3827abaaf2d340df6642c5d4240d1e60cef2e9f64778f2459043806350396fcd2832564efc8fd978039b0892df8b2492b12001712371b93b57ca2503f08534e4affcd24677ce52b1bf7237d0eedc2499150a835174866b1378a8538d0c2c84613bce1e5021b9a4f1498264c97243e76d7f509a47b69", 0xf4, 0x8}, {0x3, 0x2, &(0x7f0000000740)='W\x89\x00', &(0x7f0000000780), 0x0, 0x10}, {0x1, 0x6, &(0x7f0000000800)='.\x00', &(0x7f0000000840)="e7f42e70b21d296b76dc79d06beff3d6780ffdef838cb70a5de79fe01374e5ea37fbbb5253afe6c950fa53bae0847757a7dc40321fa3b2627cd06e8953a67311270359ac216b717006267104a7a12862c76277a9566c99ae796059e7145dee4330db", 0x62, 0x20}, {0x3, 0xf, &(0x7f00000008c0)='syz', &(0x7f0000000900)="d598dfbcc4e9034586f5dc36", 0xc, 0x28}, {0x1, 0x3, &(0x7f0000000940)='big_key\x00', &(0x7f0000000980)="f8d9a9b7551bc7", 0x7, 0x2a}, {0x1, 0x4b2, &(0x7f00000009c0)='big_key\x00', &(0x7f0000000a00)="2d0854acc2a5cd325d2d7429cd463600ab8b9659e115e3e8bedab0662d96a67e0cda3fbde38f40d83b468b076a5c1f02e9f4c17eab96ca8550c99e3e957b2ab30216a67015912db05ac61a9e753cc070c6da280cd14271c47050e85a57938db2d4853a52b1c005bbdb6fd64584519851c59c3949eb181bcc8a76a85b02b2e8c9bd3dde02a2e2d29a6b73cac396f929227c1645dd331d27884ddeb2d6d4b988355009b6aa0e83da95cf7cf554e4fa21068c03f624753758", 0xb7, 0x30}, {0x3, 0x7, &(0x7f0000000dc0)='#,\xdb\x1e4\xf5t\xc1l\x88q\xa2\x99\xaa\xb7\xf8n{\x1c\x13\x986\xa0\x0e1?Y\x9bH+\xe4\xb8\x81\xb1<\xc2\xb4\x92\xf74\x1d\xca\xd2%\xe6\xd7\xf5)', &(0x7f0000000b00)="4818b20ba466c664158ce3bf3369b5437c992a94173b2c10eb507aade8bbcea0ed703571b718f68cc7fdc8136accc52ea144e6e34409523618a536f2627bcd96ab21a59f2218633827e491b1fda29a63ab0f4ad2721b271380e0b95a2bbbfbaf851405813fab03ea0a925730f91bd2d5ad1720db1be082f3ee6c7b052ee510a946863477091e20e186c8d014cff9826236fe4d2c57b45411b6ea2642c6d073870f20e5b9f82209220c", 0xa9}]})
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000d80)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)

150.959671ms ago: executing program 4 (id=367):
socket(0x2, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
socket(0x2, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async)
dup(r0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async)
write$binfmt_aout(r1, 0x0, 0xffffffdb) (async)

0s ago: executing program 3 (id=368):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000d40), 0x7, 0x2000)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="00041400000014238e3215aaea0c7b54b1513a790d734ebdd3dd0ab054697f9c666772"], &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, &(0x7f0000000a40)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf6, "b29d85e2f281be9213b00e07b9f6e642"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0xff52}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0xf0f, 0x66, [0xc030, 0xff000f]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0xd, 0xff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x20, 0x7, 0x2, 0x85}]}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xa5, 0x3, "eede6e88", "32e09267"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5f, 0x4, 0x2, 0x6, 0x1e, 0x9980, 0x3}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b80)={0x40, 0x30, 0x3d, "44ea3b46f7a3bf261f9f98c5a24698f7d05d811d5bea32b56e414bcf291c8b5b57fff0ebb4613b8f6d86effe70043ada20338cd396596ea26283fbaeac"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xe1}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x98363394d8d65d31, 0x1}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d80)={0x40, 0xb, 0x2, 'q^'}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x19, 0x2, '^]'}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0xf2}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x6}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0xa7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x9, 0x60, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x25, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1e, 0x1ff}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x206, 0x6, 0x1, 0x8, 0x4, 0x44, 0xfc47, 0xffff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x81, 0x9, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x40, 0x4f, {0xa, 0x25, 0x25, 0xe, 0x5, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x12d, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x7, 0x10, {0xa, 0x25, 0x25, 0x7f, 0xc2, 0x7}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x4, 0x3, 0x1, 0x8, 0x6}, 0x2c, &(0x7f0000000200)={0x5, 0xf, 0x2c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x20, 0xa}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x6, 0xf0f, 0x6, [0xff0000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x4, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x96, &(0x7f0000000240)=@string={0x96, 0x3, "0f28568a6f09cb3ad41cc37d868eba35b884a95b4ec12f09a2c3800513b095d0b85fd8da96e2cbc311265b36342049388663463d76bfb17678e2328cd54daf2b3564671ba0c7e69debe7593a14ea69cd1c63b2b95a99c8cf8a40b7b35f6490a20ef8cc9ce17ba5588f00518247d209a5e755135529c1f1fa7a9762f5fcf07a17aa01b5100b0dea1bb44bdf26dc004998df78e880"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100b}}]})
r1 = syz_usb_connect$uac3(0x3, 0x123, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x159, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x3, 0x1, 0x58, 0x0, 0x81, {0x8, 0xb, 0x2, 0x2, 0x1, 0x21, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x68, 0x9}, [@multiply_unit={0xb, 0x24, 0xd, 0x2, 0x33, 0x4, 0x200}, @selector_unit={0xc, 0x24, 0xc, 0x4, 0x7, "d3b59495cda1f8"}, @multiply_unit={0xb, 0x24, 0xd, 0x6c, 0x3, 0x4a2, 0x3}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x204, 0x6, 0x18, 0x7, 0xfff, 0x0, 0x4, 0xfffa}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x100, 0x4, 0xd, 0x0, 0x6, 0x7078, 0x2, 0x5}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x6, 0x1, 0xfb, 0xffffffff, 0x9, 0x6, 0x3ff, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xdd}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x5, 0x3, {0xa, 0x25, 0x25, 0x6, 0xf, 0x4dcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x80}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x1, 0x8, 0x5e, "a35b299e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x40, 0x6, 0x6, 0xa}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xc0, 0x6, 0x7, "0ed26da57fb5"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x72fe, 0x9, 0x10, "0074214bb1d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x14, 0xc, {0xa, 0x25, 0x25, 0x6, 0x6, 0x58}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x7, 0x8, 0x97, 0x8, 0xbb}, 0x1c, &(0x7f0000000540)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6bb1ee39702601c54a7ce2da60112a62"}]}, 0x6, [{0x34, &(0x7f0000000580)=@string={0x34, 0x3, "e91faafe32a15a40cff0dcd163522f3c0c5bc285ac647c09f0bb8da4c8a52b2958360956a880d975995b9bbc638e1598b7bd"}}, {0x7a, &(0x7f00000006c0)=@string={0x7a, 0x3, "933118db275043340703ecf2a354b42543f59a02901348406bfebd8c2996d4b54be34469641ea04eeddc0db4969f529f8ae80a3a6ad6358d8537e9c1bac32ba8334794b86d29b955418b5ecd5dccb91cad8d69c9f5f8a03081e011621d848711d71aea1e67f314292490f636731d2988af015083eab29fe6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x420}}, {0xbd, &(0x7f0000000780)=@string={0xbd, 0x3, "270407bb367fde7a7829cf559d60dbea0abafb6e5fb21b135e23ad975dcdc70c195dbee5833cbfb0ad84a89ccc3119c5b73bc2c93dcc70d20d1eadf04008a9a3053a5d39ce90c7d93396ba8d504bd78553c266689ef0ef7876d13ba7451c493d3d6aa6e602d1ac8a80cbf45f46edba3e8cc582e1f095a8fb72b965cf700725a9f4be410e5570577b243bdb73405a83a9b55a271c9ae010ae05303f23fc65bb593c4a56ed930beb95a491e54c8f0ddb776ffc1a40b02de21865271f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x445}}]})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts.
[   91.338790][ T5573] cgroup: Unknown subsys name 'net'
[   91.578560][ T5573] cgroup: Unknown subsys name 'cpuset'
[   91.623630][ T5573] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.116394][   T10] cfg80211: failed to load regulatory.db
[   93.711155][ T5573] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   96.520237][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.548500][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.576951][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.582282][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.601777][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.613038][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.623654][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.624522][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.654433][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.659268][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.661440][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.675072][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.680245][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.697784][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.713732][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.714484][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.723663][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.728591][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.728685][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.741454][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.748672][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.787031][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.806465][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.809819][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.829168][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.796639][ T4902] Bluetooth: hci1: command tx timeout
[   99.033382][   T59] Bluetooth: hci3: command tx timeout
[   99.033382][ T4902] Bluetooth: hci0: command tx timeout
[   99.113303][ T4902] Bluetooth: hci4: command tx timeout
[   99.113431][   T59] Bluetooth: hci2: command tx timeout
[   99.809209][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.810475][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.811291][ T5587] bridge_slave_0: entered allmulticast mode
[   99.814501][ T5587] bridge_slave_0: entered promiscuous mode
[   99.895063][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.895167][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.895341][ T5587] bridge_slave_1: entered allmulticast mode
[   99.897484][ T5587] bridge_slave_1: entered promiscuous mode
[   99.951521][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.951629][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.951755][ T5589] bridge_slave_0: entered allmulticast mode
[   99.957987][ T5589] bridge_slave_0: entered promiscuous mode
[   99.990226][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.990385][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.990586][ T5588] bridge_slave_0: entered allmulticast mode
[  100.007379][ T5588] bridge_slave_0: entered promiscuous mode
[  100.072455][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.072583][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.078892][ T5589] bridge_slave_1: entered allmulticast mode
[  100.089526][ T5589] bridge_slave_1: entered promiscuous mode
[  100.102583][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.102706][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.104192][ T5588] bridge_slave_1: entered allmulticast mode
[  100.112699][ T5588] bridge_slave_1: entered promiscuous mode
[  100.147232][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.147383][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.147561][ T5585] bridge_slave_0: entered allmulticast mode
[  100.149661][ T5585] bridge_slave_0: entered promiscuous mode
[  100.151194][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.151316][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.151922][ T5586] bridge_slave_0: entered allmulticast mode
[  100.159938][ T5586] bridge_slave_0: entered promiscuous mode
[  100.238266][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.238564][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.238711][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.238901][ T5585] bridge_slave_1: entered allmulticast mode
[  100.241100][ T5585] bridge_slave_1: entered promiscuous mode
[  100.242529][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.242674][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.257051][ T5586] bridge_slave_1: entered allmulticast mode
[  100.264820][ T5586] bridge_slave_1: entered promiscuous mode
[  100.337071][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.380232][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.393428][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.449331][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.454714][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.497696][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.508761][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.559369][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.563453][ T5587] team0: Port device team_slave_0 added
[  100.588149][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.651550][ T5587] team0: Port device team_slave_1 added
[  100.672653][ T5589] team0: Port device team_slave_0 added
[  100.680801][ T5588] team0: Port device team_slave_0 added
[  100.737127][ T5589] team0: Port device team_slave_1 added
[  100.739204][ T5588] team0: Port device team_slave_1 added
[  100.741278][ T5585] team0: Port device team_slave_0 added
[  100.775112][ T5586] team0: Port device team_slave_0 added
[  100.815945][ T5585] team0: Port device team_slave_1 added
[  100.817147][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.817159][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.817180][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.820896][ T5586] team0: Port device team_slave_1 added
[  100.877772][   T59] Bluetooth: hci1: command tx timeout
[  100.913075][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.913089][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.913109][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.970574][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.970588][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.970607][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.971833][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.971847][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.971876][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.091563][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.091582][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.091611][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.103856][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.103907][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.103982][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.112931][   T59] Bluetooth: hci0: command tx timeout
[  101.112961][   T59] Bluetooth: hci3: command tx timeout
[  101.116428][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.116470][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.116566][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.152869][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.152916][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.153000][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.200138][ T4902] Bluetooth: hci2: command tx timeout
[  101.200223][ T4902] Bluetooth: hci4: command tx timeout
[  101.683183][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.683202][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.683243][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.742605][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.742621][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.742642][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.880857][ T5587] hsr_slave_0: entered promiscuous mode
[  101.882141][ T5587] hsr_slave_1: entered promiscuous mode
[  101.983839][ T5588] hsr_slave_0: entered promiscuous mode
[  101.985376][ T5588] hsr_slave_1: entered promiscuous mode
[  101.986280][ T5588] debugfs: 'hsr0' already exists in 'hsr'
[  101.986373][ T5588] Cannot create hsr debugfs directory
[  102.017066][ T5589] hsr_slave_0: entered promiscuous mode
[  102.018375][ T5589] hsr_slave_1: entered promiscuous mode
[  102.019503][ T5589] debugfs: 'hsr0' already exists in 'hsr'
[  102.019529][ T5589] Cannot create hsr debugfs directory
[  102.081233][ T5585] hsr_slave_0: entered promiscuous mode
[  102.082283][ T5585] hsr_slave_1: entered promiscuous mode
[  102.094661][ T5585] debugfs: 'hsr0' already exists in 'hsr'
[  102.094682][ T5585] Cannot create hsr debugfs directory
[  102.102224][ T5586] hsr_slave_0: entered promiscuous mode
[  102.107343][ T5586] hsr_slave_1: entered promiscuous mode
[  102.110473][ T5586] debugfs: 'hsr0' already exists in 'hsr'
[  102.110547][ T5586] Cannot create hsr debugfs directory
[  102.954106][   T59] Bluetooth: hci1: command tx timeout
[  103.204794][   T59] Bluetooth: hci3: command tx timeout
[  103.204827][   T59] Bluetooth: hci0: command tx timeout
[  103.242712][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.272953][ T4902] Bluetooth: hci4: command tx timeout
[  103.273011][ T4902] Bluetooth: hci2: command tx timeout
[  103.327254][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.331237][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.377251][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.382854][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.407171][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.440579][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.467480][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.608646][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.649208][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.652720][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.700306][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.711959][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.738641][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.767893][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.796720][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.948794][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.988215][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.004372][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.038459][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.051508][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.079305][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.117267][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  104.149032][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.296219][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.340185][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.369170][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.407049][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.411836][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.436639][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.469458][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  104.498930][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.614760][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.701569][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.741737][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.752546][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.797549][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.817202][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.836612][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.860053][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  104.898070][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.925609][ T5587] 8021q: adding VLAN 0 to HW filter on device team0
