last executing test programs:

15m36.829147519s ago: executing program 2 (id=23):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4084}], 0x1, 0x40800)

15m35.038856599s ago: executing program 2 (id=28):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0', [], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d09cc77e6000000441a69f2c53e292fe01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb229e8dbc772a8d19f87373ef179fce7eb6c1f6184a61789180d45f40c1372f09b84"}, 0xa1)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3", 0x22}], 0x2)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

15m34.131371288s ago: executing program 2 (id=30):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x11, 0x2, 0x7fff7ffc}]})
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0412"], 0xb)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x40000, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6ac}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

15m33.415581063s ago: executing program 2 (id=32):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x1)
acct(&(0x7f0000000040)='./file0\x00')

15m32.890930693s ago: executing program 2 (id=35):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0x7, 0xfb68f, 0x19caa2})
kexec_load(0x2, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x2, &(0x7f0000000200)=[{0x6c1, 0x0, 0x5, 0x5e}, {0x6, 0x4, 0xe0, 0x581}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}], 0x1c)
sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @remote, 0x9}}}, 0x84)
write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
fsmount(r1, 0x0, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4)
recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)

15m30.618635215s ago: executing program 2 (id=40):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000740)="641a6a2b863c0dd89800003f97a834ebb75a92fc2e37e327de21450d38b515614c2b41648b29629ebd6b10fa9c2f283f7d67259efb82eb7728c8bdea228a9a3f552bc46a16ed3b5c8fdb17da7c72200d3e17c6fb351dd5cbdcbe754e146f684e442cadf8f398d9f22687d59e5c3f00a11390b43d1d66dfd2b07668ea84b636f5a97d7570f2c91d48001f972921a76b6450a1336471e56b63021dd95c625735d1587887b62631d4e2bbce7a2973aa59e244020d7dd7df2d47adcf20a251a16f7d2287d4a4535977705ea91dfe87bc7e4eb036ef0afdb60308924eb559bc831216bd1382be", 0xe4}, {&(0x7f0000000400)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819aca6122c350602553d81b6eacf6ce927868337808dde804a048fd8696e524b29", 0x5d}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e3", 0x15f}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee2", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b2b", 0xe}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}], 0x3}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

15m14.428464539s ago: executing program 32 (id=40):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000740)="641a6a2b863c0dd89800003f97a834ebb75a92fc2e37e327de21450d38b515614c2b41648b29629ebd6b10fa9c2f283f7d67259efb82eb7728c8bdea228a9a3f552bc46a16ed3b5c8fdb17da7c72200d3e17c6fb351dd5cbdcbe754e146f684e442cadf8f398d9f22687d59e5c3f00a11390b43d1d66dfd2b07668ea84b636f5a97d7570f2c91d48001f972921a76b6450a1336471e56b63021dd95c625735d1587887b62631d4e2bbce7a2973aa59e244020d7dd7df2d47adcf20a251a16f7d2287d4a4535977705ea91dfe87bc7e4eb036ef0afdb60308924eb559bc831216bd1382be", 0xe4}, {&(0x7f0000000400)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819aca6122c350602553d81b6eacf6ce927868337808dde804a048fd8696e524b29", 0x5d}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee2", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b2b", 0xe}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}], 0x3}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2m11.25506097s ago: executing program 4 (id=3211):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000007000000040000000022000c010000000a00000002000093090000000b00000005000000020000000e000000c9010000d70e00000000602e5f61"], 0x0, 0x4f, 0x0, 0x1, 0xc07}, 0x28)
fsmount(0xffffffffffffffff, 0x0, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x55c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x4cc, 0x2, [@TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x10000, 0xffffff81, 0xfffff7eb, {0x81, 0x2, 0x1ff, 0x1, 0x81, 0x6}, {0xbe, 0x1, 0x0, 0x0, 0xfffd, 0x5}, 0x10, 0x3, 0x7}}]}, @TCA_FW_POLICE={0x5c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x5, 0x5, 0x56, 0xfffffffb, {0x3, 0x0, 0x5, 0x2a69, 0x3baf, 0x3}, {0x6, 0x2, 0xc1, 0x3134, 0x7f, 0x66f1d27d}, 0x1, 0x6, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffe01, 0xd, 0x8, 0x1ff, 0x4, 0x100, 0xffff, 0x401, 0x8, 0x400, 0x237d, 0x5, 0xe, 0x3, 0xffff, 0xff, 0x1, 0x7, 0xfffffffa, 0x1009, 0x8, 0x81, 0x39000000, 0xe, 0x1ff, 0xbdf, 0x1, 0x7fff, 0x7, 0x5, 0x80000001, 0x2, 0x36aa, 0xfffff8ca, 0x8001, 0x4, 0x80000000, 0x1, 0x5, 0x80000000, 0x14c6, 0x1, 0x5, 0x8, 0x2, 0xfffffff8, 0x8, 0xffff, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x2885, 0x7, 0x8, 0x1ff, 0x7, 0x4, 0x100000, 0xf20, 0x3, 0x5, 0x1, 0x7fffffff, 0x9, 0x6, 0x400, 0x9, 0x5, 0x3ff, 0x0, 0xca9, 0x63f1, 0x1, 0x6, 0x6, 0xfd9, 0x2, 0xe7, 0x2, 0x10, 0x7fa6, 0x7, 0x1, 0x0, 0x6, 0x66ff78b3, 0x5, 0x2, 0xa1, 0x1, 0x4, 0x8, 0x5, 0x40, 0x8, 0x10, 0x0, 0x0, 0x8, 0x3, 0x5, 0x5, 0xfbdc, 0x40, 0x8, 0xd, 0x6d25, 0x1, 0x3, 0x81, 0x4, 0x8b, 0x800, 0x7, 0xffffff80, 0x5, 0x2, 0x5, 0x2, 0x7fffffff, 0x4, 0x10000, 0x2, 0x369, 0x4fb, 0x6, 0x7, 0x8000, 0x7ff, 0x95, 0x7, 0x5, 0xb1e, 0x6, 0x7, 0x63, 0xe, 0x80, 0x2, 0xff, 0x10001, 0x16, 0xf129, 0x4, 0x7, 0x8, 0xfff, 0x8127, 0x6, 0x2000, 0x5, 0x10, 0xfffffff8, 0xe, 0x2, 0x7, 0x2, 0x4, 0x80000000, 0x8, 0x6, 0x7, 0xfffffffd, 0x55, 0x80000001, 0x6, 0x80, 0x3, 0x9, 0x81, 0x100, 0x0, 0x0, 0x1, 0x6, 0x5, 0x400, 0x40, 0xd54, 0x11e, 0x8001, 0x8, 0xfff, 0x8, 0x4, 0x9, 0x10001, 0x5, 0x70, 0xa, 0x7, 0x0, 0x8000, 0x6, 0x8, 0x3, 0x1, 0xe74, 0x401, 0x200, 0x6, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0xffffffff, 0x6, 0xa, 0x80, 0x3, 0x5, 0xfffffff7, 0x1abb8b81, 0x4, 0x1, 0xc62d, 0xe7, 0x10001, 0x1, 0x6, 0x3, 0x5, 0x0, 0x6, 0x401, 0x4de1, 0xfffffff5, 0x86, 0x1ff, 0x1, 0xc, 0xe, 0xfffffffd, 0x0, 0xfffffff1, 0x3, 0x1, 0x67cd, 0x4, 0xcc, 0x1, 0xfffff9ad, 0x4000005, 0x8095, 0x57, 0x800, 0x3f, 0xffffffff, 0x8, 0x562, 0x5, 0x8]}]}, @TCA_FW_MASK={0x8, 0x5, 0x240}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xb73}, @TCA_CHAIN={0x8, 0xb, 0xd793}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x28, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x55c}, 0x1, 0x0, 0x0, 0x200cc810}, 0x0)

2m9.659590748s ago: executing program 4 (id=3215):
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(0x0, 0x4407, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0xc00c5512, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bind$can_j1939(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x6ef8eb021116b2d8)

2m9.159444865s ago: executing program 4 (id=3217):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x7, 0xd, 0x0, 0x129f, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8b, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0x2, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x11000, 0x0, 0x8004, 0x15d2, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x4, 0xfff, 0x10000})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m7.951738502s ago: executing program 4 (id=3220):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x22, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2m7.616593921s ago: executing program 4 (id=3221):
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = getpid()
syz_open_procfs(r1, &(0x7f0000000100)='oom_score\x00')
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
symlink(&(0x7f0000000080)='.\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40000021, 0x0)
rt_tgsigqueueinfo(0x0, r2, 0x3c, &(0x7f0000000000)={0x11, 0x9, 0x7fffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13e, 0x13e, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0xc, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x0, 0x1}]}, @struct={0xa, 0x6, 0x0, 0x4, 0x0, 0xae, [{0xc, 0x5, 0xfffffffd}, {0x7, 0x4, 0x83}, {0x3, 0x0, 0x2ce}, {0x9, 0x5, 0x20b}, {0xe, 0x2, 0x9}, {0x2, 0x5, 0x1f9a3dbf}]}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x5, 0x3}], "c0de"}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xd}, {0xd, 0x5}]}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0xe, 0x2}, {0x8, 0xfd}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0xdecd16a5}, {0xe, 0x1ff}]}, @enum={0x7, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xfffffffb}, {0x2, 0xfffffff9}, {0xc, 0xd6}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x30]}}, 0x0, 0x15c, 0x0, 0x0, 0x40}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x20000000000023)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x844)
syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00')
socket$kcm(0xa, 0x1, 0x106)

2m6.10260121s ago: executing program 4 (id=3225):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x317, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xaab}}, {{{0x9, 0x5, 0x81, 0x3, 0x47914e0c8fa26e47, 0x0, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})

22.139468871s ago: executing program 3 (id=3471):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000008010100000000000000000700000206000240004700000c0480080001400000005b090001007a31000000000500030001000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044)
fanotify_init(0x1200, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008087}, 0x46040)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xcc, 0x0, 0x6, [0x9, 0x4b, 0x6, 0x7, 0x1000, 0xa1]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0x12, "056ba5f3ddccdacf4aa438a2d50fef75"}]}, @end, @rr={0x7, 0x7, 0x83, [@rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x71, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x86, 0x9, "f6a6ece2c32879"}, @ssrr={0x89, 0x1f, 0xe, [@empty, @private=0xa010100, @private=0xa010101, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}]}}}], 0xb0}, 0x200040c4)
r5 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r5, 0x0)
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)

21.620470632s ago: executing program 3 (id=3472):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
epoll_create1(0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0x4}, 0xffff})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe9d56e341cf0749c777b", 0x33}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/86, 0x56}, {&(0x7f0000000300)=""/95, 0x5f}], 0x2}, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f00000002c0)={0x7fffffff, 0x0, 'client1\x00', 0x80000002, "7fafdc4fbe3bc961", "1220965092974ad46350ac471f54ea9eb859c3ea4cc764751ff27d2ff9a6188b", 0x800000, 0x6})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

19.023879574s ago: executing program 3 (id=3477):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b", 0x62}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3", 0x40}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

18.97007518s ago: executing program 5 (id=3478):
syz_usb_connect(0x5, 0x27, 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0x6, 0x1001, 0x78, &(0x7f0000000080)="152e9af09c6f8be8f8deac95ab3d2d202b4308615dabaa7c2a7be21c692e87f8d6fb326f051e3129752502db8639a1f2449387fcecf78b630c958d5a07ddbb947224e013f5a59f214d3dce1bb4e2487bd355b58808b3c6908db730ee4d3b07fe1dcc7fd61f560f37ff72de2ca000"/120}], 0x1})

18.382077511s ago: executing program 3 (id=3480):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r1, r1, 0x0, 0x800007)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x189, 0x80, 0xae38}, 0x23d, 0x6, 0x2, 0x0, 0x7fff})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100000001"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/ip_mr_vif\x00')
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020700000000000000070000fe010013"], 0x38}, 0x1, 0x400000000000000}, 0x0)
preadv(r4, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0xf20, 0xc51a)

16.147575967s ago: executing program 5 (id=3481):
futex(&(0x7f000000cffc), 0xa, 0x1, 0x0, 0x0, 0x1)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x40000000, 0x3, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
io_setup(0x4, &(0x7f0000000e80)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001580)=[0x0])
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x40000000, 0x3, 0x3}, 0x10)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x35aa2eef, 0xff, 0x2, "9bc7224cd7284b5ae26399df2167290f", 0x40, 0x1, 0x3, 0x6e, 0x3, 0xb4, 0x6})
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x20002}}, 0x10, 0x0}, 0x0)

16.05221556s ago: executing program 1 (id=3482):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x64, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x38}, @flat=@binder={0x73622a85, 0x103, 0x1}, @fd}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x2}], 0x8f, 0x0, &(0x7f0000000740)="84c43dc19c09296f6b82bf908ce6c93940c4b2274c4421f617d66d21a24ed2e1072af44cfc82eed8785f2440da755ec3ad7e7a19ac4b756087d2744f483e7dbd948f29ee05b5b1200f0c81a6ca9a08dbe9a3a933fef7e86130429467dfe26671ac57d76e253744ac9ab33a259ebe6a12a7c6d0ce7a6f03ae85a63ec73c2c3a8307843d98fffac5bb12c9f2122e60fc"})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.652979404s ago: executing program 1 (id=3483):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040010)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0xf, 0xc}, {0x0, 0xd}, {0xf, 0x8}}}, 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000002500010125bd7000fbfffffe0b00000008000300470000001f0050"], 0x3c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (fail_nth: 2)

8.483424966s ago: executing program 0 (id=3484):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
shutdown(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket(0x6, 0x1, 0x0)
shutdown(r2, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{0x9, 0x2, 0xb4, 0x1}, {0xffff, 0x47, 0x1, 0x5}, {0x80, 0x6, 0x1, 0x2000008}, {0x0, 0xc, 0x0, 0x727}, {0x4688, 0xd, 0x4}, {0x6, 0x2, 0x0, 0x7fffffff}, {0x5, 0x3, 0xfc, 0xfffffffb}, {0xfff, 0xf1, 0xfb, 0x9}]})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$lock(r5, 0x6, &(0x7f0000000100)={0x1, 0x1, 0x2f7, 0x1})

7.5103462s ago: executing program 1 (id=3485):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
time(&(0x7f0000000100))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0xcd7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2}], 0x1, 0x40800)
r5 = socket(0x10, 0x80000, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000006c0)=@ethtool_stats={0x4b, 0x1, [0x1]}})
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0))
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x1)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121b41)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r7, &(0x7f0000000180)=@other={'unlock', ' ', 'io+mem'}, 0xe)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)

7.236856889s ago: executing program 0 (id=3486):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40085)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
open(&(0x7f0000000780)='./bus\x00', 0x145c3f, 0x0)
io_setup(0x5ff, &(0x7f0000000400)=<r3=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0xe9c3ea5968491921)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x4000000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5a, 0xffffffffffffffff, &(0x7f00000007c0)="f95fb92ddbf422edd60205346a1077106bb7ce38403f9bb3270200000000000000d37393434b2476c8e1d5898d22fe3c218252b77cf57ca951bf339045461e37f26df135d09455f3202bfecadb98db2722d24e700a5039af6defe3d0256471e009e4c5fa5f7969a50c935dc2116b59d8a95e7e5089ebd99cb98c2fe450d0c8eb8af785c69eda8d13849963d7e8e6367757df53c100000000202b46702e68826e63c3329f713f2c3953f5305baa8feb688cdc83f2f92c6654d1b940c43fa0a5a87cb9e2aca20e1522a8a000f4512fe9004939524d6c6bb555875cbf23fa738735af599df331f92c0c000000000000000bfb3dbc50cbd2fcbf8bba1d43d61c0866d0ba83632e635cd65245783c2ec241b2f07ed00c815789c558a7e81b8ade1ea7dde3c11f4258c086dc6c0ac0d57d7af2eb200aa6910a", 0x136, 0x10000, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x8, r6, &(0x7f0000000580)="bca9685f5976be906650bed1bb0537f22f2851291373c7bfe5b4c72dde32b0a7346b2fdd2036b1a757d245b60ba98f7687be0863295d869dae24f243a758945b63aacecb55770e6d4bc7419461b4be0e9caa55f0f9425f695ce765c4bf51e89982fefdbef243aaa2dd250d515a2c7e0eff0832ac11c0", 0x76, 0xffffffffffff5ea0, 0x0, 0x3}])
write(r7, &(0x7f0000000080)="09000300010001", 0x7)

6.346285109s ago: executing program 1 (id=3487):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001", @ANYBLOB="c9478614d4a72ca3c5cd6c108e26afd9bfd316b3b6f2bb51cada0000", @ANYRES16=r0, @ANYRES32=r2, @ANYRES16, @ANYRES64=r1], 0x40}}, 0x4040080)
close(0xffffffffffffffff)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x6e34, 0x4, 0x10, 0xffffffa4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x80)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20014000000120854e8c4b94a5715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61b31646d1c84e5bad8ed1fa14e4132bb0f4014b1b02f975e80f557ba0b2b6da579d38473a066253bf22980cd6867cfa844725"], 0x0})
sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f00000005c0)=@caif, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x1, 0xc040)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x10001, 0x4, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000464731e1486e98d780206338255a8100"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00'})

6.01971023s ago: executing program 5 (id=3488):
openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x5f, 0x5f, 0x5f, 0x20]}}, 0x0, 0x1e, 0x0, 0x1, 0x9}, 0x28)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2})
syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00')

6.019210579s ago: executing program 3 (id=3489):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, 0x0, 0x0, '\x00', 0x1ffffffffffffd64})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x9, 0x2b9c9d, 0x1000000})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0)
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff)

5.617133392s ago: executing program 0 (id=3490):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x800)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[<r3=>0x0]})
socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="050427b97000fedbdf250100000008000100", @ANYRES32=r4], 0x9c}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084)
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000380)={0x3, r3, 0x132b, 0x0, 0x6, 0x6, 0xd6, 0x5, 0x9}) (async)
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000380)={0x3, r3, 0x132b, 0x0, 0x6, 0x6, 0xd6, 0x5, 0x9})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000032000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316", @ANYBLOB="96ce86e7c292eccb8decf1b3af2f795f02bf3a6cfbdddc54e86a778ec108794c803451aef8dd7c56508f5deeab9d35dacd620a63d9125c7d6aea2fb865b07d366ffa569307c0c4cb8687cd7c1caaa44d517efa6168b6de4e1391a5585daf3f8a2be1ea82715d96440df3c6bf136b2edbd9c144f01d1cdd6c32ddf6b2ac5e9bce29227ad757ea01c453b8d2402d4cb95881a326cffc1bcb984b2ca4e1854d24fa6fd7f649031f6b7e2c5e7c6fd1a80f2bd46166a60d3b4214aa7ae2d9f9b4b4175c9da9f91d0541d5cfbd77e67a538e53b44f6ddb9313"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, r7, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="96ce86e7c292eccb8decf1b3af2f795f02bf3a6cfbdddc54e86a778ec108794c803451aef8dd7c56508f5deeab9d35dacd620a63d9125c7d6aea2fb865b07d366ffa569307c0c4cb8687cd7c1caaa44d517efa6168b6de4e1391a5585daf3f8a2be1ea82715d96440df3c6bf136b2edbd9c144f01d1cdd6c32ddf6b2ac5e9bce29227ad757ea01c453b8d2402d4cb95881a326cffc1bcb984b2ca4e1854d24fa6fd7f649031f6b7e2c5e7c6fd1a80f2bd46166a60d3b4214aa7ae2d9f9b4b4175c9da9f91d0541d5cfbd77e67a538e53b44f6ddb9313"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, r7, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94)
socket(0x200000000000011, 0x2, 0x3c644)
socket(0x200000000000011, 0x2, 0xd)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @remote}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x40}, 0x4, 0x700000000000000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xb, 0xa, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x4}, 0x94)

