last executing test programs:

2m48.437658088s ago: executing program 4 (id=879):
r0 = fsopen(&(0x7f00000002c0)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x80080, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c1b5b824001800000c1800", @ANYRES32=r0, @ANYRES8=r2], 0x3c}}, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r3 = openat(r1, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000200)=ANY=[], 0x32)
syz_io_uring_setup(0x2033f6, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='minix\x00', 0x1000000, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80080, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="78e2faf79014ea52b11602badba8c0d86ff8dc0a"], 0x0}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r7], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)="ec48cb8b9fdbd829eacc68b3b3ecf19955d0779bae6e3810f91b4380509083825e3629e26bb664fe36cfe4f364c1e22a6ca2b00d49b89c56b6c1e4c1ae46c1ec65abe2a7c011e0a8ea36534500"/86, 0x56}, {&(0x7f00000009c0)="4080ab6294c34d46542ed3ad2c21e311708290de3c76dc0d8dba09f897e359badfa0d29d12cf9fe7e7a3b289f96d3645301ed84cbbcc69d5926eb29a8ac0d0e13b2143f32103a4412a741718cbcdc8fa353e6fdd1217781a7f10b7271276ae81bc8acc408a6f7180a736718eb8a5e3967718c458bc204ce6f3738812ab1dbf0761dd371a48f2d75caf05afd73b78529c0f63f5c34b7548ecae385207202fec9a1b6cda3d0ea55f3bbf1c7214c116c2ac9fcf6322d3680df599ce6fbc57", 0xfffffffffffffc49}, {&(0x7f0000000a80)="72df9aef4b61eda8b972e9f423db73cdd89762f979e857907cbb857d0fa27306ccbd7d867076d2387506e095ab1ad969a202db9a8c1839f9937a48dde8297584fc53dddcad26fdc8a1c1be6ca5f85c2ec9aebd571c6df0bb4731bb6526391e6d796a0826ded983", 0x67}], 0x3}, 0x40000c0)

2m44.889519473s ago: executing program 4 (id=887):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60004000002806fffe800000000000000000000000000034fe8000000000000000000000000000aa4e240080", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000003907800001312d4c405c93a0725282307180000"], 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
fchown(r2, 0xee01, 0x0)
listen(r2, 0x50)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x20, 0x22, 0x81, {0x81, 0x30, "96cc9fb60bbe8dfa233b879e8da6e40b39ae6736ac8f3ab93ced8868a44dfe695c700ab7ef50c9ad6a37209dfbc98eae340fc929dca4c0de2f6e842ddc4d3fb6f3d1b02d777cbf178fbeddc9e12ac173414a6f866d56df2f3d63a3fcdf3ddc9d98c11fc697cb4544b80ffca60ed09da91c0d91bd8ca7ca605f86badbf135f5"}}, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="20d120cae700565b1ae061d34fa004af6166cdb8c5e620e477f3d3d078065318e88e"], 0x0})
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x159)
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = socket$inet6(0xa, 0x80000, 0x9)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000280)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x150}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x87)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_setscheduler(r7, 0x6, &(0x7f0000000140)=0x200)

2m40.528790876s ago: executing program 4 (id=898):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)="6b5ea0cd1875b2392d60a125a1c7615bb46c14ea1cf15579bd13ba06366b7048df4c7733ee496067e98159e59cf4a6fb7da0030425502c90e481045e4681b847a8afd64063b414b7a8825e27231ec2bfe7683d181bdcf9ef15dffef3a0b137b51917f3032beb50dcf20502bbbc4313880bf41b67e69b68b29d26f0cd57122d017f4107af", 0x84}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0)
ioctl(r1, 0x1, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000080))
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x900}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)="6b5ea0cd1875b2392d60a125a1c7615bb46c14ea1cf15579bd13ba06366b7048df4c7733ee496067e98159e59cf4a6fb7da0030425502c90e481045e4681b847a8afd64063b414b7a8825e27231ec2bfe7683d181bdcf9ef15dffef3a0b137b51917f3032beb50dcf20502bbbc4313880bf41b67e69b68b29d26f0cd57122d017f4107af", 0x84}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) (async)
ioctl(r1, 0x1, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
chdir(0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000080)) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x900}, 0x0) (async)

2m37.888800981s ago: executing program 4 (id=903):
sched_setscheduler(0x0, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
bind$phonet(r0, 0x0, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x5000)
shmctl$SHM_LOCK(r2, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
io_setup(0x9, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2m34.629155679s ago: executing program 4 (id=908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=<r2=>0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1000004)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10)
rseq(0x0, 0x0, 0xfffffffffffffffc, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

2m33.989393691s ago: executing program 4 (id=914):
r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=<r1=>0x0)
sched_setscheduler(r1, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0x38)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x2c47f4, 0x5c8, 0x7fffffff, 0x6})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)

2m18.725153254s ago: executing program 32 (id=914):
r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=<r1=>0x0)
sched_setscheduler(r1, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0x38)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x2c47f4, 0x5c8, 0x7fffffff, 0x6})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)

1m4.362168228s ago: executing program 3 (id=1097):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0)

59.434188814s ago: executing program 3 (id=1109):
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socketpair(0x6, 0x80000, 0x8, &(0x7f0000000180)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r7, 0x8, 0x1) (async)
getdents64(r7, &(0x7f0000000280)=""/158, 0x9e) (async)
ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f00000001c0)) (async, rerun: 64)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x40}, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061142000f5ff000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

56.917005198s ago: executing program 3 (id=1113):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ptrace$pokeuser(0x6, r2, 0x358, 0x7fffffffefff)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')

56.245245495s ago: executing program 3 (id=1114):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000035cc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240080a0)

55.82765389s ago: executing program 3 (id=1117):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893", 0x10}], 0x1}], 0x1, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = accept(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000)
write$FUSE_STATFS(r5, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0xfff, 0xffffffff, 0x40, 0x100000000, 0xbdd, 0x8001, 0x1, 0xd93}}}, 0x60)

53.35559143s ago: executing program 3 (id=1122):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x0, 0x4e22, 0x8}}}}}, 0x0)
close(r2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="401701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x20, 0x5, 0xf9, {0xf9, 0x2, "e77fd36cd0b2d441ad16ba6eaa5aad3adebe85e82f0ac7b3ff62241e7455ac525044a86076c4957a8e444e418bb6fe522cdbc76bbe76219aebbf09e3ac755da84057aedf42fd79285f32d2058c5555074a4ff8bd6638814255f3ecd8c4d56ecd12e60a255b6a9a78b0951af1e0687077b3a7b3f05000ddbe0cc7e986d23bc60369db9ad386b56e71787085ecf489c17c7f636cb59bc21789eaa559d87af9d59367d17c21ab2f3fe98e78fd35e44367f9687ea07bc7f0b7f7c75def23a5d6827696317a9799b5a2f604c72087463cbc3c0086126909da1ad404401a80d57762829af14482813ad2d7506b2987f4a4fc882d12660c568c71"}}, &(0x7f00000003c0)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "7f806efa78c1ddee6dc629fa4902f1c253cfc596fc09ba01abf1ec704efc1ef71279991db22b7a5d1846e12eb2114802cd64bd0f969936b7488670dda650d5434eb2a0ab38a5626cb63c58c3bfa463342c979d713a6716c485d27bbf4fb55273d77ac40c7ec35b29c10034fd0c8be0f1e86424400def88e1b8c9411aeb388eb2b6b35a926d4452b2a4a5e9acf3a029aacb3dc480912bdcbdf8d17e2992b26c967f4d436aa81a5ac8841307faff2b244327525559a3c743c453a7b4b80ac05aeab25325"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000580)={0x0, 0x11, 0xcf, "e232a96077a6ba8db88ce1a4cdb7ac9c7aada5201965fa1c31100b47928d235c8aa4cc63e9c4bc286c32f0848a8f2b73abe71242fa9cdfd143f73323758a8d7e9ca0a223798a7307401fbf2a9d5582a1961ebcb20aef7e20f5560d194d99dc9e202f68007455ca2ec53846d4527c3962defcb9701e396c82ae7b885d1d783deb688f86420de2aa95b33c925bc992070f1153b684f10dd4e7775a1428d50a23fdce84b5a3cb04ac8b3489b4336030aa544795b67484b54fffa54e44d05f3a791969b506876d34af1028c53fd46bfc83"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000001c0)={0x20, 0x0, 0x2b, {0x29, "f8ebd5558eb9a0d8c00105565cedeb03e919951f6840aded9f2eed1f644e24b23b5223cbd952fc9b21"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xc1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

37.764903129s ago: executing program 33 (id=1122):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x0, 0x4e22, 0x8}}}}}, 0x0)
close(r2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="401701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x20, 0x5, 0xf9, {0xf9, 0x2, "e77fd36cd0b2d441ad16ba6eaa5aad3adebe85e82f0ac7b3ff62241e7455ac525044a86076c4957a8e444e418bb6fe522cdbc76bbe76219aebbf09e3ac755da84057aedf42fd79285f32d2058c5555074a4ff8bd6638814255f3ecd8c4d56ecd12e60a255b6a9a78b0951af1e0687077b3a7b3f05000ddbe0cc7e986d23bc60369db9ad386b56e71787085ecf489c17c7f636cb59bc21789eaa559d87af9d59367d17c21ab2f3fe98e78fd35e44367f9687ea07bc7f0b7f7c75def23a5d6827696317a9799b5a2f604c72087463cbc3c0086126909da1ad404401a80d57762829af14482813ad2d7506b2987f4a4fc882d12660c568c71"}}, &(0x7f00000003c0)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "7f806efa78c1ddee6dc629fa4902f1c253cfc596fc09ba01abf1ec704efc1ef71279991db22b7a5d1846e12eb2114802cd64bd0f969936b7488670dda650d5434eb2a0ab38a5626cb63c58c3bfa463342c979d713a6716c485d27bbf4fb55273d77ac40c7ec35b29c10034fd0c8be0f1e86424400def88e1b8c9411aeb388eb2b6b35a926d4452b2a4a5e9acf3a029aacb3dc480912bdcbdf8d17e2992b26c967f4d436aa81a5ac8841307faff2b244327525559a3c743c453a7b4b80ac05aeab25325"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000580)={0x0, 0x11, 0xcf, "e232a96077a6ba8db88ce1a4cdb7ac9c7aada5201965fa1c31100b47928d235c8aa4cc63e9c4bc286c32f0848a8f2b73abe71242fa9cdfd143f73323758a8d7e9ca0a223798a7307401fbf2a9d5582a1961ebcb20aef7e20f5560d194d99dc9e202f68007455ca2ec53846d4527c3962defcb9701e396c82ae7b885d1d783deb688f86420de2aa95b33c925bc992070f1153b684f10dd4e7775a1428d50a23fdce84b5a3cb04ac8b3489b4336030aa544795b67484b54fffa54e44d05f3a791969b506876d34af1028c53fd46bfc83"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000001c0)={0x20, 0x0, 0x2b, {0x29, "f8ebd5558eb9a0d8c00105565cedeb03e919951f6840aded9f2eed1f644e24b23b5223cbd952fc9b21"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xc1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

23.898749994s ago: executing program 2 (id=1168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x10000000, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x16, 0x1}})

23.182424091s ago: executing program 2 (id=1170):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$unix(r2, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)

21.544597772s ago: executing program 2 (id=1171):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="7f", 0x1}], 0x1}}], 0x2, 0x8000)
socket$inet6(0xa, 0x5, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045519, &(0x7f0000000480)=0x1)

18.754496168s ago: executing program 2 (id=1175):
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
r0 = memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x8}, 0x7ff})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xb3\xbb\x00\x00\x00\x00\x00\x00m\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x96\x0e=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe1\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80%\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0xcef331cbce4fac1b)
write$binfmt_elf64(r0, 0x0, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0xdc62, [0x200, 0xffff, 0x2efe, 0x30, 0x0, 0x80, 0x0, 0xd698, 0x7fff, 0x81, 0x0, 0x6, 0xfffe, 0x2, 0x4, 0x5195, 0x9, 0x0, 0x6404, 0x101, 0x2, 0x0, 0x7, 0xfff, 0x0, 0xfff, 0x2f5, 0x5, 0x0, 0xd5, 0x7, 0xd, 0x0, 0x3d4, 0x1004, 0x5, 0x9, 0xfff, 0x200, 0x6, 0xe, 0xfff8, 0x9, 0x3, 0x1, 0xd4, 0x1ff, 0x7]}})
execveat(r3, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x100)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000940)=0x25b)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES16=r7, @ANYBLOB="000000000000000000e394a31300"], 0x14}, 0x1, 0x0, 0x0, 0x3000c0c0}, 0x0)

17.190933632s ago: executing program 0 (id=1179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x10000000, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x16, 0x1}})

16.907297864s ago: executing program 0 (id=1180):
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x160980001, 0x0, "bf5dff0f251765c214525a2572ce1ced49e8981e103268fadc1433ae00", 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

16.588891104s ago: executing program 0 (id=1181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x90}, 0x40)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
read$FUSE(r8, &(0x7f00000003c0)={0x2020}, 0x2020)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r9, r8, 0x0, 0x6)
ioctl$NBD_SET_SOCK(r7, 0xab00, r8)

13.999373529s ago: executing program 5 (id=1182):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
fchdir(0xffffffffffffffff)
truncate(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x2})
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
shutdown(0xffffffffffffffff, 0x0)

13.910861263s ago: executing program 2 (id=1184):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="7f", 0x1}], 0x1}}], 0x2, 0x8000)
socket$inet6(0xa, 0x5, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045519, &(0x7f0000000480)=0x1)

11.993992669s ago: executing program 5 (id=1186):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="7f", 0x1}], 0x1}}], 0x2, 0x8000)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045519, &(0x7f0000000480)=0x1)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0xffff, 0x40}, 0x0)
getpid()
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x40, 0x8, 0x2, 0xfd, 0xfe, 0x0, 0x0, 0x2, 0x1, 0x4}, 0xe)

11.207971619s ago: executing program 1 (id=1187):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd)
r4 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r7}, 0x10)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
close(r9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)

10.981788012s ago: executing program 0 (id=1188):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xe4b1ac8da1590d10)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0xa8000)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000500, 0x0, 0x51424752, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
r2 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
pread64(r2, 0x0, 0x0, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x20bf22, 0x0, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = open(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x800007ff, 0x0, {0x2, 0x3, 0xffffffffffffffdf, 0x0, 0x800000000040, 0x5, 0x20000200, 0x2, 0x42, 0x8000, 0x5, r7, r8, 0x43}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000000)='./file1\x00', 0x1)

9.23599298s ago: executing program 1 (id=1189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x10000000, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x16, 0x1}})

8.957460274s ago: executing program 5 (id=1190):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000000000))
r1 = socket(0x2c, 0x80000, 0x3c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
r7 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYRES16, @ANYBLOB="000229bd7000fddbdf2583000000", @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4ed8ee5a90e2bf26, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0xa1158d8e5aa1b959}, 0x0)

8.496992145s ago: executing program 1 (id=1191):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"])
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.433089378s ago: executing program 0 (id=1192):
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffe, 0xe1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, 0x0)
getpriority(0x2, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0xb03, 0x3, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffc32, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa64}]}]}, 0x40}}, 0x0)

