last executing test programs:

2m31.731579347s ago: executing program 1 (id=315):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b280063301"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x1, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"})
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c)

2m28.536026238s ago: executing program 1 (id=324):
r0 = socket$key(0xf, 0x3, 0x2)
write(0xffffffffffffffff, &(0x7f0000000100)="14", 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
shutdown(r5, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth0_to_bond\x00', 0xa039})
writev(r1, &(0x7f0000000040)=[{0x0}], 0x1)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0)

2m27.288385279s ago: executing program 1 (id=328):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000180)=""/4096, &(0x7f0000000080)=0x1000)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e0000a0114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24009000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc8, @none, 0x1, 0xf2, 0x6, 0x7, 0x0, 0x4}}}, 0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x2481, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'gre0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x80, 0x8, 0xfffffff9, 0x2, {{0x1d, 0x4, 0x1, 0x37, 0x74, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x7, 0x58, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0x60, [@multicast1, @multicast2, @broadcast, @local]}, @ra={0x94, 0x4}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0x12, "e2ec1048831b98e072850b955bea21ec"}, {0x2, 0x6, "76940288"}, {0xc20fe054151dce25, 0x2}, {0x7, 0x11, "b7d6c9af1ee2b33a8a0cce754459b1"}, {0x0, 0x3, "d8"}]}, @generic={0x89, 0xd, "a96b53dccd4d54b250023c"}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r3, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x0, 0x54, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x39, 0x0, r3, 0xbd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{r1}, &(0x7f00000018c0), &(0x7f0000001900)='%-010d \x00'}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@generic={&(0x7f0000001980)='./file0\x00', 0x0, 0x10}, 0x18)

2m26.781988728s ago: executing program 1 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r7, &(0x7f0000000080))
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xc00}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x800)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x200, &(0x7f0000000040)="d9be20e99d88a2862ea864d0941bc9d10ba37c20dbc806bd44057ea2257acb2454a100f471a8222c2b205d0ee4797fbb5cd0fda836388ec308b83e1ef7c1e82986c7b793a0d694e4627bb37e", 0x4c, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000001dc0)="45bdcb275444bfc12feffef87f7e7a6a9b3b73ecefddc7975da4ef189bbf6eecaa497ed12f4f0df6bc72549f8a56fc3655eb2dad667426a2a07e5f8fa3f1f214e7ead49fe6aa0cda75f9502836c0604bb660444c47787560bbb7fd0468262e2dce66f5b47a89bbd0b33c850123cda6f4268c5c4ed5982f1c44d990b2c46ccc1d65337d4d35a678d8ec8fff766ca06cc32798e50cb3ee17c729e7140b35917c8f964a33b6e48cf8a45e8dee92d4fa74c7148a2ec9fed32f7c119aa9ba595f72c0a1a355f5befb6e12f6398a5ae78a0938928963f1be6d9a72cff09e936e04bf2b2cd74d175dde4dabdd6495780cc39058895eb7d8d47ddd4220eb23b8df347adbc0cafe8e0ff0bf26d55e76684a37ccf22f7248d568fdb0925308e8dd92048646c914cdbd40f674d54cecf37cf89b9f62016fc114778543b0c883ea587e39f422e4407684c735536a16ffa00dffcc92c66340abc028d5ca2db9d6e74a1042475cce650bfb4e032af221e5f0df7c08d9a2a0f852217bbb4c2593ff0d8708985470004f18f96ad23703b77f7b0a31d3c4ffb8f5177a3eb2f4a78db503b715e8562b5ddc07809888f371914e9991ae01d7a03562fb5f2f206a5cfdeff23e6327602c9254e3a03285a271288d876b6bf9f77e6eddf62ae69a1ec0e2c87e63d1f7550f99b755b61bf6aaabae5a3e4d5eec77fd18245f2da9f74503160c4f6200b28edc9eabbebab343c8bf25e70009e02b0d39fbaa678730951f678ba6f391321b426f6e4f4e11dc2641b611f52e63a9b6582747bd8576e06d2295335ad16cfbb4f76f60aaa6f9a23a8dfbefe67aab40a8bfbbd977e04d18ac98ce1d941eadcb1bc2d7842e670005e896f91db8ce66c98bace2974152fbd8169b889711fe8c9eebf583eb1eca817088b20898e89e97de05cfaa5b2dfc7e6e9175d882160f1ffb23e7acea8c94fd254a8c69a0dede397875340d8ba2284ef80ee8af298e5201b8dd2ea5072a1775e9eaf11e9982f1160c091b86b8efa3b83861a1e74bb8404cd837175cb2eb2b2cd05e720a50e13fea033ebb7da87fc408a433bdd393c26673dedb7b0e484cda43b9a29ba490059f245d7479a267cc74bc8de3c0da5acea2596853ecafdc509f25839fa816a11600da1c3b54d5f9d1410c7e769811a6b0889d6768e185ff94d5e3552e18fff9c8d3dd308c0d80ce18827b76807daee7129f5ae0bb838085d805f03ed7d36d2c93fd69e5980df14acd04d0fdb57bea020595606b4fd176f765ff92f24cebe7758a8df7273e4ef6f3ad334207b4397b8b82401dd1d327b3ead2b1c4b4c1fb8bd723240fec8dea4aec954dbdd2ef78453f8729ee7bbfd10272969d765223000a951a6dce0a917fcf9e594c92313510851ea60afaae61791bd6d1e80e8b70655967c7c3721f9c36cf51c96669dec40500bf539954d35969185aafff5d9198a44e212d541474b67bb07043ac096424ff98948343024bbda00cf74a6da7422f55e868e13a0d535fd15a8cd37b86c0a1608ade2079d1d2724bee8d4e875d032922466ce5fde789de66faa95ec27fda9a312e0b492bd390be69ab2b8dd236be3f3fa396e71b8086edf47f2aed5f36855d3f5f141f252f8528077b4198dee0f63f6b8cdf30683e16c47719337ddbdfff14e11f4146f789ab1fadaea099a6d67d94af2962062e80c5908e012acb20ca714c90181ff6d0f02aae656e79539553a669e995fd0deef27a28a26944c592758dedab971b93a60cb9ff156bee69dbbc1be33ea86dbd3ee9ff7d0bd549d250579f0048e77076e6be960748215ce6c78bb36a2ea6df9e8d11ca0866f5ba82fef86b7947cddd742e0cf2a35b82db87b995f45543981b8599500b664459fb9a03a608e417a0a0a82d13456abc8346b7ff4be532abb06c1e0b7d0f8deff36d51572c90c0fcb609d258dcc205ecae4684a27b21753ec234aa6d88470961d078a04a5f197e199972384084d3729dd0d0ca13e2d52e73e17514fa416ad9fd004d83a55c578f51123d68ced0a7f84976ad0960300d1814dbe714242715b99f7cc622141d56fa43963b01600e3b491114d930bb5ea244babdac1c5fb68837a0af3c7e2493082153ec9b936e59424c9e9ace435784c278d42121a98ace4b07f6081822abe271555fc92badda0fbc2730f5a7fb9704199a8b200a9485d24c805234b6aaa49a7b2bb06d2d088d09d19c0bd98b57f9501c6b84dce74b42399e7173fadb281aeacb04da613f268048b184821a2ae4a88e166e3d7e67631a4caf7c3a0d4dac21de10eb336a030573ded679a54aa26dafe8c5340f1ee35ee7cd933db65df2f28e06a0200ed24578adb945e816581be6478c8f6f66817bad4694e4a5cc29a34b50d38335b85201eee6ccb3b6c78b4fd5e0a9867ad5bdf73b4f57ae0df2f3d56f893acb3f47202413e7b4e67e64cb099858d25d969ed97d5781e6fc30c83b01396741bbe1a3ceddd14ce4de8fb3e1481a5e1ad274ae331d03d2851eb965d217aa235798a4981667193236eef9b696a1bff82877207ec1d05a2e9fa04b295bc1c7c50851a9b3ab16db84b081b2efcb884cfd4a0465c1ae7b1cfb073174054f9f1ecd863ec803a0708e58fc38b3dd6263b6e435ce0aac471e7e107fc5bd5acbec7a3b478f5f55adf44e22b154f89d96f41438d4493e91120991173de73d6e60cca0661a620d02ed92126ad971efbf92e5ac88825ce3b92958dfc8b820894112f31e8c5070a60f072aa8c08bffa02913e1a39736052fe524700c6bf659a3a934dda601706a8230df8f5017125d9bbb397777ebaaaf0a017bcb929b2fbd474fdd6b54f8725176301011bedb555899009806141c3c6f2fc218e3d712b6bedc900065ed77b6a92386eb9cebd3797d672f13db77db3170ad7f7f2a8b4048ef8d757db9b6dd4f23bab7bac2306969e8b260038c7c26674d0b665fc775910ce721612b4aacdf056c57515c42e9763d53d00ed493f7a28fff13e92549fa5da3042fbbf6840f99558a2dd3d7f5f88ecca7f6b302c6837f55e21a8060417a216f32a62d544098afb300f9acbf1b969ae9d9f217fab8c6f18286e6eaea38d54b084be5e99bbaff9754863745f950d8277a3ca2a36cf69bada3beae25776b45f5700839ae76c00282a821399ae92ae3eb426fffed4ca28c8fc7a579a1143d761dab4f13f8ae2c057e8bcbbddc47f3784ce118d49f6ac3b3e087e1b7f8abbd5753c0fa25c3a4e356e8a0722881c407c9a4c66d8568dfd54597fd307fe07d27eb438286705a058264b2a670b7cda493123f27c654597f1612883ae5c29335114417659ab1ed623cf3bde149f1da4330135a6f9b9a03a946a8c7b2791a8b6e60146e94f6b9a2257eb64e3b339729503e7c304b9cbbc65cb67d38107609efa43123982f18d05274ca8c8cd0fe95c6963bc52aa2212172b6a03de2b318c1a827db169dcc5ddf41b618854d304a89875a7891d284bb28474d529f35655e337e63786058ed37976e90e732e33d03135b1ac68ef64968a5cfa28bf8d7cbe7b24ba37b4221d280dd5fbaed08a7f1d4a8663426a84f8f9a0fa6dd5ab488da6f85e73527bc306c6a59e693895003512ef1bf23547de352602338a5487b8deecf584cf2d172bffd6916ba4585d7b60180615e70cd3ffda01d41aad27c6e0f61b0723399372e42fd6e1531c4d30e85dab116d2a5f3ed9a70ff9a4af37758302d110c0abd1b43ca184c2c9b6897bd5f70d500062759348decfb26cc7e9d59e7bfe8b31754dc7fc41fd912397f1293cc5bca2dc3b2d59b8d81e178d3dff0f0f4d9dc65f48d0cccd112c4834dbc627f434f0b6a1eea115154f19d6cb3d5adba154c4333afd154d635d7b3771ecc5cebf5bf93320b745c072dffe4ea9935146687c55883739d94e8fe28f095f90f3b3aabd8c593726739162bfbc597d71780df8a2dd8be929f0972b09a7483ab60ddf1090f11b47f370e4f366d0f0ec6dd2e37f3c2ff53692a684aedeb8b0f9af8a7ca23ae27694177d6bdb52efd57635cd1149f5c7a21769ce6ebea4db416f0d6d8fafadb1f8dba2711830f5ad10e80f577b4966791a9c290fd46ad9496c23f2e4a5ff8a25592d11186bf09379eb40b71ae2ebb90efb67e2d139cb6135c562b4ee34fff5877b657aa671ba68b7332924f929bcdb11d5e62d4f6ec002733cfda10d2aed23dcab6a825a1663c6dadc72d94652932bd6997d97efe7fe54baa3f92328bfcf549e46d84ed4d8521d2927ad4d54994fb6bc982d63d97f43645d0375e63c1a037865b1e19af63bf8a1f4a624b9a4d1eeec49a6dbb4d7ed7e289da074ef09dcd0fd4b75f190b31dcf76cc3bcd0fdff125767429018f798663d6e047d9ead0f1274f6d65b6d2fb95f9456915ab125f07f950a61720cbdb9f890350c5c11506479067304e1559c44367b845d5af44a8b61d5696107c2e2e342f07ab4b8a10a467b05c45851cd160de1980eb8ce6788a9d74dc8fba285a28445bc734e59f99149652f3bf14e264b6d113dd4550629a8bdf3b1b0cbaa508fd9a91915a0a5f7665e17757fc7f00456c2915dffc27dc3526903dce34ad473c3686c7f88994830c451c49a07bd70be33b28c6ce17276be308b73bbdefcfbc2606d12a5fbe5cbfae76815f0c6998c35acd8247618bea3164f53b57a13eb4fab267b35d14fa3981eae1a906df92fb858cc9fd2c87ff68edcfcaab31a520866316ee266b3abe4e2882de8f4d2ea9a4e0474fec56621589db2b31397d8cc7a4af80117b78784ec8b6aed609c575b9dd3d946d3e4f355cde474922fefa6df3297815f0ff5d1ef0808bad13b9470e71ee03fd0311ab0ff897a95d042393d0518c17c3661fbcd241d52c70f52cc8574313d195c5f3974bacab2b6cba6e8c1aa5d67ea0d37575ff1eb45dd01a3b7ced13d85d16112e904eb23219b6e1af57e07298980019d6f26f3c201ab0db161a631761be6f98272a41e3da5badef30d548abe3b9ed2d0699fc9389ec5a27f8bcb329554a6297b139d182d771b8c8236c70e24fc612c98d94ca9e899b4e9fe25f344ca94754d8cb7a27e16d02c83d84c4ed7900837574b851e73bf88c068f9a0fcfec08c547ef304394625b8b7d1c1e4609b6d718b9c69350a3658b70073534b1e33ea93f95cc1a2d7d2e63825b70b4e61f1c85921571db56ece5c1cd4125f3ec45e3e4ba3b33c066294abd905bae492fcb37836d8d7376e88b47c2827a5e3b730136085f13595f5515e7ecf78b88fe8d7e7e73efad254ef6f8116db021b44ac5bc68cb3042f43b2dbbc4bdf90686379202fd90068b4a40263b8a3c52ce1ea20b9d759f6a08ee2367edec22a8a54e5ff2aa1d3fbbd6a3f3fe6f37737360344234846d8e5870be30d3ef5cf61468295313c96dde5e37fd395293dbe24de7aa4f8b58fff285323bdf6d80e26abeb1decda083d193d57deb90c403cc746957e4773540b484f3beae3b86790ea7eb84cdbb47ef9fa82ecc19098ff1e121f9f1fe6b2abfa28a21d63c0df4ec9da6f075429cd5e098296ba749192f17a6a05e64048784890aa2125c02ae535645c39187fc57a91ccc46fba8519efb146763306eeafb67d97017caad79c9d90e0522edb3b3dbb83aa5d598709ed1d7a3deae8bcd955e64375bac184cdb747443d668b6d320aeb8b8e5d0d12132414a2e4c405b1cbfdd3603e1018d199ce5402ec3339966e1a2726d199d52c0289af5a9c318939dd216b735bdeed571da4b4f9b0a52d02dceb05cda5aec3f2be6343fe293bad63ea396403791cae47f668d7804d5f5993f9")

2m25.567632477s ago: executing program 1 (id=330):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125)
read$FUSE(r0, 0x0, 0x0)

2m24.344678474s ago: executing program 1 (id=336):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x40b0, 0x8, 0x2, 0x29}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340))
r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x1, 0x10, 0xffffffffffffffff, 0x20000000)
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_ublk_add_dev(r0, r1, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x8, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x3, 0x659, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f0000000600))

2m8.553038602s ago: executing program 32 (id=336):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x40b0, 0x8, 0x2, 0x29}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340))
r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x1, 0x10, 0xffffffffffffffff, 0x20000000)
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_ublk_add_dev(r0, r1, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x8, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x3, 0x659, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f0000000600))

2m5.557175648s ago: executing program 0 (id=395):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r1=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r1, @in={{0x2, 0xe, @local}}}, 0x84)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

2m3.938309447s ago: executing program 0 (id=400):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010029bd7000000000000a000040000000000000000008000a0004"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x1c, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
syz_ublk_setup_io_uring(0x7948, &(0x7f0000000340)={0x0, 0x9f84, 0x8, 0x3, 0xb4}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
read$FUSE(r3, &(0x7f0000004880)={0x2020}, 0x2020)

2m3.438457517s ago: executing program 0 (id=403):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x8, 0x0, 0x1, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x80}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff88000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

