last executing test programs:

12.216911768s ago: executing program 0 (id=1375):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x1000000000000008, 0x0, 0x3}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x3, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xa, 0xa9}}, {{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xc, 0x3, 0x97}}]}}]}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x400, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000001a00)=0xffffffff)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0)
write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
socket$nl_route(0x10, 0x3, 0x0)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='(`$%', 0x4}], 0x1, &(0x7f0000000500)=ANY=[], 0x1e0}, 0x4000000)

7.433422932s ago: executing program 3 (id=1382):
r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r1 = dup(r0)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x5000000)

7.273186793s ago: executing program 0 (id=1383):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback={0xfec0ffff}, 0x23}, 0x1c)

7.199498916s ago: executing program 3 (id=1384):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002700)={0x24, &(0x7f00000025c0)={0x20, 0xa, 0x6a, {0x6a, 0x2, "d1bfdba871ccf91de223e9cc5c1cab311922e0657a70ca671848ada8f0c1982228b93adddce75e3caf542b4a5acbd5969d682795bf0c2cdcb2c2284e86d258898c67dd218d3c6bae3b157bf24660b734eba0e6a622ea44618679dccbbfe9fcbae39160699317a449"}}, &(0x7f0000002640)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "df1bec4345a45eab0f24e5e2a5c43d80cb01855d796ad12b77fa3bb54e467d0e7f80808836226da5db0fe416cd9ccfab0a78af277b644893ffbb79524aa4e38e121ba76a8887a3e1"}}, &(0x7f0000002400)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "1682e17a"}]}}, &(0x7f00000026c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x327}}}}, &(0x7f0000002900)={0x2c, &(0x7f0000002740)={0x20, 0xc, 0x9, "b76e6b393618d3c751"}, &(0x7f0000002780)={0x0, 0xa, 0x1, 0x39}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002800)={0x20, 0x1, 0x9b, "03987ffa8e4236577559c218390850139672bf60a1b2265f2fffe63636f5660ba79a8219ab706df330431f4ec25bcbb5caacfb995d90c194c40854160a3aa2750de9ad487a79291b9c3e7deeb1db8e1253439ba855795689b0ccb6d7af523d6de329fbefc785ba89988b1084f7a4351c996ec6637725401018ec371200013f52f8292814fee8917d72a0cb8159dce03ea43a83836eb583454e2b60"}, &(0x7f00000028c0)={0x20, 0x3, 0x1, 0x6}})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000000180)={0x2020}, 0x143b)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0)
readv(r9, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x3)

6.757850662s ago: executing program 0 (id=1385):
r0 = socket(0xa, 0x80000, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000003b40)=0x1ff, 0x4) (async, rerun: 32)
close(r0) (async, rerun: 32)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x2000000001, 0x0, 0x3, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
socket$inet6(0xa, 0x3, 0x8000000003c) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async)
r6 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r7) (async)
close(r7) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)

6.541838361s ago: executing program 2 (id=1386):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac7ffffffe01ff05020003000200000000000100000000005839", 0x48}], 0x1)

6.219776283s ago: executing program 0 (id=1387):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x6a040000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x44)
r0 = syz_io_uring_setup(0xbdf, 0x0, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x9eb7, 0x1, 0x1})
io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})

5.974586813s ago: executing program 2 (id=1388):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x9, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x4, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfb9, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}, "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"}}, 0xfc7)

5.16404941s ago: executing program 2 (id=1390):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1})
r1 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x31303453})

4.842068965s ago: executing program 2 (id=1391):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
fchmod(r2, 0x32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1})
connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0)
sendfile(r4, r3, 0x0, 0x8010002b)
sendto$inet6(r3, &(0x7f0000000200)="5a8572f855c4c27765dd3285e944ec23ba84654cc773b5e8c089d115bc8fd3b835fc6e588daf480800889ab7d35120044f716a154daf492e", 0x38, 0xa0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xbe, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000380)={<r6=>0x0, 0x329d, 0x30, 0x3}, &(0x7f00000003c0)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={r6, 0x1000}, 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x1ff, 0xc, 0xfffffffffffffffd, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000)

4.287713177s ago: executing program 4 (id=1393):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fanotify_init(0x1, 0x40000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)
sysfs$2(0x2, 0x2, &(0x7f0000000000)=""/29)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0019402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000088000001800000008ce000000000000000001009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xb5, &(0x7f0000000300)=""/181, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x3, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x5, 0x5, 0x4}, {0x1, 0x1, 0xc}, {0x5, 0x1, 0x9}, {0x0, 0x3, 0xa, 0x9}, {0x3, 0x5, 0xb, 0x7}, {0x5, 0x5, 0x1, 0x9}, {0x0, 0x2, 0x10, 0x8}, {0x3, 0x2, 0x10, 0xa}], 0x10, 0x9b}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8)
fcntl$setlease(r5, 0x400, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

4.021534318s ago: executing program 0 (id=1394):
pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4080)
newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6100)
statx(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2000, 0x1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$P9_RGETATTR(r0, &(0x7f0000000bc0)={0xa0, 0x19, 0x1, {0x0, {0x10, 0x2, 0x4}, 0x17a, r1, r2, 0x10000, 0x5bd429bf, 0x1000, 0xa0, 0x6, 0x7f, 0x7, 0x2, 0x7, 0x1, 0xfd3, 0xf, 0x9, 0x1, 0x10001}}, 0xa0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
r5 = dup(r4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r6=>0x0, 0x6, 0x4e, 0x1, 0x7, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x740, 0x40, 0xfff, 0x4}})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000004c0), 0x10)
sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="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", 0x19f}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca2ef268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f0800000014e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818a17b4ace348ba3a9e496f461dd82c728ef31dbae6661542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090)
sendmsg$nl_route_sched(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000d80)=@newtfilter={0xc0, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {0x3, 0xa}, {0xf, 0xad59fb5d201bfbb3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xe}}, @TCA_FLOW_POLICE={0x48, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe1}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48004}, 0x40000)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
fcntl$lock(r9, 0x24, &(0x7f0000000740)={0x1, 0x0, 0xe6a, 0xa})
r10 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000002840)="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", 0xfc1}, {&(0x7f00000006c0)="55d21480baa93c4216c8e65b93b10b77e16dded87e52d80366d75c78bc1224f1582e816bf57baa8d79066fe518f7c1ff28ea1fadf6662cfae126297bedacbe998a03597940e0c3e0e1f33ba6327fdd9d1105a2be6dd6495d11a2f19afa62e89c329d38e12980237d24c80cb3b7cd34467bdb005c68a1", 0x76}, {&(0x7f0000003840)="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", 0x1000}, {&(0x7f0000000c80)="0ab470cc2c1febcbdadc79c3a10422b3625f7bdc2e36d9465a9d6e767df23ee0d4b99c971e648779e5b9bfbb4691860bdb5b445c0d4c344f51951268deec63b10af8a414dd420f56f6b5c9a05babf91739625ad10b5ee14f0b0ca7aa8b6ea5513187a93e069e376945df11e70959dad2497c8d13b000ba0471bcd8b6cf11dd79c614af68073f31e9d4464576ab37306e7098f13f3618f01fe69a4b67216b374fad1a2b46ad6cc03e4daa739df92054c039c16e6f5acf5a667f93d95c2f848531494d9874b52966", 0xc7}], 0x4, 0xffffffff, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

4.013821368s ago: executing program 1 (id=1395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x800, 0x7)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006})
fcntl$lock(r4, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x5})
fcntl$lock(r4, 0x6, &(0x7f0000000140)={0x0, 0x7, 0x8, 0x9})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket(0x10, 0x800, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xdc}}]}, 0x2c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000007a200000900010073797a300000000009006d030073797a3200000000"], 0x7c}}, 0x6682dad6279e7a13)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7)
r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="01", 0x1, 0x0)
r9 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000000500)={r9, r9, r8}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0)

3.922931612s ago: executing program 3 (id=1396):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800)
recvmmsg(r1, &(0x7f0000001140), 0x74e, 0x0, 0x0) (fail_nth: 3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.223615772s ago: executing program 3 (id=1397):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r3=>0x0})
io_setup(0x5, 0x0)
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (fail_nth: 9)

3.193451363s ago: executing program 4 (id=1398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x10000000}})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000380)="25d7", 0x2, 0x4000041, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

2.719696431s ago: executing program 4 (id=1399):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x80, 0xfffffffffffffff9, 0x5})
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10)

2.515821176s ago: executing program 4 (id=1400):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x9, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x4, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfb9, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}, "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"}}, 0xfc7)

2.379244992s ago: executing program 1 (id=1401):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800)
recvmmsg(r1, &(0x7f0000001140), 0x74e, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.203244242s ago: executing program 0 (id=1402):
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r4, &(0x7f0000001500), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYRES32=r5], 0xa0}}, 0x20044000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b15f8cc00000011ffdbdf256ba3", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080)

2.127739812s ago: executing program 3 (id=1403):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.931033194s ago: executing program 4 (id=1404):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x6a040000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x44)
r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000240)={0x0, 0x6d0c, 0x80, 0xfffffffd, 0x40400331}, 0x0, &(0x7f00000001c0)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x9eb7, 0x1, 0x1})
io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})

1.776917258s ago: executing program 2 (id=1405):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0)
r0 = syz_clone(0xa0000200, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x40004040) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x40004040)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x4c)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff)
r6 = openat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) (async)
r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000000c0), 0x9)
bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc6}, 0x20)

1.339459378s ago: executing program 4 (id=1406):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002700)={0x24, &(0x7f00000025c0)={0x20, 0xa, 0x6a, {0x6a, 0x2, "d1bfdba871ccf91de223e9cc5c1cab311922e0657a70ca671848ada8f0c1982228b93adddce75e3caf542b4a5acbd5969d682795bf0c2cdcb2c2284e86d258898c67dd218d3c6bae3b157bf24660b734eba0e6a622ea44618679dccbbfe9fcbae39160699317a449"}}, &(0x7f0000002640)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "df1bec4345a45eab0f24e5e2a5c43d80cb01855d796ad12b77fa3bb54e467d0e7f80808836226da5db0fe416cd9ccfab0a78af277b644893ffbb79524aa4e38e121ba76a8887a3e1"}}, &(0x7f0000002400)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "1682e17a"}]}}, &(0x7f00000026c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x327}}}}, &(0x7f0000002900)={0x2c, &(0x7f0000002740)={0x20, 0xc, 0x9, "b76e6b393618d3c751"}, &(0x7f0000002780)={0x0, 0xa, 0x1, 0x39}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002800)={0x20, 0x1, 0x9b, "03987ffa8e4236577559c218390850139672bf60a1b2265f2fffe63636f5660ba79a8219ab706df330431f4ec25bcbb5caacfb995d90c194c40854160a3aa2750de9ad487a79291b9c3e7deeb1db8e1253439ba855795689b0ccb6d7af523d6de329fbefc785ba89988b1084f7a4351c996ec6637725401018ec371200013f52f8292814fee8917d72a0cb8159dce03ea43a83836eb583454e2b60"}, &(0x7f00000028c0)={0x20, 0x3, 0x1, 0x6}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0)
readv(r8, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x3)

1.339150513s ago: executing program 1 (id=1407):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="1a6f9f325e43651aba66512fb11276f4a52c2c8229451ca504361f51dcc556214359159912c3a0ad01a1988837", 0x2d}], 0x1}}], 0x2, 0x8008801)
sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="7301c2f98f79a5ad14614636964cd7e094706e5b7294e20f4432b5ef12255f55b38fb7ca7d5b707f87882684b437795a86c3872bcb64330d74c43dfed422ab09ad6d68ed705fd64bb41480c191caabda6e8c5438f1f42ab5d36ce293d9b6df7ff215300b8c8d0310cd4a01f65ed154213749beefd88528b7f98f304c2afbf0a8e390e76fcef61926c3bff191eac0541b321c5bc7c291ca87f7b70dc16a5f602a37702229d7a42f12447d2517d692eae10de9de7062a0494c478a0c6b80c28f10bc3f43533c895b82ebb86c0b16aebcdd646179b892bf3e11c12a4f75f0ad3625ee8881bb0cbfb0ac374aaeb72ecc5dcb5a48", 0xf2}, {&(0x7f00000004c0)="e82593595846e91519104a33666cc07443eb57c7daa22407ce88df7135e2e35ac6f2720840679fafc0840d52aa0d627a5954b519b3ee294dcf733f3622b39dece94cd409470ef2c8d8025e8a2ac72aaae5ed33b56ab10d754a202fba4b0d4275ef35f3dc01eca18b94dcb90a03f9e5a6d965aeb947aada0e466ac379a2efc6ca09a9d9641e3b953bcfdc348aabdfbd69aa9817ddaef29772854058acdd9d42068c4ee5f590a60a4734dd", 0xaa}, {&(0x7f0000000080)="16b3fae3e18d9c6eaa841bdb7bcaba3dd148153f39540c9b1948dda9792c", 0x1e}, {&(0x7f0000000240)="5d3f252af26b731cd5035833c075c3a270afa3606871b27beed73bc5129417821f4eb23822904417ee47074c94c629da84e731e525c01a44b075e9e021cb6ae255db700a1996ce", 0x47}, {&(0x7f0000000400)="22b78e10b11cc4f70bd85ce1c964b5fe4f7ac2cf5cfa08be46c5e6f3c7b3ad331153abbeecc8eb8596fe11c7dd7064fb26ad2773b36c927510cb10bf7c2745b680466b4a0371f26d5e5a49e46e647d96893c94317c449dbc", 0x58}, {&(0x7f0000000780)="55233782ed6375712a785e6c7988e9aae06e36bc006d9c1d52316d6c223b8830618aa3efcdb52962f711d7ab229db80cdc1bacc7b91e8fedc614cb0ea2ddd702fa765238d5f30f4c543468b1a63616968ec9f69e92f92f4ec289f8e31decb6f6cb2e3ff3cf5ad6a4c8ff2454def3dfa541596aeae35980966338930a05059beff3ecb977bd946d0ab1ac242c2a03f69c45438753f062001713854ca8a63174cdd5bf24ea", 0xa4}, {&(0x7f0000000840)="6bf9428fb5f33552c98039723cff39b8ecb6e18851bde2d58c679e65a625e3aa988f317ba078d672fb10ff6ffbcdd203608f9504f6a85569de97af45a4733fe53e7d6dcba9be12c6e156c2d8a252", 0x4e}], 0x7, &(0x7f0000001740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9a}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts={{0x118, 0x29, 0x36, {0x32, 0x1f, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x2, 0x3f, "e3428215331f78cdbefb3710d242dbe49f50818802460efd5845fb06553bc79f5cdefb8f1faeb322ea68822ea90efba2c496cb8609be38422eab8d74f627fe"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5a3}, @generic={0x61, 0xa8, "318404e953b229164329a3e5311b435fcaee0ba9db44f525bd51a3a239ceabe83373ce5305584d538ec4154dd57b63ba2cdf2349158dc8fd578711433da45a6936413440a7d5ab3643365c76959f3159f1086f9caa177a9ba3256805653c5fc6ca79d1b6c3e63658b6222386926c4c1e68aec9145f9e63ae8da68abcc3e7437271c81b37dbd9c5ce3d035dcf98838c73acd23f05cf59566e0f9278707d6bc7d013b38dbf3c81910f"}]}}}, @hopopts={{0x118, 0x29, 0x36, {0x3c, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x6b, [0x564]}}, @pad1, @generic={0x6, 0xd1, "b404e617ddcdb1ac1a504e1afde20dd352fca35911caa5bdd510d0b113677ef2b425daa4cd47f666555c55d053ca7b7fbad2743332cc114cacf5ee9f39fcb5afc0b5ce6d8b9b8df5361645a3da2893a5d69f8422215dc972ecc2d63168f2626a4fc5bc2d0fc4bd8c1ee753071a6a201729c5c0783c26dfa9a83770c4b5fcaebbff76903cacb729ccc0f7a669633f0020e7cb283184aba7fefd6a0fc58f06915b0350a1260a88117abd7351f2868884b43af3b6efbe5f1655db2bee7abbf20eb597eb883c90bbc7e1380bc41d1ee4299581"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0xb4}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x2, 0x4}}}], 0x290}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0xfc}], 0x1}}, {{&(0x7f0000000b80)={0xa, 0x4e23, 0x1b, @empty, 0x5}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="d4f32bc42a98866c3058d2144541aeb3d103d88e4823891f9b8574f68ee402237b3ea8e6cb5801243c660102160ef8b8d45a7dd4ebe8a4a3dde12d8788b1cf469278ce44384153b113ae2151d07fa8f308499fcaeed81826b350119980bb16918127f672e8d96e680108c36f9a18556aac7a503bc193f3e54476ca80495b216dbbca17a89eabea8491e63d247ccff52f8e6c5e2d426135ebc060f3b64adda280f6776758b55cafb84c9694483a9ec4323b2c5092b3fb8f36d8f6b72df90478fe041fbf4b08fdb14401fc5769b0ea4c921d4295e2bf2332cff84441caafe4b7ee6126674cbf", 0xe5}, {&(0x7f0000000cc0)="41b6c22d90c67af021a07df4dbe5cf4c947e5a76cbdcf5bd4b9d37", 0x1b}], 0x2}}, {{&(0x7f0000000d40)={0xa, 0x4e22, 0x1, @mcast1, 0x2}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000d80)="38c6e895c5615e6d8b34c83457ae73a6ec97064dff59f314bfef5dd8954ae6092f598f95ace4e6bab29ad6bd8fb811c43d", 0x31}, {&(0x7f0000000dc0)="a78f9eb0d5f7bfa67286060ec181f2a2fa0c1fa8f6ba1bf7d6f05ed31196f8a3b94b58ea484d5d34201f9e9ad3714a412b741f640b49ade204530c46c8eb1358759605000c1737aa4e79755c6c986115002223910a1bf29fcc9a0ce94977eebf03f39864926cec2567235fd9cfb773c1e343574558ca8212b9081849ecc6c4cd295096613dacfe2d5bcd11f24d1ae7521bdd0266ab3e7e4525511ddcfd697209f172befb4ffdaa0204a28febd8288b08", 0xb0}, {&(0x7f0000000e80)="4f2a8cd6b239254e9c5f9a70b291d129ed44d9e8f2fc1da5c9d9225610c562d27bb7ca260a30308fd45d71c8fd6b9cf5a1cc0d5b8cf08c40b53c107d24f0b4ecf5d6afef47d63598aea8d59075aeaddfffa33b57660b758c05f0017cb03613c0f782e93d0154255809e74fc9162c19a7a51cec48fff9fa6c9c7bf76251a4dd88bfec4b646b2dd8f3f918a85d32e5cf51019192d15fb14ae585150d2455ab26aab4225de8b7534182bffb36873a2d27d674a2a39caeb65e", 0xb7}, {&(0x7f0000000f40)="bc5fc72d6cf4a1270107047bd2d0da290a7907b5c987ce0fd913de3326c3e26194646fb8aee27d9e6128cd238a5b7d517b5d4887069e635962895ce8a5489444561fceb9a9bf558f983848c636debc3b6bdb87978da3ae065885da2a38296d5baba36e64d6d32644ae89d23f8e3be75fbbe27a43955b17bd817a0ac11f92b63ca93177a987deab64f99e2106e0ade03330ec63f33d496a504c7acc3d948135e6c64046cbd909773bb39c515f5d9ca41cf25956034f06bc0809bfb7a45c5791cfcfe58e788a8733dae521a0ae6da05834824561aa98f247ae4a23f9b513", 0xdd}, {&(0x7f0000001040)="16cc8a049b684f6117", 0x9}, {&(0x7f0000001080)="d82dbdcbe44ad680ace2045a3d59504340eed881474dcfcd2ebd9b729e15312dcad9", 0x22}, {&(0x7f00000010c0)="86573cee853528231a6da44b734ba47cd42d92", 0x13}], 0x7, &(0x7f0000001180)}}], 0x4, 0x0)