8.432738806s ago: executing program 2 (id=1193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x40)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r8, r7, 0x0, 0x6)

7.50384036s ago: executing program 5 (id=1194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r4, @ANYRESOCT=r4], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x8881}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r8)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, r9, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffd}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x80)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)

2.875355264s ago: executing program 1 (id=1195):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
fchdir(0xffffffffffffffff)
truncate(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x2})
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
shutdown(0xffffffffffffffff, 0x0)

2.449844379s ago: executing program 1 (id=1196):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffff6}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(r0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r7, 0x80047453, &(0x7f00000000c0))

2.361004916s ago: executing program 0 (id=1197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x90}, 0x40)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r10, r9, 0x0, 0x6)
ioctl$NBD_SET_SOCK(r8, 0xab00, r9)

1.157221897s ago: executing program 1 (id=1198):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x14000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x1, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x16}}, ["", "", "", ""]}, 0x24}}, 0x40844)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1.126536283s ago: executing program 5 (id=1199):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8b}}, 0x10) (fail_nth: 2)

0s ago: executing program 5 (id=1200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x8, 0x0, &(0x7f00000006c0)="0000000000000005", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x10000000, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x16, 0x1}})

kernel console output (not intermixed with test programs):

3][ T8187] ufs: ufstype=old is supported read-only
[  343.728340][ T8187] ufs: ufs_fill_super(): bad magic number
[  344.158864][ T3076] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  344.209494][ T3076] usb 1-1: USB disconnect, device number 11
[  344.399185][   T24] usb 3-1: USB disconnect, device number 25
[  344.419700][   T24] cypress_m8 3-1:0.0: device disconnected
[  344.600928][ T8197] FAULT_INJECTION: forcing a failure.
[  344.600928][ T8197] name failslab, interval 1, probability 0, space 0, times 0
[  344.679583][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.0.543 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  344.679608][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.679617][ T8197] Call Trace:
[  344.679623][ T8197]  <TASK>
[  344.679630][ T8197]  dump_stack_lvl+0x189/0x250
[  344.679658][ T8197]  ? __pfx____ratelimit+0x10/0x10
[  344.679674][ T8197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.679697][ T8197]  ? __pfx__printk+0x10/0x10
[  344.679732][ T8197]  should_fail_ex+0x414/0x560
[  344.679752][ T8197]  should_failslab+0xa8/0x100
[  344.679778][ T8197]  __kmalloc_noprof+0xcb/0x4f0
[  344.679800][ T8197]  ? blk_rq_map_user_iov+0x153/0x18c0
[  344.679818][ T8197]  ? blk_rq_map_user_iov+0x3d3/0x18c0
[  344.679839][ T8197]  blk_rq_map_user_iov+0x3d3/0x18c0
[  344.679872][ T8197]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  344.679904][ T8197]  ? import_ubuf+0xfb/0x1d0
[  344.679927][ T8197]  blk_rq_map_user_io+0x252/0x3a0
[  344.679946][ T8197]  ? __pfx___mutex_trylock_common+0x10/0x10
[  344.679970][ T8197]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  344.679987][ T8197]  ? rcu_is_watching+0x15/0xb0
[  344.680012][ T8197]  ? sg_common_write+0xb85/0x13d0
[  344.680038][ T8197]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  344.680058][ T8197]  ? __pfx___mutex_lock+0x10/0x10
[  344.680074][ T8197]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  344.680090][ T8197]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  344.680119][ T8197]  ? sg_link_reserve+0x28e/0x540
[  344.680145][ T8197]  sg_common_write+0xcd8/0x13d0
[  344.680181][ T8197]  ? __pfx_sg_common_write+0x10/0x10
[  344.680213][ T8197]  sg_write+0xacd/0xea0
[  344.680240][ T8197]  ? __pfx_sg_write+0x10/0x10
[  344.680274][ T8197]  ? rcu_is_watching+0x15/0xb0
[  344.680321][ T8197]  ? __pfx_sg_write+0x10/0x10
[  344.680340][ T8197]  ? __pfx_sg_write+0x10/0x10
[  344.680360][ T8197]  ? vfs_write+0x261/0xa90
[  344.680383][ T8197]  ? __pfx_sg_write+0x10/0x10
[  344.680404][ T8197]  vfs_write+0x27b/0xa90
[  344.680431][ T8197]  ? __pfx_vfs_write+0x10/0x10
[  344.680453][ T8197]  ? __fget_files+0x2a/0x420
[  344.680470][ T8197]  ? __fget_files+0x2a/0x420
[  344.680483][ T8197]  ? __fget_files+0x3a0/0x420
[  344.680495][ T8197]  ? __fget_files+0x2a/0x420
[  344.680515][ T8197]  ksys_write+0x145/0x250
[  344.680538][ T8197]  ? __pfx_ksys_write+0x10/0x10
[  344.680556][ T8197]  ? rcu_is_watching+0x15/0xb0
[  344.680577][ T8197]  ? do_syscall_64+0xbe/0x3b0
[  344.680597][ T8197]  do_syscall_64+0xfa/0x3b0
[  344.680612][ T8197]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.680628][ T8197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.680643][ T8197]  ? clear_bhb_loop+0x60/0xb0
[  344.680661][ T8197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.680676][ T8197] RIP: 0033:0x7f948dd8e969
[  344.680690][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.680703][ T8197] RSP: 002b:00007f948eb4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  344.680724][ T8197] RAX: ffffffffffffffda RBX: 00007f948dfb5fa0 RCX: 00007f948dd8e969
[  344.680735][ T8197] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000004
[  344.680745][ T8197] RBP: 00007f948eb4c090 R08: 0000000000000000 R09: 0000000000000000
[  344.680754][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.680764][ T8197] R13: 0000000000000000 R14: 00007f948dfb5fa0 R15: 00007ffd6e7ad878
[  344.680786][ T8197]  </TASK>
[  345.275082][ T8205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  345.729046][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  345.729398][   T30] audit: type=1107 audit(1748592405.262:144): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='Z¯ÖwÚEOyd¾½Â1ðÆgŠqŠLÊPàd}x)ÆlªM=t%˜rŸÂv<‘f8bzd¹ÃÃmÀE/2c¦&ëR߆V¨Õ]˜K×w›¨ÊOdh’9½úöÀŽW1
[  345.729398][   T30] -­ˆ7âæ<Ê==”pŒ§û[’mÌ#�ÊVÝ~Dü­ª7_º.öC=m~›¿ÿË%l‹ç²ðœl*0 '
[  345.773445][ T8217] /dev/sg0: Can't lookup blockdev
[  346.517004][ T8230] xt_nat: multiple ranges no longer supported
[  346.576170][ T8230] syz.4.550: attempt to access beyond end of device
[  346.576170][ T8230] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0
[  346.590254][ T8230] hfs: can't find a HFS filesystem on dev nbd4
[  347.797750][ T5875] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  348.020129][ T8242] syz.4.554: attempt to access beyond end of device
[  348.020129][ T8242] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0
[  348.853628][ T5875] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  348.911083][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.962711][ T5875] usb 2-1: Product: syz
[  348.983629][ T5875] usb 2-1: Manufacturer: syz
[  348.995822][ T5875] usb 2-1: SerialNumber: syz
[  349.528284][ T5875] usb 2-1: config 0 descriptor??
[  349.547075][ T5875] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  349.588115][ T5875] nokiaca42v2 ttyUSB0: required endpoint is missing
[  350.061356][ T8252] netlink: 'syz.4.556': attribute type 18 has an invalid length.
[  350.300511][ T5893] usb 2-1: USB disconnect, device number 26
[  350.316787][ T5893] cypress_m8 2-1:0.0: device disconnected
[  350.460583][ T8262] loop7: detected capacity change from 0 to 16384
[  350.593717][ T8270] netlink: 76 bytes leftover after parsing attributes in process `syz.4.559'.
[  350.918185][ T5893] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  351.116202][  T977] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  351.152628][ T5893] usb 1-1: not running at top speed; connect to a high speed hub
[  351.164361][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0
[  351.190072][ T5893] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  351.201756][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.219695][ T5893] usb 1-1: Product: syz
[  351.235562][ T5893] usb 1-1: Manufacturer: syz
[  351.246246][ T5893] usb 1-1: SerialNumber: syz
[  351.286620][  T977] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  351.299894][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.359291][  T977] usb 5-1: Product: syz
[  351.363666][  T977] usb 5-1: Manufacturer: syz
[  351.378109][  T977] usb 5-1: SerialNumber: syz
[  351.405197][  T977] usb 5-1: config 0 descriptor??
[  351.451713][  T977] cypress_m8 5-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  351.500014][  T977] nokiaca42v2 ttyUSB0: required endpoint is missing
[  351.666088][  T977] usb 5-1: USB disconnect, device number 16
[  351.710290][ T8271] loop7: detected capacity change from 16384 to 0
[  351.718036][  T977] cypress_m8 5-1:0.0: device disconnected
[  351.770042][    C1] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0
[  351.854493][   T30] audit: type=1326 audit(1748592411.382:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  351.989771][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5
[  352.078685][   T30] audit: type=1326 audit(1748592411.382:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  352.122109][ T5174] bcm5974 1-1:1.0: could not read from device
[  352.152288][   T30] audit: type=1326 audit(1748592411.382:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  352.152357][ T5174] bcm5974 1-1:1.0: could not read from device
[  352.173869][    C0] vkms_vblank_simulate: vblank timer overrun
[  352.227316][ T5893] usb 1-1: USB disconnect, device number 12
[  352.272670][   T30] audit: type=1326 audit(1748592411.382:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  352.401978][   T30] audit: type=1326 audit(1748592411.382:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.073401][   T30] audit: type=1326 audit(1748592411.382:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.171514][   T30] audit: type=1326 audit(1748592411.382:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.280949][   T30] audit: type=1326 audit(1748592411.382:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.362922][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.403366][   T30] audit: type=1326 audit(1748592411.382:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.543935][   T30] audit: type=1326 audit(1748592411.382:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26dd8e969 code=0x7fc00000
[  353.614278][  T977] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  353.650680][ T8306] fuse: Bad value for 'rootmode'
[  353.747763][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  353.777374][  T977] usb 2-1: Using ep0 maxpacket: 16
[  353.784852][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.796321][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.806934][  T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  353.820482][  T977] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  353.829816][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.847320][  T977] usb 2-1: config 0 descriptor??
[  353.948356][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  354.518448][ T8314] xt_HMARK: proto mask must be zero with L3 mode
[  354.667412][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  356.418731][   T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  357.489209][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  357.498507][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.616312][   T24] usb 4-1: can't set config #27, error -71
[  357.719117][   T24] usb 4-1: USB disconnect, device number 25
[  357.796508][  T977] usbhid 2-1:0.0: can't add hid device: -71
[  357.901567][  T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  358.062172][  T977] usb 2-1: USB disconnect, device number 27
[  359.010568][ T8344] fuse: Bad value for 'rootmode'
[  359.212986][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  359.692218][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  359.740723][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  359.761268][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  359.771820][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  359.858293][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.345293][ T8342] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  360.421902][ T5893] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  360.453852][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  360.462433][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.508399][ T5893] usb 1-1: Product: syz
[  360.512658][ T5893] usb 1-1: Manufacturer: syz
[  360.541654][ T5893] usb 1-1: SerialNumber: syz
[  360.584840][ T5893] usb 1-1: config 0 descriptor??
[  360.611469][ T8355] vlan3: entered promiscuous mode
[  360.621018][ T5893] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  360.651171][ T5893] nokiaca42v2 ttyUSB0: required endpoint is missing
[  360.687669][ T8355] vlan2: entered promiscuous mode
[  360.695594][ T8355] erspan0: entered promiscuous mode
[  360.733772][ T5893] usb 5-1: USB disconnect, device number 18
[  360.819874][   T24] usb 1-1: USB disconnect, device number 13
[  360.842356][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.583'.
[  360.882668][ T8358] tipc: Started in network mode
[  360.910938][ T8358] tipc: Node identity b, cluster identity 3
[  360.923355][ T8358] tipc: Node number set to 11
[  360.932485][   T24] cypress_m8 1-1:0.0: device disconnected
[  361.348947][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'.
[  361.378134][ T5875] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  361.721395][ T5875] usb 2-1: Using ep0 maxpacket: 8
[  362.045941][ T5875] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  362.065461][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.184854][ T5875] pvrusb2: Hardware description: Terratec Grabster AV400
[  362.264316][ T5875] pvrusb2: **********
[  362.274378][ T5875] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  362.324732][ T5875] pvrusb2: Important functionality might not be entirely working.
[  362.447227][ T5875] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  362.605714][ T5875] pvrusb2: **********
[  362.639421][ T2342] pvrusb2: Invalid write control endpoint
[  362.839325][ T8358] pvrusb2: Invalid write control endpoint
[  362.876361][ T5902] usb 2-1: USB disconnect, device number 28
[  364.009559][ T8396] fuse: Unknown parameter 'use00000000000000000000'
[  364.525195][ T2342] pvrusb2: Invalid write control endpoint
[  364.563131][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  364.576547][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  364.584995][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  364.595764][ T2342] pvrusb2: Device being rendered inoperable
[  364.605390][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  364.613376][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  364.624720][ T2342] pvrusb2: Attached sub-driver cx25840
[  364.642327][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  364.664855][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  365.520908][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[  365.579872][ T5902] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  365.737356][ T5874] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  365.762941][ T5902] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  365.780480][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.799617][ T5902] usb 2-1: Product: syz
[  365.834761][ T5902] usb 2-1: Manufacturer: syz
[  365.848522][ T5902] usb 2-1: SerialNumber: syz
[  365.872352][ T5902] usb 2-1: config 0 descriptor??
[  365.908302][ T5902] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  365.918287][ T5874] usb 3-1: Using ep0 maxpacket: 32
[  365.928164][ T5874] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  365.939928][ T5902] nokiaca42v2 ttyUSB0: required endpoint is missing
[  365.957769][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.987230][ T5874] usb 3-1: config 0 has no interface number 0
[  366.004216][ T5874] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  366.045954][ T5874] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  366.077072][ T5874] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9
[  366.096879][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.125382][ T5874] usb 3-1: Product: syz
[  366.130285][ T5874] usb 3-1: Manufacturer: syz
[  366.142419][ T5874] usb 3-1: SerialNumber: syz
[  366.167680][ T5874] usb 3-1: config 0 descriptor??
[  366.179554][ T8415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  366.199418][ T5874] usb-storage 3-1:0.231: USB Mass Storage device detected
[  366.555636][ T5902] usb 3-1: USB disconnect, device number 26
[  366.748789][ T5874] usb 2-1: USB disconnect, device number 29
[  366.759465][ T5874] cypress_m8 2-1:0.0: device disconnected
[  367.207076][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.214838][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.518045][ T5874] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  367.603433][ T8446] bond0: left promiscuous mode
[  367.845635][ T8446] bond_slave_0: left promiscuous mode
[  367.907512][ T8446] bond_slave_1: left promiscuous mode