2m0.59758865s ago: executing program 0 (id=408):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000100)=0x5, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
select(0x0, 0x0, 0x0, &(0x7f0000000400)={0xfefe000000000002, 0x1, 0x2, 0x300}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
accept$nfc_llcp(r3, 0x0, &(0x7f0000000140))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x3, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6359e6d55)
shutdown(r5, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r7, 0x6}, &(0x7f0000000100)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r10, 0x52fcd1cc25228f59, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c854}, 0x800)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r11, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x63}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x80)

1m58.903453768s ago: executing program 0 (id=415):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0x10000000001, 0x10, 0xffffffffffffffff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x110)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback={0xff00000000000000}, 0x80, 0x0, 0x1, 0x1}})
read$FUSE(r0, 0x0, 0x500)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
listen(r4, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000000000100008000000000000045df0000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r6}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffff00000000}, 0x38)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r8 = accept4(r4, 0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000000008"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000340)={<r10=>0x0, 0x75, "dd9dbe1922bb3a075c2cdc04aba2cbb10912ec2bb51269d03925df5705a4e66642e039db77df076673cf19ce0c4a2c8da4642edf319099463ac4d31e0de85c8fe83870e4807b34e126dd4194d915c02df9464631e13354e8fa8da06b2ca74ff86d3b38491585e843a2cefde3da85b087c2e55112c9"}, &(0x7f00000003c0)=0x7d)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000540)={r10, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x40, 0x401, 0x8}, &(0x7f0000000500)=0x9c)
syz_clone(0x2200, &(0x7f0000000200)="da26c946efd43c649c6636561d26a3e647193b5e333424e4db281cd13a5b10b3832eadf58f218b059a1a263c9fb9f9910b94eb1cb7d9440eb70e7ffaec75b26eecedf8f0af2b462d00000000000000018048940d6e2308f59f24ef626a0400ee222e3a4a82426f4900"/119, 0x77, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="5994a44332770a8879f3265bca95c9afc699f72706d94458486ee3dc1cecf1d0a3f4b41113b1d9d4d3eab6366dfab5bd23884098b7cf4cd7da64a85fa50181bd18ecb0cd69d8b645c6466c678272fee02b8624cd46c127715dd17a9db54fd81d91398f5ba8f9c480b7e2181dcd23976a5d7200a3168754653eee812d727df230c39743e8f1")

1m56.783718796s ago: executing program 0 (id=418):
msgget$private(0x0, 0x3c0)
msgget$private(0x0, 0x100)
msgctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x58, 0x117, 0x2, 0x3e, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c67"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x70, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="007410d993", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}], 0x2, 0x0, 0x0, 0x24040050}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd25, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x9, 0x5ab, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x118, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0xcc}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@multicast2, 0xa, 0xa, 0x6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m41.063206651s ago: executing program 33 (id=418):
msgget$private(0x0, 0x3c0)
msgget$private(0x0, 0x100)
msgctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x58, 0x117, 0x2, 0x3e, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c67"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x70, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="007410d993", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}], 0x2, 0x0, 0x0, 0x24040050}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd25, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x9, 0x5ab, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x118, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0xcc}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@multicast2, 0xa, 0xa, 0x6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

10.016178716s ago: executing program 3 (id=680):
unshare(0xc040480)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
writev(r0, &(0x7f0000001680)=[{&(0x7f0000000380)="fd", 0x1}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0xe)

9.203624351s ago: executing program 3 (id=682):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

9.048865617s ago: executing program 5 (id=683):
syz_usb_connect(0x2, 0x3f, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1002, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0, 0xf8, 0xb, 0x7ff, 0x3, {0x8, 0x8, 0x0, 0x5, 0xfff, 0x2, 0xffff, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x10077, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x46943, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x3c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
unshare(0x400)
openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB], 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

8.81821321s ago: executing program 3 (id=685):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x248, 0x32, 0x400, 0x70bd25, 0x25dfdbff, {0x16}, [@generic="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", @typed={0xb3, 0x25, 0x0, 0x0, @binary="be0c8bf264c15adfe0984ae39bd0f1760f85cbd2d15e54b29bf1a3342b3ea3e1ea0037fe88c9cfc1f051aa01a9137834cf6da1156aa1d7e3a5c280458d26f9f00ad6aa052a85f3d48141e5bd7b192a14bb5d552653c1fbb2d4ea65d15dc7926c65cef69968e61058ff4fc3ff5069dce6a6473c58ddff59123e2d538b6c6fec316d5ba8646854432f1f07322a9bb4d79b4fabe31394b4e3fa98d666095c5a2663dbc4e1a9005470ff6f890a79461b80"}, @generic="e2feee2f87bce4caa835c47ba8ea2963f088307adbdca14ddaf5ec7ba766f38e5336d2a415a1a64a466fcd0d3662a77fde9492e0200e42911dc4cf6af0c1b185beea3eb3ecb14e49a489c0d47954e97bf675b6119fed17b464d466f5624c633f53bac7c9ba533e6023cde0f1f1a40d79bfd3a72fcfe1ad12f9c2256439106602"]}, 0x248}, 0x1, 0x0, 0x0, 0x44}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108"], 0x0)
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
getpid()
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r3)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c00014000000000000000030800044000000001"], 0x12c}}, 0x0)

6.930350314s ago: executing program 3 (id=687):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@map, 0xffffffffffffffff, 0x19, 0x28}, 0x20)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}, @NL80211_ATTR_PMK={0x14, 0xfe, "af282ebdfeae4471a1593c94f1b21639"}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x8800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
r5 = getpid()
getpriority(0x1, r5)
ppoll(&(0x7f0000002700)=[{r4, 0x8018}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2)

6.925682969s ago: executing program 2 (id=689):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002600010328bd7000fbdbdf251500000008005300", @ANYRES32=0x0, @ANYBLOB="86db9f5f76ca61cab0b1931f4234386c7ecd672e62f7e6db3f359e7c8ee166c9254c734dc9b101285ce421853c864495aca51712058d1ab54df716a1a69b17361ff1011e1e78993289376201052b8d339c16d759940a076a2c"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00174a"], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$kcm(0xa, 0x5, 0x0)
unshare(0x10010600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="000000002000007b5af8ff00000000bfa200000000000007028000f8ffffffb703000008000000b704000000000000850001001400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201"], 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, 0x0, &(0x7f0000000080))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="8b", 0x1, 0x40004, &(0x7f0000000000)={0xa, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000180)={0x0, 0x1, 0x50, {0x50, 0x30, "1c8a05f5778a156097f16a31f456c3f9b8550fd97fc010bdfbee6b1ee1db70aabf6b7896ef6b8f4431a4a9f550597bce225a02418ab7f928029adb252dba9959fc06fab7cdcada806f342bd8d0eb"}}, &(0x7f0000000380)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "33744f132aa1554e13a63cc49afa16c362c39acff2d2d0c6e6c48d5da0e30159c95ff55c146dc9a5643241e8fe00e95a03e9a951eb090ae373d0de2ea78793119dad6fb1485ceb6fe92b981322ed4b9c3881c723868c3fdec268a53e347dce5266de6c25ca2bf0c32d3ff5034ae332ce1353e3fe566adfd4bcc41bb169ef15f4e3cafed5e58f27dd70"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0x14, 0x27, "baff1eb4365ba4850b5519fe88bf95a6259a961554474a6ee28874d8c8a97aa44a284925d97ca4"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000600)={0xc0, 0xa1, 0x4, 0x821e}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "f8f3a63d3afe272549149961a0733d5a11d37857e3ed5b97cd3e66f5d125b2d50b1829000f1d289f7196d337376fa2"}})

6.711608022s ago: executing program 4 (id=690):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
landlock_create_ruleset(0x0, 0x0, 0x0)

6.57021238s ago: executing program 4 (id=691):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'wg2\x00', {0x2, 0x4e22, @remote}})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000000))
landlock_restrict_self(0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1, 0x4}}}, 0x32)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c0000001e00015500000000ffffffff0b00fff408006e0000800000"], 0x1c}}, 0xc0)

6.281332916s ago: executing program 4 (id=692):
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x68040000)
sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x39, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

4.369859528s ago: executing program 4 (id=693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000400)=""/4096)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431903000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

4.326527679s ago: executing program 3 (id=694):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc010000100001000000000800000000ac1414bb000000000000feffffff0000000000000001000215833200004e200050000020001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x24000058)
connect$inet(r2, &(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)={0x90, r1, 0x1, 0x70bd28, 0x80300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "ca2938fdec533aa4d217b137460054579641c937c2659b061d3081e80d3fadb52e1e2811172bcf82d58b9cc1607313f9b40e7cdd92f10ee59d9456c0e27f0e32e4d5d75faacd8503000000062b46e6"}]}]}, 0x90}}, 0x0)

4.09173101s ago: executing program 5 (id=695):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x248, 0x32, 0x400, 0x70bd25, 0x25dfdbff, {0x16}, [@generic="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", @typed={0xb3, 0x25, 0x0, 0x0, @binary="be0c8bf264c15adfe0984ae39bd0f1760f85cbd2d15e54b29bf1a3342b3ea3e1ea0037fe88c9cfc1f051aa01a9137834cf6da1156aa1d7e3a5c280458d26f9f00ad6aa052a85f3d48141e5bd7b192a14bb5d552653c1fbb2d4ea65d15dc7926c65cef69968e61058ff4fc3ff5069dce6a6473c58ddff59123e2d538b6c6fec316d5ba8646854432f1f07322a9bb4d79b4fabe31394b4e3fa98d666095c5a2663dbc4e1a9005470ff6f890a79461b80"}, @generic="e2feee2f87bce4caa835c47ba8ea2963f088307adbdca14ddaf5ec7ba766f38e5336d2a415a1a64a466fcd0d3662a77fde9492e0200e42911dc4cf6af0c1b185beea3eb3ecb14e49a489c0d47954e97bf675b6119fed17b464d466f5624c633f53bac7c9ba533e6023cde0f1f1a40d79bfd3a72fcfe1ad12f9c2256439106602"]}, 0x248}, 0x1, 0x0, 0x0, 0x44}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
getpid()
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x4, 0x9, 'snmp_trap\x00', {0x2}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'team_slave_0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x12}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x35d0, 0xfffffffc, 0x400, '\x00', 'syz0\x00', {0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})

2.899184954s ago: executing program 5 (id=696):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x80400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
mq_unlink(&(0x7f0000000000)='eth0\x00')
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x24044094)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x200100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', <r4=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x420, 0x13, 0x10, 0x70bd2d, 0x25dfdbfb, {0x1, 0xe, 0x9, 0x8, {0x4e24, 0x4e22, [0x3, 0xd, 0x4, 0x2], [0x200000, 0x7fffffff, 0x5, 0x3ff], r4, [0x100, 0x400]}, 0x4, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "8207f3ccbd2912f1c5c896720acbe0cf8246d27921924e72be1e60be0c3defc320303293da915de1e1eefef2e0c13e8f6fd80f9f6770681401e8f7c92f028db564a8e26ae608c0fe9f22ce3e15154e94ab553028bb82b96ffcd5e809de8aa22296642bca3c85b473c4aa9b731c00d8edaae941146fb6231dbab674583770db54c1a4b8c55b1783caaf6a8f4e24329788789589838fe0428c"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "eb944c1d3362f9f31962ff807a7c3ee1d8fc2fc34f582be64521ce7e3924f1e6a665ac8839ac78f49812a6a65e7f05c460e21e244a3a5e2932b050c9de4b9253bb6c69b37e7dd731545ea0f7fdbb189c7045c6e6f48ada26d85ec21f46e6fe0bf79f5fae387e845c85ebe730dd8df9a60cf33f22dc8bcadd8572642c6bf9e0c3c7b0fde13961d02e"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "9908bde6233be3bb1744e51579ce90d45c5e79ec6277eec318dfa98a00d53dd7ae89a96ba24e07ea42c4d143414507d07b3da594576d5624a6647d326daf802d0ab4acf6ca57e6e811ca10ac528fbbbd5165dc4ceca20fff3f5d9a4458e231b2d539657dfc0dbfdd5adde31c817673cd061d0de5335aec83e8c691aa6299ae655b0d3382f51caf47683fcc0ebc9ceb6708ba1455fa95b6f8bb419e68a36bd460019b8f0abb96987f789e5d7a157b7ed20783c6031e52c7cf023add6085b2b000cc17fa9b182f4c4c3e0e3b5e1d6401429919e84cf564e5d09008ec178fc12242d3f8ea50"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "8e877bbd5fe84756d2a6dc4b062279fef41b5e6ec2984ceeed4bcd33fb2377b502786e174a90577d464cd374dad0fa6af126187023267735bcbe4df37064d218beed733baf599387222c7295"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "0bd8b8119c5c0c28db29e677b6f5d73c50ce6e8d6af977cc26fdeac0796facf29a50819b7e8ff54b24fc417670a7729b2d50ab61b562efca25df77a5e61adc823f50b489e255b1b83a6382a806a2368d804aa38df0fd2fc9e621e7eccd1cb390b8570f0867e0a7bf3e3ca926afde5e581e17c30cd1ddf050ae745bf497fb680ce4a5caa3059e0c3f98a7d657af45c7b70497a93389b8"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "3f58713bdf98e140247116180f45bc10b7d62aba95c8e61429795e97d840349a39155f342ed93d65ada739f0ca2685654cacaf45e53dba55ec085a57fe4bb0d354cc13a3706c"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "33c8ffb5f7d2c9b4465e572131"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "f5c15804a51d51c9a9ff9f7b614f4e21e5a29ac719c277d198d5630d0a0a158bb6a6c4bd29dd74b2079528e09b080ab802045f8426c12b24ddfaf87c57c312bf5a56193272706a275aea5fce91192dcaba69b75e1dc8462030c688ea08269087280c84d5a43d0177ad419df3fa21cc0af8"}]}, 0x420}, 0x1, 0x0, 0x0, 0x10}, 0x4841)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x64010100, @multicast1, r2}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)

2.443466232s ago: executing program 2 (id=697):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)

2.140847927s ago: executing program 2 (id=698):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

2.136194717s ago: executing program 5 (id=699):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @exit, @jmp={0x5, 0x0, 0xc, 0x3, 0x5, 0xfffffffffffffffc, 0x1}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netpci0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0xe, 0xe, 0x8, 0xb, 0x5, 0x7, 0x4, [0x2800000, 0x6, 0x8, 0x52, 0x8000, 0xe7, 0x9, 0x4]}})
r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
gettid()
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85)

2.011995112s ago: executing program 3 (id=700):
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)

1.224392477s ago: executing program 5 (id=701):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = dup(r0)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x6, @private2}}, 0x0, 0x0, 0x21, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
pselect6(0x40, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x6fb9d8a}, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1.212433943s ago: executing program 4 (id=702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000140)=0xe)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=<r3=>r1, @ANYBLOB='(\x00'], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r5, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xb}, {0x5, 0x7}, {0x0, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x48010)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640", @ANYRES8=r3, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32=r0], 0x6c}}, 0x24004801)

1.200585599s ago: executing program 2 (id=703):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)

1.033625534s ago: executing program 2 (id=704):
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x68040000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x39, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

164.751146ms ago: executing program 2 (id=705):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

77.468307ms ago: executing program 5 (id=706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff45, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x61}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcd}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x0, 0x400c891}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2040400)
r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x2e0202, 0x103)
sendfile(r5, r4, 0x0, 0x3ffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0xff}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x40000000, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8)
listen(r6, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="77559dba58f7", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2f}}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r7, 0x7d, 0x4, 0x100}, 0x10)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x100}, 0x0)