[  104.994450][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.995059][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.035061][   T59] Bluetooth: hci1: command tx timeout
[  105.074741][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.074866][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.102474][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.227623][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[  105.271897][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.273522][   T59] Bluetooth: hci0: command tx timeout
[  105.273550][   T59] Bluetooth: hci3: command tx timeout
[  105.308797][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.308986][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.364072][   T59] Bluetooth: hci4: command tx timeout
[  105.364123][ T4902] Bluetooth: hci2: command tx timeout
[  105.394000][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.394108][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.479658][ T5585] 8021q: adding VLAN 0 to HW filter on device team0
[  105.508736][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.541332][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.541547][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.638495][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.638778][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.741901][ T5586] 8021q: adding VLAN 0 to HW filter on device team0
[  105.816467][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.816605][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.847468][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.906373][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.906537][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.041874][ T5588] 8021q: adding VLAN 0 to HW filter on device team0
[  106.171260][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.171356][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.380061][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.380312][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.666475][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.261448][ T5587] veth0_vlan: entered promiscuous mode
[  107.376711][ T5587] veth1_vlan: entered promiscuous mode
[  107.397574][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.755460][ T5587] veth0_macvtap: entered promiscuous mode
[  107.794998][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.798330][ T5587] veth1_macvtap: entered promiscuous mode
[  107.931231][ T5589] veth0_vlan: entered promiscuous mode
[  108.014162][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.021945][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.047258][ T5589] veth1_vlan: entered promiscuous mode
[  108.110623][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.370348][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.400918][ T5585] veth0_vlan: entered promiscuous mode
[  108.698782][ T5585] veth1_vlan: entered promiscuous mode
[  108.708387][ T5589] veth0_macvtap: entered promiscuous mode
[  108.797534][ T5589] veth1_macvtap: entered promiscuous mode
[  108.850309][ T5586] veth0_vlan: entered promiscuous mode
[  108.942323][   T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.942355][   T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.993057][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.997269][ T5586] veth1_vlan: entered promiscuous mode
[  109.060191][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.136172][ T5585] veth0_macvtap: entered promiscuous mode
[  109.165546][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.165575][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.171555][ T5585] veth1_macvtap: entered promiscuous mode
[  109.331185][ T5588] veth0_vlan: entered promiscuous mode
[  109.574937][ T5586] veth0_macvtap: entered promiscuous mode
[  109.646035][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.702174][ T5588] veth1_vlan: entered promiscuous mode
[  109.778482][ T5586] veth1_macvtap: entered promiscuous mode
[  109.856924][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.909973][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.909997][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.010128][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.215049][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.271362][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.271384][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.350840][ T5588] veth0_macvtap: entered promiscuous mode
[  110.641661][ T5588] veth1_macvtap: entered promiscuous mode
[  110.806555][   T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  110.935475][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.935498][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.942551][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.025599][   T31] usb 2-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=b0.f1
[  111.055013][   T31] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  111.074238][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.074271][   T31] usb 2-1: Product: syz
[  111.074289][   T31] usb 2-1: Manufacturer: syz
[  111.074306][   T31] usb 2-1: SerialNumber: syz
[  111.623418][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.707383][ T2322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.782297][   T31] usb 2-1: Could not find all expected endpoints
[  111.851997][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.852020][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.906993][ T5706] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  111.933824][   T31] usb 2-1: USB disconnect, device number 2
[  112.080610][ T5706] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  112.163221][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.163252][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  112.163282][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  112.217432][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.217462][ T5706] usb 4-1: Product: syz
[  112.217478][ T5706] usb 4-1: Manufacturer: syz
[  112.217499][ T5706] usb 4-1: SerialNumber: syz
[  112.266840][ T5706] usb 4-1: config 0 descriptor??
[  112.328434][ T5706] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  112.473523][    C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  112.601357][ T5706] usb 4-1: USB disconnect, device number 2
[  112.601449][    C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19
[  112.770796][ T5791] FAULT_INJECTION: forcing a failure.
[  112.770796][ T5791] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  112.770845][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  112.770873][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.770892][ T5791] Call Trace:
[  112.770899][ T5791]  <TASK>
[  112.770907][ T5791]  dump_stack_lvl+0xe8/0x150
[  112.770946][ T5791]  should_fail_ex+0x467/0x600
[  112.770977][ T5791]  _copy_from_user+0x2d/0xb0
[  112.770999][ T5791]  kstrtouint_from_user+0xd6/0x180
[  112.771028][ T5791]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  112.771055][ T5791]  ? __lock_acquire+0x683/0x2ce0
[  112.771086][ T5791]  proc_fail_nth_write+0x8e/0x210
[  112.771108][ T5791]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  112.771137][ T5791]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  112.771159][ T5791]  vfs_write+0x29f/0xbb0
[  112.771187][ T5791]  ? __pfx_vfs_write+0x10/0x10
[  112.771211][ T5791]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  112.771234][ T5791]  ? lockdep_hardirqs_on+0x7a/0x110
[  112.771255][ T5791]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  112.771277][ T5791]  ? mutex_lock_nested+0x152/0x1d0
[  112.771305][ T5791]  ? fdget_pos+0x252/0x320
[  112.771333][ T5791]  ksys_write+0x156/0x270
[  112.771368][ T5791]  ? __pfx_ksys_write+0x10/0x10
[  112.771396][ T5791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.771415][ T5791]  do_syscall_64+0x174/0x580
[  112.771436][ T5791]  ? trace_irq_disable+0x3b/0x140
[  112.771464][ T5791]  ? clear_bhb_loop+0x70/0xc0
[  112.771487][ T5791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.771506][ T5791] RIP: 0033:0x7f8f7168e90e
[  112.771532][ T5791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  112.771546][ T5791] RSP: 002b:00007f8f6f904fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  112.771572][ T5791] RAX: ffffffffffffffda RBX: 00007f8f6f9056c0 RCX: 00007f8f7168e90e
[  112.771586][ T5791] RDX: 0000000000000001 RSI: 00007f8f6f9050a0 RDI: 0000000000000004
[  112.771597][ T5791] RBP: 00007f8f6f905090 R08: 0000000000000000 R09: 0000000000000000
[  112.771607][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.771666][ T5791] R13: 00007f8f71956128 R14: 00007f8f71956090 R15: 00007fff0389e388
[  112.771700][ T5791]  </TASK>
[  112.910314][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.910377][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.220710][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.220731][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.386703][ T5804] netlink: 328 bytes leftover after parsing attributes in process `syz.1.12'.
[  114.645686][ T1311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.722111][ T2322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.722134][ T2322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.754826][ T5811] 9p: Bad value for 'rfdno'
[  114.755305][ T5811] 9p: Bad value for 'rfdno'
[  114.817787][ T5776] IPVS: starting estimator thread 0...
[  116.806203][ T5818] =======================================================
[  116.806203][ T5818] WARNING: The mand mount option has been deprecated and
[  116.806203][ T5818]          and is ignored by this kernel. Remove the mand
[  116.806203][ T5818]          option from the mount to silence this warning.
[  116.806203][ T5818] =======================================================
[  116.825229][ T5818] overlayfs: overlapping lowerdir path
[  117.036208][ T5815] IPVS: using max 10 ests per chain, 24000 per kthread
[  117.102830][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.122833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.132817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.142821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.152822][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.556813][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.556835][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.644845][ T1321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.684202][ T1321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.692956][   T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  117.912639][   T31] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  117.949321][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.949386][   T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.949411][   T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.949435][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.949480][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.991282][ T1321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.993952][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.546281][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.548247][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.791685][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[  118.812420][ T5825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'.
[  119.240393][ T1018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993056][ T1346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993102][ T1346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993133][ T1346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993165][ T1346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993197][ T1346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993231][ T1346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993269][ T1346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993304][ T1346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993339][ T1346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993376][ T1346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993411][ T1346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.720132][   T31] gud 3-1:1.0: probe with driver gud failed with error -71
[  120.830288][ T5826] 9p: Bad value for 'rfdno'
[  120.886722][   T31] usb 3-1: USB disconnect, device number 2
[  123.901565][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  124.378288][ T5888] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  125.887651][ T5905] loop5: detected capacity change from 0 to 7
[  126.032708][ T5905] Dev loop5: unable to read RDB block 7
[  126.032886][ T5905]  loop5: unable to read partition table
[  126.033115][ T5905] loop5: partition table beyond EOD, truncated
[  126.034783][ T5905] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  126.267124][ T5720] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  126.423672][ T5720] usb 5-1: Using ep0 maxpacket: 8
[  126.424521][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  126.459947][ T5720] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  126.459976][ T5720] usb 5-1: Product: syz
[  126.459992][ T5720] usb 5-1: Manufacturer: syz
[  126.460008][ T5720] usb 5-1: SerialNumber: syz
[  126.731132][ T5720] usb 5-1: config 0 descriptor??
[  126.825737][ T5916] FAULT_INJECTION: forcing a failure.
[  126.825737][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.825789][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  126.825811][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  126.825821][ T5916] Call Trace:
[  126.825828][ T5916]  <TASK>
[  126.825836][ T5916]  dump_stack_lvl+0xe8/0x150
[  126.825884][ T5916]  should_fail_ex+0x467/0x600
[  126.825924][ T5916]  _copy_from_user+0x2d/0xb0
[  126.825944][ T5916]  br_ioctl_stub+0x3df/0xd60
[  126.825969][ T5916]  ? do_vfs_ioctl+0x1184/0x1550
[  126.825992][ T5916]  ? __pfx_br_ioctl_stub+0x10/0x10
[  126.826030][ T5916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  126.826053][ T5916]  ? lockdep_hardirqs_on+0x7a/0x110
[  126.826074][ T5916]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  126.826096][ T5916]  ? mutex_lock_nested+0x152/0x1d0
[  126.826124][ T5916]  ? sock_ioctl+0x4bb/0x7f0
[  126.826151][ T5916]  ? __pfx_br_ioctl_stub+0x10/0x10
[  126.826172][ T5916]  sock_ioctl+0x4e4/0x7f0
[  126.826200][ T5916]  ? __pfx_sock_ioctl+0x10/0x10
[  126.826228][ T5916]  ? __fget_files+0x2a/0x420
[  126.826247][ T5916]  ? __fget_files+0x3a8/0x420
[  126.826262][ T5916]  ? __fget_files+0x2a/0x420
[  126.826282][ T5916]  ? bpf_lsm_file_ioctl+0x9/0x20
[  126.826309][ T5916]  ? __pfx_sock_ioctl+0x10/0x10
[  126.826339][ T5916]  __se_sys_ioctl+0xff/0x170
[  126.826362][ T5916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.826383][ T5916]  do_syscall_64+0x174/0x580
[  126.826408][ T5916]  ? trace_irq_disable+0x3b/0x140
[  126.826436][ T5916]  ? clear_bhb_loop+0x70/0xc0
[  126.826457][ T5916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.826475][ T5916] RIP: 0033:0x7fbd964fe0d9
[  126.826498][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.826513][ T5916] RSP: 002b:00007fbd94756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.826532][ T5916] RAX: ffffffffffffffda RBX: 00007fbd96785fa0 RCX: 00007fbd964fe0d9
[  126.826545][ T5916] RDX: 0000200000000040 RSI: 0000000000008941 RDI: 0000000000000003
[  126.826556][ T5916] RBP: 00007fbd94756090 R08: 0000000000000000 R09: 0000000000000000
[  126.826566][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.826576][ T5916] R13: 00007fbd96786038 R14: 00007fbd96785fa0 R15: 00007ffe32345bb8
[  126.826604][ T5916]  </TASK>
[  127.198410][ T5720] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  127.682225][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.779242][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.875996][ T5720] gspca_zc3xx: reg_r err -110
[  127.876068][ T5720] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  129.142801][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  129.627153][ T5706] usb 5-1: USB disconnect, device number 2
[  133.503958][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.504061][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  134.187901][ T5976] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.207109][ T5721] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  136.064551][ T5721] usb 3-1: Using ep0 maxpacket: 32
[  136.224421][ T5721] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[  136.224488][ T5721] usb 3-1: too many configurations: 22, using maximum allowed: 8
[  136.238599][ T5721] usb 3-1: config index 0 descriptor too short (asked for 9, got 0)
[  136.238663][ T5721] usb 3-1: can't read configurations, error -22
[  136.464072][ T5721] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.582920][ T5720] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  136.652895][ T5721] usb 3-1: Using ep0 maxpacket: 32
[  136.653717][ T5721] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[  136.653774][ T5721] usb 3-1: too many configurations: 22, using maximum allowed: 8
[  136.660324][ T5721] usb 3-1: config index 0 descriptor too short (asked for 9, got 0)
[  136.660365][ T5721] usb 3-1: can't read configurations, error -22
[  136.774236][ T5720] usb 2-1: Using ep0 maxpacket: 8
[  136.777195][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  136.821345][ T5721] usb usb3-port1: attempt power cycle
[  137.894247][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.895712][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.994498][ T5720] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  137.994530][ T5720] usb 2-1: Product: syz
[  137.994546][ T5720] usb 2-1: Manufacturer: syz
[  137.994561][ T5720] usb 2-1: SerialNumber: syz
[  138.006200][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  138.130671][ T5720] usb 2-1: config 0 descriptor??