[  368.056225][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  368.075407][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  368.088855][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  368.105257][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  368.115537][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  368.124936][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.150395][ T5874] usb 2-1: config 0 descriptor??
[  368.423382][ T5874] hdpvr 2-1:0.0: firmware version 0x12 dated 
[  369.136715][ T5874] hdpvr 2-1:0.0: device init failed
[  369.188938][   T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  369.265756][ T5874] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  369.526267][   T43] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  369.578889][ T5874] usb 2-1: USB disconnect, device number 30
[  369.615450][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.738252][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.778524][   T43] usb 5-1: config 0 descriptor??
[  369.800286][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.390912][   T43] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  370.607866][ T8463] delete_channel: no stack
[  370.636916][ T8479] netlink: 76 bytes leftover after parsing attributes in process `syz.1.612'.
[  370.651432][   T43] [drm:udl_init] *ERROR* Selecting channel failed
[  370.672825][   T43] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  370.680154][   T43] [drm] Initialized udl on minor 2
[  370.697355][   T43] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  370.708709][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[  370.724317][   T43] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  370.751225][ T5905] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  370.771621][   T43] usb 5-1: USB disconnect, device number 19
[  370.793684][ T5905] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  371.318153][ T8446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.407883][ T8446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.502896][ T8446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.537786][ T8446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.831439][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  371.831458][   T30] audit: type=1326 audit(1748592431.362:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eb58e969 code=0x7ffc0000
[  371.887582][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  371.889080][   T30] audit: type=1326 audit(1748592431.362:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eb58e969 code=0x7ffc0000
[  371.927102][   T30] audit: type=1326 audit(1748592431.392:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd7eb58e969 code=0x7ffc0000
[  371.970781][ T5905] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  371.983215][   T30] audit: type=1326 audit(1748592431.392:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eb58e969 code=0x7ffc0000
[  372.011450][   T30] audit: type=1326 audit(1748592431.392:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eb58e969 code=0x7ffc0000
[  372.157310][ T5905] usb 5-1: Using ep0 maxpacket: 16
[  372.170195][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.194112][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.204186][   T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  372.221542][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  372.234914][ T5905] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  372.249078][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.288580][ T5905] usb 5-1: config 0 descriptor??
[  372.297427][ T5808] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  372.370461][   T43] usb 2-1: config 3 has an invalid interface number: 71 but max is 0
[  372.383944][   T43] usb 2-1: config 3 has no interface number 0
[  372.402343][   T43] usb 2-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  372.417572][   T43] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  372.426906][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.459095][   T43] ati_remote 2-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  372.546203][ T5808] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  372.596822][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.609004][ T8511] xt_HMARK: proto mask must be zero with L3 mode
[  374.611269][ T5808] usb 4-1: config 0 descriptor??
[  374.780418][ T5808] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  374.806326][   T43] usb 2-1: USB disconnect, device number 31
[  374.996746][ T5905] usbhid 5-1:0.0: can't add hid device: -71
[  375.005709][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  375.019873][ T5905] usb 5-1: USB disconnect, device number 20
[  375.191860][ T5808] gspca_sn9c2028: read1 error -71
[  375.221013][ T5808] gspca_sn9c2028: read1 error -71
[  375.306947][ T5808] gspca_sn9c2028: read1 error -71
[  375.321555][ T5808] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  375.411245][ T5808] usb 4-1: USB disconnect, device number 26
[  378.157647][ T8473] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  378.526212][ T8473] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  378.544426][ T8473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.996465][ T8473] usb 2-1: config 0 descriptor??
[  379.130979][ T8473] usb 2-1: can't set config #0, error -71
[  379.175491][ T8473] usb 2-1: USB disconnect, device number 32
[  380.189383][ T8570] netlink: 'syz.3.630': attribute type 10 has an invalid length.
[  380.286907][ T8570] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  380.287258][   T43] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  380.791327][   T43] usb 2-1: not running at top speed; connect to a high speed hub
[  380.802487][   T43] usb 2-1: config 1 interface 0 has no altsetting 0
[  380.812618][   T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  380.822336][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.838334][   T43] usb 2-1: Product: syz
[  380.849419][   T43] usb 2-1: Manufacturer: syz
[  380.861110][   T43] usb 2-1: SerialNumber: syz
[  380.950597][ T8575] fuse: Unknown parameter 'user_i00000000000000000000'
[  381.883368][   T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6
[  381.917307][ T5174] bcm5974 2-1:1.0: could not read from device
[  381.949026][ T5174] bcm5974 2-1:1.0: could not read from device
[  381.976904][   T43] usb 2-1: USB disconnect, device number 33
[  383.035034][ T8597] No control pipe specified
[  383.744382][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  385.697219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  386.577273][  T977] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  386.747396][  T977] usb 2-1: Using ep0 maxpacket: 16
[  386.782424][  T977] usb 2-1: config 166 has an invalid interface number: 177 but max is 1
[  386.831972][  T977] usb 2-1: config 166 has an invalid interface number: 34 but max is 1
[  386.852561][  T977] usb 2-1: config 166 has no interface number 0
[  386.861447][ T8623] fuse: Unknown parameter 'user_i00000000000000000000'
[  386.879532][  T977] usb 2-1: config 166 has no interface number 1
[  386.916558][  T977] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  386.946767][  T977] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  386.993433][  T977] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  387.028699][  T977] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  387.311705][  T977] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  388.081571][  T977] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  388.099949][  T977] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  388.111420][  T977] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  388.136227][  T977] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  388.975120][  T977] usb 2-1: config 166 interface 177 has no altsetting 0
[  389.004886][  T977] usb 2-1: config 166 interface 34 has no altsetting 0
[  389.013413][  T977] usb 2-1: string descriptor 0 read error: -71
[  389.034390][  T977] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  389.050069][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.063742][  T977] usb 2-1: can't set config #166, error -71
[  389.079219][  T977] usb 2-1: USB disconnect, device number 34
[  391.635122][   T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  391.857748][   T43] usb 2-1: Using ep0 maxpacket: 16
[  391.882961][ T8671] No control pipe specified
[  391.922504][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.051365][ T5893] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  392.106200][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.365978][ T8676] fuse: Unknown parameter 'user_i00000000000000000000'
[  392.381480][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  392.477543][ T5893] usb 3-1: Using ep0 maxpacket: 32
[  392.491258][ T5893] usb 3-1: config 1 has an invalid interface number: 236 but max is 0
[  392.566914][ T5893] usb 3-1: config 1 has no interface number 0
[  392.623809][ T5893] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.999819][ T5893] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  393.186261][ T5893] usb 3-1: config 1 interface 236 has no altsetting 0
[  393.298919][ T5893] usb 3-1: config 1 has an invalid interface number: 236 but max is 0
[  393.393890][ T5893] usb 3-1: config 1 has no interface number 0
[  393.515782][ T5893] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  393.695702][ T5893] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  393.835313][ T5893] usb 3-1: config 1 interface 236 has no altsetting 0
[  394.170883][ T5893] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  394.224041][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.395986][ T5893] usb 3-1: Product: syz
[  394.495876][ T5893] usb 3-1: Manufacturer: syz
[  394.620522][ T5893] usb 3-1: SerialNumber: syz
[  395.423213][   T43] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  395.751490][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.858467][ T5893] usb 3-1: can't set config #1, error -71
[  395.865925][   T43] usb 2-1: config 0 descriptor??
[  395.872449][   T43] usb 2-1: can't set config #0, error -71
[  395.893381][   T43] usb 2-1: USB disconnect, device number 35
[  395.963604][ T5893] usb 3-1: USB disconnect, device number 27
[  396.148149][ T8691] ufs: You didn't specify the type of your ufs filesystem
[  396.148149][ T8691] 
[  396.148149][ T8691] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  396.148149][ T8691] 
[  396.148149][ T8691] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  396.201798][ T8691] ufs: ufstype=old is supported read-only
[  396.214345][ T8691] ufs: ufs_fill_super(): bad magic number
[  398.786654][ T8721] fuse: Unknown parameter 'user_id00000000000000000000'
[  398.997225][  T977] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  399.298780][  T977] usb 4-1: Using ep0 maxpacket: 32
[  399.311261][ T8725] No control pipe specified
[  399.321302][  T977] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  399.334083][  T977] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  399.350554][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.391577][  T977] usb 4-1: Product: syz
[  399.413707][  T977] usb 4-1: Manufacturer: syz
[  399.443555][  T977] usb 4-1: SerialNumber: syz
[  399.474179][  T977] usb 4-1: config 0 descriptor??
[  405.611426][   T43] usb 4-1: USB disconnect, device number 27
[  406.769769][ T8781] fuse: Unknown parameter 'user_id00000000000000000000'
[  407.835708][ T8792] ufs: You didn't specify the type of your ufs filesystem
[  407.835708][ T8792] 
[  407.835708][ T8792] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  407.835708][ T8792] 
[  407.835708][ T8792] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  407.866603][    C0] vkms_vblank_simulate: vblank timer overrun
[  407.877285][ T8792] ufs: ufstype=old is supported read-only
[  407.897829][ T8792] ufs: ufs_fill_super(): bad magic number
[  409.437334][ T5874] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  410.417327][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  410.765385][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short
[  410.782636][ T5874] usb 1-1: config 7 has an invalid interface number: 48 but max is 0
[  410.807211][ T5874] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  410.837225][ T5874] usb 1-1: config 7 has no interface number 0
[  410.854992][ T5874] usb 1-1: config 7 interface 48 has no altsetting 0
[  410.901249][ T5874] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[  410.958967][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.999386][ T5874] usb 1-1: Product: syz
[  411.008492][ T5874] usb 1-1: Manufacturer: syz
[  411.013144][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'.
[  411.027490][ T5874] usb 1-1: SerialNumber: syz
[  412.023436][ T5874] cdc_phonet 1-1:7.48: probe with driver cdc_phonet failed with error -22
[  412.081126][ T5874] usb 1-1: USB disconnect, device number 14
[  412.437772][ T8838] fuse: Unknown parameter 'user_id00000000000000000000'
[  416.447459][  T977] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  417.530373][  T977] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  417.545966][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.556788][  T977] usb 4-1: Product: syz
[  417.571495][  T977] usb 4-1: Manufacturer: syz
[  417.576167][  T977] usb 4-1: SerialNumber: syz
[  417.833305][  T977] usb 4-1: config 0 descriptor??
[  418.874228][  T977] usb 4-1: can't set config #0, error -71
[  418.952816][  T977] usb 4-1: USB disconnect, device number 28
[  419.055896][   T43] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  419.370917][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  419.537506][   T43] usb 2-1: not running at top speed; connect to a high speed hub
[  419.558488][   T43] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2
[  419.598436][   T43] usb 2-1: config 219 interface 0 has no altsetting 0
[  419.605285][   T43] usb 2-1: config 219 interface 0 has no altsetting 1
[  419.684401][   T43] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[  419.724381][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.753046][   T43] usb 2-1: Product: syz
[  419.777290][ T5873] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  419.808321][   T43] usb 2-1: Manufacturer: syz
[  419.812990][   T43] usb 2-1: SerialNumber: syz
[  421.365541][ T5873] usb 1-1: not running at top speed; connect to a high speed hub
[  421.573521][ T5873] usb 1-1: config 1 interface 0 has no altsetting 0
[  421.732237][ T8928] No control pipe specified
[  421.770157][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  421.819236][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.877517][   T43] usb 2-1: selecting invalid altsetting 0
[  421.884550][ T5873] usb 1-1: Product: syz
[  421.937464][ T5873] usb 1-1: Manufacturer: syz
[  421.946571][   T43] usb 2-1: selecting invalid altsetting 0
[  421.964399][ T5873] usb 1-1: SerialNumber: syz
[  422.023317][ T5873] usb 1-1: can't set config #1, error -71
[  422.244200][ T5873] usb 1-1: USB disconnect, device number 15
[  422.693621][   T43] usb 2-1: USB disconnect, device number 36
[  423.246224][ T8941] netlink: 'syz.1.715': attribute type 1 has an invalid length.
[  423.286440][ T8836] udevd[8836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  423.341672][ T8941] netlink: 228 bytes leftover after parsing attributes in process `syz.1.715'.
[  426.087258][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  426.165607][ T8976] netlink: 'syz.3.722': attribute type 1 has an invalid length.
[  426.173458][ T8976] netlink: 228 bytes leftover after parsing attributes in process `syz.3.722'.
[  426.207267][ T5874] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  427.072496][ T5893] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  427.137321][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.185857][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.196781][ T5893] usb 1-1: Product: syz
[  427.217323][ T5893] usb 1-1: Manufacturer: syz
[  427.221994][ T5893] usb 1-1: SerialNumber: syz
[  427.229122][ T5874] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  427.266927][ T5893] usb 1-1: config 0 descriptor??
[  427.289870][ T5893] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  427.307620][ T5874] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  427.308869][ T5893] nokiaca42v2 ttyUSB0: required endpoint is missing
[  427.316724][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.340204][ T5874] usb 2-1: config 0 descriptor??
[  427.368916][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  427.396091][ T5874] dvb-usb: bulk message failed: -22 (3/0)
[  428.585740][ T5808] usb 1-1: USB disconnect, device number 16
[  428.591708][ T5874] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  428.594994][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  428.612082][ T5874] usb 2-1: media controller created
[  428.631536][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  428.643909][ T5808] cypress_m8 1-1:0.0: device disconnected
[  428.735248][ T5874] dvb-usb: bulk message failed: -22 (6/0)
[  428.787538][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  428.843936][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  428.975082][ T9007] No control pipe specified
[  429.511113][ T5874] dvb-usb: schedule remote query interval to 150 msecs.
[  429.595197][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  429.817945][ T5905] dvb-usb: bulk message failed: -22 (1/0)
[  429.854076][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.729'.
[  429.857091][ T5874] usb 2-1: USB disconnect, device number 37
[  429.917408][ T5905] dvb-usb: error while querying for an remote control event.
