last executing test programs:

2m11.928652212s ago: executing program 2 (id=160):
r0 = syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
syz_usb_disconnect(r0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4603000701810000000000000003003e00f9ffffffd80100000000000040000000000000008b0000"], 0xb0)
lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r1)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = getpgid(0x0)
syz_open_procfs(r2, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x2, 0x2000, 0x1, &(0x7f0000000180)="0e"}, {0x4000, 0x2601, 0x0, 0x0}, {0x6, 0x6000, 0xc7, &(0x7f0000000440)="97e975e99e68ec40fad25f703098aad85c2854af9b8e900615190541b70032d13ffbe7a5df97e30718c4b10c109a71950f7539233cf41c2c0038cedce174aa059a8f6f930b0ddc1a149468b8a7d432201c0f13a0d7dc026bfd3347ec45756bd2c6f11bde3bd22ee3486d40d8602408dd378210848555837d0ad08f6cae080e6eab2a73590a0fdf30dc4698d1df1a3c9ce420fb0dc17deeca3b2fbc4ba2b3633549404e4e0261969c9bd10b3c2e5a9e05b027457f02b3a2f0665e23251bf81eef521fc1fda52125"}], 0x3})
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x3007})

2m9.25443415s ago: executing program 2 (id=163):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x28, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xbe, 0x0, &(0x7f0000000640)="e0b9547ed387141c854c20e95306e1470334ac46e44070cd2667812025b6dd2d1d075ff774e65631b160d9090815cbc76cc58aa22bc1157c4a56b2b5811f755dc0d1bfeba566a2950acc5fc2db13b076e6849086b1af09332e70cf5702e7479dcc09c0cb817964add09f5ae59370155b3ce46d89fcd1a7a68e9cf5070c1ad5faf258430d40412c04b1fe336506f3344d14278de116ffef467eb1352506e575d300000000000000057aeb479d529448f5a5f27451c232f4c1e57b299b7e9f", 0x0, 0xeb7c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m2.901869312s ago: executing program 2 (id=177):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m2.483141644s ago: executing program 2 (id=183):
syz_usb_connect(0x1, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000210d7cd08ac05148583ea01020301090238000100aa900409049902000e010008052406000005240001010d240f0103000000070008000704"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = getpid()
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x3, 0x5, 0x7}, 0x10)
r4 = syz_pidfd_open(r1, 0x0)
unshare(0x6020400)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="c3d82bf16d9d32bfdfcfb78ad7906aa716d90e6d91b96a4fd9acf5f8f9d56605290870435bdefde0fee63bcc63ee2dd8ff254930119f605bcaaefa24566a627108cee427798278a04b9cf6cdf03467bfecdf6420e6cb3570c83d26715bf9eb44c6a75c0428d721b6c8b3c383d90b3e9741e476d251d997d88d3e979bd862f4666a12d4c06cbb6d5444a84da80ff6dab1422731c14fcc00af068a59d4131936bb", 0xa0}, {&(0x7f0000001700)="6f309c5a8465870a18939ea6d9c95631e4293dc97b72e83c4d3e078c6d81ec0b97a9624815ee8d81155c2b6980c7dfdc8b16022da539a75a41e9ed2a6d7a3b5f9b6d91020d2ef145a809d946edd56f8c0ea3aac764b35a06ca6553faa67902004656b0f71fcd707d95c99b58a23eaa5603152c49e003d7a84fbd8f4fe9845c63c68e1c92f18994f2e3bdf42d10e05c4e080c6ca80c97699e49e68e65ebb966c71dbb86013a870ea59a52c82892c7f98ddbb3741d6f7c0d8e6e5c1ee0e4ef48e9ea8b8954fdd60d8a882032ebfcdc094799a4d310828e5338f5ecf31eaf3f4dd90866ac23da2598261f5595da5c3192df64a350b350d002fabbd87dbe536b2cf1a5a74fc9d3b4141905090173d268ccd0c1353738d53897f4fb45d9a7302f83fe3d6ed9cebeba1697675fd14dae3b29157a910c3ada26b10e02514843bb681b8ed18a226930856db1392bc0f497eb5e1563eef576e38474efd8be67921a537dfd8ed29d11bff63b956c12b67af1ee8603947d6eee57c91fc3891398c191473bea768843ef286cd8633ed93ea1c6ff718493d8dca22d494c072205ded6f01a66dc23308511704cdd0bdf08c044ad7a3938cf8dd80deb64bb11e935fe69eb6af2ebfb79e533fc3f339865fec6c5f6befdb57ba4f5d82daacc05845d873815044d4ca377a1b40f69ca209be41acb1dd5887eeaa7c607ed881fbc7d89b807e22a16ba59e61bf1feedc7d0ebef403dab32d04cd771dcbf9110db8675fef4463a7ac4d1f99956ee0188fc1ace068470e915a656501605b15bfd52b170ca5437b7c010e98236ff617f82745a1ef82cf986e39adddd9e8bd270bbde42c552617c9ab176ce46ff4979db6a8f8c837664405b70846126cc9c1883a73288d3739f23fbdefa1eadf6c584dce54a3520b57c18887024c60078b6e929cfc71a4d2c04ab1b025f0cf225dae9d01e8ff411fc4ccbac5fa77580cdf7e9c4cb52a770330266beb07a808e7f85f8da5be151da848ea1a896c1f60128c3c537d3e88355f54eb04a5322c3449736e762c29dafc3788a9718725355591020ae4b79071306294a0684839da63a71a8008ffc2dba0f45b24bcedcb8f16dcd038b6d0c7b352d0acf242cf31cbbd861c5da969e9b64a6a7eaf02343c25d75cda9d97c55c0f107c12434af36efaebcfc39e0d6f324710705a5b1694aa0748dd3e94f31817d2f329cb77f65b2d440842d675f8784d4e44bc7c634e4668237037d381eb2725f8ad25c1d9570df6ec1d0009a5bd3993e99e8a5c14d5f24f374b0ba319faa8ef44d8668f93881a4fef65123e2e76e978100450d219b977a17c2fbe79bbe6d440e67b2788f661f295d36471ddfb6df0060beb926adf45545b30ffdfd6dddc1f91f6b6473451fe9e380377e4418ec320f37265d949614afbcd8b59c203a6430aecabfb5a14f7bb27f4f7685de2191fa2884e71cc76ef781bebc6c34137e94654a0d16f00daf9eb6c0c7b46b5201ffcba1a4e033f4cfc6e329a8975fcd3af38563a420c12ddf00f4708f65d51781b94246755cd6218d420938b5d95583042768f6b0a1fbbf0c88dc7f04f95aa8c4e83df852691f73d962b235ffabb161edf970620b4ae33f0e00aea8387cd05a6b3aa7ae8d2d9056cc06ab1635bfd8d5b1f658254baf643ddc780e6f0e75aaaf1bb0221fe81345b362801b1b81dc94dcf552a24dd94653a689bb4d0d485ec244617628fcd091dd17b9ebd7a48b8402e336625e11893432584aa9d250646005c38149c20c2f3f21e08bce8f0da981b0352e41bbf92a84536140b2160fc8cadb770a0a82bfa3dbbb016dfbdb5af4cf447dc7e65c4dcff51a1e2e2da7fb3f4aebb90b59ef469ce89b7eaf573477b7c8dd2e1838d3b324fad682a41a1a05eded2f96b49cb5221267984cc4f87247c6e875f5c5cc324a5a7c85202811c5a6dfef4bfe84932395b1bfe7ad0bda64957172c75e3332f4b82e7f73ef970555cef1d70d773c83970bc7b1f1cd3031447106ad497a33e88f67a094efb58a7c3d9ac5f2bb12b588ea7d9752b509ef46c2aee39b4994ff4d329f4e1baffc33c733ef5b0609fc3b7cd77731250d1adb6e22d0444cdbfb6213e98787a2edfbac29ca46655b849d3e09fc9dab71d9f4a6a9cdc5c4151a36632cd8b759b6a81b180d738e03faa4921c9cd83dfa6f9274fdd72c2ed1c3b27635784e902656544b688d2438903bed2434a7e6bd0b891cc71284725b0b3d485897cd530fb2005be19d983ab5af350df51a4a480ada828f6c9753d7f2bb890e69fae54b7fe2c809e8c77777c1be4cc79686c0f5b7317643f418a9d081121303ca92e9de31aca1cd964bc19b2b4adcc5c95efed49999627443b67b2ffe6650a5476ac1e63b2b88dfd1ce24a2d3d6dcc5ca33752f04c476b67cf794b4f3731b75bf391e7f9a1e9212c291ccc5c7a83e440e7c3c4584086e8e885fe5fd329b0d68f6f5abdfe2c114651c1a8a165a4c15a647350ac176b518f9ba02574000053e313594972f474c10afb66cb418dc3b6fc435e7854bc1ca9e690a9b3329f56a98d79ae4beeab2844d161b304be5758c940813ed5e751f22046d0d363f31afbc931f238692b86ff13ee16670e4d4d7bc1000c9a25ad9824fd4e1e7b02da6e4375f6a3b37d644728f2de3d01fae62a0bd960118737da4ee5a9ec977e3a2d16c9103c98e7de30dc5ac4c957221c0a510ccfdcd0e23822f7a19481f7ced803852f4270bdd0131b2f9936fe4185dd0801cec95e75ae31fe4f9a3c4d4a3c9406c69bc4cd18b9765bf8a814a97de8ebc3a93e2bf19f9525db4305a053f1d9cf661363a6f9d774171f474047b5d268db5b4ee0aa884a47a8cb7a693b2e2954d5efb1d08968fd930c572610aa4cd843640f206f2c150e7be7e14c69901199efc2f62fc778403c38219249adc799b9cd1ce2385fb74941216bb351cd79267f189521b2ac168906b27d6e6fcc20f001a370086970b41315e2c832f64e1ca3287103eaa98ecd64763f57b113238f7eff9f523bcaadedcf187d810133fe221a2e0a84bdc34646f0c3690c20ecb44afe9310408db61a77e27fe3564a0194ec914a8f6941cb04d145664db7691e27b7529bd152735e888011d25284a3c8c7b23dc7b6c35c33ba6faffe23f2e9fc6c1adac9c1b41022bb583e3584b8d1cf100c53eb0885f3e4da7e689ace2308e61d2279b8bde3821ac13ff38fb76150a8ed678be13a1bcb31a3fb0f0ee6661c8e32f7284b0baf032d1f9cd61c34f5fc936d8c021c518ea336621678089053e193358acc3ab6ac1f70a3abb9380ffc89d2c086b01fa82cf01bf92636a89bef69df7313cae827ba0ad683f68b0c675e84c9b14bcc9027278018bd53c77c5f55bcb7c7491809f3c291ae608b00c2ee9413cdbd1a1028b2d1e182742b576d645c2c2978cf83dd22c8dc069c96c83f99406e230d0b2bd1f7035b898f5c7a1ae90eed392582f30858dcb6bd8c14eddf8bfb5f8e1b65c5cdaebbb0b6c47f33d54fc6dbccbba5ff3fb29ced581d1a7127360e41df9648b24903fecad942f7f12603c5952c93d963760712d6f0a4b74f4ac2f12aba8a9f2a4890b178b16d31edc3a2d280f9efdba901ce421d99fb0260bd30e4a5b6ca804164df12759ef1dcb58f9280fe94a80709faf82537e16253b60d2e7ba6e733897c960a1ccf8317ad733d4f1f43da2a866918faf36bd0c671708e516759c31aa14d2fbe176beb6fecf41e08be74a5740e2400043647ff34c252435440a21657d8e2f7dcf9f25926b0b748f480ddb18556d3dd35a51a4149bd7c88d917bdf9a29f4eac72548b782d259d7aacf7a02a440d0ccf520f7ccc3d92625ce32c053b55c8bb741c3376457ae09b2d373d0e731d8a65651fda866ea49397a156410ac9eec5c409b46060339f0dddea3356eb062a94dbc28981a4d5512577d48c4dc72a093513e2ef48ddebc1fa1d9d022c1f4261dd3afb9b140ff1417f144058469b58ac1da36fc51a75d809aaf094b02ad111d1954a0318ff4520f730024a4864500ea10bf20270fc0a125fcaee84303761b419ad422a799c3790c30b2d3aae9fc82131b677a334c6351fcbd58066e46df58cca32ec58cec1448b8845f929040541e231861a759ea76caa05bcdae29735d3d7a1141399a3fc6aa604dfe8c7458e63ae4845767bfa35c103778066086832f7310d7d8776667d2b0f7ea821f4d931c1617610ad33f6d2183a10050eb1a2afd3cc746dd2af36ade1d6c08bb389b14b0acb9d2da31837016cfa8a0bf0fc0d827a83997292e6c28076fcda574d773aa189f8014666d2d5e51b2421cb4050e37986fcbd0c3d6cbf95f65a00afd9a99851ba2ab827aad9b75bdad47075445407240356fe9b5d55fcb26282e28ad2269301fa775a83de5df1d3d88828f856160fdd80f3e80471f91557ecbec9af15a1755ae1ec4333e5e2ebf24d94c2a0dec00d2f99a80ceac835e5526030123c82b15b9a24b00d0ba7cb7b346036583dc59bb9f299f9e93b71129ac698cefdcbca096e4e2d07612daa1db6738f8243881d27d689588e24b15e617f66068784e81eb77fc20601d25a9d359dd2688afc72b62aa34dd7356f9a10a16a3ec15d0c6248630244c62ba56765bfa928f7088787d4a80a8f0c8012610ae8bd4152b6a7f694ca13cb7c2d22e81f053b4e08941277d1ea7edacbde050e15b8d242b148b69418337cf8a4ecb5687049a035db714a9bdd00e696d4c7b51d8ccab43dba7f681826aaa511edf22cb29511c66cf60190c065058d8e08150c364667efa6b929bd90dce253d7078a28fbf76141e333aea8e74c27dd84ad43b98e3f80f6fbf39f13e6e13716a88835c5a04a9d506b2a69db12c132dc2cabf645571eb0bab06557766a881df01a014af5eb3df20ea4e8f889dc4ffa30cff236b4a35823a9ee04429d70b2bbc79eba8a449c549337b475c25d055ef325655ec034bea36c06e25de0c0f5abca2ff52008bb7a1faf58c6d8d709d754efa8d62c773fb8f119ac03df0bd8704f1a366e3d54d588ed051e7e44ca371e0f0d0d0afc89aaaa5e8582665d874c446cab2c303c41eeb2420c9aea7cc14dc555cae350c5294a9817b6f7821cac0cfe258e5be15271f55835c3cc1138448b6914342d2f957764bfa967a23d59d058ee47afb70786095b73091c5cfacaeaf50de1c05beac3b4866668b6f7484d345e7290d48997af557b6457e6ecc1d07414683af85b19ff76d122f6374fc2fe1cf4ad395434c6a4067a23b5109493488e4fcc7087eb710de95f77e44349eb53a2a7af8db54522ac456aaa863415f782d6e36c40cfeb5146b7650cd239e597e497feefb6aa9d4a156bdbdc7a1e906728b62e968155ccc9ff19343c9cba75f195d6a2c3d0c32dd5ed8d94e9d6a78d2b961283e59815a38efc620623ea5c6b2505c9b255d57ecf130cdee447effc57faf149fa026f1ff90375abebff63ac4b6c47793386385", 0xf21}], 0x2}, 0x8000)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x0, 0x84, 0x0, @rand_addr=' \x01\x00', @local}}}}, 0x0)
ioctl$KVM_NMI(r7, 0xae9a)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00')
setns(r4, 0x24020000)
close_range(r0, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00')
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400)
ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000140)=0xfe)

1m59.704958107s ago: executing program 2 (id=202):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x30, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x1f}, {0x0, 0x8}, {0xffff, 0xb, 0xfffffffd}, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x400009, 0x6, 0xfffffffc, 0x17, 0x200, 0x1, 0x8})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
readlinkat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)
setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100007a982a08cd0ca310a22301020317090212"], 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x3, 0x3}, 0x20)
socket(0xa, 0x3, 0x87)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890b, &(0x7f0000000240))
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

1m56.508941137s ago: executing program 2 (id=221):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b70200000000000085000000860000001800000000040000000000000000000e"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1276c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
socket$netlink(0x10, 0x3, 0xf)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9})

1m41.434256188s ago: executing program 32 (id=221):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b70200000000000085000000860000001800000000040000000000000000000e"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1276c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
socket$netlink(0x10, 0x3, 0xf)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9})

15.71018936s ago: executing program 4 (id=672):
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1})
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x41, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001ecc9defa75d70fd3d32aceeeadcf"], 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0xe1}, 0x800}}, 0xb8}}, 0x2c000010)

9.54794727s ago: executing program 4 (id=694):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

9.325415049s ago: executing program 5 (id=695):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.813425151s ago: executing program 5 (id=698):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000380)={{r1}, "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"})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040))

8.315698976s ago: executing program 1 (id=700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xfd, 0x80ff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x78}, 0x1, 0x7}, 0x0)
fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

7.713507524s ago: executing program 1 (id=704):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

7.124324988s ago: executing program 5 (id=708):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r3, &(0x7f0000000640)=""/187, 0xbb)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.878534363s ago: executing program 4 (id=710):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000038c0)=ANY=[@ANYBLOB="200100002e00010025bd700000000000040019800c0111800801cf8004014680f5ef56146c911475a624325ce594de86923b901b9c31b5127825f1868b0eb9469c2df41906c1f5ee49ec215a783eb7c8d1a2b625a3c6f3c9c8006c80c1000f80e2db47a55498a462d2a7c49ad4189a60e75e3e9fa3c443a80291f79b123f4be0dd7aa1496588aedb6401be"], 0x120}], 0x1, 0x0, 0x0, 0x84}, 0x20000000)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040600030300010009210010010122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x149841)

4.637024752s ago: executing program 4 (id=716):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x94, 0xa0, 0x1, 0xfffffff8}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d000100"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

4.621554174s ago: executing program 1 (id=717):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4800)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

