last executing test programs:

16.271120038s ago: executing program 4 (id=3583):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}, {&(0x7f0000000cc0)}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efc", 0x2b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

16.027106894s ago: executing program 4 (id=3585):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0xfffffff0, 0x0, 0x0, 0x81, 0x6ae0})

15.800318073s ago: executing program 4 (id=3587):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083b", 0x52}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f", 0xdb}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a04301", 0x29}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

15.557610047s ago: executing program 4 (id=3589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xad}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

15.398674662s ago: executing program 4 (id=3591):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3", 0xe7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9e", 0xb0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4d", 0x6c}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b", 0x1d}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

15.216129821s ago: executing program 4 (id=3593):
r0 = socket$inet(0x2, 0x3, 0xff)
sendto$inet(r0, &(0x7f0000000000)="f8810000000000004b04000020686a8afd2b6481f25821a7a2e3b353a9c7d95c", 0xfdef, 0x20004040, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
futex(0x0, 0xb, 0x2, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x1)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8a00, 0x0)
ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000002240))
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a7d3b", 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0)

13.47289658s ago: executing program 0 (id=3604):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da", 0xbe}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd3", 0xb9}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e8", 0x16}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

13.374253427s ago: executing program 0 (id=3606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000019c0)=""/14, 0xe}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2}, 0x80000000}], 0x1, 0x100, 0x0) (fail_nth: 1)

12.180548519s ago: executing program 0 (id=3609):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r2, 0xb17, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r6, r5, 0x0, 0x178)
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ec667d26dd0432900bfd002000010902120001000000000904000000020a0000"], 0x0)

9.058019333s ago: executing program 0 (id=3616):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da", 0xbe}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911", 0xd8}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e8", 0x16}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.664847078s ago: executing program 0 (id=3621):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x8})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x6, 0x5, "0a062306", "02c12277"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x18, 0x5, 0x46, 0x3, 0x7, 0x3}}}, &(0x7f00000007c0)={0x84, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000280)=ANY=[@ANYBLOB="2000edd0000000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0x19, 0x2, "2e88"}, &(0x7f00000001c0)={0x40, 0x1a, 0x2, 0x6677}, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB='\x001\x00\x00\x00\v'], 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0})
getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000000000))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[@ANYBLOB="5c01000010000100000000ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000800000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffcffffff080000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000810000000000400009000000000000005f00000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000050000ffffffffffffffff00000000000000001f00000000000000feffffffff56430000fffffffc030000000000008000000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x844)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
ioctl$VT_GETMODE(r5, 0x5601, 0x0)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x60240, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000004f", @ANYRES32=r6, @ANYRES8=r3, @ANYRESHEX=0x0, @ANYRESHEX=r5, @ANYBLOB="98bfa525d76a1c22a0d1d40946ad43879f40320ae517de1d265eb4f26ef08f6893d1d7514bf9e84146248af5b3a1ed25b0197cb28e7e8a0acdfa7aa8743a83a31b118e92bd906c517901b5514b86c7d6be4c2c06662709d997eeedb34b2332f927eca32b3c447826d4487677778fce83f6cf0c13c4503b6a226f2d27b4417b3203a01ce6611af20f4f7c64d355048e21c240b685e02121c7856f453fa8c2e6408d5d4f21195ae0e183232080948eff283ca7331399", @ANYRESDEC=r1, @ANYRESDEC=r1], 0x4c}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000001ffffffff1ab62e0018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x26040000)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_TSC_KHZ_vm(r10, 0xaea2, 0x5)
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @ioapic={0x21cdeca26f4162bb, 0x0, 0xffff, 0x3, 0x0, [{0x2, 0xb, 0x0, '\x00', 0x8}, {0x7, 0x0, 0x3, '\x00', 0x5}, {0x5, 0x3, 0x4, '\x00', 0x5}, {0x2, 0x9, 0xde, '\x00', 0x80}, {0x6, 0x88, 0x8, '\x00', 0x2}, {0xbd, 0x51, 0x3, '\x00', 0xbe}, {0x7, 0x5, 0x1}, {0x0, 0x3, 0x2, '\x00', 0x8}, {0x3, 0x5, 0x0, '\x00', 0x81}, {0x66, 0x40, 0x9, '\x00', 0x64}, {0x7, 0x9, 0x8, '\x00', 0xff}, {0x8, 0xac, 0x1, '\x00', 0x4}, {0x9, 0xa, 0x97, '\x00', 0x6}, {0x3, 0xb1, 0x2, '\x00', 0x6}, {0xcb, 0x90, 0x5, '\x00', 0x2}, {0x9, 0x6, 0x3, '\x00', 0x1}, {0x8, 0x9, 0x5, '\x00', 0x58}, {0x3, 0x1, 0x80, '\x00', 0x5}, {0x5, 0x0, 0x40, '\x00', 0xd}, {0x8, 0x0, 0x2, '\x00', 0x8}, {0x3, 0x8, 0x7, '\x00', 0x7}, {0x0, 0x67, 0x5}, {0xfb, 0x6, 0x2, '\x00', 0xa5}, {0x3, 0x62, 0x8, '\x00', 0x9}]}})
umount2(&(0x7f0000000040)='./file0\x00', 0x9)

8.299467447s ago: executing program 3 (id=3623):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083b", 0x52}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec", 0xdd}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a04301", 0x29}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.874135955s ago: executing program 3 (id=3625):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.544460762s ago: executing program 3 (id=3626):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000002c0)=ANY=[]) (fail_nth: 1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

7.487341392s ago: executing program 1 (id=3627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3", 0xe7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9e", 0xb0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a", 0x6b}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76", 0x21}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.057127878s ago: executing program 1 (id=3631):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0)

5.577128608s ago: executing program 1 (id=3632):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaff0300000000000062c3c6aa409eaa2e0f75c2dd60c6dd00001c3afffe8000000010000000000000000000bbff0200000000000000000000000000018900907800fe0000004100000000c648c9d94ba10b83a9686a01368db1644caa27c3f8ba3a8d26e73eb14d2454aeccfe40aa7f097abd754e4e9cd837052386aebf99774dcc7dc024be"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"])
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [<r5=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})
close_range(r0, 0xffffffffffffffff, 0x0)
close(0x3)

4.633945827s ago: executing program 0 (id=3634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000140)={@remote}, 0x14)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = syz_usb_connect(0x0, 0x20c, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a03b3a1003181055bf7d010203010902fa0101000000000904c3"], 0x0)
syz_usb_control_io(r4, &(0x7f0000001180)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003d4000000d4034a3470339f1c44f935d2bac496e6231ff5eeae5a31b438b5e0c686e8470db155aa88adfc61da9bbd228397"], 0x0, 0x0, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x5, 0x3, 0x2, 0x3, 0x200}}}, 0x0)