[  430.237308][ T9015] netlink: 'syz.1.729': attribute type 6 has an invalid length.
[  430.253262][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'.
[  430.790512][ T5874] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  435.417003][ T9071] fuse: Unknown parameter 'subj_user'
[  435.501975][ T9075] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  436.677703][ T9081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  436.688976][ T9081] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  437.173616][ T9090] No control pipe specified
[  438.261169][ T9110] netlink: 400 bytes leftover after parsing attributes in process `syz.0.752'.
[  441.539399][ T9136] .: renamed from vlan1 (while UP)
[  442.792636][ T9144] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  443.277944][  T977] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  443.494799][  T977] usb 5-1: not running at top speed; connect to a high speed hub
[  443.505652][  T977] usb 5-1: config 1 interface 0 has no altsetting 0
[  443.517487][  T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  443.537353][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.560004][  T977] usb 5-1: Product: syz
[  443.564218][  T977] usb 5-1: Manufacturer: syz
[  443.583154][  T977] usb 5-1: SerialNumber: syz
[  443.799699][ T9172] No control pipe specified
[  445.127874][ T9180] binder: 9179:9180 ioctl c0306201 200000000240 returned -11
[  445.429282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  445.435725][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  445.954119][  T977] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8
[  446.055272][ T5174] bcm5974 5-1:1.0: could not read from device
[  446.144080][  T977] usb 5-1: USB disconnect, device number 21
[  446.144920][ T5174] bcm5974 5-1:1.0: could not read from device
[  446.252637][ T5174] bcm5974 5-1:1.0: could not read from device
[  446.371396][   T30] audit: type=1326 audit(1748592505.812:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d4cb8e969 code=0x0
[  447.239084][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'.
[  447.316738][ T9193] ip6gretap0: entered promiscuous mode
[  447.364619][ T9193] ip6gretap0: left promiscuous mode
[  449.737219][ T9226] tc_dump_action: action bad kind
[  450.703643][ T9238] hub 8-0:1.0: USB hub found
[  450.717639][ T9238] hub 8-0:1.0: 1 port detected
[  450.828517][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.776'.
[  451.322821][ T5893] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  451.347368][ T5873] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  451.577028][ T5873] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  451.589805][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.603620][ T5873] usb 4-1: Product: syz
[  451.677213][ T5873] usb 4-1: Manufacturer: syz
[  451.691789][ T5893] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  451.700968][ T5873] usb 4-1: SerialNumber: syz
[  451.709745][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.730797][ T5893] usb 3-1: Product: syz
[  451.775759][ T5873] usb 4-1: config 0 descriptor??
[  451.799880][ T5873] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  451.811773][ T5893] usb 3-1: Manufacturer: syz
[  451.815895][ T5873] nokiaca42v2 ttyUSB0: required endpoint is missing
[  451.818202][ T5893] usb 3-1: SerialNumber: syz
[  453.238203][ T5893] usb 3-1: config 0 descriptor??
[  453.310165][ T5893] usb 3-1: can't set config #0, error -71
[  453.363124][ T5893] usb 3-1: USB disconnect, device number 28
[  453.417354][ T5873] usb 4-1: USB disconnect, device number 29
[  453.436996][ T5873] cypress_m8 4-1:0.0: device disconnected
[  453.649457][ T9255] overlayfs: failed to clone lowerpath
[  453.773708][   T30] audit: type=1800 audit(1748592513.302:219): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.780" name="/" dev="9p" ino=2 res=0 errno=0
[  454.358933][ T9267] FAULT_INJECTION: forcing a failure.
[  454.358933][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.515281][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.3.786 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  454.515305][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  454.515318][ T9267] Call Trace:
[  454.515327][ T9267]  <TASK>
[  454.515334][ T9267]  dump_stack_lvl+0x189/0x250
[  454.515363][ T9267]  ? irqentry_exit+0x74/0x90
[  454.515381][ T9267]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.515418][ T9267]  should_fail_ex+0x414/0x560
[  454.515439][ T9267]  _copy_from_iter+0x1db/0x16f0
[  454.515488][ T9267]  ? txopt_get+0x7a/0x3f0
[  454.515505][ T9267]  ? txopt_get+0x7a/0x3f0
[  454.515521][ T9267]  ? __pfx__copy_from_iter+0x10/0x10
[  454.515539][ T9267]  ? txopt_get+0x335/0x3f0
[  454.515554][ T9267]  ? txopt_get+0x7a/0x3f0
[  454.515568][ T9267]  ? __pfx_txopt_get+0x10/0x10
[  454.515591][ T9267]  rawv6_sendmsg+0xb39/0x17f0
[  454.515617][ T9267]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  454.515637][ T9267]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  454.515674][ T9267]  ? sock_rps_record_flow+0x19/0x410
[  454.515694][ T9267]  ? inet_sendmsg+0x2f4/0x370
[  454.515710][ T9267]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  454.515727][ T9267]  __sock_sendmsg+0x19c/0x270
[  454.515754][ T9267]  __sys_sendto+0x3bd/0x520
[  454.515777][ T9267]  ? __pfx___sys_sendto+0x10/0x10
[  454.515795][ T9267]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  454.515822][ T9267]  ? __fget_files+0x3a0/0x420
[  454.515845][ T9267]  ? ksys_write+0x22a/0x250
[  454.515868][ T9267]  ? __pfx_ksys_write+0x10/0x10
[  454.515887][ T9267]  ? rcu_is_watching+0x15/0xb0
[  454.515909][ T9267]  __x64_sys_sendto+0xde/0x100
[  454.515932][ T9267]  do_syscall_64+0xfa/0x3b0
[  454.515948][ T9267]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.515962][ T9267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.515978][ T9267]  ? clear_bhb_loop+0x60/0xb0
[  454.515998][ T9267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.516013][ T9267] RIP: 0033:0x7f511358e969
[  454.516026][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.516040][ T9267] RSP: 002b:00007f51143ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  454.516058][ T9267] RAX: ffffffffffffffda RBX: 00007f51137b5fa0 RCX: 00007f511358e969
[  454.516069][ T9267] RDX: 00000000000005aa RSI: 0000200000000300 RDI: 0000000000000003
[  454.516079][ T9267] RBP: 00007f51143ec090 R08: 0000000000000000 R09: fffffffffffffdfd
[  454.516090][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.516099][ T9267] R13: 0000000000000000 R14: 00007f51137b5fa0 R15: 00007ffed3a5df28
[  454.516123][ T9267]  </TASK>
[  457.125157][ T9283] netlink: 224 bytes leftover after parsing attributes in process `syz.3.788'.
[  457.219654][ T9280] hub 8-0:1.0: USB hub found
[  457.226816][ T9280] hub 8-0:1.0: 1 port detected
[  457.501756][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.789'.
[  459.360120][  T977] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  459.551612][  T977] usb 4-1: not running at top speed; connect to a high speed hub
[  459.578939][  T977] usb 4-1: config 1 interface 0 has no altsetting 0
[  459.651176][  T977] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  459.814013][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.833498][  T977] usb 4-1: Product: syz
[  459.857607][  T977] usb 4-1: Manufacturer: syz
[  459.862308][  T977] usb 4-1: SerialNumber: syz
[  461.313463][  T977] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9
[  461.329036][ T5174] bcm5974 4-1:1.0: could not read from device
[  461.402031][  T977] usb 4-1: USB disconnect, device number 30
[  461.427930][ T9320] netlink: 104 bytes leftover after parsing attributes in process `syz.1.796'.
[  461.521388][ T9323] FAULT_INJECTION: forcing a failure.
[  461.521388][ T9323] name failslab, interval 1, probability 0, space 0, times 0
[  461.596950][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.4.797 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  461.596974][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  461.596984][ T9323] Call Trace:
[  461.596990][ T9323]  <TASK>
[  461.596998][ T9323]  dump_stack_lvl+0x189/0x250
[  461.597026][ T9323]  ? __pfx____ratelimit+0x10/0x10
[  461.597043][ T9323]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.597066][ T9323]  ? __pfx__printk+0x10/0x10
[  461.597088][ T9323]  ? __pfx___might_resched+0x10/0x10
[  461.597125][ T9323]  ? fs_reclaim_acquire+0x7d/0x100
[  461.597153][ T9323]  should_fail_ex+0x414/0x560
[  461.597181][ T9323]  should_failslab+0xa8/0x100
[  461.597217][ T9323]  __kmalloc_noprof+0xcb/0x4f0
[  461.597249][ T9323]  ? tomoyo_get_condition+0x11f0/0x1a80
[  461.597289][ T9323]  tomoyo_get_condition+0x11f0/0x1a80
[  461.597362][ T9323]  ? __pfx_tomoyo_get_condition+0x10/0x10
[  461.597403][ T9323]  ? tomoyo_fill_path_info+0x30f/0x3c0
[  461.597441][ T9323]  tomoyo_update_domain+0xdb/0x880
[  461.597481][ T9323]  ? __pfx_tomoyo_merge_path_acl+0x10/0x10
[  461.597505][ T9323]  ? __pfx_tomoyo_same_path_acl+0x10/0x10
[  461.597526][ T9323]  ? tomoyo_parse_name_union+0xd9/0x130
[  461.597563][ T9323]  tomoyo_write_file+0x384/0xbb0
[  461.597584][ T9323]  ? tomoyo_path_permission+0x25a/0x380
[  461.597605][ T9323]  ? tomoyo_path_perm+0x31a/0x4b0
[  461.597624][ T9323]  ? tomoyo_path_symlink+0xa3/0xe0
[  461.597655][ T9323]  ? __pfx_tomoyo_write_file+0x10/0x10
[  461.597675][ T9323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.597710][ T9323]  ? format_decode+0x5ee/0xe30
[  461.597738][ T9323]  ? string+0x279/0x2b0
[  461.597765][ T9323]  ? widen_string+0x3b/0x2a0
[  461.597794][ T9323]  ? string+0x279/0x2b0
[  461.597826][ T9323]  ? vsnprintf+0xe11/0xf00
[  461.597871][ T9323]  ? tomoyo_addprintf+0xf1/0x140
[  461.597913][ T9323]  ? rcu_is_watching+0x15/0xb0
[  461.597944][ T9323]  ? tomoyo_str_starts+0x74/0xb0
[  461.597981][ T9323]  tomoyo_supervisor+0x1167/0x1480
[  461.598026][ T9323]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  461.598078][ T9323]  ? tomoyo_check_path_acl+0xec/0x1d0
[  461.598104][ T9323]  ? tomoyo_check_acl+0x386/0x400
[  461.598141][ T9323]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[  461.598168][ T9323]  tomoyo_path_permission+0x25a/0x380
[  461.598197][ T9323]  tomoyo_path_perm+0x31a/0x4b0
[  461.598220][ T9323]  ? tomoyo_path_perm+0x1e3/0x4b0
[  461.598241][ T9323]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  461.598308][ T9323]  ? __pfx_current_check_access_path+0x10/0x10
[  461.598355][ T9323]  ? lookup_one_qstr_excl_raw+0x126/0x280
[  461.598385][ T9323]  tomoyo_path_symlink+0xa3/0xe0
[  461.598416][ T9323]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[  461.598450][ T9323]  ? __pfx_filename_create+0x10/0x10
[  461.598485][ T9323]  security_path_symlink+0x177/0x380
[  461.598523][ T9323]  do_symlinkat+0x107/0x3f0
[  461.598557][ T9323]  ? __pfx_do_symlinkat+0x10/0x10
[  461.598585][ T9323]  ? strncpy_from_user+0x150/0x290
[  461.598612][ T9323]  ? getname_flags+0x1e5/0x540
[  461.598638][ T9323]  __x64_sys_symlink+0x7a/0x90
[  461.598671][ T9323]  do_syscall_64+0xfa/0x3b0
[  461.598693][ T9323]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.598715][ T9323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.598736][ T9323]  ? clear_bhb_loop+0x60/0xb0
[  461.598763][ T9323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.598785][ T9323] RIP: 0033:0x7f6d4cb8e969
[  461.598804][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.598824][ T9323] RSP: 002b:00007f6d4da6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  461.598846][ T9323] RAX: ffffffffffffffda RBX: 00007f6d4cdb5fa0 RCX: 00007f6d4cb8e969
[  461.598863][ T9323] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000080
[  461.598878][ T9323] RBP: 00007f6d4da6e090 R08: 0000000000000000 R09: 0000000000000000
[  461.598892][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  461.598905][ T9323] R13: 0000000000000000 R14: 00007f6d4cdb5fa0 R15: 00007fff6c08f728
[  461.598941][ T9323]  </TASK>
[  462.342783][ T9335] FAULT_INJECTION: forcing a failure.
[  462.342783][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.355897][ T9335] CPU: 0 UID: 0 PID: 9335 Comm: syz.1.800 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  462.355918][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  462.355928][ T9335] Call Trace:
[  462.355934][ T9335]  <TASK>
[  462.355941][ T9335]  dump_stack_lvl+0x189/0x250
[  462.355968][ T9335]  ? __pfx____ratelimit+0x10/0x10
[  462.355985][ T9335]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.356008][ T9335]  ? __pfx__printk+0x10/0x10
[  462.356024][ T9335]  ? __might_fault+0xb0/0x130
[  462.356057][ T9335]  should_fail_ex+0x414/0x560
[  462.356077][ T9335]  _copy_from_iter+0x1db/0x16f0
[  462.356100][ T9335]  ? rcu_is_watching+0x15/0xb0
[  462.356119][ T9335]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  462.356146][ T9335]  ? __pfx__copy_from_iter+0x10/0x10
[  462.356167][ T9335]  ? __build_skb_around+0x257/0x3e0
[  462.356190][ T9335]  ? netlink_sendmsg+0x642/0xb30
[  462.356210][ T9335]  ? skb_put+0x11b/0x210
[  462.356238][ T9335]  netlink_sendmsg+0x6b2/0xb30
[  462.356267][ T9335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.356294][ T9335]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  462.356307][ T9335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.356330][ T9335]  __sock_sendmsg+0x21c/0x270
[  462.356349][ T9335]  ____sys_sendmsg+0x52d/0x830
[  462.356375][ T9335]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.356404][ T9335]  ? import_iovec+0x74/0xa0
[  462.356429][ T9335]  ___sys_sendmsg+0x21f/0x2a0
[  462.356453][ T9335]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.356502][ T9335]  ? __fget_files+0x2a/0x420
[  462.356515][ T9335]  ? __fget_files+0x3a0/0x420
[  462.356537][ T9335]  __sys_sendmmsg+0x227/0x430
[  462.356563][ T9335]  ? __pfx___sys_sendmmsg+0x10/0x10
[  462.356584][ T9335]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  462.356620][ T9335]  ? ksys_write+0x22a/0x250
[  462.356643][ T9335]  ? __pfx_ksys_write+0x10/0x10
[  462.356661][ T9335]  ? rcu_is_watching+0x15/0xb0
[  462.356684][ T9335]  __x64_sys_sendmmsg+0xa0/0xc0
[  462.356709][ T9335]  do_syscall_64+0xfa/0x3b0
[  462.356726][ T9335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.356740][ T9335]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  462.356756][ T9335]  ? clear_bhb_loop+0x60/0xb0
[  462.356775][ T9335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.356789][ T9335] RIP: 0033:0x7ff26dd8e969
[  462.356803][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.356817][ T9335] RSP: 002b:00007ff26ecb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  462.356833][ T9335] RAX: ffffffffffffffda RBX: 00007ff26dfb5fa0 RCX: 00007ff26dd8e969
[  462.356845][ T9335] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003
[  462.356855][ T9335] RBP: 00007ff26ecb9090 R08: 0000000000000000 R09: 0000000000000000
[  462.356866][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.356875][ T9335] R13: 0000000000000000 R14: 00007ff26dfb5fa0 R15: 00007ffde89f0bb8
[  462.356897][ T9335]  </TASK>
[  464.012335][ T9350] FAULT_INJECTION: forcing a failure.
[  464.012335][ T9350] name failslab, interval 1, probability 0, space 0, times 0
[  464.136397][ T9351] hub 8-0:1.0: USB hub found
[  464.142873][ T9351] hub 8-0:1.0: 1 port detected
[  464.239631][ T9351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.802'.
[  464.279208][ T9350] CPU: 0 UID: 0 PID: 9350 Comm: syz.1.804 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  464.279241][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  464.279256][ T9350] Call Trace:
[  464.279265][ T9350]  <TASK>
[  464.279274][ T9350]  dump_stack_lvl+0x189/0x250
[  464.279312][ T9350]  ? __pfx____ratelimit+0x10/0x10
[  464.279336][ T9350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  464.279369][ T9350]  ? __pfx__printk+0x10/0x10
[  464.279387][ T9350]  ? rcu_is_watching+0x15/0xb0
[  464.279430][ T9350]  should_fail_ex+0x414/0x560
[  464.279460][ T9350]  should_failslab+0xa8/0x100
[  464.279501][ T9350]  kmem_cache_alloc_noprof+0x73/0x3c0
[  464.279533][ T9350]  ? skb_clone+0x212/0x3a0
[  464.279572][ T9350]  skb_clone+0x212/0x3a0
[  464.279611][ T9350]  __netlink_deliver_tap+0x404/0x850
[  464.279655][ T9350]  ? netlink_deliver_tap+0x2e/0x1b0
[  464.279687][ T9350]  netlink_deliver_tap+0x19c/0x1b0
[  464.279719][ T9350]  netlink_dump+0x8e4/0xe20
[  464.279762][ T9350]  ? __pfx_netlink_dump+0x10/0x10
[  464.279808][ T9350]  ? kmem_cache_free+0x18f/0x400
[  464.279847][ T9350]  netlink_recvmsg+0x676/0xa30
[  464.279889][ T9350]  ? __pfx_netlink_recvmsg+0x10/0x10
[  464.279925][ T9350]  ? __lock_acquire+0xab9/0xd20
[  464.279950][ T9350]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  464.279973][ T9350]  ? __pfx_netlink_recvmsg+0x10/0x10
[  464.280004][ T9350]  sock_recvmsg_nosec+0x183/0x1c0
[  464.280034][ T9350]  ____sys_recvmsg+0x3aa/0x460
[  464.280078][ T9350]  ? __pfx_____sys_recvmsg+0x10/0x10
[  464.280129][ T9350]  ? import_iovec+0x74/0xa0
[  464.280172][ T9350]  ___sys_recvmsg+0x1b5/0x510
[  464.280211][ T9350]  ? __pfx____sys_recvmsg+0x10/0x10
[  464.280281][ T9350]  ? __might_fault+0xb0/0x130
[  464.280320][ T9350]  do_recvmmsg+0x307/0x770
[  464.280363][ T9350]  ? __pfx_do_recvmmsg+0x10/0x10
[  464.280411][ T9350]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  464.280457][ T9350]  __x64_sys_recvmmsg+0x190/0x240
[  464.280495][ T9350]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  464.280526][ T9350]  ? rcu_is_watching+0x15/0xb0
[  464.280557][ T9350]  ? do_syscall_64+0xbe/0x3b0
[  464.280586][ T9350]  do_syscall_64+0xfa/0x3b0
[  464.280608][ T9350]  ? lockdep_hardirqs_on+0x9c/0x150