1.315088786s ago: executing program 2 (id=1408):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000580)={0x0, 0x68f1, 0x0, 0x3, 0x2b0}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x3e80)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

746.256679ms ago: executing program 1 (id=1409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0xfffffff5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0)

404.027137ms ago: executing program 1 (id=1410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)

66.827459ms ago: executing program 1 (id=1411):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

0s ago: executing program 3 (id=1412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae, 0x4000000}}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

0
[  426.838858][T10297]  sctp_getsockopt_reconfig_supported+0xb5/0x520
[  426.838897][T10297]  ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10
[  426.838937][T10297]  sctp_getsockopt+0x58b/0xb60
[  426.838963][T10297]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  426.838988][T10297]  do_sock_getsockopt+0x372/0x450
[  426.839019][T10297]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  426.839046][T10297]  ? write_ibpb+0x30/0x40
[  426.839069][T10297]  ? __fget_files+0x3a0/0x420
[  426.839089][T10297]  ? __fget_files+0x2a/0x420
[  426.839117][T10297]  __x64_sys_getsockopt+0x1a5/0x250
[  426.839144][T10297]  ? write_ibpb+0x30/0x40
[  426.839170][T10297]  ? write_ibpb+0x30/0x40
[  426.839199][T10297]  do_syscall_64+0xfa/0x3b0
[  426.839222][T10297]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.839245][T10297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.839266][T10297]  ? clear_bhb_loop+0x60/0xb0
[  426.839293][T10297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.839314][T10297] RIP: 0033:0x7f122c98eec9
[  426.839333][T10297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.839353][T10297] RSP: 002b:00007f122abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  426.839377][T10297] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98eec9
[  426.839392][T10297] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003
[  426.839405][T10297] RBP: 00007f122abf6090 R08: 0000200000000280 R09: 0000000000000000
[  426.839420][T10297] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  426.839433][T10297] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  426.839468][T10297]  </TASK>
[  427.216466][   T24] usb 2-1: USB disconnect, device number 15
[  427.256705][T10303] FAULT_INJECTION: forcing a failure.
[  427.256705][T10303] name failslab, interval 1, probability 0, space 0, times 0
[  427.362518][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.0.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  427.362550][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  427.362563][T10303] Call Trace:
[  427.362572][T10303]  <TASK>
[  427.362581][T10303]  dump_stack_lvl+0x189/0x250
[  427.362613][T10303]  ? __pfx____ratelimit+0x10/0x10
[  427.362637][T10303]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.362663][T10303]  ? __pfx__printk+0x10/0x10
[  427.362698][T10303]  ? __pfx___might_resched+0x10/0x10
[  427.362725][T10303]  should_fail_ex+0x414/0x560
[  427.362763][T10303]  should_failslab+0xa8/0x100
[  427.362808][T10303]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  427.362840][T10303]  ? __alloc_skb+0x112/0x2d0
[  427.362869][T10303]  __alloc_skb+0x112/0x2d0
[  427.362897][T10303]  netlink_sendmsg+0x5c6/0xb30
[  427.362933][T10303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.362960][T10303]  ? aa_sock_msg_perm+0xf1/0x1d0
[  427.362985][T10303]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  427.363008][T10303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.363033][T10303]  __sock_sendmsg+0x219/0x270
[  427.363070][T10303]  ____sys_sendmsg+0x505/0x830
[  427.363105][T10303]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.363142][T10303]  ? import_iovec+0x74/0xa0
[  427.363175][T10303]  ___sys_sendmsg+0x21f/0x2a0
[  427.363205][T10303]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.363272][T10303]  ? __fget_files+0x2a/0x420
[  427.363290][T10303]  ? __fget_files+0x3a0/0x420
[  427.363321][T10303]  __x64_sys_sendmsg+0x19b/0x260
[  427.363352][T10303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  427.363390][T10303]  ? __pfx_ksys_write+0x10/0x10
[  427.363417][T10303]  ? rcu_is_watching+0x15/0xb0
[  427.363444][T10303]  ? do_syscall_64+0xbe/0x3b0
[  427.363472][T10303]  do_syscall_64+0xfa/0x3b0
[  427.363498][T10303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.363518][T10303]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  427.363538][T10303]  ? clear_bhb_loop+0x60/0xb0
[  427.363565][T10303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.363586][T10303] RIP: 0033:0x7fb31d58eec9
[  427.363605][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.363624][T10303] RSP: 002b:00007fb31e4bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.363647][T10303] RAX: ffffffffffffffda RBX: 00007fb31d7e5fa0 RCX: 00007fb31d58eec9
[  427.363662][T10303] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003
[  427.363676][T10303] RBP: 00007fb31e4bb090 R08: 0000000000000000 R09: 0000000000000000
[  427.363689][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.363701][T10303] R13: 00007fb31d7e6038 R14: 00007fb31d7e5fa0 R15: 00007fb31d90fa28
[  427.363735][T10303]  </TASK>
[  427.753812][T10314] FAULT_INJECTION: forcing a failure.
[  427.753812][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.779472][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT(full) 
[  427.779511][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  427.779526][T10314] Call Trace:
[  427.779535][T10314]  <TASK>
[  427.779544][T10314]  dump_stack_lvl+0x189/0x250
[  427.779576][T10314]  ? __pfx____ratelimit+0x10/0x10
[  427.779600][T10314]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.779626][T10314]  ? __pfx__printk+0x10/0x10
[  427.779657][T10314]  ? __might_fault+0xb0/0x130
[  427.779701][T10314]  should_fail_ex+0x414/0x560
[  427.779739][T10314]  _copy_from_user+0x2d/0xb0
[  427.779770][T10314]  kstrtouint_from_user+0xc4/0x170
[  427.779798][T10314]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  427.779842][T10314]  proc_fail_nth_write+0x88/0x200
[  427.779867][T10314]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  427.779898][T10314]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  427.779925][T10314]  vfs_write+0x27b/0xb30
[  427.779964][T10314]  ? __pfx_vfs_write+0x10/0x10
[  427.779996][T10314]  ? __fget_files+0x2a/0x420
[  427.780019][T10314]  ? __fget_files+0x3a0/0x420
[  427.780037][T10314]  ? __fget_files+0x2a/0x420
[  427.780066][T10314]  ksys_write+0x145/0x250
[  427.780098][T10314]  ? __pfx_ksys_write+0x10/0x10
[  427.780123][T10314]  ? rcu_is_watching+0x15/0xb0
[  427.780152][T10314]  ? do_syscall_64+0xbe/0x3b0
[  427.780181][T10314]  do_syscall_64+0xfa/0x3b0
[  427.780204][T10314]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.780227][T10314]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.780247][T10314]  ? clear_bhb_loop+0x60/0xb0
[  427.780273][T10314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.780294][T10314] RIP: 0033:0x7fe76398d97f
[  427.780314][T10314] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  427.780333][T10314] RSP: 002b:00007fe764872030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  427.780355][T10314] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe76398d97f
[  427.780370][T10314] RDX: 0000000000000001 RSI: 00007fe7648720a0 RDI: 0000000000000006
[  427.780383][T10314] RBP: 00007fe764872090 R08: 0000000000000000 R09: 0000000000000000
[  427.780395][T10314] R10: 0000000000000021 R11: 0000000000000293 R12: 0000000000000001
[  427.780408][T10314] R13: 00007fe763be6218 R14: 00007fe763be6180 R15: 00007fe763d0fa28
[  427.780442][T10314]  </TASK>
[  428.014905][    C1] vkms_vblank_simulate: vblank timer overrun
[  428.132509][T10316] FAULT_INJECTION: forcing a failure.
[  428.132509][T10316] name failslab, interval 1, probability 0, space 0, times 0
[  428.159438][ T5957] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  428.193045][T10316] CPU: 0 UID: 0 PID: 10316 Comm: syz.1.1072 Not tainted syzkaller #0 PREEMPT(full) 
[  428.193076][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  428.193090][T10316] Call Trace:
[  428.193099][T10316]  <TASK>
[  428.193108][T10316]  dump_stack_lvl+0x189/0x250
[  428.193140][T10316]  ? __pfx____ratelimit+0x10/0x10
[  428.193164][T10316]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.193190][T10316]  ? __pfx__printk+0x10/0x10
[  428.193227][T10316]  ? __pfx___might_resched+0x10/0x10
[  428.193254][T10316]  should_fail_ex+0x414/0x560
[  428.193293][T10316]  should_failslab+0xa8/0x100
[  428.193328][T10316]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  428.193360][T10316]  ? __alloc_skb+0x112/0x2d0
[  428.193389][T10316]  __alloc_skb+0x112/0x2d0
[  428.193418][T10316]  netlink_sendmsg+0x5c6/0xb30
[  428.193454][T10316]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.193483][T10316]  ? aa_sock_msg_perm+0xf1/0x1d0
[  428.193518][T10316]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  428.193543][T10316]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.193571][T10316]  __sock_sendmsg+0x219/0x270
[  428.193609][T10316]  ____sys_sendmsg+0x505/0x830
[  428.193644][T10316]  ? __pfx_____sys_sendmsg+0x10/0x10
[  428.193682][T10316]  ? import_iovec+0x74/0xa0
[  428.193716][T10316]  ___sys_sendmsg+0x21f/0x2a0
[  428.193747][T10316]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.193815][T10316]  ? __fget_files+0x2a/0x420
[  428.193834][T10316]  ? __fget_files+0x3a0/0x420
[  428.193866][T10316]  __x64_sys_sendmsg+0x19b/0x260
[  428.193898][T10316]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.193936][T10316]  ? __pfx_ksys_write+0x10/0x10
[  428.193964][T10316]  ? rcu_is_watching+0x15/0xb0
[  428.193992][T10316]  ? do_syscall_64+0xbe/0x3b0
[  428.194021][T10316]  do_syscall_64+0xfa/0x3b0
[  428.194044][T10316]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.194067][T10316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.194088][T10316]  ? clear_bhb_loop+0x60/0xb0
[  428.194115][T10316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.194136][T10316] RIP: 0033:0x7fe76398eec9
[  428.194156][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.194175][T10316] RSP: 002b:00007fe7648b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.194199][T10316] RAX: ffffffffffffffda RBX: 00007fe763be5fa0 RCX: 00007fe76398eec9
[  428.194215][T10316] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004
[  428.194230][T10316] RBP: 00007fe7648b4090 R08: 0000000000000000 R09: 0000000000000000
[  428.194243][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.194256][T10316] R13: 00007fe763be6038 R14: 00007fe763be5fa0 R15: 00007fe763d0fa28
[  428.194291][T10316]  </TASK>
[  428.551278][ T5957] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.593377][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0
[  428.609862][ T5957] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  428.635852][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.666005][ T5957] usb 5-1: config 0 descriptor??
[  429.051824][T10332] vivid-000: disconnect
[  429.095403][ T5957] hid_parser_main: 5 callbacks suppressed
[  429.095426][ T5957] hid-alps 0003:044E:1215.001C: unknown main item tag 0x1
[  429.140842][ T5957] hid-alps 0003:044E:1215.001C: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.4-1/input0
[  429.205850][  T959] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  429.374944][  T959] usb 4-1: Using ep0 maxpacket: 32
[  429.378598][T10321] vivid-000: reconnect
[  429.389393][  T959] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  429.452119][  T959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.524605][  T959] usb 4-1: config 0 descriptor??
[  429.593230][  T959] gspca_main: nw80x-2.14.0 probing 055f:d001
[  429.986016][T10341] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  430.192161][ T5957] IPVS: starting estimator thread 0...
[  430.218884][ T5937] usb 5-1: USB disconnect, device number 32
[  430.325355][T10346] IPVS: using max 26 ests per chain, 62400 per kthread
[  430.756891][T10339] fuse: Unknown parameter 'grou_id'
[  431.065137][  T959] gspca_nw80x: reg_w err -110
[  431.070155][  T959] nw80x 4-1:0.0: probe with driver nw80x failed with error -110
[  431.576639][  T959] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  431.705220][ T5951] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  431.765405][  T959] usb 2-1: Using ep0 maxpacket: 16
[  431.796098][  T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.814793][  T959] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  431.844446][  T959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.864198][  T959] usb 2-1: config 0 descriptor??
[  431.886977][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  431.904750][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  431.930033][ T5951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  431.939800][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.959917][ T5951] usb 1-1: Product: syz
[  431.964179][ T5951] usb 1-1: Manufacturer: syz
[  431.977358][ T5951] usb 1-1: SerialNumber: syz
[  431.995629][T10369] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  432.086017][  T919] usb 4-1: USB disconnect, device number 32
[  432.124868][T10378] vivid-000: disconnect
[  432.309529][  T959] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  432.766394][  T959] usb 2-1: USB disconnect, device number 16
[  432.791800][T10374] vivid-000: reconnect
[  433.191144][ T5951] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  433.229802][ T5951] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048
[  433.384743][ T5951] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  433.403909][ T5951] cdc_ncm 1-1:1.0: setting tx_max = 48
[  433.687487][T10396] Invalid logical block size (1048576)
[  433.834912][ T5951] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  433.855030][ T5957] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  433.925108][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  434.055424][ T5951] usb 1-1: USB disconnect, device number 16
[  434.135462][ T5951] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  434.154957][   T24] usb 5-1: device descriptor read/64, error -71
[  434.176768][ T5957] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  434.187914][ T5957] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config
[  434.258625][ T5957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  434.284841][  T919] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  434.301876][ T5957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 56, changing to 9
[  434.327596][ T5957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8703, setting to 1024
[  434.347810][ T5957] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  434.360592][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  434.382586][ T5957] usb 2-1: Product: syz
[  434.394405][ T5957] usb 2-1: Manufacturer: syz
[  434.399418][   T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  434.431892][ T5957] cdc_wdm 2-1:1.0: skipping garbage
[  434.438617][ T5957] cdc_wdm 2-1:1.0: skipping garbage
[  434.448376][  T919] usb 3-1: Using ep0 maxpacket: 16
[  434.465702][ T5957] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  434.472266][ T5957] cdc_wdm 2-1:1.0: Unknown control protocol
[  434.480317][  T919] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  434.489245][  T919] usb 3-1: config 0 has no interface number 0
[  434.496197][  T919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  434.519972][  T919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  434.543884][  T919] usb 3-1: config 0 interface 41 has no altsetting 0
[  434.551334][   T24] usb 5-1: device descriptor read/64, error -71
[  434.571032][  T919] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  434.580850][  T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.594818][  T919] usb 3-1: Product: syz
[  434.599124][  T919] usb 3-1: Manufacturer: syz
[  434.613106][  T919] usb 3-1: SerialNumber: syz
[  434.634986][  T919] usb 3-1: config 0 descriptor??
[  434.653979][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  434.662349][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  434.670663][   T24] usb usb5-port1: attempt power cycle
[  434.676523][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  434.877502][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.889698][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.904339][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  434.913588][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  435.019399][T10407] netlink: 'syz.0.1100': attribute type 10 has an invalid length.
[  435.038519][T10407] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.049715][T10407] team0: Port device bond0 added
[  435.081306][   T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  435.115712][   T24] usb 5-1: device descriptor read/8, error -71
[  435.175854][T10395] syzkaller0: entered promiscuous mode
[  435.181410][T10395] syzkaller0: entered allmulticast mode
[  435.354978][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  435.377728][   T24] usb 5-1: device descriptor read/8, error -71