4.463297844s ago: executing program 4 (id=719):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x80009)
r2 = dup(r1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000001c0))
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000340)='6', 0x1, 0x20048800, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x8a, 0xa)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
connect$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000040)={{{0xc}}, 0x0, 0x6, 0x0})
close(r4)

4.114642742s ago: executing program 3 (id=722):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000, 0x7fffffffffffffff}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sync()
sync()
sync() (fail_nth: 1)
sync()

3.626058169s ago: executing program 1 (id=724):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x840}], 0x49249249249270b, 0x44800)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r4, &(0x7f0000000000)='-}\\$!#\x00', 0x1000, &(0x7f0000000080)={@align=0x755, {0x1, 0x1, 0x4, 0x1}}, 0xff, &(0x7f00000000c0), &(0x7f0000000100)=0x5})

3.625780108s ago: executing program 3 (id=725):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6tnl0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x0, 0x0, 0xffffffff}})

3.465445598s ago: executing program 5 (id=726):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141c82)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 1)

3.459853741s ago: executing program 1 (id=727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000038c0)=ANY=[@ANYBLOB="200100002e00010025bd700000000000040019800c0111800801cf8004014680f5ef56146c911475a624325ce594de86923b901b9c31b5127825f1868b0eb9469c2df41906c1f5ee49ec215a783eb7c8d1a2b625a3c6f3c9c8006c80c1000f80e2db47a55498a462d2a7c49ad4189a60e75e3e9fa3c443a80291f79b123f4be0dd7aa1496588aedb6401be"], 0x120}], 0x1, 0x0, 0x0, 0x84}, 0x20000000)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040600030300010009210010010122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220700000035325743c339099e96b7aa168b53f22e433c9e9e53eb0a7c10b111e2a3ec41008fdb8f5cee80de706e5e8a5c264e3e094b0a4200803084d9ff490152bbe1e8dab1df4afc145ce6e35f403f817842df62e9d9bc91a0dfdc0134f952512ddf0debd2931eaae8a985907618afb1df1826b6e2d1ea834973e0723557f97f9cd0e061abb5bfa73cb2d645d2dbeab6814f6af40cff8bdeb3c81b6aa719b47f3b54eb12822f3d25c557b657d89e620318798fb8760e17d2a58520db3ad142dd738bdccfd0f98f8c893fea98afe66794e46af81269394de8254b267b21d0e3501c90056f66ce9a0516a32898282f04ab136549555cb523c28d9233760fdcad44146ee5d9ebc0070d9bdd7ee72354f45c51e7bd91211df7615525e567024378ebec31fa721d3339a48a3530ce0b6571fe8af17cbd2eafcbd7405dec8444da24ae8b2f4f86edd02f2effcbe75dedd2fb7b6014c650c3d14eb062d33fe408b55c30c9bed9033c1ec2e64387d58f527c62267590"], 0x0}, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x149841)

3.38176119s ago: executing program 0 (id=728):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141c82)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

3.381442259s ago: executing program 3 (id=729):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x94, 0xa0, 0x1, 0xfffffff8}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d000100"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.100483567s ago: executing program 5 (id=730):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x2}, @typedef={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x770, [{0x1, 0x2}]}]}, {0x0, [0x4f]}}, &(0x7f0000001500)=""/4096, 0x4b, 0x1000, 0xa}, 0x28)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x28, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xbe, 0x0, &(0x7f0000000640)="e0b9547ed387141c854c20e95306e1470334ac46e44070cd2667812025b6dd2d1d075ff774e65631b160d9090815cbc76cc58aa22bc1157c4a56b2b5811f755dc0d1bfeba566a2950acc5fc2db13b076e6849086b1af09332e70cf5702e7479dcc09c0cb817964add09f5ae59370155b3ce46d89fcd1a7a68e9cf5070c1ad5faf258430d40412c04b1fe336506f3344d14278de116ffef467eb1352506e575d300000000000000057aeb479d529448f5a5f27451c232f4c1e57b299b7e9f", 0x0, 0xeb7c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)

3.08541187s ago: executing program 0 (id=731):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141c82)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000080)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/vlan/config\x00')
read$FUSE(r2, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x0, 0x6})
read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020)
r3 = io_uring_setup(0x11, &(0x7f0000000f40)={0x0, 0x7bff, 0x8000, 0x0, 0x359})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x21, r4})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000fc0)=[0xffffffffffffffff], 0x1)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_PEC(r5, 0x708, 0x2)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000200)={0x2, "90f5ae8b4ffd6190910a11805984d3c9f144d744c7bf982eb50900294657715900"}})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000006f00), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

2.993194713s ago: executing program 0 (id=732):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141c82)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)

2.990590738s ago: executing program 4 (id=733):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x5, 0x2800, 0x0, 0x0}, {0x8000, 0x9001, 0x0, 0x0}], 0x2})

2.677919326s ago: executing program 3 (id=734):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xa, 0x8100, 0x400, 0xabf8abd, 0x1, 0x54, 0xfffffffb, 0xffffffff}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20048094)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38)
setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x20000000, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000140001000000000000000000fe8000000000000000000000000000aaff0200000000000000000000000000010003000000000000000000", @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'ovf\x00', 0x37, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'})
getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @multicast2}, &(0x7f0000000340)=0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4)

2.653621931s ago: executing program 0 (id=735):
io_uring_enter(0xffffffffffffffff, 0x4866, 0xea86, 0xb, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

1.466808225s ago: executing program 5 (id=736):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x45, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r11, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0xc000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

1.334433166s ago: executing program 3 (id=737):
io_uring_enter(0xffffffffffffffff, 0x4866, 0xea86, 0xb, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1)

1.17461017s ago: executing program 0 (id=738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x80400, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r5)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0)

275.593808ms ago: executing program 3 (id=739):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x7, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x55eabe05, 0x4, 0x1c00, 0x3, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x200, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0xa, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0xe4e, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x3, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}})
socket(0x200000100000011, 0x803, 0x4) (async)
socket(0x200000100000011, 0x803, 0x4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)

79.54586ms ago: executing program 1 (id=740):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xebc3, 0x2)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)=""/216, 0xd8)
ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000200)={{[0x0, 0xf7c9, 0x80000001, 0xfffffffd]}, 0x0, 0x2, 0x7, 0x0, &(0x7f0000000140)=[{{@align=0x3, {0x6d, 0x9, 0x3, 0xffff}}, 0xffffff64, 0x0, '\x00'}, {{@align=0x9, {0x9, 0x8, 0x7, 0x8}}, 0x98f9, 0x0, '\x00'}, {{@_ha_fsid={[0x9, 0x2b6]}, {0x9, 0x0, 0x8, 0x1}}, 0x8, 0x0, '^(/\x01\x00'}, {{@_ha_fsid={[0x5]}, {0xfffe, 0x7, 0x1, 0x10001}}, 0x2, 0x0, '{[\x00'}]})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000280)=0x80000001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0xf9, 0x52, 0x400, 0x11, @remote, @mcast2, 0x7, 0x8000, 0xde9e, 0x3}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={<r5=>0x0, @dev, @initdev}, &(0x7f0000000440)=0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000480)={0x824, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "a79ed236a9cfe5ce8aca7e6f56936f784954d818b78a62286bef2e975fa59bc4646cd7e2e52dfb556c3953938f3c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "c8f075bf65bab6e0e4b6264e106010718f93231ee676a87db0c5ef1cbf92ab9da12a7bb7e0a052a3b4e5b1c9e605fb7a4711a964782507d71f01c5b6898182c34638b7799e86fb78"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '],${\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/sequencer\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\+:\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "ab520e6c56302da480def60a3a3a1b5bacc14721e275d4684df5ab7fabafd57e7b9a869673e96d339918f1f2890adc9ebad3496f4ddcf9aca6b9907dc203b6b5c2605c58bbd55071c646b035413ae8"}]}, @ETHTOOL_A_FEATURES_WANTED={0x19c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "93c3dce9e85ad0e29ecdf0ebc3a8beaf8bd9ff2096072d08d44b66f63b97274d38b6bd219fd9b1"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ':#{&\'@.\\.]]-{@\xbf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[#\x0e@!.@!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78bb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']{)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x120a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19ed}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xcc\\+:\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/sequencer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^(/\x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')${\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "609faa64e046cf1af8e18798f8a88e0f570b3e34aa255dae1327afd570589983c2af9989500d68a23476b4a5bafecec04d07807aa9edcd2a0c349364db1d5ff41e9a87e30461c49970ed7bb1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "5f780eb9cafaedda7f34464f4186c0cab1639c3a21c43f7ceceef4bf0b99a3fb3a8ff5d47ca35c6efe66ccde1002106726f7531a75b5704cdd02772354f053a5da9e089b5e1eddca2107f3f827bafd66cda8845db301944b278823f4f577b091281e1c9252767513f86b57bb8c1860fe0d2b6fc0ed3ef9e941bd6b3d93a9cc01796877fe7faa79fcd808f7dcda8590c8153de71bab8b7086314b663010569312702eb72650a01c5a298d012fb05fbbdf7679b94d7708dadf869353821193998955f94ffbfec46d18b34a1cdff43e28aee9538038a727676be7a5ad228b21b873a2"}]}, @ETHTOOL_A_FEATURES_WANTED={0x18c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "e4f19c8a3a6ad8375d327326217b3b3b17c2325de88947d26aae748cca0c7de962d53c3a4a7c6684e6be85025b3526d3988779c082040a13fa345655af76be2efb09e220620fa3199847fa16510b0cb559f84393edef88c85ed0b1a2a52727b2cc05212633b672f74dfe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa949}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "c44c0d26"}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "aacd65b5993c250432e97e1845abab6f11a76f3666469e04b603d56334f942ce16619b0fe4224e5746acc1d63abd5d4c5c25d20dcb9fd943a20ff0b6bb097054f5549d44018083dc45cd29b9314f27e82f41893faabf99a2fff1d397a870d74a945e6cd298ee3b4a7a8ff60ecf113e529747c2edf0c0a07d16775f4174d618d47376c828edc2ea6c669f40ccd9e9ebda153d18a3018e1e0203d334c05042b5f3c77c7c8f0c239ff2bb5359ba6ec0fdfa16f0d4f4262837d1eacb8d97563a0e8a8485bde8018162e40922091969d63efc96871efa0b93863f87bebaae920be5411e202a1a"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x284, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "2770c22497a3f1e242ec8e806ba2ff89875cdf83444816280af329090f974a69747f78da062942506e67bf3d0766e1a90f276758f228fc389786a147e3288de647cb1257faecdb97d2e68ab73e7b97a91d808228eb7d05e0929aa09822d84e491308e5ce71f63326551586d6e54f256d43d23374210b07ad26cef253e405d0fbc316e482164feb9b16fffbac4f63a4278d45f383882172851567ce4aa63b04eec640e9a8c06ebbd1af92826957137d33be183b5f0dcde4f4"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{+%^!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\\-*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'!)\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\',-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*&).-##$\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']^:@({\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/sequencer\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf7aa}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6cdd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.%%%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{#-[^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/sequencer\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^(/\x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x824}, 0x1, 0x0, 0x0, 0x4000041}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x14}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x840)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r7, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8011)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
ioctl$SNAPSHOT_FREE(r8, 0x3305)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001040)={<r10=>0x0, 0x22, "b5e02bc07eb9b52dde531bf754ee02203b53349c13cc56a6eadcd6624ba3855d0976"}, &(0x7f0000001080)=0x2a)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000010c0)={r10, 0xcb659e29}, 0x8)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001100)={<r11=>0x0, 0x100000001, 0x10000})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001500)={r11, "9e1a80501f89b03572b3f3767c6153ed"})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002500)={{0x1, 0x1, 0x18, <r12=>r1, {0x3, 0x5}}, './file0\x00'})
accept$phonet_pipe(r12, &(0x7f0000002540), &(0x7f0000002580)=0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0xc0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x54, r7, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008}, 0x1)
getpeername(r6, &(0x7f0000002800)=@ax25={{0x3, @rose}, [@default, @null, @null, @rose, @bcast, @netrom, @bcast, @netrom]}, &(0x7f0000002880)=0x80)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000028c0))