0s ago: executing program 4 (id=707):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000380)={0x2})
setns(0xc9, 0x0)
r2 = socket(0x8, 0x5, 0x5)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x4204000c, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
msgget(0x2, 0x217)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7fffffffffffffff, 0x1)
write(r3, &(0x7f0000000040), 0xffffff4a)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 = -32)
[  209.841472][ T5714] usb usb1-port1: attempt power cycle
[  210.237129][ T5714] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.243938][ T6965] FAULT_INJECTION: forcing a failure.
[  210.243938][ T6965] name failslab, interval 1, probability 0, space 0, times 0
[  210.243971][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.4.365 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  210.243994][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  210.244007][ T6965] Call Trace:
[  210.244014][ T6965]  <TASK>
[  210.244022][ T6965]  dump_stack_lvl+0xe8/0x150
[  210.244057][ T6965]  should_fail_ex+0x467/0x600
[  210.244092][ T6965]  should_failslab+0xa8/0x100
[  210.244118][ T6965]  __kvmalloc_node_noprof+0x17a/0x8a0
[  210.244144][ T6965]  ? traverse+0xf1/0x620
[  210.244169][ T6965]  ? traverse+0xf1/0x620
[  210.244201][ T6965]  traverse+0xf1/0x620
[  210.244229][ T6965]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  210.244256][ T6965]  ? seq_read_iter+0xa5/0xcb0
[  210.244286][ T6965]  seq_read_iter+0xb6b/0xcb0
[  210.244327][ T6965]  seq_read+0x36a/0x490
[  210.244352][ T6965]  ? kstrtoull+0x12f/0x1d0
[  210.244388][ T6965]  ? __pfx_seq_read+0x10/0x10
[  210.244419][ T6965]  ? __import_iovec+0x5d7/0x7e0
[  210.244451][ T6965]  ? __pfx_seq_read+0x10/0x10
[  210.244482][ T6965]  proc_reg_read+0x1f6/0x2f0
[  210.244512][ T6965]  vfs_readv+0x588/0x850
[  210.244532][ T6965]  ? __pfx_proc_reg_read+0x10/0x10
[  210.244560][ T6965]  ? __pfx_vfs_readv+0x10/0x10
[  210.244593][ T6965]  ? __fget_files+0x2a/0x420
[  210.244619][ T6965]  ? __fget_files+0x3a8/0x420
[  210.244638][ T6965]  ? __fget_files+0x2a/0x420
[  210.244667][ T6965]  __x64_sys_preadv+0x19f/0x2c0
[  210.244698][ T6965]  ? __pfx___x64_sys_preadv+0x10/0x10
[  210.244732][ T6965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.244754][ T6965]  do_syscall_64+0x174/0x580
[  210.244778][ T6965]  ? trace_irq_disable+0x3b/0x140
[  210.244797][ T6965]  ? clear_bhb_loop+0x40/0x90
[  210.244821][ T6965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.244840][ T6965] RIP: 0033:0x7ff68609e019
[  210.244858][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.244874][ T6965] RSP: 002b:00007ff6842f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  210.244895][ T6965] RAX: ffffffffffffffda RBX: 00007ff686325fa0 RCX: 00007ff68609e019
[  210.244909][ T6965] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
[  210.244922][ T6965] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  210.244934][ T6965] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001
[  210.244946][ T6965] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  210.244976][ T6965]  </TASK>
[  210.280608][ T5714] usb 1-1: device descriptor read/8, error -71
[  210.627052][ T5714] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  210.649990][ T5714] usb 1-1: device descriptor read/8, error -71
[  210.759193][ T5714] usb usb1-port1: unable to enumerate USB device
[  211.171115][ T5614] usb 3-1: USB disconnect, device number 19
[  211.256302][ T5614] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  211.273209][ T5614] spcp8x5 3-1:1.0: device disconnected
[  211.412430][ T6977] sg_write: data in/out 568832/130 bytes for SCSI command 0x6f-- guessing data in;
[  211.412430][ T6977]    program syz.0.368 not setting count and/or reply_len properly
[  212.997488][ T6992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'.
[  214.066293][ T7002] loop4: detected capacity change from 0 to 7
[  214.138820][ T7002] Dev loop4: unable to read RDB block 7
[  214.138862][ T7002]  loop4: unable to read partition table
[  214.139038][ T7002] loop4: partition table beyond EOD, truncated
[  214.139516][ T7002] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  214.297078][ T5714] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  214.449204][ T5714] usb 5-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.449240][ T5714] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  214.449266][ T5714] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  214.449293][ T5714] usb 5-1: config 0 interface 0 has no altsetting 0
[  214.451852][ T5714] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  214.451880][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.451900][ T5714] usb 5-1: Product: syz
[  214.451914][ T5714] usb 5-1: Manufacturer: syz
[  214.451928][ T5714] usb 5-1: SerialNumber: syz
[  214.469623][ T5714] usb 5-1: config 0 descriptor??
[  214.481994][ T7000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  214.508852][ T5714] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  214.509115][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87
[  214.509180][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  214.515805][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  214.515887][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  214.515963][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  214.516040][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  214.516115][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  214.525004][ T5714] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  214.539885][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  214.539967][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  214.545864][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  214.545950][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  214.546033][ T5714] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  214.577827][ T5714] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  214.730580][ T5714] usb 5-1: USB disconnect, device number 11
[  214.763279][ T5714] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  214.786981][ T5614] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  214.842536][ T5714] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  214.843261][ T5714] keyspan 5-1:0.0: device disconnected
[  214.916991][ T5614] usb 3-1: device descriptor read/64, error -71
[  215.077042][ T5586] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  215.157125][ T5614] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  215.544998][ T5614] usb 3-1: device descriptor read/64, error -71
[  215.586943][ T5586] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  215.586971][ T5586] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  215.587008][ T5586] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  215.587030][ T5586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.869076][ T5614] usb usb3-port1: attempt power cycle
[  216.035163][ T5586] spcp8x5 1-1:1.0: SPCP8x5 converter detected
[  216.054442][ T5586] usb 1-1: SPCP8x5 converter now attached to ttyUSB0
[  216.367292][ T5614] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  216.387645][ T5614] usb 3-1: device descriptor read/8, error -71
[  216.637104][ T5614] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  216.657895][ T5614] usb 3-1: device descriptor read/8, error -71
[  216.768710][ T5614] usb usb3-port1: unable to enumerate USB device
[  219.099112][ T5738] usb 1-1: USB disconnect, device number 17
[  219.099580][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'.
[  219.198030][ T5738] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  219.218336][ T5738] spcp8x5 1-1:1.0: device disconnected
[  219.916123][ T7043] FAULT_INJECTION: forcing a failure.
[  219.916123][ T7043] name failslab, interval 1, probability 0, space 0, times 0
[  219.916155][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  219.916176][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.916188][ T7043] Call Trace:
[  219.916195][ T7043]  <TASK>
[  219.916202][ T7043]  dump_stack_lvl+0xe8/0x150
[  219.916238][ T7043]  should_fail_ex+0x467/0x600
[  219.916265][ T7043]  should_failslab+0xa8/0x100
[  219.916284][ T7043]  kmem_cache_alloc_noprof+0xa4/0x650
[  219.916299][ T7043]  ? do_getname+0x2e/0x250
[  219.916319][ T7043]  ? do_getname+0x2e/0x250
[  219.916343][ T7043]  do_getname+0x2e/0x250
[  219.916364][ T7043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.916380][ T7043]  __se_sys_unlinkat+0x4f/0x1a0
[  219.916401][ T7043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.916416][ T7043]  do_syscall_64+0x174/0x580
[  219.916435][ T7043]  ? trace_irq_disable+0x3b/0x140
[  219.916450][ T7043]  ? clear_bhb_loop+0x40/0x90
[  219.916469][ T7043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.916483][ T7043] RIP: 0033:0x7fcb1e40e019
[  219.916498][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.916510][ T7043] RSP: 002b:00007fcb1c645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  219.916526][ T7043] RAX: ffffffffffffffda RBX: 00007fcb1e696090 RCX: 00007fcb1e40e019
[  219.916538][ T7043] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  219.916548][ T7043] RBP: 00007fcb1c645090 R08: 0000000000000000 R09: 0000000000000000
[  219.916558][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.916567][ T7043] R13: 00007fcb1e696128 R14: 00007fcb1e696090 R15: 00007ffe39a7d638
[  219.916591][ T7043]  </TASK>
[  220.357836][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.399616][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.415205][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.428170][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.435781][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.982293][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.995127][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.006209][ T4912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.117431][ T4912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.118214][ T4912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  222.636986][ T5738] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  222.766983][ T5738] usb 3-1: device descriptor read/64, error -71
[  223.027015][ T5738] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  223.168365][ T5738] usb 3-1: device descriptor read/64, error -71
[  223.277404][ T5738] usb usb3-port1: attempt power cycle
[  223.640469][ T5738] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  223.669083][ T5738] usb 3-1: device descriptor read/8, error -71
[  223.838994][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'.
[  223.906365][ T7092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.400'.
[  223.917053][ T5738] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  223.949417][ T5738] usb 3-1: device descriptor read/8, error -71
[  223.970338][ T4912] Bluetooth: hci5: command tx timeout
[  224.068988][ T5738] usb usb3-port1: unable to enumerate USB device
[  226.055238][ T4912] Bluetooth: hci5: command tx timeout
[  227.199835][ T7126] FAULT_INJECTION: forcing a failure.
[  227.199835][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.199869][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.2.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  227.199894][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.199906][ T7126] Call Trace:
[  227.199914][ T7126]  <TASK>
[  227.199922][ T7126]  dump_stack_lvl+0xe8/0x150
[  227.199956][ T7126]  should_fail_ex+0x467/0x600
[  227.199989][ T7126]  copy_fpstate_to_sigframe+0xac0/0xd80
[  227.200026][ T7126]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  227.200058][ T7126]  ? rt_spin_lock+0x1e0/0x400
[  227.200078][ T7126]  ? rt_spin_lock+0x1e0/0x400
[  227.200099][ T7126]  ? do_raw_spin_lock+0x12b/0x2f0
[  227.200132][ T7126]  ? fpu__alloc_mathframe+0xac/0x130
[  227.200159][ T7126]  get_sigframe+0x603/0x830
[  227.200198][ T7126]  ? __pfx_get_sigframe+0x10/0x10
[  227.200225][ T7126]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  227.200241][ T7126]  ? rt_spin_lock+0x1e0/0x400
[  227.200265][ T7126]  x64_setup_rt_frame+0x164/0xc50
[  227.200287][ T7126]  ? rt_spin_unlock+0x157/0x200
[  227.200308][ T7126]  ? rt_spin_unlock+0x163/0x200
[  227.200329][ T7126]  ? get_signal+0x10de/0x12c0
[  227.200359][ T7126]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  227.200394][ T7126]  arch_do_signal_or_restart+0x45b/0x860
[  227.200423][ T7126]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  227.200456][ T7126]  ? __se_sys_preadv2+0x213/0x2a0
[  227.200492][ T7126]  exit_to_user_mode_loop+0x104/0x730
[  227.200511][ T7126]  ? rcu_is_watching+0x15/0xb0
[  227.200536][ T7126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.200558][ T7126]  do_syscall_64+0x353/0x580
[  227.200584][ T7126]  ? clear_bhb_loop+0x40/0x90
[  227.200608][ T7126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.200627][ T7126] RIP: 0033:0x7f69e1b6e017
[  227.200645][ T7126] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  227.200661][ T7126] RSP: 002b:00007f69dfdc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  227.200682][ T7126] RAX: 0000000000000147 RBX: 00007f69e1df5fa0 RCX: 00007f69e1b6e019
[  227.200695][ T7126] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  227.200707][ T7126] RBP: 00007f69dfdc6090 R08: 0000000000000000 R09: 0000000000000003
[  227.200719][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.200731][ T7126] R13: 00007f69e1df6038 R14: 00007f69e1df5fa0 R15: 00007ffef4d7b2b8
[  227.200761][ T7126]  </TASK>
[  227.244935][ T7128] netlink: 'syz.0.408': attribute type 23 has an invalid length.
[  227.501236][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.502837][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.503056][ T7044] bridge_slave_0: entered allmulticast mode
[  227.505545][ T7044] bridge_slave_0: entered promiscuous mode
[  227.668418][ T6069] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  227.921595][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.147900][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.168124][ T4912] Bluetooth: hci5: command tx timeout
[  228.270019][ T7044] bridge_slave_1: entered allmulticast mode
[  228.277571][ T7044] bridge_slave_1: entered promiscuous mode
[  228.282542][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'.
[  228.412618][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.439673][ T6069] usb 4-1: Using ep0 maxpacket: 16
[  228.442540][ T6069] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  228.442568][ T6069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.556747][ T6069] usb 4-1: config 0 descriptor??
[  228.569339][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.570203][ T6069] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  228.797479][ T5610] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  229.295510][ T6069] usb 4-1: Detected FT232A
[  229.300226][ T6069] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  229.377364][ T5610] usb 5-1: unable to get BOS descriptor or descriptor too short
[  229.379486][ T5610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.379542][ T5610] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  229.379568][ T5610] usb 5-1: config 1 interface 0 has no altsetting 0
[  229.390128][ T5610] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.390155][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.390174][ T5610] usb 5-1: Product: syz
[  229.390187][ T5610] usb 5-1: Manufacturer: syz
[  229.390201][ T5610] usb 5-1: SerialNumber: syz
[  229.735469][ T7149] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[  229.735490][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[  229.925742][ T7044] team0: Port device team_slave_0 added
[  229.975153][ T7044] team0: Port device team_slave_1 added
[  230.215336][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.215352][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.215387][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.288073][ T4912] Bluetooth: hci5: command tx timeout
[  230.310545][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.310562][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.310587][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.359091][ T5614] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  230.450730][ T7044] hsr_slave_0: entered promiscuous mode
[  230.452048][ T7044] hsr_slave_1: entered promiscuous mode
[  230.452935][ T7044] debugfs: 'hsr0' already exists in 'hsr'
[  230.452959][ T7044] Cannot create hsr debugfs directory
[  230.520140][ T5614] usb 3-1: Using ep0 maxpacket: 16
[  230.524392][ T5614] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  230.524419][ T5614] usb 3-1: config 1 has no interface number 0
[  230.524519][ T5614] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  230.524543][ T5614] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  230.524565][ T5614] usb 3-1: config 1 interface 105 has no altsetting 0
[  230.552427][ T5614] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  230.552455][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  230.552524][ T5614] usb 3-1: Product: syz
[  230.552538][ T5614] usb 3-1: Manufacturer: syz
[  230.552552][ T5614] usb 3-1: SerialNumber: syz
[  230.583333][ T7151] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.583511][ T7151] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  230.756032][ T5716] usb 4-1: USB disconnect, device number 16
[  230.808296][ T5716] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  230.808909][ T5716] ftdi_sio 4-1:0.0: device disconnected
[  231.047724][ T5610] cdc_ether 5-1:1.0: missing cdc ether descriptor
[  231.081445][ T5610] usb 5-1: USB disconnect, device number 12
[  232.977331][ T5738] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  233.021004][ T7044] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  233.157231][ T5738] usb 4-1: Using ep0 maxpacket: 16
[  233.163545][ T5738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.163569][ T5738] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  233.183899][ T7044] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  233.199192][ T7044] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  233.211652][ T5738] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  233.211679][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.211916][ T5738] usb 4-1: Product: syz
[  233.211933][ T5738] usb 4-1: Manufacturer: syz
[  233.211947][ T5738] usb 4-1: SerialNumber: syz
[  233.261558][ T5614] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71
[  233.298401][ T5614] usb 3-1: USB disconnect, device number 28
[  233.356455][ T7044] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  233.359592][ T7044] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  233.427849][ T7172] FAULT_INJECTION: forcing a failure.
[  233.427849][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.427883][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.2.423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  233.427906][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.427919][ T7172] Call Trace:
[  233.427927][ T7172]  <TASK>
[  233.427936][ T7172]  dump_stack_lvl+0xe8/0x150
[  233.427971][ T7172]  should_fail_ex+0x467/0x600
[  233.428005][ T7172]  _copy_from_user+0x2d/0xb0
[  233.428030][ T7172]  ___sys_sendmsg+0x1c6/0x360