[  464.280630][ T9350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.280653][ T9350]  ? clear_bhb_loop+0x60/0xb0
[  464.280681][ T9350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.280702][ T9350] RIP: 0033:0x7ff26dd8e969
[  464.280721][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.280741][ T9350] RSP: 002b:00007ff26ecb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  464.280765][ T9350] RAX: ffffffffffffffda RBX: 00007ff26dfb5fa0 RCX: 00007ff26dd8e969
[  464.280782][ T9350] RDX: 0000000000000004 RSI: 0000200000004d00 RDI: 0000000000000003
[  464.280796][ T9350] RBP: 00007ff26ecb9090 R08: 0000000000000000 R09: 0000000000000000
[  464.280810][ T9350] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002
[  464.280823][ T9350] R13: 0000000000000000 R14: 00007ff26dfb5fa0 R15: 00007ffde89f0bb8
[  464.280858][ T9350]  </TASK>
[  464.724054][ T9359] bridge_slave_0: default FDB implementation only supports local addresses
[  464.768779][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'.
[  464.955402][ T9361] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request
[  465.943153][ T9372] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  473.260739][ T9429] FAULT_INJECTION: forcing a failure.
[  473.260739][ T9429] name failslab, interval 1, probability 0, space 0, times 0
[  473.361255][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.3.822 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  473.361288][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  473.361303][ T9429] Call Trace:
[  473.361312][ T9429]  <TASK>
[  473.361323][ T9429]  dump_stack_lvl+0x189/0x250
[  473.361361][ T9429]  ? __pfx____ratelimit+0x10/0x10
[  473.361386][ T9429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  473.361418][ T9429]  ? __pfx__printk+0x10/0x10
[  473.361440][ T9429]  ? irqentry_exit+0x74/0x90
[  473.361463][ T9429]  ? __pfx___might_resched+0x10/0x10
[  473.361496][ T9429]  should_fail_ex+0x414/0x560
[  473.361533][ T9429]  should_failslab+0xa8/0x100
[  473.361569][ T9429]  __kmalloc_noprof+0xcb/0x4f0
[  473.361602][ T9429]  ? security_task_alloc+0x4d/0x360
[  473.361626][ T9429]  ? perf_event_init_task+0x12d/0x4b0
[  473.361654][ T9429]  security_task_alloc+0x4d/0x360
[  473.361684][ T9429]  copy_process+0x1530/0x3c00
[  473.361732][ T9429]  ? copy_process+0x97f/0x3c00
[  473.361770][ T9429]  ? __pfx_copy_process+0x10/0x10
[  473.361813][ T9429]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  473.361841][ T9429]  vhost_task_create+0x1c4/0x290
[  473.361870][ T9429]  ? rcu_is_watching+0x15/0xb0
[  473.361896][ T9429]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  473.361926][ T9429]  ? __pfx_vhost_task_create+0x10/0x10
[  473.361954][ T9429]  ? preempt_schedule_irq+0xde/0x150
[  473.361985][ T9429]  ? __pfx_vhost_task_fn+0x10/0x10
[  473.362038][ T9429]  kvm_mmu_post_init_vm+0x147/0x2b0
[  473.362074][ T9429]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  473.362105][ T9429]  ? __mutex_trylock_common+0x153/0x260
[  473.362137][ T9429]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  473.362165][ T9429]  ? rcu_is_watching+0x15/0xb0
[  473.362189][ T9429]  ? look_up_lock_class+0x74/0x170
[  473.362213][ T9429]  ? register_lock_class+0x51/0x320
[  473.362241][ T9429]  ? __lock_acquire+0xab9/0xd20
[  473.362298][ T9429]  kvm_vcpu_ioctl+0x95a/0xe90
[  473.362341][ T9429]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  473.362371][ T9429]  ? rcu_read_unlock_special+0x3fe/0x4c0
[  473.362405][ T9429]  ? __asan_memset+0x22/0x50
[  473.362431][ T9429]  ? smack_file_ioctl+0x302/0x340
[  473.362467][ T9429]  ? __pfx_smack_file_ioctl+0x10/0x10
[  473.362509][ T9429]  ? __rcu_read_unlock+0x84/0xe0
[  473.362548][ T9429]  ? __fget_files+0x2a/0x420
[  473.362567][ T9429]  ? __fget_files+0x3a0/0x420
[  473.362585][ T9429]  ? __fget_files+0x2a/0x420
[  473.362609][ T9429]  ? bpf_lsm_file_ioctl+0x9/0x20
[  473.362633][ T9429]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  473.362667][ T9429]  __se_sys_ioctl+0xfc/0x170
[  473.362698][ T9429]  do_syscall_64+0xfa/0x3b0
[  473.362723][ T9429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.362743][ T9429]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  473.362764][ T9429]  ? clear_bhb_loop+0x60/0xb0
[  473.362791][ T9429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.362812][ T9429] RIP: 0033:0x7f511358e969
[  473.362832][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.362851][ T9429] RSP: 002b:00007f51143cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  473.362874][ T9429] RAX: ffffffffffffffda RBX: 00007f51137b6080 RCX: 00007f511358e969
[  473.362891][ T9429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  473.362904][ T9429] RBP: 00007f51143cb090 R08: 0000000000000000 R09: 0000000000000000
[  473.362918][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.362931][ T9429] R13: 0000000000000001 R14: 00007f51137b6080 R15: 00007ffed3a5df28
[  473.362966][ T9429]  </TASK>
[  474.090695][ T9443] netlink: 'syz.2.826': attribute type 10 has an invalid length.
[  474.117816][ T9443] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  475.703646][ T9457] netlink: 'syz.4.829': attribute type 10 has an invalid length.
[  475.714945][ T9457] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  476.092014][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'.
[  476.111660][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'.
[  478.358481][ T9469] netlink: 'syz.3.833': attribute type 1 has an invalid length.
[  478.366247][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'.
[  479.035672][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.842'.
[  481.877197][   T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  481.923386][ T9533] program syz.3.852 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  482.075293][ T9540] overlayfs: failed to clone upperpath
[  482.277150][   T43] usb 5-1: Using ep0 maxpacket: 8
[  482.293117][   T43] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  482.319811][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.366292][   T43] usb 5-1: Product: syz
[  482.386232][ T9546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.853'.
[  482.789370][   T43] usb 5-1: Manufacturer: syz
[  482.989600][   T43] usb 5-1: SerialNumber: syz
[  483.037907][   T43] usb 5-1: config 0 descriptor??
[  483.081484][   T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  483.136565][   T43] usb 5-1: setting power ON
[  483.168496][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  483.195827][ T9552] FAULT_INJECTION: forcing a failure.
[  483.195827][ T9552] name failslab, interval 1, probability 0, space 0, times 0
[  483.208701][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.1.846 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  483.208737][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  483.208751][ T9552] Call Trace:
[  483.208759][ T9552]  <TASK>
[  483.208769][ T9552]  dump_stack_lvl+0x189/0x250
[  483.208807][ T9552]  ? __pfx____ratelimit+0x10/0x10
[  483.208830][ T9552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.208863][ T9552]  ? __pfx__printk+0x10/0x10
[  483.208891][ T9552]  ? __pfx___might_resched+0x10/0x10
[  483.208916][ T9552]  ? fs_reclaim_acquire+0x7d/0x100
[  483.208945][ T9552]  should_fail_ex+0x414/0x560
[  483.208974][ T9552]  should_failslab+0xa8/0x100
[  483.209010][ T9552]  __kmalloc_cache_noprof+0x70/0x3d0
[  483.209042][ T9552]  ? xfrm_policy_alloc+0x78/0x2b0
[  483.209074][ T9552]  xfrm_policy_alloc+0x78/0x2b0
[  483.209102][ T9552]  pfkey_spdadd+0x305/0x1a30
[  483.209133][ T9552]  ? kasan_quarantine_put+0xdd/0x220
[  483.209172][ T9552]  ? __pfx_pfkey_spdadd+0x10/0x10
[  483.209197][ T9552]  ? kmem_cache_free+0x18f/0x400
[  483.209245][ T9552]  pfkey_sendmsg+0xbfb/0x1090
[  483.209291][ T9552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  483.209354][ T9552]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  483.209374][ T9552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  483.209402][ T9552]  __sock_sendmsg+0x21c/0x270
[  483.209430][ T9552]  ____sys_sendmsg+0x505/0x830
[  483.209469][ T9552]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.209511][ T9552]  ? import_iovec+0x74/0xa0
[  483.209547][ T9552]  ___sys_sendmsg+0x21f/0x2a0
[  483.209582][ T9552]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.209656][ T9552]  ? __fget_files+0x2a/0x420
[  483.209675][ T9552]  ? __fget_files+0x3a0/0x420
[  483.209707][ T9552]  __x64_sys_sendmsg+0x19b/0x260
[  483.209749][ T9552]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  483.209793][ T9552]  ? __pfx_ksys_write+0x10/0x10
[  483.209820][ T9552]  ? rcu_is_watching+0x15/0xb0
[  483.209852][ T9552]  ? do_syscall_64+0xbe/0x3b0
[  483.209881][ T9552]  do_syscall_64+0xfa/0x3b0
[  483.209903][ T9552]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.209925][ T9552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.209948][ T9552]  ? clear_bhb_loop+0x60/0xb0
[  483.209974][ T9552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.209996][ T9552] RIP: 0033:0x7ff26dd8e969
[  483.210015][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.210034][ T9552] RSP: 002b:00007ff26ec77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.210058][ T9552] RAX: ffffffffffffffda RBX: 00007ff26dfb6160 RCX: 00007ff26dd8e969
[  483.210075][ T9552] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  483.210089][ T9552] RBP: 00007ff26ec77090 R08: 0000000000000000 R09: 0000000000000000
[  483.210103][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.210116][ T9552] R13: 0000000000000000 R14: 00007ff26dfb6160 R15: 00007ffde89f0bb8
[  483.210151][ T9552]  </TASK>
[  483.512611][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.521528][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.548203][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  483.624821][ T9553] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  483.769197][   T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  483.777864][   T43] usb 5-1: media controller created
[  483.805237][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  483.893629][   T43] usb 5-1: selecting invalid altsetting 6
[  483.927654][   T43] usb 5-1: digital interface selection failed (-22)
[  483.934331][   T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  483.971075][   T43] usb 5-1: setting power OFF
[  483.999600][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  484.009110][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  484.038919][   T43] (NULL device *): no alternate interface
[  484.231177][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  484.307007][   T43] usb 5-1: USB disconnect, device number 22
[  484.430806][ T9565] Driver unsupported XDP return value 0 on prog  (id 130) dev N/A, expect packet loss!
[  484.442803][ T9568] netlink: 44 bytes leftover after parsing attributes in process `syz.1.858'.
[  484.514469][ T9565] netlink: 'syz.4.857': attribute type 10 has an invalid length.
[  484.531260][ T9565] batman_adv: batadv0: Adding interface: wlan0
[  484.564491][ T9565] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.623432][ T9565] batman_adv: batadv0: Interface activated: wlan0
[  486.107726][   T43] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  486.457756][   T43] usb 5-1: not running at top speed; connect to a high speed hub
[  486.487036][   T43] usb 5-1: config 1 interface 0 has no altsetting 0
[  486.514772][   T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  486.591658][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.637794][   T43] usb 5-1: Product: syz
[  486.642024][   T43] usb 5-1: Manufacturer: syz
[  486.646681][   T43] usb 5-1: SerialNumber: syz
[  486.702190][ T9617] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  487.577016][ T9627] netlink: 'syz.3.871': attribute type 6 has an invalid length.
[  487.594240][ T9628] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  487.631236][ T9628] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  487.804471][   T43] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10
[  488.215096][ T5174] bcm5974 5-1:1.0: could not read from device
[  488.225240][   T43] usb 5-1: USB disconnect, device number 23
[  490.625078][ T9646] netdevsim netdevsim0: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2
[  491.013356][ T9646] netdevsim netdevsim0: Falling back to sysfs fallback for: ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  491.676603][ T9663] syz.4.879: attempt to access beyond end of device
[  491.676603][ T9663] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0
[  491.718931][ T9663] MINIX-fs: unable to read superblock
[  492.434920][   T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  492.797636][   T43] usb 5-1: device descriptor read/64, error -71
[  493.180726][   T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  493.477524][   T43] usb 5-1: device descriptor read/64, error -71
[  494.311436][   T43] usb usb5-port1: attempt power cycle
[  494.907403][   T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  494.946348][   T43] usb 5-1: device descriptor read/8, error -71
[  494.957359][ T5808] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  495.335308][ T5808] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  495.354811][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.379688][ T5808] usb 4-1: Product: syz
[  495.392975][ T5808] usb 4-1: Manufacturer: syz
[  495.453374][ T9694] netlink: 'syz.1.886': attribute type 4 has an invalid length.
[  495.639366][ T5808] usb 4-1: SerialNumber: syz
[  496.076867][ T9694] syz.1.886 (9694) used greatest stack depth: 19696 bytes left
[  496.219293][ T5808] usb 4-1: config 0 descriptor??
[  496.242161][ T5808] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  496.272203][ T5808] nokiaca42v2 ttyUSB0: required endpoint is missing
[  496.307602][   T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  496.383910][   T43] usb 5-1: Using ep0 maxpacket: 16
[  496.448072][   T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.527605][   T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.565226][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[  496.588100][   T43] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  496.655853][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.745794][   T43] usb 5-1: config 0 descriptor??
[  497.738922][ T5808] usb 4-1: USB disconnect, device number 31
[  497.777378][   T43] hid (null): unknown global tag 0xc
[  497.800117][   T43] hid (null): unknown global tag 0xe
[  497.833053][   T43] hid (null): invalid report_size 2026951667
[  497.845307][ T5808] cypress_m8 4-1:0.0: device disconnected
[  498.621425][   T43] usb 5-1: USB disconnect, device number 27
[  499.386836][ T9739] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  499.393924][ T9739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  499.403261][ T9739] vhci_hcd vhci_hcd.0: Device attached
[  499.657246][ T8473] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  501.137558][ T9741] vhci_hcd: connection reset by peer
[  501.393019][   T12] vhci_hcd: stop threads
[  501.496574][   T12] vhci_hcd: release socket
[  501.502116][   T12] vhci_hcd: disconnect device
[  502.234655][ T9759] Invalid source name
[  502.242249][ T9759] UBIFS error (pid: 9759): cannot open "./file0", error -22
[  502.477193][ T9759] netlink: 'syz.3.901': attribute type 3 has an invalid length.
[  504.224697][ T9779] bpf: Bad value for 'mode'
[  505.168527][ T8473] vhci_hcd: vhci_device speed not set
[  506.625031][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  506.648615][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  506.709674][ T9810] ufs: You didn't specify the type of your ufs filesystem
[  506.709674][ T9810] 
[  506.709674][ T9810] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  506.709674][ T9810] 
[  506.709674][ T9810] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  506.741856][ T9810] ufs: ufstype=old is supported read-only
[  506.748193][ T9810] ufs: ufs_fill_super(): bad magic number
[  506.794124][ T9819] x_tables: ip_tables: osf match: only valid for protocol 6
[  507.157383][ T5905] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  507.679815][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short
[  507.710901][ T5905] usb 3-1: not running at top speed; connect to a high speed hub
[  507.734067][ T5905] usb 3-1: config 8 interface 0 has no altsetting 0
[  507.751163][ T5905] usb 3-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e
[  507.866483][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.875490][ T5905] usb 3-1: Product: syz
[  507.880272][ T5905] usb 3-1: Manufacturer: syz
[  507.884984][ T5905] usb 3-1: SerialNumber: syz
[  508.164438][ T5905] gspca_main: sonixj-2.14.0 probing 06f8:3004
[  508.212709][ T5905] gspca_sonixj: reg_w1 err -71
[  508.241606][ T5905] sonixj 3-1:8.0: probe with driver sonixj failed with error -71
[  508.328641][ T5905] usb 3-1: USB disconnect, device number 29
[  509.088678][ T5905] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  509.159724][ T9857] input: syz0 as /devices/virtual/input/input11
[  509.269863][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.391540][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  509.403476][ T5905] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  510.181179][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.221624][ T5905] usb 2-1: config 0 descriptor??
[  512.087391][  T977] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  512.676854][   T43] usb 2-1: USB disconnect, device number 38