[  138.180399][ T5721] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  138.201865][ T5721] usb 3-1: device descriptor read/8, error -71
[  138.235387][   T31] usb 4-1: Using ep0 maxpacket: 16
[  138.236544][   T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  138.238779][   T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  138.238804][   T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.238823][   T31] usb 4-1: config 0 has no interface number 0
[  138.286883][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.286912][   T31] usb 4-1: Product: syz
[  138.286928][   T31] usb 4-1: Manufacturer: syz
[  138.286942][   T31] usb 4-1: SerialNumber: syz
[  138.401535][   T31] usb 4-1: config 0 descriptor??
[  138.423808][ T6028] Zero length message leads to an empty skb
[  138.425660][   T31] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  138.425707][   T31] uvcvideo 4-1:0.105: No valid video chain found.
[  138.453063][ T5720] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  138.484165][ T5721] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  138.506424][ T5721] usb 3-1: device descriptor read/8, error -71
[  138.615301][ T5721] usb usb3-port1: unable to enumerate USB device
[  138.644848][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[  138.675203][ T5720] gspca_zc3xx: reg_w_i err -71
[  138.675308][ T5720] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  138.892560][ T5720] usb 2-1: USB disconnect, device number 3
[  139.170065][ T6037] ubi0: attaching mtd0
[  139.374727][ T6037] ubi0: scanning is finished
[  139.374750][ T6037] ubi0: empty MTD device detected
[  139.648147][ T4902] Bluetooth: hci2: unknown advertising packet type: 0x73
[  139.648190][ T4902] Bluetooth: hci2: Dropping invalid advertising data
[  139.648211][ T4902] Bluetooth: hci2: Malformed LE Event: 0x02
[  139.790554][    T9] usb 4-1: USB disconnect, device number 3
[  140.382700][    C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  140.564632][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  140.694652][   T31] usb 3-1: device descriptor read/64, error -71
[  140.747701][ T5575] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  140.820278][   T37] audit: type=1326 audit(1787020423.495:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.832232][   T37] audit: type=1326 audit(1787020423.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.914094][   T37] audit: type=1326 audit(1787020423.605:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.914213][   T37] audit: type=1326 audit(1787020423.685:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.914268][   T37] audit: type=1326 audit(1787020423.685:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.914374][   T37] audit: type=1326 audit(1787020423.695:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.915185][   T37] audit: type=1326 audit(1787020423.695:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  140.958617][   T37] audit: type=1326 audit(1787020423.695:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8f716ce0d9 code=0x7ffc0000
[  141.043695][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  141.087093][ T6037] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  141.264847][   T31] usb 3-1: device descriptor read/64, error -71
[  141.373372][   T31] usb usb3-port1: attempt power cycle
[  141.379032][   T37] audit: type=1326 audit(1787020424.155:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f716c7e57 code=0x7ffc0000
[  141.379522][   T37] audit: type=1326 audit(1787020424.155:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f7166f459 code=0x7ffc0000
[  141.737532][ T6025] trusted_key: encrypted_key: key user:syz not found
[  141.814287][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.840798][   T31] usb 3-1: device descriptor read/8, error -71
[  142.075408][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  142.102002][   T31] usb 3-1: device descriptor read/8, error -71
[  142.212610][   T31] usb usb3-port1: unable to enumerate USB device
[  144.616940][ T6086] FAULT_INJECTION: forcing a failure.
[  144.616940][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.616984][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  144.617007][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  144.617020][ T6086] Call Trace:
[  144.617028][ T6086]  <TASK>
[  144.617037][ T6086]  dump_stack_lvl+0xe8/0x150
[  144.617075][ T6086]  should_fail_ex+0x467/0x600
[  144.617113][ T6086]  _copy_from_user+0x2d/0xb0
[  144.617139][ T6086]  userfaultfd_ioctl+0x8de/0x8010
[  144.617168][ T6086]  ? __pfx_stack_trace_save+0x10/0x10
[  144.617205][ T6086]  ? stack_depot_save_flags+0x33/0x800
[  144.617237][ T6086]  ? __lock_acquire+0x683/0x2ce0
[  144.617261][ T6086]  ? kasan_save_track+0x4f/0x80
[  144.617294][ T6086]  ? kasan_save_track+0x3e/0x80
[  144.617326][ T6086]  ? kasan_save_free_info+0x40/0x50
[  144.617354][ T6086]  ? __kasan_slab_free+0x5c/0x80
[  144.617375][ T6086]  ? kfree+0x1c5/0x6c0
[  144.617404][ T6086]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  144.617439][ T6086]  ? security_file_ioctl+0xc3/0x2a0
[  144.617460][ T6086]  ? __se_sys_ioctl+0x47/0x170
[  144.617487][ T6086]  ? do_syscall_64+0x174/0x580
[  144.617514][ T6086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.617542][ T6086]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  144.617606][ T6086]  ? kasan_quarantine_put+0xbb/0x1f0
[  144.617650][ T6086]  ? tomoyo_path_number_perm+0x219/0x5f0
[  144.617688][ T6086]  ? tomoyo_path_number_perm+0x219/0x5f0
[  144.617729][ T6086]  ? do_vfs_ioctl+0x1184/0x1550
[  144.617762][ T6086]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  144.617792][ T6086]  ? __pfx_smack_log+0x10/0x10
[  144.617832][ T6086]  ? smk_tskacc+0x2fb/0x370
[  144.617872][ T6086]  ? smack_file_ioctl+0x2c2/0x360
[  144.617909][ T6086]  ? __pfx_smack_file_ioctl+0x10/0x10
[  144.617954][ T6086]  ? __fget_files+0x2a/0x420
[  144.617982][ T6086]  ? __fget_files+0x3a8/0x420
[  144.618002][ T6086]  ? __fget_files+0x2a/0x420
[  144.618027][ T6086]  ? bpf_lsm_file_ioctl+0x9/0x20
[  144.618062][ T6086]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  144.618090][ T6086]  __se_sys_ioctl+0xff/0x170
[  144.618119][ T6086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.618143][ T6086]  do_syscall_64+0x174/0x580
[  144.618170][ T6086]  ? trace_irq_disable+0x3b/0x140
[  144.618205][ T6086]  ? clear_bhb_loop+0x70/0xc0
[  144.618233][ T6086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.618255][ T6086] RIP: 0033:0x7fd44f63e0d9
[  144.618275][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.618292][ T6086] RSP: 002b:00007fd44d896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.618315][ T6086] RAX: ffffffffffffffda RBX: 00007fd44f8c5fa0 RCX: 00007fd44f63e0d9
[  144.618331][ T6086] RDX: 0000200000000040 RSI: 00000000c020aa08 RDI: 0000000000000003
[  144.618346][ T6086] RBP: 00007fd44d896090 R08: 0000000000000000 R09: 0000000000000000
[  144.618360][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.618373][ T6086] R13: 00007fd44f8c6038 R14: 00007fd44f8c5fa0 R15: 00007ffee0e543b8
[  144.618407][ T6086]  </TASK>
[  146.201979][ T6092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.78'.
[  146.553806][ T6103] FAULT_INJECTION: forcing a failure.
[  146.553806][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.553844][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  146.553868][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.553883][ T6103] Call Trace:
[  146.553891][ T6103]  <TASK>
[  146.553900][ T6103]  dump_stack_lvl+0xe8/0x150
[  146.553939][ T6103]  should_fail_ex+0x467/0x600
[  146.553978][ T6103]  _copy_from_iter+0x1d3/0x1660
[  146.554024][ T6103]  ? rcu_is_watching+0x15/0xb0
[  146.554079][ T6103]  ? trace_kmem_cache_alloc+0x29/0xe0
[  146.554118][ T6103]  ? __pfx__copy_from_iter+0x10/0x10
[  146.554159][ T6103]  ? __alloc_skb+0x276/0x7a0
[  146.554182][ T6103]  ? __alloc_skb+0x276/0x7a0
[  146.554212][ T6103]  ? netlink_sendmsg+0x650/0xb40
[  146.554247][ T6103]  ? skb_put+0x112/0x210
[  146.554276][ T6103]  netlink_sendmsg+0x6c0/0xb40
[  146.554315][ T6103]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.554347][ T6103]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  146.554382][ T6103]  ? __kernel_text_address+0xd/0x30
[  146.554417][ T6103]  ? unwind_get_return_address+0x4d/0x90
[  146.554445][ T6103]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.554473][ T6103]  sock_sendmsg_nosec+0x13a/0x180
[  146.554510][ T6103]  ____sys_sendmsg+0x565/0x870
[  146.554539][ T6103]  ? __might_fault+0xaf/0x130
[  146.554568][ T6103]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.554607][ T6103]  ? import_iovec+0x73/0xa0
[  146.554649][ T6103]  ___sys_sendmsg+0x2a5/0x360
[  146.554679][ T6103]  ? __lock_acquire+0x683/0x2ce0
[  146.554707][ T6103]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.554775][ T6103]  ? __fget_files+0x2a/0x420
[  146.554797][ T6103]  ? __fget_files+0x3a8/0x420
[  146.554831][ T6103]  __x64_sys_sendmsg+0x1b7/0x290
[  146.554864][ T6103]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.554914][ T6103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.554940][ T6103]  do_syscall_64+0x174/0x580
[  146.554969][ T6103]  ? trace_irq_disable+0x3b/0x140
[  146.555005][ T6103]  ? clear_bhb_loop+0x70/0xc0
[  146.555034][ T6103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.555058][ T6103] RIP: 0033:0x7fd44f63e0d9
[  146.555080][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.555099][ T6103] RSP: 002b:00007fd44d854028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.555124][ T6103] RAX: ffffffffffffffda RBX: 00007fd44f8c6180 RCX: 00007fd44f63e0d9
[  146.555140][ T6103] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  146.555163][ T6103] RBP: 00007fd44d854090 R08: 0000000000000000 R09: 0000000000000000
[  146.555177][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.555190][ T6103] R13: 00007fd44f8c6218 R14: 00007fd44f8c6180 R15: 00007ffee0e543b8
[  146.555225][ T6103]  </TASK>
[  147.569816][ T6092] 9p: Bad value for 'rfdno'
[  147.800102][ T6112] FAULT_INJECTION: forcing a failure.