4.433740477s ago: executing program 2 (id=3635):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x54c, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0xc6, 0xf6, 0xea, 0x10, 0xbb4, 0xa58, 0xeec2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53a, 0x2, 0x2, 0x6, 0x80, 0xf, [{{0x9, 0x4, 0xf9, 0xa, 0xa, 0x8f, 0x20, 0x8a, 0x38, [@generic={0xff, 0x7, "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"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "202dc02296"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7a, 0xb179, 0x9}}], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x9, 0xf3}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x1, 0x81, 0x3, [@generic={0x93, 0x21, "543813462ac00de16a816a48681d27a2205a9c811723b44ba81c5a4e1364ddcb28f5927cfe73b6a8af275e754f8c41f9b9a845146bbe269ddd866192b4c1a4e24746aa8bde7e3b145e468763a19c36758f2f8ee12ec7082bfab0261544bef0969d1c7c9efe545740611992bde8f654e266407ef1e63cda69285f91800e8356e30fd1c5695e9c8b40f23cb5de8fc472ad12"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x32, 0x200, 0xb, 0x9, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xe, 0x2, 0x0, [@generic={0x7c, 0x11, "da9a1f7d02137630f5fc0944f5b78c95476a4cc6a78f1e66bd8910fc97827a68559fe0d236e0306cef024eb15c0674db8d6573d73ceea3cbcd031ea3fce7ac7ae4f8227034c44daf9d65c97590f1da3a2f3b6ca6453296546ea4c239849dfa420241758173beec3d49456853071589666c385be917106625fc23"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6334}]}}, {{0x9, 0x5, 0x0, 0x0, 0x7ef, 0x2, 0x4, 0x0, [@generic={0x60, 0x24, "c1402ce2afb27e611e4d3fd1342fb0ba70b2815f9f7d785d9e16498fa89f16cf3be982fdd5b4e4dc4fae8794b119aefaccbb3e80622abf1abafd6c171ef1b9bc2558537259d136b1453e8d7fb784cd2cfbed1f1bc5be3b65c2af002bbe51"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x9, 0x80, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4a}]}}]}}, {{0x9, 0x4, 0xe8, 0x7, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "30744f9caba4"}, {0x5, 0x24, 0x0, 0x56f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0xfffd, 0x10}}, @hid_hid={0x9, 0x21, 0xb86, 0x2, 0x1, {0x22, 0x7a8}}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0x40, 0xc, [@generic={0x66, 0x10, "98947379d24b9ca2cee61751ab353d8d03e8eb3543081a9a0b2cdf34ac22d90c44200d22297ce76616a3123f50c3e4fed0cbb8fab2f3f457e4b6dd98343bbcfaabd274196af87a1bacc774d4e100875948c4fbbc533743d6a9f59ae1b44e6beee2c8b080"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xc, 0xc3, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x4, 0x92, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xd}]}}, {{0x9, 0x5, 0x5, 0x3de8621a740a71fa, 0x200, 0x7, 0x0, 0x1c, [@generic={0x3c, 0x10, "d6123b415fb38be75190568c8e54f4914c51cdb96644636c1bf2a6157e082b82d2a5c9db7b4425f8336ae9e1a01a460165a6f00f638768aea0a7"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x2e, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x6, 0x3, [@generic={0x8f, 0x11, "6c46857ed3727ffb3eefdd2c96a2dd473730aead19b83aa841d8188e1aef61d5a6df502cc364f80c98ebefb100c28dd89dd643731df41de9b001c6339383e4f414323493b925dd4953a9f355a3dad4d20b877d69fd736efd8ce12c23d46bdb4eea88a001eeeb5522e1ba3e028d05e597ec450413bc1e32ab13cdb2e9983dba1cfab8c5281604ae9d088d062fe5"}, @generic={0x65, 0x0, "63874ea7a4e83e3a9691d8fa1a616b5abe736451ea45f09b75d155fc865126da46a04cc3a40b096770b39054c1b81f673c5b812e0e06f53e644312687559fb5f1a8b31c6e191aac8cad8b070b36416b3daa0f9a9c198fd91ecbd0d9fc07d2a2fde9cff"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x2, 0x8d}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x3, 0x0, 0x0, 0x2}, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x409}}, {0x37, &(0x7f0000000480)=@string={0x37, 0x3, "e853b06e60f31530f5dd852363ad1647432f638e4c342a683a47841d41d6df7f8551da11074263f9522acf0f792ee773321d4a9ae7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "624c527d4aeeafd2198c43c44f86588ba2f7dcbce35903239e21e38efecaf678ec378c6c22be1209c120915b54ed1fa71c13ff7dbdd90f8df57a779de0e29aed46cfbbcfa1bc6aea47b0e844980b44fec6ba70ee2e79dee6e859a37b74eee79031fbd59faeba067e8fd5cfab62e4cc476c6942369ff43553da6cf04563343671e84791cf5357a97422d157ada0f4d8a45bce7cbdbdd2e31bd349eb0103a6fb429d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x443}}]})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x2400c0c0, &(0x7f00000000c0)={0xa, 0x4e2b, 0x805, @private1, 0xffffff11}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000120a01010000000000000000050000073c000480060003404e220000060003404e2400000800044000000400050005000d00000006000140000d000006000140fbfb000006000140803500006c1600000e0a01080000000000000000010000000900020073797a310000000008000440000000020900010073797a31000000000900020073797a310000000008000440000000010816038058010080100007800a0001006d61746368000000080102802c00010037a8e6c87190bfce8c93674dfbe2d56effdd6f6733af9845f3679977409ea13e0e86fb891df1bc2c7e000100cf360802647368261d1412145709c5073e25359f90553c41c2be8c445c2f21f3712c40032c7c5ba908eff0bec17ef17aaf601a6cf6628d933385073e0d3188ed5748306cbfa0d7af48a45143a796c3445ed9af728cc271cf700d8c956b0361c08487dc79ed14ed0a81cee29c88b8d0c760fce2159df93526d54300004c000100c4f9352dfa4efe7ccdb0f22ccb1f14d7623b50cc49305c336669fe92a10666308d86648c7943ff21f479163c06c611d333aaba4d0ec01ab482038d3cc8bb1c57ecc49ff44339daba0c00028008000180ffffffff0900090073797a32000000000c00044000000000000010000c000540000000000000003c0c00044000000000000000050900090073797a30000000009014008008000340000000000900090073797a320000000090010280580002800900020073797a320000000008000180fffffffc0900020073797a31000000000900020073797a31000000000900020073797a310000000008000180fffffffb08000180ffffffff0900020073797a3200000000d200010078b126d2ce28f4cca42807d7b8e5d62ff93683012692a417802ae6117fab968b7eb275b5964ecffe8fe8804a7f9457936b0890e539a45cbdf466badf82050250d22600e0e0c52f2192506ded34b81ff997f858139d9036ed1e546a2974d62b5af945ac52098ead021d8f319fa16e347fed7021e897f5734295c29ba38c2f5bd3ed74b7454334dc271b9a3f2510b14de8562515e1323957c0e5bcb34cdb9223f949beb235b44a6f43fba58e2f6c74b48898fd68f289059c14007deefdc3c742b4a12621cf8e388b7424b0b07371240000600001003893122bae88c60d9fad8c979f393cf43feb45b2f09bf6fca97ec3a78cc722e94167d484fa3f4c17e98dd4e7dea6db8a6f66efb29d093d9687aaf9ffacb770d32e1c6af278e7d785c7d79a75f94bcbd264c3093fd87542ed8073a92708110a800410010028084b1100d4b4f09cb796b02490d7d62562be5e59d29fcf068dd2bce8ff9b501fd1bd74e1b350adbebb2de938298ff865618a742dceb06a2aad6bf04c098a80cee27582dac5a89ea3a5ff8b86087160854e843e67749ddf20ab96bba495bd76ff9ede42ab81b63126bce075a22dc917ee3ed98f4d1bbb250fc600ac06306951128277c725364e702ce09dc9b520da0b18533a13b0ec7e113eeb2643848c55416b940747c0966df9dd1bf91203a55ee9e17a9510192ad2bf43324d1ccd9f47e42768691e9a56d56b732de8fd97c85819fb89764f46b64fb3681fdb6a507321901a1074bfe6092e855270b6d43ab9d8e3b99b64d0d09bcf8ecd7853585f889d6e781b7bc1a8a3c7362c4f9d661d1e5435f7f5527b6e343b1eee2f599c17541e5e3ab2db025d7ac718e5429398cdbc33460b6ddf7e8e9636543afb83e8058f1654b759a5c34fe836e0a1b60ea2c33ee44b258efed4d1e8550ef78f9d9aac4f8eb833fb5e1d94d5ddfe17848595ef64e35ce6e4da2d95582e7c8967b1d80f7377881ddb241e80e43d62a421397144a8a67b41c78a3deba7a1160a3bae0714ed6e80a98e491ef1c1809640ad94d92b8c8b16b0460cda65acc9c341db7c883adc8516c7e8a9bf0e127590a237fc03b7e8a8c7f77b247a4ff670a0b0331d019a7eaa0cc3bafd200c9969f67d7c82744e659eb26be6756025f1f68bbde682e283c37fe6836727fc700ad7c3ceb8bd0648fb7f9918f6de224e6fc5b177932321605c6a6c1f85c9395a1410c68e551e0c3a2092b4e5e5abdaaf15eb9a4602ac8510b593b90de3075577da6208b9fe05c2c17ad103d52a03ccbed52159b3e8bf5595bde60d54709fffa886d8f2c68d3fc22a8325b31af25ab8ef33a4e38bea406e948ab4022da359bce0e606ed37b650e9019f6cdce9a85051ed304e680f1011867bcf29755eb6496403944644bb09c6350f854df4cf2dcdb1938ea1a041d768396fe9028ab58e88b75b1bddef7f22501fb503f37355a177f7daca388456a2e402332139ba4a6e424ab19e669c804dfdd2217489c360fecdae0c8aaba8e2a3c00700a4a70a46732d36f693ebd4a6b6f88687e2ac61601877412742c91bf61bd48aa590dfa6028215797923db39de6090bbe9b97665f695d510efa9c878e56abf6e7f5bb1adc559a491e3dd9a3d0bfdd7e63fe9994d5571b4d7f047692f810d57644b5fe94a1f50ebab70850c4da8504fdc73e9f3dd02a7ec0d34e4a5c7211f2a561748e16065f5f4b832b64c8a251f820e2ac8d0c06f0d22e853163a41e9ba9f567918f323368e6c9f3a2411f01e1db3d4c55f1b4e035c8a1b4c58a23dd459a373859d3e81ef2d4b6186708db925c76c579d5246e86f90bb1d108a97665731fb5f922c8c114e79bff7db182cdda5901428abd99c7b82d4ac2ef152b470d82f5411c090f53352aa1cbe708d20ec55767dec938cba5750524d92e3bf562db0233e33630cf874490ad886549cd36b53f21e8c724e57d62126fd6470e9c48c6dfb612a3994c63920f4b5e1aa59a045f468de0dd41d0e1d933abaca83da6858248edf5baabecf1cb47d6e24e2c80a37e73e139f60caf80240fe73391b363683e1cc71b039dd561263cce0472244aa341c402b6477a9fdc74610cfa3cd1e51938dd2a592c3bd81dea3766299c3b51ff43fee7d61d14b1cc84d395b2a755b7dc4d9dd734892ab6d70bfa25c33a2254b69ca131bcef6ab5058734ae53b952a5319a3663501e25254738cc94c9c031677ce1da81bfdfefe0975b99ecbac282a803bedb71790f8d44efa31cc38afc237976f7a9f6564970d84c5601f5bb04d112e62c3beafecd5961770e6d80aa9adc0afd54f0042f43656804e15c101b2518c20290e37f552adac09a1456470ae02d78645d96ace839fc3582737eda2c26c550182e9b570dfb17b275490c171b05d6eaf0f0f1d15673d562030352cbe9566abe30052bcc8b92f3f71fa845577ec5df66f15e472875b6aaf434ca738dcd0f0eabc909edcafabc02957c220eba2b380685c5d9064b9e47c5c0ad74f574e52e02ce4a0019653c9c0ba953b1938e5cbb081a9261428bae63286896f17acb0901847ed6d88f56a3216d80bb64e670218f2e2b5793825755fc9b312c480aeb1a0b23e576189bdfe9415f2213f04253e05d03a1a9e59a18cdcf013235157bce7850865756bc91e12ea01d58f74f3ac81e120dacb54292f164d3f1b7e8700a2f61a33452706064b60d520c268cec7d4b9ddca7d69c6ba2360a02c49278b76f1926201b6475e752e7c8e1395f6aad154ac13508d4157f966a1036c6cd378a7dd545470b39b5f324e50787336cb693b0db212313a1737f371483a088716932181bae8d62182dc10459dc1f030e963405d1a86299130b1f97dea83c9ce46ebfddbb5258ee9c080ec6fc063a34c79bf54be7b301aeb63ccde1536b393b9bcd5398c720001e6048af386d9f3c48899ec3bf7f3d2d4c27c0aadb459e1dc13a052c61d0bcf374375424bdeb8391d4b91b63ae2487455d2329750071ed0df31ba6e795f50b3614efef37ccde91e885d83e2f4b3f08aab53ce407ee4ec0995522e03bed9e7170c73f36eba5f30f99f938f0b504d3efa30ab1344ae21485fd32a38226d9381e1074ab9577ed1b358757a445957aea1559a9826c2fdda92149c985a57c92d04f9257eef0515a953769983ddba50b18601151f89eb60754286cff484e02a3cc0039f5263256ee9c3f5e711295cf79230bdbf5c665c47dec93c8448572051e32086db2a131966695c9bfff122d7ac6e8b13933df8d09d01d6fdb9c37caeeb1253e2dcfeecb688a7ce66f304b3412bb179d0f671fbe9fc7ae243a208d4412517c7e4bd91531ae65c5f190b33d5c03e68d18c3893a105a704c2349628220600893528a13a73342ea3d0de8a746cd4a75e2b00340a75131c36b41ba511cc9a8fa54408d198c15735e91603e2a1087c6ac1f2d9f9c2ec2c9430befaacb1570fb902edf138880c9d01adb65d52f56a3d47ab99521c22e913f80aaea36c98cc9b163f34a9bb0f03efe00fc594e92b0c4e034b0f25d4f0d218342bf69292180bdd5c46ccba463c269036c14a634937c24bb5e31a8a8108191e49ce89ef3f0e9d9f4e8af5317307badc8bc36cdcd27af22975fef670141d810c80076cc908d369cab400c3fcc72f9d2b1eed794a33852cb7bc9e25841cf335e027d0e2d6ee0a97d5c3e59950f1794e0c2f993cd2748b6c149f3f9df175ed424c97d1e028e7511fd29bf38e6075f8138d75676765800fe8769f89ba50140406524965576397474aa6601a5f2de73995689af62a79a33ffe0792827818cb4ea36f0c8ecbf21682f4ce9a7691291d6f04380a4c69dc453e6792f2017742c36b205ca41f7d958e0d64e39c985efaa11a1666e1e2293701f07bc14f06c9dffd8a5082d4cd195ae6182ecb27ea621c98c85e8d776524952621235b2a9a40fc655a81d4b27e211e8d825930df37c521d53b6097f0fc27fe6a8368f54eefe08fc99ac9b7b61dd708742dd1bc567af81bef032297b5d47e064de58db97c3b02d91c501afda16074483eb76557f47ca2c4d68019a4c9eac6c9e817668f68f3a258ac58d595eaf8d6c01accacbdf7c0c6791b8807a9b6f46ce0190a28cb412707219d6ec8b18f4c642128fdbed389f26c974f00ba8ef918cc4b684b897657daea559ee32292e37c3acd817880231f5a6635aa1f688acc6ca8d626ec4332376c02c9bcbe74ac3ccc81ff05671f751c282a187c369f4f0075fe080afbe10c42c8989305162e329d95fdce49cd8b0a66930f9b78bee2856bead0fbfcee95998d19c45cde85f4f2bd365fd1477e31dd5d188b798571f8828168db7314f7bfa1db7889e244bf4f59a19ea09397371f7e3482999b9fcc8aaac77bb1c133817bd507669fcc0cc11c57c3ac67101e58c3e90048f6491543e150bfecc3be8001031a3b0e0724cdef9e637353da05d886b7b4195d2416606634605857d4a83b0df522bbee30da979d9588b022bd75b382d5ddcc0524ce503a9ae79f089798a655b57a72ae77898a85e0e25edbefba5511214c5bf12adbcfedef512b1f4fae59ed8c1f62bd4bdc23ec6c005bac94902745bfde25c5cc78c2d04cea13a332020eeddebfffd6793e1c8388e8b458d9955055a14226a1f57fcc9b7fc929c70ea10d47d51d8ddfacdae91b2dee1437dde77df0bd2f0f1e42e1cbe3befe3f2713a410af1124dfd55b4fe4a6ce9da2fffe6a8078db5c393a722bfc5a25303bcad6a18312f86e84fe629626f04f5e77e0d698d9624da2c0698238946a4f94bce8418d3141b3ee8441455ba4961793cee00b5140d931e2510130dc602d878e609a524489407b05a4f9ededb1291eeb7e305f49d60dc94c9db40a20ddb9344b5d2e290b5b403c5119cfde411f6b383b471451d6500badaaf614734e09a429a9cc25a5d7d1bc8f893ffe49d77a05aa84df283667642b9622f5c88cae9a501101062de76ae68b81db3778c55bffcdc067b26c6dc83fd711820080a342e1d9cbf81c10f79462ef2d634663948f198e6af577f41456f952a5f95abc0d03d3c022f49b12e7ffa0408ffacbc026180c2f252d4c09edd88583f5cf12a107096561841d24d2ce78412b8dc3c638991f6f0e1d5f019399da550875bb4948dcd2866efbdabb84c660be895d0ccb1cb9880c631e11060fbacacd9c1999fcaa531f48007b0d5adbe3749baf86282d002ee97ba8beb0873d958dba3cd4e66630f193cb51e3d0b23d8016e2fa11f7f7c43f47631e2a3c990f19f48400bbf7270bd2d2d75426e8b9fd38403ea8079cfca72a7e5e8870a9e76314aa3d6905db311eaa1c77702866721003cd04fab44645b33d4031702edd072bfb38a4807221e4ce116bb0b547331629f5f84d1fb9705def3af942022527e947ecc681524158839512ed7da6adcdb2c3d03843655201a6ef4d3549939f48ba688aaacfed2aa39efdc23505eaef2404c6480a5b0e6caa27eb36575e06a3abbe1a519b13c1f4b68ad4daa766452caa3ead6e83f682f78af2272f59c2439e0bf8fe6691437c889d34dec1c9371d87fde6625e9f709c39bc99fa14d497235cb548cd06e0cfc1e0c1f303a2b2fb741743aee9d3bb7d099a4cc73dc8cbf518f3a33a34761581318ecddf38527189160dae7ede6bbd8b9c938ad7325c13ac093778eae9da986ec53767364eebb4bed98e15a2d551c6d45c54830b9068802941bcc51a7d30e087394511756ebe99816dc147ade56c1aa3ddbbba3536a461775e5f3e478978fe9d76c8869503c70cb5d28b6525331e216a032c8b5a63ff8df3282b8df6e82a3564d98847c9339ee8865a94a675a1d2713551c9611b6359c202c652a290728e87e16c906d2bca2d17302affc0bbb5aeb48a40243a1a1f64f435d13aa49f530468d59b7c5247002a031ae5383a1ee0fd07d1d377535d5bf7cdf95c4ad407d33ae423666b4c5da00379351c4081871645480c5c84a7fa8c2312c019d319d748c429c3f3c5e494a30f4f3af1f3af280095349fdf3e59e999c15ed4a82814be38a9385aa5368f342b52a41427179154cd5e7648f5ed64686537675d7d8a155238630b02a843bbb4fc2433d20c116e029b9313da98303dd6b4b521b8abaa5a56c6daf11b5ed5e3c508087cb69e47183c80cab6a7a513c52dc0812595267b73c83add5c8a70de5da9058077fd1b8e9e9ef9b62e301820cdfa0673cf58b4389cd170d977f1a872ad302ccf0a774af968100002800900020073797a3100000000ed00010008a87b2f06cb98a7d02d0de19ae39fec676f8c47ce289c224194357496b92df2a2a88accf5fc7615512090fcb8e9814e9af28f10923794f8627fd9c7ff9bd8b1590a00120f7cd4348a57edc312c745ccbaabbb7db70bc4fcd292d8fdebae8f92d8b1277c7238ab63f97b5ca50e761cd81ad49462cf8a48ffeac870dc5f5f5bae2d3729b6e0680b1733db74c138ff26f3e1159df50af87cc81a4bc6b04ca379b114446965107628253e38c5592839c183658dafe8ad16221bb486ed1731021619387cde0c4a14197440ff233b1e491900b2b9dff4eaee1186aab8bae1a91bceda3d67762a953b000000e00102808000010054ad62a8e4d58e4768d78941f2448408526f2172f124727842a5bb771c27c9e6333256f30bd0ba0009c67195d591a5f021566f6655df7cbbce2b60a2947419c01ebe5e9279aae293c30a8b12c129d7bf0283fc3b5d65ac298d7f9a83b5498d3c992e3b2c2ee0c8695b91916265cbada156280dc5b836c717b7cb121b2c0001007ad9cd2f785d56c631ade2b001fb8040e0bf6f8ec1350609f26476a5a3ba89bbd0b16d8b1dd84caebb000100d5da8189ad08cb020b3e76d84d38ad50f382c34faa3787fae660d91861e2fadd0bc33e1cd868c72fdc9e7e6bff608d612e694375af4c80d1bd89398d56ac25025afc9aa8e7124558b7ca28e445aee1b5d598b3014af1da589fe77452ab5c30a6db299128b0ec5244e5afefc5c1bcfa2cad65354f32734a079fbd1984b1fa835457119000f88b48b81c98640f8e8bbfd5094123696dc9afd46f06c732136eeb0b68906c8ebf49b45adebd7357982b057e5bdf715aa120d500300001003079930732d60c5a3bc2634dfa7df8d2f1137bc9f34b4e59eeaa5ed0e4beb5c357788c60223eccfa5e2c3146440002800900020073797a3000000000080003400000000308000340000000030900020073797a30000000000900020073797a31000000000900020073797a30000000001c00008018000640fb0d3103578c6f503439fccf716d93c965d8528f0900010073797a300000000008000440000000030800044000000002140000001100010000000000000000000000000a57b103c311a2a65eb4f178a57e5119f94d89ccabed7dbcc3ee5c5a0c93fa6fec95399311859a29bc52d558e2d5ba142025f9f80445d30f7a0ad530711748f5ef332bc24e6af726d474ccfe14d66c6147ce2392934e15410bed76711476c50bb3835a87ebbcbf5c33cbb9926f73913809a201568b757f6f150947b79db77007e6091707d4ce01ee576f4492fbfcb6af979ab976f19a29d330655bdf22ae664f08d1f099efb783aa2cd58704fb81a77b36d51903888a0067869279f484874b5a68bc9e299d241af225342324f24ca068275786a11de3f07e328b3bf172466ae183c5d3f19d18a678319b8915f6eebd3a7610b6f7c21a7efe506e545b4b577a00"/6114], 0x16e4}, 0x1, 0x0, 0x0, 0x40800}, 0x850)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)