[  233.428055][ T7172]  ? __lock_acquire+0x683/0x2ce0
[  233.428079][ T7172]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.428137][ T7172]  ? __fget_files+0x2a/0x420
[  233.428157][ T7172]  ? __fget_files+0x3a8/0x420
[  233.428186][ T7172]  __x64_sys_sendmsg+0x1b7/0x290
[  233.428214][ T7172]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.428254][ T7172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.428283][ T7172]  do_syscall_64+0x174/0x580
[  233.428308][ T7172]  ? trace_irq_disable+0x3b/0x140
[  233.428328][ T7172]  ? clear_bhb_loop+0x40/0x90
[  233.428352][ T7172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.428371][ T7172] RIP: 0033:0x7f69e1b6e019
[  233.428388][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.428405][ T7172] RSP: 002b:00007f69dfdc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.428426][ T7172] RAX: ffffffffffffffda RBX: 00007f69e1df5fa0 RCX: 00007f69e1b6e019
[  233.428440][ T7172] RDX: 0000000040004040 RSI: 0000200000000280 RDI: 0000000000000003
[  233.428454][ T7172] RBP: 00007f69dfdc6090 R08: 0000000000000000 R09: 0000000000000000
[  233.428466][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.428478][ T7172] R13: 00007f69e1df6038 R14: 00007f69e1df5fa0 R15: 00007ffef4d7b2b8
[  233.428508][ T7172]  </TASK>
[  233.660845][ T7044] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  233.663671][ T7044] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  233.705753][ T7044] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  233.971858][ T5614] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  234.016450][ T5738] usb 4-1: USB disconnect, device number 17
[  234.112226][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.164087][ T7044] 8021q: adding VLAN 0 to HW filter on device team0
[  234.176700][ T5614] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  234.176727][ T5614] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  234.176747][ T5614] usb 3-1: config 220 has no interface number 2
[  234.176810][ T5614] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  234.176835][ T5614] usb 3-1: config 220 interface 0 has no altsetting 0
[  234.203308][ T5614] usb 3-1: config 220 interface 76 has no altsetting 0
[  234.203332][ T5614] usb 3-1: config 220 interface 1 has no altsetting 0
[  234.240499][ T5614] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  234.240528][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.240548][ T5614] usb 3-1: Product: syz
[  234.240561][ T5614] usb 3-1: Manufacturer: syz
[  234.240576][ T5614] usb 3-1: SerialNumber: syz
[  234.935976][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.939670][ T6443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.989047][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.989233][ T6443] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.135122][ T5614] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  236.135156][ T5614] uvcvideo 3-1:220.0: No valid video chain found.
[  236.135213][ T5614] usb 3-1: selecting invalid altsetting 0
[  236.249555][ T5614] usb 3-1: selecting invalid altsetting 0
[  236.249592][ T5614] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  236.281316][ T5614] usb 3-1: USB disconnect, device number 29
[  236.510990][ T7201] FAULT_INJECTION: forcing a failure.
[  236.510990][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.511024][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  236.511059][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.511076][ T7201] Call Trace:
[  236.511084][ T7201]  <TASK>
[  236.511092][ T7201]  dump_stack_lvl+0xe8/0x150
[  236.511125][ T7201]  should_fail_ex+0x467/0x600
[  236.511161][ T7201]  _copy_from_user+0x2d/0xb0
[  236.511185][ T7201]  ___sys_sendmsg+0x1c6/0x360
[  236.511208][ T7201]  ? __lock_acquire+0x683/0x2ce0
[  236.511233][ T7201]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.511289][ T7201]  ? __fget_files+0x2a/0x420
[  236.511309][ T7201]  ? __fget_files+0x3a8/0x420
[  236.511338][ T7201]  __x64_sys_sendmsg+0x1b7/0x290
[  236.511365][ T7201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.511405][ T7201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.511426][ T7201]  do_syscall_64+0x174/0x580
[  236.511450][ T7201]  ? trace_irq_disable+0x3b/0x140
[  236.511469][ T7201]  ? clear_bhb_loop+0x40/0x90
[  236.511499][ T7201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.511518][ T7201] RIP: 0033:0x7fcb1e40e019
[  236.511536][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.511551][ T7201] RSP: 002b:00007fcb1c666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.511571][ T7201] RAX: ffffffffffffffda RBX: 00007fcb1e695fa0 RCX: 00007fcb1e40e019
[  236.511586][ T7201] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  236.511598][ T7201] RBP: 00007fcb1c666090 R08: 0000000000000000 R09: 0000000000000000
[  236.511611][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.511622][ T7201] R13: 00007fcb1e696038 R14: 00007fcb1e695fa0 R15: 00007ffe39a7d638
[  236.511653][ T7201]  </TASK>
[  240.166417][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.222167][ T7239] Bluetooth: MGMT ver 1.23
[  240.295556][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'.
[  240.536988][ T5716] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  240.689989][ T5716] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  240.690018][ T5716] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  240.690053][ T5716] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  240.690073][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.755116][ T5716] spcp8x5 3-1:1.0: SPCP8x5 converter detected
[  240.780736][ T5716] usb 3-1: SPCP8x5 converter now attached to ttyUSB0
[  240.814243][ T7266] FAULT_INJECTION: forcing a failure.
[  240.814243][ T7266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.814275][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.4.446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  240.814297][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.814309][ T7266] Call Trace:
[  240.814316][ T7266]  <TASK>
[  240.814324][ T7266]  dump_stack_lvl+0xe8/0x150
[  240.814357][ T7266]  should_fail_ex+0x467/0x600
[  240.814389][ T7266]  _copy_to_user+0x31/0xb0
[  240.814415][ T7266]  simple_read_from_buffer+0xe1/0x170
[  240.814441][ T7266]  proc_fail_nth_read+0x1be/0x230
[  240.814465][ T7266]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.814490][ T7266]  ? rw_verify_area+0x250/0x4d0
[  240.814513][ T7266]  ? __lock_acquire+0x683/0x2ce0
[  240.814534][ T7266]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.814554][ T7266]  vfs_read+0x219/0xa90
[  240.814610][ T7266]  ? __pfx_vfs_read+0x10/0x10
[  240.814639][ T7266]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  240.814665][ T7266]  ? lockdep_hardirqs_on+0x7a/0x110
[  240.814690][ T7266]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  240.814714][ T7266]  ? mutex_lock_nested+0x152/0x1d0
[  240.814732][ T7266]  ? fdget_pos+0x252/0x320
[  240.814768][ T7266]  ksys_read+0x156/0x270
[  240.814794][ T7266]  ? __pfx_ksys_read+0x10/0x10
[  240.814826][ T7266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.814848][ T7266]  do_syscall_64+0x174/0x580
[  240.814872][ T7266]  ? trace_irq_disable+0x3b/0x140
[  240.814891][ T7266]  ? clear_bhb_loop+0x40/0x90
[  240.814915][ T7266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.814933][ T7266] RIP: 0033:0x7ff68605e84e
[  240.814951][ T7266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  240.814967][ T7266] RSP: 002b:00007ff6842f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.814987][ T7266] RAX: ffffffffffffffda RBX: 00007ff6842f66c0 RCX: 00007ff68605e84e
[  240.815002][ T7266] RDX: 000000000000000f RSI: 00007ff6842f60a0 RDI: 0000000000000004
[  240.815015][ T7266] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  240.815027][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.815039][ T7266] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  240.815069][ T7266]  </TASK>
[  240.988429][ T5614] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  241.116313][ T7044] veth0_vlan: entered promiscuous mode
[  241.127423][ T7251] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  241.127796][ T7251] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  241.128161][ T7251] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  241.182257][ T7044] veth1_vlan: entered promiscuous mode
[  241.203163][ T5614] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  241.203189][ T5614] usb 4-1: config 1 has no interface number 0
[  241.203237][ T5614] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  241.203263][ T5614] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  241.203287][ T5614] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.223844][ T5614] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  241.223875][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.223894][ T5614] usb 4-1: Product: syz
[  241.223907][ T5614] usb 4-1: Manufacturer: syz
[  241.223921][ T5614] usb 4-1: SerialNumber: syz
[  241.308768][ T7264] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  241.358466][ T7250] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  241.371914][   T10] usb 3-1: USB disconnect, device number 30
[  241.397822][   T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  241.403534][   T10] spcp8x5 3-1:1.0: device disconnected
[  241.447045][   T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  241.468575][ T7044] veth0_macvtap: entered promiscuous mode
[  241.486629][ T7044] veth1_macvtap: entered promiscuous mode
[  241.513211][ T7264] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  241.542999][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.556508][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.598006][   T36] usb 5-1: Using ep0 maxpacket: 16
[  241.602190][   T36] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  241.602214][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.640549][   T36] usb 5-1: config 0 descriptor??
[  241.658296][ T3383] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.658656][ T3383] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.658894][ T3383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.659217][ T3383] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.672255][   T36] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  241.871483][   T36] usb 5-1: Detected FT232A
[  241.895132][   T36] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  241.923951][ T5614] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  241.959855][ T5614] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71
[  241.959882][ T5614] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71
[  241.960671][ T5614] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71
[  241.960692][ T5614] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71
[  242.000627][ T5614] usb 4-1: USB disconnect, device number 18
[  242.026654][ T5614] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem
[  242.227242][ T5614] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  242.587021][   T36] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  242.775666][   T36] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.787922][   T36] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.787941][   T36] usb 3-1: config 1 interface 0 has no altsetting 0
[  242.794527][   T36] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  242.794544][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.794554][   T36] usb 3-1: Product: syz
[  242.794561][   T36] usb 3-1: Manufacturer: syz
[  242.794568][   T36] usb 3-1: SerialNumber: syz
[  242.806991][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.807010][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.032927][ T7280] netlink: 'syz.3.451': attribute type 10 has an invalid length.
[  243.068164][ T7274] netlink: 144 bytes leftover after parsing attributes in process `syz.2.449'.
[  243.205275][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  243.208554][ T7280] team0: Port device netdevsim1 added
[  243.261891][   T36] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count
[  243.263762][   T36] usbhid 3-1:1.0: can't add hid device: -71
[  243.263870][   T36] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  243.289599][   T36] usb 3-1: USB disconnect, device number 31
[  243.335461][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.335481][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.622207][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.453'.
[  243.625798][ T7288] netlink: 56 bytes leftover after parsing attributes in process `syz.5.453'.
[  243.989377][ T7297] FAULT_INJECTION: forcing a failure.
[  243.989377][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.989432][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  243.989455][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.989469][ T7297] Call Trace:
[  243.989476][ T7297]  <TASK>
[  243.989485][ T7297]  dump_stack_lvl+0xe8/0x150
[  243.989527][ T7297]  should_fail_ex+0x467/0x600
[  243.989562][ T7297]  _copy_from_user+0x2d/0xb0
[  243.989586][ T7297]  do_ipv6_setsockopt+0x249/0x3180
[  243.989622][ T7297]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  243.989650][ T7297]  ? __schedule+0x16f2/0x5500
[  243.989683][ T7297]  ? __pfx___schedule+0x10/0x10
[  243.989717][ T7297]  ? irqentry_exit+0x218/0x8f0
[  243.989741][ T7297]  ? lockdep_hardirqs_on+0x7a/0x110
[  243.989765][ T7297]  ? irqentry_exit+0x218/0x8f0
[  243.989799][ T7297]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  243.989818][ T7297]  ? __pfx_udpv6_setsockopt+0x10/0x10
[  243.989844][ T7297]  ipv6_setsockopt+0x59/0x170
[  243.989868][ T7297]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  243.989889][ T7297]  do_sock_setsockopt+0x17c/0x1b0
[  243.989918][ T7297]  __x64_sys_setsockopt+0x143/0x1b0
[  243.989943][ T7297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.989964][ T7297]  do_syscall_64+0x174/0x580
[  243.989990][ T7297]  ? clear_bhb_loop+0x40/0x90
[  243.990013][ T7297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.990032][ T7297] RIP: 0033:0x7fcb1e40e019
[  243.990051][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.990068][ T7297] RSP: 002b:00007fcb1c624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  243.990089][ T7297] RAX: ffffffffffffffda RBX: 00007fcb1e696180 RCX: 00007fcb1e40e019
[  243.990104][ T7297] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000006
[  243.990116][ T7297] RBP: 00007fcb1c624090 R08: 0000000000000020 R09: 0000000000000000
[  243.990128][ T7297] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  243.990141][ T7297] R13: 00007fcb1e696218 R14: 00007fcb1e696180 R15: 00007ffe39a7d638
[  243.990172][ T7297]  </TASK>
[  244.538369][ T5714] usb 5-1: USB disconnect, device number 13
[  244.633734][ T5714] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  244.644541][ T5714] ftdi_sio 5-1:0.0: device disconnected
[  244.949226][   T36] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  245.027988][ T7309] syz.2.459 (7309) used greatest stack depth: 16704 bytes left
[  245.100242][   T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  245.100271][   T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  245.100306][   T36] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  245.100329][   T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.148564][   T36] spcp8x5 4-1:1.0: SPCP8x5 converter detected
[  245.153271][   T36] usb 4-1: SPCP8x5 converter now attached to ttyUSB0
[  245.356994][   T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  245.479738][ T7304] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  245.480068][ T7304] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  245.482968][ T7304] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  245.525827][   T10] usb 3-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  245.525861][   T10] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  245.525886][   T10] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  245.525913][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  245.532876][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  245.532904][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.532923][   T10] usb 3-1: Product: syz
[  245.532936][   T10] usb 3-1: Manufacturer: syz
[  245.532949][   T10] usb 3-1: SerialNumber: syz
[  245.560644][   T10] usb 3-1: config 0 descriptor??
[  245.562357][ T7318] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  245.575071][ T7304] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600
[  245.591481][   T10] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  245.591832][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  245.591899][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  245.601845][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  245.601928][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  245.602004][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  245.602079][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  245.604448][ T7304] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32)
[  245.606043][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  245.611592][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  245.615093][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  245.615174][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  245.615252][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  245.615327][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  245.615410][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  245.625277][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2
[  245.832932][ T5714] usb 3-1: USB disconnect, device number 32
[  245.870945][ T5714] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  245.890112][ T5714] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2
[  245.895099][ T5714] keyspan 3-1:0.0: device disconnected
[  249.015986][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.098292][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.108154][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.111458][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.114523][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.383911][ T5716] usb 4-1: USB disconnect, device number 19
[  249.616983][ T5329] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.264765][ T5716] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  250.265284][ T5716] spcp8x5 4-1:1.0: device disconnected
[  250.340270][ T5329] usb 5-1: Using ep0 maxpacket: 16
[  250.398562][ T7356] FAULT_INJECTION: forcing a failure.
[  250.398562][ T7356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.398598][ T7356] CPU: 1 UID: 0 PID: 7356 Comm: syz.3.471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  250.398621][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.398633][ T7356] Call Trace:
[  250.398640][ T7356]  <TASK>
[  250.398648][ T7356]  dump_stack_lvl+0xe8/0x150
[  250.398685][ T7356]  should_fail_ex+0x467/0x600
[  250.398721][ T7356]  _copy_to_user+0x31/0xb0
[  250.398746][ T7356]  simple_read_from_buffer+0xe1/0x170
[  250.398774][ T7356]  proc_fail_nth_read+0x1be/0x230
[  250.398799][ T7356]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.398824][ T7356]  ? rw_verify_area+0x250/0x4d0
[  250.398850][ T7356]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.398869][ T7356]  vfs_read+0x219/0xa90