[  147.800102][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.800147][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  147.800172][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.800186][ T6112] Call Trace:
[  147.800195][ T6112]  <TASK>
[  147.800204][ T6112]  dump_stack_lvl+0xe8/0x150
[  147.800247][ T6112]  should_fail_ex+0x467/0x600
[  147.800288][ T6112]  _copy_from_user+0x2d/0xb0
[  147.800315][ T6112]  userfaultfd_ioctl+0x8de/0x8010
[  147.800345][ T6112]  ? __pfx_stack_trace_save+0x10/0x10
[  147.800384][ T6112]  ? stack_depot_save_flags+0x33/0x800
[  147.800419][ T6112]  ? __lock_acquire+0x683/0x2ce0
[  147.800446][ T6112]  ? kasan_save_track+0x4f/0x80
[  147.800477][ T6112]  ? kasan_save_track+0x3e/0x80
[  147.800509][ T6112]  ? kasan_save_free_info+0x40/0x50
[  147.800544][ T6112]  ? __kasan_slab_free+0x5c/0x80
[  147.800564][ T6112]  ? kfree+0x1c5/0x6c0
[  147.800593][ T6112]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  147.800628][ T6112]  ? security_file_ioctl+0xc3/0x2a0
[  147.800649][ T6112]  ? __se_sys_ioctl+0x47/0x170
[  147.800676][ T6112]  ? do_syscall_64+0x174/0x580
[  147.800702][ T6112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.800730][ T6112]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  147.800798][ T6112]  ? kasan_quarantine_put+0xbb/0x1f0
[  147.800842][ T6112]  ? tomoyo_path_number_perm+0x219/0x5f0
[  147.800881][ T6112]  ? tomoyo_path_number_perm+0x219/0x5f0
[  147.800923][ T6112]  ? do_vfs_ioctl+0x1184/0x1550
[  147.800955][ T6112]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  147.800985][ T6112]  ? __pfx_smack_log+0x10/0x10
[  147.801015][ T6112]  ? vfs_write+0x9e0/0xbb0
[  147.801049][ T6112]  ? smk_tskacc+0x2fb/0x370
[  147.801083][ T6112]  ? smack_file_ioctl+0x2c2/0x360
[  147.801119][ T6112]  ? __pfx_smack_file_ioctl+0x10/0x10
[  147.801165][ T6112]  ? ksys_write+0x202/0x270
[  147.801196][ T6112]  ? bpf_lsm_file_ioctl+0x9/0x20
[  147.801230][ T6112]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  147.801258][ T6112]  __se_sys_ioctl+0xff/0x170
[  147.801286][ T6112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.801309][ T6112]  do_syscall_64+0x174/0x580
[  147.801336][ T6112]  ? trace_irq_disable+0x3b/0x140
[  147.801375][ T6112]  ? clear_bhb_loop+0x70/0xc0
[  147.801402][ T6112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.801425][ T6112] RIP: 0033:0x7fbd964fe0d9
[  147.801446][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.801465][ T6112] RSP: 002b:00007fbd94756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  147.801488][ T6112] RAX: ffffffffffffffda RBX: 00007fbd96785fa0 RCX: 00007fbd964fe0d9
[  147.801504][ T6112] RDX: 0000200000000040 RSI: 00000000c020aa08 RDI: 0000000000000003
[  147.801518][ T6112] RBP: 00007fbd94756090 R08: 0000000000000000 R09: 0000000000000000
[  147.801537][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.801551][ T6112] R13: 00007fbd96786038 R14: 00007fbd96785fa0 R15: 00007ffe32345bb8
[  147.801584][ T6112]  </TASK>
[  149.147496][ T6124] netlink: 60 bytes leftover after parsing attributes in process `syz.2.88'.
[  149.692945][  T999] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  149.803963][ T6138] FAULT_INJECTION: forcing a failure.
[  149.803963][ T6138] name failslab, interval 1, probability 0, space 0, times 0
[  149.804002][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  149.804026][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  149.804039][ T6138] Call Trace:
[  149.804048][ T6138]  <TASK>
[  149.804057][ T6138]  dump_stack_lvl+0xe8/0x150
[  149.804102][ T6138]  should_fail_ex+0x467/0x600
[  149.804142][ T6138]  should_failslab+0xa8/0x100
[  149.804169][ T6138]  __kmalloc_node_track_caller_noprof+0x102/0x7c0
[  149.804193][ T6138]  ? down_read+0x156/0x200
[  149.804222][ T6138]  ? dh_data_from_key+0x1aa/0x280
[  149.804252][ T6138]  ? dh_data_from_key+0x1aa/0x280
[  149.804290][ T6138]  kmemdup_noprof+0x2b/0x70
[  149.804325][ T6138]  dh_data_from_key+0x1aa/0x280
[  149.804359][ T6138]  __keyctl_dh_compute+0x34c/0xd10
[  149.804403][ T6138]  ? __lock_acquire+0x683/0x2ce0
[  149.804430][ T6138]  ? __pfx___keyctl_dh_compute+0x10/0x10
[  149.804493][ T6138]  ? get_pid_task+0x20/0x1f0
[  149.804523][ T6138]  ? get_pid_task+0x20/0x1f0
[  149.804558][ T6138]  keyctl_dh_compute+0x124/0x180
[  149.804592][ T6138]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  149.804627][ T6138]  ? do_raw_spin_lock+0x12b/0x2f0
[  149.804668][ T6138]  __se_sys_keyctl+0x44c/0x9d0
[  149.804696][ T6138]  ? __pfx___se_sys_keyctl+0x10/0x10
[  149.804718][ T6138]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  149.804745][ T6138]  ? rt_mutex_slowunlock+0x219/0x460
[  149.804779][ T6138]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  149.804807][ T6138]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  149.804860][ T6138]  ? fput+0xa0/0xd0
[  149.804895][ T6138]  ? ksys_write+0x248/0x270
[  149.804923][ T6138]  ? __pfx_ksys_write+0x10/0x10
[  149.804956][ T6138]  ? __x64_sys_keyctl+0x20/0xc0
[  149.804979][ T6138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.805003][ T6138]  do_syscall_64+0x174/0x580
[  149.805029][ T6138]  ? trace_irq_disable+0x3b/0x140
[  149.805064][ T6138]  ? clear_bhb_loop+0x70/0xc0
[  149.805092][ T6138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.805114][ T6138] RIP: 0033:0x7f3f194ee0d9
[  149.805135][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.805152][ T6138] RSP: 002b:00007f3f17746028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  149.805176][ T6138] RAX: ffffffffffffffda RBX: 00007f3f19775fa0 RCX: 00007f3f194ee0d9
[  149.805192][ T6138] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000017
[  149.805206][ T6138] RBP: 00007f3f17746090 R08: 0000000000000000 R09: 0000000000000000
[  149.805220][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.805233][ T6138] R13: 00007f3f19776038 R14: 00007f3f19775fa0 R15: 00007ffdc382b298
[  149.805267][ T6138]  </TASK>
[  149.878486][  T999] usb 5-1: Using ep0 maxpacket: 8
[  149.879532][  T999] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.955200][  T999] usb 5-1: too many endpoints for config 1 interface 0 altsetting 64: 129, using maximum allowed: 30
[  149.955253][  T999] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16
[  149.955280][  T999] usb 5-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 129
[  149.955316][  T999] usb 5-1: config 1 interface 0 has no altsetting 0
[  150.200319][  T999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.200352][  T999] usb 5-1: Product: syz
[  150.200370][  T999] usb 5-1: Manufacturer: syz
[  150.200388][  T999] usb 5-1: SerialNumber: syz
[  150.253934][ T6131] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.761940][ T6152] FAULT_INJECTION: forcing a failure.
[  150.761940][ T6152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.761977][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  150.762002][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.762014][ T6152] Call Trace:
[  150.762022][ T6152]  <TASK>
[  150.762031][ T6152]  dump_stack_lvl+0xe8/0x150
[  150.762083][ T6152]  should_fail_ex+0x467/0x600
[  150.762121][ T6152]  _copy_from_user+0x2d/0xb0
[  150.762147][ T6152]  __copy_msghdr+0x390/0x590
[  150.762181][ T6152]  ___sys_sendmsg+0x213/0x360
[  150.762207][ T6152]  ? __lock_acquire+0x683/0x2ce0
[  150.762231][ T6152]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.762306][ T6152]  ? __fget_files+0x2a/0x420
[  150.762328][ T6152]  ? __fget_files+0x3a8/0x420
[  150.762360][ T6152]  __x64_sys_sendmsg+0x1b7/0x290
[  150.762396][ T6152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.762440][ T6152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.762463][ T6152]  do_syscall_64+0x174/0x580
[  150.762487][ T6152]  ? trace_irq_disable+0x3b/0x140
[  150.762520][ T6152]  ? clear_bhb_loop+0x70/0xc0
[  150.762547][ T6152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.762567][ T6152] RIP: 0033:0x7fbd964fe0d9
[  150.762587][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.762603][ T6152] RSP: 002b:00007fbd94714028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.762625][ T6152] RAX: ffffffffffffffda RBX: 00007fbd96786180 RCX: 00007fbd964fe0d9
[  150.762640][ T6152] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a
[  150.762651][ T6152] RBP: 00007fbd94714090 R08: 0000000000000000 R09: 0000000000000000
[  150.762661][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.762671][ T6152] R13: 00007fbd96786218 R14: 00007fbd96786180 R15: 00007ffe32345bb8
[  150.762699][ T6152]  </TASK>
[  150.766804][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'.
[  150.990983][  T999] usb 5-1: No union descriptors
[  151.013371][  T999] usb 5-1: USB disconnect, device number 3
[  151.590394][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.4.101'.
[  151.811040][ T6162] 9p: Bad value for 'rfdno'
[  151.989120][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.068023][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.303093][ T5575] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  154.084310][ T6197] FAULT_INJECTION: forcing a failure.
[  154.084310][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.084352][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  154.084399][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  154.084422][ T6197] Call Trace:
[  154.084437][ T6197]  <TASK>
[  154.084452][ T6197]  dump_stack_lvl+0xe8/0x150
[  154.084514][ T6197]  should_fail_ex+0x467/0x600
[  154.084562][ T6197]  _copy_from_user+0x2d/0xb0
[  154.084590][ T6197]  snd_seq_ioctl+0x216/0x490
[  154.084625][ T6197]  ? smk_tskacc+0x2fb/0x370
[  154.084661][ T6197]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  154.084693][ T6197]  ? smack_file_ioctl+0x263/0x360
[  154.084746][ T6197]  ? __fget_files+0x3a8/0x420
[  154.084767][ T6197]  ? __fget_files+0x2a/0x420
[  154.084793][ T6197]  ? bpf_lsm_file_ioctl+0x9/0x20
[  154.084827][ T6197]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  154.084862][ T6197]  __se_sys_ioctl+0xff/0x170
[  154.084892][ T6197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.084917][ T6197]  do_syscall_64+0x174/0x580
[  154.084948][ T6197]  ? trace_irq_disable+0x3b/0x140
[  154.084982][ T6197]  ? clear_bhb_loop+0x70/0xc0
[  154.085010][ T6197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.085033][ T6197] RIP: 0033:0x7fbd964fe0d9
[  154.085061][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.085080][ T6197] RSP: 002b:00007fbd94756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.085103][ T6197] RAX: ffffffffffffffda RBX: 00007fbd96785fa0 RCX: 00007fbd964fe0d9
[  154.085120][ T6197] RDX: 0000200000000500 RSI: 00000000408c5333 RDI: 0000000000000003
[  154.085134][ T6197] RBP: 00007fbd94756090 R08: 0000000000000000 R09: 0000000000000000
[  154.085148][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.085161][ T6197] R13: 00007fbd96786038 R14: 00007fbd96785fa0 R15: 00007ffe32345bb8
[  154.085197][ T6197]  </TASK>
[  154.173985][ T5575] usb 5-1: Using ep0 maxpacket: 32
[  154.307035][ T5575] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  154.421344][ T5575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.421392][ T5575] usb 5-1: Product: syz
[  154.421408][ T5575] usb 5-1: Manufacturer: syz
[  154.421423][ T5575] usb 5-1: SerialNumber: syz
[  154.496303][ T5575] usb 5-1: config 0 descriptor??
[  154.692373][ T6202] loop5: detected capacity change from 0 to 7
[  154.729798][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.730460][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.756878][ T5575] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  154.756925][ T5575] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  154.794310][ T6202] Dev loop5: unable to read RDB block 7
[  154.794355][ T6202]  loop5: AHDI p1
[  154.794378][ T6202] loop5: partition table partially beyond EOD, truncated
[  154.916971][ T5575] usb 5-1: USB disconnect, device number 4
[  155.364744][ T6219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.124'.
[  155.467480][ T6223] netlink: 204 bytes leftover after parsing attributes in process `syz.2.126'.
[  155.559316][ T6225] FAULT_INJECTION: forcing a failure.