4.52693174s ago: executing program 5 (id=3491):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
shutdown(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket(0x6, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
shutdown(r2, 0x1)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{0x9, 0x2, 0xb4, 0x1}, {0xffff, 0x47, 0x1, 0x5}, {0x80, 0x6, 0x1, 0x2000008}, {0x0, 0xc, 0x0, 0x727}, {0x4688, 0xd, 0x4}, {0x6, 0x2, 0x0, 0x7fffffff}, {0x5, 0x3, 0xfc, 0xfffffffb}, {0xfff, 0xf1, 0xfb, 0x9}]})
r5 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, &(0x7f0000000080), 0x51)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010028bd7000fedbdf2564010100000000090000000000000000000044d3060032000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)

3.186276728s ago: executing program 5 (id=3492):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x64, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x38}, @flat=@binder={0x73622a85, 0x103, 0x1}, @fd}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x2}], 0x8f, 0x0, &(0x7f0000000740)="84c43dc19c09296f6b82bf908ce6c93940c4b2274c4421f617d66d21a24ed2e1072af44cfc82eed8785f2440da755ec3ad7e7a19ac4b756087d2744f483e7dbd948f29ee05b5b1200f0c81a6ca9a08dbe9a3a933fef7e86130429467dfe26671ac57d76e253744ac9ab33a259ebe6a12a7c6d0ce7a6f03ae85a63ec73c2c3a8307843d98fffac5bb12c9f2122e60fc"})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.8541809s ago: executing program 0 (id=3493):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELSETELEM={0x6300, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x159c, 0x3, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa90d}, @NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x633}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffdf47}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x91868ac12a219707}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "f3192cc5747c2889512e3e8d124e27e63b7d0b38ce722fe4dba65434ff652d57e4a1c6dd60aecfe429a218c72d2fdd62f07c9b57179f972a0142154a59758ffe0a95d85d820d521eaf4268a2321524f583318b9fe19b2c5408557f00781fd67c307e3ad08ca568573b301cd6"}]}, {0x1408, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1404, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x13f8, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x104, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "968faca8bd2cb0dc87bc0118419b9aa361b696cd93d50d7def01d05a8e57fed17ee65447a36b8eb7733ac3b156ba5342269a70e713e7feca703d9ec20330fec964cd844465593fd5cdb71933579126fa9015498f496466c6212ac1757337b48350902eaf0d5d3ca48a1f0864f6efc8833848329d08a13514e32c82eeb4c82dac08d71c5d9c0f082adf916f0456851be81a0ec8bc116f6999bed50bf2a907e7d7cec43f39b92cc293f9541a342a8d99afbb15c243239bfa995f68a17092a23d79679a10409a447f35b094c557a5"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_CMP_DATA={0x11e4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe4, 0x1, "2d4e1d9cb75a96c8ffb743f7c7ca796a07a2bec0ce20c1ac1452ddf2b0f60cd5e171f7071eb1b073e22f4ccea7ebd8dd70af27c5d06313f47e5d29abad50f9e490b4bb07c51bc3c4ba0ca873dca84a1103ea948af1c95a742847649ad3d6d44b356133d1055e1ee651ee8607b238f8824ca36adbb0db50f057d45a736fdb4fe1935a54767c3415fccac5527eda9a1127a506b4ac6594790cd12e7bba2cc5daff5ca9250be22a9616b7829c7917baab717d7f5d52325f5fed32734edd593ad3cd1c7f23f493afb70a3134427ed52b4c761415bb6b3ce1798ff4864d709f30d60f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xce, 0x1, "3bf87a907a759216bc8ac4711b2e586b524bfa2326a59817c383583d208379c8c6e2ed48f3800d7fc85fdae58fa2a1aaab5b2d5ff361b9f26d01b8b6ebb22bbeda028de504df96d51f4c268085e6ee802d8c4503cb18a4da815add1ecfd89effd3a26ee83765beb55bc779d359f03cb6e8b886012ecc9781d206f4cc0920c2fc6db109218b2f356f37bc878e839ebabc99ef0ac97805f20318962e2016290b5a2dfac558272cdaace607042f0e791b4ec73870eb41a0fcabcb4548298504dceb9a7953b1c806d0ee3338"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "06f5ca7f1c598a2a15ff58dccc"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_OP={0x8}]}}}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4d00, 0x3, 0x0, 0x1, [{0x7e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0x51, 0x1, "25104945187d42e908261b67012da7259389cf8ceeee95e4eec5362c378c33d2891d4b506b4b0e832e174a52dd31e1f160460a4b411f122f3d0856306fe63f8fd692fd76a53edb949aa4efc3a8"}, @NFTA_DATA_VALUE={0xa4, 0x1, "4b3d12a933e542e0ae70a512b2361f83dc0b24fff619690d87582cedaec486e196b86a0745c56af38b4dff96f634ea0c7f2fb77cdccd0851e243fef78d0f8ed0113cfe44e94f0a7f5933b756867aa157b73f22f5d25f1e260bc49b1a95eb51bf8c822ec48209e8f8774390fb4475d3801f374a5c9227298a42a22aa19985929813bd0b045afb5878df8cab0f085c2242271f0a291f6d1d0474dbaeff75d8ea85"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "8831861442b7c3ddd3bd9c40625df63ee7b5740a571d15e27bcd72b40d89b76b320696561c18b50eac5bb27960babea28dfba4eaeaa33044"}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "f7a05eba81284f20102685044fd5bfeb4d9d7131f06a7bf7e1e0efa5f9fe2c4876ee574742516c4f98ff089ff7b0a539822d2f1a8ab53046cca20100d68731662f0997d4919b9a174ada8e92"}, @NFTA_DATA_VALUE={0xbe, 0x1, "076acb599248af6a5c2a287741bf8f4560dd1385df713b8fe50963fa727eea7ed282f8d84027914caa94bdd13388f73e1d3755dc451d4d17b89c4e2c73c3b162a81079e8ea350b741d4039d6963f3256288f1c560ee745d1c87642fb1a683b96eb0dd250f12f66eb404bd04d96f658cb497cd753ecbc9a0480625669e9adc8be07eb5b2f14ea766c7865358cab1b4e30fa8d8799061d09973574e2b5af4af402928544b1fca3d3e387ea06948c47c0d94c1036f9265f5b01a4b6"}, @NFTA_DATA_VALUE={0x6, 0x1, "eba0"}]}, @NFTA_SET_ELEM_EXPR={0x88, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x73, 0x3, "ccff159bd1a397f2e95fc04e173a955aec84519179ad78450a63db5905093b3f89ab4aafda2a592cc335f6ed119f503f99e15f813e65db926466cd5f9a3a362147355f51004d9f291f04504e60569cdc586f2f7bbae918c0ba80ec20423512a4eeaba045b7576e2fd8661edab6ca9f"}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x49c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x3ac, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x3a0, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0xcc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_DATA={0x2c0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "a5a798ed49a7082e845ae0c966f4031a505cbfc8d534784247b82ef6613f9628718b5c3b0032a92894d95c6bc6beffa29d9c4c39ed1e2a7dbac0df37ac9bff"}, @NFTA_DATA_VALUE={0x7e, 0x1, "92ec9925c8144e95d0eff55d00b6e3592301abf8ff1eec2d58baadfe155ee8ae74aaa89c2494e42b93001bc2ba799ee2b53a245cf006c8208af5281ac27ee45ed04a971aef3322ee7967fb443824b47b8fe4bd1c694f1c3c45438e73b9694bc59156442960c07fec27a5b10b05735e6c87e898c22bdc45fdfc1c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x39, 0x1, "4c74e6bef312867c8eec9303d3478d8275aa5c1be7fca9457727ce5642de212e75be47b1434327fc64a800964e0d116131c254e81a"}, @NFTA_DATA_VALUE={0x73, 0x1, "94fa41858fde9b00cfe8117ea4477c74ea2fa2981d1a4bf9186a0b16d6bc6cd93372830259ee7873e93a59af0ee5bb294321bc1185feee6508755bd2878cb1d111f74066b73c8f0750bdcd7de4d892006308efc3d29c408deb387ad9073bb071315d8f36e974a4fcd4d97cabf0260e"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x43}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "ab9abd5aa851572389e762913c66c7caf5dc5fd8b47e3555d4abbaee939c8d7c4c51de6f3c297bb990056696545eece848814128"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xd8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x57695fe4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x244, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "14038e1701428c48ef67b265520647873114f016686867c949fe8f2f9f8e41ec834c140ac1eda9b03ff2f0982a1e215fbdea2a8c315727d69dfd0f4434526fc5744be5095145c4055c5301b90050e195a96ebefd5e45dea08d2dde472cae2fec3b8ab6f4e0a60d8bbd54d7705472cfce6d463f1ec6ad940b6b84d1597ed69547dd267ef69c28f6fd444e1aa98f15143d91f8bfa6794c231d920e62c837b07cff3a8653fda7b59fac2387aea8dd23f5ccf290b5d06f920a7a79a83d421f8216535fa3b35ec2d074c82b82b5a39124f0318203fc1285bfc870f81c4d866aca0559e6"}, @NFTA_DATA_VALUE={0x50, 0x1, "1a9b579087c87e2a24a4e49cdc1083286da637bf342d653f9475f3f33d3b197413fa2cf513b30b70c49f9f0dfe144fd932a4d1e6e622dbb240671bf4ef40ffb1e683a2e149329e49f4df2db5"}, @NFTA_DATA_VALUE={0x92, 0x1, "537491b9cff36874502ceb3ace24b87e97d79849186e68422f94f900479c1c968b43c30c8d5164d9b464b7c3bc5432d9daac5dfc4720929c7fe4f710905b5ff3c7a9c68ced4f3a343f69e77a8cb66c46d3ddd7bd176e69eab58b6e5842599a9424539f5556994af6db7e72c1cd20d4506cae220a1e03c95c0f608931f238f6d7566373830406caa8f7b656f1e996"}, @NFTA_DATA_VALUE={0x38, 0x1, "86dcc0fdb33fc64612a352586cd0d55fb16b32261fa718cdebec21442104c8d0592acbe0ba0236545d9d2c77ed11299532df7d73"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x261948f1e3b522eb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x61}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4716b515d4f0af4b}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7469712b42b85f4b}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "bfd1dc4269e6de0c1dbcda2983a4b224b792b97ca7cf4be5ffa42b5e64c2b03a68c49a217ad05ce515bf345d6a2f13717c947d9f6cb90bccd111094011b23cea353214d2944c1c76d568cfeec67519a4d816c15e514a0669635ae2eb41ef612a98961f1249ca"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xd}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x52}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, {0x2438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}, @NFTA_SET_ELEM_KEY_END={0x6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "a2a2c7"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x10cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x1020, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "8e030e3cb77aae7b7aee79e79ebddfe3846177d5aaa553b7a5ea818ba9c156fb5bdadfe193864a26dd0545d78d114ec899567c754fc57e6873cfa41015ef95452c42da5d9522cb633ae46dd87a9cca8e45d27c20b0a281c0b1caf8f75954b071422f6732dc949faa6fd046f81faa6cb4eb8b5aa1003cdfc94c3adf57b958137bad848a50c652fd08c5d8e5b7d9b0dbb52b5e0e09adf582a0be83"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x17c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "820cf35c98ab7f509f1407963d83a25bed5d30e411d070d8766e2699553d939372127f55b0a72e34672df84a6ce32637f4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "199fdfe0b1876d6e153b099f025bf34973c8d10ec9ab85e86cc2f0193c5fa3ee3fe62d2add6c9f49baad48c8d6bcdae767f4a57e32d3847eb107d483658c81b4b599a53e3f5f2c71c732f07d1193ed318cee6f96607f3864828b86913cebf9f1775a7560ea989bd291"}]}, @NFTA_SET_ELEM_USERDATA={0x8f, 0x6, 0x1, 0x0, "024bcc14f4a3050d79826f7693c86abcaf53653a566db942c15e5b60c8fec1e8e0f1ce51e01440d00c35eafb0bcc979fac87ad2eae07f646a29248813daa020b6ec5956b75cf73b5ee5670ee66a870fdce79bbb149307d9bbd4603a55c1847b4ef771f9c2b923b73ec5d2d9df102c22f976addcd9322de2997ac85583f39b2def5166db458cb529fd197c7"}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "0e8fbbbffdee30da133034143c14ff664a54643a88f6a97a6bc7b8da91682784ea09c0f100c18f57ee1b8e61c569f29e67d52d2e5f5e939b5acd8c6987f98c26b68d08f883ed3c82b6fc7a07bcd69d045f2ba6ab7a3ee020a95d9f25dd5f50d4122a78de6e4eb2afa38c50eb22b98aa57ab3bd0e435bd5e1a1182cde46d9c18a671b0750c5b10eba7fa027a89aa8567b40f46d7bd56b6507230a3db0d4f084704f883dd88dbd10a33b24320704defdca4d73ed58"}]}, @NFTA_SET_ELEM_DATA={0x132c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc4, 0x1, "5e7e4b1c276ec18a331d1c9b870e5c368770afd224392b156b5c240194a7904e6c73bcb7b5996ecea0e15e8aa16ef76e016734021933c8b73dbcebd44a0d7171b2d090bc29787d340ac9087d843917c8835eca615fab69e0df8646da7e8e794213346a8e89f65af8b7006a3678f9d234ecf9d12a6e15a7fc4307ce90e6b0f4854e5077d5f8778af09956a643e0303291223d7a0b91d5407e8ad4d84a080c075d2f027f59eb0b2158e0d19c0e3175edeb2594aa43658d6be9e08fc9d8092d1d0b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "dec10374b3e9f66cea020cb912b619f768bf97f92f25dbea286a4293148e6fe1ce54bcf6122428bc6cca852fe0c7ada156b18a8fd2e0b83e82ee5b46d484a9dd4469193a1cb25500906002ed119ff661e679bf803820b411ca7811ab67a9e17a0a8a342b2dfe4e1faa1eb55b5e12e9f27e079a9b1b1b9d6d0d315bceb259903a3a0d8541bc2debd43171cea32c3e2a185aa43717854d0f17de9e227fd816e9776260e2c0e47ef98d96f78aaf9755786cd6c6e8f9c82d8f22d26eb3f2795f0661b63c6d37ffb480"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "717576709105ea506bc57843dbcb466bdf87b2a9c4b85f1b0cccf451eb37f1f2f01d30fbc1e9a8883c3f4e90db57b7f71d1f29559ac4762df03047cc535e07ff94c66795a935ff2f3bc779aec8be978b0dabe4b98236a5105819be92ec1481f5c0aa471a1e911b4ef639a9f6452ad3359a290b6b96d80e2a6ad78ae197cc1ef2a9ff5886e6375bbd1ebf9eb9b7f4a918621f1f92d70cbc276a016bc58a31446951382a5e980a85c0885dfd17b4a575c5cac874e60d6f5daa7de1b12317234f956973faca"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x260, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x70, 0x1, "acd7617e870a061e65766503fbd1d0a615213b3f9e82c482e6a7c08b9e77aec690f049b29c28f4d3c9b0b4ee83f5bf050e9991c9f5f0bfff9e50e3ffdcf208fae266e05d1f6b72dc4666c6f8f91072758b1cf7840142762a988781f57e0d463abbd0c75000cb79b97277a0e6"}, @NFTA_DATA_VALUE={0x97, 0x1, "ecb215d542543bc1848d41cec26407b0bd82f488343d14e6f5c806af7a15d1c3e27461739e92ffe74078636db2fad34c7ec9b432c5970caf08754eeed9c27aaf6db535d6c7b8d914dd6f56d66afd1ad1d829edc8a714daa4ab5b2d7b09bc905f68ee34399bd2273aa7bb486ef29777aeda9bc82c6781b0d65bbdc730f2b3e502a3036688394d7d759e06f6b213690b9f3e2616"}, @NFTA_DATA_VALUE={0xca, 0x1, "b7044a98b5502ad0ee147f95b5b6baefd1d9c2bac96e43b05d120c35b6fc45ad2242dbe4e6c64571dfca26b3bd0a43a5faf7d1353a448f380d138cf2dea0f520e226970ccc3ff6b8cf2190e0e84dd86cb04964d5ebb866e73defe1c929d45d3fe1108ada3a8ba707b842f0e9aab43461486fad1ca1fbc7eaa4a933f56ba9d585fbba32fe0a305b0ec482884e9cd3bd1cf5f84176f3c3998179006e1e824c821de589bb87718cbf6000be74dd0cb22b4023c4442782b8c0da40ead0ffd32370eceb99c1aef4df"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "bd737e855629d51d4d069cfeab68c50ab3817fd3d18eb404b99ef57a884a7476ea31f8dfb3d64956876953c73af7bd59d3bbe0970b991a03b8a3a07440da28af465fb2db6882190b"}, @NFTA_DATA_VALUE={0xc3, 0x1, "b464b0d095e9de58be516a2bd459a4e037c3b25a6822e43d2eb22a3a8d90e094693293bb8cd562edc32ce17011b82e30f464950299b515056ab6020fba1e83bc7699b70acd779bf3cff64241530f60cb382d50845212b1ff16af1415a572ef162c243b94a8fd2db95c25b5a49c34927e50d4dbe59088e2b593610c6c59bdb585a52959a2a477a9d194ad43aadbcb9451cab17140e8be2ecf571208a0384eddef90e92ac211fa3cd21a71ad96654baf566294eeab9fe3483397523f5a370ee8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x19c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "fed565e9b36126a779ddda03e7ffca81989b5632d054e3738f89bf6fde65014e84b52a3de3792fbd51b892f56b60f57eb72bba3ca418b09cb323ca93f4cef5ff6319b67369f7b9729ba46c8748d389db6ffbf9f9906cd828e0d9bf10ddb26d6f4aff7ada566f68f7f80d65869f6d144aaf8726cd0a81ea480c5250b4e2e284e69a815e1cb8abdc004a1c220c98ce101aa3b85fb8665610b361b61bcceca798028580232c8725a6eed3bd24a42875dbbf8a016558063a030adb8a082fd7639d810b8373f7d9cbc97a7939aeef630c9aaf"}, @NFTA_DATA_VALUE={0x55, 0x1, "5f345b67461d612fae87a5fc946e3fc887af49167f7e2ac16e3e7d1d81357ac996dbff3de13d6127046abebaea90713382625cc2136232f67f45ccae49f8ae4084e835355dee0ada87e4392531042d9f74"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6328}}, 0x0)

2.525585423s ago: executing program 3 (id=3494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000001})
socket(0xa, 0x3, 0xff)