[  435.501390][T10413] fuse: Unknown parameter 'root'
[  435.507706][   T24] usb usb5-port1: unable to enumerate USB device
[  435.590167][  T919] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID
[  435.630046][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  435.640929][T10398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  436.375828][  T919] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  436.428619][T10418] netlink: 'syz.4.1102': attribute type 3 has an invalid length.
[  436.438523][  T919] usb 3-1: USB disconnect, device number 23
[  436.451686][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'.
[  436.801060][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1103'.
[  438.005846][T10425] FAULT_INJECTION: forcing a failure.
[  438.005846][T10425] name failslab, interval 1, probability 0, space 0, times 0
[  438.019968][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.2.1105 Not tainted syzkaller #0 PREEMPT(full) 
[  438.019997][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  438.020011][T10425] Call Trace:
[  438.020020][T10425]  <TASK>
[  438.020030][T10425]  dump_stack_lvl+0x189/0x250
[  438.020061][T10425]  ? __pfx____ratelimit+0x10/0x10
[  438.020085][T10425]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.020110][T10425]  ? __pfx__printk+0x10/0x10
[  438.020137][T10425]  ? percpu_ref_get_many+0x19/0x140
[  438.020177][T10425]  ? look_up_lock_class+0x74/0x170
[  438.020208][T10425]  should_fail_ex+0x414/0x560
[  438.020246][T10425]  should_failslab+0xa8/0x100
[  438.020279][T10425]  __kmalloc_noprof+0xcb/0x4f0
[  438.020310][T10425]  ? io_alloc_ocqe+0x6f/0x550
[  438.020336][T10425]  io_alloc_ocqe+0x6f/0x550
[  438.020354][T10425]  ? io_cqe_cache_refill+0x1a8/0x240
[  438.020391][T10425]  io_cqe_overflow_locked+0x26/0x40
[  438.020419][T10425]  __io_submit_flush_completions+0x248/0xe40
[  438.020468][T10425]  io_submit_sqes+0x18ee/0x1d30
[  438.020537][T10425]  __se_sys_io_uring_enter+0x2df/0x2b20
[  438.020592][T10425]  ? ksys_write+0x1cb/0x250
[  438.020625][T10425]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  438.020655][T10425]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  438.020681][T10425]  ? __pfx_vfs_write+0x10/0x10
[  438.020723][T10425]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  438.020759][T10425]  ? __fget_files+0x3a0/0x420
[  438.020786][T10425]  ? fput+0xa0/0xd0
[  438.020809][T10425]  ? ksys_write+0x22a/0x250
[  438.020840][T10425]  ? __pfx_ksys_write+0x10/0x10
[  438.020876][T10425]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  438.020913][T10425]  do_syscall_64+0xfa/0x3b0
[  438.020937][T10425]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.020959][T10425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.020980][T10425]  ? clear_bhb_loop+0x60/0xb0
[  438.021006][T10425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.021028][T10425] RIP: 0033:0x7fdc31b8eec9
[  438.021048][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.021066][T10425] RSP: 002b:00007fdc32a2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  438.021089][T10425] RAX: ffffffffffffffda RBX: 00007fdc31de5fa0 RCX: 00007fdc31b8eec9
[  438.021105][T10425] RDX: 00000000fffffffd RSI: 0000000000002d3e RDI: 0000000000000003
[  438.021118][T10425] RBP: 00007fdc32a2f090 R08: 0000000000000000 R09: 0000000000000000
[  438.021131][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.021144][T10425] R13: 00007fdc31de6038 R14: 00007fdc31de5fa0 R15: 00007fdc31f0fa28
[  438.021180][T10425]  </TASK>
[  438.282643][    C0] vkms_vblank_simulate: vblank timer overrun
[  438.832057][T10433] vivid-000: disconnect
[  439.944346][T10426] vivid-000: reconnect
[  440.935592][T10442] FAULT_INJECTION: forcing a failure.
[  440.935592][T10442] name failslab, interval 1, probability 0, space 0, times 0
[  440.992276][T10442] CPU: 0 UID: 0 PID: 10442 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) 
[  440.992307][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  440.992321][T10442] Call Trace:
[  440.992333][T10442]  <TASK>
[  440.992343][T10442]  dump_stack_lvl+0x189/0x250
[  440.992375][T10442]  ? __pfx____ratelimit+0x10/0x10
[  440.992399][T10442]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.992425][T10442]  ? __pfx__printk+0x10/0x10
[  440.992462][T10442]  ? __pfx___might_resched+0x10/0x10
[  440.992488][T10442]  should_fail_ex+0x414/0x560
[  440.992527][T10442]  should_failslab+0xa8/0x100
[  440.992563][T10442]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  440.992594][T10442]  ? __alloc_skb+0x112/0x2d0
[  440.992623][T10442]  __alloc_skb+0x112/0x2d0
[  440.992653][T10442]  netlink_sendmsg+0x5c6/0xb30
[  440.992689][T10442]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.992717][T10442]  ? aa_sock_msg_perm+0xf1/0x1d0
[  440.992741][T10442]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  440.992772][T10442]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.992797][T10442]  __sock_sendmsg+0x219/0x270
[  440.992835][T10442]  ____sys_sendmsg+0x505/0x830
[  440.992874][T10442]  ? __pfx_____sys_sendmsg+0x10/0x10
[  440.992912][T10442]  ? import_iovec+0x74/0xa0
[  440.992945][T10442]  ___sys_sendmsg+0x21f/0x2a0
[  440.992977][T10442]  ? __pfx____sys_sendmsg+0x10/0x10
[  440.993051][T10442]  ? __fget_files+0x2a/0x420
[  440.993069][T10442]  ? __fget_files+0x3a0/0x420
[  440.993100][T10442]  __x64_sys_sendmsg+0x19b/0x260
[  440.993132][T10442]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  440.993171][T10442]  ? __pfx_ksys_write+0x10/0x10
[  440.993206][T10442]  ? do_syscall_64+0xbe/0x3b0
[  440.993235][T10442]  do_syscall_64+0xfa/0x3b0
[  440.993260][T10442]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.993282][T10442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.993303][T10442]  ? clear_bhb_loop+0x60/0xb0
[  440.993329][T10442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.993349][T10442] RIP: 0033:0x7f122c98eec9
[  440.993369][T10442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.993388][T10442] RSP: 002b:00007f122abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.993411][T10442] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98eec9
[  440.993427][T10442] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003
[  440.993440][T10442] RBP: 00007f122abf6090 R08: 0000000000000000 R09: 0000000000000000
[  440.993471][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.993484][T10442] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  440.993517][T10442]  </TASK>
[  441.255801][    C0] vkms_vblank_simulate: vblank timer overrun
[  442.457660][ T5951] usb 2-1: USB disconnect, device number 17
[  442.728828][T10455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  443.194840][ T5951] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  443.354755][ T5951] usb 2-1: Using ep0 maxpacket: 16
[  443.357403][ T5951] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.357441][ T5951] usb 2-1: config 0 interface 0 has no altsetting 0
[  443.357480][ T5951] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  443.357507][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.363406][ T5951] usb 2-1: config 0 descriptor??
[  443.372754][T10471] binder: 10454:10471 ioctl c0306201 200000000080 returned -14
[  443.520201][T10464] binder: 10456:10464 ioctl c0306201 200000000080 returned -14
[  444.270935][ T5951] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  444.406783][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.439086][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.705534][T10453] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1115'.
[  444.733921][ T5951] usb 2-1: USB disconnect, device number 18
[  444.753055][T10487] fido_id[10487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  445.144770][  T959] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  445.338619][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  445.345793][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  445.364808][  T959] usb 4-1: Using ep0 maxpacket: 32
[  445.372000][  T959] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  445.380759][  T959] usb 4-1: config 0 has no interface number 0
[  445.400767][  T959] usb 4-1: config 0 interface 12 has no altsetting 0
[  445.427550][  T959] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  445.446899][  T959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.491832][T10491] loop2: detected capacity change from 0 to 7
[  445.507924][T10491] Dev loop2: unable to read RDB block 7
[  445.517670][  T959] usb 4-1: Product: syz
[  445.534730][  T959] usb 4-1: Manufacturer: syz
[  445.539378][  T959] usb 4-1: SerialNumber: syz
[  445.554318][T10491]  loop2: AHDI p2 p3
[  445.562826][T10491] loop2: partition table partially beyond EOD, truncated
[  445.589759][T10491] loop2: p3 start 335544320 is beyond EOD, truncated
[  445.603368][  T959] usb 4-1: config 0 descriptor??
[  445.822434][T10496] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  445.866545][  T919] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  445.990606][   T30] audit: type=1326 audit(1759157710.418:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  446.080333][  T919] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  446.092319][   T30] audit: type=1326 audit(1759157710.448:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  446.117865][T10502] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  446.135869][  T919] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  446.216477][  T919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.242786][  T919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  446.259989][  T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.265566][   T30] audit: type=1326 audit(1759157710.448:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  446.291672][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.300683][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.336194][  T959] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  446.362795][  T959] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  446.374301][  T919] usb 2-1: Product: syz
[  446.379803][  T959] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  446.401119][  T919] usb 2-1: Manufacturer: syz
[  446.401126][   T30] audit: type=1326 audit(1759157710.488:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  446.404495][  T959] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  446.581470][  T919] usb 2-1: SerialNumber: syz
[  446.594767][  T959] usb 4-1: USB disconnect, device number 33
[  446.916037][  T919] usb 2-1: 0:2 : does not exist
[  447.081856][  T919] usb 2-1: USB disconnect, device number 19
[  447.243987][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.445482][T10518] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  447.492913][  T959] IPVS: starting estimator thread 0...
[  447.616957][T10519] IPVS: using max 23 ests per chain, 55200 per kthread
[  447.861732][T10534] batman_adv: batadv0: Adding interface: dummy0
[  447.894150][T10534] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.919477][    C1] vkms_vblank_simulate: vblank timer overrun
[  447.994576][T10534] batman_adv: batadv0: Interface activated: dummy0
[  448.055703][  T959] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  448.225722][  T959] usb 5-1: Using ep0 maxpacket: 32
[  448.232704][  T959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.245412][  T959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.266586][  T959] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  448.288470][  T959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.318335][  T959] usb 5-1: config 0 descriptor??
[  448.768663][   T30] audit: type=1326 audit(1759157713.198:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7fc00000
[  448.837011][  T959] smartjoyplus 0003:0925:8866.001F: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0
[  448.837048][  T959] smartjoyplus 0003:0925:8866.001F: Force feedback for SmartJoy PLUS PS2/USB adapter
[  448.975862][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.976177][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.037496][T10532] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  449.060351][T10553] binder: 10545:10553 ioctl c0306201 200000000080 returned -14
[  449.367325][  T919] usb 5-1: USB disconnect, device number 37
[  449.549356][   T30] audit: type=1326 audit(1759157713.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb31d52af79 code=0x7fc00000
[  449.649256][   T30] audit: type=1326 audit(1759157713.968:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb31d52b03f code=0x7fc00000
[  449.754389][   T30] audit: type=1326 audit(1759157713.968:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb31d58eec9 code=0x7fc00000
[  450.611796][T10567] loop2: detected capacity change from 0 to 7
[  450.648693][T10567] Dev loop2: unable to read RDB block 7
[  450.704033][T10567]  loop2: AHDI p2 p3
[  450.725337][T10567] loop2: partition table partially beyond EOD, truncated
[  450.739477][T10567] loop2: p3 start 335544320 is beyond EOD, truncated
[  450.994345][ T5236] Dev loop2: unable to read RDB block 7
[  450.994960][  T919] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  451.039986][ T5236]  loop2: AHDI p2 p3
[  451.056413][ T5236] loop2: partition table partially beyond EOD, truncated
[  451.085126][ T5236] loop2: p3 start 335544320 is beyond EOD, truncated
[  451.208004][  T919] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  451.232621][  T919] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  451.335285][  T919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  451.423286][  T919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  451.464057][  T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.486066][  T919] usb 4-1: Product: syz
[  451.530912][T10591] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1147'.
[  451.579356][  T919] usb 4-1: Manufacturer: syz
[  451.585818][T10590] xt_bpf: check failed: parse error
[  451.620105][  T919] usb 4-1: SerialNumber: syz
[  451.888621][  T919] usb 4-1: 0:2 : does not exist
[  452.108262][  T919] usb 4-1: USB disconnect, device number 34
[  452.286050][T10605] openvswitch: netlink: Message has 8 unknown bytes.
[  452.353471][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.483444][T10609] FAULT_INJECTION: forcing a failure.
[  452.483444][T10609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.546995][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.1.1152 Not tainted syzkaller #0 PREEMPT(full) 
[  452.547028][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  452.547042][T10609] Call Trace:
[  452.547050][T10609]  <TASK>
[  452.547060][T10609]  dump_stack_lvl+0x189/0x250
[  452.547092][T10609]  ? __pfx____ratelimit+0x10/0x10
[  452.547115][T10609]  ? __pfx_dump_stack_lvl+0x10/0x10
[  452.547136][T10609]  ? __pfx__printk+0x10/0x10
[  452.547162][T10609]  ? __might_fault+0xb0/0x130
[  452.547196][T10609]  should_fail_ex+0x414/0x560
[  452.547228][T10609]  _copy_from_iter+0x1de/0x1790
[  452.547255][T10609]  ? rcu_is_watching+0x15/0xb0
[  452.547274][T10609]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  452.547300][T10609]  ? __pfx__copy_from_iter+0x10/0x10
[  452.547323][T10609]  ? __build_skb_around+0x257/0x3e0
[  452.547346][T10609]  ? netlink_sendmsg+0x642/0xb30
[  452.547364][T10609]  ? skb_put+0x11b/0x210
[  452.547387][T10609]  netlink_sendmsg+0x6b2/0xb30
[  452.547414][T10609]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.547437][T10609]  ? aa_sock_msg_perm+0xf1/0x1d0
[  452.547456][T10609]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.547475][T10609]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.547495][T10609]  __sock_sendmsg+0x219/0x270
[  452.547525][T10609]  ____sys_sendmsg+0x505/0x830
[  452.547552][T10609]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.547583][T10609]  ? import_iovec+0x74/0xa0
[  452.547608][T10609]  ___sys_sendmsg+0x21f/0x2a0
[  452.547701][T10609]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.547753][T10609]  ? __fget_files+0x2a/0x420
[  452.547775][T10609]  ? __fget_files+0x3a0/0x420
[  452.547798][T10609]  __x64_sys_sendmsg+0x19b/0x260
[  452.547824][T10609]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  452.547854][T10609]  ? __pfx_ksys_write+0x10/0x10
[  452.547877][T10609]  ? rcu_is_watching+0x15/0xb0
[  452.547900][T10609]  ? do_syscall_64+0xbe/0x3b0
[  452.547923][T10609]  do_syscall_64+0xfa/0x3b0
[  452.547942][T10609]  ? lockdep_hardirqs_on+0x9c/0x150
[  452.547960][T10609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.547977][T10609]  ? clear_bhb_loop+0x60/0xb0
[  452.548003][T10609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.548020][T10609] RIP: 0033:0x7fe76398eec9
[  452.548036][T10609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.548051][T10609] RSP: 002b:00007fe764872038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.548069][T10609] RAX: ffffffffffffffda RBX: 00007fe763be6180 RCX: 00007fe76398eec9
[  452.548082][T10609] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b
[  452.548093][T10609] RBP: 00007fe764872090 R08: 0000000000000000 R09: 0000000000000000
[  452.548104][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.548114][T10609] R13: 00007fe763be6218 R14: 00007fe763be6180 R15: 00007fe763d0fa28