[  155.559316][ T6225] name failslab, interval 1, probability 0, space 0, times 0
[  155.559353][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  155.559378][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.559391][ T6225] Call Trace:
[  155.559399][ T6225]  <TASK>
[  155.559409][ T6225]  dump_stack_lvl+0xe8/0x150
[  155.559446][ T6225]  should_fail_ex+0x467/0x600
[  155.559494][ T6225]  should_failslab+0xa8/0x100
[  155.559522][ T6225]  kmem_cache_alloc_noprof+0xa4/0x650
[  155.559556][ T6225]  ? alloc_empty_file+0x5b/0x1d0
[  155.559589][ T6225]  ? alloc_empty_file+0x5b/0x1d0
[  155.559629][ T6225]  alloc_empty_file+0x5b/0x1d0
[  155.559661][ T6225]  path_openat+0x8f/0x3850
[  155.559687][ T6225]  ? kasan_save_track+0x3e/0x80
[  155.559714][ T6225]  ? __kasan_slab_alloc+0x6c/0x80
[  155.559730][ T6225]  ? kmem_cache_alloc_noprof+0x355/0x650
[  155.559756][ T6225]  ? do_getname+0x2e/0x250
[  155.559779][ T6225]  ? do_sys_openat2+0xcc/0x200
[  155.559805][ T6225]  ? __x64_sys_open+0x11e/0x150
[  155.559820][ T6225]  ? do_syscall_64+0x174/0x580
[  155.559841][ T6225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.559874][ T6225]  do_file_open+0x23e/0x4a0
[  155.559894][ T6225]  ? lockdep_hardirqs_on+0x7a/0x110
[  155.559919][ T6225]  ? __pfx_do_file_open+0x10/0x10
[  155.559957][ T6225]  ? alloc_fd+0x654/0x6d0
[  155.559994][ T6225]  do_sys_openat2+0x115/0x200
[  155.560025][ T6225]  ? __pfx_do_sys_openat2+0x10/0x10
[  155.560054][ T6225]  ? ksys_write+0x248/0x270
[  155.560077][ T6225]  ? __pfx_ksys_write+0x10/0x10
[  155.560099][ T6225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.560118][ T6225]  __x64_sys_open+0x11e/0x150
[  155.560137][ T6225]  do_syscall_64+0x174/0x580
[  155.560158][ T6225]  ? trace_irq_disable+0x3b/0x140
[  155.560186][ T6225]  ? clear_bhb_loop+0x70/0xc0
[  155.560207][ T6225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.560225][ T6225] RIP: 0033:0x7f5e168be0d9
[  155.560241][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.560256][ T6225] RSP: 002b:00007f5e14ad4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  155.560275][ T6225] RAX: ffffffffffffffda RBX: 00007f5e16b46180 RCX: 00007f5e168be0d9
[  155.560287][ T6225] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580
[  155.560300][ T6225] RBP: 00007f5e14ad4090 R08: 0000000000000000 R09: 0000000000000000
[  155.560310][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.560320][ T6225] R13: 00007f5e16b46218 R14: 00007f5e16b46180 R15: 00007fff8a9293b8
[  155.560346][ T6225]  </TASK>
[  156.782900][ T6235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.130'.
[  157.030960][ T6237] loop5: detected capacity change from 0 to 7
[  157.130769][ T6237] Dev loop5: unable to read RDB block 7
[  157.130824][ T6237]  loop5: unable to read partition table
[  157.131037][ T6237] loop5: partition table beyond EOD, truncated
[  157.132576][ T6237] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  157.494337][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'.
[  157.793975][ T6266] syz.2.141 uses obsolete (PF_INET,SOCK_PACKET)
[  157.852975][ T6269] netlink: 204 bytes leftover after parsing attributes in process `syz.0.142'.
[  158.066334][ T5707] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  158.235815][ T5707] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  158.238834][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.238886][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.330519][ T6283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.147'.
[  158.471915][ T5707] usb 5-1: config 0 descriptor??
[  158.599915][ T6283] 9p: Bad value for 'rfdno'
[  158.800642][ T5707] usbhid 5-1:0.0: can't add hid device: -71
[  158.801379][ T5707] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  158.961102][ T5707] usb 5-1: USB disconnect, device number 5
[  159.379013][ T5707] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.056186][ T5707] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  160.088792][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.088846][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.238889][ T5707] usb 5-1: config 0 descriptor??
[  160.810975][ T5707] usbhid 5-1:0.0: can't add hid device: -71
[  160.811108][ T5707] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  160.866991][ T5707] usb 5-1: USB disconnect, device number 6
[  161.295738][ T6331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.165'.
[  161.565907][ T6339] FAULT_INJECTION: forcing a failure.
[  161.565907][ T6339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.565943][ T6339] CPU: 1 UID: 0 PID: 6339 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  161.565968][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.565980][ T6339] Call Trace:
[  161.565988][ T6339]  <TASK>
[  161.565997][ T6339]  dump_stack_lvl+0xe8/0x150
[  161.566034][ T6339]  should_fail_ex+0x467/0x600
[  161.566074][ T6339]  _copy_from_user+0x2d/0xb0
[  161.566100][ T6339]  inet_ioctl+0x2f8/0x560
[  161.566130][ T6339]  ? __pfx_inet_ioctl+0x10/0x10
[  161.566185][ T6339]  ? packet_ioctl+0x28d/0x370
[  161.566218][ T6339]  sock_do_ioctl+0x101/0x320
[  161.566255][ T6339]  ? __pfx_sock_do_ioctl+0x10/0x10
[  161.566285][ T6339]  ? hook_file_ioctl+0x1f3/0x600
[  161.566320][ T6339]  ? __asan_memset+0x22/0x50
[  161.566351][ T6339]  ? smack_file_ioctl+0x263/0x360
[  161.566392][ T6339]  sock_ioctl+0x57d/0x7f0
[  161.566426][ T6339]  ? __pfx_sock_ioctl+0x10/0x10
[  161.566460][ T6339]  ? __fget_files+0x2a/0x420
[  161.566480][ T6339]  ? __fget_files+0x3a8/0x420
[  161.566500][ T6339]  ? __fget_files+0x2a/0x420
[  161.566524][ T6339]  ? bpf_lsm_file_ioctl+0x9/0x20
[  161.566557][ T6339]  ? __pfx_sock_ioctl+0x10/0x10
[  161.566588][ T6339]  __se_sys_ioctl+0xff/0x170
[  161.566616][ T6339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.566640][ T6339]  do_syscall_64+0x174/0x580
[  161.566666][ T6339]  ? trace_irq_disable+0x3b/0x140
[  161.566701][ T6339]  ? clear_bhb_loop+0x70/0xc0
[  161.566730][ T6339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.566753][ T6339] RIP: 0033:0x7f5e168be0d9
[  161.566773][ T6339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.566791][ T6339] RSP: 002b:00007f5e14b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.566814][ T6339] RAX: ffffffffffffffda RBX: 00007f5e16b45fa0 RCX: 00007f5e168be0d9
[  161.566830][ T6339] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000004
[  161.566850][ T6339] RBP: 00007f5e14b16090 R08: 0000000000000000 R09: 0000000000000000
[  161.566864][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.566878][ T6339] R13: 00007f5e16b46038 R14: 00007f5e16b45fa0 R15: 00007fff8a9293b8
[  161.566911][ T6339]  </TASK>
[  161.659262][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'.
[  161.913407][ T6346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.015653][ T6335] ima: policy update failed
[  162.015951][   T37] kauditd_printk_skb: 478 callbacks suppressed
[  162.015966][   T37] audit: type=1802 audit(1787020700.798:490): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.170" res=0 errno=0
[  163.144482][ T5787] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  163.324068][ T5787] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  163.325910][ T5787] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  163.325966][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.329095][ T5787] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  163.329123][ T5787] usb 5-1: Manufacturer: syz
[  163.398724][   T37] audit: type=1326 audit(1787020702.178:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.399066][   T37] audit: type=1326 audit(1787020702.178:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.427931][ T5787] usb 5-1: config 0 descriptor??
[  163.452887][ T1235] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  163.479176][   T37] audit: type=1326 audit(1787020702.258:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.479357][   T37] audit: type=1326 audit(1787020702.258:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.479532][   T37] audit: type=1326 audit(1787020702.258:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.479894][   T37] audit: type=1326 audit(1787020702.258:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.480057][   T37] audit: type=1326 audit(1787020702.258:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.558587][   T37] audit: type=1326 audit(1787020702.328:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.558743][   T37] audit: type=1326 audit(1787020702.328:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.0.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f194ee0d9 code=0x7ffc0000
[  163.612971][ T1235] usb 2-1: Using ep0 maxpacket: 8
[  163.620468][ T1235] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  163.682956][ T1235] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  163.682985][ T1235] usb 2-1: Product: syz
[  163.683000][ T1235] usb 2-1: Manufacturer: syz
[  163.683015][ T1235] usb 2-1: SerialNumber: syz
[  163.733562][ T1235] usb 2-1: config 0 descriptor??
[  163.738840][ T1235] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  163.874193][ T6367] fuse: Bad value for 'user_id'
[  163.874223][ T6367] fuse: Bad value for 'user_id'
[  163.877307][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[  163.942898][ T5787] rc_core: IR keymap rc-hauppauge not found
[  163.942919][ T5787] Registered IR keymap rc-empty
[  164.001030][ T5787] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  164.057814][ T5787] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  164.227498][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.249039][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.269545][ T6377] rc rc0: two consecutive events of type space
[  164.671679][ T1235] gspca_zc3xx: reg_w_i err -71
[  164.671788][ T1235] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  164.728894][ T1235] usb 2-1: USB disconnect, device number 4
[  164.740459][ T5787] usb 5-1: USB disconnect, device number 7
[  164.780607][ T6385] FAULT_INJECTION: forcing a failure.
[  164.780607][ T6385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.780643][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  164.780668][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.780681][ T6385] Call Trace:
[  164.780689][ T6385]  <TASK>
[  164.780698][ T6385]  dump_stack_lvl+0xe8/0x150
[  164.780736][ T6385]  should_fail_ex+0x467/0x600
[  164.780776][ T6385]  _copy_from_iter+0x1d3/0x1660
[  164.780816][ T6385]  ? rcu_is_watching+0x15/0xb0
[  164.780843][ T6385]  ? trace_kmem_cache_alloc+0x29/0xe0
[  164.780883][ T6385]  ? __pfx__copy_from_iter+0x10/0x10
[  164.780918][ T6385]  ? __alloc_skb+0x276/0x7a0
[  164.780940][ T6385]  ? __alloc_skb+0x276/0x7a0
[  164.780969][ T6385]  ? netlink_sendmsg+0x650/0xb40
[  164.780998][ T6385]  ? skb_put+0x112/0x210
[  164.781027][ T6385]  netlink_sendmsg+0x6c0/0xb40
[  164.781066][ T6385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.781098][ T6385]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  164.781130][ T6385]  ? __kernel_text_address+0xd/0x30
[  164.781166][ T6385]  ? unwind_get_return_address+0x4d/0x90
[  164.781193][ T6385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.781221][ T6385]  sock_sendmsg_nosec+0x13a/0x180
[  164.781260][ T6385]  ____sys_sendmsg+0x565/0x870
[  164.781287][ T6385]  ? __might_fault+0xaf/0x130
[  164.781316][ T6385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.781353][ T6385]  ? import_iovec+0x73/0xa0
[  164.781381][ T6385]  ___sys_sendmsg+0x2a5/0x360
[  164.781408][ T6385]  ? __lock_acquire+0x683/0x2ce0
[  164.781438][ T6385]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.781510][ T6385]  ? __fget_files+0x2a/0x420
[  164.781531][ T6385]  ? __fget_files+0x3a8/0x420
[  164.781564][ T6385]  __x64_sys_sendmsg+0x1b7/0x290
[  164.781595][ T6385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.781641][ T6385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.781666][ T6385]  do_syscall_64+0x174/0x580
[  164.781693][ T6385]  ? trace_irq_disable+0x3b/0x140
[  164.781726][ T6385]  ? clear_bhb_loop+0x70/0xc0
[  164.781754][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.781776][ T6385] RIP: 0033:0x7f3f194ee0d9
[  164.781797][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.781815][ T6385] RSP: 002b:00007f3f17746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.781838][ T6385] RAX: ffffffffffffffda RBX: 00007f3f19775fa0 RCX: 00007f3f194ee0d9
[  164.781854][ T6385] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  164.781867][ T6385] RBP: 00007f3f17746090 R08: 0000000000000000 R09: 0000000000000000
[  164.781880][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.781892][ T6385] R13: 00007f3f19776038 R14: 00007f3f19775fa0 R15: 00007ffdc382b298
[  164.781926][ T6385]  </TASK>
[  166.255097][ T5597] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  166.398721][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  166.416223][ T5597] usb 1-1: Using ep0 maxpacket: 8
[  166.417074][ T5597] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  166.424575][ T5597] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  166.424602][ T5597] usb 1-1: Product: syz
[  166.424617][ T5597] usb 1-1: Manufacturer: syz
[  166.424631][ T5597] usb 1-1: SerialNumber: syz
[  166.542218][ T6405] 9p: Bad value for 'dfltuid'
[  166.542239][ T6405] 9p: Bad value for 'dfltuid'
[  166.563542][ T5597] usb 1-1: config 0 descriptor??
[  166.564521][ T5720] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  166.566106][ T5720] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  166.566131][ T5720] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  166.571222][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.571249][ T5720] usb 3-1: Product: syz
[  166.571265][ T5720] usb 3-1: Manufacturer: syz
[  166.571281][ T5720] usb 3-1: SerialNumber: syz
[  166.655319][ T5720] usb 3-1: config 0 descriptor??
[  166.678819][ T5720] gspca_main: sunplus-2.14.0 probing 055f:c630
[  166.721953][ T5597] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  167.285246][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.396918][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.611505][ T5597] gspca_zc3xx: reg_w_i err -71
[  167.611635][ T5597] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  167.650921][ T5597] usb 1-1: USB disconnect, device number 3
[  168.416298][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.416979][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.300021][ T5720] gspca_sunplus: reg_r err -110
[  169.300138][ T5720] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  169.409148][ T5597] usb 3-1: USB disconnect, device number 11
[  169.588575][ T6446] device-mapper: table: 248:0: : unknown target type
[  169.588597][ T6446] device-mapper: ioctl: error adding target to table
[  169.712796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  169.732786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  169.742789][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  169.752795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.945800][ T6462] FAULT_INJECTION: forcing a failure.