2.237801323s ago: executing program 0 (id=3495):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
unshare(0x400)
bind$packet(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x483, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001105240300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x12b001)
ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x80000001}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000240)=[{&(0x7f0000000180)="f8fde6d81e96f0", 0x7}], 0x1, 0x0, 0x0, 0x3, 0x74, 0x8000, 0x0, 0x3})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.388953482s ago: executing program 1 (id=3496):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
time(&(0x7f0000000100))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0xcd7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2}], 0x1, 0x40800)
r5 = socket(0x10, 0x80000, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000006c0)=@ethtool_stats={0x4b, 0x1, [0x1]}})
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0))
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x1)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121b41)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r7, &(0x7f0000000180)=@other={'unlock', ' ', 'io+mem'}, 0xe)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)

1.387436146s ago: executing program 5 (id=3497):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

1.139627126s ago: executing program 0 (id=3498):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) (fail_nth: 4)

0s ago: executing program 1 (id=3499):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40085)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
open(&(0x7f0000000780)='./bus\x00', 0x145c3f, 0x0)
io_setup(0x5ff, &(0x7f0000000400)=<r3=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0xe9c3ea5968491921)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x4000000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5a, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x136, 0x10000, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x8, r6, &(0x7f0000000580)="bca9685f5976be906650bed1bb0537f22f2851291373c7bfe5b4c72dde32b0a7346b2fdd2036b1a757d245b60ba98f7687be0863295d869dae24f243a758945b63aacecb55770e6d4bc7419461b4be0e9caa55f0f9425f695ce765c4bf51e89982fefdbef243aaa2dd250d515a2c7e0eff0832ac11c0", 0x76, 0xffffffffffff5ea0, 0x0, 0x3}])
write(r7, &(0x7f0000000080)="09000300010001", 0x7)

kernel console output (not intermixed with test programs):