4.384965651s ago: executing program 3 (id=3636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6a", 0xaf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3", 0xe7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083b", 0x52}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9e", 0xb0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4d", 0x6c}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.35554345s ago: executing program 1 (id=3637):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x8, 0x2, 0x18, 0x7ff, 0x2, 0x3fc, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x1000000e, 0x4623f, 0x0, 0xf8, 0x3ff, 0x7ffd, 0x0, 0x4, 0xc, 0x2, 0xba55, 0x8da8, 0x3, 0x200, 0x7, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0xa, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0xfffffffc, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x8000, 0x6, 0x1, 0xffffffff, 0x3, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x2, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0xd0d, 0xfffffff9, 0x0, 0x7, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x8000080, 0x9, 0x3, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x85a00000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0xb, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0xfff, 0x3, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0xff, 0xb, 0x1402, 0x1, 0x5, 0x1000, 0x7f, 0x4, 0x1000005, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x28d0, 0x3b, 0x20000001, 0x5, 0x7, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x41, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x3, 0xfffffff8, 0x401, 0x8000, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0x12, 0x101, 0xf, 0xe, 0xff800, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
unshare(0xa000680)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

3.007871878s ago: executing program 3 (id=3638):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x54c, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0xc6, 0xf6, 0xea, 0x10, 0xbb4, 0xa58, 0xeec2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53a, 0x2, 0x2, 0x6, 0x80, 0xf, [{{0x9, 0x4, 0xf9, 0xa, 0xa, 0x8f, 0x20, 0x8a, 0x38, [@generic={0xff, 0x7, "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"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "202dc02296"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7a, 0xb179, 0x9}}], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x9, 0xf3}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x1, 0x81, 0x3, [@generic={0x93, 0x21, "543813462ac00de16a816a48681d27a2205a9c811723b44ba81c5a4e1364ddcb28f5927cfe73b6a8af275e754f8c41f9b9a845146bbe269ddd866192b4c1a4e24746aa8bde7e3b145e468763a19c36758f2f8ee12ec7082bfab0261544bef0969d1c7c9efe545740611992bde8f654e266407ef1e63cda69285f91800e8356e30fd1c5695e9c8b40f23cb5de8fc472ad12"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x32, 0x200, 0xb, 0x9, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xe, 0x2, 0x0, [@generic={0x7c, 0x11, "da9a1f7d02137630f5fc0944f5b78c95476a4cc6a78f1e66bd8910fc97827a68559fe0d236e0306cef024eb15c0674db8d6573d73ceea3cbcd031ea3fce7ac7ae4f8227034c44daf9d65c97590f1da3a2f3b6ca6453296546ea4c239849dfa420241758173beec3d49456853071589666c385be917106625fc23"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6334}]}}, {{0x9, 0x5, 0x0, 0x0, 0x7ef, 0x2, 0x4, 0x0, [@generic={0x60, 0x24, "c1402ce2afb27e611e4d3fd1342fb0ba70b2815f9f7d785d9e16498fa89f16cf3be982fdd5b4e4dc4fae8794b119aefaccbb3e80622abf1abafd6c171ef1b9bc2558537259d136b1453e8d7fb784cd2cfbed1f1bc5be3b65c2af002bbe51"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x9, 0x80, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4a}]}}]}}, {{0x9, 0x4, 0xe8, 0x7, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "30744f9caba4"}, {0x5, 0x24, 0x0, 0x56f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0xfffd, 0x10}}, @hid_hid={0x9, 0x21, 0xb86, 0x2, 0x1, {0x22, 0x7a8}}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0x40, 0xc, [@generic={0x66, 0x10, "98947379d24b9ca2cee61751ab353d8d03e8eb3543081a9a0b2cdf34ac22d90c44200d22297ce76616a3123f50c3e4fed0cbb8fab2f3f457e4b6dd98343bbcfaabd274196af87a1bacc774d4e100875948c4fbbc533743d6a9f59ae1b44e6beee2c8b080"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xc, 0xc3, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x4, 0x92, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xd}]}}, {{0x9, 0x5, 0x5, 0x3de8621a740a71fa, 0x200, 0x7, 0x0, 0x1c, [@generic={0x3c, 0x10, "d6123b415fb38be75190568c8e54f4914c51cdb96644636c1bf2a6157e082b82d2a5c9db7b4425f8336ae9e1a01a460165a6f00f638768aea0a7"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x2e, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x6, 0x3, [@generic={0x8f, 0x11, "6c46857ed3727ffb3eefdd2c96a2dd473730aead19b83aa841d8188e1aef61d5a6df502cc364f80c98ebefb100c28dd89dd643731df41de9b001c6339383e4f414323493b925dd4953a9f355a3dad4d20b877d69fd736efd8ce12c23d46bdb4eea88a001eeeb5522e1ba3e028d05e597ec450413bc1e32ab13cdb2e9983dba1cfab8c5281604ae9d088d062fe5"}, @generic={0x65, 0x0, "63874ea7a4e83e3a9691d8fa1a616b5abe736451ea45f09b75d155fc865126da46a04cc3a40b096770b39054c1b81f673c5b812e0e06f53e644312687559fb5f1a8b31c6e191aac8cad8b070b36416b3daa0f9a9c198fd91ecbd0d9fc07d2a2fde9cff"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x2, 0x8d}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x3, 0x0, 0x0, 0x2}, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x409}}, {0x37, &(0x7f0000000480)=@string={0x37, 0x3, "e853b06e60f31530f5dd852363ad1647432f638e4c342a683a47841d41d6df7f8551da11074263f9522acf0f792ee773321d4a9ae7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "624c527d4aeeafd2198c43c44f86588ba2f7dcbce35903239e21e38efecaf678ec378c6c22be1209c120915b54ed1fa71c13ff7dbdd90f8df57a779de0e29aed46cfbbcfa1bc6aea47b0e844980b44fec6ba70ee2e79dee6e859a37b74eee79031fbd59faeba067e8fd5cfab62e4cc476c6942369ff43553da6cf04563343671e84791cf5357a97422d157ada0f4d8a45bce7cbdbdd2e31bd349eb0103a6fb429d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x443}}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"/6114], 0x16e4}, 0x1, 0x0, 0x0, 0x40800}, 0x850)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)

2.533196862s ago: executing program 1 (id=3639):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3", 0xe7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9e", 0xb0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4d", 0x6c}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b", 0x1d}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.452183338s ago: executing program 2 (id=3640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3", 0xe7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083bef", 0x53}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9e", 0xb0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a", 0x6b}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76", 0x21}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.199032123s ago: executing program 1 (id=3641):
r0 = timerfd_create(0x9, 0x81800)
fcntl$setsig(r0, 0xa, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x22000a, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@directio}, {@cache_none}, {@afid={'afid', 0x3d, 0xab}}, {@noxattr}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
fcntl$lock(r0, 0x24, &(0x7f00000001c0)={0x1, 0x2, 0xa9d, 0xfff, r1})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xa080, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000240)=0x4, 0x0, 0x4)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x10001, 0xa7)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x114, &(0x7f0000000340)={[{0x2d, 0x4e00, "1ab383095df45a02807fc457f37be8e0cf138f6e18ddc7002718a7ced24966c53607530ea1ccd9b95371a08b86"}, {0xdc, 0x4e00, "8cf5ff53f92efa37cd51a2d936cfbdd78b9620c551c3cb4e0c6eb172415987e916294f74d293c6bd73be63dbf9d803e74d098d1f29799357c4e2afc9ef5830844049a33f1cee1f11718570124818124bcf5c8361ef6462e0a235e6913b6ecd59b263142f83e39a258eebbff7fbbe8ed6acdc9c5f418ab1ec72b4d98d5ae50507de6af8971707449e06f8a1eddbe63ae0271b6a532ed454372da153d50724202d3a0708781d98bc150a4ce3891c4e047b1bec646b8cde2d1a8c330dbe22d3cf8170ec13872f551f7fc35b7090cf596f8c160a95fd84f45e4fad1e1123"}]})
syz_io_uring_complete(0x0)
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000640)=0xe8)
setreuid(r4, r5)
ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000680)={0xd4, 0x0, 0xf})

2.156224988s ago: executing program 2 (id=3642):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20)

1.981821936s ago: executing program 2 (id=3643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async, rerun: 64)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) (async, rerun: 64)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000080), 0x4001) (async, rerun: 64)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 64)
recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async, rerun: 64)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be0044affffe80000000000000000000000000002543b5aaff02"], 0x7a) (async)
landlock_restrict_self(r4, 0x0)

1.833990907s ago: executing program 2 (id=3644):
r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x2b)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r1)
open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
openat$cgroup_devices(r0, &(0x7f0000001380)='devices.deny\x00', 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000013c0), 0x4, 0x2)
sendmmsg$unix(r6, &(0x7f0000000940)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="7ea2811ead359c7acc914cd7d4c5e535a4046c0259abb72f3ba35ff9573194f37d104c83a851046aab388d25bd96aad3d8d16335a6a91972328a1afadbac561e7f4c96e10936478035e3742efaf97f21e9755b2f1e4b40017adf2ccc0dd5fd6679ca88af889470f15dc15fbe81e9ab999e9d3f19c27327cfd5a6ec421f7b9d29940d522aba9da46e4174169d4232341a3c306cb89a236460ec302c298e0bbb9a30c382d68abc77a3ccdb79bc6987795a9e2bad737dfe52050f654659a6256591e4b3f41209629765ad52942527aa818e6f94800afdaedb8256ec7456988d33d91df0352098", 0xe5}, {&(0x7f0000000100)="87471110810e3787f1f867f1323a55e8c2ca73c09942c5d795acf8ca8c6833dc04f7ad60db1b", 0x26}, {&(0x7f0000000480)="cf2ddfef0316426f6180eec4b53ce135241d5347557e185e468228ae4d4625b5fcc811fdc4d558314c7252ebf102fe7cd966a293fe7ea43168f9db809387925f60b613d3a2546b02a3b42c57b053850a8f2541cf6c962abe0bdbdc9421beb9d1455af8efd79ece26458d0734c974f45c43b042cc9766ede13efe4f412143c5b3aa951c097cb1bc66f32d098b94408ff8638a244b9cf9b40f4f6813", 0x9b}, {&(0x7f00000002c0)="a76d6554fbfea1e4514323cbe3049a87f61d68177ebdf818648760fb6e41ca9f2b47e446dd45621036e0b37a20f1532160b9ae5e2ccbc88e2d66d9c3311a9d9e68bc0a706a08a82c5f85b04292d3", 0x4e}, {&(0x7f0000000540)="4c9417602c1b4d38d847d7cbaab541118cbfc0311243a58dd94f3bb1d11ed0e89b6d9b635deba467d81af6060467dcad8f102580e58e8d34a5b8d46dba3ccc749af74f9a65bc40d66386203bea38a3a1ef71e582d807afc3b7c022669b61780635e17f6349701c20fd4e7a88f23de6f88a77917fed879cd2ce1e04330e29153bca1dc8034af3424a06b36b4b9ddf9d4d", 0x90}, {&(0x7f0000000600)="56ebe50a9977fc39dafb9740c3124a8b9e5250fce69fda2127020bb52a055493a8708b9d73943b1b76e8f584c771f615dc8f6e934113a3e14dccb03426945d81d9f1e5c7ed0b73a31ae9def43438990f017aead151aaf750bd53256e5e902666f9502f297a5d9302523dd537cf2b3ee1fa267f4cf83bff6cac", 0x79}], 0x6, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20, 0x20008000}}], 0x1, 0x24000000)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

912.157525ms ago: executing program 2 (id=3645):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x993e2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (fail_nth: 1)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
syz_open_dev$sndctrl(0x0, 0xb06, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