[  171.945800][ T6462] name failslab, interval 1, probability 0, space 0, times 0
[  171.945836][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.3.208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  171.945861][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.945875][ T6462] Call Trace:
[  171.945883][ T6462]  <TASK>
[  171.945892][ T6462]  dump_stack_lvl+0xe8/0x150
[  171.945930][ T6462]  should_fail_ex+0x467/0x600
[  171.945969][ T6462]  should_failslab+0xa8/0x100
[  171.945996][ T6462]  kmem_cache_alloc_noprof+0xa4/0x650
[  171.946032][ T6462]  ? alloc_empty_file+0x5b/0x1d0
[  171.946065][ T6462]  ? alloc_empty_file+0x5b/0x1d0
[  171.946106][ T6462]  alloc_empty_file+0x5b/0x1d0
[  171.946143][ T6462]  path_openat+0x8f/0x3850
[  171.946204][ T6462]  do_file_open+0x23e/0x4a0
[  171.946228][ T6462]  ? lockdep_hardirqs_on+0x7a/0x110
[  171.946260][ T6462]  ? __pfx_do_file_open+0x10/0x10
[  171.946312][ T6462]  ? alloc_fd+0x654/0x6d0
[  171.946357][ T6462]  do_sys_openat2+0x115/0x200
[  171.946402][ T6462]  ? __pfx_do_sys_openat2+0x10/0x10
[  171.946438][ T6462]  ? ksys_write+0x248/0x270
[  171.946466][ T6462]  ? __pfx_ksys_write+0x10/0x10
[  171.946495][ T6462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.946519][ T6462]  __x64_sys_creat+0x8f/0xc0
[  171.946545][ T6462]  do_syscall_64+0x174/0x580
[  171.946571][ T6462]  ? trace_irq_disable+0x3b/0x140
[  171.946606][ T6462]  ? clear_bhb_loop+0x70/0xc0
[  171.946636][ T6462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.946659][ T6462] RIP: 0033:0x7f5e168be0d9
[  171.946679][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.946697][ T6462] RSP: 002b:00007f5e14b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  171.946720][ T6462] RAX: ffffffffffffffda RBX: 00007f5e16b45fa0 RCX: 00007f5e168be0d9
[  171.946736][ T6462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  171.946749][ T6462] RBP: 00007f5e14b16090 R08: 0000000000000000 R09: 0000000000000000
[  171.946762][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.946773][ T6462] R13: 00007f5e16b46038 R14: 00007f5e16b45fa0 R15: 00007fff8a9293b8
[  171.946806][ T6462]  </TASK>
[  172.522869][ T5787] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  172.602957][ T5720] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  172.672930][ T5787] usb 1-1: Using ep0 maxpacket: 8
[  172.673880][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.675487][ T5787] usb 1-1: too many endpoints for config 1 interface 0 altsetting 64: 129, using maximum allowed: 30
[  172.675529][ T5787] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16
[  172.675555][ T5787] usb 1-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 129
[  172.675641][ T5787] usb 1-1: config 1 interface 0 has no altsetting 0
[  172.679284][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.679312][ T5787] usb 1-1: Product: syz
[  172.679328][ T5787] usb 1-1: Manufacturer: syz
[  172.679343][ T5787] usb 1-1: SerialNumber: syz
[  172.782961][ T5720] usb 5-1: Using ep0 maxpacket: 8
[  172.783879][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  172.790536][ T5720] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  172.790563][ T5720] usb 5-1: Product: syz
[  172.790578][ T5720] usb 5-1: Manufacturer: syz
[  172.790593][ T5720] usb 5-1: SerialNumber: syz
[  172.899403][ T5720] usb 5-1: config 0 descriptor??
[  172.959985][ T5720] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  172.978732][ T6461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  173.316901][ T5787] usb 1-1: No union descriptors
[  173.396278][ T5787] usb 1-1: USB disconnect, device number 4
[  173.480477][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.505774][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.741273][ T5720] gspca_zc3xx: reg_w_i err -71
[  173.741293][ T6487] openvswitch: netlink: IPv4 tun info is not correct
[  173.741369][ T5720] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  173.788507][ T5720] usb 5-1: USB disconnect, device number 8
[  174.186541][ T6500] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[  174.371237][ T6497] bond1: entered allmulticast mode
[  174.451215][ T6511] netlink: 72 bytes leftover after parsing attributes in process `syz.1.209'.
[  175.983243][ T5707] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  176.135947][ T5707] usb 3-1: Using ep0 maxpacket: 8
[  176.136900][ T5707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.138563][ T5707] usb 3-1: too many endpoints for config 1 interface 0 altsetting 64: 129, using maximum allowed: 30
[  176.138608][ T5707] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16
[  176.138637][ T5707] usb 3-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 129
[  176.138666][ T5707] usb 3-1: config 1 interface 0 has no altsetting 0
[  176.141631][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.141657][ T5707] usb 3-1: Product: syz
[  176.141673][ T5707] usb 3-1: Manufacturer: syz
[  176.141688][ T5707] usb 3-1: SerialNumber: syz
[  176.351917][ T6527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  176.665968][ T5707] usb 3-1: No union descriptors
[  176.773310][ T5707] usb 3-1: USB disconnect, device number 12
[  176.880477][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[  176.988625][ T6539] vcan0: tx drop: invalid da for name 0x0000000000000003
[  177.738126][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[  177.840683][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'.
[  177.840962][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'.
[  178.301623][ T6579] netlink: 'syz.2.251': attribute type 2 has an invalid length.
[  178.301640][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.251'.
[  178.323520][ T5720] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  178.479975][ T5720] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  178.500867][ T5720] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  178.500899][ T5720] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  178.500919][ T5720] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  178.500940][ T5720] usb 1-1: config 220 has no interface number 2
[  178.501016][ T5720] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  178.501044][ T5720] usb 1-1: config 220 interface 0 has no altsetting 0
[  178.501063][ T5720] usb 1-1: config 220 interface 76 has no altsetting 0
[  178.501082][ T5720] usb 1-1: config 220 interface 1 has no altsetting 0
[  178.582549][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.582578][ T5720] usb 1-1: Product: syz
[  178.582593][ T5720] usb 1-1: Manufacturer: syz
[  178.604377][ T5720] usb 1-1: SerialNumber: syz
[  179.074097][ T5720] usb 1-1: selecting invalid altsetting 0
[  179.137823][ T5720] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  179.137861][ T5720] uvcvideo 1-1:220.0: No valid video chain found.
[  179.230707][ T5720] usb 1-1: selecting invalid altsetting 0
[  179.230749][ T5720] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  179.269177][ T5720] usb 1-1: USB disconnect, device number 5
[  179.582934][ T5597] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  179.742854][ T5597] usb 3-1: Using ep0 maxpacket: 8
[  179.759127][ T5597] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.760712][ T5597] usb 3-1: too many endpoints for config 1 interface 0 altsetting 64: 129, using maximum allowed: 30
[  179.760768][ T5597] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16
[  179.760796][ T5597] usb 3-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 129
[  179.760824][ T5597] usb 3-1: config 1 interface 0 has no altsetting 0
[  179.815094][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.815122][ T5597] usb 3-1: Product: syz
[  179.815138][ T5597] usb 3-1: Manufacturer: syz
[  179.815153][ T5597] usb 3-1: SerialNumber: syz
[  179.877596][ T6592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  180.195815][ T5597] usb 3-1: No union descriptors
[  180.415117][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  180.415314][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  180.415358][ T6607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.262'.
[  181.312983][ T5597] usb 3-1: USB disconnect, device number 13
[  181.712906][ T6612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.265'.
[  181.938639][ T6628] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.396927][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[  182.397793][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[  182.397865][ T6642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.275'.
[  183.152326][ T6612] 9p: Bad value for 'rfdno'
[  183.389647][ T6651] FAULT_INJECTION: forcing a failure.
[  183.389647][ T6651] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  183.389684][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  183.389709][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.389722][ T6651] Call Trace:
[  183.389730][ T6651]  <TASK>
[  183.389739][ T6651]  dump_stack_lvl+0xe8/0x150
[  183.389779][ T6651]  should_fail_ex+0x467/0x600
[  183.389819][ T6651]  prepare_alloc_pages+0x223/0x690
[  183.389851][ T6651]  __alloc_frozen_pages_noprof+0x12f/0x380
[  183.389880][ T6651]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  183.389920][ T6651]  ? __pfx_policy_nodemask+0x10/0x10
[  183.389948][ T6651]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  183.389982][ T6651]  alloc_pages_mpol+0xce/0x280
[  183.390013][ T6651]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  183.390041][ T6651]  vma_alloc_folio_noprof+0xe1/0x1e0
[  183.390071][ T6651]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  183.390108][ T6651]  do_wp_page+0x115e/0x3d90
[  183.390142][ T6651]  ? rt_spin_lock+0x1e0/0x400
[  183.390178][ T6651]  ? rt_spin_lock+0x1e0/0x400
[  183.390220][ T6651]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  183.390250][ T6651]  ? preempt_count_add+0x91/0x190
[  183.390277][ T6651]  ? __pfx_do_wp_page+0x10/0x10
[  183.390308][ T6651]  ? rt_spin_lock+0x2ce/0x400
[  183.390347][ T6651]  ? __pfx_rt_spin_lock+0x10/0x10
[  183.390389][ T6651]  ? pte_offset_map_rw_nolock+0xea/0x160
[  183.390428][ T6651]  handle_mm_fault+0xa03/0x13f0
[  183.390473][ T6651]  ? handle_mm_fault+0xe8/0x13f0
[  183.390511][ T6651]  ? __pfx_handle_mm_fault+0x10/0x10
[  183.390562][ T6651]  ? __lock_acquire+0x683/0x2ce0
[  183.390589][ T6651]  ? lock_mm_and_find_vma+0xa7/0x340
[  183.390619][ T6651]  do_user_addr_fault+0x744/0x1340
[  183.390673][ T6651]  exc_page_fault+0x6a/0xc0
[  183.390701][ T6651]  asm_exc_page_fault+0x26/0x30
[  183.390725][ T6651] RIP: 0010:__put_user_4+0xd/0x30
[  183.390752][ T6651] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  183.390770][ T6651] RSP: 0018:ffffc90007877c98 EFLAGS: 00050202
[  183.390789][ T6651] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005d38
[  183.390804][ T6651] RDX: 0000000000000000 RSI: ffffffff8daf4a1f RDI: ffffffff8bca5980
[  183.390818][ T6651] RBP: ffffc90007877eb0 R08: ffffffff8217a22f R09: 0000000000000000
[  183.390833][ T6651] R10: 0000000000000000 R11: ffff8880376511b0 R12: 1ffff92000f0ef9c
[  183.390847][ T6651] R13: 0000000000048044 R14: 0000200000005d00 R15: 00000000000001e2
[  183.390874][ T6651]  ? __might_fault+0xaf/0x130
[  183.390918][ T6651]  __sys_sendmmsg+0x2ad/0x4d0
[  183.390955][ T6651]  ? __pfx___sys_sendmmsg+0x10/0x10
[  183.390994][ T6651]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  183.391047][ T6651]  ? ksys_write+0x248/0x270
[  183.391078][ T6651]  ? __pfx_ksys_write+0x10/0x10
[  183.391113][ T6651]  __x64_sys_sendmmsg+0xa0/0xc0
[  183.391142][ T6651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.391167][ T6651]  do_syscall_64+0x174/0x580
[  183.391193][ T6651]  ? trace_irq_disable+0x3b/0x140
[  183.391229][ T6651]  ? clear_bhb_loop+0x70/0xc0
[  183.391257][ T6651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.391280][ T6651] RIP: 0033:0x7f5e168be0d9
[  183.391301][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.391319][ T6651] RSP: 002b:00007f5e14af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  183.391350][ T6651] RAX: ffffffffffffffda RBX: 00007f5e16b46090 RCX: 00007f5e168be0d9
[  183.391366][ T6651] RDX: 04000000000001e3 RSI: 0000200000005d00 RDI: 0000000000000004
[  183.391381][ T6651] RBP: 00007f5e14af5090 R08: 0000000000000000 R09: 0000000000000000
[  183.391395][ T6651] R10: 0000000000008044 R11: 0000000000000246 R12: 0000000000000001
[  183.391408][ T6651] R13: 00007f5e16b46128 R14: 00007f5e16b46090 R15: 00007fff8a9293b8
[  183.391445][ T6651]  </TASK>
[  184.079849][ T6630] netlink: 'syz.4.271': attribute type 2 has an invalid length.
[  184.385632][ T6630] 9p: Bad value for 'rfdno'
[  186.278488][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'.