[  513.010570][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.051958][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.065523][  T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  513.087583][  T977] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  513.152361][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.439327][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'.
[  515.353380][  T977] usb 3-1: config 0 descriptor??
[  516.278773][  T977] usb 3-1: can't set config #0, error -71
[  516.319682][  T977] usb 3-1: USB disconnect, device number 30
[  521.571682][ T9943] No control pipe specified
[  521.637425][ T9943] ufs: Invalid option: "#}¯òÚïÄíŒYÕ.Q;˜ý/ „´£Xø€ÆžWÛƒ;–ãuؤø®Ž" or missing value
[  521.647433][ T9943] ufs: wrong mount options
[  523.732337][ T9963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  523.744072][ T9963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  523.753378][ T9963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  523.763675][ T9963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  523.773113][ T9963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  524.800705][ T9961] chnl_net:caif_netlink_parms(): no params data found
[  525.647683][ T9988] netlink: 144 bytes leftover after parsing attributes in process `syz.1.951'.
[  525.897946][ T9963] Bluetooth: hci5: command tx timeout
[  526.668995][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.714240][T10000] netlink: 80 bytes leftover after parsing attributes in process `syz.0.954'.
[  526.736470][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.764243][ T9961] bridge_slave_0: entered allmulticast mode
[  526.847736][ T9961] bridge_slave_0: entered promiscuous mode
[  526.878642][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.885808][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.957375][ T9961] bridge_slave_1: entered allmulticast mode
[  526.983824][ T9961] bridge_slave_1: entered promiscuous mode
[  527.474797][T10006] syzkaller0: entered promiscuous mode
[  527.503286][T10006] syzkaller0: entered allmulticast mode
[  527.589071][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.761614][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.977318][ T9963] Bluetooth: hci5: command tx timeout
[  528.094410][ T9961] team0: Port device team_slave_0 added
[  528.123730][ T9961] team0: Port device team_slave_1 added
[  528.546579][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.584359][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.687671][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.733605][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.768469][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.877788][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.058444][ T9963] Bluetooth: hci5: command tx timeout
[  530.213914][T10047] trusted_key: encrypted_key: insufficient parameters specified
[  530.880641][ T9961] hsr_slave_0: entered promiscuous mode
[  530.935179][ T9961] hsr_slave_1: entered promiscuous mode
[  530.985391][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  531.024634][ T9961] Cannot create hsr debugfs directory
[  531.057352][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'.
[  531.373410][T10058] kernel profiling enabled (shift: 63)
[  531.382087][T10058] profiling shift: 63 too large
[  532.089043][T10061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.965'.
[  532.193463][ T9963] Bluetooth: hci5: command tx timeout
[  532.861547][T10065] syz.2.967: attempt to access beyond end of device
[  532.861547][T10065] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[  532.908007][T10065] MINIX-fs: unable to read superblock
[  533.832985][   T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  535.777901][   T43] usb 3-1: device descriptor read/64, error -71
[  535.837056][T10073] ufs: You didn't specify the type of your ufs filesystem
[  535.837056][T10073] 
[  535.837056][T10073] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  535.837056][T10073] 
[  535.837056][T10073] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  535.870763][T10073] ufs: ufstype=old is supported read-only
[  535.882697][T10073] ufs: ufs_fill_super(): bad magic number
[  536.339230][   T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  537.471916][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'.
[  537.978230][ T9961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  538.527258][ T5808] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  538.798928][ T9961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  538.920040][ T9961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  538.945961][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.990905][ T5808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  539.028021][ T9961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  539.229470][ T5808] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  539.254738][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.336072][T10105] overlay: ./file0 is not a directory
[  539.992631][ T5808] usb 3-1: config 0 descriptor??
[  540.002630][ T5808] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  540.079140][ T5808] dvb-usb: bulk message failed: -22 (3/0)
[  540.262125][ T5808] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  540.338636][ T5808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  540.345972][ T5808] usb 3-1: media controller created
[  540.381509][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  540.570579][ T5808] dvb-usb: bulk message failed: -22 (6/0)
[  540.605340][ T5808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  540.723652][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  540.810341][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.848360][ T5808] dvb-usb: schedule remote query interval to 150 msecs.
[  540.855534][ T5808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  541.038989][  T977] dvb-usb: bulk message failed: -22 (1/0)
[  541.279040][  T977] dvb-usb: error while querying for an remote control event.
[  541.340220][ T5808] usb 3-1: USB disconnect, device number 33
[  541.352243][ T9961] 8021q: adding VLAN 0 to HW filter on device team0
[  541.410588][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.418247][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.573542][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.580877][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.590841][ T5808] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  542.009382][T10126] netlink: 224 bytes leftover after parsing attributes in process `syz.2.980'.
[  542.853659][ T9961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  542.905678][ T9961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  543.448955][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'.
[  545.199836][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.321860][ T5828] Bluetooth: hci5: command 0x0405 tx timeout
[  547.629807][T10178] netlink: 'syz.3.991': attribute type 10 has an invalid length.
[  547.637889][T10178] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  547.837215][ T5873] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  548.137919][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'.
[  548.792395][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.817787][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  549.092977][ T5873] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  549.211088][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.274166][ T5873] usb 3-1: config 0 descriptor??
[  549.337764][ T5873] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  549.517195][ T5873] dvb-usb: bulk message failed: -22 (3/0)
[  549.528716][ T5873] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  549.556753][ T5873] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  550.311363][ T9961] veth0_vlan: entered promiscuous mode
[  550.324520][ T9961] veth1_vlan: entered promiscuous mode
[  550.356828][ T9961] veth0_macvtap: entered promiscuous mode
[  550.407228][ T5873] usb 3-1: media controller created
[  550.414743][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  550.566326][ T5873] dvb-usb: bulk message failed: -22 (6/0)
[  550.572296][ T5873] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  550.582871][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  550.621469][ T9961] veth1_macvtap: entered promiscuous mode
[  550.646195][ T5873] dvb-usb: schedule remote query interval to 150 msecs.
[  550.717176][ T5873] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  550.849235][ T5873] usb 3-1: USB disconnect, device number 34
[  550.860501][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.900800][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.939434][ T9961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.032344][ T9961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.052819][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  551.106818][ T9961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.133776][ T9961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.357398][ T5893] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  551.558712][ T5893] usb 4-1: not running at top speed; connect to a high speed hub
[  551.608688][ T5893] usb 4-1: config 1 interface 0 has no altsetting 0
[  551.680656][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.721898][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  551.781290][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.813030][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.885196][ T5893] usb 4-1: Product: syz
[  551.911069][ T5893] usb 4-1: Manufacturer: syz
[  551.931763][ T5893] usb 4-1: SerialNumber: syz
[  551.983681][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.056165][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.348418][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14
[  552.493816][ T5174] bcm5974 4-1:1.0: could not read from device
[  552.553329][ T5174] bcm5974 4-1:1.0: could not read from device
[  552.580919][ T5893] usb 4-1: USB disconnect, device number 32
[  552.838496][T10235] netlink: 'syz.5.939': attribute type 10 has an invalid length.
[  552.983858][T10235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  554.203208][T10250] netlink: 'syz.0.1005': attribute type 13 has an invalid length.
[  554.837421][T10250] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.872272][T10250] 8021q: adding VLAN 0 to HW filter on device team0
[  554.983588][T10250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  557.191093][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'.
[  557.637254][ T8473] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  558.127164][ T8473] usb 4-1: Using ep0 maxpacket: 32
[  558.155600][ T8473] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.411182][ T8473] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.321621][T10298] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.329200][T10298] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.336952][T10298] bridge0: entered allmulticast mode
[  559.403047][ T8473] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  559.447814][ T8473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.575422][ T8473] hub 4-1:4.0: USB hub found
[  559.770676][ T8473] hub 4-1:4.0: 2 ports detected
[  559.966089][ T8473] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  560.051154][ T8473] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  560.157642][ T8473] usb 4-1: USB disconnect, device number 33
[  563.317395][  T977] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  563.442357][T10356] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  563.527020][T10356] netlink: 'syz.2.1028': attribute type 1 has an invalid length.
[  563.562701][  T977] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  563.604867][  T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.634850][  T977] usb 6-1: Product: syz
[  563.657365][  T977] usb 6-1: Manufacturer: syz
[  563.663275][  T977] usb 6-1: SerialNumber: syz
[  563.684376][  T977] usb 6-1: config 0 descriptor??
[  563.696340][  T977] cypress_m8 6-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  563.706023][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'.
[  563.735376][  T977] nokiaca42v2 ttyUSB0: required endpoint is missing
[  563.831901][T10357] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  563.885415][T10357] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  563.918204][T10357] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  563.959976][T10357] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  563.989821][ T5873] usb 6-1: USB disconnect, device number 2
[  564.009483][ T5873] cypress_m8 6-1:0.0: device disconnected
[  564.034911][T10357] bond1: (slave geneve2): making interface the new active one
[  564.148954][T10357] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  564.197533][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'.
[  564.266013][T10359] 8021q: adding VLAN 0 to HW filter on device bond1
[  568.077688][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  570.847186][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  571.012038][    T9] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  571.069321][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.152949][    T9] usb 2-1: Product: syz
[  571.216276][    T9] usb 2-1: Manufacturer: syz
[  571.243437][    T9] usb 2-1: SerialNumber: syz
[  571.312920][    T9] usb 2-1: config 0 descriptor??
[  571.490698][    T9] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  571.618690][ T5808] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  571.828294][    T9] nokiaca42v2 ttyUSB0: required endpoint is missing
[  572.937248][ T5808] usb 3-1: Using ep0 maxpacket: 16
[  572.978822][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.051387][ T5808] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice=28.8b
[  573.233043][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.262136][ T5808] usb 3-1: config 0 descriptor??
[  574.181380][ T5808] uclogic 0003:5543:0005.000C: unknown main item tag 0x0
[  574.198152][ T5808] uclogic 0003:5543:0005.000C: unknown main item tag 0x0
[  574.205279][ T5808] uclogic 0003:5543:0005.000C: unknown main item tag 0x0
[  574.221604][ T5808] uclogic 0003:5543:0005.000C: No inputs registered, leaving
[  574.281910][ T5808] uclogic 0003:5543:0005.000C: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0
[  574.292432][ T5905] usb 2-1: USB disconnect, device number 39
[  574.377395][ T5905] cypress_m8 2-1:0.0: device disconnected
[  574.460622][ T5808] usb 3-1: USB disconnect, device number 35
[  574.988020][T10453] fido_id[10453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  576.648847][T10483] overlayfs: missing 'lowerdir'
[  580.551502][T10517] netlink: 'syz.3.1063': attribute type 10 has an invalid length.
[  580.567279][T10517] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  581.667232][  T977] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  582.245960][  T977] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[  582.277504][  T977] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[  582.285746][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.337151][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  582.456003][  T977] usb 3-1: config 0 has no interface number 0
[  582.506832][  T977] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  582.612774][  T977] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  582.663372][  T977] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  582.992600][T10535] FAULT_INJECTION: forcing a failure.
[  582.992600][T10535] name failslab, interval 1, probability 0, space 0, times 0
[  583.005379][T10535] CPU: 1 UID: 0 PID: 10535 Comm: syz.3.1068 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  583.005409][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  583.005423][T10535] Call Trace:
[  583.005433][T10535]  <TASK>
[  583.005443][T10535]  dump_stack_lvl+0x189/0x250
[  583.005480][T10535]  ? __pfx____ratelimit+0x10/0x10
[  583.005504][T10535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.005537][T10535]  ? __pfx__printk+0x10/0x10
[  583.005565][T10535]  ? __pfx___might_resched+0x10/0x10
[  583.005591][T10535]  ? fs_reclaim_acquire+0x7d/0x100
[  583.005621][T10535]  should_fail_ex+0x414/0x560
[  583.005651][T10535]  should_failslab+0xa8/0x100
[  583.005687][T10535]  __kmalloc_noprof+0xcb/0x4f0
[  583.005718][T10535]  ? copy_splice_read+0x143/0x9b0
[  583.005747][T10535]  ? preempt_schedule_irq+0xde/0x150
[  583.005773][T10535]  copy_splice_read+0x143/0x9b0
[  583.005815][T10535]  ? __pfx_iter_file_splice_write+0x10/0x10
[  583.005849][T10535]  ? __pfx_copy_splice_read+0x10/0x10
[  583.005878][T10535]  ? rcu_read_lock_any_held+0xb3/0x120
[  583.005905][T10535]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  583.005937][T10535]  ? direct_splice_actor+0x10c/0x160
[  583.005970][T10535]  ? __pfx_iter_file_splice_write+0x10/0x10
[  583.006004][T10535]  ? file_end_write+0x156/0x250
[  583.006037][T10535]  ? direct_splice_actor+0x10c/0x160
[  583.006072][T10535]  ? __pfx_copy_splice_read+0x10/0x10
[  583.006101][T10535]  splice_direct_to_actor+0x4a9/0xcc0
[  583.006156][T10535]  ? __pfx_direct_splice_actor+0x10/0x10
[  583.006188][T10535]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  583.006233][T10535]  do_splice_direct+0x181/0x270
[  583.006268][T10535]  ? __pfx_do_splice_direct+0x10/0x10
[  583.006301][T10535]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  583.006344][T10535]  ? rw_verify_area+0x258/0x650
[  583.006385][T10535]  do_sendfile+0x4da/0x7e0
[  583.006407][T10535]  ? __pfx_vfs_write+0x10/0x10
[  583.006444][T10535]  ? __pfx_do_sendfile+0x10/0x10