0s ago: executing program 3 (id=3646):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x100)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2}) (async)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x1, 0x1, {0x1b, 0x11, 0xb, 0x8, 0xb, 0x7fffffff, 0x5, 0x7, 0x1}}) (async)
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

b9
[  722.979661][T14655] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  722.979672][T14655] RBP: 00007f8d009e6090 R08: 0000000000000000 R09: 0000000000000000
[  722.979683][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.979693][T14655] R13: 00007f8d02a06038 R14: 00007f8d02a05fa0 R15: 00007ffc8eb16618
[  722.979717][T14655]  </TASK>
[  723.015437][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880340ee800: rx timeout, send abort
[  723.017866][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880340ef800: abort rx timeout. Force session deactivation
[  723.237059][T12591] usb 4-1: USB disconnect, device number 39
[  723.362580][T13741] usb 1-1: USB disconnect, device number 36
[  723.491734][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880340ee800: abort rx timeout. Force session deactivation
[  725.470399][T14690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  725.470429][T14690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  725.475533][T14694] vhci_hcd: connection closed
[  725.501513][T14690] vhci_hcd vhci_hcd.0: Device attached
[  725.540899][T12352] vhci_hcd vhci_hcd.3: stop threads
[  725.543290][T12352] vhci_hcd vhci_hcd.3: release socket
[  725.543420][T12352] vhci_hcd vhci_hcd.3: disconnect device
[  725.631420][T14709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3192'.
[  725.677976][   T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  725.828458][   T31] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  725.828495][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.828518][   T31] usb 2-1: Product: syz
[  725.828534][   T31] usb 2-1: Manufacturer: syz
[  725.828550][   T31] usb 2-1: SerialNumber: syz
[  725.877365][   T31] usb 2-1: config 0 descriptor??
[  725.892641][   T31] gspca_main: sq930x-2.14.0 probing 2770:930c
[  726.135290][T12591] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  726.163940][ T5886] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  726.283444][T12591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.283482][T12591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.283524][T12591] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  726.283558][T12591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.295993][T12591] usb 1-1: config 0 descriptor??
[  726.328865][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.328909][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.328987][ T5886] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  726.329048][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.385111][ T5886] usb 5-1: config 0 descriptor??
[  726.770828][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771594][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771630][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771658][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771917][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771949][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.771977][T12591] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  726.862077][ T5886] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  726.862118][ T5886] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  726.862146][ T5886] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  726.940106][T12591] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  726.992296][   T31] gspca_sq930x: ucbus_write failed -110
[  726.992400][   T31] sq930x 2-1:0.0: probe with driver sq930x failed with error -110
[  727.004267][ T5886] cp2112 0003:10C4:EA90.0014: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  727.089352][ T5886] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00
[  727.094527][T12591] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00
[  727.651120][T14718] FAULT_INJECTION: forcing a failure.
[  727.651120][T14718] name failslab, interval 1, probability 0, space 0, times 0
[  727.651152][T14718] CPU: 1 UID: 0 PID: 14718 Comm: syz.0.3195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  727.651175][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  727.651187][T14718] Call Trace:
[  727.651194][T14718]  <TASK>
[  727.651203][T14718]  dump_stack_lvl+0xe8/0x150
[  727.651238][T14718]  should_fail_ex+0x46b/0x600
[  727.651263][T14718]  should_failslab+0xa8/0x100
[  727.651293][T14718]  __kmalloc_noprof+0xdf/0x7c0
[  727.651318][T14718]  ? kfree+0x4d/0x8f0
[  727.651339][T14718]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  727.651362][T14718]  tomoyo_realpath_from_path+0xe3/0x5d0
[  727.651383][T14718]  ? tomoyo_domain+0xd8/0x130
[  727.651415][T14718]  ? tomoyo_path_number_perm+0x219/0x630
[  727.651441][T14718]  tomoyo_path_number_perm+0x246/0x630
[  727.651470][T14718]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  727.651496][T14718]  ? __lock_acquire+0x6b5/0x2cf0
[  727.651521][T14718]  ? do_raw_spin_lock+0x12b/0x2f0
[  727.651583][T14718]  ? __fget_files+0x2a/0x420
[  727.651603][T14718]  ? __fget_files+0x2a/0x420
[  727.651617][T14718]  ? __fget_files+0x3a6/0x420
[  727.651633][T14718]  ? __fget_files+0x2a/0x420
[  727.651652][T14718]  security_file_ioctl+0xc3/0x2a0
[  727.651692][T14718]  __se_sys_ioctl+0x47/0x170
[  727.651716][T14718]  do_syscall_64+0xe2/0xf80
[  727.651742][T14718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.651760][T14718]  ? trace_irq_disable+0x37/0x100
[  727.651785][T14718]  ? clear_bhb_loop+0x60/0xb0
[  727.651807][T14718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.651824][T14718] RIP: 0033:0x7f70ad6daeb9
[  727.651842][T14718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.651858][T14718] RSP: 002b:00007f70ab92e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  727.651877][T14718] RAX: ffffffffffffffda RBX: 00007f70ad955fa0 RCX: 00007f70ad6daeb9
[  727.651891][T14718] RDX: 0000200000000680 RSI: 0000000000000720 RDI: 0000000000000004
[  727.651903][T14718] RBP: 00007f70ab92e090 R08: 0000000000000000 R09: 0000000000000000
[  727.651915][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.651926][T14718] R13: 00007f70ad956038 R14: 00007f70ad955fa0 R15: 00007ffea7999928
[  727.651956][T14718]  </TASK>
[  727.657728][T14718] ERROR: Out of memory at tomoyo_realpath_from_path.
[  727.658165][T14718] cp2112 0003:10C4:EA90.0013: Error starting transaction: -38
[  727.711759][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  727.712344][T12591] cp2112 0003:10C4:EA90.0013: error reading lock byte: -32
[  727.767328][T14720] cp2112 0003:10C4:EA90.0013: Error starting transaction: -38
[  727.970426][ T5886] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71
[  727.999459][T12591] usb 1-1: USB disconnect, device number 37
[  728.061679][ T5886] usb 5-1: USB disconnect, device number 49
[  728.102685][T14743] tmpfs: Bad value for 'nr_inodes'
[  728.605779][T14754] FAULT_INJECTION: forcing a failure.
[  728.605779][T14754] name failslab, interval 1, probability 0, space 0, times 0
[  728.605817][T14754] CPU: 0 UID: 0 PID: 14754 Comm: syz.2.3209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  728.605844][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  728.605858][T14754] Call Trace:
[  728.605867][T14754]  <TASK>
[  728.605877][T14754]  dump_stack_lvl+0xe8/0x150
[  728.605913][T14754]  should_fail_ex+0x46b/0x600
[  728.605941][T14754]  ? vm_area_dup+0x2b/0x670
[  728.605962][T14754]  should_failslab+0xa8/0x100
[  728.605997][T14754]  ? vm_area_dup+0x2b/0x670
[  728.606016][T14754]  kmem_cache_alloc_noprof+0x83/0x6a0
[  728.606056][T14754]  vm_area_dup+0x2b/0x670
[  728.606083][T14754]  __split_vma+0x1d5/0xa30
[  728.606122][T14754]  ? __pfx___split_vma+0x10/0x10
[  728.606161][T14754]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  728.606205][T14754]  vms_gather_munmap_vmas+0x2f1/0x1320
[  728.606238][T14754]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.606281][T14754]  ? mtree_range_walk+0x6aa/0x840
[  728.606318][T14754]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  728.606354][T14754]  ? mas_find+0xa7d/0xd30
[  728.606389][T14754]  mmap_region+0x85c/0x1f50
[  728.606414][T14754]  ? __lock_acquire+0x6b5/0x2cf0
[  728.606446][T14754]  ? __lock_acquire+0x6b5/0x2cf0
[  728.606478][T14754]  ? __pfx_mmap_region+0x10/0x10
[  728.606574][T14754]  ? __lock_acquire+0x6b5/0x2cf0
[  728.606632][T14754]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  728.606673][T14754]  ? cap_mmap_addr+0xaf/0x100
[  728.606706][T14754]  ? bpf_lsm_mmap_addr+0x9/0x20
[  728.606726][T14754]  ? security_mmap_addr+0x71/0x240
[  728.606765][T14754]  ? shmem_mapping+0xd/0x50
[  728.606794][T14754]  ? memfd_check_seals_mmap+0xcb/0x210
[  728.606822][T14754]  do_mmap+0xc2f/0x10c0
[  728.606859][T14754]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.606897][T14754]  ? __pfx_do_mmap+0x10/0x10
[  728.606922][T14754]  ? rwbase_write_lock+0x568/0x730
[  728.606968][T14754]  vm_mmap_pgoff+0x2cc/0x4f0
[  728.607004][T14754]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  728.607038][T14754]  ? __fget_files+0x2a/0x420
[  728.607057][T14754]  ? __fget_files+0x3a6/0x420
[  728.607075][T14754]  ? __fget_files+0x2a/0x420
[  728.607097][T14754]  ksys_mmap_pgoff+0x4e8/0x720
[  728.607127][T14754]  ? __x64_sys_mmap+0x7f/0x140
[  728.607154][T14754]  do_syscall_64+0xe2/0xf80
[  728.607184][T14754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.607204][T14754]  ? trace_irq_disable+0x37/0x100
[  728.607232][T14754]  ? clear_bhb_loop+0x60/0xb0
[  728.607258][T14754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.607280][T14754] RIP: 0033:0x7f8d0278aeb9
[  728.607300][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.607320][T14754] RSP: 002b:00007f8d009e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  728.607343][T14754] RAX: ffffffffffffffda RBX: 00007f8d02a05fa0 RCX: 00007f8d0278aeb9
[  728.607360][T14754] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000fa2000
[  728.607375][T14754] RBP: 00007f8d009e6090 R08: 0000000000000003 R09: 0000000000000000
[  728.607389][T14754] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  728.607402][T14754] R13: 00007f8d02a06038 R14: 00007f8d02a05fa0 R15: 00007ffc8eb16618
[  728.607437][T14754]  </TASK>
[  730.250710][T14769] FAULT_INJECTION: forcing a failure.
[  730.250710][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  730.250746][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.3.3214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  730.250772][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  730.250785][T14769] Call Trace:
[  730.250807][T14769]  <TASK>
[  730.250817][T14769]  dump_stack_lvl+0xe8/0x150
[  730.250852][T14769]  should_fail_ex+0x46b/0x600
[  730.250881][T14769]  _copy_from_user+0x2d/0xb0
[  730.250910][T14769]  __sys_bpf+0x229/0x920
[  730.250943][T14769]  ? __pfx___sys_bpf+0x10/0x10
[  730.250970][T14769]  ? rt_mutex_slowunlock+0x1cb/0x300
[  730.251007][T14769]  ? ksys_write+0x248/0x270
[  730.251036][T14769]  ? __pfx_ksys_write+0x10/0x10
[  730.251070][T14769]  __x64_sys_bpf+0x7c/0x90
[  730.251097][T14769]  do_syscall_64+0xe2/0xf80
[  730.251125][T14769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.251146][T14769]  ? trace_irq_disable+0x37/0x100
[  730.251174][T14769]  ? clear_bhb_loop+0x60/0xb0
[  730.251200][T14769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.251220][T14769] RIP: 0033:0x7f3bf1eaaeb9
[  730.251240][T14769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  730.251258][T14769] RSP: 002b:00007f3bf00bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  730.251280][T14769] RAX: ffffffffffffffda RBX: 00007f3bf2126180 RCX: 00007f3bf1eaaeb9
[  730.251297][T14769] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[  730.251310][T14769] RBP: 00007f3bf00bc090 R08: 0000000000000000 R09: 0000000000000000
[  730.251323][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  730.251336][T14769] R13: 00007f3bf2126218 R14: 00007f3bf2126180 R15: 00007ffc3505f198
[  730.251389][T14769]  </TASK>
[  733.869304][   T31] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  733.953994][T14802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.955154][T14802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.033211][   T31] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  734.033275][   T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  734.033305][   T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.033330][   T31] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  734.033359][   T31] usb 1-1: config 7 interface 0 has no altsetting 0
[  734.033396][   T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  734.033422][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.184158][T12591] usb 2-1: USB disconnect, device number 43
[  734.389279][T14807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3229'.
[  736.070441][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  736.071443][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  736.333292][   T31] usbhid 1-1:7.0: can't add hid device: -71
[  736.333436][   T31] usbhid 1-1:7.0: probe with driver usbhid failed with error -71
[  736.402040][   T31] usb 1-1: USB disconnect, device number 38
[  736.480293][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'.
[  736.826948][T13741] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  736.972231][T13741] usb 2-1: unable to read config index 0 descriptor/start: -61
[  736.972273][T13741] usb 2-1: can't read configurations, error -61
[  737.362811][T13741] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  738.934999][T13741] usb 2-1: unable to read config index 0 descriptor/start: -61
[  738.935045][T13741] usb 2-1: can't read configurations, error -61
[  738.935501][T13741] usb usb2-port1: attempt power cycle
[  739.043367][T14830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.043931][T14830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.319078][T14838] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3242'.
[  740.757952][T14843] FAULT_INJECTION: forcing a failure.
[  740.757952][T14843] name failslab, interval 1, probability 0, space 0, times 0
[  740.757994][T14843] CPU: 1 UID: 0 PID: 14843 Comm: syz.3.3230 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  740.758023][T14843] Tainted: [L]=SOFTLOCKUP
[  740.758032][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  740.758046][T14843] Call Trace:
[  740.758054][T14843]  <TASK>
[  740.758065][T14843]  dump_stack_lvl+0xe8/0x150
[  740.758101][T14843]  should_fail_ex+0x46b/0x600
[  740.758132][T14843]  should_failslab+0xa8/0x100
[  740.758168][T14843]  __kmalloc_noprof+0xdf/0x7c0
[  740.758199][T14843]  ? kfree+0x4d/0x8f0
[  740.758225][T14843]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  740.758255][T14843]  tomoyo_realpath_from_path+0xe3/0x5d0
[  740.758280][T14843]  ? tomoyo_domain+0xd8/0x130
[  740.758318][T14843]  ? tomoyo_path_number_perm+0x219/0x630
[  740.758350][T14843]  tomoyo_path_number_perm+0x246/0x630
[  740.758386][T14843]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  740.758416][T14843]  ? __lock_acquire+0x6b5/0x2cf0
[  740.758444][T14843]  ? do_raw_spin_lock+0x12b/0x2f0
[  740.758515][T14843]  ? __fget_files+0x2a/0x420
[  740.758540][T14843]  ? __fget_files+0x2a/0x420
[  740.758559][T14843]  ? __fget_files+0x3a6/0x420
[  740.758578][T14843]  ? __fget_files+0x2a/0x420
[  740.758604][T14843]  security_file_ioctl+0xc3/0x2a0
[  740.758639][T14843]  __se_sys_ioctl+0x47/0x170
[  740.758669][T14843]  do_syscall_64+0xe2/0xf80
[  740.758699][T14843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.758721][T14843]  ? trace_irq_disable+0x37/0x100
[  740.758751][T14843]  ? clear_bhb_loop+0x60/0xb0