[  186.495443][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.495459][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.495556][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.495565][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.497142][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.497156][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.525354][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.525370][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.525485][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.525494][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.525605][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.525615][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.525851][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.525861][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.525965][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.525974][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.526074][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.526083][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.526236][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.526253][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.526517][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.526540][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.526802][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.526829][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.527083][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.527105][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.527429][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.527452][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.527731][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.527748][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.528011][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.528032][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.528203][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.528225][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.528470][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.528491][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.528759][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.528787][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.529041][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.529073][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.529341][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.529363][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.529613][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.529636][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.529902][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.529924][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.530181][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.530203][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.530475][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.530510][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.530616][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.530625][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.530876][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.530899][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.531158][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.531180][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.531435][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.531457][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.531710][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.531740][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.532360][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.532389][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.532629][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.532639][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.532909][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.532919][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533049][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533059][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533169][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533179][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533276][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533286][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533386][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533395][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533490][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533499][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533613][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533623][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533740][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533749][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533848][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533858][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.533956][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.533965][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534106][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534115][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534215][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534224][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534350][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534360][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534461][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534470][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534612][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534622][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534721][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534731][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534830][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534839][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.534939][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.534948][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535084][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535093][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535192][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535201][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535300][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535310][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535409][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535418][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535553][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535562][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535668][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535677][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.535782][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.535791][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.547678][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.547719][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.548069][ T6698] binder: BINDER_SET_CONTEXT_MGR already set
[  186.702877][ T6698] binder: 6696:6698 ioctl 4018620d 2000000000c0 returned -16
[  186.834244][ T1235] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  187.348673][ T1235] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  187.381905][ T1235] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  187.387867][ T1235] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  187.427257][ T1235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.427286][ T1235] usb 3-1: Product: syz
[  187.427302][ T1235] usb 3-1: Manufacturer: syz
[  187.427317][ T1235] usb 3-1: SerialNumber: syz
[  187.552103][ T1235] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected
[  187.620581][ T1235] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  187.664359][ T1235] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  189.410152][ T6686] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  189.450365][ T6686] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  189.451785][ T6686] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  189.584408][ T6686] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  189.950034][  T999] usb 3-1: USB disconnect, device number 14
[  191.041440][ T6749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.303'.
[  191.123803][  T999] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  191.290218][ T6749] 9p: Bad value for 'rfdno'
[  191.319855][  T999] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  191.321099][  T999] ti_usb_3410_5052 3-1:2.0: device disconnected
[  191.562922][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  191.707107][ T5721] usb 1-1: device descriptor read/64, error -71
[  191.944416][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  192.083045][ T5721] usb 1-1: device descriptor read/64, error -71
[  192.203253][ T5721] usb usb1-port1: attempt power cycle
[  192.422947][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  192.593159][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  192.596835][    T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  192.598525][    T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  192.598553][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  192.631746][ T5721] usb 1-1: device descriptor read/8, error -71
[  192.638362][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.638391][    T9] usb 2-1: Product: syz
[  192.638413][    T9] usb 2-1: Manufacturer: syz
[  192.638428][    T9] usb 2-1: SerialNumber: syz
[  192.698907][    T9] usb 2-1: config 0 descriptor??
[  192.727281][    T9] gspca_main: sunplus-2.14.0 probing 055f:c630
[  192.784871][ T6790] capability: warning: `syz.2.315' uses 32-bit capabilities (legacy support in use)
[  192.892895][ T5721] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  192.923739][ T5721] usb 1-1: device descriptor read/8, error -71
[  193.043500][ T5721] usb usb1-port1: unable to enumerate USB device
[  193.522657][    T9] gspca_sunplus: reg_r err -110
[  193.527914][    T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  194.100009][ T5707] usb 2-1: USB disconnect, device number 5
[  194.495782][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.495857][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  196.837299][ T6842] FAULT_INJECTION: forcing a failure.
[  196.837299][ T6842] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  196.837337][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  196.837362][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  196.837376][ T6842] Call Trace:
[  196.837384][ T6842]  <TASK>
[  196.837394][ T6842]  dump_stack_lvl+0xe8/0x150
[  196.837431][ T6842]  should_fail_ex+0x467/0x600
[  196.837472][ T6842]  prepare_alloc_pages+0x223/0x690
[  196.837504][ T6842]  __alloc_frozen_pages_noprof+0x12f/0x380
[  196.837535][ T6842]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  196.837567][ T6842]  ? __pfx_policy_nodemask+0x10/0x10
[  196.837593][ T6842]  ? reacquire_held_locks+0x104/0x190
[  196.837629][ T6842]  alloc_pages_mpol+0xce/0x280
[  196.837661][ T6842]  alloc_pages_noprof+0xd2/0x2f0
[  196.837702][ T6842]  __pmd_alloc+0x3a/0x5e0
[  196.837743][ T6842]  handle_mm_fault+0xeb1/0x13f0
[  196.837787][ T6842]  ? handle_mm_fault+0xe8/0x13f0
[  196.837825][ T6842]  ? __pfx_handle_mm_fault+0x10/0x10
[  196.837875][ T6842]  ? __lock_acquire+0x683/0x2ce0
[  196.837902][ T6842]  ? lock_mm_and_find_vma+0xa7/0x340
[  196.837932][ T6842]  do_user_addr_fault+0x744/0x1340
[  196.837984][ T6842]  exc_page_fault+0x6a/0xc0
[  196.838016][ T6842]  asm_exc_page_fault+0x26/0x30
[  196.838038][ T6842] RIP: 0010:rep_movs_alternative+0xf/0xa0
[  196.838075][ T6842] Code: c4 10 e9 44 2c 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 2c 05 00 66 2e
[  196.838093][ T6842] RSP: 0018:ffffc90007c4fcb8 EFLAGS: 00050202
[  196.838113][ T6842] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[  196.838127][ T6842] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90007c4fd70
[  196.838142][ T6842] RBP: ffffc90007c4fe68 R08: 0000000000000003 R09: 0000000000000004
[  196.838155][ T6842] R10: dffffc0000000000 R11: fffff52000f89fae R12: 1ffff92000f89fa4
[  196.838171][ T6842] R13: 0000200000000040 R14: ffffc90007c4fd70 R15: 0000200000000040
[  196.838206][ T6842]  _copy_from_user+0x7a/0xb0
[  196.838232][ T6842]  do_sock_getsockopt+0x200/0x7e0
[  196.838267][ T6842]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  196.838314][ T6842]  ? __fget_files+0x3a8/0x420
[  196.838335][ T6842]  ? __fget_files+0x2a/0x420
[  196.838365][ T6842]  __x64_sys_getsockopt+0x1aa/0x250
[  196.838401][ T6842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.838426][ T6842]  do_syscall_64+0x174/0x580
[  196.838453][ T6842]  ? trace_irq_disable+0x3b/0x140
[  196.838488][ T6842]  ? clear_bhb_loop+0x70/0xc0
[  196.838524][ T6842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.838548][ T6842] RIP: 0033:0x7f5e168be0d9
[  196.838567][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.838585][ T6842] RSP: 002b:00007f5e14b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  196.838606][ T6842] RAX: ffffffffffffffda RBX: 00007f5e16b45fa0 RCX: 00007f5e168be0d9
[  196.838621][ T6842] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003
[  196.838634][ T6842] RBP: 00007f5e14b16090 R08: 0000200000000040 R09: 0000000000000000
[  196.838647][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.838660][ T6842] R13: 00007f5e16b46038 R14: 00007f5e16b45fa0 R15: 00007fff8a9293b8
[  196.838702][ T6842]  </TASK>
[  197.587273][ T6850] loop5: detected capacity change from 0 to 7
[  197.612550][ T6850] Dev loop5: unable to read RDB block 7
[  197.612599][ T6850]  loop5: unable to read partition table
[  197.618534][ T6850] loop5: partition table beyond EOD, truncated
[  197.618606][ T6850] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  197.751409][ T6855] FAULT_INJECTION: forcing a failure.
[  197.751409][ T6855] name failslab, interval 1, probability 0, space 0, times 0
[  197.751444][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  197.751467][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  197.751480][ T6855] Call Trace:
[  197.751488][ T6855]  <TASK>
[  197.751497][ T6855]  dump_stack_lvl+0xe8/0x150
[  197.751534][ T6855]  should_fail_ex+0x467/0x600
[  197.751573][ T6855]  should_failslab+0xa8/0x100
[  197.751599][ T6855]  __kmalloc_cache_noprof+0xa0/0x6b0
[  197.751623][ T6855]  ? __snd_timer_user_ioctl+0x5a3/0x4820
[  197.751645][ T6855]  ? __snd_timer_user_ioctl+0x5a3/0x4820
[  197.751675][ T6855]  __snd_timer_user_ioctl+0x5a3/0x4820
[  197.751701][ T6855]  ? kasan_quarantine_put+0xbb/0x1f0
[  197.751742][ T6855]  ? __pfx___snd_timer_user_ioctl+0x10/0x10
[  197.751765][ T6855]  ? tomoyo_path_number_perm+0x219/0x5f0
[  197.751805][ T6855]  ? tomoyo_path_number_perm+0x219/0x5f0
[  197.751848][ T6855]  ? __lock_acquire+0x683/0x2ce0
[  197.751889][ T6855]  ? smk_tskacc+0x2fb/0x370
[  197.751924][ T6855]  ? do_raw_spin_lock+0x12b/0x2f0
[  197.751968][ T6855]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  197.751996][ T6855]  ? lockdep_hardirqs_on+0x7a/0x110
[  197.752046][ T6855]  ? mutex_lock_nested+0x152/0x1d0
[  197.752081][ T6855]  ? snd_timer_user_ioctl+0x51/0x80
[  197.752108][ T6855]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  197.752135][ T6855]  snd_timer_user_ioctl+0x60/0x80
[  197.752163][ T6855]  __se_sys_ioctl+0xff/0x170
[  197.752193][ T6855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.752218][ T6855]  do_syscall_64+0x174/0x580
[  197.752243][ T6855]  ? trace_irq_disable+0x3b/0x140
[  197.752277][ T6855]  ? clear_bhb_loop+0x70/0xc0
[  197.752306][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.752328][ T6855] RIP: 0033:0x7f5e168be0d9
[  197.752348][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.752366][ T6855] RSP: 002b:00007f5e14b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.752389][ T6855] RAX: ffffffffffffffda RBX: 00007f5e16b45fa0 RCX: 00007f5e168be0d9
[  197.752405][ T6855] RDX: 0000200000019200 RSI: 0000000080e85411 RDI: 0000000000000003
[  197.752420][ T6855] RBP: 00007f5e14b16090 R08: 0000000000000000 R09: 0000000000000000
[  197.752434][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.752447][ T6855] R13: 00007f5e16b46038 R14: 00007f5e16b45fa0 R15: 00007fff8a9293b8
[  197.752482][ T6855]  </TASK>
[  198.279033][ T6858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.333'.
[  198.507189][ T6869] 9p: Bad value for 'rfdno'
[  198.548157][ T5707] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  198.715407][ T5707] usb 4-1: Using ep0 maxpacket: 8
[  198.717721][ T5707] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  198.719974][ T5707] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.720007][ T5707] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.720036][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0
[  198.720070][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.806695][ T5707] usb 4-1: config 0 descriptor??
[  199.427941][ T5707] hid-multitouch 0003:0EEF:72D0.0001: hidraw0: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0
[  199.687669][ T5707] usb 4-1: USB disconnect, device number 4
[  200.122920][ T6892] fido_id[6892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  201.754654][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.0.351'.
[  201.927535][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'.
[  201.970635][ T6938] 9p: Bad value for 'rfdno'
[  202.583658][ T5575] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  202.798319][ T5575] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  202.805404][ T5575] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  202.805478][ T5575] usb 3-1: config 0 has no interface number 0
[  202.805603][ T5575] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  202.805672][ T5575] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  202.805745][ T5575] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  202.878459][ T5575] usb 3-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3
[  202.878490][ T5575] usb 3-1: Product: syz
[  202.878505][ T5575] usb 3-1: SerialNumber: syz
[  202.903185][ T5575] usb 3-1: config 0 descriptor??