[  452.548139][T10609]  </TASK>
[  453.068782][T10613] syzkaller1: entered promiscuous mode
[  453.074359][T10613] syzkaller1: entered allmulticast mode
[  453.116255][T10615] netlink: 'syz.3.1154': attribute type 21 has an invalid length.
[  453.165289][T10615] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1154'.
[  453.219823][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1155'.
[  453.225273][T10618] netlink: 'syz.3.1154': attribute type 21 has an invalid length.
[  453.336511][T10618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1154'.
[  453.724759][  T919] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  453.916916][  T919] usb 1-1: unable to get BOS descriptor or descriptor too short
[  454.035738][  T919] usb 1-1: config 6 has an invalid interface number: 144 but max is 0
[  454.074777][  T919] usb 1-1: config 6 has no interface number 0
[  454.115003][  T919] usb 1-1: config 6 interface 144 altsetting 1 endpoint 0x3 has an invalid bInterval 113, changing to 10
[  454.188920][  T919] usb 1-1: config 6 interface 144 has no altsetting 0
[  454.240469][  T919] usb 1-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2
[  454.290698][  T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.324824][  T919] usb 1-1: Product: syz
[  454.329076][  T919] usb 1-1: Manufacturer: syz
[  454.344727][  T919] usb 1-1: SerialNumber: syz
[  454.650495][  T919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  454.657710][  T919] usb 1-1: MIDIStreaming interface descriptor not found
[  454.899961][T10639] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  454.928460][  T919] usb 1-1: USB disconnect, device number 17
[  455.078245][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.144/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  455.475332][T10648] FAULT_INJECTION: forcing a failure.
[  455.475332][T10648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.522921][T10647] syzkaller1: entered promiscuous mode
[  455.533095][T10647] syzkaller1: entered allmulticast mode
[  455.544918][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.4.1164 Not tainted syzkaller #0 PREEMPT(full) 
[  455.544949][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  455.544963][T10648] Call Trace:
[  455.544971][T10648]  <TASK>
[  455.544981][T10648]  dump_stack_lvl+0x189/0x250
[  455.545012][T10648]  ? __pfx____ratelimit+0x10/0x10
[  455.545035][T10648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.545061][T10648]  ? __pfx__printk+0x10/0x10
[  455.545091][T10648]  ? __might_fault+0xb0/0x130
[  455.545134][T10648]  should_fail_ex+0x414/0x560
[  455.545172][T10648]  _copy_from_user+0x2d/0xb0
[  455.545202][T10648]  kstrtouint_from_user+0xc4/0x170
[  455.545230][T10648]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  455.545268][T10648]  proc_fail_nth_write+0x88/0x200
[  455.545290][T10648]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  455.545316][T10648]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  455.545354][T10648]  vfs_write+0x27b/0xb30
[  455.545388][T10648]  ? __pfx_vfs_write+0x10/0x10
[  455.545419][T10648]  ? __fget_files+0x2a/0x420
[  455.545443][T10648]  ? __fget_files+0x3a0/0x420
[  455.545461][T10648]  ? __fget_files+0x2a/0x420
[  455.545490][T10648]  ksys_write+0x145/0x250
[  455.545521][T10648]  ? __pfx_ksys_write+0x10/0x10
[  455.545548][T10648]  ? rcu_is_watching+0x15/0xb0
[  455.545573][T10648]  ? do_syscall_64+0xbe/0x3b0
[  455.545602][T10648]  do_syscall_64+0xfa/0x3b0
[  455.545625][T10648]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.545647][T10648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.545668][T10648]  ? clear_bhb_loop+0x60/0xb0
[  455.545694][T10648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.545714][T10648] RIP: 0033:0x7f77e9b8d97f
[  455.545733][T10648] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  455.545751][T10648] RSP: 002b:00007f77eaa8c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  455.545772][T10648] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77e9b8d97f
[  455.545784][T10648] RDX: 0000000000000001 RSI: 00007f77eaa8c0a0 RDI: 0000000000000006
[  455.545794][T10648] RBP: 00007f77eaa8c090 R08: 0000000000000000 R09: 0000000000000000
[  455.545804][T10648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  455.545813][T10648] R13: 00007f77e9de6128 R14: 00007f77e9de6090 R15: 00007f77e9f0fa28
[  455.545839][T10648]  </TASK>
[  455.792275][T10649] FAULT_INJECTION: forcing a failure.
[  455.792275][T10649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.805666][T10649] CPU: 1 UID: 0 PID: 10649 Comm: syz.0.1165 Not tainted syzkaller #0 PREEMPT(full) 
[  455.805708][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  455.805731][T10649] Call Trace:
[  455.805739][T10649]  <TASK>
[  455.805748][T10649]  dump_stack_lvl+0x189/0x250
[  455.805778][T10649]  ? __pfx____ratelimit+0x10/0x10
[  455.805803][T10649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.805828][T10649]  ? __pfx__printk+0x10/0x10
[  455.805859][T10649]  ? __might_fault+0xb0/0x130
[  455.805902][T10649]  should_fail_ex+0x414/0x560
[  455.805939][T10649]  _copy_from_iter+0x1de/0x1790
[  455.805972][T10649]  ? __lock_acquire+0xab9/0xd20
[  455.806010][T10649]  ? __pfx__copy_from_iter+0x10/0x10
[  455.806052][T10649]  tun_get_user+0x219/0x3ea0
[  455.806101][T10649]  ? aa_file_perm+0x44d/0x1550
[  455.806124][T10649]  ? __pfx_tun_get_user+0x10/0x10
[  455.806149][T10649]  ? _parse_integer_limit+0x1ae/0x1f0
[  455.806181][T10649]  ? __lock_acquire+0xab9/0xd20
[  455.806218][T10649]  ? ref_tracker_alloc+0x318/0x460
[  455.806237][T10649]  ? __lock_acquire+0xab9/0xd20
[  455.806270][T10649]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  455.806302][T10649]  ? tun_get+0x1c/0x2f0
[  455.806333][T10649]  ? tun_get+0x1c/0x2f0
[  455.806357][T10649]  ? tun_get+0x1c/0x2f0
[  455.806386][T10649]  tun_chr_write_iter+0x113/0x200
[  455.806414][T10649]  vfs_write+0x5c6/0xb30
[  455.806449][T10649]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  455.806474][T10649]  ? __pfx_vfs_write+0x10/0x10
[  455.806515][T10649]  ? __fget_files+0x2a/0x420
[  455.806544][T10649]  ksys_write+0x145/0x250
[  455.806575][T10649]  ? __pfx_ksys_write+0x10/0x10
[  455.806617][T10649]  ? do_syscall_64+0xbe/0x3b0
[  455.806646][T10649]  do_syscall_64+0xfa/0x3b0
[  455.806668][T10649]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.806691][T10649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.806712][T10649]  ? clear_bhb_loop+0x60/0xb0
[  455.806737][T10649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.806758][T10649] RIP: 0033:0x7fb31d58eec9
[  455.806777][T10649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.806795][T10649] RSP: 002b:00007fb31e49a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  455.806817][T10649] RAX: ffffffffffffffda RBX: 00007fb31d7e6090 RCX: 00007fb31d58eec9
[  455.806833][T10649] RDX: 0000000000000fce RSI: 0000200000000ec0 RDI: 0000000000000004
[  455.806846][T10649] RBP: 00007fb31e49a090 R08: 0000000000000000 R09: 0000000000000000
[  455.806859][T10649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.806871][T10649] R13: 00007fb31d7e6128 R14: 00007fb31d7e6090 R15: 00007fb31d90fa28
[  455.806905][T10649]  </TASK>
[  456.124909][ T5937] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  456.303737][T10626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  456.385406][T10653] syzkaller1: entered promiscuous mode
[  456.390960][T10653] syzkaller1: entered allmulticast mode
[  456.443662][ T5937] usb 3-1: Using ep0 maxpacket: 8
[  456.459990][ T5937] usb 3-1: config 0 has an invalid interface number: 155 but max is 1
[  456.478668][ T5937] usb 3-1: config 0 has an invalid interface number: 245 but max is 1
[  456.494635][ T5937] usb 3-1: config 0 has no interface number 0
[  456.501992][ T5937] usb 3-1: config 0 has no interface number 1
[  456.513824][ T5937] usb 3-1: config 0 interface 155 has no altsetting 0
[  456.520801][ T5937] usb 3-1: config 0 interface 245 has no altsetting 0
[  456.528017][ T5937] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6
[  456.537620][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.561175][ T5937] usb 3-1: config 0 descriptor??
[  456.616752][  T959] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  456.777142][  T959] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  456.821661][  T959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  456.824901][ T5957] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  456.848806][  T959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  456.949997][  T959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.054987][  T959] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.076494][  T959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.087906][  T959] usb 5-1: config 0 descriptor??
[  457.135544][ T5957] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  457.159933][ T5957] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  457.182679][ T5957] usb 1-1: Product: syz
[  457.234717][ T5957] usb 1-1: Manufacturer: syz
[  457.256701][ T5957] usb 1-1: SerialNumber: syz
[  457.315384][ T5957] usb 1-1: config 0 descriptor??
[  457.330508][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  457.367324][ T5957] ch341 1-1:0.0: ch341-uart converter detected
[  457.385348][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  457.595004][ T5868] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  457.673983][  T959] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  457.750799][ T5868] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  457.804166][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.854248][ T5868] usb 2-1: config 0 descriptor??
[  458.380646][ T5957] ch341-uart ttyUSB0: failed to read break control: -71
[  458.390314][ T5957] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  458.420628][ T5957] usb 1-1: USB disconnect, device number 18
[  458.457349][ T5957] ch341 1-1:0.0: device disconnected
[  458.611474][ T5937] usb 3-1: string descriptor 0 read error: -71
[  458.674243][ T5937] usb 3-1: USB disconnect, device number 24
[  459.108221][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.119211][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.174256][ T1162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.200827][ T1162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.217119][ T5868] usb 2-1: Cannot set autoneg
[  459.222529][ T5868] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  459.236985][ T1162] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.261125][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.304315][ T5868] usb 2-1: USB disconnect, device number 20
[  459.448032][T10697] syzkaller1: entered promiscuous mode
[  459.453864][T10697] syzkaller1: entered allmulticast mode
[  459.484820][ T5957] usb 5-1: reset high-speed USB device number 38 using dummy_hcd
[  459.937345][T10706] input: syz1 as /devices/virtual/input/input19
[  460.326552][T10711] IPVS: dh: FWM 3 0x00000003 - no destination available
[  460.437675][ T5929] usb 5-1: USB disconnect, device number 38
[  461.435867][T10730] random: crng reseeded on system resumption
[  461.464807][  T959] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  461.625456][  T959] usb 2-1: Using ep0 maxpacket: 16
[  461.643043][  T959] usb 2-1: config 4 has an invalid interface number: 51 but max is 0
[  461.667914][  T959] usb 2-1: config 4 has no interface number 0
[  461.706605][  T959] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  461.745326][  T959] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  461.778996][  T959] usb 2-1: config 4 interface 51 has no altsetting 0
[  461.809499][  T959] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  461.846027][  T959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.871990][  T959] usb 2-1: Product: syz
[  461.880571][  T959] usb 2-1: Manufacturer: syz
[  461.902308][  T959] usb 2-1: SerialNumber: syz
[  461.953735][T10728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  461.983056][T10742] syzkaller1: entered promiscuous mode
[  462.001803][T10742] syzkaller1: entered allmulticast mode
[  462.001853][T10728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  462.288455][T10728] netlink: 'syz.1.1186': attribute type 3 has an invalid length.
[  462.317596][T10728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  462.348345][T10728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  462.444771][ T5937] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  462.468337][  T959] cdc_eem 2-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.1-1, CDC EEM Device, f6:8d:1b:e2:75:a0
[  462.625449][  T959] usb 2-1: USB disconnect, device number 21
[  462.643789][  T959] cdc_eem 2-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.1-1, CDC EEM Device
[  462.654212][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  462.692542][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  462.738239][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  462.756693][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  462.923034][ T5937] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  462.945227][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.980480][   T30] audit: type=1326 audit(1759157727.408:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  463.002771][    C0] vkms_vblank_simulate: vblank timer overrun
[  463.013271][ T5937] usb 3-1: config 0 descriptor??
[  463.101586][   T30] audit: type=1326 audit(1759157727.458:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  463.144460][   T30] audit: type=1326 audit(1759157727.558:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77e9b8d710 code=0x7ffc0000
[  463.166967][    C0] vkms_vblank_simulate: vblank timer overrun
[  463.277581][   T30] audit: type=1326 audit(1759157727.558:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  463.299871][    C0] vkms_vblank_simulate: vblank timer overrun
[  463.315033][ T5929] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  463.479884][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  463.520279][   T30] audit: type=1326 audit(1759157727.558:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  463.520420][ T5929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  463.520482][   T30] audit: type=1326 audit(1759157727.558:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77e9b8d710 code=0x7ffc0000
[  463.615304][ T5929] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  463.666943][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.781355][ T5929] usb 4-1: config 0 descriptor??
[  463.877621][ T5937] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  464.034783][   T30] audit: type=1326 audit(1759157727.558:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  464.147292][   T30] audit: type=1326 audit(1759157727.558:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  464.169847][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.427840][   T30] audit: type=1326 audit(1759157727.558:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  464.450172][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.648111][   T30] audit: type=1326 audit(1759157727.558:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  465.344075][T10795] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  465.494841][ T5937] usb 3-1: reset high-speed USB device number 25 using dummy_hcd
[  466.301697][T10809] syzkaller1: entered promiscuous mode
[  466.337999][T10809] syzkaller1: entered allmulticast mode
[  466.619667][ T5937] usb 3-1: device descriptor read/64, error -71
[  466.896873][ T5937] usb 3-1: reset high-speed USB device number 25 using dummy_hcd
[  466.929662][ T5937] usb 3-1: device reset changed ep0 maxpacket size!
[  466.954428][  T959] usb 3-1: USB disconnect, device number 25
[  467.215231][  T959] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  467.379279][ T5929] usb 4-1: USB disconnect, device number 35
[  467.403934][T10825] FAULT_INJECTION: forcing a failure.
[  467.403934][T10825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  467.417296][  T959] usb 3-1: Using ep0 maxpacket: 32
[  467.429455][  T959] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  467.460915][  T959] usb 3-1: config 0 has no interface number 0
[  467.597415][T10825] CPU: 0 UID: 0 PID: 10825 Comm: syz.4.1206 Not tainted syzkaller #0 PREEMPT(full) 
[  467.597446][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  467.597459][T10825] Call Trace:
[  467.597467][T10825]  <TASK>
[  467.597476][T10825]  dump_stack_lvl+0x189/0x250
[  467.597512][T10825]  ? __pfx____ratelimit+0x10/0x10
[  467.597535][T10825]  ? __pfx_dump_stack_lvl+0x10/0x10
[  467.597560][T10825]  ? __pfx__printk+0x10/0x10
[  467.597591][T10825]  ? __might_fault+0xb0/0x130
[  467.597633][T10825]  should_fail_ex+0x414/0x560
[  467.597678][T10825]  _copy_from_user+0x2d/0xb0
[  467.597708][T10825]  ___sys_sendmsg+0x158/0x2a0
[  467.597739][T10825]  ? __pfx____sys_sendmsg+0x10/0x10
[  467.597805][T10825]  ? __fget_files+0x2a/0x420
[  467.597824][T10825]  ? __fget_files+0x3a0/0x420
[  467.597853][T10825]  __x64_sys_sendmsg+0x19b/0x260
[  467.597884][T10825]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  467.597922][T10825]  ? __pfx_ksys_write+0x10/0x10
[  467.597948][T10825]  ? rcu_is_watching+0x15/0xb0
[  467.597975][T10825]  ? do_syscall_64+0xbe/0x3b0