[  583.006466][T10535]  ? __fget_files+0x3a0/0x420
[  583.006499][T10535]  __se_sys_sendfile64+0x13e/0x190
[  583.006523][T10535]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  583.006551][T10535]  ? do_syscall_64+0xbe/0x3b0
[  583.006579][T10535]  do_syscall_64+0xfa/0x3b0
[  583.006605][T10535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.006626][T10535]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  583.006648][T10535]  ? clear_bhb_loop+0x60/0xb0
[  583.006674][T10535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.006696][T10535] RIP: 0033:0x7f511358e969
[  583.006717][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.006737][T10535] RSP: 002b:00007f51143aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  583.006759][T10535] RAX: ffffffffffffffda RBX: 00007f51137b6160 RCX: 00007f511358e969
[  583.006776][T10535] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  583.006789][T10535] RBP: 00007f51143aa090 R08: 0000000000000000 R09: 0000000000000000
[  583.006803][T10535] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000002
[  583.006817][T10535] R13: 0000000000000000 R14: 00007f51137b6160 R15: 00007ffed3a5df28
[  583.006852][T10535]  </TASK>
[  583.446192][  T977] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.908635][  T977] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  583.951335][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.025886][  T977] usb 3-1: config 0 descriptor??
[  584.089688][T10540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  584.094783][  T977] gspca_main: spca561-2.14.0 probing abcd:cdee
[  584.407645][   T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  584.701756][   T43] usb 6-1: Using ep0 maxpacket: 8
[  584.767466][  T977] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[  584.774993][   T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  584.776853][  T977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  584.830277][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.856564][T10549] syz.1.1072: attempt to access beyond end of device
[  584.856564][T10549] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  584.889770][   T43] usb 6-1: Product: syz
[  584.905989][   T43] usb 6-1: Manufacturer: syz
[  584.915594][  T977] usb 3-1: MIDIStreaming interface descriptor not found
[  584.924809][   T43] usb 6-1: SerialNumber: syz
[  584.953749][   T43] usb 6-1: config 0 descriptor??
[  584.987823][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  585.241946][  T977] usb 3-1: USB disconnect, device number 36
[  585.765335][    T9] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  585.817828][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.825895][    T9] usb 4-1: Product: syz
[  585.947407][    T9] usb 4-1: Manufacturer: syz
[  585.952088][    T9] usb 4-1: SerialNumber: syz
[  586.057587][    T9] usb 4-1: config 0 descriptor??
[  586.075270][    T9] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  586.148339][    T9] nokiaca42v2 ttyUSB0: required endpoint is missing
[  586.152852][   T43] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  586.195784][   T30] audit: type=1107 audit(1748592645.722:220): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1'
[  586.254904][T10562] overlayfs: failed to clone upperpath
[  586.325635][   T30] audit: type=1107 audit(1748592645.752:221): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1'
[  587.062878][  T977] usb 4-1: USB disconnect, device number 34
[  587.081224][  T977] cypress_m8 4-1:0.0: device disconnected
[  587.717160][  T977] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  587.927523][  T977] usb 4-1: Using ep0 maxpacket: 16
[  587.953757][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.020891][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.080705][  T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  588.165634][  T977] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  588.236524][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.314408][  T977] usb 4-1: config 0 descriptor??
[  589.261672][T10602] xt_HMARK: proto mask must be zero with L3 mode
[  591.258134][   T43] usb write operation failed. (-110)
[  591.846862][   T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  591.937736][   T43] dvbdev: DVB: registering new adapter (Terratec H7)
[  592.047338][   T43] usb 6-1: media controller created
[  592.113299][   T43] usb read operation failed. (-32)
[  592.155036][   T43] usb write operation failed. (-71)
[  592.197571][T10608] fuse: Bad value for 'fd'
[  592.209813][   T43] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  592.243393][T10608] 9pnet_fd: Insufficient options for proto=fd
[  592.334578][   T43] usb 6-1: USB disconnect, device number 3
[  592.627313][  T977] usbhid 4-1:0.0: can't add hid device: -71
[  592.634326][  T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  592.778378][  T977] usb 4-1: USB disconnect, device number 35
[  592.935043][T10618] overlayfs: failed to clone upperpath
[  593.127543][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  593.558213][T10627] sock: sock_timestamping_bind_phc: sock not bind to device
[  593.877726][ T5893] usb 6-1: Using ep0 maxpacket: 32
[  593.906026][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  594.170495][  T977] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  594.203259][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  594.267101][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  594.367497][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  594.401231][T10633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1092'.
[  594.407330][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  594.445935][  T977] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  594.465286][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.542781][  T977] usb 3-1: Product: syz
[  594.564914][ T5893] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  594.577103][  T977] usb 3-1: Manufacturer: syz
[  594.581754][  T977] usb 3-1: SerialNumber: syz
[  594.596716][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.665696][ T5893] usb 6-1: Product: syz
[  594.673151][ T5893] usb 6-1: Manufacturer: syz
[  594.679118][  T977] usb 3-1: config 0 descriptor??
[  594.710680][  T977] cypress_m8 3-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  594.718534][ T5893] usb 6-1: SerialNumber: syz
[  594.737751][ T5893] usb 6-1: config 0 descriptor??
[  594.754392][  T977] nokiaca42v2 ttyUSB0: required endpoint is missing
[  594.974689][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.007633][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.034229][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.088792][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.192465][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.208819][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.240900][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.262448][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.287517][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.344959][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.388381][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.447219][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.465931][    T9] usb 3-1: USB disconnect, device number 37
[  595.484640][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.491009][    T9] cypress_m8 3-1:0.0: device disconnected
[  595.541124][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.578018][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.589666][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.627173][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.809467][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  595.903278][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  596.001173][ T5893] iforce 6-1:0.0: usb_submit_urb failed: -71
[  596.080417][ T5893] input input15: Timeout waiting for response from device.
[  596.383345][ T5893] usb 6-1: USB disconnect, device number 4
[  596.678556][T10660] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1100'.
[  597.067312][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  597.879120][ T5893] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  597.921492][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.932535][ T5893] usb 6-1: Product: syz
[  597.936838][ T5893] usb 6-1: Manufacturer: syz
[  597.949539][ T5893] usb 6-1: SerialNumber: syz
[  597.975491][ T5893] usb 6-1: config 0 descriptor??
[  597.992221][ T5893] cypress_m8 6-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  598.025697][ T5893] nokiaca42v2 ttyUSB0: required endpoint is missing
[  600.413921][ T5875] usb 6-1: USB disconnect, device number 5
[  600.447016][T10684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1107'.
[  600.658413][ T5875] cypress_m8 6-1:0.0: device disconnected
[  600.777797][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'.
[  602.085301][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'.
[  602.287252][ T5893] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  603.015660][ T5893] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  603.042475][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.507866][ T5893] usb 2-1: Product: syz
[  603.515024][ T5893] usb 2-1: Manufacturer: syz
[  603.527015][ T5893] usb 2-1: SerialNumber: syz
[  603.674140][ T5893] usb 2-1: config 0 descriptor??
[  603.816968][ T5893] usb 2-1: can't set config #0, error -71
[  603.899785][ T5893] usb 2-1: USB disconnect, device number 40
[  605.947224][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  605.977215][ T5875] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  606.122651][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  606.149202][ T5893] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  606.176131][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  606.181439][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.191866][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61
[  606.201483][ T5875] usb 2-1: can't read configurations, error -61
[  606.212550][ T5893] usb 6-1: config 0 descriptor??
[  606.357313][ T5875] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  606.517226][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  606.525232][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61
[  606.586523][ T5875] usb 2-1: can't read configurations, error -61
[  606.618203][ T5875] usb usb2-port1: attempt power cycle
[  606.900111][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.947555][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.066394][ T5875] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  607.418120][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  607.427201][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  607.438888][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61
[  607.446556][ T5875] usb 2-1: can't read configurations, error -61
[  607.597213][ T5875] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  607.637160][    T9] usb 4-1: Using ep0 maxpacket: 16
[  607.647988][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  607.654504][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  607.679893][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61
[  607.727390][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  607.738775][ T5875] usb 2-1: can't read configurations, error -61
[  607.746900][ T5875] usb usb2-port1: unable to enumerate USB device
[  607.762293][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  607.807485][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.846021][    T9] usb 4-1: Product: syz
[  607.872267][    T9] usb 4-1: Manufacturer: syz
[  607.876967][    T9] usb 4-1: SerialNumber: syz
[  607.938159][    T9] usb 4-1: config 0 descriptor??
[  607.981946][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  608.011021][    T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  608.558412][ T5893] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  608.587850][ T5893] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  608.666818][ T5893] asix 6-1:0.0: probe with driver asix failed with error -71
[  608.707909][ T5893] usb 6-1: USB disconnect, device number 6
[  609.170437][    T9] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  609.178487][    T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  610.872040][  T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  610.881428][    T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  610.912522][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  610.926477][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  610.944335][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  610.962017][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  610.976745][T10765] fuse: Unknown parameter 'h áöŽ²žÇ?‘¬F–ßÇ.îÀºy~O¼SFeS3ˆMééH	û	ÏItýf-kÜçÄ÷'£…„	©É6].†©áQ“{eš#ßÖ'
[  610.998920][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  611.067646][  T977] usb 6-1: Using ep0 maxpacket: 32
[  611.083289][  T977] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  611.114882][  T977] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  611.146296][  T977] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  611.182106][  T977] usb 6-1: Product: syz
[  611.201914][  T977] usb 6-1: Manufacturer: syz
[  611.206625][  T977] usb 6-1: SerialNumber: syz
[  611.245847][  T977] usb 6-1: config 0 descriptor??
[  611.270809][T10763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  611.340600][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'.
[  611.623656][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.838063][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.659858][   T43] usb 6-1: USB disconnect, device number 7
[  616.325243][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1142'.
[  621.842991][T10776] bond_slave_0: entered promiscuous mode
[  621.849250][T10776] bond_slave_1: entered promiscuous mode
[  621.855229][T10776] macsec1: entered promiscuous mode
[  621.860509][T10776] bond0: entered promiscuous mode
[  621.866036][T10776] macsec1: entered allmulticast mode
[  621.871387][T10776] bond0: entered allmulticast mode
[  621.876495][T10776] bond_slave_0: entered allmulticast mode
[  621.882244][T10776] bond_slave_1: entered allmulticast mode
[  621.910000][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1146'.
[  621.980156][ T8473] usb 4-1: USB disconnect, device number 36
[  625.577712][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  625.607420][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  625.621747][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  625.658248][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  625.666777][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  625.803211][ T1108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.320257][ T1108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.934207][ T1108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.186153][ T1108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.743747][ T5828] Bluetooth: hci3: command tx timeout
[  628.675254][ T1108] bridge_slave_1: left allmulticast mode
[  628.742870][ T1108] bridge_slave_1: left promiscuous mode
[  628.779026][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.909617][ T1108] bridge_slave_0: left allmulticast mode
[  628.915334][ T1108] bridge_slave_0: left promiscuous mode
[  628.972336][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.738385][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  629.817228][ T5828] Bluetooth: hci3: command tx timeout
[  630.668837][T10874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1159'.
[  631.448636][ T8473] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  631.639113][ T8473] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  631.667513][ T8473] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  631.689286][ T8473] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  631.710456][ T8473] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  631.720363][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  631.729439][ T8473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.754867][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.800493][ T1108] bond0 (unregistering): Released all slaves
[  631.897725][ T5828] Bluetooth: hci3: command tx timeout
[  631.903505][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1157'.
[  631.912779][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'.
[  631.922568][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'.
[  632.475921][ T1108] tipc: Left network mode
[  633.977411][ T5828] Bluetooth: hci3: command tx timeout
[  634.237187][ T8473] usb 2-1: string descriptor 0 read error: -71
[  634.400677][ T8473] usb 2-1: USB disconnect, device number 45
[  636.112062][T10844] chnl_net:caif_netlink_parms(): no params data found
[  636.802720][ T1108] hsr_slave_0: left promiscuous mode
[  637.447129][  T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  637.515739][ T1108] hsr_slave_1: left promiscuous mode
[  637.542527][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.597358][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.622100][  T977] usb 6-1: Using ep0 maxpacket: 8
[  637.669289][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.669693][  T977] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  637.736180][  T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.741980][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.795755][  T977] usb 6-1: Product: syz
[  637.817791][  T977] usb 6-1: Manufacturer: syz
[  637.856322][  T977] usb 6-1: SerialNumber: syz