[  740.758778][T14843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.758800][T14843] RIP: 0033:0x7f3bf1eaaeb9
[  740.758820][T14843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.758840][T14843] RSP: 002b:00007f3bf00fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  740.758863][T14843] RAX: ffffffffffffffda RBX: 00007f3bf2125fa0 RCX: 00007f3bf1eaaeb9
[  740.758881][T14843] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  740.758894][T14843] RBP: 00007f3bf00fe090 R08: 0000000000000000 R09: 0000000000000000
[  740.758909][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.758922][T14843] R13: 00007f3bf2126038 R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  740.758959][T14843]  </TASK>
[  740.758968][T14843] ERROR: Out of memory at tomoyo_realpath_from_path.
[  741.587010][T14858] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  741.590630][T14858] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  742.308447][T12591] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  742.399509][T14866] overlayfs: failed to get inode (-116)
[  742.399952][T14866] overlayfs: failed to get inode (-116)
[  742.589904][T12591] usb 1-1: unable to read config index 0 descriptor/start: -61
[  742.589946][T12591] usb 1-1: can't read configurations, error -61
[  742.699685][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.700267][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  742.717516][T12591] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  742.911661][T12591] usb 1-1: unable to read config index 0 descriptor/start: -61
[  742.911705][T12591] usb 1-1: can't read configurations, error -61
[  742.914201][T12591] usb usb1-port1: attempt power cycle
[  743.165969][T14872] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  743.169053][T14872] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  743.346170][T12591] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  743.761981][T12591] usb 1-1: unable to read config index 0 descriptor/start: -61
[  743.762023][T12591] usb 1-1: can't read configurations, error -61
[  744.005283][T12591] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  744.037080][T12591] usb 1-1: unable to read config index 0 descriptor/start: -61
[  744.037124][T12591] usb 1-1: can't read configurations, error -61
[  744.037510][T12591] usb usb1-port1: unable to enumerate USB device
[  744.536456][T12591] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  744.717375][ T5886] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  744.793507][T12591] usb 5-1: Using ep0 maxpacket: 16
[  744.796277][T12591] usb 5-1: config 0 interface 0 has no altsetting 0
[  744.799489][T12591] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  744.799520][T12591] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  744.799543][T12591] usb 5-1: Product: syz
[  744.799559][T12591] usb 5-1: Manufacturer: syz
[  744.799575][T12591] usb 5-1: SerialNumber: syz
[  744.884432][T12591] usb 5-1: config 0 descriptor??
[  744.946530][ T5886] usb 2-1: Using ep0 maxpacket: 16
[  744.949827][ T5886] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  744.949849][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.022936][ T5886] usb 2-1: config 0 descriptor??
[  745.522932][T12591] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  745.569643][T12591] usb 5-1: USB disconnect, device number 50
[  745.636704][ T5886] hid_parser_main: 4 callbacks suppressed
[  745.636730][ T5886] saitek 0003:06A3:0CCD.0015: unknown main item tag 0x0
[  745.636763][ T5886] saitek 0003:06A3:0CCD.0015: unknown main item tag 0x0
[  745.636789][ T5886] saitek 0003:06A3:0CCD.0015: unknown main item tag 0x0
[  745.636815][ T5886] saitek 0003:06A3:0CCD.0015: unknown main item tag 0x0
[  745.636839][ T5886] saitek 0003:06A3:0CCD.0015: unknown main item tag 0x0
[  745.641044][ T5886] saitek 0003:06A3:0CCD.0015: hidraw0: USB HID v0.83 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0
[  745.721343][T14598] udevd[14598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  745.794255][ T5886] usb 2-1: USB disconnect, device number 47
[  745.920164][T14889] fido_id[14889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  747.641309][ T5886] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  747.792305][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61
[  747.792348][ T5886] usb 5-1: can't read configurations, error -61
[  747.917617][ T5886] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  748.143527][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61
[  748.143570][ T5886] usb 5-1: can't read configurations, error -61
[  748.144038][ T5886] usb usb5-port1: attempt power cycle
[  748.494057][ T5886] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  748.598516][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61
[  748.598632][ T5886] usb 5-1: can't read configurations, error -61
[  748.717733][ T5886] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  748.742036][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61
[  748.742078][ T5886] usb 5-1: can't read configurations, error -61
[  748.742508][ T5886] usb usb5-port1: unable to enumerate USB device
[  749.748057][T12591] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  749.889059][T12591] usb 1-1: Using ep0 maxpacket: 16
[  749.914487][T12591] usb 1-1: unable to get BOS descriptor or descriptor too short
[  749.927999][T12591] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  749.928029][T12591] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  749.928050][T12591] usb 1-1: config 13 has no interface number 0
[  749.928122][T12591] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  749.928151][T12591] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  749.928176][T12591] usb 1-1: config 13 interface 50 has no altsetting 0
[  749.932250][T12591] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  749.932282][T12591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.932305][T12591] usb 1-1: Product: syz
[  749.932320][T12591] usb 1-1: Manufacturer: syz
[  749.932336][T12591] usb 1-1: SerialNumber: syz
[  749.973749][T14935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  750.172012][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'.
[  750.241681][T12591] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  750.241746][T12591] usb 1-1: MIDIStreaming interface descriptor not found
[  750.438258][T12591] usb 1-1: USB disconnect, device number 43
[  751.199184][T14659] udevd[14659]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  751.794029][T13741] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  751.958548][T13741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.960940][T13741] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  751.960970][T13741] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  751.960992][T13741] usb 5-1: Product: syz
[  751.961008][T13741] usb 5-1: SerialNumber: syz
[  752.016436][T13741] usb 5-1: config 0 descriptor??
[  752.354425][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'.
[  752.545713][T14999] FAULT_INJECTION: forcing a failure.
[  752.545713][T14999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  752.545743][T14999] CPU: 0 UID: 0 PID: 14999 Comm: syz.2.3301 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  752.545766][T14999] Tainted: [L]=SOFTLOCKUP
[  752.545772][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  752.545782][T14999] Call Trace:
[  752.545788][T14999]  <TASK>
[  752.545796][T14999]  dump_stack_lvl+0xe8/0x150
[  752.545823][T14999]  should_fail_ex+0x46b/0x600
[  752.545844][T14999]  _copy_from_user+0x2d/0xb0
[  752.545867][T14999]  ___sys_sendmsg+0x1c6/0x360
[  752.545885][T14999]  ? __lock_acquire+0x6b5/0x2cf0
[  752.545906][T14999]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.545949][T14999]  ? __fget_files+0x2a/0x420
[  752.545963][T14999]  ? __fget_files+0x3a6/0x420
[  752.545985][T14999]  __x64_sys_sendmsg+0x1c3/0x2a0
[  752.546004][T14999]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  752.546029][T14999]  ? __pfx_ksys_write+0x10/0x10
[  752.546058][T14999]  do_syscall_64+0xe2/0xf80
[  752.546081][T14999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.546097][T14999]  ? trace_irq_disable+0x37/0x100
[  752.546119][T14999]  ? clear_bhb_loop+0x60/0xb0
[  752.546138][T14999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.546154][T14999] RIP: 0033:0x7f8d0278aeb9
[  752.546168][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.546183][T14999] RSP: 002b:00007f8d009e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.546199][T14999] RAX: ffffffffffffffda RBX: 00007f8d02a05fa0 RCX: 00007f8d0278aeb9
[  752.546212][T14999] RDX: 0000000000000000 RSI: 0000200000003b80 RDI: 0000000000000003
[  752.546223][T14999] RBP: 00007f8d009e6090 R08: 0000000000000000 R09: 0000000000000000
[  752.546257][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.546270][T14999] R13: 00007f8d02a06038 R14: 00007f8d02a05fa0 R15: 00007ffc8eb16618
[  752.546307][T14999]  </TASK>
[  752.772802][  T869] usb 5-1: USB disconnect, device number 55
[  752.983071][T15007] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3306'.
[  752.999140][T15009] FAULT_INJECTION: forcing a failure.
[  752.999140][T15009] name failslab, interval 1, probability 0, space 0, times 0
[  752.999182][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.3.3307 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  752.999212][T15009] Tainted: [L]=SOFTLOCKUP
[  752.999221][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  752.999235][T15009] Call Trace:
[  752.999245][T15009]  <TASK>
[  752.999255][T15009]  dump_stack_lvl+0xe8/0x150
[  752.999293][T15009]  should_fail_ex+0x46b/0x600
[  752.999324][T15009]  should_failslab+0xa8/0x100
[  752.999360][T15009]  __kmalloc_noprof+0xdf/0x7c0
[  752.999392][T15009]  ? kfree+0x4d/0x8f0
[  752.999416][T15009]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  752.999446][T15009]  tomoyo_realpath_from_path+0xe3/0x5d0
[  752.999471][T15009]  ? tomoyo_domain+0xd8/0x130
[  752.999509][T15009]  ? tomoyo_path_number_perm+0x219/0x630
[  752.999541][T15009]  tomoyo_path_number_perm+0x246/0x630
[  752.999575][T15009]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  752.999610][T15009]  ? __lock_acquire+0x6b5/0x2cf0
[  752.999639][T15009]  ? do_raw_spin_lock+0x12b/0x2f0
[  752.999711][T15009]  ? __fget_files+0x2a/0x420
[  752.999735][T15009]  ? __fget_files+0x2a/0x420
[  752.999754][T15009]  ? __fget_files+0x3a6/0x420
[  752.999774][T15009]  ? __fget_files+0x2a/0x420
[  752.999800][T15009]  security_file_ioctl+0xc3/0x2a0
[  752.999834][T15009]  __se_sys_ioctl+0x47/0x170
[  752.999865][T15009]  do_syscall_64+0xe2/0xf80
[  752.999897][T15009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.999918][T15009]  ? trace_irq_disable+0x37/0x100
[  752.999946][T15009]  ? clear_bhb_loop+0x60/0xb0
[  752.999973][T15009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.999996][T15009] RIP: 0033:0x7f3bf1eaaeb9
[  753.000017][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.000036][T15009] RSP: 002b:00007f3bf00fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  753.000060][T15009] RAX: ffffffffffffffda RBX: 00007f3bf2125fa0 RCX: 00007f3bf1eaaeb9
[  753.000077][T15009] RDX: 0000200000000440 RSI: 00000000c02064a5 RDI: 0000000000000003
[  753.000092][T15009] RBP: 00007f3bf00fe090 R08: 0000000000000000 R09: 0000000000000000
[  753.000106][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.000120][T15009] R13: 00007f3bf2126038 R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  753.000156][T15009]  </TASK>
[  753.000166][T15009] ERROR: Out of memory at tomoyo_realpath_from_path.
[  753.561494][T15026] FAULT_INJECTION: forcing a failure.
[  753.561494][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.561534][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.2.3315 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  753.561563][T15026] Tainted: [L]=SOFTLOCKUP
[  753.561571][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  753.561585][T15026] Call Trace:
[  753.561593][T15026]  <TASK>
[  753.561604][T15026]  dump_stack_lvl+0xe8/0x150
[  753.561647][T15026]  should_fail_ex+0x46b/0x600
[  753.561676][T15026]  _copy_from_user+0x2d/0xb0
[  753.561706][T15026]  dev_write+0xc6/0xe70
[  753.561732][T15026]  ? __lock_acquire+0x6b5/0x2cf0
[  753.561759][T15026]  ? __pfx_dev_write+0x10/0x10
[  753.561794][T15026]  ? rw_verify_area+0x25b/0x4e0
[  753.561822][T15026]  ? __pfx_dev_write+0x10/0x10
[  753.561849][T15026]  vfs_write+0x2a3/0xba0
[  753.561886][T15026]  ? __pfx_vfs_write+0x10/0x10
[  753.561916][T15026]  ? __fget_files+0x2a/0x420
[  753.561939][T15026]  ? __fget_files+0x2a/0x420
[  753.561958][T15026]  ? __fget_files+0x3a6/0x420
[  753.561977][T15026]  ? __fget_files+0x2a/0x420
[  753.562007][T15026]  ksys_write+0x156/0x270
[  753.562038][T15026]  ? __pfx_ksys_write+0x10/0x10
[  753.562079][T15026]  do_syscall_64+0xe2/0xf80
[  753.562109][T15026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.562132][T15026]  ? trace_irq_disable+0x37/0x100
[  753.562161][T15026]  ? clear_bhb_loop+0x60/0xb0
[  753.562189][T15026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.562211][T15026] RIP: 0033:0x7f8d0278aeb9
[  753.562232][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.562252][T15026] RSP: 002b:00007f8d009e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  753.562276][T15026] RAX: ffffffffffffffda RBX: 00007f8d02a05fa0 RCX: 00007f8d0278aeb9
[  753.562293][T15026] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000003
[  753.562308][T15026] RBP: 00007f8d009e6090 R08: 0000000000000000 R09: 0000000000000000
[  753.562322][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.562335][T15026] R13: 00007f8d02a06038 R14: 00007f8d02a05fa0 R15: 00007ffc8eb16618
[  753.562367][T15026]  </TASK>
[  753.699350][T13741] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  753.883649][T13741] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  753.883680][T13741] usb 2-1: config 0 has no interface number 0
[  753.883726][T13741] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  753.918486][T13741] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  753.918523][T13741] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  753.918546][T13741] usb 2-1: Product: syz
[  753.918562][T13741] usb 2-1: SerialNumber: syz
[  753.958180][T13741] usb 2-1: config 0 descriptor??
[  753.984940][T13741] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  754.217750][T15039] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3320'.
[  754.325083][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.337773][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.342478][T13741] usb 2-1: USB disconnect, device number 48
[  754.474469][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3324'.
[  756.794443][  T869] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  756.956781][  T869] usb 5-1: Using ep0 maxpacket: 16
[  756.958695][  T869] usb 5-1: config 2 has an invalid interface number: 249 but max is 1
[  756.958723][  T869] usb 5-1: config 2 has an invalid interface number: 232 but max is 1
[  756.958753][  T869] usb 5-1: config 2 has no interface number 0
[  756.958767][  T869] usb 5-1: config 2 has no interface number 1
[  756.958814][  T869] usb 5-1: config 2 interface 249 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 64
[  756.958832][  T869] usb 5-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  756.958849][  T869] usb 5-1: config 2 interface 249 altsetting 10 has a duplicate endpoint with address 0x3, skipping