0s ago: executing program 0 (id=741):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000380)={{r1}, "92afa511c64f2a0b3bd7c9d4ee4264a15f1342c308eec7929f52509e8beddb936f843352481e70cda020f451e680c3a89c0b7e056887d4ba3ba1cfdfd639b8eb3de1e518a86bdcdda8f2b6f9cb9bd4f6e011304f7d562fa09a58a90a319798c59d906ed1935ebacc0027cd7a35a8b9ff74affb618f32ddad3a07db64b1f4585de9dc1a84b36e26c573dd239c75bfec368cfd823a0c3f115dc6ee829dc7ce4b091436afaf21929d000553457ba261d64a48c338d80317f34eaae9fb0a091937837fcf4c38a9b3d9a81d2e46d4c77d6d2a25aebfc982b88b9d11d7470372539b888bafe2e013695672bbed79a836c002d62b2869401b3cd37d8aa92a40253ef4f1bca924f2483263b2e507c047ed79fdba4dca1c3c82a1274e6c96761f98e1a750f4f1ed9e23e3f96309c1d0c2aea268f37cfed4d4eb7840c4ec47c9166ccf31ff717a6944307f01aef4234f652fed9b7ff827a2375267f565abfbf39d556c6d1f2a360a36c86e27c6979fefe35880f97c07c048ca81bfd909656699208ae873f0b298a0868b4120558c694283d1c34e1a2d06cc47859142dc48897752f348c23c2f3bda5a17c1495f3e7ca92a967f377d4c9572e6ae2e3cd6817ba8a8ad60bb2fd385e90d9c78940ad01921b17aad022495b5f1e5356005e96ba75d1da844e2434d2704e9c4d308ebd1fdf14a20bdb421aef76a19ec7c20fdeac655930c48ab7dec8cc05160c48190995f38e3cc344385a22c8741562e3ee72bb48054d2059f93a6bbc4411dd7a1974f58adc7c3a970e8218745e774ed44eba9629d7620394470a5953751ed1e96bd715445562573659159da04ffe4772690d2574b3a6176b42e2f9d3868867d73313c75d0e2dfba0dcd326df913259001c718e83e7ad1341469013a1291e8f28d7a2a59b87fa14d9010fc309e090d60fb5bf75c4918bd8aae8cfc131e75b3626feacffe8342eec83fa24d608b58b04762e4b7e887dac12e44d40dba66064468fa3dfe4ff6dd5166602fdfcfe7793f7a25cf12ac7dd2a5d30bec01af39a5535b2678c78f44d3dd947b6f40d0621029d631ceda539ab9186bc7c8585ea78cac897d26513041f8f5e392f4402465c36954132b7a956a41fd03b7c354ef6431f430d75b15728848d13f30c542668546faa875b36e975b201a5e31fc9704685951cb5fffd9220ad43722106f990ed6528dc09b20679b956b951a64223a7dcd4d32482a0c98929f39b45f3102f84cdabb0aaecbdfc7b39568c3870a01be200b1df61ef30b89e8aaec1c3a279167d50efe0928b679c2f470254ed24c028a6675ce880f0eef7f47c27806590aa6b39e4b71dca9c71ae6c29bd8ae5ce76ad8589753c7d80df983a6ccdf5bbbab4b955684e7c61d7260a4986f81c5c55713c77f5573ba60d0b238542f4f96f4ee39f2cdf6be3796386e023ee1381c9fd0abaa1b2a7ad173356f4b837e313850e8135dcb4455bae960fea2f9d9ee59b013667a2a32023cfd5fe3449b46e5ef00274c7846d49a91f91942037290318cb4827ded464f4a1a029346b160e17bddce80e0f4011d54d671c84ac52fb6171de2a0fcfc596036170e5135809f7f619fd89f064ec2be247b702f56c119e7713e54f2d8bdbd8df792ac451a37747a5812336f2c880408800a3a0a9c6d275fca2661aacd279f27fb1ca0e527ce074a9698b464a6dd8e655a46aea0e047ca8123efba873944ec07d2ef50da048fb6a47b93bc291ad7d26bbce3c89f26e2c1219d147024ac86a8e76dd953989cba5c1711ce56d55443668863d3b6bcc70f826dedd94481ea4c1142aa20a681076c8581d0005b411e0c3573dbc13457ed57d25d3f5f7d25f6cec3d188beb5265e4d98d72a55b9dff23561a3717c62cc718fc26eecb8faec29fbb1eb28f5b772e1d148466ec50823c34e505679204bd16e9a4b19fae6a596d83e9b8ec9dd53981a7a0727abfbafd6e121621cc98b2b3acbcaeae17c64579cf4f6b3f3b35452cc44c84a61b9b06f19343e4303879f085fb4b1939594b643300630f05d594b6a3ae3be78fb97ed36d143dbfdf1b4bcb8c04cc36373e0b0fdd69e23aadc97a270bb3873e604358321bc7f851fa71180ba2fa1b7241f67029dbde73be3f061dbd7d4290f8cae3dd73b018c8294a6f19590cd5a902a8166e41b595fbab9341172e2a63b0ed1fb7446e4eb358997831f53e8c167ca085e302ce8c51a77a3893ab4cf2edb9423b2b9fa0bc8ba4d52ab97a63015caf6bd199df0adcda7728ad55dd24c1505c6bf1104e1a633def6f27023bf2d25741fb380620d96b3cede78ca28ed56bb1df1187d514bcfb8f4a382f048b23e513a1453f5805b0e16500b536459c6ea0f7f6710cfd17c8ca4143acb4d85ad6e95d0b7597bee6d33ec077b8e8d1e8a334e1014930f7363372424084e4533cb14b4ff12749019798d33ce9c3b3409c30ded40ec42c413b94f042561e2ce5808d2c67c525a58428975f97a3c13163abdc6d46716327d329b71ca46eb4364fa9ce57341506f57d59f8209292ba990c3917bb89c61dbc11a1b48c136ee20137abf12c3ed068ff5ea2fce1d2f219069726f2dec511e6e83f1ec55039dede2606c0353f5109cb5c1c7291fb74f6335bf85eb3ecdcf270ecfe8f4c501110dfbeda9148e14248734adea49629180f0399c90c9413592f9a08381bd4fb5bf0351548c5c444412f04f58dcce70c586b8750baffdd99c9fd2eb7e4b3a3a014bb2aec5e1bb935c9e41d6fd87cc68b5a0c626f4433d1f4f6718fdc740f691f63b58d207ad695ca1e85c2e8df618fa0f62c096172386632f2f07391f8cc9506e5530b905c035fed9b82acebe296a5544fad9549623abd5178fc6b31409b1a3aa37bd409bb6431d7b86faabc73376cc78fa37499cb064d6c832ba4c06440c70c6e5261d5d4c7b52c87bffd5bb7217f2e7e5e0cab8b6eb7b4b36d40ac5780ceb4da34ec9a2ea2d9fcfa4763ed6858fa93c3f81dd443b43d77d059d4bf399022bab39e309275515b9995efaa875b4044d24bcca420c5f8bbaca23f682a8f4cf34971a187459ef798ba9ff9a57d0b06a836a2c638c8b085c8b1fd836a30852e8972b13d9630db2e012a4935dec896ef807e174d5880c982ed199235e52dade2eff47ac923649b37063946f1a9860d5d6a95fd4b322faf404247a9201d97fd8c5d1eeb2e5b0dfca61d89d4383fcb97b9adfa17aa99413cbaa447d40c9f9a03ab50f6a7ec527da449140a5cee841a2813c9eaa26c54b5e26ea912e8f19091f2a6b9af181487c7d68c519d6dba74b6580d2403e62215b27215a6992b5bec4e874c21b1748c8ae22c188b1f79d912d4d4eee06668ab7650460b10207e6d6f37072f759ef2882e5d7e121b719cd74f421921c0c54d7e274cdb8d1ce55fb3abbc391fcc68312dddebdcc724fa8d0b2ec6dd8c2ec64b9ab82e7c91d65dcc76e1d49bd056e20570fc3f98e5c529bbc8ef86a31729fe68e4899e9f8f1aee2cba22cd47d33fa18ef6fc331202742f520570b3d2441bf8037e52fc713f4a5f58d109e1a1d248b68632508af573948376be159b64e498b57a728f160dda4fe77702f0248f4b59c2a54286f75ce5f06e2bf17c6816ca36aaf31a5b96a1763e1a8bdccaf81981232d902f8cdf9c8828b7a8bbda70037257afcb118609f03cbf448dd14c7d72ed041956e1c261b5c203322bc837ded53ca0616f19d5ed1cd969f41bd51a536fff1983d24cb521c477d2c8802929d27e63e6f5326711f953cb8eaead31a7a392d02e2f17bf440c1480a994a55d0f62dda83e4ab63dd9594a847bd857ddb786579c31090b2834d6c1469ed0a520545a3d86642ada13454ff3d66d957380881926d5c1ed9ca986fefffb28a0cdc7418e0d9cb58b6e2317c22bddaf165eca300ff0c58d8da98ac3f1f409e9da590e5e14e84a18fb8cbf0b1100be258206e0eeaac9fe6749e310a35a340f04891d55cb87040fb971000dc3507a49ff82a4112f2a5af6cea174167ef6dda7bf850c3562c84584272078d25f2c2fdedfc1e7c653d80c508142de162f82b01dc6938cbdace42720e72bb3e032ff2c6a09e74ebb624b8a3623484db1878a2630e3c6e29fff327729e9cbe036f2a7806d9acbca20cb1c892802ff19ca3ee875a568ec5911f7ffa0b6d414512d61c621bb29d4e0819b96af0f69b2c731200561d5a3e5a17aa29c653802a9a471887ae1d1670d4e14676b79a31566a30860c3520f47fa7cb2d2913ae79b1f5bc3e6528c0cd0785479837a9dd9f4e6a93c1ef48950c83c118d811d8c2f9bc92851a93083ca67b6513ae2e9e54f2c1e6c78fe9406d5d7d15ae67791b1e3ecc03e7cbf42e95efd21334013136a43b13877fc30d552ee69519814c4f16e66fec22fc712f02628070856061714aa9e3abd52c96d449fb45246800d51c8cca5160bb55d2c2d5cfff54d967ce22c2f80e38c6e4ad79fe51cd835d8bb237905b0e12652a95828f0644b6fa3bd9808b3aa5789fb7d169f2fb9254377a4a0ce9ed0c7de109fd42f2534e9e6cda59f6aecb4c03af6138f278824ed459d286070c35f60c8ccad2e4cdedbd9bfcacbde028b8ecbd4f669a34cf2c4a9f72677f6d5cf60a857ddc4f1c49ed0bdf53c145665716906b2ceafdffae3359175c563dc6122cc14ab248295597905292009d903d8a9cd28a6f15d387a8712ab1ce6b5851070496a0621b1b8e26a646b4b61d30f9e6783d18979c56baf3e01ffcaf874ce20a01fdf2f6b8fce6ca301f4c82bd824c5c6ebf4985ce3b9070a10025016b41b0f5eb389c77c5dea7e02c54669276ea82bb723fef91c68a7603c517912936203e63be8f1e38a219b51d9e4af7c46f7d57e7fc452554cd19025d0afe957951675dd9ceacac05c4a99366dff8b1d09cb8cad1f1013a5f43012843cfbc876a47a99b68bc3d0841b3912bb91821c2c010f63eab6f6a7be8a4427547dc292bc5fb9fe452c755abc1bf90133ba8d806417f184700dd26fb2220cbd7769f7cd07172404071c557d67d0306601a60d0a81f760fa8b608c7eebec4488073f2ceadaaaac657910ac76dd1879d81a5bee1fe9214e110eb395b01d0e92851af1b25ee7fe34743a7602933d5d5017e7ac0e7a54348bef5bfa94f6885b7a7447bd7b4e1645ace5b0f552b51cf9f6244cc171c6539af99df05e8ad1f6306af1e143daa6915f9f006a1fa3f42d75dbab90bf2982bc52b6857e39ed2179efbaf6fe40334647911bf933e56e86822c5fd1b65de7b84f6dbc2b207bd7982d99c99f38fac0460b1a5b844942351bd8f3205d7f8432396ee396a6c9476f403ecef2c907c869b7e4e7247879ab982cfa57d26d27c8c9323669e7c2b1ff83ff4629328820ecefc10818b8b01350d5a07052063be2bc53ee9abca68ef0bbec80738b6f67fe369352a7ba57d1cddac1553b991a8166d308ecb59678bef0f7dc816d36cbc6cadef5d546511823e06f5bfd8de2005713fbafb78afc5499e5a38cb551ed2d5afb1d4d744fb800ed12181f402b0af0d3fd4cd69b47ff49859f8e2e09b66a2260ab5f7c8ebd19100a1e49c880f3b7f94d5c55bf2608645f3d77fde12d6de2d17ad992bee47b2120d7258e090c8d09ae17aa0044fb621fc5e1b02fda06e365e556ebd65047cef378cb79d3f59f047b7437a1fe31397d79c2774b6d413e3831aa8089c10d44dcc0f77cd2a24952da605a5492ec77d60eecbc92f83dfded69dbe8084dd7b220d74cefc55f9cba445b90c268f62067fccac39565df33747b94a0749a78de74ca93154"})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})

kernel console output (not intermixed with test programs):