 ep0 maxpacket: 16
[  876.259030][ T6707] usb 4-1: unable to get BOS descriptor or descriptor too short
[  876.260551][ T6707] usb 4-1: config 128 has an invalid interface number: 238 but max is 0
[  876.260576][ T6707] usb 4-1: config 128 has an invalid interface association descriptor of length 2, skipping
[  876.260595][ T6707] usb 4-1: config 128 has no interface number 0
[  876.260649][ T6707] usb 4-1: config 128 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  876.260678][ T6707] usb 4-1: config 128 interface 238 has no altsetting 0
[  876.263179][ T6707] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=8d.48
[  876.263208][ T6707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.263228][ T6707] usb 4-1: Product: syz
[  876.263243][ T6707] usb 4-1: Manufacturer: syz
[  876.263258][ T6707] usb 4-1: SerialNumber: syz
[  876.306132][ T1242] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[  876.434193][  T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.459474][ T1242] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  876.459501][ T1242] usb 6-1: config 0 has no interface number 0
[  876.463088][ T1242] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  876.463116][ T1242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.463191][ T1242] usb 6-1: Product: syz
[  876.463208][ T1242] usb 6-1: Manufacturer: syz
[  876.463222][ T1242] usb 6-1: SerialNumber: syz
[  877.348672][ T1242] usb 6-1: config 0 descriptor??
[  877.612544][ T6707] zaurus 4-1:128.238: invalid descriptor buffer length
[  877.612570][ T6707] usb 4-1: No union descriptors
[  877.644109][ T6707] usb 4-1: USB disconnect, device number 75
[  877.691808][T15572] team0: Port device team_slave_0 added
[  877.706804][ T1242] usb 6-1: selecting invalid altsetting 1
[  877.753873][ T1242] dvb_ttusb_budget: ttusb_init_controller: error
[  877.753895][ T1242] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  877.836968][ T1242] DVB: Unable to find symbol stv0299_attach()
[  877.890701][ T1242] DVB: Unable to find symbol tda8083_attach()
[  877.890717][ T1242] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  877.916407][ T1242] usb 6-1: USB disconnect, device number 63
[  877.962310][T15572] team0: Port device team_slave_1 added
[  878.105854][T15572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.105869][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.105888][T15572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.415094][T15572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.415107][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.415123][T15572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  878.463022][T15712] FAULT_INJECTION: forcing a failure.
[  878.463022][T15712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  878.463055][T15712] CPU: 1 UID: 0 PID: 15712 Comm: syz.3.3146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  878.463078][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  878.463088][T15712] Call Trace:
[  878.463096][T15712]  <TASK>
[  878.463105][T15712]  dump_stack_lvl+0xe8/0x150
[  878.463130][T15712]  should_fail_ex+0x46b/0x600
[  878.463147][T15712]  _copy_from_iter+0x1d3/0x1670
[  878.463165][T15712]  ? trace_kmem_cache_alloc+0x29/0xe0
[  878.463181][T15712]  ? __alloc_skb+0x27d/0x7d0
[  878.463196][T15712]  ? __pfx__copy_from_iter+0x10/0x10
[  878.463208][T15712]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  878.463231][T15712]  ? __alloc_skb+0x27d/0x7d0
[  878.463247][T15712]  ? netlink_sendmsg+0x650/0xb40
[  878.463262][T15712]  ? skb_put+0x11b/0x210
[  878.463278][T15712]  netlink_sendmsg+0x6c0/0xb40
[  878.463297][T15712]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.463316][T15712]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  878.463333][T15712]  ____sys_sendmsg+0x94c/0x9c0
[  878.463348][T15712]  ? __pfx_____sys_sendmsg+0x10/0x10
[  878.463362][T15712]  ? import_iovec+0x73/0xa0
[  878.463378][T15712]  ___sys_sendmsg+0x2a5/0x360
[  878.463388][T15712]  ? __lock_acquire+0x6b5/0x2cf0
[  878.463403][T15712]  ? __pfx____sys_sendmsg+0x10/0x10
[  878.463416][T15712]  ? kstrtouint+0x6e/0xe0
[  878.463439][T15712]  ? __fget_files+0x2a/0x420
[  878.463453][T15712]  ? __fget_files+0x3a6/0x420
[  878.463471][T15712]  __sys_sendmmsg+0x282/0x4e0
[  878.463484][T15712]  ? __pfx___sys_sendmmsg+0x10/0x10
[  878.463499][T15712]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  878.463522][T15712]  ? ksys_write+0x248/0x270
[  878.463534][T15712]  ? __pfx_ksys_write+0x10/0x10
[  878.463547][T15712]  __x64_sys_sendmmsg+0xa0/0xc0
[  878.463557][T15712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.463568][T15712]  do_syscall_64+0x15f/0xf80
[  878.463580][T15712]  ? trace_irq_disable+0x3b/0x140
[  878.463591][T15712]  ? clear_bhb_loop+0x40/0x90
[  878.463604][T15712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.463614][T15712] RIP: 0033:0x7fb42317c819
[  878.463625][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.463634][T15712] RSP: 002b:00007fb4213b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  878.463646][T15712] RAX: ffffffffffffffda RBX: 00007fb4233f6090 RCX: 00007fb42317c819
[  878.463654][T15712] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004
[  878.463661][T15712] RBP: 00007fb4213b5090 R08: 0000000000000000 R09: 0000000000000000
[  878.463668][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.463674][T15712] R13: 00007fb4233f6128 R14: 00007fb4233f6090 R15: 00007ffc1917bbc8
[  878.463690][T15712]  </TASK>
[  878.881546][T15715] FAULT_INJECTION: forcing a failure.
[  878.881546][T15715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  878.881580][T15715] CPU: 0 UID: 0 PID: 15715 Comm: syz.3.3149 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  878.881604][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  878.881616][T15715] Call Trace:
[  878.881624][T15715]  <TASK>
[  878.881632][T15715]  dump_stack_lvl+0xe8/0x150
[  878.881669][T15715]  should_fail_ex+0x46b/0x600
[  878.881700][T15715]  _copy_from_user+0x2d/0xb0
[  878.881729][T15715]  memdup_user+0x5e/0xd0
[  878.881756][T15715]  io_parse_restrictions+0x55/0x4c0
[  878.881782][T15715]  ? __kmalloc_cache_noprof+0x3a6/0x690
[  878.881802][T15715]  ? __se_sys_io_uring_register+0x16ba/0x1a20
[  878.881833][T15715]  __se_sys_io_uring_register+0x17a5/0x1a20
[  878.881865][T15715]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  878.881892][T15715]  ? ksys_write+0x248/0x270
[  878.881913][T15715]  ? __pfx_ksys_write+0x10/0x10
[  878.881941][T15715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.881962][T15715]  do_syscall_64+0x15f/0xf80
[  878.881993][T15715]  ? trace_irq_disable+0x3b/0x140
[  878.882011][T15715]  ? clear_bhb_loop+0x40/0x90
[  878.882033][T15715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.882050][T15715] RIP: 0033:0x7fb42317c819
[  878.882067][T15715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.882083][T15715] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  878.882103][T15715] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  878.882116][T15715] RDX: 0000200000000080 RSI: 000000000000000b RDI: ffffffffffffffff
[  878.882129][T15715] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[  878.882140][T15715] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  878.882152][T15715] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  878.882182][T15715]  </TASK>
[  879.094896][T15572] hsr_slave_0: entered promiscuous mode
[  879.104604][T15572] hsr_slave_1: entered promiscuous mode
[  879.365449][T15721] 9pnet_fd: Insufficient options for proto=fd
[  881.206150][ T5883] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  881.312568][T15734] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up
[  881.390384][ T5883] usb 2-1: Using ep0 maxpacket: 16
[  881.393270][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short
[  881.394524][ T5883] usb 2-1: config 128 has an invalid interface number: 238 but max is 0
[  881.394547][ T5883] usb 2-1: config 128 has an invalid interface association descriptor of length 2, skipping
[  881.394567][ T5883] usb 2-1: config 128 has no interface number 0
[  881.394607][ T5883] usb 2-1: config 128 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  881.394634][ T5883] usb 2-1: config 128 interface 238 has no altsetting 0
[  881.404609][ T5883] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=8d.48
[  881.404638][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.404658][ T5883] usb 2-1: Product: syz
[  881.404673][ T5883] usb 2-1: Manufacturer: syz
[  881.404687][ T5883] usb 2-1: SerialNumber: syz
[  881.750159][ T5897] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  881.790654][ T5883] zaurus 2-1:128.238: invalid descriptor buffer length
[  881.790731][ T5883] usb 2-1: No union descriptors
[  882.125480][ T5883] usb 2-1: USB disconnect, device number 24
[  886.688189][  T145] team0: Port device geneve1 removed
[  886.887423][ T5899] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  887.036287][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  887.038425][ T5899] usb 5-1: config 0 has an invalid interface number: 33 but max is 1
[  887.038531][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  887.038552][ T5899] usb 5-1: config 0 has no interface number 1
[  887.038606][ T5899] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  887.038644][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  887.040875][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  887.040902][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.040923][ T5899] usb 5-1: Product: syz
[  887.040938][ T5899] usb 5-1: Manufacturer: syz
[  887.040954][ T5899] usb 5-1: SerialNumber: syz
[  887.162700][ T5899] usb 5-1: config 0 descriptor??
[  887.209099][ T5899] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  887.397150][  T145] vlan2 (unregistering): left promiscuous mode
[  887.397182][  T145] bond0 (unregistering): left promiscuous mode
[  887.410340][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.410915][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.477033][  T145] bond0 (unregistering): Released all slaves
[  887.560532][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.579439][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.628742][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.631125][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.693467][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.693985][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.814355][ T5474] 8021q: adding VLAN 0 to HW filter on device eth5
[  887.815381][  T145] tipc: Disabling bearer <udp:syz2>
[  887.828073][  T145] tipc: Left network mode
[  888.646701][T15802] FAULT_INJECTION: forcing a failure.
[  888.646701][T15802] name failslab, interval 1, probability 0, space 0, times 0
[  888.646734][T15802] CPU: 1 UID: 0 PID: 15802 Comm: syz.1.3168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  888.646757][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  888.646769][T15802] Call Trace:
[  888.646778][T15802]  <TASK>
[  888.646786][T15802]  dump_stack_lvl+0xe8/0x150
[  888.646823][T15802]  should_fail_ex+0x46b/0x600
[  888.646853][T15802]  should_failslab+0xa8/0x100
[  888.646876][T15802]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  888.646906][T15802]  ? __alloc_skb+0x1d0/0x7d0
[  888.646931][T15802]  ? lockdep_hardirqs_on+0x7a/0x110
[  888.646959][T15802]  __alloc_skb+0x1d0/0x7d0
[  888.646990][T15802]  netlink_sendmsg+0x5d4/0xb40
[  888.647027][T15802]  ? __pfx_netlink_sendmsg+0x10/0x10
[  888.647062][T15802]  ? unwind_get_return_address+0x4d/0x90
[  888.647095][T15802]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  888.647126][T15802]  ____sys_sendmsg+0x94c/0x9c0
[  888.647151][T15802]  ? __pfx_____sys_sendmsg+0x10/0x10
[  888.647178][T15802]  ? import_iovec+0x73/0xa0
[  888.647213][T15802]  ___sys_sendmsg+0x2a5/0x360
[  888.647232][T15802]  ? __lock_acquire+0x6b5/0x2cf0
[  888.647260][T15802]  ? __pfx____sys_sendmsg+0x10/0x10
[  888.647313][T15802]  ? __fget_files+0x2a/0x420
[  888.647338][T15802]  ? __fget_files+0x3a6/0x420
[  888.647373][T15802]  __x64_sys_sendmsg+0x1c3/0x2a0
[  888.647396][T15802]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  888.647424][T15802]  ? __pfx_ksys_write+0x10/0x10
[  888.647451][T15802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.647472][T15802]  do_syscall_64+0x15f/0xf80
[  888.647494][T15802]  ? trace_irq_disable+0x3b/0x140
[  888.647514][T15802]  ? clear_bhb_loop+0x40/0x90
[  888.647538][T15802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.647557][T15802] RIP: 0033:0x7f5ead2fc819
[  888.647576][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.647593][T15802] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  888.647615][T15802] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  888.647630][T15802] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004
[  888.647643][T15802] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[  888.647655][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.647667][T15802] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  888.647696][T15802]  </TASK>
[  888.766136][ T1242] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  888.916061][ T1242] usb 4-1: Using ep0 maxpacket: 16
[  888.919751][ T1242] usb 4-1: unable to get BOS descriptor or descriptor too short
[  888.926881][ T1242] usb 4-1: config 128 has an invalid interface number: 238 but max is 0
[  888.926909][ T1242] usb 4-1: config 128 has an invalid interface association descriptor of length 2, skipping
[  888.926930][ T1242] usb 4-1: config 128 has no interface number 0
[  888.927032][ T1242] usb 4-1: config 128 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  888.927062][ T1242] usb 4-1: config 128 interface 238 has no altsetting 0
[  888.986346][ T1242] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=8d.48
[  888.986374][ T1242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.986391][ T1242] usb 4-1: Product: syz
[  888.986445][ T1242] usb 4-1: Manufacturer: syz
[  888.986458][ T1242] usb 4-1: SerialNumber: syz
[  889.319419][ T1242] zaurus 4-1:128.238: invalid descriptor buffer length
[  889.319647][ T1242] usb 4-1: No union descriptors
[  889.411403][ T1242] usb 4-1: USB disconnect, device number 76
[  889.697595][ T5899] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  889.727893][ T5899] usb 5-1: USB disconnect, device number 82
[  889.744639][ T2384] pvrusb2: Invalid write control endpoint
[  889.957571][ T2384] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  889.957598][ T2384] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  891.586206][ T5898] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  891.768114][ T5898] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  891.768143][ T5898] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  891.768162][ T5898] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  891.768183][ T5898] usb 2-1: config 220 has no interface number 2
[  891.768262][ T5898] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  891.768290][ T5898] usb 2-1: config 220 interface 0 has no altsetting 0
[  891.768309][ T5898] usb 2-1: config 220 interface 76 has no altsetting 0
[  891.768328][ T5898] usb 2-1: config 220 interface 1 has no altsetting 0
[  891.771504][ T5898] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  891.771533][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.771554][ T5898] usb 2-1: Product: syz
[  891.771569][ T5898] usb 2-1: Manufacturer: syz
[  891.771584][ T5898] usb 2-1: SerialNumber: syz
[  892.184040][ T5898] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  892.184082][ T5898] uvcvideo 2-1:220.0: No valid video chain found.
[  892.184143][ T5898] usb 2-1: selecting invalid altsetting 0
[  892.278184][ T5898] usb 2-1: selecting invalid altsetting 0
[  892.278224][ T5898] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  892.292474][ T5898] usb 2-1: USB disconnect, device number 25
[  893.118577][T15852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3179'.
[  893.588728][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'.
[  893.770903][ T6004] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  893.970834][ T6004] usb 6-1: Using ep0 maxpacket: 16
[  893.972883][ T6004] usb 6-1: unable to get BOS descriptor or descriptor too short
[  893.973812][ T6004] usb 6-1: config 128 has an invalid interface number: 238 but max is 0
[  893.973827][ T6004] usb 6-1: config 128 has an invalid interface association descriptor of length 2, skipping
[  893.973837][ T6004] usb 6-1: config 128 has no interface number 0
[  893.973862][ T6004] usb 6-1: config 128 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  893.973877][ T6004] usb 6-1: config 128 interface 238 has no altsetting 0
[  893.975727][ T6004] usb 6-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=8d.48
[  893.975744][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.975754][ T6004] usb 6-1: Product: syz
[  893.975762][ T6004] usb 6-1: Manufacturer: syz
[  893.975770][ T6004] usb 6-1: SerialNumber: syz
[  894.287968][ T6004] zaurus 6-1:128.238: invalid descriptor buffer length
[  894.287992][ T6004] usb 6-1: No union descriptors
[  894.318718][ T6004] usb 6-1: USB disconnect, device number 64
[  894.776188][  T145] hsr_slave_0: left promiscuous mode
[  894.816701][  T145] hsr_slave_1: left promiscuous mode
[  894.936970][  T145] pim6reg (unregistering): left allmulticast mode
[  898.521985][T15873] dummy0: entered promiscuous mode
[  898.540646][T15873] macsec1: entered promiscuous mode
[  898.540681][T15873] vlan2: entered promiscuous mode
[  899.294941][T15896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3190'.
[  900.009008][T15911] FAULT_INJECTION: forcing a failure.
[  900.009008][T15911] name failslab, interval 1, probability 0, space 0, times 0
[  900.009041][T15911] CPU: 1 UID: 0 PID: 15911 Comm: syz.5.3192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  900.009064][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  900.009076][T15911] Call Trace:
[  900.009083][T15911]  <TASK>
[  900.009090][T15911]  dump_stack_lvl+0xe8/0x150
[  900.009124][T15911]  should_fail_ex+0x46b/0x600
[  900.009155][T15911]  should_failslab+0xa8/0x100
[  900.009177][T15911]  kmem_cache_alloc_noprof+0x87/0x680
[  900.009208][T15911]  ? ptlock_alloc+0x20/0x70
[  900.009232][T15911]  ptlock_alloc+0x20/0x70
[  900.009252][T15911]  pte_alloc_one+0x7e/0x380
[  900.009278][T15911]  __pte_alloc+0x25/0x1a0
[  900.009305][T15911]  do_pte_missing+0x1c13/0x2950
[  900.009341][T15911]  ? mt_find+0x481/0x630
[  900.009372][T15911]  handle_mm_fault+0xd0a/0x13c0
[  900.009408][T15911]  ? handle_mm_fault+0xe7/0x13c0
[  900.009441][T15911]  ? __pfx_handle_mm_fault+0x10/0x10
[  900.009489][T15911]  ? lock_mm_and_find_vma+0xa7/0x340
[  900.009519][T15911]  do_user_addr_fault+0x75b/0x1340
[  900.009554][T15911]  exc_page_fault+0x6a/0xc0
[  900.009578][T15911]  asm_exc_page_fault+0x26/0x30
[  900.009598][T15911] RIP: 0010:rep_movs_alternative+0x11/0x90
[  900.009627][T15911] Code: e9 d4 23 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f
[  900.009644][T15911] RSP: 0018:ffffc90003d07ca8 EFLAGS: 00050202
[  900.009662][T15911] RAX: ffffffff84a11f00 RBX: 0000000000000004 RCX: 0000000000000004
[  900.009675][T15911] RDX: 0000000000000000 RSI: ffffc90003d07d70 RDI: 0000200000bbdffc
[  900.009689][T15911] RBP: ffffc90003d07dd0 R08: 0000000000000003 R09: 0000000000000004
[  900.009701][T15911] R10: dffffc0000000000 R11: fffff520007a0fae R12: 0000200000bbe000
[  900.009716][T15911] R13: 00007ffffffff000 R14: ffffc90003d07d70 R15: 0000200000bbdffc
[  900.009739][T15911]  ? _copy_from_user+0x80/0xb0
[  900.009774][T15911]  _copy_to_user+0x8a/0xb0
[  900.009803][T15911]  do_timer_create+0xb16/0x1100
[  900.009835][T15911]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  900.009863][T15911]  ? __pfx_do_timer_create+0x10/0x10
[  900.009890][T15911]  ? rt_mutex_slowunlock+0x1cb/0x300
[  900.009929][T15911]  __x64_sys_timer_create+0x14c/0x1c0
[  900.009957][T15911]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  900.009981][T15911]  ? ksys_write+0x248/0x270
[  900.010003][T15911]  ? __pfx_ksys_write+0x10/0x10
[  900.010020][T15911]  ? __task_pid_nr_ns+0x28/0x470
[  900.010053][T15911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.010074][T15911]  do_syscall_64+0x15f/0xf80
[  900.010093][T15911]  ? trace_irq_disable+0x3b/0x140
[  900.010112][T15911]  ? clear_bhb_loop+0x40/0x90
[  900.010137][T15911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.010156][T15911] RIP: 0033:0x7f4d4f4bc819
[  900.010174][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.010191][T15911] RSP: 002b:00007f4d4d6d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  900.010211][T15911] RAX: ffffffffffffffda RBX: 00007f4d4f736180 RCX: 00007f4d4f4bc819
[  900.010226][T15911] RDX: 0000200000bbdffc RSI: 0000000000000000 RDI: 0000000000000000
[  900.010239][T15911] RBP: 00007f4d4d6d4090 R08: 0000000000000000 R09: 0000000000000000
[  900.010252][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  900.010265][T15911] R13: 00007f4d4f736218 R14: 00007f4d4f736180 R15: 00007ffd509fb9d8
[  900.010297][T15911]  </TASK>
[  902.480036][T15925] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3197'.
[  902.747978][T15942] FAULT_INJECTION: forcing a failure.
[  902.747978][T15942] name failslab, interval 1, probability 0, space 0, times 0
[  902.748012][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.1.3200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  902.748035][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  902.748047][T15942] Call Trace:
[  902.748054][T15942]  <TASK>
[  902.748063][T15942]  dump_stack_lvl+0xe8/0x150
[  902.748098][T15942]  should_fail_ex+0x46b/0x600
[  902.748137][T15942]  should_failslab+0xa8/0x100
[  902.748159][T15942]  kmem_cache_alloc_noprof+0x87/0x680
[  902.748189][T15942]  ? alloc_empty_file+0x5b/0x1d0
[  902.748219][T15942]  alloc_empty_file+0x5b/0x1d0
[  902.748245][T15942]  path_openat+0x11b/0x38a0
[  902.748273][T15942]  ? try_to_take_rt_mutex+0x840/0xb00
[  902.748293][T15942]  ? arch_stack_walk+0xfb/0x150
[  902.748326][T15942]  ? __lock_acquire+0x6b5/0x2cf0
[  902.748355][T15942]  ? __pfx_path_openat+0x10/0x10
[  902.748378][T15942]  ? kasan_save_track+0x4f/0x80
[  902.748404][T15942]  ? kasan_save_track+0x3e/0x80
[  902.748429][T15942]  ? __kasan_slab_alloc+0x6c/0x80
[  902.748457][T15942]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  902.748492][T15942]  ? do_raw_spin_lock+0x12b/0x2f0
[  902.748521][T15942]  do_file_open+0x23e/0x4a0
[  902.748539][T15942]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  902.748566][T15942]  ? __pfx_do_file_open+0x10/0x10
[  902.748583][T15942]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  902.748634][T15942]  ? alloc_fd+0x64e/0x6c0
[  902.748668][T15942]  do_sys_openat2+0x113/0x200
[  902.748697][T15942]  ? __pfx_do_sys_openat2+0x10/0x10
[  902.748725][T15942]  ? ksys_write+0x248/0x270
[  902.748745][T15942]  ? __pfx_ksys_write+0x10/0x10
[  902.748767][T15942]  __x64_sys_openat+0x138/0x170
[  902.748794][T15942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.748814][T15942]  do_syscall_64+0x15f/0xf80
[  902.748836][T15942]  ? trace_irq_disable+0x3b/0x140
[  902.748863][T15942]  ? clear_bhb_loop+0x40/0x90
[  902.748887][T15942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.748906][T15942] RIP: 0033:0x7f5ead2fc819
[  902.748925][T15942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  902.748941][T15942] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  902.748962][T15942] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  902.748976][T15942] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  902.748989][T15942] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[  902.749002][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  902.749014][T15942] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  902.749044][T15942]  </TASK>
[  902.853088][T15572] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  903.086612][T15572] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  903.110526][T15572] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  903.171366][T15572] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  903.204368][T15572] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  903.326907][T15572] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  903.328561][T15949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3202'.
[  903.329869][T15572] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  903.404041][T15952] netlink: 'syz.3.3203': attribute type 1 has an invalid length.
[  903.404062][T15952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3203'.