[  756.958868][  T869] usb 5-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  756.958885][  T869] usb 5-1: config 2 interface 249 altsetting 10 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  756.958906][  T869] usb 5-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  756.958934][  T869] usb 5-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  756.958950][  T869] usb 5-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  756.958968][  T869] usb 5-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  756.958986][  T869] usb 5-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  756.959002][  T869] usb 5-1: config 2 interface 232 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  756.959018][  T869] usb 5-1: config 2 interface 249 has no altsetting 0
[  756.959031][  T869] usb 5-1: config 2 interface 232 has no altsetting 0
[  756.964542][  T869] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a58, bcdDevice=ee.c2
[  756.964573][  T869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.964595][  T869] usb 5-1: Product: 叨溰〕⎅굣䜖⽃蹣㑌株䜺ᶄ홁翟内ᇚ䈇北⩒࿏⹹珧ᴲ驊
[  756.964616][  T869] usb 5-1: Manufacturer: Љ
[  756.964632][  T869] usb 5-1: SerialNumber: 、
[  757.191956][T15095] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  757.356248][    T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  757.466690][T15095] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3342'.
[  757.466716][T15095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3342'.
[  757.516776][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.529345][    T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  757.529370][    T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  757.529385][    T9] usb 1-1: Product: syz
[  757.530700][    T9] usb 1-1: SerialNumber: syz
[  757.575011][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.596750][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.624755][    T9] usb 1-1: config 0 descriptor??
[  757.759431][  T869] usb 5-1: USB disconnect, device number 56
[  757.884624][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'.
[  758.605796][T15150] FAULT_INJECTION: forcing a failure.
[  758.605796][T15150] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.605901][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.1.3365 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  758.605933][T15150] Tainted: [L]=SOFTLOCKUP
[  758.605942][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  758.605956][T15150] Call Trace:
[  758.605966][T15150]  <TASK>
[  758.605976][T15150]  dump_stack_lvl+0xe8/0x150
[  758.606011][T15150]  should_fail_ex+0x46b/0x600
[  758.606049][T15150]  strncpy_from_user+0x36/0x2b0
[  758.606089][T15150]  __se_sys_add_key+0xdb/0x420
[  758.606122][T15150]  ? __pfx___se_sys_add_key+0x10/0x10
[  758.606160][T15150]  ? __x64_sys_add_key+0x20/0xc0
[  758.606208][T15150]  do_syscall_64+0xe2/0xf80
[  758.606238][T15150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.606261][T15150]  ? clear_bhb_loop+0x60/0xb0
[  758.606288][T15150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.606310][T15150] RIP: 0033:0x7f00ea37aeb9
[  758.606332][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.606351][T15150] RSP: 002b:00007f00e85ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  758.606375][T15150] RAX: ffffffffffffffda RBX: 00007f00ea5f6090 RCX: 00007f00ea37aeb9
[  758.606393][T15150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  758.606407][T15150] RBP: 00007f00e85ad090 R08: ffffffffffffffff R09: 0000000000000000
[  758.606422][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.606436][T15150] R13: 00007f00ea5f6128 R14: 00007f00ea5f6090 R15: 00007ffd4cbea2f8
[  758.606471][T15150]  </TASK>
[  758.894663][   T31] usb 1-1: USB disconnect, device number 44
[  759.356490][  T869] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  759.449068][   T31] usb 3-1: USB disconnect, device number 10
[  759.503221][  T869] usb 4-1: Using ep0 maxpacket: 16
[  759.505322][  T869] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  759.505348][  T869] usb 4-1: config 0 has no interface number 0
[  759.505395][  T869] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  759.505414][  T869] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 160, changing to 11
[  759.505433][  T869] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 57565, setting to 1024
[  759.507247][  T869] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  759.507278][  T869] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  759.507294][  T869] usb 4-1: Product: syz
[  759.507305][  T869] usb 4-1: SerialNumber: syz
[  759.557768][  T869] usb 4-1: config 0 descriptor??
[  759.680215][    T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  759.721578][  T869] cm109 4-1:0.8: invalid payload size 1024, expected 4
[  759.757833][  T869] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input24
[  759.839751][    T9] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32
[  759.839845][    T9] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  759.839875][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  759.907395][    C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  759.968647][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  759.968673][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.968736][    T9] usb 2-1: Product: syz
[  759.968748][    T9] usb 2-1: Manufacturer: syz
[  759.968759][    T9] usb 2-1: SerialNumber: syz
[  760.089275][T15158] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  760.140010][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.140271][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.140510][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.141548][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.141800][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.142057][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.142295][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.142557][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.142795][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.143038][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  760.283232][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  760.307461][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  760.317911][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  760.335758][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  760.349288][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  760.380318][  T869] usb 4-1: USB disconnect, device number 40
[  760.380412][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  760.430075][    T9] usb 2-1: USB disconnect, device number 49
[  760.570208][  T869] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  760.693587][T15164] loop8: detected capacity change from 0 to 8
[  760.707862][T15164] Dev loop8: unable to read RDB block 8
[  760.707911][T15164]  loop8: unable to read partition table
[  760.709141][T15164] loop8: partition table beyond EOD, truncated
[  760.709166][T15164] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  760.725085][T15164] netlink: 'syz.4.3372': attribute type 32 has an invalid length.
[  762.388360][T12032] Bluetooth: hci0: command tx timeout
[  763.569645][ T1131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  763.569684][ T1131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  763.569706][ T1131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.956707][T12591] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  764.140198][T12591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  764.140261][T12591] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  764.143009][T12591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  764.143032][T12591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  764.143047][T12591] usb 1-1: SerialNumber: syz
[  764.166709][T12591] usb 1-1: bad CDC descriptors
[  764.296213][ T1131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  764.296243][ T1131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  764.296265][ T1131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.366607][ T5809] Bluetooth: hci0: command tx timeout
[  764.928986][ T1131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  764.929017][ T1131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  764.929039][ T1131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.360450][ T1131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  765.360481][ T1131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  765.360503][ T1131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.071184][T12591] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  766.242582][T12591] usb 4-1: Using ep0 maxpacket: 8
[  766.248961][T12591] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  766.249030][T12591] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  766.249055][T12591] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  766.249082][T12591] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  766.249109][T12591] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  766.249156][T12591] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  766.249181][T12591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.347638][ T5809] Bluetooth: hci0: command tx timeout
[  766.444563][T15161] chnl_net:caif_netlink_parms(): no params data found
[  766.597525][T12591] usb 4-1: GET_CAPABILITIES returned 0
[  766.597579][T12591] usbtmc 4-1:16.0: can't read capabilities
[  766.803069][T12591] usb 4-1: USB disconnect, device number 41
[  767.199433][ T1131] bridge_slave_1: left allmulticast mode
[  767.199458][ T1131] bridge_slave_1: left promiscuous mode
[  767.199655][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.279806][ T1131] bridge_slave_0: left allmulticast mode
[  767.279839][ T1131] bridge_slave_0: left promiscuous mode
[  767.280131][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.375350][T12591] usb 1-1: USB disconnect, device number 45
[  767.844985][ T1131] bond_slave_0: left promiscuous mode
[  767.846752][ T1131] bond_slave_1: left promiscuous mode
[  768.328590][ T5809] Bluetooth: hci0: command tx timeout
[  769.607876][ T1131] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  769.720087][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.776902][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.802100][ T1131] bond0 (unregistering): Released all slaves
[  770.695763][ T1131] bond1 (unregistering): Released all slaves
[  771.543477][ T1131] bond2 (unregistering): Released all slaves
[  771.643669][T15161] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.643822][T15161] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.644077][T15161] bridge_slave_0: entered allmulticast mode
[  771.650506][T15161] bridge_slave_0: entered promiscuous mode
[  771.730942][T15161] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.731072][T15161] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.731328][T15161] bridge_slave_1: entered allmulticast mode
[  771.733675][T15161] bridge_slave_1: entered promiscuous mode
[  771.822669][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.838811][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  771.951224][T15161] team0: Port device team_slave_0 added
[  771.955069][T15161] team0: Port device team_slave_1 added
[  773.861787][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.861808][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.861840][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.969924][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.969947][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.969976][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  774.503027][T15161] hsr_slave_0: entered promiscuous mode
[  774.507744][T15161] hsr_slave_1: entered promiscuous mode
[  774.523360][T15161] debugfs: 'hsr0' already exists in 'hsr'
[  774.523391][T15161] Cannot create hsr debugfs directory
[  774.951485][T15309] FAULT_INJECTION: forcing a failure.
[  774.951485][T15309] name failslab, interval 1, probability 0, space 0, times 0
[  774.951525][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.3.3417 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  774.951554][T15309] Tainted: [L]=SOFTLOCKUP
[  774.951563][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  774.951576][T15309] Call Trace:
[  774.951585][T15309]  <TASK>
[  774.951595][T15309]  dump_stack_lvl+0xe8/0x150
[  774.951629][T15309]  should_fail_ex+0x46b/0x600
[  774.951657][T15309]  ? __alloc_skb+0x1d7/0x390
[  774.951697][T15309]  should_failslab+0xa8/0x100
[  774.951731][T15309]  ? __alloc_skb+0x1d7/0x390
[  774.951761][T15309]  kmem_cache_alloc_node_noprof+0x8a/0x6d0
[  774.951793][T15309]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.951824][T15309]  ? __alloc_skb+0x193/0x390
[  774.951858][T15309]  __alloc_skb+0x1d7/0x390
[  774.951895][T15309]  ppp_write+0xb4/0x400
[  774.951923][T15309]  ? vfs_write+0x288/0xba0
[  774.951948][T15309]  ? __pfx_ppp_write+0x10/0x10
[  774.951977][T15309]  vfs_write+0x2a3/0xba0
[  774.952014][T15309]  ? __pfx_vfs_write+0x10/0x10
[  774.952044][T15309]  ? __fget_files+0x2a/0x420
[  774.952067][T15309]  ? __fget_files+0x2a/0x420
[  774.952086][T15309]  ? __fget_files+0x3a6/0x420
[  774.952106][T15309]  ? __fget_files+0x2a/0x420
[  774.952135][T15309]  ksys_write+0x156/0x270
[  774.952165][T15309]  ? __pfx_ksys_write+0x10/0x10
[  774.952204][T15309]  do_syscall_64+0xe2/0xf80
[  774.952233][T15309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.952298][T15309]  ? trace_irq_disable+0x37/0x100
[  774.952328][T15309]  ? clear_bhb_loop+0x60/0xb0
[  774.952356][T15309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.952379][T15309] RIP: 0033:0x7f3bf1eaaeb9
[  774.952400][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.952420][T15309] RSP: 002b:00007f3bf00fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  774.952444][T15309] RAX: ffffffffffffffda RBX: 00007f3bf2125fa0 RCX: 00007f3bf1eaaeb9
[  774.952461][T15309] RDX: 000000000000fce1 RSI: 00002000000003c0 RDI: 0000000000000004
[  774.952476][T15309] RBP: 00007f3bf00fe090 R08: 0000000000000000 R09: 0000000000000000
[  774.952491][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.952505][T15309] R13: 00007f3bf2126038 R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  774.952541][T15309]  </TASK>
[  775.842172][T12340] Bluetooth: hci3: Frame reassembly failed (-84)
[  776.014928][T13741] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  776.516089][T13741] usb 5-1: Using ep0 maxpacket: 8
[  776.523340][T13741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  776.523395][T13741] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00
[  776.523422][T13741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.531853][T13741] usb 5-1: config 0 descriptor??
[  776.927021][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.940313][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.027930][T13741] sony 0003:054C:0374.0016: ignoring exceeding usage max
[  777.455295][T13741] sony 0003:054C:0374.0016: hiddev0,hidraw0: USB HID vff.ff Device [HID 054c:0374] on usb-dummy_hcd.4-1/input0
[  777.455333][T13741] sony 0003:054C:0374.0016: failed to claim input
[  777.544988][T13741] usb 5-1: USB disconnect, device number 57
[  777.641651][T15327] fido_id[15327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  777.777069][T12032] Bluetooth: hci3: command 0x1003 tx timeout
[  777.777435][ T5809] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  777.904740][T15301] smc: net device bond0 applied user defined pnetid SYZ2
[  778.160115][T15336] FAULT_INJECTION: forcing a failure.
[  778.160115][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  778.160155][T15336] CPU: 1 UID: 0 PID: 15336 Comm: syz.0.3423 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  778.160196][T15336] Tainted: [L]=SOFTLOCKUP
[  778.160204][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  778.160218][T15336] Call Trace:
[  778.160227][T15336]  <TASK>
[  778.160237][T15336]  dump_stack_lvl+0xe8/0x150
[  778.160274][T15336]  should_fail_ex+0x46b/0x600
[  778.160304][T15336]  _copy_to_user+0x31/0xb0
[  778.160338][T15336]  simple_read_from_buffer+0xe1/0x170