 4 using dummy_hcd
[  136.353246][   T36] usb 1-1: device descriptor read/64, error -71
[  136.656620][   T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  136.785456][   T36] usb 1-1: device descriptor read/64, error -71
[  136.896006][   T36] usb usb1-port1: attempt power cycle
[  137.245625][   T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  137.273756][   T36] usb 1-1: device descriptor read/8, error -71
[  137.515513][   T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  137.536743][   T36] usb 1-1: device descriptor read/8, error -71
[  137.781164][   T36] usb usb1-port1: unable to enumerate USB device
[  137.972664][ T6249] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  139.837452][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[  139.980970][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[  140.435639][   T36] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  140.601766][   T36] usb 5-1: Using ep0 maxpacket: 32
[  140.604873][   T36] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  140.604893][   T36] usb 5-1: config 0 has no interface number 0
[  140.604923][   T36] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.604942][   T36] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.604958][   T36] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  140.604988][   T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  140.605005][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.710143][   T36] usb 5-1: config 0 descriptor??
[  140.725845][ T6272] syz.1.100 (6272) used greatest stack depth: 17336 bytes left
[  141.221876][   T36] logitech-djreceiver 0003:046D:C537.0005: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  141.378575][   T36] usb 5-1: USB disconnect, device number 6
[  141.579308][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  141.960616][ T6287] ªªªªªª: renamed from vlan0 (while UP)
[  142.601359][   T36] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  142.749940][   T36] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  142.749969][   T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.749988][   T36] usb 5-1: config 0 has no interface number 0
[  142.750018][   T36] usb 5-1: config 0 interface 153 has no altsetting 0
[  142.793486][   T36] usb 5-1: string descriptor 0 read error: -22
[  142.793618][   T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  142.793642][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.842576][   T36] usb 5-1: config 0 descriptor??
[  142.854105][   T36] uvcvideo 5-1:0.153: probe with driver uvcvideo failed with error -22
[  143.477133][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[  143.500242][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[  143.569458][ T6010] usb 5-1: USB disconnect, device number 7
[  148.096755][   T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  148.845565][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'.
[  148.918709][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'.
[  149.015440][ T6010] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  149.168082][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  149.170796][ T6010] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  149.170821][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.170839][ T6010] usb 3-1: Product: syz
[  149.170851][ T6010] usb 3-1: Manufacturer: syz
[  149.170864][ T6010] usb 3-1: SerialNumber: syz
[  149.250358][ T6010] usb 3-1: config 0 descriptor??
[  149.351709][ T6010] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  149.505971][ T6010] usb 3-1: USB disconnect, device number 3
[  149.508326][ T1519] usb 3-1: Failed to submit usb control message: -71
[  149.508363][ T1519] usb 3-1: unable to send the bmi data to the device: -71
[  149.508383][ T1519] usb 3-1: unable to get target info from device
[  149.508399][ T1519] usb 3-1: could not get target info (-71)
[  149.508470][ T1519] usb 3-1: could not probe fw (-71)
[  149.946307][ T6352] 9pnet_fd: Insufficient options for proto=fd
[  150.237661][ T6358] 9pnet_virtio: no channels available for device syz
[  151.642907][ T6379] overlayfs: missing 'lowerdir'
[  152.091403][ T6010] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  152.248558][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  152.251064][ T6010] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  152.251084][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.251098][ T6010] usb 2-1: Product: syz
[  152.251108][ T6010] usb 2-1: Manufacturer: syz
[  152.251118][ T6010] usb 2-1: SerialNumber: syz
[  152.288134][ T6010] usb 2-1: config 0 descriptor??
[  152.324403][ T6010] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  152.531524][ T1442] usb 2-1: Failed to submit usb control message: -71
[  152.531562][ T1442] usb 2-1: unable to send the bmi data to the device: -71
[  152.531580][ T1442] usb 2-1: unable to get target info from device
[  152.531596][ T1442] usb 2-1: could not get target info (-71)
[  152.531728][ T1442] usb 2-1: could not probe fw (-71)
[  152.533658][ T5953] usb 2-1: USB disconnect, device number 2
[  153.009300][ T6399] hfsplus: unable to find HFS+ superblock
[  153.393384][ T6405] 9pnet_fd: Insufficient options for proto=fd
[  157.527248][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'.
[  157.735083][ T6437] hfsplus: unable to find HFS+ superblock
[  159.276536][ T6452] 9p: Bad value for 'rfdno'
[  160.213709][ T6462] 9pnet_virtio: no channels available for device syz
[  167.044915][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'.
[  167.505802][ T6503] overlayfs: missing 'lowerdir'
[  167.745462][ T6010] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  168.776862][ T6010] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  168.776895][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.776916][ T6010] usb 4-1: Product: syz
[  168.776932][ T6010] usb 4-1: Manufacturer: syz
[  168.776947][ T6010] usb 4-1: SerialNumber: syz
[  168.827716][ T6010] usb 4-1: config 0 descriptor??
[  168.851383][ T6010] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  168.874846][ T6010] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  168.879740][ T6010] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  168.879945][ T6010] usb 4-1: media controller created
[  168.925497][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  168.965161][ T6010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  168.975551][   T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  169.099670][   T10] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  169.099698][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.099711][   T10] usb 3-1: Product: syz
[  169.099721][   T10] usb 3-1: Manufacturer: syz
[  169.099731][   T10] usb 3-1: SerialNumber: syz
[  169.103379][   T10] usb 3-1: config 0 descriptor??
[  169.149071][   T36] usb 2-1: device descriptor read/64, error -71
[  169.164488][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  169.186479][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  169.191660][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  169.191724][   T10] usb 3-1: media controller created
[  169.279514][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.341656][ T6010] DVB: Unable to find symbol mt352_attach()
[  169.385436][   T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  169.472996][ T6010] DVB: Unable to find symbol nxt6000_attach()
[  169.473053][ T6010] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  169.509494][   T10] DVB: Unable to find symbol mt352_attach()
[  169.521449][   T36] usb 2-1: device descriptor read/64, error -71
[  169.537374][ T6010] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  169.567265][ T6010] dvb-usb: schedule remote query interval to 1000 msecs.
[  169.567281][ T6010] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  169.567294][ T6010] dvb-usb: bulk message failed: -22 (7/0)
[  169.567306][ T6010] dvb-usb: bulk message failed: -22 (7/0)
[  169.618314][ T6010] usb 4-1: USB disconnect, device number 6
[  169.628598][   T36] usb usb2-port1: attempt power cycle
[  169.818104][   T10] DVB: Unable to find symbol nxt6000_attach()
[  169.818120][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  169.977114][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  169.992467][   T36] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.026197][   T36] usb 2-1: device descriptor read/8, error -71
[  170.029759][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  170.029775][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  170.029787][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  170.029799][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  170.108443][   T10] usb 3-1: USB disconnect, device number 4
[  170.316916][ T6010] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  170.449895][ T6522] ªªªªªª: renamed from vlan0 (while UP)
[  170.570819][   T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  170.597096][   T36] usb 2-1: device descriptor read/8, error -71
[  171.071722][   T36] usb usb2-port1: unable to enumerate USB device
[  171.747987][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  172.345479][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  172.649126][   T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  172.649160][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.649182][   T10] usb 5-1: Product: syz
[  172.649197][   T10] usb 5-1: Manufacturer: syz
[  172.649213][   T10] usb 5-1: SerialNumber: syz
[  173.629150][   T10] usb 5-1: config 0 descriptor??
[  176.077193][   T10] usb 5-1: can't set config #0, error -71
[  176.091855][   T10] usb 5-1: USB disconnect, device number 9
[  176.697717][ T6568] hfsplus: unable to find HFS+ superblock
[  176.778440][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[  177.225452][ T5889] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  177.664553][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  177.667980][ T5889] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  177.668007][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.668035][ T5889] usb 3-1: config 0 has no interface number 0
[  177.668067][ T5889] usb 3-1: config 0 interface 153 has no altsetting 0
[  178.525857][ T5889] usb 3-1: string descriptor 0 read error: -22
[  178.526000][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  178.526027][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.533061][ T5889] usb 3-1: config 0 descriptor??
[  178.590360][ T5889] uvcvideo 3-1:0.153: probe with driver uvcvideo failed with error -22
[  178.655377][   T10] usb 1-1: Using ep0 maxpacket: 32
[  178.657730][   T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  178.657756][   T10] usb 1-1: config 0 has no interface number 0
[  178.657800][   T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.657828][   T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.657851][   T10] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  178.657894][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  178.657917][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.665089][   T10] usb 1-1: config 0 descriptor??
[  178.828703][ T5953] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  178.955442][ T5953] usb 2-1: device descriptor read/64, error -71
[  179.131295][   T10] logitech-djreceiver 0003:046D:C537.0006: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.0-1/input6
[  179.134107][ T1237] usb 3-1: USB disconnect, device number 5
[  179.208365][ T5953] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  179.288324][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'.
[  179.315483][ T5889] usb 1-1: USB disconnect, device number 8
[  179.335415][ T5953] usb 2-1: device descriptor read/64, error -71
[  179.362160][ T6615] fido_id[6615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  179.445739][ T5953] usb usb2-port1: attempt power cycle
[  179.786898][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  179.817110][ T5953] usb 2-1: device descriptor read/8, error -71
[  180.126009][ T5953] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  180.163792][ T5953] usb 2-1: device descriptor read/8, error -71
[  180.321937][ T5953] usb usb2-port1: unable to enumerate USB device
[  181.315449][  T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  181.398872][ T6647] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.208'.
[  181.615529][  T809] usb 3-1: device descriptor read/64, error -71
[  181.856097][  T809] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  181.985435][  T809] usb 3-1: device descriptor read/64, error -71
[  182.097008][  T809] usb usb3-port1: attempt power cycle
[  182.135508][ T5953] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  182.396628][ T5953] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  182.396661][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.396684][ T5953] usb 5-1: Product: syz
[  182.396701][ T5953] usb 5-1: Manufacturer: syz
[  182.396716][ T5953] usb 5-1: SerialNumber: syz
[  182.435742][  T809] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  182.464428][  T809] usb 3-1: device descriptor read/8, error -71
[  182.475489][ T5953] usb 5-1: config 0 descriptor??
[  182.515046][ T5953] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  182.568291][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.570051][ T5953] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  182.570123][ T5953] usb 5-1: media controller created
[  182.614783][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.696624][  T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  182.771321][  T809] usb 3-1: device descriptor read/8, error -71
[  182.886299][  T809] usb usb3-port1: unable to enumerate USB device
[  183.091258][ T5953] DVB: Unable to find symbol mt352_attach()
[  183.325072][ T5953] DVB: Unable to find symbol nxt6000_attach()
[  183.325087][ T5953] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  183.325530][  T809] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  183.351844][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  183.399765][ T5953] dvb-usb: schedule remote query interval to 1000 msecs.
[  183.399789][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  183.399806][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  183.399823][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  183.447952][ T5953] usb 5-1: USB disconnect, device number 10
[  183.516775][  T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  183.519054][  T809] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  183.519079][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.519092][  T809] usb 2-1: Product: syz
[  183.519102][  T809] usb 2-1: Manufacturer: syz
[  183.519111][  T809] usb 2-1: SerialNumber: syz
[  183.601406][  T809] usb 2-1: config 0 descriptor??
[  183.715471][  T809] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  183.839684][  T993] usb 2-1: USB disconnect, device number 11
[  183.865177][   T12] usb 2-1: Failed to submit usb control message: -71
[  183.865216][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  183.865235][   T12] usb 2-1: unable to get target info from device
[  183.865251][   T12] usb 2-1: could not get target info (-71)
[  183.867093][   T12] usb 2-1: could not probe fw (-71)
[  184.137932][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  185.031483][ T6712] hfsplus: unable to find HFS+ superblock
[  185.156918][ T6717] 9pnet_virtio: no channels available for device syz
[  189.277231][ T6736] netlink: 'syz.1.240': attribute type 72 has an invalid length.
[  189.630666][ T6744] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.245'.
[  195.295203][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  195.295269][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  195.355560][   T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  195.565447][   T31] usb 5-1: Using ep0 maxpacket: 32
[  195.569356][   T31] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  195.569383][   T31] usb 5-1: config 0 has no interface number 0
[  195.569428][   T31] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.569455][   T31] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.569479][   T31] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  195.569523][   T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  195.569547][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.698411][   T31] usb 5-1: config 0 descriptor??
[  195.712333][ T5793] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  195.855507][ T5793] usb 2-1: device descriptor read/64, error -71
[  196.127833][ T5793] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  196.181897][   T31] logitech-djreceiver 0003:046D:C537.0007: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  196.277078][ T5793] usb 2-1: device descriptor read/64, error -71
[  196.329670][ T1237] usb 5-1: USB disconnect, device number 11
[  196.385874][ T5793] usb usb2-port1: attempt power cycle
[  196.469537][ T6777] fido_id[6777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  196.795528][ T5793] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  196.819973][ T5793] usb 2-1: device descriptor read/8, error -71
[  197.439835][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'.
[  197.472728][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'.
[  197.846077][ T6811] 9pnet_fd: Insufficient options for proto=fd
[  206.711888][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.714130][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.716810][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.718007][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.718763][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  208.244395][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.278'.
[  208.386656][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'.
[  209.225563][   T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  209.397857][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  209.425756][   T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  209.425779][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.425794][   T10] usb 5-1: Product: syz
[  209.425804][   T10] usb 5-1: Manufacturer: syz
[  209.425815][   T10] usb 5-1: SerialNumber: syz
[  209.517580][   T10] usb 5-1: config 0 descriptor??
[  209.688046][   T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  209.826909][ T1519] usb 5-1: Failed to submit usb control message: -71
[  209.826948][ T1519] usb 5-1: unable to send the bmi data to the device: -71
[  209.826968][ T1519] usb 5-1: unable to get target info from device
[  209.826983][ T1519] usb 5-1: could not get target info (-71)
[  209.827001][ T1519] usb 5-1: could not probe fw (-71)
[  209.828491][   T10] usb 5-1: USB disconnect, device number 12
[  209.999538][ T6831] chnl_net:caif_netlink_parms(): no params data found
[  210.095571][ T5118] Bluetooth: hci5: command tx timeout
[  210.863513][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.885483][ T6890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  210.885511][ T6890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  210.887590][ T6890] vhci_hcd vhci_hcd.0: Device attached
[  210.923545][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.923738][ T6831] bridge_slave_0: entered allmulticast mode
[  210.983101][ T6831] bridge_slave_0: entered promiscuous mode
[  211.132592][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.132695][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.132886][ T6831] bridge_slave_1: entered allmulticast mode
[  211.183188][ T6831] bridge_slave_1: entered promiscuous mode
[  211.184948][ T6891] vhci_hcd: connection closed
[  211.211393][   T13] vhci_hcd vhci_hcd.1: stop threads
[  211.211423][   T13] vhci_hcd vhci_hcd.1: release socket
[  211.211464][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  212.535426][ T5118] Bluetooth: hci5: command tx timeout
[  212.762046][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.821463][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.886551][ T6908] 9pnet_fd: Insufficient options for proto=fd
[  212.934757][ T6906] hfsplus: unable to find HFS+ superblock
[  213.155403][ T6831] team0: Port device team_slave_0 added
[  213.215700][ T6831] team0: Port device team_slave_1 added
[  213.426563][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.426582][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.426610][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.463408][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.463452][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.463528][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.866996][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'.
[  213.957569][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[  214.065502][ T5793] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  214.225660][ T5793] usb 5-1: Using ep0 maxpacket: 32
[  214.229190][ T5793] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  214.229226][ T5793] usb 5-1: config 0 has no interface number 0
[  214.229266][ T5793] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.229285][ T5793] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.229301][ T5793] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  214.229349][ T5793] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  214.229366][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.232193][ T6831] hsr_slave_0: entered promiscuous mode
[  214.234246][ T5793] usb 5-1: config 0 descriptor??
[  214.345950][ T6831] hsr_slave_1: entered promiscuous mode
[  214.346999][ T6831] debugfs: 'hsr0' already exists in 'hsr'
[  214.347024][ T6831] Cannot create hsr debugfs directory
[  214.575848][ T5118] Bluetooth: hci5: command tx timeout
[  214.645427][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  214.798848][ T5793] logitech-djreceiver 0003:046D:C537.0008: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  214.829650][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.829685][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.829709][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  214.829753][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  214.829778][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.914391][   T10] usb 1-1: config 0 descriptor??
[  214.995533][  T993] usb 5-1: USB disconnect, device number 13
[  215.276549][ T6941] fido_id[6941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  215.422163][   T10] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  215.622353][ T6950] FAULT_INJECTION: forcing a failure.
[  215.622353][ T6950] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  215.622407][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.3.311 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  215.622429][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.622448][ T6950] Call Trace:
[  215.622460][ T6950]  <TASK>
[  215.622469][ T6950]  dump_stack_lvl+0xe8/0x150
[  215.622513][ T6950]  should_fail_ex+0x46b/0x600
[  215.622552][ T6950]  _copy_from_user+0x2d/0xb0
[  215.622577][ T6950]  ___sys_sendmsg+0x1c6/0x360
[  215.622612][ T6950]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.622707][ T6950]  ? __fget_files+0x2a/0x420
[  215.622731][ T6950]  ? __fget_files+0x3a6/0x420
[  215.622764][ T6950]  __x64_sys_sendmsg+0x1c3/0x2a0
[  215.622794][ T6950]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.622830][ T6950]  ? __pfx_ksys_write+0x10/0x10
[  215.622869][ T6950]  do_syscall_64+0x14d/0xf80
[  215.622896][ T6950]  ? trace_irq_disable+0x3b/0x150
[  215.622920][ T6950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.622941][ T6950]  ? clear_bhb_loop+0x40/0x90
[  215.622967][ T6950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.622988][ T6950] RIP: 0033:0x7f60548ec629
[  215.623012][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.623029][ T6950] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.623055][ T6950] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  215.623070][ T6950] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  215.623083][ T6950] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  215.623095][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.623107][ T6950] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  215.623143][ T6950]  </TASK>
[  216.655454][ T5118] Bluetooth: hci5: command tx timeout
[  216.980527][ T5118] Bluetooth: hci0: command 0x0406 tx timeout
[  216.980553][ T5808] Bluetooth: hci1: command 0x0406 tx timeout
[  216.980570][ T5118] Bluetooth: hci2: command 0x0406 tx timeout
[  216.980583][ T5808] Bluetooth: hci3: command 0x0406 tx timeout
[  217.056620][ T6969] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  217.056642][ T6969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  217.075570][ T6969] vhci_hcd vhci_hcd.0: Device attached
[  217.277020][ T6970] vhci_hcd: connection closed
[  217.292300][ T4233] vhci_hcd vhci_hcd.1: stop threads
[  217.292326][ T4233] vhci_hcd vhci_hcd.1: release socket
[  217.294229][ T4233] vhci_hcd vhci_hcd.1: disconnect device
[  217.389769][ T1445] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.624829][ T5793] usb 1-1: USB disconnect, device number 9
[  218.033962][ T1445] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.255567][ T6989] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  218.255596][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  218.255711][ T6989] vhci_hcd vhci_hcd.0: Device attached
[  218.539901][ T6990] vhci_hcd: connection closed
[  218.556265][ T4233] vhci_hcd vhci_hcd.4: stop threads
[  218.556292][ T4233] vhci_hcd vhci_hcd.4: release socket
[  218.556373][ T4233] vhci_hcd vhci_hcd.4: disconnect device
[  218.688216][ T1445] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.007383][ T1445] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.447968][ T6831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  219.679824][ T6831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  219.843369][ T6831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  219.897754][ T6831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  220.661626][ T1445] bridge_slave_1: left allmulticast mode
[  220.661797][ T1445] bridge_slave_1: left promiscuous mode
[  220.680226][ T1445] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.850014][ T1445] bridge_slave_0: left allmulticast mode
[  220.850044][ T1445] bridge_slave_0: left promiscuous mode
[  220.850272][ T1445] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.741058][ T1445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.838596][ T1445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.907000][ T1445] bond0 (unregistering): Released all slaves
[  224.780557][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.653304][ T6831] 8021q: adding VLAN 0 to HW filter on device team0
[  226.768820][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.769072][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.882090][  T424] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.882239][  T424] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.385487][ T6010] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  227.552884][ T6010] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  227.552916][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.552938][ T6010] usb 2-1: Product: syz
[  227.552954][ T6010] usb 2-1: Manufacturer: syz
[  227.552970][ T6010] usb 2-1: SerialNumber: syz
[  227.696452][ T6010] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  227.917311][  T993] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.135477][  T993] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  229.141484][  T993] ath9k_htc: Failed to initialize the device
[  229.206901][ T7123] FAULT_INJECTION: forcing a failure.
[  229.206901][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.206928][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  229.206946][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  229.206956][ T7123] Call Trace:
[  229.206962][ T7123]  <TASK>
[  229.206968][ T7123]  dump_stack_lvl+0xe8/0x150
[  229.206997][ T7123]  should_fail_ex+0x46b/0x600
[  229.207027][ T7123]  _copy_from_user+0x2d/0xb0
[  229.207047][ T7123]  ___sys_sendmsg+0x1c6/0x360
[  229.207086][ T7123]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.207133][ T7123]  ? __fget_files+0x2a/0x420
[  229.207151][ T7123]  ? __fget_files+0x3a6/0x420
[  229.207177][ T7123]  __x64_sys_sendmsg+0x1c3/0x2a0
[  229.207200][ T7123]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.207228][ T7123]  ? __pfx_ksys_write+0x10/0x10
[  229.207259][ T7123]  do_syscall_64+0x14d/0xf80
[  229.207279][ T7123]  ? trace_irq_disable+0x3b/0x150
[  229.207298][ T7123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.207316][ T7123]  ? clear_bhb_loop+0x40/0x90
[  229.207335][ T7123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.207351][ T7123] RIP: 0033:0x7f60548ec629
[  229.207366][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.207379][ T7123] RSP: 002b:00007f6052b25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.207396][ T7123] RAX: ffffffffffffffda RBX: 00007f6054b66090 RCX: 00007f60548ec629
[  229.207407][ T7123] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  229.207417][ T7123] RBP: 00007f6052b25090 R08: 0000000000000000 R09: 0000000000000000
[  229.207427][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.207436][ T7123] R13: 00007f6054b66128 R14: 00007f6054b66090 R15: 00007fff12768f88
[  229.207459][ T7123]  </TASK>
[  229.469765][  T993] usb 2-1: ath9k_htc: USB layer deinitialized
[  229.625902][ T6010] usb 2-1: USB disconnect, device number 16
[  230.200981][ T1445] hsr_slave_0: left promiscuous mode
[  230.307554][ T1445] hsr_slave_1: left promiscuous mode
[  230.309733][ T1445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.309816][ T1445] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.393707][ T1445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.393738][ T1445] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.509355][ T1445] veth1_macvtap: left promiscuous mode
[  230.509574][ T1445] veth0_macvtap: left promiscuous mode
[  230.510738][ T1445] veth1_vlan: left promiscuous mode
[  230.511055][ T1445] veth0_vlan: left promiscuous mode
[  232.505408][  T993] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  232.676374][ T1445] team0 (unregistering): Port device team_slave_1 removed
[  232.735489][  T993] usb 5-1: Using ep0 maxpacket: 32
[  232.736107][ T1445] team0 (unregistering): Port device team_slave_0 removed
[  232.756068][  T993] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  232.756098][  T993] usb 5-1: config 0 has no interface number 0
[  232.756154][  T993] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.756182][  T993] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.756206][  T993] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  232.756251][  T993] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  232.756276][  T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.917076][  T993] usb 5-1: config 0 descriptor??
[  233.446128][  T993] logitech-djreceiver 0003:046D:C537.000A: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  233.581774][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.757949][   T31] usb 5-1: USB disconnect, device number 14
[  233.921415][ T7194] syz_tun: entered allmulticast mode
[  233.948042][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[  234.147283][ T7194] syz_tun (unregistering): left allmulticast mode
[  234.513217][ T7214] FAULT_INJECTION: forcing a failure.
[  234.513217][ T7214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.513254][ T7214] CPU: 0 UID: 0 PID: 7214 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  234.513279][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  234.513292][ T7214] Call Trace:
[  234.513300][ T7214]  <TASK>
[  234.513310][ T7214]  dump_stack_lvl+0xe8/0x150
[  234.513351][ T7214]  should_fail_ex+0x46b/0x600
[  234.513392][ T7214]  _copy_from_user+0x2d/0xb0
[  234.513420][ T7214]  __sys_sendto+0x2ab/0x7d0
[  234.513454][ T7214]  ? __pfx___sys_sendto+0x10/0x10
[  234.513507][ T7214]  ? ksys_write+0x248/0x270
[  234.513542][ T7214]  ? __pfx_ksys_write+0x10/0x10
[  234.513579][ T7214]  __x64_sys_sendto+0xde/0x100
[  234.513610][ T7214]  do_syscall_64+0x14d/0xf80
[  234.513640][ T7214]  ? trace_irq_disable+0x3b/0x150
[  234.513666][ T7214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.513688][ T7214]  ? clear_bhb_loop+0x40/0x90
[  234.513715][ T7214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.513738][ T7214] RIP: 0033:0x7f6b6e92c629
[  234.513759][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.513778][ T7214] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  234.513801][ T7214] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  234.513817][ T7214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  234.513829][ T7214] RBP: 00007f6b6cb86090 R08: 0000200000000000 R09: 000000000000001c
[  234.513843][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.513855][ T7214] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  234.513889][ T7214]  </TASK>
[  234.946862][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'.
[  235.319306][ T6831] veth0_vlan: entered promiscuous mode
[  235.355184][ T6831] veth1_vlan: entered promiscuous mode
[  235.448963][ T7237] FAULT_INJECTION: forcing a failure.
[  235.448963][ T7237] name failslab, interval 1, probability 0, space 0, times 0
[  235.448999][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  235.449033][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  235.449046][ T7237] Call Trace:
[  235.449055][ T7237]  <TASK>
[  235.449065][ T7237]  dump_stack_lvl+0xe8/0x150
[  235.449104][ T7237]  should_fail_ex+0x46b/0x600
[  235.449145][ T7237]  ? __pfx_sock_alloc_inode+0x10/0x10
[  235.449166][ T7237]  should_failslab+0xa8/0x100
[  235.449202][ T7237]  ? __pfx_sock_alloc_inode+0x10/0x10
[  235.449222][ T7237]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  235.449255][ T7237]  ? sock_alloc_inode+0x28/0xc0
[  235.449280][ T7237]  ? __pfx_sock_alloc_inode+0x10/0x10
[  235.449300][ T7237]  sock_alloc_inode+0x28/0xc0
[  235.449321][ T7237]  alloc_inode+0x6a/0x1b0
[  235.449347][ T7237]  do_accept+0x144/0x760
[  235.449371][ T7237]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  235.449400][ T7237]  ? __pfx_do_accept+0x10/0x10
[  235.449447][ T7237]  __sys_accept4+0x139/0x230
[  235.449475][ T7237]  ? __pfx___sys_accept4+0x10/0x10
[  235.449500][ T7237]  ? __pfx_ksys_write+0x10/0x10
[  235.449529][ T7237]  ? __task_pid_nr_ns+0x28/0x470
[  235.449560][ T7237]  __x64_sys_accept4+0x9a/0xb0
[  235.449588][ T7237]  do_syscall_64+0x14d/0xf80
[  235.449617][ T7237]  ? trace_irq_disable+0x3b/0x150
[  235.449644][ T7237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.449667][ T7237]  ? clear_bhb_loop+0x40/0x90
[  235.449711][ T7237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.449734][ T7237] RIP: 0033:0x7f97e7f2c629
[  235.449755][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.449773][ T7237] RSP: 002b:00007f97e617e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  235.449797][ T7237] RAX: ffffffffffffffda RBX: 00007f97e81a5fa0 RCX: 00007f97e7f2c629
[  235.449813][ T7237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  235.449826][ T7237] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  235.449840][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.449853][ T7237] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  235.449887][ T7237]  </TASK>
[  235.520308][ T6831] veth0_macvtap: entered promiscuous mode
[  235.592529][ T6831] veth1_macvtap: entered promiscuous mode
[  235.760168][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.792800][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.851296][ T4233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.854691][ T4233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.865473][  T993] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  235.906036][ T7243] hfsplus: unable to find HFS+ superblock
[  235.926111][ T4233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.934287][ T4233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.005522][  T993] usb 2-1: device descriptor read/64, error -71
[  236.265458][  T993] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  236.376385][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.376407][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.402879][  T993] usb 2-1: device descriptor read/64, error -71
[  236.438693][ T7256] FAULT_INJECTION: forcing a failure.
[  236.438693][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.438729][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.3.409 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  236.438753][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  236.438766][ T7256] Call Trace:
[  236.438774][ T7256]  <TASK>
[  236.438783][ T7256]  dump_stack_lvl+0xe8/0x150
[  236.438823][ T7256]  should_fail_ex+0x46b/0x600
[  236.438865][ T7256]  _copy_from_user+0x2d/0xb0
[  236.438893][ T7256]  __sys_connect+0x156/0x450
[  236.438923][ T7256]  ? __pfx___sys_connect+0x10/0x10
[  236.438962][ T7256]  ? __pfx_ksys_write+0x10/0x10
[  236.439003][ T7256]  __x64_sys_connect+0x7a/0x90
[  236.439031][ T7256]  do_syscall_64+0x14d/0xf80
[  236.439059][ T7256]  ? trace_irq_disable+0x3b/0x150
[  236.439084][ T7256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.439107][ T7256]  ? clear_bhb_loop+0x40/0x90
[  236.439134][ T7256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.439157][ T7256] RIP: 0033:0x7f60548ec629
[  236.439177][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.439203][ T7256] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  236.439227][ T7256] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  236.439243][ T7256] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000004
[  236.439257][ T7256] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  236.439270][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.439283][ T7256] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  236.439317][ T7256]  </TASK>
[  236.506763][  T993] usb usb2-port1: attempt power cycle
[  236.761421][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.761444][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.935413][  T993] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  236.957071][  T993] usb 2-1: device descriptor read/8, error -71
[  237.171402][ T7230] lec:lec_atm_close: lec0: Shut down!
[  237.195448][  T993] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  237.227453][  T993] usb 2-1: device descriptor read/8, error -71
[  237.335959][  T993] usb usb2-port1: unable to enumerate USB device
[  238.943494][ T7313] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.422'.
[  239.060464][ T7319] FAULT_INJECTION: forcing a failure.
[  239.060464][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.060499][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.3.424 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  239.060522][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.060533][ T7319] Call Trace:
[  239.060541][ T7319]  <TASK>
[  239.060550][ T7319]  dump_stack_lvl+0xe8/0x150
[  239.060586][ T7319]  should_fail_ex+0x46b/0x600
[  239.060643][ T7319]  _copy_from_user+0x2d/0xb0
[  239.060670][ T7319]  ___sys_sendmsg+0x1c6/0x360
[  239.060706][ T7319]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.060778][ T7319]  ? __fget_files+0x2a/0x420
[  239.060804][ T7319]  ? __fget_files+0x3a6/0x420
[  239.060840][ T7319]  __x64_sys_sendmsg+0x1c3/0x2a0
[  239.060871][ T7319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.060910][ T7319]  ? __pfx_ksys_write+0x10/0x10
[  239.060951][ T7319]  do_syscall_64+0x14d/0xf80
[  239.060979][ T7319]  ? trace_irq_disable+0x3b/0x150
[  239.061003][ T7319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.061025][ T7319]  ? clear_bhb_loop+0x40/0x90
[  239.061051][ T7319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.061073][ T7319] RIP: 0033:0x7f60548ec629
[  239.061093][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.061110][ T7319] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.061131][ T7319] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  239.061147][ T7319] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  239.061160][ T7319] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  239.061173][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.061185][ T7319] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  239.061218][ T7319]  </TASK>
[  239.285554][ T6010] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  239.557747][ T6010] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  239.557780][ T6010] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  239.557801][ T6010] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  239.557822][ T6010] usb 5-1: config 220 has no interface number 2
[  239.557894][ T6010] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  239.557924][ T6010] usb 5-1: config 220 interface 0 has no altsetting 0
[  239.557944][ T6010] usb 5-1: config 220 interface 76 has no altsetting 0
[  239.557964][ T6010] usb 5-1: config 220 interface 1 has no altsetting 0
[  239.562616][ T6010] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  239.562650][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.562672][ T6010] usb 5-1: Product: syz
[  239.562688][ T6010] usb 5-1: Manufacturer: syz
[  239.562704][ T6010] usb 5-1: SerialNumber: syz
[  240.587058][ T7316] dlm: Unknown command passed to DLM device : 0
[  240.587058][ T7316] 
[  240.709235][ T7316] Mount JFS Failure: -22
[  240.709254][ T7316] jfs_mount failed w/return code = -22
[  240.860646][ T6010] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  240.860694][ T6010] uvcvideo 5-1:220.0: No valid video chain found.
[  240.860760][ T6010] usb 5-1: selecting invalid altsetting 0
[  240.981214][ T6010] usb 5-1: selecting invalid altsetting 0
[  240.981256][ T6010] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  241.053050][ T6010] usb 5-1: USB disconnect, device number 15
[  241.646322][ T7347] FAULT_INJECTION: forcing a failure.
[  241.646322][ T7347] name failslab, interval 1, probability 0, space 0, times 0
[  241.646365][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.4.433 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  241.646391][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  241.646405][ T7347] Call Trace:
[  241.646414][ T7347]  <TASK>
[  241.646423][ T7347]  dump_stack_lvl+0xe8/0x150
[  241.646463][ T7347]  should_fail_ex+0x46b/0x600
[  241.646506][ T7347]  should_failslab+0xa8/0x100
[  241.646543][ T7347]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  241.646578][ T7347]  ? __alloc_skb+0x1d0/0x7d0
[  241.646602][ T7347]  ? lockdep_hardirqs_on+0x7a/0x110
[  241.646638][ T7347]  __alloc_skb+0x1d0/0x7d0
[  241.646669][ T7347]  alloc_skb_with_frags+0xca/0x890
[  241.646699][ T7347]  ? try_to_take_rt_mutex+0x840/0xb00
[  241.646735][ T7347]  sock_alloc_send_pskb+0x884/0x9a0
[  241.646805][ T7347]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  241.646834][ T7347]  ? rt_mutex_slowunlock+0x1cb/0x300
[  241.646855][ T7347]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  241.646891][ T7347]  l2cap_sock_alloc_skb_cb+0xef/0x490
[  241.646916][ T7347]  ? __pfx_hlock_conflict+0x10/0x10
[  241.646947][ T7347]  ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10
[  241.646983][ T7347]  l2cap_chan_send+0x203/0x25c0
[  241.647029][ T7347]  ? __pfx_l2cap_chan_send+0x10/0x10
[  241.647071][ T7347]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  241.647100][ T7347]  ? lockdep_hardirqs_on+0x7a/0x110
[  241.647127][ T7347]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  241.647155][ T7347]  ? mutex_lock_nested+0x152/0x1d0
[  241.647175][ T7347]  ? l2cap_sock_sendmsg+0x327/0x4e0
[  241.647201][ T7347]  l2cap_sock_sendmsg+0x33d/0x4e0
[  241.647227][ T7347]  ? __pfx_l2cap_sock_sendmsg+0x10/0x10
[  241.647258][ T7347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.647293][ T7347]  sock_write_iter+0x509/0x550
[  241.647329][ T7347]  ? __pfx_sock_write_iter+0x10/0x10
[  241.647392][ T7347]  vfs_write+0x629/0xba0
[  241.647432][ T7347]  ? __pfx_vfs_write+0x10/0x10
[  241.647474][ T7347]  ? __fget_files+0x2a/0x420
[  241.647509][ T7347]  ksys_write+0x156/0x270
[  241.647543][ T7347]  ? __pfx_ksys_write+0x10/0x10
[  241.647595][ T7347]  do_syscall_64+0x14d/0xf80
[  241.647621][ T7347]  ? trace_irq_disable+0x3b/0x150
[  241.647645][ T7347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.647685][ T7347]  ? clear_bhb_loop+0x40/0x90
[  241.647712][ T7347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.647734][ T7347] RIP: 0033:0x7f6df4eac629
[  241.647754][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.647772][ T7347] RSP: 002b:00007f6df30fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.647795][ T7347] RAX: ffffffffffffffda RBX: 00007f6df5125fa0 RCX: 00007f6df4eac629
[  241.647810][ T7347] RDX: 000000000000fd45 RSI: 0000200000000cc0 RDI: 0000000000000004
[  241.647823][ T7347] RBP: 00007f6df30fe090 R08: 0000000000000000 R09: 0000000000000000
[  241.647836][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.647848][ T7347] R13: 00007f6df5126038 R14: 00007f6df5125fa0 R15: 00007ffff3dbf408
[  241.647881][ T7347]  </TASK>
[  242.277065][ T7358] netlink: 'syz.4.435': attribute type 72 has an invalid length.
[  242.829045][ T5793] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  243.686459][ T7377] FAULT_INJECTION: forcing a failure.
[  243.686459][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.686503][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.4.437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  243.686528][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  243.686541][ T7377] Call Trace:
[  243.686550][ T7377]  <TASK>
[  243.686560][ T7377]  dump_stack_lvl+0xe8/0x150
[  243.686601][ T7377]  should_fail_ex+0x46b/0x600
[  243.686644][ T7377]  _copy_to_user+0x31/0xb0
[  243.686675][ T7377]  simple_read_from_buffer+0xe1/0x170
[  243.686708][ T7377]  proc_fail_nth_read+0x1be/0x230
[  243.686738][ T7377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  243.686767][ T7377]  ? rw_verify_area+0x2ac/0x4e0
[  243.686799][ T7377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  243.686826][ T7377]  vfs_read+0x212/0xa80
[  243.686867][ T7377]  ? __pfx_vfs_read+0x10/0x10
[  243.686903][ T7377]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  243.686934][ T7377]  ? lockdep_hardirqs_on+0x7a/0x110
[  243.686964][ T7377]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  243.686995][ T7377]  ? mutex_lock_nested+0x152/0x1d0
[  243.687017][ T7377]  ? fdget_pos+0x252/0x320
[  243.687055][ T7377]  ksys_read+0x156/0x270
[  243.687090][ T7377]  ? __pfx_ksys_read+0x10/0x10
[  243.687135][ T7377]  do_syscall_64+0x14d/0xf80
[  243.687164][ T7377]  ? trace_irq_disable+0x3b/0x150
[  243.687190][ T7377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.687214][ T7377]  ? clear_bhb_loop+0x40/0x90
[  243.687244][ T7377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.687268][ T7377] RIP: 0033:0x7f6df4e6cece
[  243.687288][ T7377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  243.687307][ T7377] RSP: 002b:00007f6df30fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  243.687331][ T7377] RAX: ffffffffffffffda RBX: 00007f6df30fe6c0 RCX: 00007f6df4e6cece
[  243.687348][ T7377] RDX: 000000000000000f RSI: 00007f6df30fe0a0 RDI: 0000000000000003
[  243.687362][ T7377] RBP: 00007f6df30fe090 R08: 0000000000000000 R09: 0000000000000000
[  243.687376][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.687389][ T7377] R13: 00007f6df5126038 R14: 00007f6df5125fa0 R15: 00007ffff3dbf408
[  243.687425][ T7377]  </TASK>
[  244.007160][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  244.101775][ T5793] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  244.101863][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.101915][ T5793] usb 1-1: Product: syz
[  244.101955][ T5793] usb 1-1: Manufacturer: syz
[  244.101994][ T5793] usb 1-1: SerialNumber: syz
[  244.200406][ T5793] usb 1-1: config 0 descriptor??
[  244.279081][ T5793] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  244.408900][ T5793] usb 1-1: USB disconnect, device number 10
[  244.415033][ T1519] usb 1-1: Failed to submit usb control message: -71
[  244.415070][ T1519] usb 1-1: unable to send the bmi data to the device: -71
[  244.415089][ T1519] usb 1-1: unable to get target info from device
[  244.415105][ T1519] usb 1-1: could not get target info (-71)
[  244.415133][ T1519] usb 1-1: could not probe fw (-71)
[  244.550002][ T7389] netlink: 'syz.4.447': attribute type 72 has an invalid length.
[  245.085173][ T7414] FAULT_INJECTION: forcing a failure.
[  245.085173][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.085210][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  245.085234][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  245.085248][ T7414] Call Trace:
[  245.085256][ T7414]  <TASK>
[  245.085266][ T7414]  dump_stack_lvl+0xe8/0x150
[  245.085310][ T7414]  should_fail_ex+0x46b/0x600
[  245.085352][ T7414]  _copy_to_user+0x31/0xb0
[  245.085381][ T7414]  simple_read_from_buffer+0xe1/0x170
[  245.085430][ T7414]  proc_fail_nth_read+0x1be/0x230
[  245.085460][ T7414]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  245.085487][ T7414]  ? rw_verify_area+0x2ac/0x4e0
[  245.085516][ T7414]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  245.085541][ T7414]  vfs_read+0x212/0xa80
[  245.085580][ T7414]  ? __pfx_vfs_read+0x10/0x10
[  245.085613][ T7414]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  245.085645][ T7414]  ? lockdep_hardirqs_on+0x7a/0x110
[  245.085674][ T7414]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  245.085704][ T7414]  ? mutex_lock_nested+0x152/0x1d0
[  245.085726][ T7414]  ? fdget_pos+0x252/0x320
[  245.085762][ T7414]  ksys_read+0x156/0x270
[  245.085796][ T7414]  ? __pfx_ksys_read+0x10/0x10
[  245.085840][ T7414]  do_syscall_64+0x14d/0xf80
[  245.085868][ T7414]  ? trace_irq_disable+0x3b/0x150
[  245.085894][ T7414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.085917][ T7414]  ? clear_bhb_loop+0x40/0x90
[  245.085945][ T7414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.085968][ T7414] RIP: 0033:0x7f97e7eecece
[  245.085989][ T7414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  245.086008][ T7414] RSP: 002b:00007f97e617dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  245.086031][ T7414] RAX: ffffffffffffffda RBX: 00007f97e617e6c0 RCX: 00007f97e7eecece
[  245.086047][ T7414] RDX: 000000000000000f RSI: 00007f97e617e0a0 RDI: 0000000000000007
[  245.086061][ T7414] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  245.086074][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.086086][ T7414] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  245.086121][ T7414]  </TASK>
[  245.175423][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  245.405382][   T10] usb 5-1: Using ep0 maxpacket: 32
[  245.415036][   T10] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  245.415066][   T10] usb 5-1: config 0 has no interface number 0
[  245.415110][   T10] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.415137][   T10] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.415160][   T10] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  245.465449][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  245.465481][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.501376][   T10] usb 5-1: config 0 descriptor??
[  245.707189][ T7422] binder: 7420:7422 ioctl ae41 2 returned -22
[  245.973094][   T10] logitech-djreceiver 0003:046D:C537.000B: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  246.153366][ T7432] netlink: 'syz.5.461': attribute type 72 has an invalid length.
[  246.166623][ T6010] usb 5-1: USB disconnect, device number 16
[  246.230308][ T7434] fido_id[7434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  247.673107][ T7481] hfsplus: unable to find HFS+ superblock
[  249.238702][ T7503] FAULT_INJECTION: forcing a failure.
[  249.238702][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.238749][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.0.482 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  249.238770][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  249.238782][ T7503] Call Trace:
[  249.238789][ T7503]  <TASK>
[  249.238797][ T7503]  dump_stack_lvl+0xe8/0x150
[  249.238830][ T7503]  should_fail_ex+0x46b/0x600
[  249.238884][ T7503]  _copy_from_user+0x2d/0xb0
[  249.238909][ T7503]  do_sys_poll+0x2a0/0xfa0
[  249.238946][ T7503]  ? __pfx_do_sys_poll+0x10/0x10
[  249.238966][ T7503]  ? __lock_acquire+0x6b5/0x2cf0
[  249.238987][ T7503]  ? is_bpf_text_address+0x26/0x2b0
[  249.239099][ T7503]  ? set_user_sigmask+0xcd/0x1c0
[  249.239127][ T7503]  ? __pfx_set_user_sigmask+0x10/0x10
[  249.239178][ T7503]  ? rt_mutex_slowunlock+0x1cb/0x300
[  249.239199][ T7503]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  249.239226][ T7503]  __se_sys_ppoll+0x209/0x2b0
[  249.239248][ T7503]  ? fput+0xa0/0xd0
[  249.239272][ T7503]  ? __pfx___se_sys_ppoll+0x10/0x10
[  249.239293][ T7503]  ? __pfx_ksys_write+0x10/0x10
[  249.239326][ T7503]  ? __x64_sys_ppoll+0x20/0xc0
[  249.239349][ T7503]  do_syscall_64+0x14d/0xf80
[  249.239374][ T7503]  ? trace_irq_disable+0x3b/0x150
[  249.239398][ T7503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.239418][ T7503]  ? clear_bhb_loop+0x40/0x90
[  249.239443][ T7503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.239463][ T7503] RIP: 0033:0x7f97e7f2c629
[  249.239481][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.239498][ T7503] RSP: 002b:00007f97e617e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  249.239520][ T7503] RAX: ffffffffffffffda RBX: 00007f97e81a5fa0 RCX: 00007f97e7f2c629
[  249.239535][ T7503] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  249.239548][ T7503] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  249.239561][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.239573][ T7503] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  249.239603][ T7503]  </TASK>
[  252.742805][ T7509] FAULT_INJECTION: forcing a failure.
[  252.742805][ T7509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.742870][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  252.742895][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  252.742908][ T7509] Call Trace:
[  252.742917][ T7509]  <TASK>
[  252.742926][ T7509]  dump_stack_lvl+0xe8/0x150
[  252.742967][ T7509]  should_fail_ex+0x46b/0x600
[  252.743007][ T7509]  _copy_from_user+0x2d/0xb0
[  252.743034][ T7509]  ___sys_sendmsg+0x1c6/0x360
[  252.743070][ T7509]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.743103][ T7509]  ? __schedule+0x1511/0x52c0
[  252.743158][ T7509]  ? __fget_files+0x2a/0x420
[  252.743184][ T7509]  ? __fget_files+0x3a6/0x420
[  252.743220][ T7509]  __x64_sys_sendmsg+0x1c3/0x2a0
[  252.743254][ T7509]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.743308][ T7509]  do_syscall_64+0x14d/0xf80
[  252.743336][ T7509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.743359][ T7509]  ? clear_bhb_loop+0x40/0x90
[  252.743386][ T7509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.743409][ T7509] RIP: 0033:0x7f6b6e92c629
[  252.743429][ T7509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.743448][ T7509] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.743470][ T7509] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  252.743487][ T7509] RDX: 0000000000040882 RSI: 0000200000000140 RDI: 0000000000000004
[  252.743500][ T7509] RBP: 00007f6b6cb86090 R08: 0000000000000000 R09: 0000000000000000
[  252.743513][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.743526][ T7509] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  252.743558][ T7509]  </TASK>
[  253.476328][ T7467] lec:lec_atm_close: lec0: Shut down!
[  253.883343][ T7532] FAULT_INJECTION: forcing a failure.
[  253.883343][ T7532] name failslab, interval 1, probability 0, space 0, times 0
[  253.883380][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.1.491 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  253.883405][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  253.883419][ T7532] Call Trace:
[  253.883428][ T7532]  <TASK>
[  253.883437][ T7532]  dump_stack_lvl+0xe8/0x150
[  253.883478][ T7532]  should_fail_ex+0x46b/0x600
[  253.883521][ T7532]  should_failslab+0xa8/0x100
[  253.883559][ T7532]  __kmalloc_noprof+0xdf/0x7b0
[  253.883592][ T7532]  ? kfree+0x4d/0x6c0
[  253.883620][ T7532]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  253.883663][ T7532]  tomoyo_realpath_from_path+0xe3/0x5d0
[  253.883710][ T7532]  ? tomoyo_path_number_perm+0x219/0x630
[  253.883740][ T7532]  tomoyo_path_number_perm+0x246/0x630
[  253.883774][ T7532]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  253.883807][ T7532]  ? __lock_acquire+0x6b5/0x2cf0
[  253.883866][ T7532]  ? __fget_files+0x2a/0x420
[  253.883897][ T7532]  ? __fget_files+0x2a/0x420
[  253.883937][ T7532]  ? __fget_files+0x3a6/0x420
[  253.883964][ T7532]  ? __fget_files+0x2a/0x420
[  253.883995][ T7532]  security_file_ioctl+0xc3/0x2a0
[  253.884029][ T7532]  __se_sys_ioctl+0x47/0x170
[  253.884068][ T7532]  do_syscall_64+0x14d/0xf80
[  253.884098][ T7532]  ? trace_irq_disable+0x3b/0x150
[  253.884125][ T7532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.884148][ T7532]  ? clear_bhb_loop+0x40/0x90
[  253.884177][ T7532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.884201][ T7532] RIP: 0033:0x7f6b6e92c629
[  253.884222][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.884241][ T7532] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  253.884265][ T7532] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  253.884281][ T7532] RDX: 0000200000000040 RSI: 000000004008af30 RDI: 0000000000000003
[  253.884296][ T7532] RBP: 00007f6b6cb86090 R08: 0000000000000000 R09: 0000000000000000
[  253.884310][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.884324][ T7532] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  253.884360][ T7532]  </TASK>
[  253.884368][ T7532] ERROR: Out of memory at tomoyo_realpath_from_path.
[  258.193232][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  258.193303][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  258.197318][ T1321] lec:lec_start_xmit: lec0:No lecd attached
[  258.541967][ T7583] FAULT_INJECTION: forcing a failure.
[  258.541967][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.542003][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  258.542027][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  258.542040][ T7583] Call Trace:
[  258.542048][ T7583]  <TASK>
[  258.542058][ T7583]  dump_stack_lvl+0xe8/0x150
[  258.542097][ T7583]  should_fail_ex+0x46b/0x600
[  258.542138][ T7583]  _copy_from_user+0x2d/0xb0
[  258.542166][ T7583]  ax25_setsockopt+0x172/0xc30
[  258.542202][ T7583]  ? __pfx_ax25_setsockopt+0x10/0x10
[  258.542231][ T7583]  ? __fget_files+0x2a/0x420
[  258.542260][ T7583]  ? __fget_files+0x2a/0x420
[  258.542284][ T7583]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  258.542316][ T7583]  ? __pfx_ax25_setsockopt+0x10/0x10
[  258.542346][ T7583]  do_sock_setsockopt+0x17c/0x1b0
[  258.542379][ T7583]  __x64_sys_setsockopt+0x143/0x1b0
[  258.542412][ T7583]  do_syscall_64+0x14d/0xf80
[  258.542440][ T7583]  ? trace_irq_disable+0x3b/0x150
[  258.542471][ T7583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.542493][ T7583]  ? clear_bhb_loop+0x40/0x90
[  258.542521][ T7583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.542543][ T7583] RIP: 0033:0x7f60548ec629
[  258.542563][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.542581][ T7583] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  258.542603][ T7583] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  258.542620][ T7583] RDX: 000000000000000a RSI: 0000000000000101 RDI: 0000000000000004
[  258.542632][ T7583] RBP: 00007f6052b46090 R08: 0000000000000004 R09: 0000000000000000
[  258.542646][ T7583] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  258.542659][ T7583] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  258.542692][ T7583]  </TASK>
[  258.930599][ T7591] FAULT_INJECTION: forcing a failure.
[  258.930599][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.930646][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  258.930669][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  258.930681][ T7591] Call Trace:
[  258.930689][ T7591]  <TASK>
[  258.930698][ T7591]  dump_stack_lvl+0xe8/0x150
[  258.930733][ T7591]  should_fail_ex+0x46b/0x600
[  258.930770][ T7591]  _copy_from_user+0x2d/0xb0
[  258.930795][ T7591]  ___sys_sendmsg+0x1c6/0x360
[  258.930827][ T7591]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.930858][ T7591]  ? kstrtouint+0x6e/0xe0
[  258.930912][ T7591]  ? __fget_files+0x2a/0x420
[  258.930935][ T7591]  ? __fget_files+0x3a6/0x420
[  258.930968][ T7591]  __sys_sendmmsg+0x282/0x4e0
[  258.931000][ T7591]  ? __pfx___sys_sendmmsg+0x10/0x10
[  258.931034][ T7591]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  258.931069][ T7591]  ? ksys_write+0x248/0x270
[  258.931101][ T7591]  ? __pfx_ksys_write+0x10/0x10
[  258.931135][ T7591]  __x64_sys_sendmmsg+0xa0/0xc0
[  258.931165][ T7591]  do_syscall_64+0x14d/0xf80
[  258.931191][ T7591]  ? trace_irq_disable+0x3b/0x150
[  258.931214][ T7591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.931235][ T7591]  ? clear_bhb_loop+0x40/0x90
[  258.931260][ T7591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.931280][ T7591] RIP: 0033:0x7f97e7f2c629
[  258.931299][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.931316][ T7591] RSP: 002b:00007f97e617e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  258.931336][ T7591] RAX: ffffffffffffffda RBX: 00007f97e81a5fa0 RCX: 00007f97e7f2c629
[  258.931349][ T7591] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  258.931361][ T7591] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  258.931373][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.931384][ T7591] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  258.931414][ T7591]  </TASK>
[  259.065577][   T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  259.265394][   T31] usb 5-1: Using ep0 maxpacket: 32
[  259.268898][   T31] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  259.268925][   T31] usb 5-1: config 0 has no interface number 0
[  259.268972][   T31] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.268992][   T31] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.269008][   T31] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  259.269038][   T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  259.269055][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.274684][   T31] usb 5-1: config 0 descriptor??
[  259.403807][ T7598] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  259.523113][ T7598] warning: `syz.1.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  259.923719][   T31] logitech-djreceiver 0003:046D:C537.000C: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  260.108278][  T993] usb 5-1: USB disconnect, device number 17
[  260.316213][ T7623] fido_id[7623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  260.336624][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  260.495809][   T10] usb 2-1: Using ep0 maxpacket: 32
[  260.498105][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.498138][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.498161][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  260.514582][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  260.514613][   T10] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  260.514635][   T10] usb 2-1: Product: syz
[  260.514650][   T10] usb 2-1: Manufacturer: syz
[  260.514665][   T10] usb 2-1: SerialNumber: syz
[  260.604886][   T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11
[  260.670818][ T7636] tmpfs: Unknown parameter 'usrquota''
[  260.907856][  T809] usb 2-1: USB disconnect, device number 21
[  261.102736][  T809] appletouch 2-1:1.0: input: appletouch disconnected
[  261.656116][   T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  261.814454][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  261.840630][   T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  261.840662][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.840684][   T10] usb 1-1: Product: syz
[  261.840699][   T10] usb 1-1: Manufacturer: syz
[  261.840715][   T10] usb 1-1: SerialNumber: syz
[  261.907955][   T10] usb 1-1: config 0 descriptor??
[  261.930034][   T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  262.146022][ T5889] usb 1-1: USB disconnect, device number 11
[  262.151592][  T787] usb 1-1: Failed to submit usb control message: -71
[  262.151632][  T787] usb 1-1: unable to send the bmi data to the device: -71
[  262.151652][  T787] usb 1-1: unable to get target info from device
[  262.151668][  T787] usb 1-1: could not get target info (-71)
[  262.151687][  T787] usb 1-1: could not probe fw (-71)
[  262.707234][ T7687] FAULT_INJECTION: forcing a failure.
[  262.707234][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.707271][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.1.536 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  262.707297][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  262.707310][ T7687] Call Trace:
[  262.707318][ T7687]  <TASK>
[  262.707328][ T7687]  dump_stack_lvl+0xe8/0x150
[  262.707367][ T7687]  should_fail_ex+0x46b/0x600
[  262.707417][ T7687]  _copy_from_user+0x2d/0xb0
[  262.707446][ T7687]  ___sys_sendmsg+0x1c6/0x360
[  262.707495][ T7687]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.707560][ T7687]  ? __fget_files+0x2a/0x420
[  262.707585][ T7687]  ? __fget_files+0x3a6/0x420
[  262.707621][ T7687]  __x64_sys_sendmsg+0x1c3/0x2a0
[  262.707653][ T7687]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  262.707693][ T7687]  ? __pfx_ksys_write+0x10/0x10
[  262.707736][ T7687]  do_syscall_64+0x14d/0xf80
[  262.707764][ T7687]  ? trace_irq_disable+0x3b/0x150
[  262.707789][ T7687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.707818][ T7687]  ? clear_bhb_loop+0x40/0x90
[  262.707862][ T7687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.707886][ T7687] RIP: 0033:0x7f6b6e92c629
[  262.707907][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.707931][ T7687] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  262.707954][ T7687] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  262.707971][ T7687] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000007
[  262.707985][ T7687] RBP: 00007f6b6cb86090 R08: 0000000000000000 R09: 0000000000000000
[  262.707999][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.708012][ T7687] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  262.708045][ T7687]  </TASK>
[  263.205354][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  263.205557][    C0] lec:lec_tx_timeout: lec0
[  263.214737][ T7696] hfsplus: unable to find HFS+ superblock
[  263.676402][ T7706] syzkaller0: entered promiscuous mode
[  263.676428][ T7706] syzkaller0: entered allmulticast mode
[  263.692237][ T7706] FAULT_INJECTION: forcing a failure.
[  263.692237][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.692344][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  263.692406][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  263.692451][ T7706] Call Trace:
[  263.692478][ T7706]  <TASK>
[  263.692505][ T7706]  dump_stack_lvl+0xe8/0x150
[  263.692597][ T7706]  should_fail_ex+0x46b/0x600
[  263.692704][ T7706]  _copy_from_user+0x2d/0xb0
[  263.692775][ T7706]  ___sys_sendmsg+0x1c6/0x360
[  263.692866][ T7706]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.693027][ T7706]  ? __fget_files+0x2a/0x420
[  263.693105][ T7706]  ? __fget_files+0x3a6/0x420
[  263.693198][ T7706]  __x64_sys_sendmsg+0x1c3/0x2a0
[  263.693279][ T7706]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.693373][ T7706]  ? __pfx_ksys_write+0x10/0x10
[  263.693492][ T7706]  do_syscall_64+0x14d/0xf80
[  263.693564][ T7706]  ? trace_irq_disable+0x3b/0x150
[  263.693625][ T7706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.693684][ T7706]  ? clear_bhb_loop+0x40/0x90
[  263.693767][ T7706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.693844][ T7706] RIP: 0033:0x7f60548ec629