[  467.598004][T10825]  do_syscall_64+0xfa/0x3b0
[  467.598027][T10825]  ? lockdep_hardirqs_on+0x9c/0x150
[  467.598050][T10825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.598071][T10825]  ? clear_bhb_loop+0x60/0xb0
[  467.598097][T10825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.598117][T10825] RIP: 0033:0x7f77e9b8eec9
[  467.598136][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.598155][T10825] RSP: 002b:00007f77eaaad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  467.598178][T10825] RAX: ffffffffffffffda RBX: 00007f77e9de5fa0 RCX: 00007f77e9b8eec9
[  467.598194][T10825] RDX: 0000000020000040 RSI: 0000200000000080 RDI: 0000000000000003
[  467.598208][T10825] RBP: 00007f77eaaad090 R08: 0000000000000000 R09: 0000000000000000
[  467.598220][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.598233][T10825] R13: 00007f77e9de6038 R14: 00007f77e9de5fa0 R15: 00007f77e9f0fa28
[  467.598263][T10825]  </TASK>
[  467.809687][    C0] vkms_vblank_simulate: vblank timer overrun
[  467.969055][  T959] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  467.978748][  T959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.986941][  T959] usb 3-1: Product: syz
[  467.991149][  T959] usb 3-1: Manufacturer: syz
[  468.000359][  T959] usb 3-1: SerialNumber: syz
[  468.012147][  T959] usb 3-1: config 0 descriptor??
[  468.051376][  T959] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  468.061433][  T959] usb 3-1: selecting invalid altsetting 1
[  468.068761][  T959] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  468.088621][  T959] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  468.298915][  T959] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  468.327060][  T959] usb 3-1: media controller created
[  468.383688][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'.
[  468.684500][  T959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  468.775165][  T959] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  468.799805][  T959] zl10353_read_register: readreg error (reg=127, ret==-71)
[  468.884796][  T959] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  469.155035][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'.
[  469.196074][  T959] usb 3-1: USB disconnect, device number 26
[  469.265022][ T5937] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  469.449939][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  469.465246][T10852] syzkaller1: entered promiscuous mode
[  469.480290][T10852] syzkaller1: entered allmulticast mode
[  469.491675][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  469.559451][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  469.610982][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  469.695132][ T5937] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  469.748981][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.798908][ T5937] usb 2-1: config 0 descriptor??
[  470.395216][T10865] TCP: TCP_TX_DELAY enabled
[  470.417193][ T5937] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  470.543314][T10868] netlink: 'syz.2.1220': attribute type 10 has an invalid length.
[  470.565662][T10868] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  471.680803][ T5951] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  472.148557][ T5951] hid-generic 0000:0000:0000.0023: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  472.215093][ T5937] usb 2-1: reset high-speed USB device number 22 using dummy_hcd
[  473.120120][T10896] loop2: detected capacity change from 0 to 7
[  473.139562][T10896] Dev loop2: unable to read RDB block 7
[  473.185070][T10896]  loop2: unable to read partition table
[  473.252255][T10896] loop2: partition table beyond EOD, truncated
[  473.259815][T10896] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  473.321062][  T959] usb 2-1: USB disconnect, device number 22
[  473.740639][ T5236] Dev loop2: unable to read RDB block 7
[  473.746432][ T5236]  loop2: unable to read partition table
[  473.805049][ T5236] loop2: partition table beyond EOD, truncated
[  474.185139][  T959] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  474.414824][ T5929] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  474.434829][  T959] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  474.504768][  T959] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  474.627659][ T5929] usb 4-1: config 0 has no interfaces?
[  474.637535][ T5929] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  474.647009][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.655464][ T5929] usb 4-1: Product: syz
[  474.659852][ T5929] usb 4-1: Manufacturer: syz
[  474.667906][  T959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  474.669125][ T5929] usb 4-1: SerialNumber: syz
[  474.720440][ T5929] usb 4-1: config 0 descriptor??
[  474.792805][  T959] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  474.824390][  T959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.846048][  T959] usb 3-1: Product: syz
[  474.850380][  T959] usb 3-1: Manufacturer: syz
[  474.856578][  T959] usb 3-1: SerialNumber: syz
[  474.996493][T10913] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1229'.
[  475.088803][T10921] vivid-000: disconnect
[  475.588185][T10929] netlink: 'syz.0.1232': attribute type 10 has an invalid length.
[  475.959598][T10929] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  476.083181][T10911] vivid-000: reconnect
[  476.889472][  T959] usb 3-1: 0:2 : does not exist
[  476.894789][ T5236] Dev loop2: unable to read RDB block 7
[  476.922216][ T5236]  loop2: unable to read partition table
[  476.957714][ T5236] loop2: partition table beyond EOD, truncated
[  476.968219][  T959] usb 3-1: USB disconnect, device number 27
[  477.137598][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.160017][T10961] binder: 10954:10961 ioctl c0306201 200000000080 returned -14
[  478.319817][ T5957] usb 4-1: USB disconnect, device number 36
[  478.805113][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  478.995511][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  479.011778][ T5868] usb 2-1: config 32 has an invalid interface number: 32 but max is 0
[  479.020359][ T5868] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  479.034806][ T5868] usb 2-1: config 32 has no interface number 0
[  479.045457][T10967] FAULT_INJECTION: forcing a failure.
[  479.045457][T10967] name failslab, interval 1, probability 0, space 0, times 0
[  479.054877][ T5868] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  479.058222][T10967] CPU: 0 UID: 0 PID: 10967 Comm: syz.3.1243 Not tainted syzkaller #0 PREEMPT(full) 
[  479.058253][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  479.058270][T10967] Call Trace:
[  479.058280][T10967]  <TASK>
[  479.058292][T10967]  dump_stack_lvl+0x189/0x250
[  479.058329][T10967]  ? __pfx____ratelimit+0x10/0x10
[  479.058356][T10967]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.058385][T10967]  ? __pfx__printk+0x10/0x10
[  479.058421][T10967]  ? ipv6_get_ifaddr+0x69c/0x790
[  479.058452][T10967]  ? ipv6_get_ifaddr+0x1ea/0x790
[  479.058487][T10967]  should_fail_ex+0x414/0x560
[  479.058546][T10967]  should_failslab+0xa8/0x100
[  479.058586][T10967]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  479.058621][T10967]  ? __alloc_skb+0x112/0x2d0
[  479.058655][T10967]  __alloc_skb+0x112/0x2d0
[  479.058686][T10967]  tcp_make_synack+0xc9/0x1c00
[  479.058720][T10967]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  479.058775][T10967]  ? __pfx_tcp_make_synack+0x10/0x10
[  479.058809][T10967]  ? inet6_csk_route_req+0x508/0x710
[  479.058846][T10967]  ? __pfx_inet6_csk_route_req+0x10/0x10
[  479.058875][T10967]  ? get_random_u32+0x4df/0x940
[  479.058905][T10967]  ? do_syscall_64+0xfa/0x3b0
[  479.058930][T10967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.058962][T10967]  tcp_v6_send_synack+0xf0/0xc10
[  479.059000][T10967]  ? __pfx_tcp_v6_send_synack+0x10/0x10
[  479.059039][T10967]  ? find_match+0xacd/0xc90
[  479.059083][T10967]  tcp_rtx_synack+0x173/0x610
[  479.059123][T10967]  ? __pfx_tcp_rtx_synack+0x10/0x10
[  479.059179][T10967]  ? tcp_oow_rate_limited+0x223/0x390
[  479.059218][T10967]  tcp_check_req+0x4dd/0x1800
[  479.059268][T10967]  ? __pfx_tcp_check_req+0x10/0x10
[  479.059300][T10967]  ? sk_filter_trim_cap+0x1d0/0x9d0
[  479.059336][T10967]  ? tcp_v6_fill_cb+0x3d/0x4c0
[  479.059367][T10967]  ? __pfx___asan_memset+0x10/0x10
[  479.059398][T10967]  ? tcp_v6_fill_cb+0x260/0x4c0
[  479.059435][T10967]  tcp_v6_rcv+0x16b9/0x2c30
[  479.059521][T10967]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  479.059553][T10967]  ? fib6_rule_lookup+0x3a1/0x6f0
[  479.059601][T10967]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  479.059631][T10967]  ip6_protocol_deliver_rcu+0xcb0/0x15c0
[  479.059692][T10967]  ip6_input_finish+0x191/0x370
[  479.059724][T10967]  NF_HOOK+0x30c/0x3a0
[  479.059751][T10967]  ? __pfx_ip6_input_finish+0x10/0x10
[  479.059775][T10967]  ? NF_HOOK+0x9a/0x3a0
[  479.059806][T10967]  ? __pfx_NF_HOOK+0x10/0x10
[  479.059834][T10967]  ? __pfx_ip6_input_finish+0x10/0x10
[  479.059875][T10967]  ip6_input+0x16a/0x270
[  479.059897][T10967]  ? ip6_input+0x23/0x270
[  479.059924][T10967]  NF_HOOK+0x30c/0x3a0
[  479.059946][T10967]  ? skb_orphan+0x4f/0xd0
[  479.059971][T10967]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  479.059995][T10967]  ? NF_HOOK+0x9a/0x3a0
[  479.060017][T10967]  ? __pfx_NF_HOOK+0x10/0x10
[  479.060044][T10967]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  479.060081][T10967]  __netif_receive_skb+0xd3/0x380
[  479.060111][T10967]  ? netif_receive_skb+0x115/0x790
[  479.060148][T10967]  netif_receive_skb+0x1cb/0x790
[  479.060186][T10967]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  479.060212][T10967]  ? __pfx_netif_receive_skb+0x10/0x10
[  479.060257][T10967]  ? tun_rx_batched+0x160/0x730
[  479.060290][T10967]  tun_rx_batched+0x1b9/0x730
[  479.060318][T10967]  ? __lock_acquire+0xab9/0xd20
[  479.060361][T10967]  ? __pfx_tun_rx_batched+0x10/0x10
[  479.060395][T10967]  ? tun_get_user+0x272f/0x3ea0
[  479.060441][T10967]  tun_get_user+0x2b65/0x3ea0
[  479.060479][T10967]  ? tun_get_user+0x6f6/0x3ea0
[  479.060517][T10967]  ? tun_get_user+0x272f/0x3ea0
[  479.060552][T10967]  ? aa_file_perm+0x44d/0x1550
[  479.060579][T10967]  ? __pfx_tun_get_user+0x10/0x10
[  479.060623][T10967]  ? __lock_acquire+0xab9/0xd20
[  479.060666][T10967]  ? ref_tracker_alloc+0x318/0x460
[  479.060687][T10967]  ? __lock_acquire+0xab9/0xd20
[  479.060724][T10967]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  479.060755][T10967]  ? tun_get+0x1c/0x2f0
[  479.060788][T10967]  ? tun_get+0x1c/0x2f0
[  479.060815][T10967]  ? tun_get+0x1c/0x2f0
[  479.060850][T10967]  tun_chr_write_iter+0x113/0x200
[  479.060883][T10967]  vfs_write+0x5c6/0xb30
[  479.060931][T10967]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  479.060962][T10967]  ? __pfx_vfs_write+0x10/0x10
[  479.061010][T10967]  ? __fget_files+0x2a/0x420
[  479.061044][T10967]  ksys_write+0x145/0x250
[  479.061083][T10967]  ? __pfx_ksys_write+0x10/0x10
[  479.061112][T10967]  ? rcu_is_watching+0x15/0xb0
[  479.061145][T10967]  ? do_syscall_64+0xbe/0x3b0
[  479.061176][T10967]  do_syscall_64+0xfa/0x3b0
[  479.061202][T10967]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.061228][T10967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.061251][T10967]  ? clear_bhb_loop+0x60/0xb0
[  479.061281][T10967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.061304][T10967] RIP: 0033:0x7f122c98d97f
[  479.061327][T10967] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  479.061349][T10967] RSP: 002b:00007f122abf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  479.061375][T10967] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98d97f
[  479.061392][T10967] RDX: 000000000000004a RSI: 00002000000002c0 RDI: 00000000000000c8
[  479.061406][T10967] RBP: 00007f122abf6090 R08: 0000000000000000 R09: 0000000000000000
[  479.061422][T10967] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  479.061437][T10967] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  479.061475][T10967]  </TASK>
[  479.878311][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.898084][ T5868] hub 2-1:32.32: bad descriptor, ignoring hub
[  479.904229][ T5868] hub 2-1:32.32: probe with driver hub failed with error -5
[  479.943881][ T5236] Dev loop2: unable to read RDB block 7
[  479.974936][ T5236]  loop2: unable to read partition table
[  479.981078][ T5236] loop2: partition table beyond EOD, truncated
[  480.129530][ T5236] Dev loop2: unable to read RDB block 7
[  480.152520][ T5236]  loop2: unable to read partition table
[  480.234936][ T5236] loop2: partition table beyond EOD, truncated
[  480.437144][ T5868] usb 2-1: reset high-speed USB device number 23 using dummy_hcd
[  480.596825][T10979] FAULT_INJECTION: forcing a failure.
[  480.596825][T10979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.623339][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.3.1247 Not tainted syzkaller #0 PREEMPT(full) 
[  480.623367][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  480.623381][T10979] Call Trace:
[  480.623390][T10979]  <TASK>
[  480.623398][T10979]  dump_stack_lvl+0x189/0x250
[  480.623429][T10979]  ? __pfx____ratelimit+0x10/0x10
[  480.623453][T10979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.623478][T10979]  ? __pfx__printk+0x10/0x10
[  480.623521][T10979]  should_fail_ex+0x414/0x560
[  480.623558][T10979]  _copy_to_user+0x31/0xb0
[  480.623589][T10979]  do_ipv6_getsockopt+0x106f/0x2300
[  480.623624][T10979]  ? __pfx_do_ipv6_getsockopt+0x10/0x10
[  480.623656][T10979]  ? aa_label_sk_perm+0x4cd/0x630
[  480.623695][T10979]  ? __lock_acquire+0xab9/0xd20
[  480.623729][T10979]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  480.623793][T10979]  ? __lock_acquire+0xab9/0xd20
[  480.623840][T10979]  ipv6_getsockopt+0xbd/0x290
[  480.623869][T10979]  ? __pfx_ipv6_getsockopt+0x10/0x10
[  480.623898][T10979]  ? sock_common_getsockopt+0x2d/0xb0
[  480.623918][T10979]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  480.623942][T10979]  do_sock_getsockopt+0x372/0x450
[  480.623972][T10979]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  480.623998][T10979]  ? write_ibpb+0x30/0x40
[  480.624021][T10979]  ? __fget_files+0x3a0/0x420
[  480.624040][T10979]  ? __fget_files+0x2a/0x420
[  480.624066][T10979]  __x64_sys_getsockopt+0x1a5/0x250
[  480.624093][T10979]  ? write_ibpb+0x30/0x40
[  480.624117][T10979]  ? write_ibpb+0x30/0x40
[  480.624144][T10979]  do_syscall_64+0xfa/0x3b0
[  480.624167][T10979]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.624189][T10979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.624210][T10979]  ? clear_bhb_loop+0x60/0xb0
[  480.624236][T10979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.624257][T10979] RIP: 0033:0x7f122c98eec9
[  480.624276][T10979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.624294][T10979] RSP: 002b:00007f122abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  480.624316][T10979] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98eec9
[  480.624331][T10979] RDX: 0000000000000046 RSI: 0000000000000029 RDI: 0000000000000003
[  480.624344][T10979] RBP: 00007f122abf6090 R08: 0000200000000140 R09: 0000000000000000
[  480.624358][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.624370][T10979] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  480.624403][T10979]  </TASK>
[  480.870336][    C1] vkms_vblank_simulate: vblank timer overrun
[  481.178028][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  481.178049][   T30] audit: type=1326 audit(1759157745.578:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.402741][  T959] usb 2-1: USB disconnect, device number 23
[  481.415978][   T30] audit: type=1326 audit(1759157745.578:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.438253][    C1] vkms_vblank_simulate: vblank timer overrun
[  481.480315][   T30] audit: type=1326 audit(1759157745.578:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.557000][   T30] audit: type=1326 audit(1759157745.578:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.677143][   T30] audit: type=1326 audit(1759157745.578:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.745350][T10988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1251'.
[  481.874961][   T30] audit: type=1326 audit(1759157745.578:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  481.895032][  T959] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  481.941271][   T30] audit: type=1326 audit(1759157745.578:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  482.012181][   T30] audit: type=1326 audit(1759157745.578:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  482.078073][  T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.084910][   T30] audit: type=1326 audit(1759157745.608:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  482.128933][  T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.158285][   T30] audit: type=1326 audit(1759157745.608:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31d58eec9 code=0x7ffc0000
[  482.182967][  T959] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  482.231795][  T959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.278953][  T959] usb 2-1: config 0 descriptor??