[  637.904263][  T977] usb 6-1: config 0 descriptor??
[  638.001046][ T1108] veth1_macvtap: left promiscuous mode
[  638.043859][ T1108] veth0_macvtap: left promiscuous mode
[  638.083383][ T1108] veth1_vlan: left promiscuous mode
[  638.124754][ T1108] veth0_vlan: left promiscuous mode
[  638.133007][  T977] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  640.408944][   T30] audit: type=1326 audit(1748592699.942:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.491982][   T30] audit: type=1326 audit(1748592699.942:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.514336][   T30] audit: type=1326 audit(1748592699.962:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f948dd8d2d0 code=0x7ffc0000
[  640.562564][   T30] audit: type=1326 audit(1748592699.962:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.597268][   T30] audit: type=1326 audit(1748592699.962:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.647010][   T30] audit: type=1326 audit(1748592700.072:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.954034][   T30] audit: type=1326 audit(1748592700.072:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  640.964416][  T977] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  641.733900][  T977] usb 6-1: USB disconnect, device number 8
[  641.840639][   T30] audit: type=1326 audit(1748592700.072:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948dd8e969 code=0x7ffc0000
[  642.099946][T10950] netlink: 'syz.2.1175': attribute type 21 has an invalid length.
[  642.598821][T10949] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1177'.
[  642.677198][T10949] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1177'.
[  643.951338][ T1108] team0 (unregistering): Port device team_slave_1 removed
[  644.127886][ T1108] team0 (unregistering): Port device team_slave_0 removed
[  645.738678][T10950] netlink: 'syz.2.1175': attribute type 6 has an invalid length.
[  645.777565][T10950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'.
[  646.951641][ T9963] Bluetooth: hci5: command 0x0405 tx timeout
[  648.857883][T10844] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.917690][T10844] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.952000][T10844] bridge_slave_0: entered allmulticast mode
[  648.979327][T10844] bridge_slave_0: entered promiscuous mode
[  650.673654][T10844] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.681861][T10844] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.690691][T10844] bridge_slave_1: entered allmulticast mode
[  650.698921][T10844] bridge_slave_1: entered promiscuous mode
[  651.411733][ T5905] IPVS: starting estimator thread 0...
[  651.585343][T11023] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  652.131923][T11021] IPVS: using max 28 ests per chain, 67200 per kthread
[  652.182366][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.380535][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.746610][ T1108] IPVS: stop unused estimator thread 0...
[  656.804041][T11036] i2c i2c-0: Invalid block write size 34
[  656.820293][T11036] netlink: 'syz.5.1194': attribute type 1 has an invalid length.
[  656.879280][T10844] team0: Port device team_slave_0 added
[  657.111213][    T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  657.187797][T11036] 8021q: adding VLAN 0 to HW filter on device bond1
[  657.339101][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  657.379680][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  657.530225][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  657.747434][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.694768][    T9] usb 6-1: Product: syz
[  658.717892][    T9] usb 6-1: Manufacturer: syz
[  658.722580][    T9] usb 6-1: SerialNumber: syz
[  658.725659][T10844] team0: Port device team_slave_1 added
[  658.772764][    T9] usb 6-1: can't set config #1, error -71
[  658.803813][    T9] usb 6-1: USB disconnect, device number 9
[  658.958915][T11058] FAULT_INJECTION: forcing a failure.
[  658.958915][T11058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.050364][T11058] CPU: 0 UID: 0 PID: 11058 Comm: syz.5.1199 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  659.050398][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  659.050412][T11058] Call Trace:
[  659.050421][T11058]  <TASK>
[  659.050431][T11058]  dump_stack_lvl+0x189/0x250
[  659.050469][T11058]  ? __pfx____ratelimit+0x10/0x10
[  659.050502][T11058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.050534][T11058]  ? __pfx__printk+0x10/0x10
[  659.050571][T11058]  should_fail_ex+0x414/0x560
[  659.050602][T11058]  _copy_to_user+0x31/0xb0
[  659.050636][T11058]  simple_read_from_buffer+0xe1/0x170
[  659.050674][T11058]  proc_fail_nth_read+0x1df/0x250
[  659.050702][T11058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.050729][T11058]  ? rw_verify_area+0x258/0x650
[  659.050758][T11058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.050784][T11058]  vfs_read+0x1fd/0x980
[  659.050819][T11058]  ? __pfx___mutex_lock+0x10/0x10
[  659.050844][T11058]  ? __pfx_vfs_read+0x10/0x10
[  659.050875][T11058]  ? __fget_files+0x2a/0x420
[  659.050901][T11058]  ? __fget_files+0x3a0/0x420
[  659.050919][T11058]  ? __fget_files+0x2a/0x420
[  659.050949][T11058]  ksys_read+0x145/0x250
[  659.050981][T11058]  ? __pfx_ksys_read+0x10/0x10
[  659.051011][T11058]  ? rcu_is_watching+0x15/0xb0
[  659.051037][T11058]  ? trace_sys_enter+0x25/0x120
[  659.051066][T11058]  do_syscall_64+0xfa/0x3b0
[  659.051089][T11058]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.051111][T11058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.051133][T11058]  ? clear_bhb_loop+0x60/0xb0
[  659.051160][T11058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.051182][T11058] RIP: 0033:0x7f6607b8d37c
[  659.051201][T11058] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  659.051221][T11058] RSP: 002b:00007f66089b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  659.051245][T11058] RAX: ffffffffffffffda RBX: 00007f6607db5fa0 RCX: 00007f6607b8d37c
[  659.051262][T11058] RDX: 000000000000000f RSI: 00007f66089b10a0 RDI: 0000000000000005
[  659.051275][T11058] RBP: 00007f66089b1090 R08: 0000000000000000 R09: 0000000000000010
[  659.051289][T11058] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  659.051303][T11058] R13: 0000000000000000 R14: 00007f6607db5fa0 R15: 00007ffc12a30568
[  659.051339][T11058]  </TASK>
[  660.083004][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.148827][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  660.254126][   T31] INFO: task syz.4.914:9818 blocked for more than 143 seconds.
[  660.418324][   T31]       Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0
[  660.520089][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  660.698103][   T31] task:syz.4.914       state:D stack:28296 pid:9818  tgid:9811  ppid:5822   task_flags:0x400040 flags:0x00004004
[  660.710166][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  660.828903][   T31] Call Trace:
[  660.832520][   T31]  <TASK>
[  660.835558][   T31]  __schedule+0x16a2/0x4cb0
[  660.841272][   T31]  ? __lock_acquire+0x9f1/0xd20
[  660.846897][   T31]  ? schedule+0x165/0x360
[  660.852062][   T31]  ? __pfx___schedule+0x10/0x10
[  660.857917][   T31]  ? schedule+0x91/0x360
[  660.862454][   T31]  schedule+0x165/0x360
[  660.897111][   T31]  schedule_preempt_disabled+0x13/0x30
[  660.902652][   T31]  __mutex_lock+0x724/0xe80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  660.947178][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  660.952459][   T31]  ? __mutex_lock+0x51b/0xe80
[  661.157161][   T31]  ? blk_trace_startstop+0xa3/0x640
[  661.162652][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  661.177103][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  661.183365][   T31]  blk_trace_startstop+0xa3/0x640
[  661.197631][   T31]  ? stack_depot_save_flags+0x40/0x900
[  661.221393][   T31]  ? __pfx_blk_trace_startstop+0x10/0x10
[  661.227613][   T31]  ? kasan_save_track+0x4f/0x80
[  661.232526][   T31]  ? kasan_save_track+0x3e/0x80
[  661.307265][   T31]  ? kasan_save_free_info+0x46/0x50
[  661.312569][   T31]  ? __kasan_slab_free+0x62/0x70
[  661.342182][   T31]  ? kfree+0x18e/0x440
[  661.346341][   T31]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  661.407136][   T31]  ? security_file_ioctl+0xcb/0x2d0
[  661.412432][   T31]  blk_trace_ioctl+0x19b/0x430
[  661.457367][   T31]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  661.463458][   T31]  ? do_vfs_ioctl+0xf37/0x1990
[  661.487440][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  661.501413][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  661.506909][   T31]  blkdev_common_ioctl+0xdce/0x2450
[  661.517818][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  661.523522][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  661.557119][   T31]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  661.563532][   T31]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  661.582457][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  661.593200][   T31]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  661.626189][   T31]  ? __count_memcg_events+0x19f/0x370
[  661.632142][   T31]  ? __lock_acquire+0xab9/0xd20
[  661.647120][   T31]  ? __asan_memset+0x22/0x50
[  661.694936][   T31]  ? smack_file_ioctl+0x24a/0x340
[  661.712289][   T31]  ? __pfx_smack_file_ioctl+0x10/0x10
[  661.737248][   T31]  blkdev_ioctl+0x4ef/0x6d0
[  661.741806][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  661.746835][   T31]  ? __fget_files+0x2a/0x420
[  661.778949][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  661.783974][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  661.809779][   T31]  __se_sys_ioctl+0xfc/0x170
[  661.814457][   T31]  do_syscall_64+0xfa/0x3b0
[  661.829230][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.834478][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.856727][   T31]  ? clear_bhb_loop+0x60/0xb0
[  661.862513][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.875435][   T31] RIP: 0033:0x7f6d4cb8e969
[  661.880356][   T31] RSP: 002b:00007f6d4da4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  661.897861][   T31] RAX: ffffffffffffffda RBX: 00007f6d4cdb6080 RCX: 00007f6d4cb8e969
[  661.927140][   T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003
[  661.935188][   T31] RBP: 00007f6d4cc10ab1 R08: 0000000000000000 R09: 0000000000000000
[  661.952520][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  662.013379][   T31] R13: 0000000000000001 R14: 00007f6d4cdb6080 R15: 00007fff6c08f728
[  662.050213][   T31]  </TASK>
[  662.066126][   T31] 
[  662.066126][   T31] Showing all locks held in the system:
[  662.207447][   T31] 1 lock held by khungtaskd/31:
[  662.212372][   T31]  #0: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  662.247644][   T31] 2 locks held by kworker/1:1/43:
[  662.252743][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  662.367127][   T31]  #1: ffffc90000b37bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  662.456100][   T31] 2 locks held by kworker/u8:5/1108:
[  662.477727][   T31] 3 locks held by kworker/1:2/3076:
[  662.483673][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  662.567384][   T31]  #1: ffffc9000bdd7bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  662.656294][   T31]  #2: ffffffff8e1427f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  662.717120][   T31] 2 locks held by getty/5580:
[  662.721867][   T31]  #0: ffff888030a370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  662.807176][   T31]  #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  662.872232][   T31] 3 locks held by syz.4.914/9814:
[  662.917116][   T31] 1 lock held by syz.4.914/9818:
[  662.922255][   T31]  #0: ffff888024e143d0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0xa3/0x640
[  663.037097][   T31] 1 lock held by syz-executor/9961:
[  663.042373][   T31] 1 lock held by syz-executor/10844:
[  663.087494][   T31] 2 locks held by dhcpcd/11070:
[  663.092415][   T31]  #0: ffff88807b9e3208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  663.167197][   T31]  #1: ffffffff8e1427f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  663.227083][   T31] 1 lock held by dhcpcd/11071:
[  663.231921][   T31]  #0: ffff88807b9e0208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  663.337247][   T31] 2 locks held by sed/11076:
[  663.347216][   T31] 
[  663.349611][   T31] =============================================
[  663.349611][   T31] 
[  663.425545][   T31] NMI backtrace for cpu 1
[  663.425570][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  663.425597][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  663.425610][   T31] Call Trace:
[  663.425619][   T31]  <TASK>
[  663.425628][   T31]  dump_stack_lvl+0x189/0x250
[  663.425663][   T31]  ? __wake_up_klogd+0xd9/0x110
[  663.425697][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.425728][   T31]  ? __pfx__printk+0x10/0x10
[  663.425765][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  663.425802][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  663.425830][   T31]  ? _printk+0xcf/0x120
[  663.425856][   T31]  ? __pfx__printk+0x10/0x10
[  663.425880][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  663.425905][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  663.425941][   T31]  watchdog+0xfee/0x1030
[  663.425963][   T31]  ? watchdog+0x1de/0x1030
[  663.425993][   T31]  kthread+0x70e/0x8a0
[  663.426028][   T31]  ? __pfx_watchdog+0x10/0x10
[  663.426048][   T31]  ? __pfx_kthread+0x10/0x10
[  663.426081][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.426116][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.426136][   T31]  ? __pfx_kthread+0x10/0x10
[  663.426168][   T31]  ret_from_fork+0x3fc/0x770
[  663.426194][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  663.426224][   T31]  ? __switch_to_asm+0x39/0x70
[  663.426242][   T31]  ? __switch_to_asm+0x33/0x70
[  663.426261][   T31]  ? __pfx_kthread+0x10/0x10
[  663.426301][   T31]  ret_from_fork_asm+0x1a/0x30
[  663.426340][   T31]  </TASK>
[  663.426348][   T31] Sending NMI from CPU 1 to CPUs 0:
[  663.586833][    C0] NMI backtrace for cpu 0
[  663.586850][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  663.586872][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  663.586884][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  663.586908][    C0] Code: 03 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 62 2b 00 f3 0f 1e fa fb f4 <e9> d8 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  663.586925][    C0] RSP: 0000:ffffffff8de07d80 EFLAGS: 000002c6
[  663.586941][    C0] RAX: 3aa812322b193900 RBX: ffffffff81973fe8 RCX: 3aa812322b193900
[  663.586956][    C0] RDX: 0000000000000001 RSI: ffffffff8d959ac8 RDI: ffffffff8be19040
[  663.586969][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  663.586983][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9f8bf0
[  663.586997][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a48
[  663.587014][    C0] FS:  0000000000000000(0000) GS:ffff888125c98000(0000) knlGS:0000000000000000
[  663.587030][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  663.587043][    C0] CR2: 00007f62c8e98fe8 CR3: 0000000033128000 CR4: 00000000003526f0
[  663.587062][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  663.587074][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  663.587087][    C0] Call Trace:
[  663.587095][    C0]  <TASK>
[  663.587103][    C0]  default_idle+0x13/0x20
[  663.587128][    C0]  default_idle_call+0x74/0xb0
[  663.587156][    C0]  do_idle+0x1e8/0x510
[  663.587185][    C0]  ? __pfx_do_idle+0x10/0x10
[  663.587221][    C0]  cpu_startup_entry+0x44/0x60
[  663.587246][    C0]  rest_init+0x2de/0x300
[  663.587273][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  663.587305][    C0]  start_kernel+0x478/0x500
[  663.587329][    C0]  x86_64_start_reservations+0x24/0x30
[  663.587355][    C0]  x86_64_start_kernel+0x143/0x1c0
[  663.587379][    C0]  common_startup_64+0x13e/0x147
[  663.587415][    C0]  </TASK>
[  663.790199][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  663.797125][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
[  663.808581][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  663.818640][   T31] Call Trace:
[  663.821917][   T31]  <TASK>
[  663.824929][   T31]  dump_stack_lvl+0x99/0x250
[  663.829531][   T31]  ? __asan_memcpy+0x40/0x70
[  663.834121][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.839325][   T31]  ? __pfx__printk+0x10/0x10
[  663.843923][   T31]  panic+0x2db/0x790
[  663.847830][   T31]  ? __pfx_panic+0x10/0x10
[  663.852254][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[  663.857634][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  663.863035][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  663.869201][   T31]  watchdog+0x102d/0x1030
[  663.873534][   T31]  ? watchdog+0x1de/0x1030
[  663.877958][   T31]  kthread+0x70e/0x8a0
[  663.882034][   T31]  ? __pfx_watchdog+0x10/0x10
[  663.886705][   T31]  ? __pfx_kthread+0x10/0x10
[  663.891305][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.896510][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.901708][   T31]  ? __pfx_kthread+0x10/0x10
[  663.906307][   T31]  ret_from_fork+0x3fc/0x770
[  663.910909][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  663.916038][   T31]  ? __switch_to_asm+0x39/0x70
[  663.920821][   T31]  ? __switch_to_asm+0x33/0x70
[  663.925586][   T31]  ? __pfx_kthread+0x10/0x10
[  663.930192][   T31]  ret_from_fork_asm+0x1a/0x30
[  663.934971][   T31]  </TASK>
[  663.938274][   T31] Kernel Offset: disabled
[  663.942604][   T31] Rebooting in 86400 seconds..