[  263.693894][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.693943][ T7706] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.693983][ T7706] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  263.694030][ T7706] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  263.694067][ T7706] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  263.694110][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.694147][ T7706] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  263.694229][ T7706]  </TASK>
[  265.281988][ T7744] FAULT_INJECTION: forcing a failure.
[  265.281988][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.282026][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.4.554 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  265.282050][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  265.282063][ T7744] Call Trace:
[  265.282072][ T7744]  <TASK>
[  265.282082][ T7744]  dump_stack_lvl+0xe8/0x150
[  265.282122][ T7744]  should_fail_ex+0x46b/0x600
[  265.282164][ T7744]  _copy_from_user+0x2d/0xb0
[  265.282193][ T7744]  ___sys_sendmsg+0x1c6/0x360
[  265.282231][ T7744]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.282307][ T7744]  ? __fget_files+0x2a/0x420
[  265.282333][ T7744]  ? __fget_files+0x3a6/0x420
[  265.282371][ T7744]  __x64_sys_sendmsg+0x1c3/0x2a0
[  265.282405][ T7744]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  265.282447][ T7744]  ? __pfx_ksys_write+0x10/0x10
[  265.282492][ T7744]  do_syscall_64+0x14d/0xf80
[  265.282521][ T7744]  ? trace_irq_disable+0x3b/0x150
[  265.282548][ T7744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.282571][ T7744]  ? clear_bhb_loop+0x40/0x90
[  265.282601][ T7744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.282624][ T7744] RIP: 0033:0x7f6df4eac629
[  265.282645][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.282664][ T7744] RSP: 002b:00007f6df30fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.282688][ T7744] RAX: ffffffffffffffda RBX: 00007f6df5125fa0 RCX: 00007f6df4eac629
[  265.282704][ T7744] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004
[  265.282719][ T7744] RBP: 00007f6df30fe090 R08: 0000000000000000 R09: 0000000000000000
[  265.282733][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.282746][ T7744] R13: 00007f6df5126038 R14: 00007f6df5125fa0 R15: 00007ffff3dbf408
[  265.282781][ T7744]  </TASK>
[  266.594308][ T7761] FAULT_INJECTION: forcing a failure.
[  266.594308][ T7761] name failslab, interval 1, probability 0, space 0, times 0
[  266.594389][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.3.560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.594416][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.594429][ T7761] Call Trace:
[  266.594441][ T7761]  <TASK>
[  266.594448][ T7761]  dump_stack_lvl+0xe8/0x150
[  266.594478][ T7761]  should_fail_ex+0x46b/0x600
[  266.594508][ T7761]  should_failslab+0xa8/0x100
[  266.594534][ T7761]  kmem_cache_alloc_noprof+0x87/0x680
[  266.594557][ T7761]  ? __sanitizer_cov_trace_const_cmp8+0x8/0xa0
[  266.594576][ T7761]  ? do_getname+0x2e/0x250
[  266.594595][ T7761]  do_getname+0x2e/0x250
[  266.594609][ T7761]  ? getname_flags+0x11/0x20
[  266.594627][ T7761]  do_sys_openat2+0xca/0x200
[  266.594644][ T7761]  ? lockdep_hardirqs_on+0x7a/0x110
[  266.594666][ T7761]  ? __pfx_do_sys_openat2+0x10/0x10
[  266.594693][ T7761]  __x64_sys_openat+0x138/0x170
[  266.594715][ T7761]  do_syscall_64+0x14d/0xf80
[  266.594736][ T7761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.594752][ T7761]  ? clear_bhb_loop+0x40/0x90
[  266.594771][ T7761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.594787][ T7761] RIP: 0033:0x7f60548acece
[  266.594802][ T7761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  266.594815][ T7761] RSP: 002b:00007f6052b24ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  266.594831][ T7761] RAX: ffffffffffffffda RBX: 00007f6052b256c0 RCX: 00007f60548acece
[  266.594843][ T7761] RDX: 0000000000000002 RSI: 00007f6052b24f90 RDI: ffffffffffffff9c
[  266.594854][ T7761] RBP: 00007f6052b25090 R08: 0000000000000000 R09: 0000000000000000
[  266.594864][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.594873][ T7761] R13: 00007f6054b66128 R14: 00007f6054b66090 R15: 00007fff12768f88
[  266.594896][ T7761]  </TASK>
[  267.977201][ T7764] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  268.703604][ T7774] tmpfs: Bad value for 'mpol'
[  268.790424][ T7779] hfsplus: unable to find HFS+ superblock
[  268.956763][ T5953] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  269.136236][ T5953] usb 1-1: no configurations
[  269.136258][ T5953] usb 1-1: can't read configurations, error -22
[  269.143154][ T5463] lec:lec_start_xmit: lec0:No lecd attached
[  269.265404][ T5953] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  269.416477][ T5953] usb 1-1: no configurations
[  269.416498][ T5953] usb 1-1: can't read configurations, error -22
[  269.417020][ T5953] usb usb1-port1: attempt power cycle
[  269.765704][ T5953] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  269.787083][ T5953] usb 1-1: no configurations
[  269.787102][ T5953] usb 1-1: can't read configurations, error -22
[  269.915507][ T5953] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  269.936886][ T5953] usb 1-1: no configurations
[  269.936904][ T5953] usb 1-1: can't read configurations, error -22
[  269.939428][ T5953] usb usb1-port1: unable to enumerate USB device
[  270.158828][ T7811] FAULT_INJECTION: forcing a failure.
[  270.158828][ T7811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.158864][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  270.158888][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  270.158902][ T7811] Call Trace:
[  270.158910][ T7811]  <TASK>
[  270.158920][ T7811]  dump_stack_lvl+0xe8/0x150
[  270.158967][ T7811]  should_fail_ex+0x46b/0x600
[  270.159007][ T7811]  _copy_from_user+0x2d/0xb0
[  270.159035][ T7811]  ___sys_sendmsg+0x1c6/0x360
[  270.159073][ T7811]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.159141][ T7811]  ? __fget_files+0x2a/0x420
[  270.159166][ T7811]  ? __fget_files+0x3a6/0x420
[  270.159203][ T7811]  __x64_sys_sendmsg+0x1c3/0x2a0
[  270.159236][ T7811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.159277][ T7811]  ? __pfx_ksys_write+0x10/0x10
[  270.159320][ T7811]  do_syscall_64+0x14d/0xf80
[  270.159348][ T7811]  ? trace_irq_disable+0x3b/0x150
[  270.159374][ T7811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.159396][ T7811]  ? clear_bhb_loop+0x40/0x90
[  270.159424][ T7811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.159446][ T7811] RIP: 0033:0x7f60548ec629
[  270.159484][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.159503][ T7811] RSP: 002b:00007f6052b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.159527][ T7811] RAX: ffffffffffffffda RBX: 00007f6054b65fa0 RCX: 00007f60548ec629
[  270.159554][ T7811] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007
[  270.159567][ T7811] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  270.159580][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.159592][ T7811] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  270.159627][ T7811]  </TASK>
[  270.256085][ T7809] netlink: 124 bytes leftover after parsing attributes in process `syz.4.571'.
[  270.256324][ T7809] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  271.118785][ T7828] netlink: 'syz.1.576': attribute type 72 has an invalid length.
[  271.475549][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[  271.894522][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'.
[  271.916368][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'.
[  272.508140][ T7875] FAULT_INJECTION: forcing a failure.
[  272.508140][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.508179][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.3.586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  272.508204][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.508218][ T7875] Call Trace:
[  272.508227][ T7875]  <TASK>
[  272.508237][ T7875]  dump_stack_lvl+0xe8/0x150
[  272.508278][ T7875]  should_fail_ex+0x46b/0x600
[  272.508320][ T7875]  _copy_from_user+0x2d/0xb0
[  272.508349][ T7875]  ___sys_sendmsg+0x1c6/0x360
[  272.508386][ T7875]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.508424][ T7875]  ? kstrtouint+0x6e/0xe0
[  272.508485][ T7875]  ? __fget_files+0x2a/0x420
[  272.508512][ T7875]  ? __fget_files+0x3a6/0x420
[  272.508549][ T7875]  __sys_sendmmsg+0x282/0x4e0
[  272.508586][ T7875]  ? __pfx___sys_sendmmsg+0x10/0x10
[  272.508627][ T7875]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  272.508668][ T7875]  ? ksys_write+0x248/0x270
[  272.508701][ T7875]  ? __pfx_ksys_write+0x10/0x10
[  272.508741][ T7875]  __x64_sys_sendmmsg+0xa0/0xc0
[  272.508773][ T7875]  do_syscall_64+0x14d/0xf80
[  272.508814][ T7875]  ? trace_irq_disable+0x3b/0x150
[  272.508837][ T7875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.508859][ T7875]  ? clear_bhb_loop+0x40/0x90
[  272.508892][ T7875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.508913][ T7875] RIP: 0033:0x7f60548ec629
[  272.508932][ T7875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.508951][ T7875] RSP: 002b:00007f6052b25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  272.508972][ T7875] RAX: ffffffffffffffda RBX: 00007f6054b66090 RCX: 00007f60548ec629
[  272.508987][ T7875] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005
[  272.509000][ T7875] RBP: 00007f6052b25090 R08: 0000000000000000 R09: 0000000000000000
[  272.509012][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.509024][ T7875] R13: 00007f6054b66128 R14: 00007f6054b66090 R15: 00007fff12768f88
[  272.509054][ T7875]  </TASK>
[  272.904967][ T7903] netlink: 'syz.4.588': attribute type 72 has an invalid length.
[  273.727991][ T7963] FAULT_INJECTION: forcing a failure.
[  273.727991][ T7963] name failslab, interval 1, probability 0, space 0, times 0
[  273.728027][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.5.593 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  273.728052][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  273.728066][ T7963] Call Trace:
[  273.728074][ T7963]  <TASK>
[  273.728084][ T7963]  dump_stack_lvl+0xe8/0x150
[  273.728124][ T7963]  should_fail_ex+0x46b/0x600
[  273.728167][ T7963]  should_failslab+0xa8/0x100
[  273.728205][ T7963]  __kmalloc_noprof+0xdf/0x7b0
[  273.728236][ T7963]  ? kfree+0x4d/0x6c0
[  273.728264][ T7963]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  273.728306][ T7963]  tomoyo_realpath_from_path+0xe3/0x5d0
[  273.728351][ T7963]  ? tomoyo_path_number_perm+0x219/0x630
[  273.728381][ T7963]  tomoyo_path_number_perm+0x246/0x630
[  273.728412][ T7963]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  273.728443][ T7963]  ? __lock_acquire+0x6b5/0x2cf0
[  273.728500][ T7963]  ? __fget_files+0x2a/0x420
[  273.728531][ T7963]  ? __fget_files+0x2a/0x420
[  273.728556][ T7963]  ? __fget_files+0x3a6/0x420
[  273.728580][ T7963]  ? __fget_files+0x2a/0x420
[  273.728611][ T7963]  security_file_ioctl+0xc3/0x2a0
[  273.728644][ T7963]  __se_sys_ioctl+0x47/0x170
[  273.728681][ T7963]  do_syscall_64+0x14d/0xf80
[  273.728710][ T7963]  ? trace_irq_disable+0x3b/0x150
[  273.728735][ T7963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.728765][ T7963]  ? clear_bhb_loop+0x40/0x90
[  273.728810][ T7963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.728832][ T7963] RIP: 0033:0x7faf2a5ec629
[  273.728851][ T7963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.728869][ T7963] RSP: 002b:00007faf28846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  273.728892][ T7963] RAX: ffffffffffffffda RBX: 00007faf2a865fa0 RCX: 00007faf2a5ec629
[  273.728907][ T7963] RDX: 00002000000001c0 RSI: 00000000c0385720 RDI: 0000000000000003
[  273.728921][ T7963] RBP: 00007faf28846090 R08: 0000000000000000 R09: 0000000000000000
[  273.728934][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.728946][ T7963] R13: 00007faf2a866038 R14: 00007faf2a865fa0 R15: 00007fff62deb458
[  273.728978][ T7963]  </TASK>
[  273.728986][ T7963] ERROR: Out of memory at tomoyo_realpath_from_path.
[  274.155352][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  274.155384][    C0] lec:lec_tx_timeout: lec0
[  274.155766][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  274.485479][   T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  274.665983][   T31] usb 2-1: Using ep0 maxpacket: 32
[  274.669222][   T31] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  274.669251][   T31] usb 2-1: config 0 has no interface number 0
[  274.669295][   T31] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.669316][   T31] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.669333][   T31] usb 2-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  274.669365][   T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  274.669382][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.760405][   T31] usb 2-1: config 0 descriptor??
[  275.290829][   T31] logitech-djreceiver 0003:046D:C537.000D: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.1-1/input6
[  275.424012][   T10] usb 2-1: USB disconnect, device number 22
[  275.725726][ T7988] fido_id[7988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  276.719268][ T8005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  277.306347][ T8019] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.611'.
[  277.916675][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  278.060014][  T993] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  278.100079][   T10] usb 2-1: Using ep0 maxpacket: 16
[  278.116914][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.136095][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  278.136129][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.136151][   T10] usb 2-1: Product: syz
[  278.136166][   T10] usb 2-1: Manufacturer: syz
[  278.136183][   T10] usb 2-1: SerialNumber: syz
[  278.191194][   T10] usb 2-1: config 0 descriptor??
[  278.211806][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  278.211869][   T10] gspca_stv06xx: st6422 sensor detected
[  278.248117][  T993] usb 6-1: config 0 has an invalid interface number: 153 but max is 0
[  278.248149][  T993] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.248170][  T993] usb 6-1: config 0 has no interface number 0
[  278.248202][  T993] usb 6-1: config 0 interface 153 has no altsetting 0
[  278.251597][  T993] usb 6-1: string descriptor 0 read error: -22
[  278.251735][  T993] usb 6-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  278.251761][  T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.311651][  T993] usb 6-1: config 0 descriptor??
[  278.368861][  T993] uvcvideo 6-1:0.153: probe with driver uvcvideo failed with error -22
[  278.500357][ T8053] FAULT_INJECTION: forcing a failure.
[  278.500357][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  278.500393][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.3.626 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  278.500418][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  278.500432][ T8053] Call Trace:
[  278.500441][ T8053]  <TASK>
[  278.500451][ T8053]  dump_stack_lvl+0xe8/0x150
[  278.500497][ T8053]  should_fail_ex+0x46b/0x600
[  278.500538][ T8053]  _copy_to_user+0x31/0xb0
[  278.500567][ T8053]  simple_read_from_buffer+0xe1/0x170
[  278.500598][ T8053]  proc_fail_nth_read+0x1be/0x230
[  278.500626][ T8053]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  278.500655][ T8053]  ? rw_verify_area+0x2ac/0x4e0
[  278.500685][ T8053]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  278.500711][ T8053]  vfs_read+0x212/0xa80
[  278.500751][ T8053]  ? __pfx_vfs_read+0x10/0x10
[  278.500784][ T8053]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  278.500815][ T8053]  ? lockdep_hardirqs_on+0x7a/0x110
[  278.500843][ T8053]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  278.500872][ T8053]  ? mutex_lock_nested+0x152/0x1d0
[  278.500892][ T8053]  ? fdget_pos+0x252/0x320
[  278.500929][ T8053]  ksys_read+0x156/0x270
[  278.500963][ T8053]  ? __pfx_ksys_read+0x10/0x10
[  278.501004][ T8053]  do_syscall_64+0x14d/0xf80
[  278.501032][ T8053]  ? trace_irq_disable+0x3b/0x150
[  278.501063][ T8053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.501086][ T8053]  ? clear_bhb_loop+0x40/0x90
[  278.501132][ T8053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.501156][ T8053] RIP: 0033:0x7f60548acece
[  278.501176][ T8053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  278.501197][ T8053] RSP: 002b:00007f6052b45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  278.501220][ T8053] RAX: ffffffffffffffda RBX: 00007f6052b466c0 RCX: 00007f60548acece
[  278.501237][ T8053] RDX: 000000000000000f RSI: 00007f6052b460a0 RDI: 0000000000000004
[  278.501252][ T8053] RBP: 00007f6052b46090 R08: 0000000000000000 R09: 0000000000000000
[  278.501266][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.501280][ T8053] R13: 00007f6054b66038 R14: 00007f6054b65fa0 R15: 00007fff12768f88
[  278.501315][ T8053]  </TASK>
[  279.037199][   T10] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  279.054729][   T10] usb 2-1: USB disconnect, device number 23
[  279.165335][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  279.165365][    C0] lec:lec_tx_timeout: lec0
[  279.165574][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  279.635940][  T993] usb 6-1: USB disconnect, device number 2
[  280.025502][ T5953] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  280.187685][ T5953] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  280.187707][ T5953] usb 1-1: config 0 has no interface number 0
[  280.187738][ T5953] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  280.190157][ T5953] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  280.190179][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.190194][ T5953] usb 1-1: Product: syz
[  280.190204][ T5953] usb 1-1: Manufacturer: syz
[  280.190215][ T5953] usb 1-1: SerialNumber: syz
[  280.264355][ T5953] usb 1-1: config 0 descriptor??
[  280.271428][ T8077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  280.284651][ T5953] usb-storage 1-1:0.20: USB Mass Storage device detected
[  280.321927][ T5953] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  280.462052][ T8094] hfsplus: unable to find HFS+ superblock
[  280.555477][ T5953] scsi host1: usb-storage 1-1:0.20
[  280.659995][ T8099] FAULT_INJECTION: forcing a failure.
[  280.659995][ T8099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  280.660022][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.1.643 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  280.660041][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  280.660051][ T8099] Call Trace:
[  280.660057][ T8099]  <TASK>
[  280.660064][ T8099]  dump_stack_lvl+0xe8/0x150
[  280.660092][ T8099]  should_fail_ex+0x46b/0x600
[  280.660122][ T8099]  _copy_from_user+0x2d/0xb0
[  280.660142][ T8099]  ___sys_recvmsg+0x175/0x590
[  280.660169][ T8099]  ? __pfx____sys_recvmsg+0x10/0x10
[  280.660217][ T8099]  ? __fget_files+0x3a6/0x420
[  280.660244][ T8099]  __x64_sys_recvmsg+0x1c0/0x2a0
[  280.660268][ T8099]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  280.660298][ T8099]  ? __pfx_ksys_write+0x10/0x10
[  280.660328][ T8099]  do_syscall_64+0x14d/0xf80
[  280.660350][ T8099]  ? trace_irq_disable+0x3b/0x150
[  280.660368][ T8099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.660385][ T8099]  ? clear_bhb_loop+0x40/0x90
[  280.660404][ T8099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.660421][ T8099] RIP: 0033:0x7f6b6e92c629
[  280.660435][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.660449][ T8099] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  280.660466][ T8099] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  280.660491][ T8099] RDX: 0000000000032120 RSI: 0000200000000380 RDI: 0000000000000003
[  280.660501][ T8099] RBP: 00007f6b6cb86090 R08: 0000000000000000 R09: 0000000000000000
[  280.660511][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.660520][ T8099] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  280.660543][ T8099]  </TASK>
[  280.996287][   T10] usb 1-1: USB disconnect, device number 16
[  281.143211][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'.
[  281.253566][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.253581][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.253673][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.253682][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.253772][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.253781][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.253880][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.253890][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.253980][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.253989][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254081][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254090][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254190][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254199][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254299][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254309][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254399][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254408][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254499][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254508][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254599][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254608][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254705][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254715][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254806][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254815][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.254905][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.254915][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.255005][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.255014][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.255111][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.255121][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.255217][ T8115] binder: BINDER_SET_CONTEXT_MGR already set
[  281.255226][ T8115] binder: 8114:8115 ioctl 40046207 0 returned -16
[  281.297980][ T8112] FAULT_INJECTION: forcing a failure.
[  281.297980][ T8112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.298072][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.0.649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  281.298128][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.298161][ T8112] Call Trace:
[  281.298182][ T8112]  <TASK>
[  281.298203][ T8112]  dump_stack_lvl+0xe8/0x150
[  281.298312][ T8112]  should_fail_ex+0x46b/0x600
[  281.298466][ T8112]  _copy_from_user+0x2d/0xb0
[  281.298532][ T8112]  ___sys_sendmsg+0x1c6/0x360