[  482.879407][ T5236] Dev loop2: unable to read RDB block 7
[  482.895358][ T5236]  loop2: unable to read partition table
[  482.925156][ T5236] loop2: partition table beyond EOD, truncated
[  482.932472][  T959] hid-led 0003:0FC5:B080.0024: probe with driver hid-led failed with error -71
[  482.981417][  T959] usb 2-1: USB disconnect, device number 24
[  483.094304][T11005] FAULT_INJECTION: forcing a failure.
[  483.094304][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.137445][T11005] CPU: 0 UID: 0 PID: 11005 Comm: syz.0.1257 Not tainted syzkaller #0 PREEMPT(full) 
[  483.137473][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  483.137497][T11005] Call Trace:
[  483.137506][T11005]  <TASK>
[  483.137515][T11005]  dump_stack_lvl+0x189/0x250
[  483.137547][T11005]  ? __pfx____ratelimit+0x10/0x10
[  483.137571][T11005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.137597][T11005]  ? __pfx__printk+0x10/0x10
[  483.137627][T11005]  ? __might_fault+0xb0/0x130
[  483.137668][T11005]  should_fail_ex+0x414/0x560
[  483.137706][T11005]  _copy_from_user+0x2d/0xb0
[  483.137737][T11005]  video_usercopy+0x354/0x14f0
[  483.137773][T11005]  ? __pfx___video_do_ioctl+0x10/0x10
[  483.137800][T11005]  ? __pfx_video_usercopy+0x10/0x10
[  483.137837][T11005]  ? __fget_files+0x2a/0x420
[  483.137860][T11005]  ? __fget_files+0x2a/0x420
[  483.137879][T11005]  ? __fget_files+0x3a0/0x420
[  483.137902][T11005]  v4l2_ioctl+0x18d/0x1e0
[  483.137927][T11005]  ? __pfx_v4l2_ioctl+0x10/0x10
[  483.137951][T11005]  __se_sys_ioctl+0xfc/0x170
[  483.137981][T11005]  do_syscall_64+0xfa/0x3b0
[  483.138004][T11005]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.138038][T11005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.138058][T11005]  ? clear_bhb_loop+0x60/0xb0
[  483.138084][T11005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.138104][T11005] RIP: 0033:0x7fb31d58eec9
[  483.138124][T11005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.138142][T11005] RSP: 002b:00007fb31e4bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.138164][T11005] RAX: ffffffffffffffda RBX: 00007fb31d7e5fa0 RCX: 00007fb31d58eec9
[  483.138180][T11005] RDX: 00002000000003c0 RSI: 00000000c040565e RDI: 0000000000000003
[  483.138194][T11005] RBP: 00007fb31e4bb090 R08: 0000000000000000 R09: 0000000000000000
[  483.138206][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.138219][T11005] R13: 00007fb31d7e6038 R14: 00007fb31d7e5fa0 R15: 00007fb31d90fa28
[  483.138251][T11005]  </TASK>
[  483.432037][ T5236] Dev loop2: unable to read RDB block 7
[  483.442495][ T5236]  loop2: unable to read partition table
[  483.448541][ T5236] loop2: partition table beyond EOD, truncated
[  484.174752][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  484.378339][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.407175][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.451323][ T5868] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  484.471421][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.533760][ T5868] usb 3-1: config 0 descriptor??
[  484.702815][T11028] sctp_transport_update_pmtu: 49 callbacks suppressed
[  484.702831][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.776474][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.791530][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.815788][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.864621][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.888774][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.959587][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  484.984906][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  485.020256][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.031847][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  485.059652][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.087833][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.130104][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.138371][T11028] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  485.214065][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.234825][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.242154][ T5868] cypress 0003:04B4:DE61.0025: unknown main item tag 0x0
[  485.277065][ T5868] cypress 0003:04B4:DE61.0025: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0
[  485.724233][T11034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'.
[  486.323274][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'.
[  486.809758][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.837045][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.057966][  T959] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  487.236541][  T959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  487.276430][  T959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  487.325509][  T959] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  487.343229][  T959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  487.371585][  T959] usb 1-1: SerialNumber: syz
[  487.395203][ T5929] usb 3-1: USB disconnect, device number 28
[  487.690160][ T5236] Dev loop2: unable to read RDB block 7
[  487.703421][ T5236]  loop2: unable to read partition table
[  487.710969][ T5236] loop2: partition table beyond EOD, truncated
[  487.776538][  T959] usb 1-1: 0:2 : does not exist
[  487.803066][  T959] usb 1-1: unit 5: unexpected type 0x0e
[  487.851723][  T959] usb 1-1: USB disconnect, device number 19
[  488.064155][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  488.064175][   T30] audit: type=1326 audit(1759157752.418:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  488.076764][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.099358][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1277'.
[  488.801226][   T30] audit: type=1326 audit(1759157752.418:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  488.925062][   T30] audit: type=1326 audit(1759157752.418:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  489.019574][   T30] audit: type=1326 audit(1759157752.488:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  489.124798][   T30] audit: type=1326 audit(1759157752.488:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  489.229238][   T30] audit: type=1326 audit(1759157752.488:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  489.835789][   T30] audit: type=1326 audit(1759157752.488:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  490.085128][   T30] audit: type=1326 audit(1759157752.488:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  490.180422][   T30] audit: type=1326 audit(1759157752.488:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  490.210771][   T30] audit: type=1326 audit(1759157752.488:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c98eec9 code=0x7ffc0000
[  490.545402][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1282'.
[  490.715974][ T5236] Dev loop2: unable to read RDB block 7
[  490.742032][ T5236]  loop2: unable to read partition table
[  490.777780][ T5236] loop2: partition table beyond EOD, truncated
[  490.788875][T11096] FAULT_INJECTION: forcing a failure.
[  490.788875][T11096] name fail_futex, interval 1, probability 0, space 0, times 0
[  490.851605][T11096] CPU: 1 UID: 0 PID: 11096 Comm: syz.2.1284 Not tainted syzkaller #0 PREEMPT(full) 
[  490.851635][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  490.851648][T11096] Call Trace:
[  490.851656][T11096]  <TASK>
[  490.851666][T11096]  dump_stack_lvl+0x189/0x250
[  490.851696][T11096]  ? __pfx____ratelimit+0x10/0x10
[  490.851719][T11096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.851745][T11096]  ? __pfx__printk+0x10/0x10
[  490.851782][T11096]  ? __lock_acquire+0xab9/0xd20
[  490.851820][T11096]  should_fail_ex+0x414/0x560
[  490.851858][T11096]  get_futex_key+0xffc/0x1660
[  490.851882][T11096]  ? _parse_integer_limit+0x1ae/0x1f0
[  490.851922][T11096]  ? __pfx_get_futex_key+0x10/0x10
[  490.851960][T11096]  futex_wake_op+0x132/0xd80
[  490.852005][T11096]  ? rcu_read_lock_any_held+0xb3/0x120
[  490.852029][T11096]  ? __pfx_futex_wake_op+0x10/0x10
[  490.852064][T11096]  ? vfs_write+0x956/0xb30
[  490.852103][T11096]  ? ksys_write+0x1cb/0x250
[  490.852136][T11096]  do_futex+0x3bd/0x420
[  490.852162][T11096]  ? __pfx_vfs_write+0x10/0x10
[  490.852194][T11096]  ? __pfx_do_futex+0x10/0x10
[  490.852231][T11096]  __se_sys_futex+0x36f/0x400
[  490.852260][T11096]  ? fput+0xa0/0xd0
[  490.852282][T11096]  ? ksys_write+0x22a/0x250
[  490.852310][T11096]  ? __pfx___se_sys_futex+0x10/0x10
[  490.852338][T11096]  ? __pfx_ksys_write+0x10/0x10
[  490.852365][T11096]  ? rcu_is_watching+0x15/0xb0
[  490.852392][T11096]  ? __x64_sys_futex+0x21/0xf0
[  490.852423][T11096]  do_syscall_64+0xfa/0x3b0
[  490.852451][T11096]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.852473][T11096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.852494][T11096]  ? clear_bhb_loop+0x60/0xb0
[  490.852520][T11096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.852541][T11096] RIP: 0033:0x7fdc31b8eec9
[  490.852560][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.852579][T11096] RSP: 002b:00007fdc32a0e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  490.852601][T11096] RAX: ffffffffffffffda RBX: 00007fdc31de6090 RCX: 00007fdc31b8eec9
[  490.852617][T11096] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc
[  490.852630][T11096] RBP: 00007fdc32a0e090 R08: 0000200000000000 R09: 0000000000000000
[  490.852644][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.852656][T11096] R13: 00007fdc31de6128 R14: 00007fdc31de6090 R15: 00007fdc31f0fa28
[  490.852689][T11096]  </TASK>
[  491.772919][ T5236] Dev loop2: unable to read RDB block 7
[  491.782193][ T5236]  loop2: unable to read partition table
[  491.808791][ T5236] loop2: partition table beyond EOD, truncated
[  491.853211][T11112] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2
[  491.903609][T11112] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1
[  492.032455][T11119] binder_alloc: binder_alloc_mmap_handler: 11117 200000ffd000-200001000000 already mapped failed -16
[  492.144799][  T959] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  492.248411][ T5236] Dev loop2: unable to read RDB block 7
[  492.255828][ T5236]  loop2: unable to read partition table
[  492.284895][ T5236] loop2: partition table beyond EOD, truncated
[  492.645705][  T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.720123][ T5236] Dev loop2: unable to read RDB block 7
[  492.765083][  T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.882713][ T5236]  loop2: unable to read partition table
[  492.983353][ T5957] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  493.032456][ T5236] loop2: partition table beyond EOD, truncated
[  493.052732][  T959] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  493.155325][ T5957] usb 3-1: Using ep0 maxpacket: 16
[  493.177253][  T959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.191479][ T5957] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  493.201001][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  493.238581][ T5957] usb 3-1: Product: syz
[  493.253027][ T5957] usb 3-1: Manufacturer: syz
[  493.273844][ T5957] usb 3-1: SerialNumber: syz
[  493.329185][ T5957] usb 3-1: config 0 descriptor??
[  493.396983][  T959] usb 2-1: config 0 descriptor??
[  493.825027][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  493.884107][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.053123][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.137851][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.168346][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.198686][ T5957] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  494.219672][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.318184][  T959] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0
[  494.358912][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.370485][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  494.379733][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.419215][ T5957] usb 4-1: config 0 descriptor??
[  494.516454][  T959] cypress 0003:04B4:DE61.0026: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0
[  495.401447][ T5957] usbhid 4-1:0.0: can't add hid device: -71
[  495.415756][ T5957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  495.471782][ T5957] usb 4-1: USB disconnect, device number 37
[  495.497655][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'.
[  495.665688][ T5929] usb 3-1: USB disconnect, device number 29
[  495.775508][ T5236] Dev loop2: unable to read RDB block 7
[  495.800916][ T5236]  loop2: unable to read partition table
[  495.831243][ T5236] loop2: partition table beyond EOD, truncated
[  495.931069][ T5957] usb 2-1: USB disconnect, device number 25
[  496.504749][ T5957] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  496.671285][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  496.777702][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  496.914968][ T5236] Dev loop2: unable to read RDB block 7
[  496.920695][ T5236]  loop2: unable to read partition table
[  496.954726][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  497.016709][ T5236] loop2: partition table beyond EOD, truncated
[  497.030089][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  497.184440][ T5957] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  497.238121][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.296309][ T5957] usb 5-1: config 0 descriptor??
[  497.783878][ T5957] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  498.149955][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'.
[  498.197777][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'.
[  499.246688][T11203] netlink: 211672 bytes leftover after parsing attributes in process `syz.3.1312'.
[  499.427248][T11204] FAULT_INJECTION: forcing a failure.
[  499.427248][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.467544][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT(full) 
[  499.467567][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  499.467576][T11204] Call Trace:
[  499.467582][T11204]  <TASK>
[  499.467589][T11204]  dump_stack_lvl+0x189/0x250
[  499.467612][T11204]  ? __pfx____ratelimit+0x10/0x10
[  499.467629][T11204]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.467648][T11204]  ? __pfx__printk+0x10/0x10
[  499.467669][T11204]  ? __might_fault+0xb0/0x130
[  499.467700][T11204]  should_fail_ex+0x414/0x560
[  499.467728][T11204]  _copy_from_user+0x2d/0xb0
[  499.467749][T11204]  restore_altstack+0x9d/0x4b0
[  499.467769][T11204]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  499.467795][T11204]  ? __pfx_restore_altstack+0x10/0x10
[  499.467819][T11204]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.467832][T11204]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.467850][T11204]  __ia32_sys_rt_sigreturn+0x1ac/0x7b0
[  499.467875][T11204]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  499.467901][T11204]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  499.467932][T11204]  ? __lock_acquire+0xab9/0xd20
[  499.467968][T11204]  ? __task_pid_nr_ns+0x28/0x470
[  499.467991][T11204]  ? do_syscall_64+0xbe/0x3b0
[  499.468011][T11204]  do_syscall_64+0xfa/0x3b0
[  499.468028][T11204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.468042][T11204]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  499.468056][T11204]  ? clear_bhb_loop+0x60/0xb0
[  499.468074][T11204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.468088][T11204] RIP: 0033:0x7fb31d52af79
[  499.468101][T11204] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  499.468114][T11204] RSP: 002b:00007fb31e499ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  499.468129][T11204] RAX: ffffffffffffffda RBX: 00007fb31d7e6090 RCX: 00007fb31d52af79
[  499.468140][T11204] RDX: 00007fb31e499ac0 RSI: 00007fb31e499bf0 RDI: 0000000000000021
[  499.468150][T11204] RBP: 00007fb31e49a090 R08: 0000000000000000 R09: 00007fb31e499df7
[  499.468159][T11204] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  499.468168][T11204] R13: 00007fb31d7e6128 R14: 00007fb31d7e6090 R15: 00007fb31d90fa28
[  499.468204][T11204]  </TASK>
[  499.984830][  T959] usb 5-1: reset high-speed USB device number 39 using dummy_hcd
[  500.024018][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'.
[  500.148413][T11208] vxcan1: entered allmulticast mode
[  500.545189][ T5957] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  500.726859][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.772139][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.816830][ T5957] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  500.835127][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.851190][ T5957] usb 1-1: config 0 descriptor??
[  500.969843][T11223] vxcan1: entered allmulticast mode
[  501.077097][T11210] FAULT_INJECTION: forcing a failure.
[  501.077097][T11210] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  501.121720][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) 
[  501.121742][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  501.121752][T11210] Call Trace:
[  501.121758][T11210]  <TASK>
[  501.121765][T11210]  dump_stack_lvl+0x189/0x250
[  501.121788][T11210]  ? __pfx____ratelimit+0x10/0x10