[  903.455559][T15572] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  904.418887][ T6004] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  904.550284][ T6004] usb 2-1: device descriptor read/64, error -71
[  904.816320][ T6004] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  905.243177][ T6004] usb 2-1: device descriptor read/64, error -71
[  905.362624][ T6004] usb usb2-port1: attempt power cycle
[  906.223242][T15572] 8021q: adding VLAN 0 to HW filter on device bond0
[  906.306816][T16007] Invalid source name
[  906.306835][T16007] UBIFS error (pid: 16007): cannot open "/dev/nullb0", error -22
[  906.326190][ T6004] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  906.347260][ T6004] usb 2-1: device descriptor read/8, error -71
[  906.626227][ T6004] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  907.370377][ T6004] usb 2-1: device descriptor read/8, error -71
[  907.486911][ T6004] usb usb2-port1: unable to enumerate USB device
[  907.596864][T15572] 8021q: adding VLAN 0 to HW filter on device team0
[  907.617049][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.617228][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.655460][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.655584][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  908.396162][ T6707] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  908.547474][ T6707] usb 4-1: Using ep0 maxpacket: 32
[  908.550434][ T6707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.550466][ T6707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.554740][ T6707] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  908.554770][ T6707] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  908.554790][ T6707] usb 4-1: Product: syz
[  908.554804][ T6707] usb 4-1: Manufacturer: syz
[  908.622355][ T6707] hub 4-1:4.0: USB hub found
[  908.843839][ T6707] hub 4-1:4.0: 2 ports detected
[  908.854017][T15572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  909.107615][T15572] veth0_vlan: entered promiscuous mode
[  909.167840][T15572] veth1_vlan: entered promiscuous mode
[  909.350145][T15572] veth0_macvtap: entered promiscuous mode
[  909.391316][T15572] veth1_macvtap: entered promiscuous mode
[  909.461705][T15572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.494923][T15572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.544847][ T5969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.547439][ T5982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.547927][ T5969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.552040][ T5969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.884441][   T37] audit: type=1326 audit(1776889148.607:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.896339][   T37] audit: type=1326 audit(1776889148.607:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.927961][   T37] audit: type=1326 audit(1776889148.657:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.928012][   T37] audit: type=1326 audit(1776889148.657:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.928052][   T37] audit: type=1326 audit(1776889148.657:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.928089][   T37] audit: type=1326 audit(1776889148.657:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.929076][   T37] audit: type=1326 audit(1776889148.657:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.929120][   T37] audit: type=1326 audit(1776889148.657:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.929810][   T37] audit: type=1326 audit(1776889148.657:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  909.929854][   T37] audit: type=1326 audit(1776889148.657:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16020 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42317c819 code=0x7ffc0000
[  910.154668][ T6707] hub 4-1:4.0: activate --> -90
[  910.296380][T15979] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  910.362352][ T6707] hub 4-1:4.0: hub_ext_port_status failed (err = -71)
[  910.429259][ T5897] usb 4-1: USB disconnect, device number 77
[  910.470672][T15979] usb 2-1: Using ep0 maxpacket: 8
[  910.472951][T15979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  910.505278][T15979] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  910.505310][T15979] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  910.505331][T15979] usb 2-1: Product: syz
[  910.505345][T15979] usb 2-1: Manufacturer: syz
[  910.505361][T15979] usb 2-1: SerialNumber: syz
[  910.896611][T15979] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  910.896631][T15979] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  910.896643][T15979] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  910.896652][T15979] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  911.175901][T15979] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  911.175982][T15979] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  911.384498][T15979] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  911.391417][T15979] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  911.401106][T15979] usb 2-1: USB disconnect, device number 30
[  911.408154][T15979] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  911.456244][T15979] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  911.457082][T15979] visor 2-1:1.0: device disconnected
[  911.582737][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.582752][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.740624][ T5897] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  911.831448][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.831471][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.906242][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  911.908718][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  911.924818][ T5897] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  911.924848][ T5897] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  911.924869][ T5897] usb 4-1: Product: syz
[  911.924882][ T5897] usb 4-1: Manufacturer: syz
[  911.924896][ T5897] usb 4-1: SerialNumber: syz
[  912.050811][T16064] FAULT_INJECTION: forcing a failure.
[  912.050811][T16064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.050842][T16064] CPU: 0 UID: 0 PID: 16064 Comm: syz.1.3229 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  912.050864][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  912.050876][T16064] Call Trace:
[  912.050883][T16064]  <TASK>
[  912.050891][T16064]  dump_stack_lvl+0xe8/0x150
[  912.050925][T16064]  should_fail_ex+0x46b/0x600
[  912.050956][T16064]  _copy_from_iter+0x1d3/0x1670
[  912.050988][T16064]  ? trace_kmem_cache_alloc+0x29/0xe0
[  912.051016][T16064]  ? __alloc_skb+0x27d/0x7d0
[  912.051043][T16064]  ? __pfx__copy_from_iter+0x10/0x10
[  912.051064][T16064]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  912.051091][T16064]  ? __alloc_skb+0x27d/0x7d0
[  912.051126][T16064]  ? netlink_sendmsg+0x650/0xb40
[  912.051153][T16064]  ? skb_put+0x11b/0x210
[  912.051183][T16064]  netlink_sendmsg+0x6c0/0xb40
[  912.051219][T16064]  ? __pfx_netlink_sendmsg+0x10/0x10
[  912.051249][T16064]  ? unwind_get_return_address+0x4d/0x90
[  912.051275][T16064]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  912.051312][T16064]  ____sys_sendmsg+0x94c/0x9c0
[  912.051336][T16064]  ? __pfx_____sys_sendmsg+0x10/0x10
[  912.051362][T16064]  ? import_iovec+0x73/0xa0
[  912.051388][T16064]  ___sys_sendmsg+0x2a5/0x360
[  912.051403][T16064]  ? __lock_acquire+0x6b5/0x2cf0
[  912.051434][T16064]  ? __pfx____sys_sendmsg+0x10/0x10
[  912.051484][T16064]  ? __fget_files+0x2a/0x420
[  912.051508][T16064]  ? __fget_files+0x3a6/0x420
[  912.051538][T16064]  __x64_sys_sendmsg+0x1c3/0x2a0
[  912.051559][T16064]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  912.051585][T16064]  ? __pfx_ksys_write+0x10/0x10
[  912.051611][T16064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.051633][T16064]  do_syscall_64+0x15f/0xf80
[  912.051654][T16064]  ? trace_irq_disable+0x3b/0x140
[  912.051673][T16064]  ? clear_bhb_loop+0x40/0x90
[  912.051695][T16064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.051714][T16064] RIP: 0033:0x7f5ead2fc819
[  912.051731][T16064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  912.051747][T16064] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  912.051767][T16064] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  912.051781][T16064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  912.051794][T16064] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[  912.051805][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.051823][T16064] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  912.051852][T16064]  </TASK>
[  912.229165][ T5897] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  912.229189][ T5897] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  912.229208][ T5897] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  912.229225][ T5897] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  912.435927][ T5897] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  912.436418][ T5897] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  912.495128][ T5897] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  912.508263][ T5897] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  912.515253][ T5897] usb 4-1: USB disconnect, device number 78
[  912.548371][ T5897] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  912.584030][ T5897] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  912.587388][ T5897] visor 4-1:1.0: device disconnected
[  913.199519][T16075] fuse: Bad value for 'fd'
[  913.221299][T16077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3233'.
[  913.260284][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3234'.
[  913.261104][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3234'.
[  913.616034][T16085] netlink: 'syz.0.3235': attribute type 10 has an invalid length.
[  913.616057][T16085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3235'.
[  913.616561][T16085] batadv0: entered promiscuous mode
[  913.616583][T16085] batadv0: entered allmulticast mode
[  913.617540][T16085] bridge0: port 3(batadv0) entered blocking state
[  913.617663][T16085] bridge0: port 3(batadv0) entered disabled state
[  913.624574][T16085] bridge0: port 3(batadv0) entered blocking state
[  913.624818][T16085] bridge0: port 3(batadv0) entered forwarding state
[  913.888373][   T55] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  913.888392][   T55] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  914.008129][T16094] netlink: 'syz.3.3239': attribute type 1 has an invalid length.
[  914.008144][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'.
[  914.353164][T16099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3240'.
[  914.537285][T16105] FAULT_INJECTION: forcing a failure.
[  914.537285][T16105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  914.537318][T16105] CPU: 0 UID: 0 PID: 16105 Comm: syz.3.3244 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  914.537341][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  914.537353][T16105] Call Trace:
[  914.537361][T16105]  <TASK>
[  914.537369][T16105]  dump_stack_lvl+0xe8/0x150
[  914.537405][T16105]  should_fail_ex+0x46b/0x600
[  914.537435][T16105]  _copy_from_iter+0x1d3/0x1670
[  914.537461][T16105]  ? rcu_is_watching+0x15/0xb0
[  914.537487][T16105]  ? trace_kmem_cache_alloc+0x29/0xe0
[  914.537518][T16105]  ? kmem_cache_alloc_noprof+0x388/0x680
[  914.537547][T16105]  ? __pfx__copy_from_iter+0x10/0x10
[  914.537575][T16105]  ? __build_skb+0x2a2/0x440
[  914.537606][T16105]  ? netlink_sendmsg+0x650/0xb40
[  914.537633][T16105]  ? skb_put+0x11b/0x210
[  914.537663][T16105]  netlink_sendmsg+0x6c0/0xb40
[  914.537698][T16105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  914.537728][T16105]  ? unwind_get_return_address+0x4d/0x90
[  914.537754][T16105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  914.537786][T16105]  ____sys_sendmsg+0x94c/0x9c0
[  914.537824][T16105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  914.537852][T16105]  ? import_iovec+0x73/0xa0
[  914.537882][T16105]  ___sys_sendmsg+0x2a5/0x360
[  914.537901][T16105]  ? __lock_acquire+0x6b5/0x2cf0
[  914.537926][T16105]  ? __pfx____sys_sendmsg+0x10/0x10
[  914.537974][T16105]  ? __fget_files+0x2a/0x420
[  914.537998][T16105]  ? __fget_files+0x3a6/0x420
[  914.538031][T16105]  __x64_sys_sendmsg+0x1c3/0x2a0
[  914.538053][T16105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  914.538081][T16105]  ? __pfx_ksys_write+0x10/0x10
[  914.538107][T16105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.538128][T16105]  do_syscall_64+0x15f/0xf80
[  914.538150][T16105]  ? trace_irq_disable+0x3b/0x140
[  914.538169][T16105]  ? clear_bhb_loop+0x40/0x90
[  914.538193][T16105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.538212][T16105] RIP: 0033:0x7fb42317c819
[  914.538230][T16105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  914.538247][T16105] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  914.538267][T16105] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  914.538282][T16105] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  914.538294][T16105] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[  914.538306][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  914.538318][T16105] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  914.538348][T16105]  </TASK>
[  914.606524][ T5897] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  914.797369][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  914.801897][ T5897] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  914.801930][ T5897] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  914.801957][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0
[  914.810515][ T5897] usb 2-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.40
[  914.810544][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.810563][ T5897] usb 2-1: Product: 뢯
[  914.810578][ T5897] usb 2-1: Manufacturer: Ќ⊃戴繑笩ᖱ꒢궭糞췛石ꠊ븒蜶ᯙ긢髍ᇣ荩࠭䍰鴞▹︳꧚鼛蜞ၑ䌄㾾磔ᐽ핎㝯挊안焷ᗒ뭪䛋끟䈼ⴱ䴹㮴響™擈磛핻੤滃󧓁仙軋䛇汏ࢤ蹱쭳䅼襗䃰❞鳜萦룏䠏ⷣⰓ݈묘￐矻髐ຯ辷坎룬횀쳜䱰䒒灕ጾ硿ퟣꭊ穼㻎艹틵⟁灀፡ೋ鹐㤉䴮鋬욓䔖ᜬ䰺
[  914.810614][ T5897] usb 2-1: SerialNumber: syz
[  915.690703][T16116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3246'.
[  917.250337][T15577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  917.305218][T15577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  917.318071][T15577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  917.319576][T16122] netlink: 'syz.5.3248': attribute type 64 has an invalid length.
[  917.319844][T16122] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.320338][T16122] bridge0: port 1(
1�x9�) entered disabled state
[  917.347367][T15577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  917.359103][T15577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  917.598404][T16127] netlink: 'syz.5.3248': attribute type 64 has an invalid length.
[  919.012576][T16132] ALSA: mixer_oss: invalid OSS volume '/dev/kvm'
[  919.136553][ T5897] usbhid 2-1:1.0: can't add hid device: -71
[  919.136693][ T5897] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  919.284779][ T5897] usb 2-1: USB disconnect, device number 31
[  919.393111][T16136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3252'.
[  919.744027][ T5825] Bluetooth: hci3: command tx timeout
[  920.717519][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  920.878091][    T9] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  920.878121][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129
[  920.880276][    T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  920.880314][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.880325][    T9] usb 2-1: Product: syz
[  920.880333][    T9] usb 2-1: Manufacturer: syz
[  920.880341][    T9] usb 2-1: SerialNumber: syz
[  921.021263][    T9] usb 2-1: config 0 descriptor??
[  921.111451][ T5897] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  921.262690][ T5897] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  921.262720][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129
[  921.288140][ T5897] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  921.288167][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.288184][ T5897] usb 4-1: Product: syz
[  921.288197][ T5897] usb 4-1: Manufacturer: syz
[  921.288209][ T5897] usb 4-1: SerialNumber: syz
[  921.348811][ T5897] usb 4-1: config 0 descriptor??
[  922.581429][ T5825] Bluetooth: hci3: command tx timeout
[  922.979210][  T165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.034340][ T5897] mos7840 4-1:0.0: required endpoints missing
[  924.088564][ T5897] usb 4-1: USB disconnect, device number 79
[  924.338026][    T9] mos7840 2-1:0.0: required endpoints missing
[  924.477911][    T9] usb 2-1: USB disconnect, device number 32
[  924.626806][ T5825] Bluetooth: hci3: command tx timeout
[  925.232952][T16163] Bluetooth: MGMT ver 1.23
[  930.827305][ T5825] Bluetooth: hci3: command tx timeout
[  931.600039][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  931.600106][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  931.668762][T16198] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'.
[  932.204633][  T165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.457100][T16118] chnl_net:caif_netlink_parms(): no params data found
[  932.889070][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3274'.
[  934.602938][  T165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.228813][T16240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3281'.
[  936.925778][  T165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.990526][T16118] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.990640][T16118] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.990869][T16118] bridge_slave_0: entered allmulticast mode
[  937.028895][T16118] bridge_slave_0: entered promiscuous mode
[  937.046797][T16118] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.046864][T16118] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.047012][T16118] bridge_slave_1: entered allmulticast mode
[  937.059422][T16118] bridge_slave_1: entered promiscuous mode
[  938.866174][ T5825] Bluetooth: hci4: command 0x0406 tx timeout
[  939.273590][T16118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  939.309554][T16118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  939.583521][T16118] team0: Port device team_slave_0 added
[  939.593309][T16118] team0: Port device team_slave_1 added
[  939.675722][T16263] random: crng reseeded on system resumption
[  940.735820][T16272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3289'.
[  940.773046][T16270] siw: device registration error -23
[  942.807496][ T5897] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  942.898099][T16118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  942.898117][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.898143][T16118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.969759][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  942.972695][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.972715][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  942.979304][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  942.979334][ T5897] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  942.979352][ T5897] usb 6-1: Product: syz
[  942.979367][ T5897] usb 6-1: Manufacturer: syz
[  943.051968][T16118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  943.051987][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.052012][T16118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  943.119543][ T5897] hub 6-1:4.0: USB hub found
[  943.361524][ T5897] hub 6-1:4.0: 2 ports detected
[  943.934140][T16302] fuse: Bad value for 'fd'
[  944.200433][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'.
[  944.503490][   T37] kauditd_printk_skb: 34 callbacks suppressed
[  944.503516][   T37] audit: type=1326 audit(1776889183.227:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.504616][   T37] audit: type=1326 audit(1776889183.227:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.513096][   T37] audit: type=1326 audit(1776889183.237:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.513143][   T37] audit: type=1326 audit(1776889183.237:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.514265][   T37] audit: type=1326 audit(1776889183.237:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.514309][   T37] audit: type=1326 audit(1776889183.237:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.514349][   T37] audit: type=1326 audit(1776889183.237:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.515307][   T37] audit: type=1326 audit(1776889183.237:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.515351][   T37] audit: type=1326 audit(1776889183.237:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.517812][   T37] audit: type=1326 audit(1776889183.237:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16279 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4d4f4bc819 code=0x7ffc0000
[  944.868745][ T5897] hub 6-1:4.0: hub_ext_port_status failed (err = -71)
[  944.907261][T16053] usb 6-1: USB disconnect, device number 65
[  945.330551][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'.
[  945.812472][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3304'.
[  945.904848][T16118] hsr_slave_0: entered promiscuous mode
[  945.910284][T16118] hsr_slave_1: entered promiscuous mode
[  946.378309][T16118] debugfs: 'hsr0' already exists in 'hsr'
[  946.378339][T16118] Cannot create hsr debugfs directory
[  946.608713][T16319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3306'.
[  946.727050][T16053] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[  947.392432][T16053] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  947.392455][T16053] usb 6-1: config 0 has no interface number 0
[  947.392481][T16053] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  947.392497][T16053] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  947.392511][T16053] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  947.392525][T16053] usb 6-1: config 0 interface 11 has no altsetting 0
[  947.392545][T16053] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  947.392569][T16053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.397182][T16053] usb 6-1: config 0 descriptor??
[  947.495618][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  947.505609][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  947.552643][T16053] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  947.622694][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  947.622784][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  947.623214][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  947.623295][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  947.623773][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  947.623862][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  947.686685][T16053] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  947.721502][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  947.721593][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  947.721676][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  947.721757][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  947.721836][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  947.721916][T16053] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  947.733176][T16053] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  947.820588][  T165] bridge_slave_1: left promiscuous mode
[  947.820854][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.890371][    T9] usb 6-1: USB disconnect, device number 66
[  947.912561][  T165] bridge_slave_0: left allmulticast mode
[  947.912580][  T165] bridge_slave_0: left promiscuous mode
[  947.912762][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.926686][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  948.179879][T16332] Invalid logical block size (16777216)
[  948.184253][T16332] netlink: 'syz.0.3309': attribute type 10 has an invalid length.
[  948.184293][T16332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3309'.
[  949.012203][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  949.025886][    T9] keyspan 6-1:0.11: device disconnected
[  950.516798][  T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  950.595614][  T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  950.617946][  T165] bond0 (unregistering): Released all slaves
[  951.228196][T16343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  952.770179][ T2384] pvrusb2: request_firmware fatal error with code=-110
[  952.770213][ T2384] pvrusb2: Failure uploading firmware1
[  952.770220][ T2384] pvrusb2: Device initialization was not successful.
[  952.770228][ T2384] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  952.770236][ T2384] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  952.819402][ T5899] pvrusb2: Device being rendered inoperable