[  202.984297][ T5575] cm109 3-1:0.8: invalid payload size 0, expected 4
[  203.137248][ T6962] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  203.137280][ T6962] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  203.274243][ T5575] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9
[  203.370495][ T5575] ------------[ cut here ]------------
[  203.370518][ T5575] URB ffff88802a639000 submitted while active
[  203.370591][ T5575] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/5575
[  203.370651][ T5575] Modules linked in:
[  203.370677][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  203.370702][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  203.370717][ T5575] Workqueue: usb_hub_wq hub_event
[  203.370741][ T5575] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  203.370775][ T5575] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 09 67 58 fb 49 83 3e 00 74 40 e8 de e2 ee fa 48 8d 3d a7 7d e5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 c3 e2 ee fa eb 05 e8 bc e2
[  203.370795][ T5575] RSP: 0018:ffffc9000440ebf8 EFLAGS: 00010287
[  203.370815][ T5575] RAX: ffffffff86d6e5d2 RBX: ffff88802a639000 RCX: 0000000000100000
[  203.370832][ T5575] RDX: ffffc9001ac97000 RSI: ffff88802a639000 RDI: ffffffff8fbc6380
[  203.370850][ T5575] RBP: dffffc0000000000 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266
[  203.370875][ T5575] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 1ffff11007e16f0a
[  203.370899][ T5575] R13: ffff88803f0b7848 R14: ffff88802a639008 R15: 0000000000000cc0
[  203.370936][ T5575] FS:  0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000
[  203.371001][ T5575] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  203.371017][ T5575] CR2: 00007fbd94713ff8 CR3: 00000000400ec000 CR4: 00000000003526f0
[  203.371037][ T5575] Call Trace:
[  203.371045][ T5575]  <TASK>
[  203.371055][ T5575]  ? lockdep_hardirqs_on+0x7a/0x110
[  203.371087][ T5575]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  203.371116][ T5575]  ? mutex_lock_nested+0x152/0x1d0
[  203.371168][ T5575]  ? cm109_input_open+0x97/0x460
[  203.371209][ T5575]  cm109_input_open+0x1fb/0x460
[  203.371305][ T5575]  input_open_device+0x1f9/0x3b0
[  203.371356][ T5575]  kbd_connect+0xf6/0x150
[  203.371391][ T5575]  input_register_device+0xd08/0x1150
[  203.371436][ T5575]  cm109_usb_probe+0x11e4/0x16f0
[  203.371498][ T5575]  usb_probe_interface+0x653/0xc60
[  203.371564][ T5575]  ? __pfx_usb_probe_interface+0x10/0x10
[  203.371593][ T5575]  really_probe+0x254/0xae0
[  203.371673][ T5575]  __driver_probe_device+0x1e8/0x360
[  203.371710][ T5575]  driver_probe_device+0x4f/0x240
[  203.371750][ T5575]  __device_attach_driver+0x270/0x410
[  203.371790][ T5575]  bus_for_each_drv+0x25b/0x2f0
[  203.371815][ T5575]  ? __pfx___device_attach_driver+0x10/0x10
[  203.371849][ T5575]  ? __pfx_bus_for_each_drv+0x10/0x10
[  203.371874][ T5575]  ? rt_spin_unlock+0x163/0x200
[  203.371907][ T5575]  __device_attach+0x2c7/0x450
[  203.371952][ T5575]  ? rt_spin_unlock+0x157/0x200
[  203.371977][ T5575]  ? __pfx___device_attach+0x10/0x10
[  203.372021][ T5575]  device_initial_probe+0xa1/0xd0
[  203.372057][ T5575]  bus_probe_device+0x12d/0x220
[  203.372101][ T5575]  device_add+0x7d7/0xb80
[  203.372189][ T5575]  usb_set_configuration+0x1ad8/0x2180
[  203.372250][ T5575]  usb_generic_driver_probe+0x8d/0x150
[  203.372278][ T5575]  usb_probe_device+0x1c3/0x3b0
[  203.372304][ T5575]  ? __pfx_usb_probe_device+0x10/0x10
[  203.372325][ T5575]  really_probe+0x254/0xae0
[  203.372356][ T5575]  __driver_probe_device+0x1e8/0x360
[  203.372384][ T5575]  driver_probe_device+0x4f/0x240
[  203.372413][ T5575]  __device_attach_driver+0x270/0x410
[  203.372444][ T5575]  bus_for_each_drv+0x25b/0x2f0
[  203.372465][ T5575]  ? __pfx___device_attach_driver+0x10/0x10
[  203.372497][ T5575]  ? __pfx_bus_for_each_drv+0x10/0x10
[  203.372523][ T5575]  ? rt_spin_unlock+0x163/0x200
[  203.372547][ T5575]  __device_attach+0x2c7/0x450
[  203.372582][ T5575]  ? __pfx___device_attach+0x10/0x10
[  203.372625][ T5575]  device_initial_probe+0xa1/0xd0
[  203.372652][ T5575]  bus_probe_device+0x12d/0x220
[  203.372674][ T5575]  device_add+0x7d7/0xb80
[  203.372765][ T5575]  usb_new_device+0x99a/0x1680
[  203.372794][ T5575]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  203.372825][ T5575]  ? __pfx_usb_new_device+0x10/0x10
[  203.372862][ T5575]  hub_event+0x28cf/0x4cf0
[  203.372932][ T5575]  ? __pfx_hub_event+0x10/0x10
[  203.372952][ T5575]  ? process_scheduled_works+0xa20/0x14e0
[  203.372981][ T5575]  ? rcu_is_watching+0x15/0xb0
[  203.373006][ T5575]  ? process_scheduled_works+0xa20/0x14e0
[  203.373027][ T5575]  process_scheduled_works+0xa8e/0x14e0
[  203.373083][ T5575]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.373112][ T5575]  ? assign_work+0x3cf/0x5d0
[  203.373140][ T5575]  worker_thread+0xa47/0xfb0
[  203.373182][ T5575]  ? __kthread_parkme+0x71/0x1f0
[  203.373218][ T5575]  kthread+0x388/0x470
[  203.373246][ T5575]  ? __pfx_worker_thread+0x10/0x10
[  203.373267][ T5575]  ? __pfx_kthread+0x10/0x10
[  203.373295][ T5575]  ret_from_fork+0x514/0xb70
[  203.373325][ T5575]  ? __pfx_ret_from_fork+0x10/0x10
[  203.373351][ T5575]  ? __switch_to+0xc89/0x1420
[  203.373376][ T5575]  ? __pfx_kthread+0x10/0x10
[  203.373402][ T5575]  ret_from_fork_asm+0x1a/0x30
[  203.373446][ T5575]  </TASK>
[  203.373466][ T5575] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  203.373482][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  203.373504][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  203.373517][ T5575] Workqueue: usb_hub_wq hub_event
[  203.373538][ T5575] Call Trace:
[  203.373546][ T5575]  <TASK>
[  203.373553][ T5575]  vpanic+0x56c/0xa60
[  203.373594][ T5575]  ? __pfx__printk+0x10/0x10
[  203.373617][ T5575]  ? __pfx_vpanic+0x10/0x10
[  203.373645][ T5575]  ? is_bpf_text_address+0x292/0x2b0
[  203.373668][ T5575]  ? is_bpf_text_address+0x26/0x2b0
[  203.373698][ T5575]  panic+0xc5/0xd0
[  203.373728][ T5575]  ? __pfx_panic+0x10/0x10
[  203.373767][ T5575]  ? ret_from_fork_asm+0x1a/0x30
[  203.373805][ T5575]  __warn+0x315/0x4c0
[  203.373836][ T5575]  ? usb_submit_urb+0x79/0x18b0
[  203.373867][ T5575]  ? usb_submit_urb+0x79/0x18b0
[  203.373895][ T5575]  __report_bug+0x276/0x570
[  203.373924][ T5575]  ? usb_submit_urb+0x79/0x18b0
[  203.373957][ T5575]  ? __pfx___report_bug+0x10/0x10
[  203.374009][ T5575]  report_bug_entry+0x19a/0x290
[  203.374041][ T5575]  ? usb_submit_urb+0x7c/0x18b0
[  203.374074][ T5575]  ? usb_submit_urb+0x81/0x18b0
[  203.374107][ T5575]  handle_bug+0xce/0x200
[  203.374162][ T5575]  exc_invalid_op+0x1a/0x50
[  203.374196][ T5575]  asm_exc_invalid_op+0x1a/0x20
[  203.374220][ T5575] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  203.374257][ T5575] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 09 67 58 fb 49 83 3e 00 74 40 e8 de e2 ee fa 48 8d 3d a7 7d e5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 c3 e2 ee fa eb 05 e8 bc e2
[  203.374276][ T5575] RSP: 0018:ffffc9000440ebf8 EFLAGS: 00010287
[  203.374293][ T5575] RAX: ffffffff86d6e5d2 RBX: ffff88802a639000 RCX: 0000000000100000
[  203.374309][ T5575] RDX: ffffc9001ac97000 RSI: ffff88802a639000 RDI: ffffffff8fbc6380
[  203.374326][ T5575] RBP: dffffc0000000000 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266
[  203.374341][ T5575] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 1ffff11007e16f0a
[  203.374356][ T5575] R13: ffff88803f0b7848 R14: ffff88802a639008 R15: 0000000000000cc0
[  203.374379][ T5575]  ? usb_submit_urb+0x72/0x18b0
[  203.374417][ T5575]  ? usb_submit_urb+0x72/0x18b0
[  203.374444][ T5575]  ? lockdep_hardirqs_on+0x7a/0x110
[  203.374471][ T5575]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  203.374496][ T5575]  ? mutex_lock_nested+0x152/0x1d0
[  203.374528][ T5575]  ? cm109_input_open+0x97/0x460
[  203.374577][ T5575]  cm109_input_open+0x1fb/0x460
[  203.374615][ T5575]  input_open_device+0x1f9/0x3b0
[  203.374646][ T5575]  kbd_connect+0xf6/0x150
[  203.374672][ T5575]  input_register_device+0xd08/0x1150
[  203.374710][ T5575]  cm109_usb_probe+0x11e4/0x16f0
[  203.374762][ T5575]  usb_probe_interface+0x653/0xc60
[  203.374798][ T5575]  ? __pfx_usb_probe_interface+0x10/0x10
[  203.374820][ T5575]  really_probe+0x254/0xae0
[  203.374855][ T5575]  __driver_probe_device+0x1e8/0x360
[  203.374886][ T5575]  driver_probe_device+0x4f/0x240
[  203.374919][ T5575]  __device_attach_driver+0x270/0x410
[  203.374951][ T5575]  bus_for_each_drv+0x25b/0x2f0
[  203.374974][ T5575]  ? __pfx___device_attach_driver+0x10/0x10
[  203.375010][ T5575]  ? __pfx_bus_for_each_drv+0x10/0x10
[  203.375036][ T5575]  ? rt_spin_unlock+0x163/0x200
[  203.375067][ T5575]  __device_attach+0x2c7/0x450
[  203.375096][ T5575]  ? rt_spin_unlock+0x157/0x200
[  203.375119][ T5575]  ? __pfx___device_attach+0x10/0x10
[  203.375162][ T5575]  device_initial_probe+0xa1/0xd0
[  203.375198][ T5575]  bus_probe_device+0x12d/0x220
[  203.375228][ T5575]  device_add+0x7d7/0xb80
[  203.375260][ T5575]  usb_set_configuration+0x1ad8/0x2180
[  203.375307][ T5575]  usb_generic_driver_probe+0x8d/0x150
[  203.375332][ T5575]  usb_probe_device+0x1c3/0x3b0
[  203.375360][ T5575]  ? __pfx_usb_probe_device+0x10/0x10
[  203.375382][ T5575]  really_probe+0x254/0xae0
[  203.375414][ T5575]  __driver_probe_device+0x1e8/0x360
[  203.375446][ T5575]  driver_probe_device+0x4f/0x240
[  203.375480][ T5575]  __device_attach_driver+0x270/0x410
[  203.375516][ T5575]  bus_for_each_drv+0x25b/0x2f0
[  203.375536][ T5575]  ? __pfx___device_attach_driver+0x10/0x10
[  203.375575][ T5575]  ? __pfx_bus_for_each_drv+0x10/0x10
[  203.375597][ T5575]  ? rt_spin_unlock+0x163/0x200
[  203.375625][ T5575]  __device_attach+0x2c7/0x450
[  203.375656][ T5575]  ? __pfx___device_attach+0x10/0x10
[  203.375695][ T5575]  device_initial_probe+0xa1/0xd0
[  203.375724][ T5575]  bus_probe_device+0x12d/0x220
[  203.375750][ T5575]  device_add+0x7d7/0xb80
[  203.375780][ T5575]  usb_new_device+0x99a/0x1680
[  203.375811][ T5575]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  203.375844][ T5575]  ? __pfx_usb_new_device+0x10/0x10
[  203.375884][ T5575]  hub_event+0x28cf/0x4cf0
[  203.375960][ T5575]  ? __pfx_hub_event+0x10/0x10
[  203.375981][ T5575]  ? process_scheduled_works+0xa20/0x14e0
[  203.376012][ T5575]  ? rcu_is_watching+0x15/0xb0
[  203.376039][ T5575]  ? process_scheduled_works+0xa20/0x14e0
[  203.376062][ T5575]  process_scheduled_works+0xa8e/0x14e0
[  203.376120][ T5575]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.376153][ T5575]  ? assign_work+0x3cf/0x5d0
[  203.376182][ T5575]  worker_thread+0xa47/0xfb0
[  203.376219][ T5575]  ? __kthread_parkme+0x71/0x1f0
[  203.376255][ T5575]  kthread+0x388/0x470
[  203.376286][ T5575]  ? __pfx_worker_thread+0x10/0x10
[  203.376309][ T5575]  ? __pfx_kthread+0x10/0x10
[  203.376341][ T5575]  ret_from_fork+0x514/0xb70
[  203.376375][ T5575]  ? __pfx_ret_from_fork+0x10/0x10
[  203.376406][ T5575]  ? __switch_to+0xc89/0x1420
[  203.376437][ T5575]  ? __pfx_kthread+0x10/0x10
[  203.376468][ T5575]  ret_from_fork_asm+0x1a/0x30
[  203.376515][ T5575]  </TASK>
[  203.377420][ T5575] Kernel Offset: disabled