[  501.121806][T11210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.121825][T11210]  ? __pfx__printk+0x10/0x10
[  501.121849][T11210]  ? fs_reclaim_acquire+0x7d/0x100
[  501.121871][T11210]  should_fail_ex+0x414/0x560
[  501.121902][T11210]  prepare_alloc_pages+0x213/0x610
[  501.121934][T11210]  __alloc_frozen_pages_noprof+0x123/0x370
[  501.121964][T11210]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  501.121995][T11210]  ? trace_sched_exit_tp+0x36/0x110
[  501.122020][T11210]  ? policy_nodemask+0x27c/0x720
[  501.122047][T11210]  alloc_pages_mpol+0x232/0x4a0
[  501.122079][T11210]  vma_alloc_folio_noprof+0xe4/0x200
[  501.122105][T11210]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  501.122138][T11210]  folio_prealloc+0x30/0x180
[  501.122162][T11210]  do_wp_page+0x1231/0x5800
[  501.122201][T11210]  ? __pfx_do_wp_page+0x10/0x10
[  501.122218][T11210]  ? do_raw_spin_lock+0x121/0x290
[  501.122240][T11210]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  501.122268][T11210]  __handle_mm_fault+0x1033/0x5440
[  501.122302][T11210]  ? __pfx___handle_mm_fault+0x10/0x10
[  501.122335][T11210]  ? folio_walk_start+0xa26/0x1060
[  501.122354][T11210]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  501.122381][T11210]  handle_mm_fault+0x40a/0x8e0
[  501.122410][T11210]  break_ksm+0x434/0x560
[  501.122426][T11210]  ? __pfx_break_ksm+0x10/0x10
[  501.122455][T11210]  unmerge_ksm_pages+0x15d/0x200
[  501.122483][T11210]  run_store+0x386/0xa20
[  501.122506][T11210]  ? __pfx_run_store+0x10/0x10
[  501.122529][T11210]  ? sysfs_file_kobj+0x1e4/0x230
[  501.122544][T11210]  ? sysfs_kf_write+0x166/0x260
[  501.122561][T11210]  ? __pfx_sysfs_kf_write+0x10/0x10
[  501.122574][T11210]  kernfs_fop_write_iter+0x3ac/0x540
[  501.122602][T11210]  vfs_write+0x5c6/0xb30
[  501.122626][T11210]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  501.122648][T11210]  ? __pfx_vfs_write+0x10/0x10
[  501.122677][T11210]  ? __fget_files+0x2a/0x420
[  501.122698][T11210]  ksys_write+0x145/0x250
[  501.122720][T11210]  ? __pfx_ksys_write+0x10/0x10
[  501.122738][T11210]  ? rcu_is_watching+0x15/0xb0
[  501.122757][T11210]  ? do_syscall_64+0xbe/0x3b0
[  501.122777][T11210]  do_syscall_64+0xfa/0x3b0
[  501.122795][T11210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.122808][T11210]  ? asm_sysvec_call_function_single+0x1a/0x20
[  501.122823][T11210]  ? clear_bhb_loop+0x60/0xb0
[  501.122843][T11210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.122858][T11210] RIP: 0033:0x7fb31d58eec9
[  501.122872][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.122885][T11210] RSP: 002b:00007fb31e4bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  501.122901][T11210] RAX: ffffffffffffffda RBX: 00007fb31d7e5fa0 RCX: 00007fb31d58eec9
[  501.122912][T11210] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004
[  501.122921][T11210] RBP: 00007fb31e4bb090 R08: 0000000000000000 R09: 0000000000000000
[  501.122930][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.122939][T11210] R13: 00007fb31d7e6038 R14: 00007fb31d7e5fa0 R15: 00007fb31d90fa28
[  501.122964][T11210]  </TASK>
[  501.674874][ T5951] usb 5-1: USB disconnect, device number 39
[  501.714422][ T5957] usbhid 1-1:0.0: can't add hid device: -71
[  501.720908][ T5957] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  501.819115][ T5957] usb 1-1: USB disconnect, device number 20
[  501.980950][ T5236] Dev loop2: unable to read RDB block 7
[  502.005337][ T5236]  loop2: unable to read partition table
[  502.012279][ T5236] loop2: partition table beyond EOD, truncated
[  502.060230][T11230] netlink: 'syz.3.1322': attribute type 1 has an invalid length.
[  502.262400][ T5236] Dev loop2: unable to read RDB block 7
[  502.275035][ T5236]  loop2: unable to read partition table
[  502.296970][T11235] syz_tun: entered promiscuous mode
[  502.297700][ T5236] loop2: partition table beyond EOD, 
[  502.302623][T11235] macsec1: entered allmulticast mode
[  502.314850][ T5236] truncated
[  502.318901][T11235] syz_tun: entered allmulticast mode
[  502.345511][T11235] syz_tun: left allmulticast mode
[  502.358369][T11235] syz_tun: left promiscuous mode
[  502.528103][ T5236] Dev loop2: unable to read RDB block 7
[  502.544062][ T5236]  loop2: unable to read partition table
[  502.552720][ T5236] loop2: partition table beyond EOD, truncated
[  502.719787][T11240] binder: 11236:11240 ioctl c0306201 200000000080 returned -14
[  504.908827][ T5236] Dev loop2: unable to read RDB block 7
[  504.924874][ T5236]  loop2: unable to read partition table
[  504.930797][ T5236] loop2: partition table beyond EOD, truncated
[  506.805253][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  506.814730][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  507.255911][ T5236] Dev loop2: unable to read RDB block 7
[  507.261551][ T5236]  loop2: unable to read partition table
[  507.355609][ T5236] loop2: partition table beyond EOD, truncated
[  507.718620][T11285] IPVS: length: 238 != 24
[  507.795130][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  507.795154][   T30] audit: type=1326 audit(1759157772.178:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  507.917031][   T30] audit: type=1326 audit(1759157772.178:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  508.044810][   T30] audit: type=1326 audit(1759157772.178:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  508.067168][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.524458][   T30] audit: type=1326 audit(1759157772.178:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  508.838035][   T30] audit: type=1326 audit(1759157772.178:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  508.984090][   T30] audit: type=1326 audit(1759157772.178:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  509.098026][   T30] audit: type=1326 audit(1759157772.178:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  509.098067][   T30] audit: type=1326 audit(1759157772.178:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  509.098099][   T30] audit: type=1326 audit(1759157772.178:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  509.098131][   T30] audit: type=1326 audit(1759157772.188:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc31b8eec9 code=0x7ffc0000
[  509.166640][    C0] vkms_vblank_simulate: vblank timer overrun
[  509.265829][    C0] vkms_vblank_simulate: vblank timer overrun
[  509.366446][    C0] vkms_vblank_simulate: vblank timer overrun
[  509.439033][ T5236] Dev loop2: unable to read RDB block 7
[  509.439081][ T5236]  loop2: unable to read partition table
[  509.439314][ T5236] loop2: partition table beyond EOD, truncated
[  509.865037][ T5937] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  510.025336][ T5937] usb 3-1: Using ep0 maxpacket: 32
[  510.044506][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  510.088852][ T5937] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  510.150389][ T5937] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  510.255107][ T5937] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  510.272131][T11307] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.279456][T11307] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.316577][ T5937] usb 3-1: config 1 interface 1 has no altsetting 0
[  510.351144][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  510.381209][T11307] batman_adv: batadv0: Interface deactivated: dummy0
[  510.397180][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.424441][ T5937] usb 3-1: Product: syz
[  510.437949][ T5937] usb 3-1: Manufacturer: syz
[  510.445041][ T5929] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  510.445740][ T5937] usb 3-1: SerialNumber: syz
[  510.544957][  T959] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  510.597030][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  510.612592][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  510.643058][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  510.667770][ T5929] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  510.677349][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.715649][  T959] usb 2-1: Using ep0 maxpacket: 8
[  510.718362][ T5929] usb 4-1: Product: syz
[  510.745885][  T959] usb 2-1: unable to get BOS descriptor or descriptor too short
[  510.754952][ T5929] usb 4-1: Manufacturer: syz
[  510.762135][ T5929] usb 4-1: SerialNumber: syz
[  510.765754][  T959] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  510.788997][ T5929] usb 4-1: config 0 descriptor??
[  510.874737][  T959] usb 2-1: config 1 interface 0 has no altsetting 0
[  510.875596][T11307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.929833][  T959] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  510.963178][T11307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.002472][  T959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.025215][  T959] usb 2-1: Product: syz
[  511.034179][  T959] usb 2-1: Manufacturer: syz
[  511.044738][  T959] usb 2-1: SerialNumber: syz
[  511.051353][ T5929] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  511.284127][ T5929] usb 4-1: USB disconnect, device number 38
[  511.484066][   T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.495132][ T5937] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  511.503243][ T5937] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  511.529757][   T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.556293][  T959] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input23
[  511.613394][ T5221] bcm5974 2-1:1.0: could not read from device
[  511.651578][ T5221] bcm5974 2-1:1.0: could not read from device
[  511.674072][   T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.682200][ T5221] bcm5974 2-1:1.0: could not read from device
[  511.696839][  T959] usb 2-1: USB disconnect, device number 26
[  511.715225][ T5221] bcm5974 2-1:1.0: could not read from device
[  511.717684][   T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.749497][ T5937] usb 3-1: USB disconnect, device number 30
[  511.869751][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  512.090652][ T5236] Dev loop2: unable to read RDB block 7
[  512.117030][ T5236]  loop2: unable to read partition table
[  512.130098][ T5236] loop2: partition table beyond EOD, truncated
[  512.307288][  T959] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  512.470214][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'.
[  512.531704][  T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  512.545246][  T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  512.614773][  T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  512.692742][  T959] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  512.714973][  T959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.723840][  T959] usb 4-1: Product: syz
[  512.728155][  T959] usb 4-1: Manufacturer: syz
[  512.734937][  T959] usb 4-1: SerialNumber: syz
[  512.748390][  T959] usb 4-1: config 0 descriptor??
[  512.971419][  T959] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  513.844858][T11345] binder: 11339:11345 ioctl c0306201 200000000080 returned -14
[  514.846421][T11352] binder: 11349:11352 ioctl c0306201 200000000080 returned -14
[  515.003393][T11348] vivid-000: disconnect
[  515.104853][  T959] usb 4-1: USB disconnect, device number 39
[  515.278843][T11347] vivid-000: reconnect
[  516.114990][ T5236] Dev loop2: unable to read RDB block 7
[  516.120631][ T5236]  loop2: unable to read partition table
[  516.167239][ T5236] loop2: partition table beyond EOD, truncated
[  516.312230][T11367] vivid-000: disconnect
[  517.195715][T11371] binder: 11361:11371 ioctl c0306201 200000000080 returned -14
[  517.436882][T11376] netlink: ct family unspecified
[  517.441882][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.823340][T11358] vivid-000: reconnect
[  519.194871][T11400] binder: 11397:11400 ioctl c0306201 200000000080 returned -14
[  519.990097][ T5236] Dev loop2: unable to read RDB block 7
[  520.003261][ T5236]  loop2: unable to read partition table
[  520.115195][ T5236] loop2: partition table beyond EOD, truncated
[  521.308021][T11431] netlink: 'syz.0.1372': attribute type 9 has an invalid length.
[  521.316261][T11431] netlink: 'syz.0.1372': attribute type 7 has an invalid length.
[  521.328318][T11431] netlink: 'syz.0.1372': attribute type 8 has an invalid length.
[  523.169806][T11444] vti0: entered promiscuous mode
[  523.175830][T11444] vti0: entered allmulticast mode
[  523.746642][ T5868] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  523.944778][ T5929] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  524.132692][ T5868] usb 1-1: Using ep0 maxpacket: 16
[  524.151559][ T5868] usb 1-1: config 0 has an invalid interface number: 115 but max is 0
[  524.214404][ T5868] usb 1-1: config 0 has no interface number 0
[  524.232873][ T5868] usb 1-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  524.265171][ T5868] usb 1-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  524.284735][ T5929] usb 4-1: Using ep0 maxpacket: 32
[  524.313168][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  524.324411][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.334563][ T5929] usb 4-1: Product: syz
[  524.343702][ T5929] usb 4-1: Manufacturer: syz
[  524.402285][ T5868] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f
[  524.439627][ T5929] usb 4-1: SerialNumber: syz
[  524.460436][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.503572][ T5868] usb 1-1: Product: syz
[  524.723113][ T5868] usb 1-1: Manufacturer: syz
[  524.733374][ T5868] usb 1-1: SerialNumber: syz
[  524.825894][ T5868] usb 1-1: config 0 descriptor??
[  525.035553][ T5236] Dev loop2: unable to read RDB block 7
[  525.052443][ T5236]  loop2: unable to read partition table
[  525.071786][ T5236] loop2: partition table beyond EOD, truncated
[  525.302244][T11447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  525.435287][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'.
[  527.562153][ T5929] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  527.724795][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  527.724812][   T30] audit: type=1326 audit(1759157792.058:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  527.772706][ T5929] usb 4-1: USB disconnect, device number 40
[  527.879265][  T959] usb 1-1: USB disconnect, device number 21
[  527.948583][T11324] udevd[11324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.035556][   T30] audit: type=1326 audit(1759157792.058:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  528.184302][   T30] audit: type=1326 audit(1759157792.058:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  528.461561][   T30] audit: type=1326 audit(1759157792.058:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  528.740221][T11488] binder: 11484:11488 ioctl c0306201 200000000080 returned -14
[  528.765972][   T30] audit: type=1326 audit(1759157792.058:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  528.782099][ T5236] Dev loop2: unable to read RDB block 7
[  528.804488][    C1] vkms_vblank_simulate: vblank timer overrun
[  528.831052][   T30] audit: type=1326 audit(1759157792.068:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  528.894587][ T5236]  loop2: unable to read partition table
[  528.901392][ T5236] loop2: partition table beyond EOD, truncated
[  529.031984][   T30] audit: type=1326 audit(1759157792.068:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  529.054429][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.090747][   T30] audit: type=1326 audit(1759157792.068:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  529.115794][   T30] audit: type=1326 audit(1759157792.068:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  529.138224][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.305387][   T30] audit: type=1326 audit(1759157792.068:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11475 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f77e9b8eec9 code=0x7ffc0000
[  529.328219][ T5236] Dev loop2: unable to read RDB block 7
[  529.344093][ T5236]  loop2: unable to read partition table
[  529.354339][ T5236] loop2: partition table beyond EOD, truncated
[  529.797798][T11502] syzkaller1: entered promiscuous mode
[  529.814881][T11502] syzkaller1: entered allmulticast mode
[  530.039176][ T5236] Dev loop2: unable to read RDB block 7
[  530.091355][ T5236]  loop2: unable to read partition table
[  530.164953][ T5236] loop2: partition table beyond EOD, truncated
[  530.458989][ T5236] Dev loop2: unable to read RDB block 7
[  530.504816][ T5236]  loop2: unable to read partition table
[  530.665515][ T5236] loop2: partition table beyond EOD, truncated
[  531.188964][T11519] netlink: 'syz.4.1393': attribute type 4 has an invalid length.
[  531.197367][T11519] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1393'.
[  531.264345][T11519] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1393'.
[  531.273744][T11519] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  531.572894][T11527] FAULT_INJECTION: forcing a failure.
[  531.572894][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.632711][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.3.1396 Not tainted syzkaller #0 PREEMPT(full) 
[  531.632740][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  531.632755][T11527] Call Trace:
[  531.632763][T11527]  <TASK>