[  952.849387][ T2384] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  952.849415][ T2384] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  952.988373][T16359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3316'.
[  953.082883][T16358] FAULT_INJECTION: forcing a failure.
[  953.082883][T16358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.082907][T16358] CPU: 1 UID: 0 PID: 16358 Comm: syz.5.3315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  953.082920][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  953.082927][T16358] Call Trace:
[  953.082932][T16358]  <TASK>
[  953.082937][T16358]  dump_stack_lvl+0xe8/0x150
[  953.082958][T16358]  should_fail_ex+0x46b/0x600
[  953.082975][T16358]  _copy_from_iter+0x1d3/0x1670
[  953.082993][T16358]  ? trace_kmem_cache_alloc+0x29/0xe0
[  953.083009][T16358]  ? __alloc_skb+0x27d/0x7d0
[  953.083024][T16358]  ? __pfx__copy_from_iter+0x10/0x10
[  953.083037][T16358]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  953.083052][T16358]  ? __alloc_skb+0x27d/0x7d0
[  953.083069][T16358]  ? netlink_sendmsg+0x650/0xb40
[  953.083084][T16358]  ? skb_put+0x11b/0x210
[  953.083100][T16358]  netlink_sendmsg+0x6c0/0xb40
[  953.083119][T16358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  953.083135][T16358]  ? unwind_get_return_address+0x4d/0x90
[  953.083150][T16358]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  953.083167][T16358]  ____sys_sendmsg+0x94c/0x9c0
[  953.083181][T16358]  ? __pfx_____sys_sendmsg+0x10/0x10
[  953.083196][T16358]  ? import_iovec+0x73/0xa0
[  953.083212][T16358]  ___sys_sendmsg+0x2a5/0x360
[  953.083222][T16358]  ? __lock_acquire+0x6b5/0x2cf0
[  953.083237][T16358]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.083264][T16358]  ? __fget_files+0x2a/0x420
[  953.083277][T16358]  ? __fget_files+0x3a6/0x420
[  953.083296][T16358]  __x64_sys_sendmsg+0x1c3/0x2a0
[  953.083308][T16358]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  953.083322][T16358]  ? __pfx_ksys_write+0x10/0x10
[  953.083337][T16358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.083348][T16358]  do_syscall_64+0x15f/0xf80
[  953.083360][T16358]  ? trace_irq_disable+0x3b/0x140
[  953.083371][T16358]  ? clear_bhb_loop+0x40/0x90
[  953.083384][T16358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.083394][T16358] RIP: 0033:0x7f4d4f4bc819
[  953.083406][T16358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.083415][T16358] RSP: 002b:00007f4d4d716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  953.083427][T16358] RAX: ffffffffffffffda RBX: 00007f4d4f735fa0 RCX: 00007f4d4f4bc819
[  953.083435][T16358] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000004
[  953.083442][T16358] RBP: 00007f4d4d716090 R08: 0000000000000000 R09: 0000000000000000
[  953.083449][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.083456][T16358] R13: 00007f4d4f736038 R14: 00007f4d4f735fa0 R15: 00007ffd509fb9d8
[  953.083472][T16358]  </TASK>
[  956.184967][T16382] FAULT_INJECTION: forcing a failure.
[  956.184967][T16382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  956.185003][T16382] CPU: 1 UID: 0 PID: 16382 Comm: syz.3.3321 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  956.185093][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  956.185118][T16382] Call Trace:
[  956.185129][T16382]  <TASK>
[  956.185139][T16382]  dump_stack_lvl+0xe8/0x150
[  956.185189][T16382]  should_fail_ex+0x46b/0x600
[  956.185218][T16382]  _copy_from_iter+0x1d3/0x1670
[  956.185250][T16382]  ? trace_kmem_cache_alloc+0x29/0xe0
[  956.185277][T16382]  ? __alloc_skb+0x27d/0x7d0
[  956.185305][T16382]  ? __pfx__copy_from_iter+0x10/0x10
[  956.185330][T16382]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  956.185360][T16382]  ? __alloc_skb+0x27d/0x7d0
[  956.185400][T16382]  ? netlink_sendmsg+0x650/0xb40
[  956.185432][T16382]  ? skb_put+0x11b/0x210
[  956.185464][T16382]  netlink_sendmsg+0x6c0/0xb40
[  956.185508][T16382]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.185540][T16382]  ? unwind_get_return_address+0x4d/0x90
[  956.185568][T16382]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.185601][T16382]  ____sys_sendmsg+0x94c/0x9c0
[  956.185629][T16382]  ? __pfx_____sys_sendmsg+0x10/0x10
[  956.185659][T16382]  ? import_iovec+0x73/0xa0
[  956.185692][T16382]  ___sys_sendmsg+0x2a5/0x360
[  956.185712][T16382]  ? __lock_acquire+0x6b5/0x2cf0
[  956.185740][T16382]  ? __pfx____sys_sendmsg+0x10/0x10
[  956.185791][T16382]  ? __fget_files+0x2a/0x420
[  956.185817][T16382]  ? __fget_files+0x3a6/0x420
[  956.185854][T16382]  __x64_sys_sendmsg+0x1c3/0x2a0
[  956.185878][T16382]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  956.185908][T16382]  ? __pfx_ksys_write+0x10/0x10
[  956.185937][T16382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.185960][T16382]  do_syscall_64+0x15f/0xf80
[  956.185987][T16382]  ? trace_irq_disable+0x3b/0x140
[  956.186005][T16382]  ? clear_bhb_loop+0x40/0x90
[  956.186025][T16382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.186043][T16382] RIP: 0033:0x7fb42317c819
[  956.186064][T16382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  956.186082][T16382] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.186104][T16382] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  956.186120][T16382] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  956.186133][T16382] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[  956.186147][T16382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  956.186159][T16382] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  956.186191][T16382]  </TASK>
[  956.732190][T16386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3322'.
[  956.955937][ T5179] udevd[5179]: worker [14206] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time
[  958.024927][T16398] FAULT_INJECTION: forcing a failure.
[  958.024927][T16398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  958.024951][T16398] CPU: 0 UID: 0 PID: 16398 Comm: syz.5.3325 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  958.024964][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  958.024970][T16398] Call Trace:
[  958.024975][T16398]  <TASK>
[  958.024980][T16398]  dump_stack_lvl+0xe8/0x150
[  958.025002][T16398]  should_fail_ex+0x46b/0x600
[  958.025019][T16398]  _copy_from_iter+0x1d3/0x1670
[  958.025037][T16398]  ? trace_kmem_cache_alloc+0x29/0xe0
[  958.025053][T16398]  ? __alloc_skb+0x27d/0x7d0
[  958.025069][T16398]  ? __pfx__copy_from_iter+0x10/0x10
[  958.025091][T16398]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  958.025107][T16398]  ? __alloc_skb+0x27d/0x7d0
[  958.025123][T16398]  ? netlink_sendmsg+0x650/0xb40
[  958.025138][T16398]  ? skb_put+0x11b/0x210
[  958.025155][T16398]  netlink_sendmsg+0x6c0/0xb40
[  958.025174][T16398]  ? __pfx_netlink_sendmsg+0x10/0x10
[  958.025191][T16398]  ? unwind_get_return_address+0x4d/0x90
[  958.025205][T16398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  958.025223][T16398]  ____sys_sendmsg+0x94c/0x9c0
[  958.025237][T16398]  ? __pfx_____sys_sendmsg+0x10/0x10
[  958.025252][T16398]  ? import_iovec+0x73/0xa0
[  958.025269][T16398]  ___sys_sendmsg+0x2a5/0x360
[  958.025279][T16398]  ? __lock_acquire+0x6b5/0x2cf0
[  958.025294][T16398]  ? __pfx____sys_sendmsg+0x10/0x10
[  958.025321][T16398]  ? __fget_files+0x2a/0x420
[  958.025334][T16398]  ? __fget_files+0x3a6/0x420
[  958.025352][T16398]  __x64_sys_sendmsg+0x1c3/0x2a0
[  958.025365][T16398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  958.025380][T16398]  ? __pfx_ksys_write+0x10/0x10
[  958.025394][T16398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.025409][T16398]  do_syscall_64+0x15f/0xf80
[  958.025422][T16398]  ? trace_irq_disable+0x3b/0x140
[  958.025434][T16398]  ? clear_bhb_loop+0x40/0x90
[  958.025446][T16398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.025457][T16398] RIP: 0033:0x7f4d4f4bc819
[  958.025469][T16398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.025478][T16398] RSP: 002b:00007f4d4d716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  958.025491][T16398] RAX: ffffffffffffffda RBX: 00007f4d4f735fa0 RCX: 00007f4d4f4bc819
[  958.025499][T16398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  958.025506][T16398] RBP: 00007f4d4d716090 R08: 0000000000000000 R09: 0000000000000000
[  958.025513][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.025519][T16398] R13: 00007f4d4f736038 R14: 00007f4d4f735fa0 R15: 00007ffd509fb9d8
[  958.025535][T16398]  </TASK>
[  959.484395][T16426] FAULT_INJECTION: forcing a failure.
[  959.484395][T16426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  959.484428][T16426] CPU: 1 UID: 0 PID: 16426 Comm: syz.0.3333 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  959.484452][T16426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  959.484468][T16426] Call Trace:
[  959.484477][T16426]  <TASK>
[  959.484485][T16426]  dump_stack_lvl+0xe8/0x150
[  959.484522][T16426]  should_fail_ex+0x46b/0x600
[  959.484553][T16426]  _copy_to_user+0x31/0xb0
[  959.484585][T16426]  simple_read_from_buffer+0xe1/0x170
[  959.484617][T16426]  proc_fail_nth_read+0x1be/0x230
[  959.484648][T16426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  959.484678][T16426]  ? rw_verify_area+0x2ac/0x4e0
[  959.484706][T16426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  959.484735][T16426]  vfs_read+0x212/0xa80
[  959.484772][T16426]  ? __pfx_vfs_read+0x10/0x10
[  959.484804][T16426]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  959.484827][T16426]  ? lockdep_hardirqs_on+0x7a/0x110
[  959.484851][T16426]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  959.484874][T16426]  ? mutex_lock_nested+0x152/0x1d0
[  959.484901][T16426]  ? fdget_pos+0x252/0x320
[  959.484936][T16426]  ksys_read+0x156/0x270
[  959.484965][T16426]  ? __pfx_ksys_read+0x10/0x10
[  959.484992][T16426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.485014][T16426]  do_syscall_64+0x15f/0xf80
[  959.485036][T16426]  ? trace_irq_disable+0x3b/0x140
[  959.485057][T16426]  ? clear_bhb_loop+0x40/0x90
[  959.485081][T16426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.485101][T16426] RIP: 0033:0x7f58c240d04e
[  959.485119][T16426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  959.485135][T16426] RSP: 002b:00007f58c06a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  959.485156][T16426] RAX: ffffffffffffffda RBX: 00007f58c06a66c0 RCX: 00007f58c240d04e
[  959.485171][T16426] RDX: 000000000000000f RSI: 00007f58c06a60a0 RDI: 0000000000000004
[  959.485183][T16426] RBP: 00007f58c06a6090 R08: 0000000000000000 R09: 0000000000000000
[  959.485196][T16426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  959.485207][T16426] R13: 00007f58c26c6038 R14: 00007f58c26c5fa0 R15: 00007ffc33995ac8
[  959.485239][T16426]  </TASK>
[  959.541090][T16427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3332'.
[  959.805803][ T5474] 8021q: adding VLAN 0 to HW filter on device eth5
[  961.633075][ T5898] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  961.796128][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  961.798402][ T5898] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.798431][ T5898] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  961.798459][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0
[  961.798491][ T5898] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00
[  961.798514][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.804192][ T5898] usb 4-1: config 0 descriptor??
[  961.888819][T16464] FAULT_INJECTION: forcing a failure.
[  961.888819][T16464] name failslab, interval 1, probability 0, space 0, times 0
[  961.888851][T16464] CPU: 0 UID: 0 PID: 16464 Comm: syz.1.3344 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  961.888875][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  961.888887][T16464] Call Trace:
[  961.888895][T16464]  <TASK>
[  961.888907][T16464]  dump_stack_lvl+0xe8/0x150
[  961.888942][T16464]  should_fail_ex+0x46b/0x600
[  961.888971][T16464]  should_failslab+0xa8/0x100
[  961.888993][T16464]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  961.889022][T16464]  ? preload_this_cpu_lock+0x49/0xc0
[  961.889049][T16464]  preload_this_cpu_lock+0x49/0xc0
[  961.889072][T16464]  alloc_vmap_area+0x3dc/0x1480
[  961.889114][T16464]  ? __pfx_alloc_vmap_area+0x10/0x10
[  961.889144][T16464]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  961.889164][T16464]  ? __get_vm_area_node+0x171/0x350
[  961.889191][T16464]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  961.889215][T16464]  __get_vm_area_node+0x226/0x350
[  961.889249][T16464]  __vmalloc_node_range_noprof+0x36a/0x1750
[  961.889279][T16464]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  961.889304][T16464]  ? __lock_acquire+0x6b5/0x2cf0
[  961.889344][T16464]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  961.889369][T16464]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  961.889399][T16464]  ? __lock_acquire+0x6b5/0x2cf0
[  961.889425][T16464]  ? _parse_integer_limit+0x1ae/0x1f0
[  961.889454][T16464]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  961.889475][T16464]  __vmalloc_noprof+0xd2/0x120
[  961.889502][T16464]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  961.889527][T16464]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  961.889553][T16464]  bpf_prog_alloc+0x3c/0x1a0
[  961.889576][T16464]  bpf_prog_load+0x779/0x1a10
[  961.889609][T16464]  ? __pfx_bpf_prog_load+0x10/0x10
[  961.889631][T16464]  ? __might_fault+0xaf/0x130
[  961.889664][T16464]  ? bpf_lsm_bpf+0x9/0x20
[  961.889684][T16464]  ? security_bpf+0x7e/0x2d0
[  961.889709][T16464]  __sys_bpf+0x618/0x950
[  961.889730][T16464]  ? __pfx___sys_bpf+0x10/0x10
[  961.889756][T16464]  ? rt_mutex_slowunlock+0x1cb/0x300
[  961.889800][T16464]  ? ksys_write+0x248/0x270
[  961.889822][T16464]  ? __pfx_ksys_write+0x10/0x10
[  961.889845][T16464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.889867][T16464]  __x64_sys_bpf+0x7c/0x90
[  961.889897][T16464]  do_syscall_64+0x15f/0xf80
[  961.889920][T16464]  ? trace_irq_disable+0x3b/0x140
[  961.889940][T16464]  ? clear_bhb_loop+0x40/0x90
[  961.889964][T16464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.889984][T16464] RIP: 0033:0x7f5ead2fc819
[  961.890003][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  961.890021][T16464] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  961.890042][T16464] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  961.890058][T16464] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  961.890071][T16464] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[  961.890084][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.890097][T16464] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  961.890128][T16464]  </TASK>
[  962.225588][ T5898] hid (null): bogus close delimiter
[  962.254735][T16468] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3345'.
[  962.261879][ T5898] hid_parser_main: 28 callbacks suppressed
[  962.261903][ T5898] hid-corsair-void 0003:1B1C:0A2B.0008: unknown main item tag 0x1
[  962.262001][ T5898] hid-corsair-void 0003:1B1C:0A2B.0008: bogus close delimiter
[  962.262016][ T5898] hid-corsair-void 0003:1B1C:0A2B.0008: item 0 4 2 10 parsing failed
[  962.274785][ T5898] hid-corsair-void 0003:1B1C:0A2B.0008: parse failed (reason: -22)
[  962.274901][ T5898] hid-corsair-void 0003:1B1C:0A2B.0008: probe with driver hid-corsair-void failed with error -22
[  963.184261][ T5898] usb 4-1: USB disconnect, device number 80
[  963.884803][T16494] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  963.884827][T16494] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3349'.
[  964.956143][ T5898] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  965.113322][ T5898] usb 4-1: Using ep0 maxpacket: 32
[  965.119774][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  965.119806][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024
[  965.119846][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  965.119870][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.124718][ T5898] usb 4-1: config 0 descriptor??
[  965.130414][T16493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  965.133204][ T5898] hub 4-1:0.0: USB hub found
[  965.370217][ T5815] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  965.385761][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.390598][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.396912][ T5898] hub 4-1:0.0: 1 port detected
[  965.543540][ T5898] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  965.543568][ T5898] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  965.559933][ T5815] usb 6-1: Using ep0 maxpacket: 8
[  965.561567][ T5898] usbhid 4-1:0.0: can't add hid device: -71
[  965.561683][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  965.563902][ T5815] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  965.566461][ T5815] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  965.566489][ T5815] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  965.566510][ T5815] usb 6-1: Product: syz
[  965.566525][ T5815] usb 6-1: Manufacturer: syz
[  965.566540][ T5815] usb 6-1: SerialNumber: syz
[  965.688506][ T5898] usb 4-1: USB disconnect, device number 81
[  965.892894][ T5815] usb 6-1: Handspring Visor / Palm OS: No valid connect info available
[  965.892920][ T5815] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  965.892939][ T5815] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  965.892959][ T5815] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[  966.104183][ T5815] usb 6-1: palm_os_3_probe - error -71 getting bytes available request
[  966.104261][ T5815] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  966.214690][ T5815] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  966.240643][ T5815] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  966.249174][ T5815] usb 6-1: USB disconnect, device number 67
[  966.278825][ T5815] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  966.284034][ T5815] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  966.284920][ T5815] visor 6-1:1.0: device disconnected
[  967.345760][  T165] hsr_slave_0: left promiscuous mode
[  967.346159][ T5897] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  967.386798][  T165] hsr_slave_1: left promiscuous mode
[  967.388155][  T165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  967.453421][T15577] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  967.500778][  T165] veth1_macvtap: left promiscuous mode
[  967.500844][  T165] veth0_macvtap: left promiscuous mode
[  967.501024][  T165] veth1_vlan: left promiscuous mode
[  967.501177][  T165] veth0_vlan: left promiscuous mode
[  967.527325][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  967.530615][ T5897] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  967.530729][ T5897] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.532615][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  967.532641][ T5897] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  967.532661][ T5897] usb 1-1: Product: syz
[  967.532674][ T5897] usb 1-1: Manufacturer: syz
[  967.546962][ T5897] hub 1-1:4.0: USB hub found
[  967.666220][ T5815] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  967.764905][ T5897] hub 1-1:4.0: 2 ports detected
[  967.826167][ T5815] usb 6-1: Using ep0 maxpacket: 32
[  967.852538][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short
[  967.854204][ T5815] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  967.854601][ T5815] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  967.854630][ T5815] usb 6-1: config 1 interface 0 has no altsetting 0
[  967.859603][ T5815] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  967.859631][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.859702][ T5815] usb 6-1: Product: syz
[  967.859717][ T5815] usb 6-1: Manufacturer: syz
[  967.859731][ T5815] usb 6-1: SerialNumber: syz
[  967.886452][T16530] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  968.178543][ T5815] usblp0: Disabling reads from problematic bidirectional printer
[  968.208691][ T5815] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004
[  968.215344][ T5815] usb 6-1: USB disconnect, device number 68
[  968.299570][ T5815] usblp0: removed
[  968.677897][  T165] team0 (unregistering): Port device team_slave_1 removed
[  968.754143][  T165] team0 (unregistering): Port device team_slave_0 removed
[  968.823973][   T37] kauditd_printk_skb: 26 callbacks suppressed
[  968.823991][   T37] audit: type=1326 audit(1776889207.547:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.825089][   T37] audit: type=1326 audit(1776889207.547:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.833871][   T37] audit: type=1326 audit(1776889207.557:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.834201][   T37] audit: type=1326 audit(1776889207.557:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.834532][   T37] audit: type=1326 audit(1776889207.557:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.839725][   T37] audit: type=1326 audit(1776889207.567:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.840536][   T37] audit: type=1326 audit(1776889207.567:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.841012][   T37] audit: type=1326 audit(1776889207.567:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.841333][   T37] audit: type=1326 audit(1776889207.567:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c244c819 code=0x7ffc0000
[  968.841590][   T37] audit: type=1326 audit(1776889207.567:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58c244c4ab code=0x7ffc0000
[  969.057565][ T5897] hub 1-1:4.0: hub_ext_port_status failed (err = -71)
[  969.058139][    T9] usb 1-1: USB disconnect, device number 85
[  970.009996][T16544] overlayfs: failed to resolve './file2': -2
[  970.358737][T16118] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  970.365884][T16554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3365'.
[  970.369822][T16556] FAULT_INJECTION: forcing a failure.
[  970.369822][T16556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  970.369854][T16556] CPU: 1 UID: 0 PID: 16556 Comm: syz.3.3364 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  970.369875][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  970.369888][T16556] Call Trace:
[  970.369896][T16556]  <TASK>
[  970.369904][T16556]  dump_stack_lvl+0xe8/0x150
[  970.369938][T16556]  should_fail_ex+0x46b/0x600
[  970.369967][T16556]  _copy_from_iter+0x1d3/0x1670
[  970.369999][T16556]  ? trace_kmem_cache_alloc+0x29/0xe0
[  970.370027][T16556]  ? __alloc_skb+0x27d/0x7d0
[  970.370054][T16556]  ? __pfx__copy_from_iter+0x10/0x10
[  970.370076][T16556]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  970.370103][T16556]  ? __alloc_skb+0x27d/0x7d0
[  970.370134][T16556]  ? netlink_sendmsg+0x650/0xb40
[  970.370160][T16556]  ? skb_put+0x11b/0x210
[  970.370189][T16556]  netlink_sendmsg+0x6c0/0xb40
[  970.370224][T16556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  970.370259][T16556]  ? unwind_get_return_address+0x4d/0x90
[  970.370285][T16556]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  970.370314][T16556]  ____sys_sendmsg+0x94c/0x9c0
[  970.370339][T16556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  970.370366][T16556]  ? import_iovec+0x73/0xa0
[  970.370399][T16556]  ___sys_sendmsg+0x2a5/0x360
[  970.370417][T16556]  ? __lock_acquire+0x6b5/0x2cf0
[  970.370443][T16556]  ? __pfx____sys_sendmsg+0x10/0x10
[  970.370493][T16556]  ? __fget_files+0x2a/0x420
[  970.370517][T16556]  ? __fget_files+0x3a6/0x420
[  970.370549][T16556]  __x64_sys_sendmsg+0x1c3/0x2a0
[  970.370572][T16556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  970.370599][T16556]  ? __pfx_ksys_write+0x10/0x10
[  970.370625][T16556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.370645][T16556]  do_syscall_64+0x15f/0xf80
[  970.370666][T16556]  ? trace_irq_disable+0x3b/0x140
[  970.370686][T16556]  ? clear_bhb_loop+0x40/0x90
[  970.370709][T16556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.370727][T16556] RIP: 0033:0x7fb42317c819
[  970.370745][T16556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.370761][T16556] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  970.370781][T16556] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  970.370795][T16556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  970.370808][T16556] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[  970.370819][T16556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  970.370831][T16556] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  970.370860][T16556]  </TASK>