[  778.160378][T15336]  proc_fail_nth_read+0x1be/0x230
[  778.160410][T15336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  778.160443][T15336]  ? rw_verify_area+0x2ac/0x4e0
[  778.160470][T15336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  778.160499][T15336]  vfs_read+0x212/0xa70
[  778.160537][T15336]  ? __pfx_vfs_read+0x10/0x10
[  778.160567][T15336]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  778.160598][T15336]  ? lockdep_hardirqs_on+0x7a/0x110
[  778.160626][T15336]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.160658][T15336]  ? mutex_lock_nested+0x152/0x1d0
[  778.160679][T15336]  ? fdget_pos+0x252/0x320
[  778.160710][T15336]  ksys_read+0x156/0x270
[  778.160739][T15336]  ? __pfx_ksys_read+0x10/0x10
[  778.160780][T15336]  do_syscall_64+0xe2/0xf80
[  778.160809][T15336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.160830][T15336]  ? trace_irq_disable+0x37/0x100
[  778.160859][T15336]  ? clear_bhb_loop+0x60/0xb0
[  778.160887][T15336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.160909][T15336] RIP: 0033:0x7f70ad69b78e
[  778.160929][T15336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  778.160948][T15336] RSP: 002b:00007f70ab92dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  778.160972][T15336] RAX: ffffffffffffffda RBX: 00007f70ab92e6c0 RCX: 00007f70ad69b78e
[  778.160990][T15336] RDX: 000000000000000f RSI: 00007f70ab92e0a0 RDI: 0000000000000004
[  778.161004][T15336] RBP: 00007f70ab92e090 R08: 0000000000000000 R09: 0000000000000000
[  778.161019][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.161033][T15336] R13: 00007f70ad956038 R14: 00007f70ad955fa0 R15: 00007ffea7999928
[  778.161069][T15336]  </TASK>
[  778.750315][ T1131] hsr_slave_0: left promiscuous mode
[  778.767899][ T1131] hsr_slave_1: left promiscuous mode
[  778.769109][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  778.769136][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.823442][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  778.823465][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.028921][ T1131] veth1_macvtap: left promiscuous mode
[  779.029038][ T1131] veth0_macvtap: left promiscuous mode
[  779.029303][ T1131] veth1_vlan: left promiscuous mode
[  779.029489][ T1131] veth0_vlan: left promiscuous mode
[  782.897644][T15372] FAULT_INJECTION: forcing a failure.
[  782.897644][T15372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  782.897672][T15372] CPU: 1 UID: 0 PID: 15372 Comm: syz.4.3435 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  782.897725][T15372] Tainted: [L]=SOFTLOCKUP
[  782.897733][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  782.897747][T15372] Call Trace:
[  782.897756][T15372]  <TASK>
[  782.897767][T15372]  dump_stack_lvl+0xe8/0x150
[  782.897802][T15372]  should_fail_ex+0x46b/0x600
[  782.897832][T15372]  _copy_from_user+0x2d/0xb0
[  782.897864][T15372]  __x64_sys_timer_create+0x118/0x1c0
[  782.897895][T15372]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  782.897912][T15372]  ? ksys_write+0x248/0x270
[  782.897945][T15372]  do_syscall_64+0xe2/0xf80
[  782.897968][T15372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.897990][T15372]  ? clear_bhb_loop+0x60/0xb0
[  782.898010][T15372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.898026][T15372] RIP: 0033:0x7f6232e9aeb9
[  782.898040][T15372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.898054][T15372] RSP: 002b:00007f62310d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  782.898071][T15372] RAX: ffffffffffffffda RBX: 00007f6233116090 RCX: 00007f6232e9aeb9
[  782.898083][T15372] RDX: 0000200000bbdffc RSI: 0000200000533fa0 RDI: 0000000000000000
[  782.898095][T15372] RBP: 00007f62310d5090 R08: 0000000000000000 R09: 0000000000000000
[  782.898105][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  782.898114][T15372] R13: 00007f6233116128 R14: 00007f6233116090 R15: 00007fff4e3fd6c8
[  782.898139][T15372]  </TASK>
[  783.989837][ T1131] team0 (unregistering): Port device team_slave_1 removed
[  784.216835][ T1131] team0 (unregistering): Port device team_slave_0 removed
[  786.637434][T15384] FAULT_INJECTION: forcing a failure.
[  786.637434][T15384] name failslab, interval 1, probability 0, space 0, times 0
[  786.637477][T15384] CPU: 1 UID: 0 PID: 15384 Comm: syz.0.3439 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  786.637507][T15384] Tainted: [L]=SOFTLOCKUP
[  786.637516][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  786.637529][T15384] Call Trace:
[  786.637539][T15384]  <TASK>
[  786.637548][T15384]  dump_stack_lvl+0xe8/0x150
[  786.637586][T15384]  should_fail_ex+0x46b/0x600
[  786.637614][T15384]  should_failslab+0xa8/0x100
[  786.637649][T15384]  __kmalloc_noprof+0xdf/0x7c0
[  786.637680][T15384]  ? __local_bh_enable+0x1e1/0x2f0
[  786.637701][T15384]  ? tls_get_rec+0xbf/0x670
[  786.637735][T15384]  tls_get_rec+0xbf/0x670
[  786.637762][T15384]  ? lockdep_hardirqs_on+0x7a/0x110
[  786.637795][T15384]  tls_sw_sendmsg+0x4ce/0x2360
[  786.637834][T15384]  ? unwind_next_frame+0xa5/0x23c0
[  786.637867][T15384]  ? unwind_next_frame+0xa5/0x23c0
[  786.637909][T15384]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  786.637939][T15384]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  786.637960][T15384]  ? sock_rps_record_flow+0x19/0x400
[  786.637996][T15384]  ? inet_send_prepare+0x57/0x270
[  786.638034][T15384]  ? inet6_sendmsg+0x101/0x120
[  786.638068][T15384]  sock_write_iter+0x329/0x550
[  786.638098][T15384]  ? __pfx_sock_write_iter+0x10/0x10
[  786.638151][T15384]  do_iter_readv_writev+0x62b/0x8d0
[  786.638184][T15384]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  786.638213][T15384]  ? __lock_acquire+0x6b5/0x2cf0
[  786.638248][T15384]  ? rw_verify_area+0x25b/0x4e0
[  786.638279][T15384]  vfs_writev+0x345/0x9a0
[  786.638308][T15384]  ? __pfx_vfs_writev+0x10/0x10
[  786.638345][T15384]  ? __fget_files+0x2a/0x420
[  786.638369][T15384]  ? __fget_files+0x3a6/0x420
[  786.638395][T15384]  ? __fget_files+0x2a/0x420
[  786.638425][T15384]  do_writev+0x15a/0x2e0
[  786.638448][T15384]  ? __pfx_do_writev+0x10/0x10
[  786.638480][T15384]  do_syscall_64+0xe2/0xf80
[  786.638508][T15384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.638528][T15384]  ? trace_irq_disable+0x37/0x100
[  786.638555][T15384]  ? clear_bhb_loop+0x60/0xb0
[  786.638581][T15384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.638602][T15384] RIP: 0033:0x7f70ad6daeb9
[  786.638622][T15384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.638640][T15384] RSP: 002b:00007f70ab92e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  786.638663][T15384] RAX: ffffffffffffffda RBX: 00007f70ad955fa0 RCX: 00007f70ad6daeb9
[  786.638680][T15384] RDX: 0000000000000001 RSI: 0000200000019640 RDI: 0000000000000003
[  786.638694][T15384] RBP: 00007f70ab92e090 R08: 0000000000000000 R09: 0000000000000000
[  786.638708][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.638721][T15384] R13: 00007f70ad956038 R14: 00007f70ad955fa0 R15: 00007ffea7999928
[  786.638757][T15384]  </TASK>
[  786.808620][T12591] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  787.127937][T12591] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  787.127969][T12591] usb 2-1: config 0 has no interface number 0
[  787.128019][T12591] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  787.151204][T12591] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  787.151293][T12591] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  787.151350][T12591] usb 2-1: Product: syz
[  787.151388][T12591] usb 2-1: SerialNumber: syz
[  787.202207][T12591] usb 2-1: config 0 descriptor??
[  787.267153][T12591] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  787.619118][T13741] usb 2-1: USB disconnect, device number 50
[  790.631065][T15446] FAULT_INJECTION: forcing a failure.
[  790.631065][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  790.631103][T15446] CPU: 0 UID: 0 PID: 15446 Comm: syz.1.3454 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  790.631125][T15446] Tainted: [L]=SOFTLOCKUP
[  790.631132][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  790.631142][T15446] Call Trace:
[  790.631150][T15446]  <TASK>
[  790.631157][T15446]  dump_stack_lvl+0xe8/0x150
[  790.631184][T15446]  should_fail_ex+0x46b/0x600
[  790.631205][T15446]  _copy_from_user+0x2d/0xb0
[  790.631226][T15446]  ___sys_sendmsg+0x1c6/0x360
[  790.631243][T15446]  ? __lock_acquire+0x6b5/0x2cf0
[  790.631264][T15446]  ? __pfx____sys_sendmsg+0x10/0x10
[  790.631306][T15446]  ? __fget_files+0x2a/0x420
[  790.631320][T15446]  ? __fget_files+0x3a6/0x420
[  790.631341][T15446]  __x64_sys_sendmsg+0x1c3/0x2a0
[  790.631360][T15446]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  790.631384][T15446]  ? __pfx_ksys_write+0x10/0x10
[  790.631411][T15446]  do_syscall_64+0xe2/0xf80
[  790.631433][T15446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.631448][T15446]  ? trace_irq_disable+0x37/0x100
[  790.631470][T15446]  ? clear_bhb_loop+0x60/0xb0
[  790.631489][T15446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.631504][T15446] RIP: 0033:0x7f00ea37aeb9
[  790.631518][T15446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  790.631532][T15446] RSP: 002b:00007f00e85ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  790.631549][T15446] RAX: ffffffffffffffda RBX: 00007f00ea5f5fa0 RCX: 00007f00ea37aeb9
[  790.631561][T15446] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  790.631571][T15446] RBP: 00007f00e85ce090 R08: 0000000000000000 R09: 0000000000000000
[  790.631581][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  790.631591][T15446] R13: 00007f00ea5f6038 R14: 00007f00ea5f5fa0 R15: 00007ffd4cbea2f8
[  790.631614][T15446]  </TASK>
[  791.030731][T15161] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  791.100343][T15161] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  791.126286][T15453] batadv_slave_1: entered promiscuous mode
[  791.127252][T15161] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  791.168973][T15453] netlink: 'syz.3.3458': attribute type 5 has an invalid length.
[  791.168997][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'.
[  791.170024][T15161] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  791.470947][T15451] batadv_slave_1: left promiscuous mode
[  791.939887][T13741] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  792.095995][T13741] usb 1-1: Using ep0 maxpacket: 32
[  792.098608][T13741] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  792.098639][T13741] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  792.098664][T13741] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  792.098719][T13741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  792.098745][T13741] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  792.098772][T13741] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  792.098817][T13741] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  792.098843][T13741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.216789][T13741] usb 1-1: config 0 descriptor??
[  792.464792][T13741] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  792.496308][T13741] usb 1-1: USB disconnect, device number 46
[  792.513774][T13741] usblp0: removed
[  792.595174][T15161] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.624944][T15161] 8021q: adding VLAN 0 to HW filter on device team0
[  792.648817][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.648976][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  792.651629][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.651769][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.721477][    T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  792.881004][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  792.881039][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.881061][    T9] usb 5-1: Product: syz
[  792.881077][    T9] usb 5-1: Manufacturer: syz
[  792.881093][    T9] usb 5-1: SerialNumber: syz
[  793.007125][ T5886] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  793.168533][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  793.174261][ T5886] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  793.174292][ T5886] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  793.174315][ T5886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  793.174446][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  793.174472][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  793.174503][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  793.174608][ T5886] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  793.174634][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.297309][ T5886] usb 1-1: config 0 descriptor??
[  793.513499][ T5886] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  793.589430][T13741] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  793.715596][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO
[  793.715664][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  793.716132][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  793.716184][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  793.716978][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  793.776456][T13741] usb 2-1: Using ep0 maxpacket: 32
[  793.809628][T13741] usb 2-1: config 0 has an invalid interface number: 221 but max is 0
[  793.809658][T13741] usb 2-1: config 0 has no interface number 0
[  793.809794][T13741] usb 2-1: config 0 interface 221 has no altsetting 0
[  793.844734][T13741] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=4b.9f
[  793.844841][T13741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.844866][T13741] usb 2-1: Product: syz
[  793.844882][T13741] usb 2-1: Manufacturer: syz
[  793.844898][T13741] usb 2-1: SerialNumber: syz
[  793.894541][    T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  793.963596][T13741] usb 2-1: config 0 descriptor??
[  793.990835][    T9] usb 5-1: USB disconnect, device number 58
[  794.095273][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  794.095430][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  794.192612][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  794.193705][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  794.243477][T13741] usb 2-1: USB disconnect, device number 51
[  794.375869][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  794.724758][T15161] veth0_vlan: entered promiscuous mode
[  794.756415][T15161] veth1_vlan: entered promiscuous mode
[  794.797376][T13741] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  794.941423][T13741] usb 4-1: Using ep0 maxpacket: 16
[  794.971626][T13741] usb 4-1: config 0 interface 0 has no altsetting 0
[  794.986327][T13741] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  794.986914][T13741] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  794.986941][T13741] usb 4-1: Product: syz
[  794.986959][T13741] usb 4-1: Manufacturer: syz
[  794.986975][T13741] usb 4-1: SerialNumber: syz
[  795.038790][T13741] usb 4-1: config 0 descriptor??
[  795.116617][T15161] veth0_macvtap: entered promiscuous mode
[  795.149013][T15161] veth1_macvtap: entered promiscuous mode
[  795.158487][T15511] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3469'.
[  795.262315][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.286481][    T9] usb 1-1: USB disconnect, device number 47
[  795.361119][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  795.396097][    T9] usblp0: removed
[  795.443549][   T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  795.460775][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  795.492207][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  795.505541][T13741] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  795.508570][T13741] usb 4-1: USB disconnect, device number 42