[  531.632772][T11527]  dump_stack_lvl+0x189/0x250
[  531.632802][T11527]  ? __pfx____ratelimit+0x10/0x10
[  531.632826][T11527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  531.632852][T11527]  ? __pfx__printk+0x10/0x10
[  531.632883][T11527]  ? __might_fault+0xb0/0x130
[  531.632927][T11527]  should_fail_ex+0x414/0x560
[  531.632966][T11527]  _copy_from_user+0x2d/0xb0
[  531.632997][T11527]  ___sys_recvmsg+0x12e/0x510
[  531.633033][T11527]  ? __pfx____sys_recvmsg+0x10/0x10
[  531.633097][T11527]  ? __might_fault+0xb0/0x130
[  531.633131][T11527]  do_recvmmsg+0x307/0x770
[  531.633169][T11527]  ? __pfx_do_recvmmsg+0x10/0x10
[  531.633211][T11527]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  531.633256][T11527]  __x64_sys_recvmmsg+0x190/0x240
[  531.633289][T11527]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  531.633317][T11527]  ? rcu_is_watching+0x15/0xb0
[  531.633345][T11527]  ? do_syscall_64+0xbe/0x3b0
[  531.633375][T11527]  do_syscall_64+0xfa/0x3b0
[  531.633401][T11527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.633422][T11527]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  531.633443][T11527]  ? clear_bhb_loop+0x60/0xb0
[  531.633470][T11527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.633496][T11527] RIP: 0033:0x7f122c98eec9
[  531.633515][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.633534][T11527] RSP: 002b:00007f122abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  531.633557][T11527] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98eec9
[  531.633573][T11527] RDX: 000000000000074e RSI: 0000200000001140 RDI: 0000000000000004
[  531.633587][T11527] RBP: 00007f122abf6090 R08: 0000000000000000 R09: 0000000000000000
[  531.633601][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.633613][T11527] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  531.633646][T11527]  </TASK>
[  532.120172][T11534] FAULT_INJECTION: forcing a failure.
[  532.120172][T11534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  532.180559][T11534] CPU: 0 UID: 0 PID: 11534 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT(full) 
[  532.180591][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  532.180604][T11534] Call Trace:
[  532.180613][T11534]  <TASK>
[  532.180622][T11534]  dump_stack_lvl+0x189/0x250
[  532.180652][T11534]  ? __pfx____ratelimit+0x10/0x10
[  532.180682][T11534]  ? __pfx_dump_stack_lvl+0x10/0x10
[  532.180708][T11534]  ? __pfx__printk+0x10/0x10
[  532.180738][T11534]  ? __might_fault+0xb0/0x130
[  532.180781][T11534]  should_fail_ex+0x414/0x560
[  532.180826][T11534]  _copy_from_iter+0x1de/0x1790
[  532.180859][T11534]  ? _copy_from_iter+0x24f/0x1790
[  532.180890][T11534]  ? __pfx__copy_from_iter+0x10/0x10
[  532.180912][T11534]  ? sock_alloc_send_pskb+0x875/0x990
[  532.180949][T11534]  ? __pfx__copy_from_iter+0x10/0x10
[  532.180977][T11534]  ? page_copy_sane+0x16a/0x280
[  532.181005][T11534]  copy_page_from_iter+0xdd/0x170
[  532.181040][T11534]  skb_copy_datagram_from_iter+0x306/0x720
[  532.181085][T11534]  packet_sendmsg+0x3797/0x5080
[  532.181126][T11534]  ? aa_label_seq_xprint+0x250/0x6f0
[  532.181178][T11534]  ? __pfx___might_resched+0x10/0x10
[  532.181197][T11534]  ? __lock_acquire+0xab9/0xd20
[  532.181245][T11534]  ? __pfx_packet_sendmsg+0x10/0x10
[  532.181273][T11534]  ? aa_sk_perm+0x81e/0x950
[  532.181313][T11534]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  532.181344][T11534]  ? aa_sock_msg_perm+0xf1/0x1d0
[  532.181367][T11534]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  532.181391][T11534]  ? __pfx_packet_sendmsg+0x10/0x10
[  532.181423][T11534]  __sock_sendmsg+0x219/0x270
[  532.181460][T11534]  __sys_sendto+0x3bd/0x520
[  532.181487][T11534]  ? __pfx___sys_sendto+0x10/0x10
[  532.181509][T11534]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  532.181548][T11534]  ? __fget_files+0x3a0/0x420
[  532.181580][T11534]  ? ksys_write+0x22a/0x250
[  532.181611][T11534]  ? __pfx_ksys_write+0x10/0x10
[  532.181636][T11534]  ? rcu_is_watching+0x15/0xb0
[  532.181670][T11534]  __x64_sys_sendto+0xde/0x100
[  532.181699][T11534]  do_syscall_64+0xfa/0x3b0
[  532.181726][T11534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.181746][T11534]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  532.181767][T11534]  ? clear_bhb_loop+0x60/0xb0
[  532.181793][T11534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.181813][T11534] RIP: 0033:0x7f122c98eec9
[  532.181832][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.181850][T11534] RSP: 002b:00007f122abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  532.181873][T11534] RAX: ffffffffffffffda RBX: 00007f122cbe5fa0 RCX: 00007f122c98eec9
[  532.181888][T11534] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000005
[  532.181902][T11534] RBP: 00007f122abf6090 R08: 0000200000000140 R09: 0000000000000014
[  532.181916][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.181929][T11534] R13: 00007f122cbe6038 R14: 00007f122cbe5fa0 R15: 00007f122cd0fa28
[  532.181962][T11534]  </TASK>
[  532.706752][T11540] syzkaller1: entered promiscuous mode
[  532.712257][T11540] syzkaller1: entered allmulticast mode
[  533.487563][ T5236] Dev loop2: unable to read RDB block 7
[  533.493206][ T5236]  loop2: unable to read partition table
[  533.520946][ T5236] loop2: partition table beyond EOD, truncated
[  533.933819][ T5236] Dev loop2: unable to read RDB block 7
[  533.964793][ T5236]  loop2: unable to read partition table
[  533.970755][ T5236] loop2: partition table beyond EOD, truncated
[  534.639558][T11568] binder: 11561:11568 ioctl c0306201 200000000080 returned -14
[  535.414881][T11582] netlink: 'syz.3.1412': attribute type 10 has an invalid length.
[  535.454379][T11582] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  535.496267][    C1] ------------[ cut here ]------------
[  535.501840][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  535.512751][    C1] WARNING: CPU: 1 PID: 5929 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  535.522837][    C1] Modules linked in:
[  535.526776][    C1] CPU: 1 UID: 0 PID: 5929 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  535.536220][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  535.546306][    C1] Workqueue:  0x0 (events)
[  535.550781][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  535.557061][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  535.576706][    C1] RSP: 0000:ffffc90000a08758 EFLAGS: 00010246
[  535.582787][    C1] RAX: 421afd6984c4c500 RBX: 000000000000000c RCX: ffff88802e848000
[  535.590811][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  535.598849][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  535.606969][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff888021b36528
[  535.615111][    C1] R13: 0000000000000000 R14: ffff88807cde0e40 R15: ffff88807cde30d8
[  535.623417][    C1] FS:  0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000
[  535.632411][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.639081][    C1] CR2: 00007f122abd4f98 CR3: 0000000021b42000 CR4: 00000000003526f0
[  535.647206][    C1] Call Trace:
[  535.650500][    C1]  <IRQ>
[  535.653387][    C1]  rate_control_send_low+0x194/0x7a0
[  535.658720][    C1]  rate_control_get_rate+0x20b/0x5d0
[  535.664031][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  535.669910][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  535.676324][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  535.681720][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  535.687578][    C1]  ? __ieee80211_beacon_get+0xb24/0x1880
[  535.693244][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  535.698763][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  535.704384][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  535.709994][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  535.716119][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  535.721711][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  535.728961][    C1]  __iterate_interfaces+0x2a8/0x590
[  535.734173][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  535.741835][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  535.749077][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  535.755193][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  535.762236][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  535.767469][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  535.773323][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  535.778605][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  535.784513][    C1]  ? read_tsc+0x9/0x20
[  535.788647][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  535.794468][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  535.799619][    C1]  handle_softirqs+0x286/0x870
[  535.804448][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  535.809338][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  535.814667][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  535.819914][    C1]  __irq_exit_rcu+0xca/0x1f0
[  535.824504][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  535.829726][    C1]  irq_exit_rcu+0x9/0x30
[  535.833968][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  535.839635][    C1]  </IRQ>
[  535.842562][    C1]  <TASK>
[  535.845506][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  535.851509][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  535.857341][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 0f f5 eb 09 e8 aa 3b 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  535.876975][    C1] RSP: 0000:ffffc9000463f9b8 EFLAGS: 00000286
[  535.883044][    C1] RAX: 421afd6984c4c500 RBX: 0000000000000000 RCX: 421afd6984c4c500
[  535.891077][    C1] RDX: 0000000000000000 RSI: ffffffff8d9ba5a7 RDI: ffffffff8be33f80
[  535.899156][    C1] RBP: ffffc9000463fa10 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  535.907188][    C1] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff88802e848000
[  535.915217][    C1] R13: dffffc0000000000 R14: ffff88807c1b0000 R15: ffff8880b873ab18
[  535.923325][    C1]  ? finish_task_switch+0x266/0x950
[  535.928582][    C1]  __schedule+0x17a0/0x4cc0
[  535.933112][    C1]  ? __pfx___schedule+0x10/0x10
[  535.938008][    C1]  ? schedule+0x91/0x360
[  535.942252][    C1]  schedule+0x165/0x360
[  535.946465][    C1]  worker_thread+0xa82/0xda0
[  535.951074][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  535.957454][    C1]  ? __kthread_parkme+0x7b/0x200
[  535.962410][    C1]  kthread+0x711/0x8a0
[  535.966509][    C1]  ? __pfx_worker_thread+0x10/0x10
[  535.971648][    C1]  ? __pfx_kthread+0x10/0x10
[  535.976273][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  535.981512][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.986743][    C1]  ? __pfx_kthread+0x10/0x10
[  535.991364][    C1]  ret_from_fork+0x439/0x7d0
[  535.996001][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  536.001118][    C1]  ? __switch_to_asm+0x39/0x70
[  536.005937][    C1]  ? __switch_to_asm+0x33/0x70
[  536.010725][    C1]  ? __pfx_kthread+0x10/0x10
[  536.015397][    C1]  ret_from_fork_asm+0x1a/0x30
[  536.020210][    C1]  </TASK>
[  536.023234][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  536.030637][    C1] CPU: 1 UID: 0 PID: 5929 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  536.040047][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  536.050253][    C1] Workqueue:  0x0 (events)
[  536.054699][    C1] Call Trace:
[  536.058129][    C1]  <IRQ>
[  536.060991][    C1]  dump_stack_lvl+0x99/0x250
[  536.065678][    C1]  ? __asan_memcpy+0x40/0x70
[  536.070275][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.075482][    C1]  ? __pfx__printk+0x10/0x10
[  536.080090][    C1]  vpanic+0x281/0x750
[  536.084180][    C1]  ? __pfx__printk+0x10/0x10
[  536.088777][    C1]  ? __pfx_vpanic+0x10/0x10
[  536.093380][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  536.098697][    C1]  panic+0xb9/0xc0
[  536.102447][    C1]  ? __pfx_panic+0x10/0x10
[  536.106887][    C1]  __warn+0x31b/0x4b0
[  536.110881][    C1]  ? __rate_control_send_low+0x5df/0x820
[  536.116965][    C1]  ? __rate_control_send_low+0x5df/0x820
[  536.122618][    C1]  report_bug+0x2be/0x4f0
[  536.126981][    C1]  ? __rate_control_send_low+0x5df/0x820
[  536.132627][    C1]  ? __rate_control_send_low+0x5df/0x820
[  536.138269][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  536.143907][    C1]  handle_bug+0x84/0x160
[  536.148161][    C1]  exc_invalid_op+0x1a/0x50
[  536.152670][    C1]  asm_exc_invalid_op+0x1a/0x20
[  536.157519][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  536.163773][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  536.183388][    C1] RSP: 0000:ffffc90000a08758 EFLAGS: 00010246
[  536.189465][    C1] RAX: 421afd6984c4c500 RBX: 000000000000000c RCX: ffff88802e848000
[  536.197441][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  536.205412][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  536.213387][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff888021b36528
[  536.221371][    C1] R13: 0000000000000000 R14: ffff88807cde0e40 R15: ffff88807cde30d8
[  536.229389][    C1]  ? __rate_control_send_low+0x5de/0x820
[  536.235042][    C1]  rate_control_send_low+0x194/0x7a0
[  536.240364][    C1]  rate_control_get_rate+0x20b/0x5d0
[  536.245668][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  536.251512][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  536.257841][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  536.263241][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  536.268986][    C1]  ? __ieee80211_beacon_get+0xb24/0x1880
[  536.274658][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  536.280161][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  536.285738][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  536.291244][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  536.297346][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  536.302912][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  536.310140][    C1]  __iterate_interfaces+0x2a8/0x590
[  536.315361][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  536.321478][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  536.328695][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  536.334779][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  536.341810][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  536.347196][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  536.353037][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  536.358284][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  536.364193][    C1]  ? read_tsc+0x9/0x20
[  536.368291][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  536.374130][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  536.379266][    C1]  handle_softirqs+0x286/0x870
[  536.384054][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  536.388844][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  536.394151][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  536.399726][    C1]  __irq_exit_rcu+0xca/0x1f0
[  536.404342][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  536.409558][    C1]  irq_exit_rcu+0x9/0x30
[  536.413814][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  536.419462][    C1]  </IRQ>
[  536.422400][    C1]  <TASK>
[  536.425345][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  536.431334][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  536.437160][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 0f f5 eb 09 e8 aa 3b 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  536.456775][    C1] RSP: 0000:ffffc9000463f9b8 EFLAGS: 00000286
[  536.462849][    C1] RAX: 421afd6984c4c500 RBX: 0000000000000000 RCX: 421afd6984c4c500
[  536.470912][    C1] RDX: 0000000000000000 RSI: ffffffff8d9ba5a7 RDI: ffffffff8be33f80
[  536.478891][    C1] RBP: ffffc9000463fa10 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  536.486866][    C1] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff88802e848000
[  536.494839][    C1] R13: dffffc0000000000 R14: ffff88807c1b0000 R15: ffff8880b873ab18
[  536.502838][    C1]  ? finish_task_switch+0x266/0x950
[  536.508064][    C1]  __schedule+0x17a0/0x4cc0
[  536.512602][    C1]  ? __pfx___schedule+0x10/0x10
[  536.517503][    C1]  ? schedule+0x91/0x360
[  536.521805][    C1]  schedule+0x165/0x360
[  536.526151][    C1]  worker_thread+0xa82/0xda0
[  536.530758][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  536.537192][    C1]  ? __kthread_parkme+0x7b/0x200
[  536.542151][    C1]  kthread+0x711/0x8a0
[  536.546238][    C1]  ? __pfx_worker_thread+0x10/0x10
[  536.551349][    C1]  ? __pfx_kthread+0x10/0x10
[  536.555947][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.561181][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.566495][    C1]  ? __pfx_kthread+0x10/0x10
[  536.571112][    C1]  ret_from_fork+0x439/0x7d0
[  536.575729][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  536.580861][    C1]  ? __switch_to_asm+0x39/0x70
[  536.585723][    C1]  ? __switch_to_asm+0x33/0x70
[  536.590576][    C1]  ? __pfx_kthread+0x10/0x10
[  536.595179][    C1]  ret_from_fork_asm+0x1a/0x30
[  536.599970][    C1]  </TASK>
[  536.603521][    C1] Kernel Offset: disabled
[  536.607853][    C1] Rebooting in 86400 seconds..