[  971.557300][T16118] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  971.690837][T16118] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  971.721048][T16118] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  971.731331][T16118] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  971.867993][T16118] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  971.874549][T16118] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  972.046645][T16118] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  972.270519][T16583] 9pnet_fd: p9_fd_create_unix (16583): problem connecting socket: ./file0: -111
[  972.281042][ T5815] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  972.616175][    T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  972.646280][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.646307][ T5815] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  972.649690][ T5815] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  972.649720][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  972.649740][ T5815] usb 6-1: SerialNumber: syz
[  972.797040][    T9] usb 4-1: Using ep0 maxpacket: 32
[  972.799979][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  972.836543][    T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  972.836576][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.836597][    T9] usb 4-1: Product: syz
[  972.836612][    T9] usb 4-1: Manufacturer: syz
[  972.836627][    T9] usb 4-1: SerialNumber: syz
[  972.880930][    T9] usb 4-1: config 0 descriptor??
[  972.919610][T16118] 8021q: adding VLAN 0 to HW filter on device bond0
[  972.938532][ T5815] usb 6-1: 0:2 : does not exist
[  972.993653][T16600] FAULT_INJECTION: forcing a failure.
[  972.993653][T16600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  972.993677][T16600] CPU: 1 UID: 0 PID: 16600 Comm: syz.1.3376 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  972.993691][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  972.993698][T16600] Call Trace:
[  972.993703][T16600]  <TASK>
[  972.993708][T16600]  dump_stack_lvl+0xe8/0x150
[  972.993730][T16600]  should_fail_ex+0x46b/0x600
[  972.993755][T16600]  _copy_to_iter+0x404/0x17d0
[  972.993775][T16600]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  972.993792][T16600]  ? __pfx__copy_to_iter+0x10/0x10
[  972.993803][T16600]  ? rt_spin_lock+0x1e0/0x400
[  972.993819][T16600]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  972.993840][T16600]  __skb_datagram_iter+0xf8/0x980
[  972.993853][T16600]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  972.993868][T16600]  skb_copy_datagram_iter+0xb5/0x240
[  972.993881][T16600]  netlink_recvmsg+0x2c3/0xa50
[  972.993901][T16600]  ? __pfx_netlink_recvmsg+0x10/0x10
[  972.993920][T16600]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  972.993936][T16600]  ? security_socket_recvmsg+0x7e/0x2c0
[  972.993953][T16600]  ? __pfx_netlink_recvmsg+0x10/0x10
[  972.993968][T16600]  sock_recvmsg+0x172/0x1b0
[  972.993983][T16600]  ____sys_recvmsg+0x1f2/0x4b0
[  972.994001][T16600]  ? __pfx_____sys_recvmsg+0x10/0x10
[  972.994019][T16600]  ? import_iovec+0x73/0xa0
[  972.994035][T16600]  ___sys_recvmsg+0x215/0x590
[  972.994049][T16600]  ? __pfx____sys_recvmsg+0x10/0x10
[  972.994061][T16600]  ? __fget_files+0x2a/0x420
[  972.994083][T16600]  ? __fget_files+0x3a6/0x420
[  972.994101][T16600]  do_recvmmsg+0x33a/0x800
[  972.994116][T16600]  ? __pfx_do_recvmmsg+0x10/0x10
[  972.994133][T16600]  ? _copy_from_user+0x94/0xb0
[  972.994155][T16600]  __x64_sys_recvmmsg+0x1b7/0x250
[  972.994167][T16600]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  972.994183][T16600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.994194][T16600]  do_syscall_64+0x15f/0xf80
[  972.994206][T16600]  ? trace_irq_disable+0x3b/0x140
[  972.994217][T16600]  ? clear_bhb_loop+0x40/0x90
[  972.994235][T16600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.994246][T16600] RIP: 0033:0x7f5ead2fc819
[  972.994257][T16600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.994267][T16600] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  972.994279][T16600] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  972.994287][T16600] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  972.994295][T16600] RBP: 00007f5eab556090 R08: 0000200000003700 R09: 0000000000000000
[  972.994302][T16600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  972.994309][T16600] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  972.994324][T16600]  </TASK>
[  973.072305][T16118] 8021q: adding VLAN 0 to HW filter on device team0
[  973.122358][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.122479][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  973.182467][ T5815] usb 6-1: USB disconnect, device number 69
[  973.245837][T14432] bridge0: port 2(bridge_slave_1) entered blocking state
[  973.245962][T14432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  974.598530][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'.
[  974.598552][T16617] netlink: 'syz.0.3381': attribute type 1 has an invalid length.
[  974.726485][T16617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  974.889052][ T5815] usb 4-1: USB disconnect, device number 82
[  975.089032][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  975.145033][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  975.162303][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  975.177977][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  975.208842][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  975.698831][T16633] FAULT_INJECTION: forcing a failure.
[  975.698831][T16633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  975.698861][T16633] CPU: 1 UID: 0 PID: 16633 Comm: syz.3.3385 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  975.698877][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  975.698886][T16633] Call Trace:
[  975.698892][T16633]  <TASK>
[  975.698899][T16633]  dump_stack_lvl+0xe8/0x150
[  975.698927][T16633]  should_fail_ex+0x46b/0x600
[  975.698949][T16633]  _copy_to_iter+0x404/0x17d0
[  975.698977][T16633]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  975.698999][T16633]  ? __pfx__copy_to_iter+0x10/0x10
[  975.699016][T16633]  ? rt_spin_lock+0x1e0/0x400
[  975.699038][T16633]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  975.699066][T16633]  __skb_datagram_iter+0xf8/0x980
[  975.699084][T16633]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  975.699106][T16633]  skb_copy_datagram_iter+0xb5/0x240
[  975.699124][T16633]  netlink_recvmsg+0x2c3/0xa50
[  975.699151][T16633]  ? __pfx_netlink_recvmsg+0x10/0x10
[  975.699178][T16633]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  975.699198][T16633]  ? security_socket_recvmsg+0x7e/0x2c0
[  975.699220][T16633]  ? __pfx_netlink_recvmsg+0x10/0x10
[  975.699240][T16633]  sock_recvmsg+0x172/0x1b0
[  975.699260][T16633]  ____sys_recvmsg+0x1f2/0x4b0
[  975.699282][T16633]  ? __pfx_____sys_recvmsg+0x10/0x10
[  975.699308][T16633]  ? import_iovec+0x73/0xa0
[  975.699329][T16633]  ___sys_recvmsg+0x215/0x590
[  975.699348][T16633]  ? __pfx____sys_recvmsg+0x10/0x10
[  975.699365][T16633]  ? __fget_files+0x2a/0x420
[  975.699401][T16633]  ? __fget_files+0x3a6/0x420
[  975.699434][T16633]  do_recvmmsg+0x33a/0x800
[  975.699455][T16633]  ? __pfx_do_recvmmsg+0x10/0x10
[  975.699479][T16633]  ? _copy_from_user+0x94/0xb0
[  975.699517][T16633]  __x64_sys_recvmmsg+0x1b7/0x250
[  975.699535][T16633]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  975.699556][T16633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.699572][T16633]  do_syscall_64+0x15f/0xf80
[  975.699588][T16633]  ? trace_irq_disable+0x3b/0x140
[  975.699651][T16633]  ? clear_bhb_loop+0x40/0x90
[  975.699669][T16633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.699683][T16633] RIP: 0033:0x7fb42317c819
[  975.699698][T16633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.699711][T16633] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  975.699727][T16633] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  975.699738][T16633] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  975.699748][T16633] RBP: 00007fb4213d6090 R08: 0000200000003700 R09: 0000000000000000
[  975.699758][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.699768][T16633] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  975.699791][T16633]  </TASK>
[  976.079592][T16644] FAULT_INJECTION: forcing a failure.
[  976.079592][T16644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  976.079627][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.5.3389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  976.079651][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  976.079664][T16644] Call Trace:
[  976.079672][T16644]  <TASK>
[  976.079681][T16644]  dump_stack_lvl+0xe8/0x150
[  976.079718][T16644]  should_fail_ex+0x46b/0x600
[  976.079750][T16644]  _copy_to_user+0x31/0xb0
[  976.079788][T16644]  simple_read_from_buffer+0xe1/0x170
[  976.079825][T16644]  proc_fail_nth_read+0x1be/0x230
[  976.079855][T16644]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  976.079885][T16644]  ? rw_verify_area+0x2ac/0x4e0
[  976.079915][T16644]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  976.079943][T16644]  vfs_read+0x212/0xa80
[  976.079981][T16644]  ? __pfx_vfs_read+0x10/0x10
[  976.080013][T16644]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  976.080037][T16644]  ? lockdep_hardirqs_on+0x7a/0x110
[  976.080059][T16644]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  976.080083][T16644]  ? mutex_lock_nested+0x152/0x1d0
[  976.080113][T16644]  ? fdget_pos+0x252/0x320
[  976.080148][T16644]  ksys_read+0x156/0x270
[  976.080170][T16644]  ? __pfx_ksys_read+0x10/0x10
[  976.080197][T16644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.080219][T16644]  do_syscall_64+0x15f/0xf80
[  976.080241][T16644]  ? trace_irq_disable+0x3b/0x140
[  976.080261][T16644]  ? clear_bhb_loop+0x40/0x90
[  976.080285][T16644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.080305][T16644] RIP: 0033:0x7f4d4f47d04e
[  976.080324][T16644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  976.080342][T16644] RSP: 002b:00007f4d4d715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  976.080363][T16644] RAX: ffffffffffffffda RBX: 00007f4d4d7166c0 RCX: 00007f4d4f47d04e
[  976.080378][T16644] RDX: 000000000000000f RSI: 00007f4d4d7160a0 RDI: 0000000000000003
[  976.080391][T16644] RBP: 00007f4d4d716090 R08: 0000000000000000 R09: 0000000000000000
[  976.080403][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  976.080416][T16644] R13: 00007f4d4f736038 R14: 00007f4d4f735fa0 R15: 00007ffd509fb9d8
[  976.080462][T16644]  </TASK>
[  977.675355][T15577] Bluetooth: hci2: command tx timeout
[  977.871965][T16656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3392'.
[  979.760604][T15577] Bluetooth: hci2: command tx timeout
[  981.306199][T16053] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  981.348829][ T5815] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  981.456206][T16053] usb 4-1: Using ep0 maxpacket: 32
[  981.458502][T16053] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  981.458535][T16053] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.460805][T16053] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  981.460835][T16053] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  981.460857][T16053] usb 4-1: Product: syz
[  981.460872][T16053] usb 4-1: Manufacturer: syz
[  981.489171][T16053] hub 4-1:4.0: USB hub found
[  981.616077][ T5815] usb 1-1: unable to get BOS descriptor or descriptor too short
[  981.631964][ T5815] usb 1-1: not running at top speed; connect to a high speed hub
[  981.671147][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  981.671178][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.671199][ T5815] usb 1-1: Product: syz
[  981.671213][ T5815] usb 1-1: Manufacturer: syz
[  981.671227][ T5815] usb 1-1: SerialNumber: syz
[  981.677399][T16053] hub 4-1:4.0: 2 ports detected
[  981.826808][T15577] Bluetooth: hci2: command tx timeout
[  981.999122][ T5815] cdc_ncm 1-1:1.0: bind() failure
[  982.017205][ T5815] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  982.017253][ T5815] cdc_ncm 1-1:1.1: bind() failure
[  982.044205][ T5815] usb 1-1: USB disconnect, device number 86
[  982.116234][T13964] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  982.266271][T13964] usb 2-1: Using ep0 maxpacket: 16
[  982.269605][T13964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  982.272333][T13964] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  982.272363][T13964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.272384][T13964] usb 2-1: Product: syz
[  982.272399][T13964] usb 2-1: Manufacturer: syz
[  982.272415][T13964] usb 2-1: SerialNumber: syz
[  982.922234][T13964] usb 2-1: config 0 descriptor??
[  983.261148][    T9] hub 4-1:4.0: hub_ext_port_status failed (err = -71)
[  983.275599][ T5898] usb 2-1: USB disconnect, device number 33
[  983.289402][T15979] usb 4-1: USB disconnect, device number 83
[  983.360573][  T153] usb 4-1: Failed to suspend device, error -19
[  983.721952][T16625] chnl_net:caif_netlink_parms(): no params data found
[  983.906402][T15577] Bluetooth: hci2: command tx timeout
[  984.040250][T16707] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3407'.
[  984.068765][T16708] netlink: 'syz.1.3406': attribute type 64 has an invalid length.
[  984.100347][ T5898] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  984.120333][T16710] netlink: 'syz.1.3406': attribute type 64 has an invalid length.
[  984.658656][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  984.674043][ T5898] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  984.674084][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.674105][ T5898] usb 4-1: Product: syz
[  984.674236][ T5898] usb 4-1: Manufacturer: syz
[  984.674254][ T5898] usb 4-1: SerialNumber: syz
[  988.066512][ T5898] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  988.079990][ T5898] usb 4-1: USB disconnect, device number 84
[  989.541795][T16750] FAULT_INJECTION: forcing a failure.
[  989.541795][T16750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  989.541830][T16750] CPU: 1 UID: 0 PID: 16750 Comm: syz.3.3415 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  989.541853][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  989.541865][T16750] Call Trace:
[  989.541873][T16750]  <TASK>
[  989.541882][T16750]  dump_stack_lvl+0xe8/0x150
[  989.541919][T16750]  should_fail_ex+0x46b/0x600
[  989.541950][T16750]  _copy_to_user+0x31/0xb0
[  989.541981][T16750]  drm_ioctl+0x6e0/0xb80
[  989.541999][T16750]  ? smk_tskacc+0x311/0x3a0
[  989.542030][T16750]  ? __pfx_drm_mode_getfb2_ioctl+0x10/0x10
[  989.542060][T16750]  ? __pfx_drm_ioctl+0x10/0x10
[  989.542092][T16750]  ? __fget_files+0x2a/0x420
[  989.542121][T16750]  ? bpf_lsm_file_ioctl+0x9/0x20
[  989.542142][T16750]  ? __pfx_drm_ioctl+0x10/0x10
[  989.542161][T16750]  __se_sys_ioctl+0xff/0x170
[  989.542182][T16750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.542203][T16750]  do_syscall_64+0x15f/0xf80
[  989.542225][T16750]  ? trace_irq_disable+0x3b/0x140
[  989.542246][T16750]  ? clear_bhb_loop+0x40/0x90
[  989.542270][T16750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.542290][T16750] RIP: 0033:0x7fb42317c819
[  989.542308][T16750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.542325][T16750] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  989.542354][T16750] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[  989.542369][T16750] RDX: 00002000000001c0 RSI: 00000000c06864ce RDI: 0000000000000003
[  989.542382][T16750] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[  989.542395][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.542407][T16750] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[  989.542438][T16750]  </TASK>
[  990.026224][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  990.146158][T15577] Bluetooth: hci1: command 0x0406 tx timeout
[  990.176116][    T9] usb 2-1: Using ep0 maxpacket: 32
[  990.184950][    T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  990.184985][    T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  990.225764][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  990.226145][    T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  990.226164][    T9] usb 2-1: Product: syz
[  990.226176][    T9] usb 2-1: Manufacturer: syz
[  990.408468][    T9] hub 2-1:4.0: USB hub found
[  990.449355][T16625] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.449558][T16625] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.449810][T16625] bridge_slave_0: entered allmulticast mode
[  990.452371][T16625] bridge_slave_0: entered promiscuous mode
[  990.623211][    T9] hub 2-1:4.0: 2 ports detected
[  990.712209][T16625] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.712339][T16625] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.712583][T16625] bridge_slave_1: entered allmulticast mode
[  990.725337][T16625] bridge_slave_1: entered promiscuous mode
[  990.937835][T16625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  990.955891][T16625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.137900][T16625] team0: Port device team_slave_0 added
[  991.159939][T16625] team0: Port device team_slave_1 added
[  991.393058][T16625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.393075][T16625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.393097][T16625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.590596][T16625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.590615][T16625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.590641][T16625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.618273][   T37] kauditd_printk_skb: 11 callbacks suppressed
[  991.618289][   T37] audit: type=1326 audit(1776889230.337:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.618338][   T37] audit: type=1326 audit(1776889230.337:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.618376][   T37] audit: type=1326 audit(1776889230.337:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.618416][   T37] audit: type=1326 audit(1776889230.337:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.618455][   T37] audit: type=1326 audit(1776889230.337:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ead2fc4ab code=0x7ffc0000
[  991.618496][   T37] audit: type=1326 audit(1776889230.337:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ead2fc4ab code=0x7ffc0000
[  991.621004][   T37] audit: type=1326 audit(1776889230.347:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ead2bd04e code=0x7ffc0000
[  991.621052][   T37] audit: type=1326 audit(1776889230.347:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.828351][   T37] audit: type=1326 audit(1776889230.547:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  991.828734][   T37] audit: type=1326 audit(1776889230.547:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16749 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ead2fc819 code=0x7ffc0000
[  992.721518][T16060] usb 2-1: USB disconnect, device number 34
[  992.766264][ T5815] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  994.211151][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  994.531560][    T9] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  996.777654][ T5825] Bluetooth: hci4: unexpected event for opcode 0x2023
[  996.908916][T16801] FAULT_INJECTION: forcing a failure.
[  996.908916][T16801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  996.908957][T16801] CPU: 1 UID: 0 PID: 16801 Comm: syz.1.3429 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  996.908983][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  996.908995][T16801] Call Trace:
[  996.909003][T16801]  <TASK>
[  996.909011][T16801]  dump_stack_lvl+0xe8/0x150
[  996.909046][T16801]  should_fail_ex+0x46b/0x600
[  996.909075][T16801]  _copy_from_iter+0x1d3/0x1670
[  996.909107][T16801]  ? trace_kmem_cache_alloc+0x29/0xe0
[  996.909135][T16801]  ? __alloc_skb+0x27d/0x7d0
[  996.909159][T16801]  ? __pfx__copy_from_iter+0x10/0x10
[  996.909180][T16801]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  996.909207][T16801]  ? __alloc_skb+0x27d/0x7d0
[  996.909235][T16801]  ? netlink_sendmsg+0x650/0xb40
[  996.909259][T16801]  ? skb_put+0x11b/0x210
[  996.909289][T16801]  netlink_sendmsg+0x6c0/0xb40
[  996.909323][T16801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  996.909351][T16801]  ? unwind_get_return_address+0x4d/0x90
[  996.909378][T16801]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  996.909410][T16801]  ____sys_sendmsg+0x94c/0x9c0
[  996.909435][T16801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  996.909463][T16801]  ? import_iovec+0x73/0xa0
[  996.909491][T16801]  ___sys_sendmsg+0x2a5/0x360
[  996.909509][T16801]  ? __lock_acquire+0x6b5/0x2cf0
[  996.909536][T16801]  ? __pfx____sys_sendmsg+0x10/0x10
[  996.909586][T16801]  ? __fget_files+0x2a/0x420
[  996.909610][T16801]  ? __fget_files+0x3a6/0x420
[  996.909643][T16801]  __x64_sys_sendmsg+0x1c3/0x2a0
[  996.909666][T16801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  996.909693][T16801]  ? __pfx_ksys_write+0x10/0x10
[  996.909721][T16801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.909741][T16801]  do_syscall_64+0x15f/0xf80
[  996.909762][T16801]  ? trace_irq_disable+0x3b/0x140
[  996.909782][T16801]  ? clear_bhb_loop+0x40/0x90
[  996.909806][T16801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.909825][T16801] RIP: 0033:0x7f5ead2fc819
[  996.909843][T16801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  996.909859][T16801] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  996.909880][T16801] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[  996.909895][T16801] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000005
[  996.909907][T16801] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[  996.909920][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  996.909932][T16801] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[  996.909968][T16801]  </TASK>
[  997.105576][T16625] hsr_slave_0: entered promiscuous mode
[  997.111609][T16625] hsr_slave_1: entered promiscuous mode
[  997.129230][T16625] debugfs: 'hsr0' already exists in 'hsr'
[  997.129259][T16625] Cannot create hsr debugfs directory
[ 1002.136695][T16844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3442'.
[ 1004.057507][T13535] bridge_slave_1: left allmulticast mode
[ 1004.057538][T13535] bridge_slave_1: left promiscuous mode
[ 1004.177973][T13535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.405539][T13535] bridge_slave_0: left allmulticast mode
[ 1004.405570][T13535] bridge_slave_0: left promiscuous mode
[ 1004.405811][T13535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.526757][T13535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.563975][T16900] FAULT_INJECTION: forcing a failure.
[ 1008.563975][T16900] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.563998][T16900] CPU: 1 UID: 0 PID: 16900 Comm: syz.3.3454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1008.564010][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1008.564018][T16900] Call Trace:
[ 1008.564023][T16900]  <TASK>
[ 1008.564028][T16900]  dump_stack_lvl+0xe8/0x150
[ 1008.564049][T16900]  should_fail_ex+0x46b/0x600
[ 1008.564066][T16900]  should_failslab+0xa8/0x100
[ 1008.564079][T16900]  __kmalloc_noprof+0xdf/0x7b0
[ 1008.564089][T16900]  ? kfree+0x4d/0x6c0
[ 1008.564103][T16900]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1008.564120][T16900]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1008.564134][T16900]  ? tomoyo_domain+0xd8/0x130
[ 1008.564150][T16900]  ? tomoyo_path_number_perm+0x219/0x630
[ 1008.564161][T16900]  tomoyo_path_number_perm+0x246/0x630
[ 1008.564177][T16900]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1008.564187][T16900]  ? __lock_acquire+0x6b5/0x2cf0
[ 1008.564202][T16900]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1008.564229][T16900]  ? __fget_files+0x2a/0x420
[ 1008.564247][T16900]  ? __fget_files+0x2a/0x420
[ 1008.564260][T16900]  ? __fget_files+0x3a6/0x420
[ 1008.564273][T16900]  ? __fget_files+0x2a/0x420
[ 1008.564288][T16900]  security_file_ioctl+0xc3/0x2a0
[ 1008.564301][T16900]  __se_sys_ioctl+0x47/0x170
[ 1008.564313][T16900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.564325][T16900]  do_syscall_64+0x15f/0xf80
[ 1008.564338][T16900]  ? trace_irq_disable+0x3b/0x140
[ 1008.564349][T16900]  ? clear_bhb_loop+0x40/0x90
[ 1008.564362][T16900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.564373][T16900] RIP: 0033:0x7fb42317c819
[ 1008.564384][T16900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1008.564393][T16900] RSP: 002b:00007fb4213d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1008.564405][T16900] RAX: ffffffffffffffda RBX: 00007fb4233f5fa0 RCX: 00007fb42317c819