[  250.398899][ T7356]  ? __pfx_vfs_read+0x10/0x10
[  250.398924][ T7356]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  250.398948][ T7356]  ? lockdep_hardirqs_on+0x7a/0x110
[  250.398973][ T7356]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  250.398996][ T7356]  ? mutex_lock_nested+0x152/0x1d0
[  250.399014][ T7356]  ? fdget_pos+0x252/0x320
[  250.399053][ T7356]  ksys_read+0x156/0x270
[  250.399081][ T7356]  ? __pfx_ksys_read+0x10/0x10
[  250.399114][ T7356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.399135][ T7356]  do_syscall_64+0x174/0x580
[  250.399159][ T7356]  ? trace_irq_disable+0x3b/0x140
[  250.399179][ T7356]  ? clear_bhb_loop+0x40/0x90
[  250.399203][ T7356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.399222][ T7356] RIP: 0033:0x7fcb1e3ce84e
[  250.399240][ T7356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.399256][ T7356] RSP: 002b:00007fcb1c665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  250.399278][ T7356] RAX: ffffffffffffffda RBX: 00007fcb1c6666c0 RCX: 00007fcb1e3ce84e
[  250.399293][ T7356] RDX: 000000000000000f RSI: 00007fcb1c6660a0 RDI: 0000000000000004
[  250.399306][ T7356] RBP: 00007fcb1c666090 R08: 0000000000000000 R09: 0000000000000000
[  250.399318][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.399330][ T7356] R13: 00007fcb1e696038 R14: 00007fcb1e695fa0 R15: 00007ffe39a7d638
[  250.399362][ T7356]  </TASK>
[  250.681398][ T5329] usb 5-1: device descriptor read/all, error -71
[  251.318747][ T5609] Bluetooth: hci6: command tx timeout
[  251.391363][ T7363] FAULT_INJECTION: forcing a failure.
[  251.391363][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.391398][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.4.474 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  251.391421][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  251.391434][ T7363] Call Trace:
[  251.391441][ T7363]  <TASK>
[  251.391449][ T7363]  dump_stack_lvl+0xe8/0x150
[  251.391483][ T7363]  should_fail_ex+0x467/0x600
[  251.391517][ T7363]  _copy_from_user+0x2d/0xb0
[  251.391542][ T7363]  ___sys_sendmsg+0x1c6/0x360
[  251.391565][ T7363]  ? __lock_acquire+0x683/0x2ce0
[  251.391590][ T7363]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.391646][ T7363]  ? __fget_files+0x2a/0x420
[  251.391666][ T7363]  ? __fget_files+0x3a8/0x420
[  251.391696][ T7363]  __x64_sys_sendmsg+0x1b7/0x290
[  251.391721][ T7363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.391762][ T7363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.391783][ T7363]  do_syscall_64+0x174/0x580
[  251.391809][ T7363]  ? trace_irq_disable+0x3b/0x140
[  251.391834][ T7363]  ? clear_bhb_loop+0x40/0x90
[  251.391858][ T7363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.391877][ T7363] RIP: 0033:0x7ff68609e019
[  251.391895][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.391911][ T7363] RSP: 002b:00007ff6842f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.391931][ T7363] RAX: ffffffffffffffda RBX: 00007ff686325fa0 RCX: 00007ff68609e019
[  251.391945][ T7363] RDX: 0000000020008820 RSI: 0000200000000240 RDI: 0000000000000004
[  251.391956][ T7363] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  251.391968][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.391977][ T7363] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  251.392004][ T7363]  </TASK>
[  253.328878][ T5609] Bluetooth: hci6: command tx timeout
[  254.525226][ T7381] FAULT_INJECTION: forcing a failure.
[  254.525226][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.525282][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.5.477 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  254.525306][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.525318][ T7381] Call Trace:
[  254.525325][ T7381]  <TASK>
[  254.525334][ T7381]  dump_stack_lvl+0xe8/0x150
[  254.525368][ T7381]  should_fail_ex+0x467/0x600
[  254.525403][ T7381]  _copy_to_user+0x31/0xb0
[  254.525429][ T7381]  simple_read_from_buffer+0xe1/0x170
[  254.525456][ T7381]  proc_fail_nth_read+0x1be/0x230
[  254.525482][ T7381]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.525506][ T7381]  ? rw_verify_area+0x250/0x4d0
[  254.525533][ T7381]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.525553][ T7381]  vfs_read+0x219/0xa90
[  254.525579][ T7381]  ? irqentry_exit+0x218/0x8f0
[  254.525604][ T7381]  ? lockdep_hardirqs_on+0x7a/0x110
[  254.525628][ T7381]  ? __pfx_vfs_read+0x10/0x10
[  254.525673][ T7381]  ksys_read+0x156/0x270
[  254.525700][ T7381]  ? __pfx_ksys_read+0x10/0x10
[  254.525732][ T7381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.525753][ T7381]  do_syscall_64+0x174/0x580
[  254.525779][ T7381]  ? clear_bhb_loop+0x40/0x90
[  254.525803][ T7381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.525822][ T7381] RIP: 0033:0x7fd840cee84e
[  254.525840][ T7381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  254.525857][ T7381] RSP: 002b:00007fd83ef43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  254.525878][ T7381] RAX: ffffffffffffffda RBX: 00007fd83ef446c0 RCX: 00007fd840cee84e
[  254.525892][ T7381] RDX: 000000000000000f RSI: 00007fd83ef440a0 RDI: 0000000000000006
[  254.525905][ T7381] RBP: 00007fd83ef44090 R08: 0000000000000000 R09: 0000000000000000
[  254.525917][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.525929][ T7381] R13: 00007fd840fb6218 R14: 00007fd840fb6180 R15: 00007ffc5c495f88
[  254.525960][ T7381]  </TASK>
[  255.407157][ T5609] Bluetooth: hci6: command tx timeout
[  255.745915][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  255.745982][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  255.825720][ T7384] tipc: Started in network mode
[  255.825757][ T7384] tipc: Node identity 1000001, cluster identity 4711
[  255.825769][ T7384] tipc: Node number set to 16777217
[  256.288231][ T6069] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  256.449355][ T6069] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  256.449386][ T6069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.527383][ T6069] usb 5-1: config 0 descriptor??
[  256.559827][ T6069] cp210x 5-1:0.0: cp210x converter detected
[  256.686139][ T7404] FAULT_INJECTION: forcing a failure.
[  256.686139][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.691003][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.5.483 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  256.691031][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.691043][ T7404] Call Trace:
[  256.691051][ T7404]  <TASK>
[  256.691061][ T7404]  dump_stack_lvl+0xe8/0x150
[  256.691108][ T7404]  should_fail_ex+0x467/0x600
[  256.691142][ T7404]  _copy_from_user+0x2d/0xb0
[  256.691167][ T7404]  ___sys_sendmsg+0x1c6/0x360
[  256.691191][ T7404]  ? __lock_acquire+0x683/0x2ce0
[  256.691215][ T7404]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.691244][ T7404]  ? kstrtouint+0x6e/0xe0
[  256.691296][ T7404]  ? __fget_files+0x2a/0x420
[  256.691316][ T7404]  ? __fget_files+0x3a8/0x420
[  256.691346][ T7404]  __sys_sendmmsg+0x279/0x4d0
[  256.691375][ T7404]  ? __pfx___sys_sendmmsg+0x10/0x10
[  256.691412][ T7404]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  256.691444][ T7404]  ? ksys_write+0x248/0x270
[  256.691471][ T7404]  ? __pfx_ksys_write+0x10/0x10
[  256.691500][ T7404]  __x64_sys_sendmmsg+0xa0/0xc0
[  256.691524][ T7404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.691544][ T7404]  do_syscall_64+0x174/0x580
[  256.691568][ T7404]  ? trace_irq_disable+0x3b/0x140
[  256.691587][ T7404]  ? clear_bhb_loop+0x40/0x90
[  256.691610][ T7404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.691629][ T7404] RIP: 0033:0x7fd840d2e019
[  256.691647][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.691664][ T7404] RSP: 002b:00007fd83ef44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  256.691684][ T7404] RAX: ffffffffffffffda RBX: 00007fd840fb6180 RCX: 00007fd840d2e019
[  256.691699][ T7404] RDX: 04000000000001c0 RSI: 00002000000044c0 RDI: 0000000000000005
[  256.691712][ T7404] RBP: 00007fd83ef44090 R08: 0000000000000000 R09: 0000000000000000
[  256.691725][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.691737][ T7404] R13: 00007fd840fb6218 R14: 00007fd840fb6180 R15: 00007ffc5c495f88
[  256.691767][ T7404]  </TASK>
[  257.780527][ T6069] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121
[  258.096956][ T5609] Bluetooth: hci6: command tx timeout
[  260.047046][ T6069] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[  260.047075][ T6069] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  260.088618][ T6069] usb 5-1: cp210x converter now attached to ttyUSB0
[  260.130929][ T6069] usb 5-1: USB disconnect, device number 16
[  260.183514][ T6069] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  260.189367][ T7405] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  260.206602][ T6069] cp210x 5-1:0.0: device disconnected
[  260.296626][ T7418] netlink: 'syz.4.484': attribute type 2 has an invalid length.
[  261.774597][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.195284][ T5715] bridge0: entered promiscuous mode
[  264.437194][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  265.009767][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  265.009795][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.040833][   T10] usb 3-1: config 0 descriptor??
[  265.052943][   T10] cp210x 3-1:0.0: cp210x converter detected
[  265.124313][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'.
[  265.203704][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.564344][ T7439] netlink: 'syz.2.489': attribute type 83 has an invalid length.
[  265.617442][ T7444] hsr_slave_0 (unregistering): left promiscuous mode
[  265.687398][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[  265.956547][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.982145][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.997470][   T10] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121
[  265.997487][   T10] cp210x 3-1:0.0: GPIO initialisation failed: -121
[  266.008416][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[  266.360677][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.844509][ T5715] usb 3-1: USB disconnect, device number 33
[  266.885577][ T5715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  266.911536][ T5715] cp210x 3-1:0.0: device disconnected
[  267.053062][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.236977][ T5714] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  267.389180][ T5714] usb 4-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  267.389218][ T5714] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  267.389242][ T5714] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  267.389268][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.391483][ T5714] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  267.391512][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.391531][ T5714] usb 4-1: Product: syz
[  267.391544][ T5714] usb 4-1: Manufacturer: syz
[  267.391558][ T5714] usb 4-1: SerialNumber: syz
[  267.480860][ T5714] usb 4-1: config 0 descriptor??
[  267.482052][ T7463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  267.520217][ T5714] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  267.520425][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  267.520478][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  267.559850][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  267.559956][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  267.560037][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  267.560116][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  267.560195][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  267.564443][ T5714] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  267.622493][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  267.622569][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  267.622634][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  267.622695][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  267.622757][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  267.676102][ T5714] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  267.691991][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.730724][ T5714] usb 4-1: USB disconnect, device number 20
[  267.827656][ T5714] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  267.835349][ T5714] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  267.856236][ T5714] keyspan 4-1:0.0: device disconnected
[  267.913076][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.913262][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.913495][ T7344] bridge_slave_0: entered allmulticast mode
[  267.945063][ T7344] bridge_slave_0: entered promiscuous mode
[  267.962686][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.962805][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.963004][ T7344] bridge_slave_1: entered allmulticast mode
[  267.967763][ T7344] bridge_slave_1: entered promiscuous mode
[  268.111483][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.115243][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.505476][ T7344] team0: Port device team_slave_0 added
[  268.630234][ T7344] team0: Port device team_slave_1 added
[  269.873966][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.873984][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.874007][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.886453][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.886470][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.886494][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.407027][ T5715] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  272.620202][ T5715] usb 4-1: Using ep0 maxpacket: 16
[  272.638804][ T5715] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  272.638833][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.727654][ T5715] usb 4-1: config 0 descriptor??
[  272.730751][ T7344] hsr_slave_0: entered promiscuous mode
[  272.749019][ T7344] hsr_slave_1: entered promiscuous mode
[  272.752894][ T5715] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  272.775770][ T7344] debugfs: 'hsr0' already exists in 'hsr'
[  272.775797][ T7344] Cannot create hsr debugfs directory
[  273.362649][   T12] bridge_slave_1: left allmulticast mode
[  273.387048][   T12] bridge_slave_1: left promiscuous mode
[  273.445275][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.163814][ T5715] usb 4-1: Detected FT232A
[  274.189845][ T5715] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  274.230932][ T5715] usb 4-1: USB disconnect, device number 21
[  274.249773][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  274.267426][ T5715] ftdi_sio 4-1:0.0: device disconnected
[  276.349992][ T7566] FAULT_INJECTION: forcing a failure.
[  276.349992][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.351672][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.4.518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  276.351687][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.351695][ T7566] Call Trace:
[  276.351699][ T7566]  <TASK>
[  276.351704][ T7566]  dump_stack_lvl+0xe8/0x150
[  276.351725][ T7566]  should_fail_ex+0x467/0x600
[  276.351744][ T7566]  _copy_to_user+0x31/0xb0
[  276.351758][ T7566]  simple_read_from_buffer+0xe1/0x170
[  276.351773][ T7566]  proc_fail_nth_read+0x1be/0x230
[  276.351786][ T7566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  276.351799][ T7566]  ? rw_verify_area+0x250/0x4d0
[  276.351812][ T7566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  276.351823][ T7566]  vfs_read+0x219/0xa90
[  276.351840][ T7566]  ? __pfx_vfs_read+0x10/0x10
[  276.351853][ T7566]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  276.351867][ T7566]  ? lockdep_hardirqs_on+0x7a/0x110
[  276.351880][ T7566]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  276.351892][ T7566]  ? mutex_lock_nested+0x152/0x1d0
[  276.351901][ T7566]  ? fdget_pos+0x252/0x320
[  276.351917][ T7566]  ksys_read+0x156/0x270
[  276.351930][ T7566]  ? __pfx_ksys_read+0x10/0x10
[  276.351947][ T7566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.351958][ T7566]  do_syscall_64+0x174/0x580
[  276.351971][ T7566]  ? trace_irq_disable+0x3b/0x140
[  276.351981][ T7566]  ? clear_bhb_loop+0x40/0x90
[  276.351993][ T7566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.352003][ T7566] RIP: 0033:0x7ff68605e84e
[  276.352014][ T7566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  276.352023][ T7566] RSP: 002b:00007ff6842f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  276.352035][ T7566] RAX: ffffffffffffffda RBX: 00007ff6842f66c0 RCX: 00007ff68605e84e
[  276.352042][ T7566] RDX: 000000000000000f RSI: 00007ff6842f60a0 RDI: 0000000000000008
[  276.352048][ T7566] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  276.352054][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.352060][ T7566] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  276.352076][ T7566]  </TASK>
[  276.900354][ T7573] binder: 7571:7573 ioctl c0306201 200000000040 returned -22
[  277.207006][ T6069] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  277.367682][ T6069] usb 5-1: device descriptor read/64, error -71
[  277.903081][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.958898][ T6069] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  277.963278][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.019031][   T12] bond0 (unregistering): Released all slaves
[  278.064869][   T12] team0: Port device bond1 removed
[  278.066800][   T12] bond1 (unregistering): Released all slaves
[  278.086965][ T6069] usb 5-1: device descriptor read/64, error -71
[  278.207615][ T6069] usb usb5-port1: attempt power cycle
[  278.276751][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[  278.567120][ T6069] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  278.587704][ T6069] usb 5-1: device descriptor read/8, error -71
[  278.854305][ T6069] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  278.867619][ T6069] usb 5-1: device descriptor read/8, error -71
[  278.979179][ T6069] usb usb5-port1: unable to enumerate USB device
[  281.208360][ T7617] FAULT_INJECTION: forcing a failure.
[  281.208360][ T7617] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.208388][ T7617] CPU: 0 UID: 0 PID: 7617 Comm: syz.5.531 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  281.208405][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  281.208413][ T7617] Call Trace:
[  281.208419][ T7617]  <TASK>
[  281.208425][ T7617]  dump_stack_lvl+0xe8/0x150
[  281.208455][ T7617]  should_fail_ex+0x467/0x600
[  281.208483][ T7617]  _copy_from_user+0x2d/0xb0
[  281.208502][ T7617]  br_ioctl_stub+0x315/0xd60
[  281.208526][ T7617]  ? do_vfs_ioctl+0x1184/0x1550
[  281.208547][ T7617]  ? __pfx_br_ioctl_stub+0x10/0x10
[  281.208581][ T7617]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  281.208604][ T7617]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  281.208623][ T7617]  ? mutex_lock_nested+0x152/0x1d0
[  281.208637][ T7617]  ? sock_ioctl+0x4bb/0x7f0
[  281.208663][ T7617]  ? __pfx_br_ioctl_stub+0x10/0x10
[  281.208681][ T7617]  sock_ioctl+0x4e4/0x7f0
[  281.208707][ T7617]  ? __pfx_sock_ioctl+0x10/0x10
[  281.208732][ T7617]  ? __fget_files+0x2a/0x420
[  281.208750][ T7617]  ? __fget_files+0x3a8/0x420