[  281.298620][ T8112]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.298772][ T8112]  ? __fget_files+0x2a/0x420
[  281.298836][ T8112]  ? __fget_files+0x3a6/0x420
[  281.298921][ T8112]  __x64_sys_sendmsg+0x1c3/0x2a0
[  281.298998][ T8112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  281.299087][ T8112]  ? __pfx_ksys_write+0x10/0x10
[  281.299183][ T8112]  do_syscall_64+0x14d/0xf80
[  281.299250][ T8112]  ? trace_irq_disable+0x3b/0x150
[  281.299307][ T8112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.299363][ T8112]  ? clear_bhb_loop+0x40/0x90
[  281.299434][ T8112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.299483][ T8112] RIP: 0033:0x7f97e7f2c629
[  281.299529][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.299596][ T8112] RSP: 002b:00007f97e617e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.299649][ T8112] RAX: ffffffffffffffda RBX: 00007f97e81a5fa0 RCX: 00007f97e7f2c629
[  281.299697][ T8112] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007
[  281.299741][ T8112] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  281.299794][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.299843][ T8112] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  281.299926][ T8112]  </TASK>
[  281.365351][ T5953] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  281.531039][ T5953] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  281.531067][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.531086][ T5953] usb 2-1: config 0 has no interface number 0
[  281.531118][ T5953] usb 2-1: config 0 interface 153 has no altsetting 0
[  281.597707][ T5953] usb 2-1: string descriptor 0 read error: -22
[  281.597856][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  281.597881][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.796335][ T5953] usb 2-1: config 0 descriptor??
[  281.822265][ T5953] uvcvideo 2-1:0.153: probe with driver uvcvideo failed with error -22
[  282.240690][   T37] audit: type=1326 audit(1772056430.647:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.240750][   T37] audit: type=1326 audit(1772056430.647:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.240800][   T37] audit: type=1326 audit(1772056430.647:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.240848][   T37] audit: type=1326 audit(1772056430.647:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.240904][   T37] audit: type=1326 audit(1772056430.647:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.240954][   T37] audit: type=1326 audit(1772056430.657:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.241002][   T37] audit: type=1326 audit(1772056430.657:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  282.295351][   T37] audit: type=1326 audit(1772056430.707:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf2a5acece code=0x7ffc0000
[  282.295409][   T37] audit: type=1326 audit(1772056430.707:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf2a5acece code=0x7ffc0000
[  282.295456][   T37] audit: type=1326 audit(1772056430.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.5.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf2a5acece code=0x7ffc0000
[  282.741158][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.656'.
[  282.772128][  T993] usb 2-1: USB disconnect, device number 24
[  283.016399][ T8157] tmpfs: Unknown parameter 'no'
[  283.075943][ T8154] /dev/nullb0: Can't open blockdev
[  283.462538][ T8177] vivid-003: =================  START STATUS  =================
[  283.462658][ T8177] vivid-003: Radio HW Seek Mode: Bounded
[  283.462693][ T8177] vivid-003: Radio Programmable HW Seek: false
[  283.462715][ T8177] vivid-003: RDS Rx I/O Mode: Block I/O
[  283.462736][ T8177] vivid-003: Generate RBDS Instead of RDS: false
[  283.462758][ T8177] vivid-003: RDS Reception: true
[  283.462778][ T8177] vivid-003: RDS Program Type: 0 inactive
[  283.462805][ T8177] vivid-003: RDS PS Name:  inactive
[  283.462829][ T8177] vivid-003: RDS Radio Text:  inactive
[  283.462854][ T8177] vivid-003: RDS Traffic Announcement: false inactive
[  283.462880][ T8177] vivid-003: RDS Traffic Program: false inactive
[  283.462906][ T8177] vivid-003: RDS Music: false inactive
[  283.462932][ T8177] vivid-003: ==================  END STATUS  ==================
[  283.770641][ T8187] FAULT_INJECTION: forcing a failure.
[  283.770641][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.770677][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.1.668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  283.770702][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  283.770715][ T8187] Call Trace:
[  283.770723][ T8187]  <TASK>
[  283.770732][ T8187]  dump_stack_lvl+0xe8/0x150
[  283.770772][ T8187]  should_fail_ex+0x46b/0x600
[  283.770811][ T8187]  _copy_from_user+0x2d/0xb0
[  283.770839][ T8187]  __sys_bpf+0x229/0x950
[  283.770868][ T8187]  ? __pfx___sys_bpf+0x10/0x10
[  283.770892][ T8187]  ? rt_mutex_slowunlock+0x1cb/0x300
[  283.770941][ T8187]  ? ksys_write+0x248/0x270
[  283.770974][ T8187]  ? __pfx_ksys_write+0x10/0x10
[  283.771012][ T8187]  __x64_sys_bpf+0x7c/0x90
[  283.771037][ T8187]  do_syscall_64+0x14d/0xf80
[  283.771064][ T8187]  ? trace_irq_disable+0x3b/0x150
[  283.771088][ T8187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.771111][ T8187]  ? clear_bhb_loop+0x40/0x90
[  283.771137][ T8187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.771158][ T8187] RIP: 0033:0x7f6b6e92c629
[  283.771178][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.771197][ T8187] RSP: 002b:00007f6b6cb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  283.771220][ T8187] RAX: ffffffffffffffda RBX: 00007f6b6eba5fa0 RCX: 00007f6b6e92c629
[  283.771236][ T8187] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  283.771249][ T8187] RBP: 00007f6b6cb86090 R08: 0000000000000000 R09: 0000000000000000
[  283.771263][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.771275][ T8187] R13: 00007f6b6eba6038 R14: 00007f6b6eba5fa0 R15: 00007ffd9b9579d8
[  283.771308][ T8187]  </TASK>
[  284.175474][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  284.175508][    C0] lec:lec_tx_timeout: lec0
[  284.175588][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  284.725932][ T8204] hfsplus: unable to find HFS+ superblock
[  285.014693][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.678'.
[  285.039121][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.678'.
[  287.300247][   T37] kauditd_printk_skb: 150 callbacks suppressed
[  287.300284][   T37] audit: type=1326 audit(1772056435.657:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.5.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf2a5acece code=0x7ffc0000
[  287.466920][   T37] audit: type=1326 audit(1772056435.737:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.5.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  287.515455][   T37] audit: type=1326 audit(1772056435.927:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.5.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faf2a5ec629 code=0x7ffc0000
[  288.497083][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  288.645435][   T10] usb 2-1: Using ep0 maxpacket: 32
[  288.648252][   T10] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  288.648277][   T10] usb 2-1: config 0 has no interface number 0
[  288.648321][   T10] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.648348][   T10] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.648370][   T10] usb 2-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  288.648413][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  288.648437][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.865370][   T10] usb 2-1: config 0 descriptor??
[  289.199910][ T8279] ªªªªªª: renamed from vlan0 (while UP)
[  289.713731][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms
[  289.713757][    C0] lec:lec_tx_timeout: lec0
[  289.714182][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  290.096045][   T10] logitech-djreceiver 0003:046D:C537.000E: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.1-1/input6
[  290.254076][   T10] usb 2-1: USB disconnect, device number 25
[  290.480797][ T8288] fido_id[8288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  290.782583][ T8299] FAULT_INJECTION: forcing a failure.
[  290.782583][ T8299] name failslab, interval 1, probability 0, space 0, times 0
[  290.782621][ T8299] CPU: 0 UID: 49663 PID: 8299 Comm: syz.0.697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  290.782646][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  290.782660][ T8299] Call Trace:
[  290.782668][ T8299]  <TASK>
[  290.782678][ T8299]  dump_stack_lvl+0xe8/0x150
[  290.782718][ T8299]  should_fail_ex+0x46b/0x600
[  290.782767][ T8299]  should_failslab+0xa8/0x100
[  290.782805][ T8299]  kmem_cache_alloc_noprof+0x87/0x680
[  290.782838][ T8299]  ? lockdep_hardirqs_on+0x7a/0x110
[  290.782867][ T8299]  ? do_getname+0x2e/0x250
[  290.782894][ T8299]  do_getname+0x2e/0x250
[  290.782915][ T8299]  ? getname_flags+0x11/0x20
[  290.782940][ T8299]  do_sys_openat2+0xca/0x200
[  290.782971][ T8299]  ? __pfx_do_sys_openat2+0x10/0x10
[  290.782999][ T8299]  ? ksys_write+0x248/0x270
[  290.783033][ T8299]  ? __pfx_ksys_write+0x10/0x10
[  290.783069][ T8299]  __x64_sys_openat+0x138/0x170
[  290.783101][ T8299]  do_syscall_64+0x14d/0xf80
[  290.783129][ T8299]  ? trace_irq_disable+0x3b/0x150
[  290.783156][ T8299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.783179][ T8299]  ? clear_bhb_loop+0x40/0x90
[  290.783208][ T8299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.783231][ T8299] RIP: 0033:0x7f97e7f2c629
[  290.783252][ T8299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.783272][ T8299] RSP: 002b:00007f97e617e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  290.783297][ T8299] RAX: ffffffffffffffda RBX: 00007f97e81a5fa0 RCX: 00007f97e7f2c629
[  290.783315][ T8299] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  290.783331][ T8299] RBP: 00007f97e617e090 R08: 0000000000000000 R09: 0000000000000000
[  290.783345][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.783359][ T8299] R13: 00007f97e81a6038 R14: 00007f97e81a5fa0 R15: 00007ffd540d6a38
[  290.783395][ T8299]  </TASK>
[  292.625436][   T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  292.815534][   T10] usb 1-1: device descriptor read/64, error -71
[  293.132129][   T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  293.185508][ T6010] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  293.296238][   T10] usb 1-1: device descriptor read/64, error -71
[  293.396319][ T6010] usb 5-1: Using ep0 maxpacket: 32
[  293.398190][ T6010] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  293.398208][ T6010] usb 5-1: config 0 has no interface number 0
[  293.398238][ T6010] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.398257][ T6010] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.398273][ T6010] usb 5-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  293.398304][ T6010] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  293.398320][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.401905][ T6010] usb 5-1: config 0 descriptor??
[  293.406825][   T10] usb usb1-port1: attempt power cycle
[  293.755449][   T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  293.776509][   T10] usb 1-1: device descriptor read/8, error -71
[  293.800218][ T8343] netlink: 'syz.1.704': attribute type 5 has an invalid length.
[  293.910729][ T6010] logitech-djreceiver 0003:046D:C537.000F: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input6
[  294.015421][   T10] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  294.029867][ T6010] usb 5-1: USB disconnect, device number 18
[  294.037707][   T10] usb 1-1: device descriptor read/8, error -71
[  294.082116][ T8375] fido_id[8375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  294.158927][   T10] usb usb1-port1: unable to enumerate USB device
[  294.221526][ T8380] netlink: 'syz.3.715': attribute type 1 has an invalid length.
[  294.298922][ T8382] FAULT_INJECTION: forcing a failure.
[  294.298922][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.298950][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  294.298969][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  294.298979][ T8382] Call Trace:
[  294.298985][ T8382]  <TASK>
[  294.298992][ T8382]  dump_stack_lvl+0xe8/0x150
[  294.299021][ T8382]  should_fail_ex+0x46b/0x600
[  294.299052][ T8382]  _copy_from_user+0x2d/0xb0
[  294.299071][ T8382]  ___sys_sendmsg+0x1c6/0x360
[  294.299098][ T8382]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.299144][ T8382]  ? __fget_files+0x2a/0x420
[  294.299163][ T8382]  ? __fget_files+0x3a6/0x420
[  294.299189][ T8382]  __x64_sys_sendmsg+0x1c3/0x2a0
[  294.299212][ T8382]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.299241][ T8382]  ? __pfx_ksys_write+0x10/0x10
[  294.299271][ T8382]  do_syscall_64+0x14d/0xf80
[  294.299293][ T8382]  ? trace_irq_disable+0x3b/0x150
[  294.299312][ T8382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.299329][ T8382]  ? clear_bhb_loop+0x40/0x90
[  294.299378][ T8382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.299394][ T8382] RIP: 0033:0x7f60548ec629
[  294.299409][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.299423][ T8382] RSP: 002b:00007f6052b25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.299440][ T8382] RAX: ffffffffffffffda RBX: 00007f6054b66090 RCX: 00007f60548ec629
[  294.299453][ T8382] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  294.299463][ T8382] RBP: 00007f6052b25090 R08: 0000000000000000 R09: 0000000000000000
[  294.299473][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.299483][ T8382] R13: 00007f6054b66128 R14: 00007f6054b66090 R15: 00007fff12768f88
[  294.299507][ T8382]  </TASK>
[  294.648384][ T8380] bond1: entered promiscuous mode
[  294.672773][ T8380] 8021q: adding VLAN 0 to HW filter on device bond1
[  294.929359][ T8389] netlink: 'syz.1.717': attribute type 1 has an invalid length.
[  295.021527][ T8389] bond1: entered promiscuous mode
[  295.022012][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1
[  295.050794][ T8394] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  295.050823][ T8394] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  295.050842][ T8394] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  295.055001][ T8393] hfsplus: unable to find HFS+ superblock
[  295.245502][ T6010] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  295.519821][ T8405] forcing mempool usage for bio_alloc_bioset+0x363/0x11c0
[  295.537281][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  295.537323][    C0] lec:lec_tx_timeout: lec0
[  295.537589][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  295.958166][ T8418] FAULT_INJECTION: forcing a failure.
[  295.958166][ T8418] name failslab, interval 1, probability 0, space 0, times 0
[  295.958203][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.5.726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  295.958228][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.958242][ T8418] Call Trace:
[  295.958251][ T8418]  <TASK>
[  295.958261][ T8418]  dump_stack_lvl+0xe8/0x150
[  295.958301][ T8418]  should_fail_ex+0x46b/0x600
[  295.958344][ T8418]  should_failslab+0xa8/0x100
[  295.958382][ T8418]  __kmalloc_noprof+0xdf/0x7b0
[  295.958423][ T8418]  ? kfree+0x4d/0x6c0
[  295.958451][ T8418]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  295.958503][ T8418]  tomoyo_realpath_from_path+0xe3/0x5d0
[  295.958549][ T8418]  ? tomoyo_path_number_perm+0x219/0x630
[  295.958582][ T8418]  tomoyo_path_number_perm+0x246/0x630
[  295.958615][ T8418]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  295.958647][ T8418]  ? __lock_acquire+0x6b5/0x2cf0
[  295.958705][ T8418]  ? __fget_files+0x2a/0x420
[  295.958736][ T8418]  ? __fget_files+0x2a/0x420
[  295.958761][ T8418]  ? __fget_files+0x3a6/0x420
[  295.958788][ T8418]  ? __fget_files+0x2a/0x420
[  295.958818][ T8418]  security_file_ioctl+0xc3/0x2a0
[  295.958852][ T8418]  __se_sys_ioctl+0x47/0x170
[  295.958889][ T8418]  do_syscall_64+0x14d/0xf80
[  295.958918][ T8418]  ? trace_irq_disable+0x3b/0x150
[  295.958945][ T8418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.958968][ T8418]  ? clear_bhb_loop+0x40/0x90
[  295.958996][ T8418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.959018][ T8418] RIP: 0033:0x7faf2a5ec629
[  295.959040][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.959061][ T8418] RSP: 002b:00007faf28846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.959085][ T8418] RAX: ffffffffffffffda RBX: 00007faf2a865fa0 RCX: 00007faf2a5ec629
[  295.959102][ T8418] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003
[  295.959115][ T8418] RBP: 00007faf28846090 R08: 0000000000000000 R09: 0000000000000000
[  295.959129][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.959142][ T8418] R13: 00007faf2a866038 R14: 00007faf2a865fa0 R15: 00007fff62deb458
[  295.959178][ T8418]  </TASK>
[  295.969240][ T8418] ERROR: Out of memory at tomoyo_realpath_from_path.
[  296.565477][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  296.705449][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  296.732149][    T9] usb 2-1: Using ep0 maxpacket: 32
[  296.741902][    T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  296.741933][    T9] usb 2-1: config 0 has no interface number 0
[  296.741981][    T9] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.742009][    T9] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.742033][    T9] usb 2-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  296.742076][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  296.742099][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.535555][    T9] usb 2-1: config 0 descriptor??
[  297.611846][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  297.611878][   T10] usb 5-1: config 0 has no interface number 0
[  297.630910][   T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  297.631002][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.631027][   T10] usb 5-1: Product: syz
[  297.631043][   T10] usb 5-1: Manufacturer: syz
[  297.631060][   T10] usb 5-1: SerialNumber: syz
[  297.723832][   T10] usb 5-1: config 0 descriptor??
[  298.328634][   T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  298.397091][ T8449] usb 5-1: dvb_usb_ec168: I2C read not implemented
[  298.398895][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  298.402996][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  298.403320][   T10] usb 5-1: media controller created
[  298.674243][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  299.087859][    T9] logitech-djreceiver 0003:046D:C537.0010: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.1-1/input6
[  299.299963][    T9] usb 2-1: USB disconnect, device number 26
[  299.325513][   T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  299.406934][ T5889] BUG: kernel NULL pointer dereference, address: 0000000000000010
[  299.406954][ T5889] #PF: supervisor read access in kernel mode
[  299.406966][ T5889] #PF: error_code(0x0000) - not-present page
[  299.406978][ T5889] PGD 800000001ff7e067 P4D 800000001ff7e067 PUD 0 
[  299.407006][ T5889] Oops: Oops: 0000 [#1] SMP KASAN PTI
[  299.407026][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  299.407047][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.407059][ T5889] Workqueue: usb_hub_wq hub_event
[  299.407087][ T5889] RIP: 0010:kcov_remote_start+0x2a1/0x710
[  299.407110][ T5889] Code: 7f 8d 4c 8b b8 18 64 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e1 db e2 02 84 c0 74 0e 49 8b 07 49
[  299.407126][ T5889] RSP: 0018:ffffc90004fd77e8 EFLAGS: 00010207
[  299.407140][ T5889] RAX: 0000000000000000 RBX: ffff888038a3dac0 RCX: 0000000000000000
[  299.407153][ T5889] RDX: 00000000d52bf500 RSI: 0000000000000001 RDI: ffffffff8ba643a0
[  299.407176][ T5889] RBP: 0000000000100000 R08: ffffffff8b241250 R09: ffffffff8ddcd780
[  299.407188][ T5889] R10: dffffc0000000000 R11: fffffbfff1ed44b7 R12: 0000000000000002
[  299.407200][ T5889] R13: 0000000000000001 R14: ffff888034754700 R15: 0000000000000000
[  299.407211][ T5889] FS:  0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000
[  299.407224][ T5889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  299.407236][ T5889] CR2: 0000000000000010 CR3: 0000000035dce000 CR4: 00000000003526f0
[  299.407250][ T5889] Call Trace:
[  299.407256][ T5889]  <TASK>
[  299.407264][ T5889]  hub_event+0x150/0x4f60
[  299.407288][ T5889]  ? __lock_acquire+0x6b5/0x2cf0
[  299.407310][ T5889]  ? __lock_acquire+0x6b5/0x2cf0
[  299.407325][ T5889]  ? look_up_lock_class+0x57/0x110
[  299.407351][ T5889]  ? register_lock_class+0x31/0x2e0
[  299.407384][ T5889]  ? __lock_acquire+0x6b5/0x2cf0
[  299.407407][ T5889]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  299.407431][ T5889]  ? __pfx_hub_event+0x10/0x10
[  299.407456][ T5889]  ? process_scheduled_works+0xa25/0x1830
[  299.407480][ T5889]  ? process_scheduled_works+0xa25/0x1830
[  299.407502][ T5889]  process_scheduled_works+0xb02/0x1830
[  299.407534][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.407559][ T5889]  ? assign_work+0x3d5/0x5e0
[  299.407582][ T5889]  worker_thread+0xa50/0xfc0
[  299.407614][ T5889]  kthread+0x388/0x470
[  299.407630][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  299.407652][ T5889]  ? __pfx_kthread+0x10/0x10
[  299.407668][ T5889]  ret_from_fork+0x51e/0xb90
[  299.407693][ T5889]  ? __pfx_ret_from_fork+0x10/0x10
[  299.407715][ T5889]  ? __switch_to+0xc7d/0x1450
[  299.407753][ T5889]  ? __pfx_kthread+0x10/0x10
[  299.407770][ T5889]  ret_from_fork_asm+0x1a/0x30
[  299.407793][ T5889]  </TASK>
[  299.407799][ T5889] Modules linked in:
[  299.407817][ T5889] CR2: 0000000000000010
[  299.407833][ T5889] ---[ end trace 0000000000000000 ]---
[  299.407842][ T5889] RIP: 0010:kcov_remote_start+0x2a1/0x710
[  299.407863][ T5889] Code: 7f 8d 4c 8b b8 18 64 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e1 db e2 02 84 c0 74 0e 49 8b 07 49
[  299.407878][ T5889] RSP: 0018:ffffc90004fd77e8 EFLAGS: 00010207
[  299.407892][ T5889] RAX: 0000000000000000 RBX: ffff888038a3dac0 RCX: 0000000000000000
[  299.407904][ T5889] RDX: 00000000d52bf500 RSI: 0000000000000001 RDI: ffffffff8ba643a0
[  299.407916][ T5889] RBP: 0000000000100000 R08: ffffffff8b241250 R09: ffffffff8ddcd780
[  299.407929][ T5889] R10: dffffc0000000000 R11: fffffbfff1ed44b7 R12: 0000000000000002
[  299.407941][ T5889] R13: 0000000000000001 R14: ffff888034754700 R15: 0000000000000000
[  299.407953][ T5889] FS:  0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000
[  299.407967][ T5889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  299.407979][ T5889] CR2: 0000000000000010 CR3: 0000000035dce000 CR4: 00000000003526f0
[  299.407996][ T5889] Kernel panic - not syncing: Fatal exception
[  299.408602][ T5889] Kernel Offset: disabled