[ 1008.564413][T16900] RDX: 00002000000001c0 RSI: 00000000000007ab RDI: 0000000000000004
[ 1008.564420][T16900] RBP: 00007fb4213d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1008.564427][T16900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1008.564433][T16900] R13: 00007fb4233f6038 R14: 00007fb4233f5fa0 R15: 00007ffc1917bbc8
[ 1008.564449][T16900]  </TASK>
[ 1008.564454][T16900] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1008.719102][T13535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.771464][T13535] bond0 (unregistering): Released all slaves
[ 1008.809341][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'.
[ 1009.005176][ T5474] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1009.012391][T16906] misc userio: Invalid payload size
[ 1010.165086][T13535] hsr_slave_0: left promiscuous mode
[ 1010.227600][T13535] hsr_slave_1: left promiscuous mode
[ 1010.228588][T13535] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1010.276814][T13535] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.622242][T16926] overlay: ./file1 is not a directory
[ 1012.850187][T16943] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3467'.
[ 1014.300218][T13535] team0 (unregistering): Port device team_slave_1 removed
[ 1014.507238][T13535] team0 (unregistering): Port device team_slave_0 removed
[ 1014.619817][ T5823] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1014.745255][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'.
[ 1014.766207][ T5823] usb 1-1: device descriptor read/64, error -71
[ 1014.968760][T16956] netlink: 'syz.3.3469': attribute type 64 has an invalid length.
[ 1014.968902][T16060] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1015.006298][ T5823] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1015.008828][T16956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.012855][T16956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.021527][T16953] netlink: 'syz.3.3469': attribute type 64 has an invalid length.
[ 1015.095566][T16960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3471'.
[ 1015.126261][T16060] usb 2-1: Using ep0 maxpacket: 32
[ 1015.128868][T16060] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1015.130094][T16060] usb 2-1: config 1 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 173, changing to 11
[ 1015.130129][T16060] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1015.132212][T16060] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.40
[ 1015.132238][T16060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.132257][T16060] usb 2-1: Product: syz
[ 1015.132271][T16060] usb 2-1: Manufacturer: 荼攸꘬꓈颹ࢸ쫹た᥿㰔↢ၩ斎♧꣜績矲嫶술慗沱꿬쭓ꆺᡶꬒ㱬瀿럅왏⒟䂏災ꀴ㹘쁖饗髱둽쮛⚅綜ꬂ蜎衤㼄욡쵁꾢喤뱾㞍趀𢡊乽㷙䂓Ƕ뙋駹倆눜ဦᚮ༻ᦕ伡厝ۜꕗ᫏㮐恸奢
[ 1015.132297][T16060] usb 2-1: SerialNumber: syz
[ 1015.136403][ T5823] usb 1-1: device descriptor read/64, error -71
[ 1015.269691][ T5823] usb usb1-port1: attempt power cycle
[ 1015.571735][T16060] usbhid 2-1:1.0: can't add hid device: -71
[ 1015.571841][T16060] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 1015.595217][T16060] usb 2-1: USB disconnect, device number 35
[ 1015.641968][ T5823] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1015.670526][ T5823] usb 1-1: device descriptor read/8, error -71
[ 1018.236146][ T5897] IPVS: starting estimator thread 0...
[ 1018.405373][T16995] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1018.795747][ T2384] pvrusb2: request_firmware fatal error with code=-110
[ 1018.795802][ T2384] pvrusb2: Failure uploading firmware1
[ 1018.795811][ T2384] pvrusb2: Device initialization was not successful.
[ 1018.795819][ T2384] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1018.795829][ T2384] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1018.800942][ T5899] pvrusb2: Device being rendered inoperable
[ 1022.146537][ T5823] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1022.147021][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1022.334175][ T5823] usb 4-1: device descriptor read/64, error -32
[ 1022.827037][ T5823] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1023.027788][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1023.396230][ T5823] usb 4-1: Using ep0 maxpacket: 32
[ 1023.415604][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1023.475910][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1023.540929][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.541782][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1023.541945][ T5823] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1023.542127][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.920425][    T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1023.920466][    T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1023.920525][    T9] usb 2-1: Product: syz
[ 1023.920576][    T9] usb 2-1: Manufacturer: syz
[ 1023.920630][    T9] usb 2-1: SerialNumber: syz
[ 1023.962681][ T5823] usb 4-1: config 0 descriptor??
[ 1024.735625][ T5823] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1028.549142][    T9] usb 2-1: can't set config #1, error -71
[ 1028.608578][    T9] usb 2-1: USB disconnect, device number 36
[ 1028.610656][ T5815] usb 4-1: USB disconnect, device number 86
[ 1028.942149][T17029] FAULT_INJECTION: forcing a failure.
[ 1028.942149][T17029] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.942184][T17029] CPU: 0 UID: 0 PID: 17029 Comm: syz.1.3483 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.942208][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1028.942220][T17029] Call Trace:
[ 1028.942228][T17029]  <TASK>
[ 1028.942237][T17029]  dump_stack_lvl+0xe8/0x150
[ 1028.942272][T17029]  should_fail_ex+0x46b/0x600
[ 1028.942302][T17029]  should_failslab+0xa8/0x100
[ 1028.942325][T17029]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[ 1028.942354][T17029]  ? __alloc_skb+0x1d0/0x7d0
[ 1028.942379][T17029]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1028.942406][T17029]  __alloc_skb+0x1d0/0x7d0
[ 1028.942437][T17029]  netlink_sendmsg+0x5d4/0xb40
[ 1028.942474][T17029]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1028.942502][T17029]  ? unwind_get_return_address+0x4d/0x90
[ 1028.942530][T17029]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1028.942561][T17029]  ____sys_sendmsg+0x94c/0x9c0
[ 1028.942586][T17029]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1028.942614][T17029]  ? import_iovec+0x73/0xa0
[ 1028.942644][T17029]  ___sys_sendmsg+0x2a5/0x360
[ 1028.942663][T17029]  ? __lock_acquire+0x6b5/0x2cf0
[ 1028.942690][T17029]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1028.942742][T17029]  ? __fget_files+0x2a/0x420
[ 1028.942766][T17029]  ? __fget_files+0x3a6/0x420
[ 1028.942801][T17029]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1028.942824][T17029]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1028.942853][T17029]  ? __pfx_ksys_write+0x10/0x10
[ 1028.942879][T17029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.942901][T17029]  do_syscall_64+0x15f/0xf80
[ 1028.942923][T17029]  ? trace_irq_disable+0x3b/0x140
[ 1028.942944][T17029]  ? clear_bhb_loop+0x40/0x90
[ 1028.942968][T17029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.942987][T17029] RIP: 0033:0x7f5ead2fc819
[ 1028.943005][T17029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1028.943020][T17029] RSP: 002b:00007f5eab556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1028.943039][T17029] RAX: ffffffffffffffda RBX: 00007f5ead575fa0 RCX: 00007f5ead2fc819
[ 1028.943052][T17029] RDX: 0000000000028040 RSI: 0000200000000180 RDI: 0000000000000004
[ 1028.943064][T17029] RBP: 00007f5eab556090 R08: 0000000000000000 R09: 0000000000000000
[ 1028.943076][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.943086][T17029] R13: 00007f5ead576038 R14: 00007f5ead575fa0 R15: 00007fff579f1848
[ 1028.943120][T17029]  </TASK>
[ 1031.897263][ T5815] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[ 1032.363609][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1032.363640][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.363669][ T5815] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1032.363688][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.420698][ T5815] usb 2-1: config 0 descriptor??
[ 1032.620491][T17060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3490'.
[ 1032.905166][ T5815] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[ 1032.905203][ T5815] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[ 1032.905229][ T5815] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[ 1032.905254][ T5815] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[ 1032.905279][ T5815] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[ 1033.189593][ T5815] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[ 1033.833602][ T5815] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0
[ 1033.833642][ T5815] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22
[ 1033.833695][ T5815] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense
[ 1033.833715][ T5815] playstation 0003:054C:0DF2.0009: Failed to create dualsense.
[ 1033.973599][ T5815] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22
[ 1034.196120][    T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1034.219705][T16625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1034.273751][T16625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1034.274659][T16625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1034.347210][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1034.409189][ T5899] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1034.575977][ T5899] usb 6-1: Using ep0 maxpacket: 8
[ 1034.579194][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1034.582243][T16625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1034.582443][ T5899] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1034.582469][ T5899] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1034.582489][ T5899] usb 6-1: Product: syz
[ 1034.582503][ T5899] usb 6-1: Manufacturer: syz
[ 1034.582518][ T5899] usb 6-1: SerialNumber: syz
[ 1034.603259][T16625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1034.844273][ T5899] usb 6-1: Invalid connection information received from device
[ 1034.901887][    T9] usb 4-1: device descriptor read/all, error -71
[ 1034.984077][T16625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1035.047131][ T5815] usb 6-1: USB disconnect, device number 71
[ 1035.113143][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[ 1035.777960][ T5899] usb 2-1: USB disconnect, device number 37
[ 1037.293839][T15577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1037.420633][T15577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1037.464534][T15577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1037.485622][T15577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1037.491308][T15577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1037.852446][T17121] Bluetooth: MGMT ver 1.23
[ 1038.272042][T17113] kobject: kobject_add_internal failed for queues (error: -2 parent: bnep0)
[ 1038.335415][T17113] ==================================================================
[ 1038.335432][T17113] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x16b/0x6b0
[ 1038.335464][T17113] Read of size 8 at addr ff[ 1038.335464][T17113] Read of size 8 at addr ffff88802d4e0dc8 by task syz.0.3498/17113
[ 1038.335478][T17113] 
[ 1038.335489][T17113] CPU: 0 UID: 0 PID: 17113 Comm: syz.0.3498 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1038.335510][T17113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1038.335521][T17113] Call Trace:
[ 1038.335529][T17113]  <TASK>
[ 1038.335536][T17113]  dump_stack_lvl+0xe8/0x150
[ 1038.335565][T17113]  print_address_description+0x55/0x1e0
[ 1038.335593][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.335615][T17113]  print_report+0x58/0x70
[ 1038.335640][T17113]  kasan_report+0x117/0x150
[ 1038.335659][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.335683][T17113]  cfusbl_device_notify+0x16b/0x6b0
[ 1038.335711][T17113]  ? net_generic+0x1e/0x240
[ 1038.335732][T17113]  ? net_generic+0x1e/0x240
[ 1038.335752][T17113]  ? __pfx_cfusbl_device_notify+0x10/0x10
[ 1038.335777][T17113]  ? caif_device_notify+0x24e/0xff0
[ 1038.335801][T17113]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1038.335821][T17113]  notifier_call_chain+0x1ad/0x3d0
[ 1038.335844][T17113]  register_netdevice+0x1361/0x1d10
[ 1038.335868][T17113]  ? __pfx_register_netdevice+0x10/0x10
[ 1038.335887][T17113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1038.335910][T17113]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1038.335930][T17113]  ? _mutex_lock_killable+0x152/0x1d0
[ 1038.335957][T17113]  ? register_netdev+0x18/0x60
[ 1038.335977][T17113]  register_netdev+0x40/0x60
[ 1038.335993][T17113]  bnep_add_connection+0x6e5/0xca0
[ 1038.336020][T17113]  ? __pfx_bnep_add_connection+0x10/0x10
[ 1038.336042][T17113]  ? __fget_files+0x3a6/0x420
[ 1038.336070][T17113]  do_bnep_sock_ioctl+0x40b/0x650
[ 1038.336095][T17113]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[ 1038.336122][T17113]  ? tomoyo_path_number_perm+0x219/0x630
[ 1038.336150][T17113]  sock_do_ioctl+0x101/0x320
[ 1038.336173][T17113]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1038.336197][T17113]  ? smack_file_ioctl+0x263/0x360
[ 1038.336225][T17113]  sock_ioctl+0x5c9/0x7f0
[ 1038.336246][T17113]  ? __pfx_sock_ioctl+0x10/0x10
[ 1038.336266][T17113]  ? __fget_files+0x2a/0x420
[ 1038.336288][T17113]  ? __fget_files+0x3a6/0x420
[ 1038.336310][T17113]  ? __fget_files+0x2a/0x420
[ 1038.336334][T17113]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1038.336361][T17113]  ? __pfx_sock_ioctl+0x10/0x10
[ 1038.336381][T17113]  __se_sys_ioctl+0xff/0x170
[ 1038.336398][T17113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.336418][T17113]  do_syscall_64+0x15f/0xf80
[ 1038.336438][T17113]  ? trace_irq_disable+0x3b/0x140
[ 1038.336457][T17113]  ? clear_bhb_loop+0x40/0x90
[ 1038.336479][T17113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.336498][T17113] RIP: 0033:0x7f58c244c819
[ 1038.336515][T17113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1038.336532][T17113] RSP: 002b:00007f58c06a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1038.336551][T17113] RAX: ffffffffffffffda RBX: 00007f58c26c5fa0 RCX: 00007f58c244c819
[ 1038.336565][T17113] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000005
[ 1038.336578][T17113] RBP: 00007f58c06a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.336590][T17113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1038.336602][T17113] R13: 00007f58c26c6038 R14: 00007f58c26c5fa0 R15: 00007ffc33995ac8
[ 1038.336622][T17113]  </TASK>
[ 1038.336629][T17113] 
[ 1038.336641][T17113] Allocated by task 15577:
[ 1038.336650][T17113]  kasan_save_track+0x3e/0x80
[ 1038.336674][T17113]  __kasan_kmalloc+0x93/0xb0
[ 1038.336698][T17113]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1038.336715][T17113]  __hci_conn_add+0x3c4/0x1d80
[ 1038.336741][T17113]  hci_conn_request_evt+0x655/0xe20
[ 1038.336762][T17113]  hci_event_packet+0x6ab/0xef0
[ 1038.336782][T17113]  hci_rx_work+0x3ee/0x1040
[ 1038.336802][T17113]  process_scheduled_works+0xb5d/0x1860
[ 1038.336827][T17113]  worker_thread+0xa53/0xfc0
[ 1038.336842][T17113]  kthread+0x388/0x470
[ 1038.336860][T17113]  ret_from_fork+0x514/0xb70
[ 1038.336875][T17113]  ret_from_fork_asm+0x1a/0x30
[ 1038.336893][T17113] 
[ 1038.336898][T17113] Freed by task 17113:
[ 1038.336907][T17113]  kasan_save_track+0x3e/0x80
[ 1038.336930][T17113]  kasan_save_free_info+0x46/0x50
[ 1038.336950][T17113]  __kasan_slab_free+0x5c/0x80
[ 1038.336973][T17113]  kfree+0x1c5/0x6c0
[ 1038.336995][T17113]  device_release+0xc4/0x1f0
[ 1038.337012][T17113]  kobject_put+0x228/0x560
[ 1038.337031][T17113]  device_del+0x7be/0x900
[ 1038.337050][T17113]  netdev_register_kobject+0x2b2/0x310
[ 1038.337062][T17113]  register_netdevice+0x12d7/0x1d10
[ 1038.337072][T17113]  register_netdev+0x40/0x60
[ 1038.337081][T17113]  bnep_add_connection+0x6e5/0xca0
[ 1038.337096][T17113]  do_bnep_sock_ioctl+0x40b/0x650
[ 1038.337108][T17113]  sock_do_ioctl+0x101/0x320
[ 1038.337119][T17113]  sock_ioctl+0x5c9/0x7f0
[ 1038.337129][T17113]  __se_sys_ioctl+0xff/0x170
[ 1038.337138][T17113]  do_syscall_64+0x15f/0xf80
[ 1038.337149][T17113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.337158][T17113] 
[ 1038.337161][T17113] Last potentially related work creation:
[ 1038.337165][T17113]  kasan_save_stack+0x3e/0x60
[ 1038.337178][T17113]  kasan_record_aux_stack+0xbd/0xd0
[ 1038.337189][T17113]  insert_work+0x3d/0x330
[ 1038.337202][T17113]  __queue_work+0xcfd/0x1010
[ 1038.337210][T17113]  queue_delayed_work_on+0x11a/0x1e0
[ 1038.337219][T17113]  l2cap_chan_del+0x285/0x610
[ 1038.337231][T17113]  l2cap_conn_del+0x33d/0x570
[ 1038.337240][T17113]  hci_conn_hash_flush+0x10d/0x260
[ 1038.337250][T17113]  hci_dev_close_sync+0x821/0x10e0
[ 1038.337265][T17113]  hci_unregister_dev+0x21a/0x5a0
[ 1038.337276][T17113]  vhci_release+0x155/0x1b0
[ 1038.337290][T17113]  __fput+0x461/0xa70
[ 1038.337303][T17113]  task_work_run+0x1d9/0x270
[ 1038.337314][T17113]  do_exit+0x70f/0x22c0
[ 1038.337324][T17113]  do_group_exit+0x21b/0x2d0
[ 1038.337335][T17113]  get_signal+0x125c/0x1310
[ 1038.337354][T17113]  arch_do_signal_or_restart+0xbc/0x830
[ 1038.337367][T17113]  exit_to_user_mode_loop+0x86/0x480
[ 1038.337378][T17113]  do_syscall_64+0x33e/0xf80
[ 1038.337389][T17113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.337398][T17113] 
[ 1038.337400][T17113] The buggy address belongs to the object at ffff88802d4e0000
[ 1038.337400][T17113]  which belongs to the cache kmalloc-8k of size 8192
[ 1038.337410][T17113] The buggy address is located 3528 bytes inside of
[ 1038.337410][T17113]  freed 8192-byte region [ffff88802d4e0000, ffff88802d4e2000)
[ 1038.337421][T17113] 
[ 1038.337424][T17113] The buggy address belongs to the physical page:
[ 1038.337438][T17113] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d4e0
[ 1038.337451][T17113] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1038.337459][T17113] flags: 0x80000000000040(head|node=0|zone=1)
[ 1038.337474][T17113] page_type: f5(slab)
[ 1038.337488][T17113] raw: 0080000000000040 ffff88801a022280 dead000000000100 dead000000000122
[ 1038.337503][T17113] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 1038.337519][T17113] head: 0080000000000040 ffff88801a022280 dead000000000100 dead000000000122
[ 1038.337529][T17113] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 1038.337538][T17113] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1038.337546][T17113] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1038.337552][T17113] page dumped because: kasan: bad access detected
[ 1038.337561][T17113] page_owner tracks the page as allocated
[ 1038.337565][T17113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16118, tgid 16118 (syz-executor), ts 972709666042, free_ts 972593506998
[ 1038.337586][T17113]  post_alloc_hook+0x231/0x280
[ 1038.337601][T17113]  get_page_from_freelist+0x27c8/0x2840
[ 1038.337612][T17113]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1038.337622][T17113]  allocate_slab+0x77/0x660
[ 1038.337633][T17113]  refill_objects+0x33c/0x3d0
[ 1038.337643][T17113]  __pcs_replace_empty_main+0x373/0x720
[ 1038.337655][T17113]  __kvmalloc_node_noprof+0x6f4/0x8e0
[ 1038.337665][T17113]  pfifo_fast_init+0x392/0x6f0
[ 1038.337677][T17113]  qdisc_create_dflt+0x13b/0x4e0
[ 1038.337689][T17113]  dev_activate+0x378/0x1150
[ 1038.337702][T17113]  __dev_open+0x67a/0x830
[ 1038.337713][T17113]  __dev_change_flags+0x1f7/0x690
[ 1038.337727][T17113]  netif_change_flags+0x88/0x1a0
[ 1038.337740][T17113]  do_setlink+0xf82/0x4590
[ 1038.337753][T17113]  rtnl_newlink+0x15ad/0x1bb0
[ 1038.337764][T17113]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1038.337776][T17113] page last free pid 1310 tgid 1310 stack trace:
[ 1038.337782][T17113]  __free_frozen_pages+0xfa6/0x10f0
[ 1038.337790][T17113]  skb_release_data+0x8a5/0xa60
[ 1038.337799][T17113]  __kfree_skb+0x5d/0x210
[ 1038.337812][T17113]  batadv_forw_packet_free+0x65/0x1f0
[ 1038.337824][T17113]  process_scheduled_works+0xb5d/0x1860
[ 1038.337837][T17113]  worker_thread+0xa53/0xfc0
[ 1038.337845][T17113]  kthread+0x388/0x470
[ 1038.337855][T17113]  ret_from_fork+0x514/0xb70
[ 1038.337863][T17113]  ret_from_fork_asm+0x1a/0x30
[ 1038.337873][T17113] 
[ 1038.337876][T17113] Memory state around the buggy address:
[ 1038.337881][T17113]  ffff88802d4e0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1038.337888][T17113]  ffff88802d4e0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1038.337895][T17113] >ffff88802d4e0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1038.337900][T17113]                                               ^
[ 1038.337905][T17113]  ffff88802d4e0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1038.337912][T17113]  ffff88802d4e0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1038.337917][T17113] ==================================================================
[ 1038.357893][T17113] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1038.357914][T17113] CPU: 0 UID: 0 PID: 17113 Comm: syz.0.3498 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1038.357937][T17113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1038.357949][T17113] Call Trace:
[ 1038.357957][T17113]  <TASK>
[ 1038.357965][T17113]  vpanic+0x56c/0xa60
[ 1038.357989][T17113]  ? __pfx_vpanic+0x10/0x10
[ 1038.358012][T17113]  panic+0xc5/0xd0
[ 1038.358029][T17113]  ? __pfx_panic+0x10/0x10
[ 1038.358047][T17113]  ? preempt_schedule_thunk+0x16/0x30
[ 1038.358077][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.358101][T17113]  ? preempt_schedule_thunk+0x16/0x30
[ 1038.358123][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.358147][T17113]  check_panic_on_warn+0x89/0xb0
[ 1038.358170][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.358193][T17113]  end_report+0x73/0x170
[ 1038.358212][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.358233][T17113]  kasan_report+0x128/0x150
[ 1038.358252][T17113]  ? cfusbl_device_notify+0x16b/0x6b0
[ 1038.358278][T17113]  cfusbl_device_notify+0x16b/0x6b0
[ 1038.358303][T17113]  ? net_generic+0x1e/0x240
[ 1038.358325][T17113]  ? net_generic+0x1e/0x240
[ 1038.358351][T17113]  ? __pfx_cfusbl_device_notify+0x10/0x10
[ 1038.358376][T17113]  ? caif_device_notify+0x24e/0xff0
[ 1038.358401][T17113]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1038.358422][T17113]  notifier_call_chain+0x1ad/0x3d0
[ 1038.358447][T17113]  register_netdevice+0x1361/0x1d10
[ 1038.358474][T17113]  ? __pfx_register_netdevice+0x10/0x10
[ 1038.358495][T17113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1038.358518][T17113]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1038.358539][T17113]  ? _mutex_lock_killable+0x152/0x1d0
[ 1038.358565][T17113]  ? register_netdev+0x18/0x60
[ 1038.358584][T17113]  register_netdev+0x40/0x60
[ 1038.358603][T17113]  bnep_add_connection+0x6e5/0xca0
[ 1038.358631][T17113]  ? __pfx_bnep_add_connection+0x10/0x10
[ 1038.358655][T17113]  ? __fget_files+0x3a6/0x420
[ 1038.358684][T17113]  do_bnep_sock_ioctl+0x40b/0x650
[ 1038.358710][T17113]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[ 1038.358738][T17113]  ? tomoyo_path_number_perm+0x219/0x630
[ 1038.358765][T17113]  sock_do_ioctl+0x101/0x320
[ 1038.358788][T17113]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1038.358813][T17113]  ? smack_file_ioctl+0x263/0x360
[ 1038.358842][T17113]  sock_ioctl+0x5c9/0x7f0
[ 1038.358863][T17113]  ? __pfx_sock_ioctl+0x10/0x10
[ 1038.358883][T17113]  ? __fget_files+0x2a/0x420
[ 1038.358906][T17113]  ? __fget_files+0x3a6/0x420
[ 1038.358929][T17113]  ? __fget_files+0x2a/0x420
[ 1038.358953][T17113]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1038.358973][T17113]  ? __pfx_sock_ioctl+0x10/0x10
[ 1038.358993][T17113]  __se_sys_ioctl+0xff/0x170
[ 1038.359011][T17113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.359031][T17113]  do_syscall_64+0x15f/0xf80
[ 1038.359052][T17113]  ? trace_irq_disable+0x3b/0x140
[ 1038.359070][T17113]  ? clear_bhb_loop+0x40/0x90
[ 1038.359091][T17113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.359109][T17113] RIP: 0033:0x7f58c244c819
[ 1038.359127][T17113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1038.359143][T17113] RSP: 002b:00007f58c06a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1038.359163][T17113] RAX: ffffffffffffffda RBX: 00007f58c26c5fa0 RCX: 00007f58c244c819
[ 1038.359178][T17113] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000005
[ 1038.359191][T17113] RBP: 00007f58c06a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.359203][T17113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1038.359216][T17113] R13: 00007f58c26c6038 R14: 00007f58c26c5fa0 R15: 00007ffc33995ac8
[ 1038.359238][T17113]  </TASK>
[ 1038.359618][T17113] Kernel Offset: disabled