[  281.208767][ T7617]  ? __fget_files+0x2a/0x420
[  281.208784][ T7617]  ? bpf_lsm_file_ioctl+0x9/0x20
[  281.208810][ T7617]  ? __pfx_sock_ioctl+0x10/0x10
[  281.208867][ T7617]  __se_sys_ioctl+0xff/0x170
[  281.208888][ T7617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.208906][ T7617]  do_syscall_64+0x174/0x580
[  281.208939][ T7617]  ? trace_irq_disable+0x3b/0x140
[  281.208957][ T7617]  ? clear_bhb_loop+0x40/0x90
[  281.208977][ T7617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.208994][ T7617] RIP: 0033:0x7fd840d2e019
[  281.209010][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.209025][ T7617] RSP: 002b:00007fd83ef86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  281.209050][ T7617] RAX: ffffffffffffffda RBX: 00007fd840fb5fa0 RCX: 00007fd840d2e019
[  281.209064][ T7617] RDX: 0000200000000000 RSI: 00000000000089a1 RDI: 0000000000000003
[  281.209073][ T7617] RBP: 00007fd83ef86090 R08: 0000000000000000 R09: 0000000000000000
[  281.209082][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.209089][ T7617] R13: 00007fd840fb6038 R14: 00007fd840fb5fa0 R15: 00007ffc5c495f88
[  281.209113][ T7617]  </TASK>
[  281.888993][  T202] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  281.971573][ T7597] syz.2.526 (7597): drop_caches: 2
[  282.036991][  T202] usb 6-1: Using ep0 maxpacket: 8
[  282.039460][  T202] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  282.039488][  T202] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  282.039512][  T202] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 6
[  282.039535][  T202] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.039573][  T202] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  282.039594][  T202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.279283][  T202] usb 6-1: GET_CAPABILITIES returned 0
[  282.279328][  T202] usbtmc 6-1:16.0: can't read capabilities
[  282.758304][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[  282.785946][  T202] usb 6-1: USB disconnect, device number 2
[  283.188879][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.494601][ T7665] FAULT_INJECTION: forcing a failure.
[  283.494601][ T7665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.494643][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.2.541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  283.494663][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.494674][ T7665] Call Trace:
[  283.494682][ T7665]  <TASK>
[  283.494689][ T7665]  dump_stack_lvl+0xe8/0x150
[  283.494718][ T7665]  should_fail_ex+0x467/0x600
[  283.494743][ T7665]  _copy_to_user+0x31/0xb0
[  283.494762][ T7665]  simple_read_from_buffer+0xe1/0x170
[  283.494782][ T7665]  proc_fail_nth_read+0x1be/0x230
[  283.494801][ T7665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  283.494819][ T7665]  ? rw_verify_area+0x250/0x4d0
[  283.494839][ T7665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  283.494855][ T7665]  vfs_read+0x219/0xa90
[  283.494879][ T7665]  ? __pfx_vfs_read+0x10/0x10
[  283.494899][ T7665]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  283.494920][ T7665]  ? lockdep_hardirqs_on+0x7a/0x110
[  283.494940][ T7665]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  283.494960][ T7665]  ? mutex_lock_nested+0x152/0x1d0
[  283.494975][ T7665]  ? fdget_pos+0x252/0x320
[  283.494996][ T7665]  ksys_read+0x156/0x270
[  283.495015][ T7665]  ? __pfx_ksys_read+0x10/0x10
[  283.495037][ T7665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.495054][ T7665]  do_syscall_64+0x174/0x580
[  283.495072][ T7665]  ? trace_irq_disable+0x3b/0x140
[  283.495086][ T7665]  ? clear_bhb_loop+0x40/0x90
[  283.495104][ T7665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.495120][ T7665] RIP: 0033:0x7f69e1b2e84e
[  283.495135][ T7665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  283.495149][ T7665] RSP: 002b:00007f69dfda4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  283.495167][ T7665] RAX: ffffffffffffffda RBX: 00007f69dfda56c0 RCX: 00007f69e1b2e84e
[  283.495178][ T7665] RDX: 000000000000000f RSI: 00007f69dfda50a0 RDI: 0000000000000003
[  283.495188][ T7665] RBP: 00007f69dfda5090 R08: 0000000000000000 R09: 0000000000000000
[  283.495198][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.495206][ T7665] R13: 00007f69e1df6128 R14: 00007f69e1df6090 R15: 00007ffef4d7b2b8
[  283.495232][ T7665]  </TASK>
[  283.496244][ T7664] netlink: 'syz.5.542': attribute type 2 has an invalid length.
[  283.496261][ T7664] netlink: 'syz.5.542': attribute type 8 has an invalid length.
[  283.496274][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.5.542'.
[  283.591843][ T5609] Bluetooth: hci5: Ignoring connect complete event for invalid link type
[  283.958975][ T7675] FAULT_INJECTION: forcing a failure.
[  283.958975][ T7675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.959008][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  283.959031][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.959049][ T7675] Call Trace:
[  283.959057][ T7675]  <TASK>
[  283.959064][ T7675]  dump_stack_lvl+0xe8/0x150
[  283.959096][ T7675]  should_fail_ex+0x467/0x600
[  283.959129][ T7675]  _copy_from_user+0x2d/0xb0
[  283.959153][ T7675]  ___sys_sendmsg+0x1c6/0x360
[  283.959175][ T7675]  ? __lock_acquire+0x683/0x2ce0
[  283.959198][ T7675]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.959250][ T7675]  ? __fget_files+0x2a/0x420
[  283.959269][ T7675]  ? __fget_files+0x3a8/0x420
[  283.959298][ T7675]  __x64_sys_sendmsg+0x1b7/0x290
[  283.959324][ T7675]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.959364][ T7675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.959385][ T7675]  do_syscall_64+0x174/0x580
[  283.959410][ T7675]  ? trace_irq_disable+0x3b/0x140
[  283.959426][ T7675]  ? clear_bhb_loop+0x40/0x90
[  283.959465][ T7675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.959485][ T7675] RIP: 0033:0x7f69e1b6e019
[  283.959501][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.959515][ T7675] RSP: 002b:00007f69dfdc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.959536][ T7675] RAX: ffffffffffffffda RBX: 00007f69e1df5fa0 RCX: 00007f69e1b6e019
[  283.959549][ T7675] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000003
[  283.959560][ T7675] RBP: 00007f69dfdc6090 R08: 0000000000000000 R09: 0000000000000000
[  283.959572][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.959583][ T7675] R13: 00007f69e1df6038 R14: 00007f69e1df5fa0 R15: 00007ffef4d7b2b8
[  283.959638][ T7675]  </TASK>
[  285.368349][ T7703] netlink: 'syz.2.552': attribute type 2 has an invalid length.
[  285.368386][ T7703] netlink: 'syz.2.552': attribute type 8 has an invalid length.
[  285.368398][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'.
[  285.597023][ T5715] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  285.748960][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  285.794346][ T7344] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  285.796935][ T5715] usb 6-1: Using ep0 maxpacket: 16
[  285.809181][ T5715] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  285.809209][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.815943][ T5715] usb 6-1: config 0 descriptor??
[  285.827805][ T5715] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  285.896062][ T7716] FAULT_INJECTION: forcing a failure.
[  285.896062][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.896122][ T7716] CPU: 1 UID: 0 PID: 7716 Comm: syz.3.554 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  285.896145][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.896156][ T7716] Call Trace:
[  285.896163][ T7716]  <TASK>
[  285.896171][ T7716]  dump_stack_lvl+0xe8/0x150
[  285.896204][ T7716]  should_fail_ex+0x467/0x600
[  285.896238][ T7716]  _copy_from_user+0x2d/0xb0
[  285.896262][ T7716]  cec_ioctl+0xa7a/0x3060
[  285.896291][ T7716]  ? __pfx_cec_ioctl+0x10/0x10
[  285.896327][ T7716]  ? kasan_quarantine_put+0xbb/0x1f0
[  285.896353][ T7716]  ? tomoyo_path_number_perm+0x219/0x5f0
[  285.896376][ T7716]  ? tomoyo_path_number_perm+0x219/0x5f0
[  285.896399][ T7716]  ? do_vfs_ioctl+0x1184/0x1550
[  285.896427][ T7716]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  285.896452][ T7716]  ? __pfx_smack_log+0x10/0x10
[  285.896498][ T7716]  ? smack_file_ioctl+0x2c2/0x360
[  285.896519][ T7716]  ? __pfx_smack_file_ioctl+0x10/0x10
[  285.896547][ T7716]  ? __fget_files+0x2a/0x420
[  285.896566][ T7716]  ? __fget_files+0x3a8/0x420
[  285.896585][ T7716]  ? __fget_files+0x2a/0x420
[  285.896607][ T7716]  ? bpf_lsm_file_ioctl+0x9/0x20
[  285.896626][ T7716]  ? __pfx_cec_ioctl+0x10/0x10
[  285.896647][ T7716]  __se_sys_ioctl+0xff/0x170
[  285.896672][ T7716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.896692][ T7716]  do_syscall_64+0x174/0x580
[  285.896716][ T7716]  ? trace_irq_disable+0x3b/0x140
[  285.896736][ T7716]  ? clear_bhb_loop+0x40/0x90
[  285.896758][ T7716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.896775][ T7716] RIP: 0033:0x7fcb1e40e019
[  285.896793][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.896809][ T7716] RSP: 002b:00007fcb1c645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.896831][ T7716] RAX: ffffffffffffffda RBX: 00007fcb1e696090 RCX: 00007fcb1e40e019
[  285.896844][ T7716] RDX: 00002000000008c0 RSI: 00000000c05c6104 RDI: 0000000000000003
[  285.896864][ T7716] RBP: 00007fcb1c645090 R08: 0000000000000000 R09: 0000000000000000
[  285.896876][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.896887][ T7716] R13: 00007fcb1e696128 R14: 00007fcb1e696090 R15: 00007ffe39a7d638
[  285.896915][ T7716]  </TASK>
[  286.647826][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  286.697230][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[  286.732152][ T7344] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  286.789288][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  286.791829][ T7344] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  286.851690][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  287.076389][ T7730] FAULT_INJECTION: forcing a failure.
[  287.076389][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.076420][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  287.076437][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.076446][ T7730] Call Trace:
[  287.076451][ T7730]  <TASK>
[  287.076457][ T7730]  dump_stack_lvl+0xe8/0x150
[  287.076483][ T7730]  should_fail_ex+0x467/0x600
[  287.076511][ T7730]  _copy_from_iter+0x1d3/0x1660
[  287.076528][ T7730]  ? rcu_is_watching+0x15/0xb0
[  287.076548][ T7730]  ? trace_kmem_cache_alloc+0x29/0xe0
[  287.076566][ T7730]  ? __pfx__copy_from_iter+0x10/0x10
[  287.076581][ T7730]  ? __alloc_skb+0x276/0x7a0
[  287.076597][ T7730]  ? __alloc_skb+0x276/0x7a0
[  287.076617][ T7730]  ? netlink_sendmsg+0x650/0xb40
[  287.076638][ T7730]  ? skb_put+0x112/0x210
[  287.076655][ T7730]  netlink_sendmsg+0x6c0/0xb40
[  287.076674][ T7730]  ? _parse_integer_limit+0x192/0x1e0
[  287.076704][ T7730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.076725][ T7730]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  287.076753][ T7730]  ? get_pid_task+0x20/0x1f0
[  287.076782][ T7730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.076800][ T7730]  sock_sendmsg_nosec+0x13a/0x180
[  287.076831][ T7730]  sock_write_iter+0x2e4/0x3f0
[  287.076855][ T7730]  ? __pfx_sock_write_iter+0x10/0x10
[  287.076883][ T7730]  ? bpf_lsm_file_permission+0x9/0x20
[  287.076906][ T7730]  ? security_file_permission+0x75/0x260
[  287.076931][ T7730]  vfs_write+0x61e/0xbb0
[  287.076960][ T7730]  ? __pfx_vfs_write+0x10/0x10
[  287.076990][ T7730]  ? __fget_files+0x2a/0x420
[  287.077017][ T7730]  ksys_write+0x156/0x270
[  287.077040][ T7730]  ? __pfx_ksys_write+0x10/0x10
[  287.077072][ T7730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.077093][ T7730]  do_syscall_64+0x174/0x580
[  287.077117][ T7730]  ? trace_irq_disable+0x3b/0x140
[  287.077135][ T7730]  ? clear_bhb_loop+0x40/0x90
[  287.077156][ T7730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.077176][ T7730] RIP: 0033:0x7ff68609e019
[  287.077194][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.077209][ T7730] RSP: 002b:00007ff6842f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  287.077229][ T7730] RAX: ffffffffffffffda RBX: 00007ff686325fa0 RCX: 00007ff68609e019
[  287.077244][ T7730] RDX: 0000000000000060 RSI: 0000200000000000 RDI: 0000000000000003
[  287.077256][ T7730] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  287.077267][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.077279][ T7730] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  287.077309][ T7730]  </TASK>
[  287.444624][ T5715] usb 6-1: Detected FT232A
[  287.455431][ T5715] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  287.467677][ T7734] netlink: 'syz.2.562': attribute type 2 has an invalid length.
[  287.467695][ T7734] netlink: 'syz.2.562': attribute type 8 has an invalid length.
[  287.467708][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'.
[  287.470878][   T12] hsr_slave_0: left promiscuous mode
[  287.544394][ T5715] usb 6-1: USB disconnect, device number 3
[  287.545882][   T12] hsr_slave_1: left promiscuous mode
[  287.547272][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.604340][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.606802][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  287.613856][ T5715] ftdi_sio 6-1:0.0: device disconnected
[  287.674112][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.674132][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.247724][ T7744] FAULT_INJECTION: forcing a failure.
[  288.247724][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.247755][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.5.563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  288.247777][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  288.247796][ T7744] Call Trace:
[  288.247803][ T7744]  <TASK>
[  288.247810][ T7744]  dump_stack_lvl+0xe8/0x150
[  288.247845][ T7744]  should_fail_ex+0x467/0x600
[  288.247877][ T7744]  _copy_to_user+0x31/0xb0
[  288.247903][ T7744]  simple_read_from_buffer+0xe1/0x170
[  288.247930][ T7744]  proc_fail_nth_read+0x1be/0x230
[  288.247955][ T7744]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.247979][ T7744]  ? rw_verify_area+0x250/0x4d0
[  288.248003][ T7744]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.248022][ T7744]  vfs_read+0x219/0xa90
[  288.248053][ T7744]  ? __pfx_vfs_read+0x10/0x10
[  288.248078][ T7744]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  288.248103][ T7744]  ? lockdep_hardirqs_on+0x7a/0x110
[  288.248127][ T7744]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  288.248149][ T7744]  ? mutex_lock_nested+0x152/0x1d0
[  288.248164][ T7744]  ? fdget_pos+0x252/0x320
[  288.248190][ T7744]  ksys_read+0x156/0x270
[  288.248212][ T7744]  ? __pfx_ksys_read+0x10/0x10
[  288.248239][ T7744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.248256][ T7744]  do_syscall_64+0x174/0x580
[  288.248281][ T7744]  ? clear_bhb_loop+0x40/0x90
[  288.248304][ T7744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.248323][ T7744] RIP: 0033:0x7fd840cee84e
[  288.248339][ T7744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  288.248354][ T7744] RSP: 002b:00007fd83ef43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  288.248375][ T7744] RAX: ffffffffffffffda RBX: 00007fd83ef446c0 RCX: 00007fd840cee84e
[  288.248388][ T7744] RDX: 000000000000000f RSI: 00007fd83ef440a0 RDI: 0000000000000004
[  288.248400][ T7744] RBP: 00007fd83ef44090 R08: 0000000000000000 R09: 0000000000000000
[  288.248412][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.248423][ T7744] R13: 00007fd840fb6218 R14: 00007fd840fb6180 R15: 00007ffc5c495f88
[  288.248454][ T7744]  </TASK>
[  288.488906][   T12] veth1_macvtap: left promiscuous mode
[  288.489131][   T12] veth0_macvtap: left promiscuous mode
[  288.489305][   T12] veth1_vlan: left promiscuous mode
[  288.516056][   T12] veth0_vlan: left promiscuous mode
[  289.756259][ T7739] syz.3.557 (7739): drop_caches: 2
[  289.774833][ T7750] FAULT_INJECTION: forcing a failure.
[  289.774833][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.774855][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.5.565 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  289.774868][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.774875][ T7750] Call Trace:
[  289.774879][ T7750]  <TASK>
[  289.774884][ T7750]  dump_stack_lvl+0xe8/0x150
[  289.774905][ T7750]  should_fail_ex+0x467/0x600
[  289.774924][ T7750]  _copy_from_user+0x2d/0xb0
[  289.774936][ T7750]  __se_sys_epoll_ctl+0xbd/0x230
[  289.774951][ T7750]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  289.774968][ T7750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.774979][ T7750]  do_syscall_64+0x174/0x580
[  289.774992][ T7750]  ? trace_irq_disable+0x3b/0x140
[  289.775003][ T7750]  ? clear_bhb_loop+0x40/0x90
[  289.775015][ T7750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.775025][ T7750] RIP: 0033:0x7fd840d2e019
[  289.775035][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.775044][ T7750] RSP: 002b:00007fd83ef86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  289.775055][ T7750] RAX: ffffffffffffffda RBX: 00007fd840fb5fa0 RCX: 00007fd840d2e019
[  289.775062][ T7750] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  289.775068][ T7750] RBP: 00007fd83ef86090 R08: 0000000000000000 R09: 0000000000000000
[  289.775074][ T7750] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.775081][ T7750] R13: 00007fd840fb6038 R14: 00007fd840fb5fa0 R15: 00007ffc5c495f88
[  289.775096][ T7750]  </TASK>
[  291.077743][   T12] team0 (unregistering): Port device team_slave_1 removed
[  291.138630][   T12] team0 (unregistering): Port device team_slave_0 removed
[  291.267044][   T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  291.359196][ T7344] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  291.410959][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  291.437798][   T31] usb 5-1: Using ep0 maxpacket: 16
[  291.445855][   T31] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  291.445884][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.486706][   T31] usb 5-1: config 0 descriptor??
[  291.510002][   T31] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  292.226589][ T5614] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  292.401885][ T5614] usb 3-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  292.401920][ T5614] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  292.402006][ T5614] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  292.402032][ T5614] usb 3-1: config 0 interface 0 has no altsetting 0
[  292.455223][ T5614] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  292.455252][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.455324][ T5614] usb 3-1: Product: syz
[  292.455339][ T5614] usb 3-1: Manufacturer: syz
[  292.455353][ T5614] usb 3-1: SerialNumber: syz
[  292.591068][ T5614] usb 3-1: config 0 descriptor??
[  292.592329][ T7771] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  292.622057][ T5614] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  292.622461][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  292.622625][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  292.669955][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  292.670094][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  292.670172][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  292.670303][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  292.670431][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  292.717340][ T5614] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  292.740694][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  292.740841][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  292.740958][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  292.741031][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  292.741146][ T5614] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  292.815837][ T5614] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2
[  292.868029][ T5715] usb 3-1: USB disconnect, device number 34
[  292.925917][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.090145][ T5715] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  293.133148][ T5715] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2
[  293.184859][ T5715] keyspan 3-1:0.0: device disconnected
[  293.381996][ T7344] 8021q: adding VLAN 0 to HW filter on device team0
[  293.420415][ T7795] FAULT_INJECTION: forcing a failure.
[  293.420415][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.420444][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.5.575 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  293.420465][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.420478][ T7795] Call Trace:
[  293.420485][ T7795]  <TASK>
[  293.420493][ T7795]  dump_stack_lvl+0xe8/0x150
[  293.420527][ T7795]  should_fail_ex+0x467/0x600
[  293.420561][ T7795]  _copy_to_user+0x31/0xb0
[  293.420586][ T7795]  simple_read_from_buffer+0xe1/0x170
[  293.420611][ T7795]  proc_fail_nth_read+0x1be/0x230
[  293.420634][ T7795]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.420656][ T7795]  ? rw_verify_area+0x250/0x4d0
[  293.420680][ T7795]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.420702][ T7795]  vfs_read+0x219/0xa90
[  293.420732][ T7795]  ? __pfx_vfs_read+0x10/0x10
[  293.420757][ T7795]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  293.420783][ T7795]  ? lockdep_hardirqs_on+0x7a/0x110
[  293.420807][ T7795]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  293.420829][ T7795]  ? mutex_lock_nested+0x152/0x1d0
[  293.420847][ T7795]  ? fdget_pos+0x252/0x320
[  293.420876][ T7795]  ksys_read+0x156/0x270
[  293.420902][ T7795]  ? __pfx_ksys_read+0x10/0x10
[  293.420942][ T7795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.420964][ T7795]  do_syscall_64+0x174/0x580
[  293.420988][ T7795]  ? trace_irq_disable+0x3b/0x140
[  293.421008][ T7795]  ? clear_bhb_loop+0x40/0x90
[  293.421032][ T7795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.421051][ T7795] RIP: 0033:0x7fd840cee84e
[  293.421069][ T7795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  293.421085][ T7795] RSP: 002b:00007fd83ef64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  293.421106][ T7795] RAX: ffffffffffffffda RBX: 00007fd83ef656c0 RCX: 00007fd840cee84e
[  293.421120][ T7795] RDX: 000000000000000f RSI: 00007fd83ef650a0 RDI: 0000000000000004
[  293.421133][ T7795] RBP: 00007fd83ef65090 R08: 0000000000000000 R09: 0000000000000000
[  293.421144][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.421155][ T7795] R13: 00007fd840fb6128 R14: 00007fd840fb6090 R15: 00007ffc5c495f88
[  293.421186][ T7795]  </TASK>
[  293.703880][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.704012][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.787295][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.787418][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.911344][   T31] usb 5-1: Detected FT232A
[  293.913787][   T31] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  293.980833][   T31] usb 5-1: USB disconnect, device number 21
[  293.998955][   T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  294.001175][   T31] ftdi_sio 5-1:0.0: device disconnected
[  294.297024][ T5714] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  294.391219][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
[  294.447188][ T5714] usb 3-1: Using ep0 maxpacket: 16
[  294.454355][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.454375][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.454386][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  294.454409][ T5714] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  294.454421][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.521676][ T5714] usb 3-1: config 0 descriptor??
[  294.976597][ T5714] hid_parser_main: 11 callbacks suppressed
[  294.976620][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976650][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976676][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976700][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976726][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976752][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976777][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.976802][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.980091][   T12] IPVS: stop unused estimator thread 0...
[  294.980789][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  294.980819][ T5714] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  295.035938][ T5714] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  295.035970][ T5714] microsoft 0003:045E:07DA.0006: no inputs found
[  295.035983][ T5714] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway
[  295.562019][   T31] usb 3-1: USB disconnect, device number 35
[  295.806679][ T7825] netlink: 'syz.3.582': attribute type 2 has an invalid length.
[  295.806702][ T7825] netlink: 'syz.3.582': attribute type 8 has an invalid length.
[  295.806715][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.582'.
[  296.031966][ T7820] fido_id[7820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  296.968077][ T5715] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  297.128631][ T5715] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  297.128650][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.131583][ T5715] usb 3-1: config 0 descriptor??
[  297.145272][ T5715] cp210x 3-1:0.0: cp210x converter detected
[  297.178435][ T5714] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  297.375415][ T5714] usb 4-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.375450][ T5714] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  297.375475][ T5714] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  297.375501][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0
[  297.390459][ T5714] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  297.390488][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.390556][ T5714] usb 4-1: Product: syz
[  297.390570][ T5714] usb 4-1: Manufacturer: syz
[  297.390584][ T5714] usb 4-1: SerialNumber: syz
[  297.459809][ T5714] usb 4-1: config 0 descriptor??
[  297.528083][ T7845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  297.675864][ T5714] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  297.680264][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  297.680349][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  297.698629][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  297.699723][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  297.699802][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  297.703841][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  297.703977][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  297.775708][ T5714] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  297.838331][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  297.838416][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  297.838461][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  297.838503][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  297.838578][ T5714] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  297.947319][ T5714] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  297.998690][ T7842] netlink: 'syz.2.585': attribute type 83 has an invalid length.
[  298.045908][ T5714] usb 4-1: USB disconnect, device number 22
[  298.057995][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'.
[  298.106090][ T5714] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  298.197438][ T5714] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  298.198820][ T5714] keyspan 4-1:0.0: device disconnected
[  298.276640][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.279847][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.294654][ T5715] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121
[  298.294680][ T5715] cp210x 3-1:0.0: GPIO initialisation failed: -121
[  298.320306][ T5715] usb 3-1: cp210x converter now attached to ttyUSB0
[  299.315365][ T5614] usb 3-1: USB disconnect, device number 36
[  299.337779][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.349356][ T5614] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  299.373273][ T5614] cp210x 3-1:0.0: device disconnected
[  300.729585][ T7882] FAULT_INJECTION: forcing a failure.
[  300.729585][ T7882] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.755162][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.2.594 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  300.755191][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  300.755203][ T7882] Call Trace:
[  300.755211][ T7882]  <TASK>
[  300.755219][ T7882]  dump_stack_lvl+0xe8/0x150
[  300.755252][ T7882]  should_fail_ex+0x467/0x600
[  300.755288][ T7882]  _copy_to_user+0x31/0xb0
[  300.755313][ T7882]  simple_read_from_buffer+0xe1/0x170
[  300.755339][ T7882]  proc_fail_nth_read+0x1be/0x230
[  300.755358][ T7882]  ? __fget_files+0x2a/0x420
[  300.755380][ T7882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.755402][ T7882]  ? rw_verify_area+0x250/0x4d0
[  300.755426][ T7882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.755446][ T7882]  vfs_read+0x219/0xa90
[  300.755477][ T7882]  ? __pfx_vfs_read+0x10/0x10
[  300.755503][ T7882]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  300.755529][ T7882]  ? lockdep_hardirqs_on+0x7a/0x110
[  300.755553][ T7882]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  300.755577][ T7882]  ? mutex_lock_nested+0x152/0x1d0
[  300.755595][ T7882]  ? fdget_pos+0x252/0x320
[  300.755625][ T7882]  ksys_read+0x156/0x270
[  300.755651][ T7882]  ? __pfx_ksys_read+0x10/0x10
[  300.755683][ T7882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.755705][ T7882]  do_syscall_64+0x174/0x580
[  300.755739][ T7882]  ? trace_irq_disable+0x3b/0x140
[  300.755758][ T7882]  ? clear_bhb_loop+0x40/0x90
[  300.755782][ T7882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.755801][ T7882] RIP: 0033:0x7f69e1b2e84e
[  300.755819][ T7882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  300.755835][ T7882] RSP: 002b:00007f69dfda4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  300.755855][ T7882] RAX: ffffffffffffffda RBX: 00007f69dfda56c0 RCX: 00007f69e1b2e84e
[  300.755870][ T7882] RDX: 000000000000000f RSI: 00007f69dfda50a0 RDI: 0000000000000006
[  300.755882][ T7882] RBP: 00007f69dfda5090 R08: 0000000000000000 R09: 0000000000000000
[  300.755894][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.755906][ T7882] R13: 00007f69e1df6128 R14: 00007f69e1df6090 R15: 00007ffef4d7b2b8
[  300.755938][ T7882]  </TASK>
[  301.200035][ T7889] FAULT_INJECTION: forcing a failure.
[  301.200035][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.200068][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.4.596 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  301.200090][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.200101][ T7889] Call Trace:
[  301.200109][ T7889]  <TASK>
[  301.200117][ T7889]  dump_stack_lvl+0xe8/0x150
[  301.200154][ T7889]  should_fail_ex+0x467/0x600
[  301.200189][ T7889]  _copy_from_user+0x2d/0xb0
[  301.200215][ T7889]  io_submit_one+0xd2/0x13d0
[  301.200247][ T7889]  ? lockdep_hardirqs_on+0x7a/0x110
[  301.200273][ T7889]  ? irqentry_exit+0x218/0x8f0
[  301.200301][ T7889]  ? __pfx_io_submit_one+0x10/0x10
[  301.200328][ T7889]  ? __might_fault+0xaf/0x130
[  301.200367][ T7889]  ? __might_fault+0xaf/0x130
[  301.200391][ T7889]  __se_sys_io_submit+0x195/0x340
[  301.200416][ T7889]  ? __pfx___se_sys_io_submit+0x10/0x10
[  301.200435][ T7889]  ? ksys_write+0x248/0x270
[  301.200470][ T7889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.200488][ T7889]  do_syscall_64+0x174/0x580
[  301.200510][ T7889]  ? trace_irq_disable+0x3b/0x140
[  301.200529][ T7889]  ? clear_bhb_loop+0x40/0x90
[  301.200550][ T7889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.200569][ T7889] RIP: 0033:0x7ff68609e019
[  301.200587][ T7889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.200601][ T7889] RSP: 002b:00007ff6842f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  301.200622][ T7889] RAX: ffffffffffffffda RBX: 00007ff686325fa0 RCX: 00007ff68609e019
[  301.200635][ T7889] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 00007ff686e5f000
[  301.200648][ T7889] RBP: 00007ff6842f6090 R08: 0000000000000000 R09: 0000000000000000
[  301.200660][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.200672][ T7889] R13: 00007ff686326038 R14: 00007ff686325fa0 R15: 00007fffc97eab38
[  301.200701][ T7889]  </TASK>
[  301.489899][ T7344] veth0_vlan: entered promiscuous mode
[  301.528082][ T7344] veth1_vlan: entered promiscuous mode
[  303.229738][ T7344] veth0_macvtap: entered promiscuous mode
[  303.301792][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'.
[  303.326350][ T7344] veth1_macvtap: entered promiscuous mode
[  304.977449][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.114994][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.304767][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.310253][ T7929] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.349449][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.353536][ T7646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.353576][ T7646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.353625][ T7646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.702488][ T7948] netlink: 'syz.5.612': attribute type 1 has an invalid length.
[  308.889086][ T7948] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.998951][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.036635][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.068032][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.077587][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.079985][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  309.402602][ T7951] bond1: (slave ip6erspan0): making interface the new active one
[  309.479319][ T7951] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  311.176598][ T5609] Bluetooth: hci0: command tx timeout
[  311.221670][ T7980] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  311.221703][ T7980] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  311.244529][ T7980] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  311.244603][ T7980] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  312.297359][ T7999] FAULT_INJECTION: forcing a failure.
[  312.297359][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.297392][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  312.297415][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  312.297427][ T7999] Call Trace:
[  312.297435][ T7999]  <TASK>
[  312.297443][ T7999]  dump_stack_lvl+0xe8/0x150
[  312.297482][ T7999]  should_fail_ex+0x467/0x600
[  312.297516][ T7999]  _copy_to_user+0x31/0xb0
[  312.297541][ T7999]  simple_read_from_buffer+0xe1/0x170
[  312.297568][ T7999]  proc_fail_nth_read+0x1be/0x230
[  312.297593][ T7999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.297617][ T7999]  ? rw_verify_area+0x250/0x4d0
[  312.297643][ T7999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.297664][ T7999]  vfs_read+0x219/0xa90
[  312.297696][ T7999]  ? __pfx_vfs_read+0x10/0x10
[  312.297722][ T7999]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  312.297748][ T7999]  ? lockdep_hardirqs_on+0x7a/0x110
[  312.297772][ T7999]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  312.297794][ T7999]  ? mutex_lock_nested+0x152/0x1d0
[  312.297812][ T7999]  ? fdget_pos+0x252/0x320
[  312.297840][ T7999]  ksys_read+0x156/0x270
[  312.297865][ T7999]  ? __pfx_ksys_read+0x10/0x10
[  312.297893][ T7999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.297912][ T7999]  do_syscall_64+0x174/0x580
[  312.297936][ T7999]  ? trace_irq_disable+0x3b/0x140
[  312.297955][ T7999]  ? clear_bhb_loop+0x40/0x90
[  312.297978][ T7999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.297997][ T7999] RIP: 0033:0x7fcb1e3ce84e
[  312.298015][ T7999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  312.298040][ T7999] RSP: 002b:00007fcb1c644fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  312.298062][ T7999] RAX: ffffffffffffffda RBX: 00007fcb1c6456c0 RCX: 00007fcb1e3ce84e
[  312.298077][ T7999] RDX: 000000000000000f RSI: 00007fcb1c6450a0 RDI: 0000000000000005
[  312.298090][ T7999] RBP: 00007fcb1c645090 R08: 0000000000000000 R09: 0000000000000000
[  312.298102][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.298114][ T7999] R13: 00007fcb1e696128 R14: 00007fcb1e696090 R15: 00007ffe39a7d638
[  312.298146][ T7999]  </TASK>
[  312.671313][ T5714] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  312.818703][ T5714] usb 3-1: Using ep0 maxpacket: 32
[  312.821208][ T5714] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  312.821232][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.850800][ T5714] usb 3-1: config 0 descriptor??
[  313.415020][ T7082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.569999][ T5609] Bluetooth: hci0: command tx timeout
[  313.607542][ T5714] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  313.662857][ T7991] can0: slcan on ttyS3.
[  313.932883][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  313.935290][ T5714] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  313.935342][ T5714] usb 3-1: media controller created
[  314.013059][ T7985] can0 (unregistered): slcan off ttyS3.
[  314.015660][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.652194][ T5609] Bluetooth: hci0: command tx timeout
[  315.669128][ T5714] az6027: usb out operation failed. (-71)
[  315.669147][ T5714] stb0899_attach: Driver disabled by Kconfig
[  315.669157][ T5714] az6027: no front-end attached
[  315.669157][ T5714] 
[  315.675520][ T5714] az6027: usb out operation failed. (-71)
[  315.675537][ T5714] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  315.728322][ T5716] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  315.781555][ T5714] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  315.829577][ T7082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.856952][ T5716] usb 4-1: device descriptor read/64, error -71
[  316.108249][ T5716] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  316.218491][ T5714] dvb-usb: schedule remote query interval to 400 msecs.
[  316.218516][ T5714] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  316.246944][ T5716] usb 4-1: device descriptor read/64, error -71
[  316.248449][ T5714] usb 3-1: USB disconnect, device number 37
[  316.366224][ T5716] usb usb4-port1: attempt power cycle
[  316.505586][ T7082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.580958][ T8043] FAULT_INJECTION: forcing a failure.
[  316.580958][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.580991][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.2.628 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  316.581016][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  316.581027][ T8043] Call Trace:
[  316.581035][ T8043]  <TASK>
[  316.581043][ T8043]  dump_stack_lvl+0xe8/0x150
[  316.581078][ T8043]  should_fail_ex+0x467/0x600
[  316.581112][ T8043]  _copy_from_user+0x2d/0xb0
[  316.581136][ T8043]  ___sys_sendmsg+0x1c6/0x360
[  316.581160][ T8043]  ? __lock_acquire+0x683/0x2ce0
[  316.581185][ T8043]  ? __pfx____sys_sendmsg+0x10/0x10
[  316.581237][ T8043]  ? __fget_files+0x2a/0x420
[  316.581257][ T8043]  ? __fget_files+0x3a8/0x420
[  316.581286][ T8043]  __x64_sys_sendmsg+0x1b7/0x290
[  316.581312][ T8043]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  316.581349][ T8043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.581370][ T8043]  do_syscall_64+0x174/0x580
[  316.581393][ T8043]  ? trace_irq_disable+0x3b/0x140
[  316.581411][ T8043]  ? clear_bhb_loop+0x40/0x90
[  316.581432][ T8043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.581449][ T8043] RIP: 0033:0x7f69e1b6e019
[  316.581466][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.581481][ T8043] RSP: 002b:00007f69dfda5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.581503][ T8043] RAX: ffffffffffffffda RBX: 00007f69e1df6090 RCX: 00007f69e1b6e019
[  316.581517][ T8043] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003
[  316.581530][ T8043] RBP: 00007f69dfda5090 R08: 0000000000000000 R09: 0000000000000000
[  316.581542][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.581554][ T8043] R13: 00007f69e1df6128 R14: 00007f69e1df6090 R15: 00007ffef4d7b2b8
[  316.581584][ T8043]  </TASK>
[  316.709182][ T5716] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  316.730221][ T5716] usb 4-1: device descriptor read/8, error -71
[  317.232849][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  317.233079][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  317.737253][ T5609] Bluetooth: hci0: command tx timeout
[  318.701050][ T5716] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  318.979749][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  318.979780][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  318.979803][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  318.979823][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  319.824479][ T5716] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  319.824518][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.824537][ T5716] usb 4-1: Product: syz
[  319.824550][ T5716] usb 4-1: Manufacturer: syz
[  319.824563][ T5716] usb 4-1: SerialNumber: syz
[  319.848244][ T5716] usb 4-1: config 0 descriptor??
[  319.857480][ T5716] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  319.857500][ T5716] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card
[  319.857676][ T5716] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90
[  320.063013][ T7082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.563329][ T8073] netlink: 165 bytes leftover after parsing attributes in process `syz.4.635'.
[  320.683678][ T8073] netlink: 'syz.4.635': attribute type 8 has an invalid length.
[  320.767168][ T5714] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  320.891076][   T36] usb 4-1: USB disconnect, device number 26
[  321.158009][ T8073] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  321.182998][ T8073] batman_adv: batadv0: Adding interface: gretap1
[  321.183014][ T8073] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.183046][ T8073] batman_adv: batadv0: Interface activated: gretap1
[  321.816969][ T5715] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  321.974478][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.974505][ T5715] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  321.991715][ T5715] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  321.991745][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.991763][ T5715] usb 5-1: Product: syz
[  321.991777][ T5715] usb 5-1: Manufacturer: syz
[  321.991789][ T5715] usb 5-1: SerialNumber: syz
[  322.047028][  T202] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  322.095275][ T5715] usb 5-1: config 0 descriptor??
[  322.178340][  T202] usb 3-1: device descriptor read/64, error -71
[  322.416986][  T202] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  322.546945][  T202] usb 3-1: device descriptor read/64, error -71
[  322.661217][  T202] usb usb3-port1: attempt power cycle
[  323.222948][ T8120] cgroup: fork rejected by pids controller in /syz3
[  323.506994][  T202] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  323.531961][  T202] usb 3-1: device descriptor read/8, error -71
[  323.763746][ T8269] FAULT_INJECTION: forcing a failure.
[  323.763746][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.763774][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.3.644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  323.763792][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  323.763802][ T8269] Call Trace:
[  323.763808][ T8269]  <TASK>
[  323.763814][ T8269]  dump_stack_lvl+0xe8/0x150
[  323.763842][ T8269]  should_fail_ex+0x467/0x600
[  323.763871][ T8269]  _copy_from_user+0x2d/0xb0
[  323.763891][ T8269]  sctp_setsockopt+0x1c4/0x12c0
[  323.763909][ T8269]  ? sock_common_setsockopt+0x36/0xc0
[  323.763930][ T8269]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  323.763946][ T8269]  do_sock_setsockopt+0x17c/0x1b0
[  323.763967][ T8269]  __x64_sys_setsockopt+0x143/0x1b0
[  323.763987][ T8269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.764005][ T8269]  do_syscall_64+0x174/0x580
[  323.764025][ T8269]  ? trace_irq_disable+0x3b/0x140
[  323.764043][ T8269]  ? clear_bhb_loop+0x40/0x90
[  323.764063][ T8269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.764080][ T8269] RIP: 0033:0x7fcb1e40e019
[  323.764095][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.764108][ T8269] RSP: 002b:00007fcb1c645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  323.764125][ T8269] RAX: ffffffffffffffda RBX: 00007fcb1e696090 RCX: 00007fcb1e40e019
[  323.764137][ T8269] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  323.764147][ T8269] RBP: 00007fcb1c645090 R08: 000000000000009c R09: 0000000000000000
[  323.764157][ T8269] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001
[  323.764167][ T8269] R13: 00007fcb1e696128 R14: 00007fcb1e696090 R15: 00007ffe39a7d638
[  323.764190][ T8269]  </TASK>
[  323.777686][  T202] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  323.797826][  T202] usb 3-1: device descriptor read/8, error -71
[  323.910782][  T202] usb usb3-port1: unable to enumerate USB device
[  323.947015][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.947140][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.947365][ T7953] bridge_slave_0: entered allmulticast mode
[  324.002510][ T7953] bridge_slave_0: entered promiscuous mode
[  324.014842][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.015058][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.015259][ T7953] bridge_slave_1: entered allmulticast mode
[  324.046605][ T7953] bridge_slave_1: entered promiscuous mode
[  324.162101][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.258373][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.297811][ T7953] team0: Port device team_slave_0 added
[  324.397182][ T7082] bridge_slave_1: left allmulticast mode
[  324.397216][ T7082] bridge_slave_1: left promiscuous mode
[  324.397532][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.580153][ T7082] bridge_slave_0: left allmulticast mode
[  324.580186][ T7082] bridge_slave_0: left promiscuous mode
[  324.580419][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.727107][ T8288] mmap: syz.3.646 (8288): VmData 37593088 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  324.863834][ T8294] CIFS mount error: No usable UNC path provided in device string!
[  324.863834][ T8294] 
[  324.863991][ T8294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  324.870535][  T202] usb 5-1: USB disconnect, device number 22
[  325.033546][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.649'.
[  326.010282][ T7082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.510065][ T7082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.064784][ T7082] bond0 (unregistering): Released all slaves
[  327.110432][ T7953] team0: Port device team_slave_1 added
[  327.286337][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[  327.431022][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.431033][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  327.431047][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.044608][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.044626][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.044665][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.153439][ T7082] hsr_slave_0: left promiscuous mode
[  329.193575][ T7082] hsr_slave_1: left promiscuous mode
[  329.194556][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.194580][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.242463][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.242492][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.366584][ T5614] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  331.002530][ T5614] usb 5-1: device descriptor read/64, error -71
[  331.089108][ T7082] veth1_macvtap: left promiscuous mode
[  331.089211][ T7082] veth0_macvtap: left promiscuous mode
[  331.089456][ T7082] veth1_vlan: left promiscuous mode
[  331.089633][ T7082] veth0_vlan: left promiscuous mode
[  332.443059][ T7082] team0 (unregistering): Port device team_slave_1 removed
[  332.503428][ T7082] team0 (unregistering): Port device team_slave_0 removed
[  333.020483][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.665'.
[  333.112157][ T7953] hsr_slave_0: entered promiscuous mode
[  333.113392][ T7953] hsr_slave_1: entered promiscuous mode
[  333.361088][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[  334.365576][   T37] audit: type=1326 audit(1785538554.029:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8384 comm="syz.4.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff68609e019 code=0x0
[  335.748582][ T5714] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  335.939075][ T5714] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  335.939105][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.950567][ T5714] usb 4-1: config 0 descriptor??
[  335.962752][ T5714] cp210x 4-1:0.0: cp210x converter detected
[  336.492049][ T8418] netlink: 'syz.3.674': attribute type 83 has an invalid length.
[  336.511337][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'.
[  336.516676][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.618463][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.928192][ T5714] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[  336.928221][ T5714] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  336.986222][ T5714] usb 4-1: cp210x converter now attached to ttyUSB0
[  337.046990][ T5714] usb 4-1: USB disconnect, device number 27
[  337.048132][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  337.113322][ T8431] netlink: 272 bytes leftover after parsing attributes in process `syz.2.677'.
[  337.141887][ T5714] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  337.142632][ T5714] cp210x 4-1:0.0: device disconnected
[  337.167756][   T36] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  337.260801][ T5614] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  337.298838][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7
[  337.321809][   T36] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  337.321837][   T36] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  337.321856][   T36] usb 6-1: Product: syz
[  337.321870][   T36] usb 6-1: Manufacturer: syz
[  337.321883][   T36] usb 6-1: SerialNumber: syz
[  337.363113][   T36] usb 6-1: config 0 descriptor??
[  337.439895][ T5614] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[  337.439925][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.455007][ T5614] usb 5-1: config 0 descriptor??
[  337.481346][ T5614] pwc: Creative Labs Webcam 5 detected.
[  337.898898][ T5614] pwc: send_video_command error -71
[  337.898915][ T5614] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  337.899038][ T5614] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  337.969101][ T5614] usb 5-1: USB disconnect, device number 25
[  338.469413][   T36] usb 6-1: USB disconnect, device number 4
[  338.673801][ T8449] program syz.3.682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.798765][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.128515][   T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  340.696977][   T36] usb 6-1: device descriptor read/64, error -71
[  340.957279][   T36] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  340.996968][ T6069] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  341.116958][   T36] usb 6-1: device descriptor read/64, error -71
[  341.169113][ T6069] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  341.169142][ T6069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.195329][ T6069] usb 3-1: config 0 descriptor??
[  341.230479][   T36] usb usb6-port1: attempt power cycle
[  341.235801][ T6069] cp210x 3-1:0.0: cp210x converter detected
[  343.109647][ T8467] netlink: 'syz.2.689': attribute type 83 has an invalid length.
[  343.380817][ T8495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.381329][ T8495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.414753][ T6069] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121
[  343.414786][ T6069] cp210x 3-1:0.0: GPIO initialisation failed: -121
[  343.458622][ T6069] usb 3-1: cp210x converter now attached to ttyUSB0
[  344.595982][   T36] usb 3-1: USB disconnect, device number 42
[  344.648771][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  344.649509][   T36] cp210x 3-1:0.0: device disconnected
[  345.007117][ T5609] Bluetooth: hci5: command 0x0406 tx timeout
[  345.752746][ T8532] program syz.5.699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  346.046602][ T8536] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  346.066156][ T8536] batman_adv: batadv0: Adding interface: wlan0
[  346.066174][ T8536] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.066207][ T8536] batman_adv: batadv0: Interface activated: wlan0
[  346.523425][ T8544] netlink: 'syz.4.702': attribute type 19 has an invalid length.
[  346.523446][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.702'.
[  348.331300][ T5609] ==================================================================
[  348.331398][ T5609] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[  348.331555][ T5609] Read of size 8 at addr ffffc90006bf9008 by task kworker/u9:3/5609
[  348.331572][ T5609] 
[  348.331617][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  348.331673][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  348.331686][ T5609] Workqueue: hci1 hci_rx_work
[  348.331916][ T5609] Call Trace:
[  348.331967][ T5609]  <TASK>
[  348.332038][ T5609]  dump_stack_lvl+0xe8/0x150
[  348.332207][ T5609]  print_address_description+0x55/0x1e0
[  348.332245][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.332292][ T5609]  print_report+0x58/0x70
[  348.332317][ T5609]  kasan_report+0x117/0x150
[  348.332415][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.332434][ T5609]  __list_del_entry_valid_or_report+0xb5/0x190
[  348.332452][ T5609]  kcov_remote_start+0x295/0x6f0
[  348.332552][ T5609]  hci_rx_work+0x10f/0x1020
[  348.332576][ T5609]  ? process_scheduled_works+0xa20/0x14e0
[  348.332644][ T5609]  process_scheduled_works+0xa8e/0x14e0
[  348.332677][ T5609]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.332703][ T5609]  ? assign_work+0x3cf/0x5d0
[  348.332726][ T5609]  worker_thread+0xa47/0xfb0
[  348.332782][ T5609]  ? __kthread_parkme+0x71/0x1f0
[  348.332811][ T5609]  kthread+0x388/0x470
[  348.332862][ T5609]  ? __pfx_worker_thread+0x10/0x10
[  348.332884][ T5609]  ? __pfx_kthread+0x10/0x10
[  348.332909][ T5609]  ret_from_fork+0x514/0xb70
[  348.333002][ T5609]  ? __pfx_ret_from_fork+0x10/0x10
[  348.333031][ T5609]  ? __switch_to+0xc89/0x1420
[  348.333081][ T5609]  ? __pfx_kthread+0x10/0x10
[  348.333107][ T5609]  ret_from_fork_asm+0x1a/0x30
[  348.333133][ T5609]  </TASK>
[  348.333177][ T5609] 
[  348.333181][ T5609] The buggy address belongs to a vmalloc virtual mapping
[  348.333222][ T5609] Memory state around the buggy address:
[  348.333233][ T5609]  ffffc90006bf8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  348.333246][ T5609]  ffffc90006bf8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  348.333259][ T5609] >ffffc90006bf9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  348.333268][ T5609]                       ^
[  348.333277][ T5609]  ffffc90006bf9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  348.333289][ T5609]  ffffc90006bf9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  348.333298][ T5609] ==================================================================
[  348.333363][ T5609] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  348.333378][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  348.333401][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  348.333413][ T5609] Workqueue: hci1 hci_rx_work
[  348.333433][ T5609] Call Trace:
[  348.333440][ T5609]  <TASK>
[  348.333447][ T5609]  vpanic+0x56c/0xa60
[  348.333467][ T5609]  ? __pfx_vpanic+0x10/0x10
[  348.333484][ T5609]  ? __pfx___schedule+0x10/0x10
[  348.333579][ T5609]  panic+0xc5/0xd0
[  348.333596][ T5609]  ? __pfx_panic+0x10/0x10
[  348.333615][ T5609]  ? preempt_schedule_common+0x82/0xd0
[  348.333640][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.333660][ T5609]  check_panic_on_warn+0x89/0xb0
[  348.333713][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.333741][ T5609]  end_report+0x73/0x170
[  348.333762][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.333781][ T5609]  kasan_report+0x128/0x150
[  348.333803][ T5609]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  348.333826][ T5609]  __list_del_entry_valid_or_report+0xb5/0x190
[  348.333847][ T5609]  kcov_remote_start+0x295/0x6f0
[  348.333876][ T5609]  hci_rx_work+0x10f/0x1020
[  348.333907][ T5609]  ? process_scheduled_works+0xa20/0x14e0
[  348.333936][ T5609]  process_scheduled_works+0xa8e/0x14e0
[  348.333971][ T5609]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.333997][ T5609]  ? assign_work+0x3cf/0x5d0
[  348.334021][ T5609]  worker_thread+0xa47/0xfb0
[  348.334050][ T5609]  ? __kthread_parkme+0x71/0x1f0
[  348.334080][ T5609]  kthread+0x388/0x470
[  348.334107][ T5609]  ? __pfx_worker_thread+0x10/0x10
[  348.334130][ T5609]  ? __pfx_kthread+0x10/0x10
[  348.334158][ T5609]  ret_from_fork+0x514/0xb70
[  348.334187][ T5609]  ? __pfx_ret_from_fork+0x10/0x10
[  348.334214][ T5609]  ? __switch_to+0xc89/0x1420
[  348.334240][ T5609]  ? __pfx_kthread+0x10/0x10
[  348.334269][ T5609]  ret_from_fork_asm+0x1a/0x30
[  348.334295][ T5609]  </TASK>
[  348.334564][ T5609] Kernel Offset: disabled