[  795.561912][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  795.675775][T15385] udevd[15385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  796.135750][T15528] loop8: detected capacity change from 0 to 8
[  796.176359][T15528] Dev loop8: unable to read RDB block 8
[  796.176411][T15528]  loop8: unable to read partition table
[  796.176664][T15528] loop8: partition table beyond EOD, truncated
[  796.176700][T15528] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  798.483946][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.483968][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.812253][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.812276][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.936987][T15574] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3481'.
[  800.447317][   T38] kauditd_printk_skb: 48 callbacks suppressed
[  800.447339][   T38] audit: type=1326 audit(1770372172.980:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6ddcaeb9 code=0x7ffc0000
[  800.447474][   T38] audit: type=1326 audit(1770372172.980:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6ddcaeb9 code=0x7ffc0000
[  800.464746][   T38] audit: type=1326 audit(1770372173.001:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d6dd8b78e code=0x7ffc0000
[  800.471391][   T38] audit: type=1326 audit(1770372173.001:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.471448][   T38] audit: type=1326 audit(1770372173.001:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.542626][   T38] audit: type=1326 audit(1770372173.074:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.543224][   T38] audit: type=1326 audit(1770372173.074:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.790925][   T38] audit: type=1326 audit(1770372173.337:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.866141][   T38] audit: type=1326 audit(1770372173.421:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  800.941416][  T808] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  800.950531][  T869] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  800.989385][   T38] audit: type=1326 audit(1770372173.505:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15586 comm="syz.2.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6ddcab4b code=0x7ffc0000
[  801.095743][  T808] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  801.095807][  T808] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  801.095829][  T808] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  801.095846][  T808] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  801.095866][  T808] usb 4-1: config 7 interface 0 has no altsetting 0
[  801.095890][  T808] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  801.095908][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.112414][  T869] usb 3-1: Using ep0 maxpacket: 8
[  801.187290][  T869] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  801.187322][  T869] usb 3-1: config 0 has no interface number 0
[  801.214843][  T869] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  801.214940][  T869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.214964][  T869] usb 3-1: Product: syz
[  801.214981][  T869] usb 3-1: Manufacturer: syz
[  801.214997][  T869] usb 3-1: SerialNumber: syz
[  801.267249][  T869] usb 3-1: config 0 descriptor??
[  801.718940][T15587] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3369'.
[  801.732562][T15587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3369'.
[  801.838428][  T869] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22
[  801.857206][  T869] usb 3-1: USB disconnect, device number 11
[  801.901270][T15591] netlink: 'syz.3.3486': attribute type 4 has an invalid length.
[  801.962615][T15594] netlink: 'syz.3.3486': attribute type 4 has an invalid length.
[  802.325231][  T808] usbhid 4-1:7.0: can't add hid device: -71
[  802.325366][  T808] usbhid 4-1:7.0: probe with driver usbhid failed with error -71
[  802.347695][T12032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  802.376082][T12032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  802.384921][T12032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  802.407344][T12032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  802.426298][T12032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  802.453493][  T808] usb 4-1: USB disconnect, device number 43
[  804.298591][T15613] FAULT_INJECTION: forcing a failure.
[  804.298591][T15613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.298623][T15613] CPU: 1 UID: 0 PID: 15613 Comm: syz.0.3490 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  804.298646][T15613] Tainted: [L]=SOFTLOCKUP
[  804.298652][T15613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  804.298663][T15613] Call Trace:
[  804.298669][T15613]  <TASK>
[  804.298676][T15613]  dump_stack_lvl+0xe8/0x150
[  804.298704][T15613]  should_fail_ex+0x46b/0x600
[  804.298725][T15613]  _copy_from_user+0x2d/0xb0
[  804.298748][T15613]  __sys_bind+0x1cc/0x410
[  804.298774][T15613]  ? __pfx___sys_bind+0x10/0x10
[  804.298806][T15613]  ? __pfx_ksys_write+0x10/0x10
[  804.298833][T15613]  __x64_sys_bind+0x7a/0x90
[  804.298857][T15613]  do_syscall_64+0xe2/0xf80
[  804.298879][T15613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.298902][T15613]  ? trace_irq_disable+0x37/0x100
[  804.298923][T15613]  ? clear_bhb_loop+0x60/0xb0
[  804.298943][T15613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.298959][T15613] RIP: 0033:0x7f70ad6daeb9
[  804.298973][T15613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.298987][T15613] RSP: 002b:00007f70ab92e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  804.299005][T15613] RAX: ffffffffffffffda RBX: 00007f70ad955fa0 RCX: 00007f70ad6daeb9
[  804.299017][T15613] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004
[  804.299027][T15613] RBP: 00007f70ab92e090 R08: 0000000000000000 R09: 0000000000000000
[  804.299038][T15613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.299048][T15613] R13: 00007f70ad956038 R14: 00007f70ad955fa0 R15: 00007ffea7999928
[  804.299072][T15613]  </TASK>
[  804.451276][ T5809] Bluetooth: hci3: command tx timeout
[  805.079579][T15628] FAULT_INJECTION: forcing a failure.
[  805.079579][T15628] name failslab, interval 1, probability 0, space 0, times 0
[  805.079649][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.2.3494 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  805.079681][T15628] Tainted: [L]=SOFTLOCKUP
[  805.079690][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  805.079704][T15628] Call Trace:
[  805.079714][T15628]  <TASK>
[  805.079725][T15628]  dump_stack_lvl+0xe8/0x150
[  805.079762][T15628]  should_fail_ex+0x46b/0x600
[  805.079791][T15628]  ? getname_flags+0xb7/0x540
[  805.079826][T15628]  should_failslab+0xa8/0x100
[  805.079862][T15628]  ? getname_flags+0xb7/0x540
[  805.079902][T15628]  kmem_cache_alloc_noprof+0x83/0x6a0
[  805.079941][T15628]  getname_flags+0xb7/0x540
[  805.079980][T15628]  do_sys_openat2+0xca/0x220
[  805.080003][T15628]  ? __pfx___schedule+0x10/0x10
[  805.080030][T15628]  ? __pfx_do_sys_openat2+0x10/0x10
[  805.080054][T15628]  ? ksys_write+0x248/0x270
[  805.080084][T15628]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  805.080115][T15628]  __x64_sys_openat+0x138/0x170
[  805.080145][T15628]  do_syscall_64+0xe2/0xf80
[  805.080173][T15628]  ? rcu_is_watching+0x15/0xb0
[  805.080203][T15628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.080226][T15628]  ? clear_bhb_loop+0x60/0xb0
[  805.080253][T15628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.080275][T15628] RIP: 0033:0x7f0d6ddcaeb9
[  805.080296][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.080317][T15628] RSP: 002b:00007f0d6bfdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  805.080341][T15628] RAX: ffffffffffffffda RBX: 00007f0d6e046180 RCX: 00007f0d6ddcaeb9
[  805.080358][T15628] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: ffffffffffffff9c
[  805.080373][T15628] RBP: 00007f0d6bfdc090 R08: 0000000000000000 R09: 0000000000000000
[  805.080388][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  805.080402][T15628] R13: 00007f0d6e046218 R14: 00007f0d6e046180 R15: 00007ffd6f747408
[  805.080438][T15628]  </TASK>
[  805.172384][  T808] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  805.772276][  T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.772307][  T808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  805.772363][  T808] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  805.772390][  T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.777761][  T808] usb 5-1: config 0 descriptor??
[  806.302445][  T808] Bluetooth: Can't get version to change to load ram patch err
[  806.302468][  T808] Bluetooth: Loading patch file failed
[  806.302510][  T808] ath3k 5-1:0.0: probe with driver ath3k failed with error -71
[  806.357131][  T808] usb 5-1: USB disconnect, device number 59
[  806.426679][ T5809] Bluetooth: hci3: command tx timeout
[  807.836354][  T869] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  807.889209][T12360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.984973][T15593] chnl_net:caif_netlink_parms(): no params data found
[  807.998183][  T869] usb 4-1: Using ep0 maxpacket: 16
[  808.018172][  T869] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  808.018205][  T869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.018228][  T869] usb 4-1: Product: syz
[  808.018244][  T869] usb 4-1: Manufacturer: syz
[  808.018261][  T869] usb 4-1: SerialNumber: syz
[  808.063304][  T869] usb 4-1: config 0 descriptor??
[  808.120707][  T869] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  808.413962][ T5809] Bluetooth: hci3: command tx timeout
[  808.499659][T12360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.600947][  T869] gspca_sn9c2028: read1 error -71
[  808.601451][  T869] gspca_sn9c2028: read1 error -71
[  808.601545][  T869] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  808.657260][  T869] usb 4-1: USB disconnect, device number 44
[  809.058034][T12360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.313338][  T808] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  809.456345][  T808] usb 1-1: Using ep0 maxpacket: 16
[  809.458994][  T808] usb 1-1: config 2 has an invalid interface number: 249 but max is 1
[  809.459024][  T808] usb 1-1: config 2 has an invalid interface number: 232 but max is 1
[  809.459047][  T808] usb 1-1: config 2 has no interface number 0
[  809.459065][  T808] usb 1-1: config 2 has no interface number 1
[  809.459133][  T808] usb 1-1: config 2 interface 249 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 64
[  809.459161][  T808] usb 1-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  809.459185][  T808] usb 1-1: config 2 interface 249 altsetting 10 has a duplicate endpoint with address 0x3, skipping
[  809.459214][  T808] usb 1-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  809.459238][  T808] usb 1-1: config 2 interface 249 altsetting 10 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  809.459267][  T808] usb 1-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  809.459309][  T808] usb 1-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  809.459334][  T808] usb 1-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  809.459361][  T808] usb 1-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  809.459387][  T808] usb 1-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  809.459411][  T808] usb 1-1: config 2 interface 232 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  809.459434][  T808] usb 1-1: config 2 interface 249 has no altsetting 0
[  809.459454][  T808] usb 1-1: config 2 interface 232 has no altsetting 0
[  809.462452][  T808] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a58, bcdDevice=ee.c2
[  809.462481][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.462511][  T808] usb 1-1: Product: 叨溰〕⎅굣䜖⽃蹣㑌株䜺ᶄ홁翟内ᇚ䈇北⩒࿏⹹珧ᴲ驊
[  809.462532][  T808] usb 1-1: Manufacturer: Љ
[  809.462547][  T808] usb 1-1: SerialNumber: 、
[  809.479478][T15660] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  810.661294][ T5809] Bluetooth: hci3: command tx timeout
[  810.852175][ T5886] IPVS: starting estimator thread 0...
[  810.888887][T15660] netlink: 480 bytes leftover after parsing attributes in process `syz.0.3507'.
[  810.888911][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3507'.
[  810.955347][T12360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.999221][T15670] IPVS: using max 10 ests per chain, 24000 per kthread
[  811.081468][  T808] usb 1-1: USB disconnect, device number 48
[  811.443395][T15593] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.443615][T15593] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.443874][T15593] bridge_slave_0: entered allmulticast mode
[  811.457604][T15593] bridge_slave_0: entered promiscuous mode
[  811.473872][T15593] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.474105][T15593] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.474346][T15593] bridge_slave_1: entered allmulticast mode
[  811.493392][T15593] bridge_slave_1: entered promiscuous mode
[  811.678360][T15593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  811.698081][T15593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.898372][T15593] team0: Port device team_slave_0 added
[  811.925327][T15593] team0: Port device team_slave_1 added
[  812.245655][T15593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  812.245676][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  812.245707][T15593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  812.481265][T15593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  812.481286][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  812.481316][T15593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  812.739964][T15593] hsr_slave_0: entered promiscuous mode
[  812.747682][T15593] hsr_slave_1: entered promiscuous mode
[  812.748972][T15593] debugfs: 'hsr0' already exists in 'hsr'
[  812.748999][T15593] Cannot create hsr debugfs directory
[  813.131710][T12360] bridge_slave_1: left allmulticast mode
[  813.131741][T12360] bridge_slave_1: left promiscuous mode
[  813.135797][T12360] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.528056][T12360] bridge_slave_0: left allmulticast mode
[  813.528089][T12360] bridge_slave_0: left promiscuous mode
[  814.500088][T12360] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.164748][T12360] smc: removing net device bond0 with user defined pnetid SYZ2
[  818.201147][T12360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.238289][T12360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.259932][T12360] bond0 (unregistering): Released all slaves
[  818.705464][T15743] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3527'.
[  818.729784][T12360] tipc: Left network mode
[  819.208965][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  820.440093][ T5885] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  820.440118][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.440134][ T5885] usb 3-1: Product: syz
[  820.440145][ T5885] usb 3-1: Manufacturer: syz
[  820.440156][ T5885] usb 3-1: SerialNumber: syz
[  820.454888][T15760] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3530'.
[  820.551895][T13741] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  820.573047][ T5885] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  821.570761][T13741] usb 5-1: device descriptor read/64, error -71
[  821.809896][ T5872] usb 3-1: USB disconnect, device number 12
[  821.816243][    T9] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  821.823929][ T5872] usb 3-1: ath9k_htc: USB layer deinitialized
[  821.839271][T13741] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  821.971297][T13741] usb 5-1: device descriptor read/64, error -71
[  822.079244][T13741] usb usb5-port1: attempt power cycle
[  822.350316][T15787] FAULT_INJECTION: forcing a failure.
[  822.350316][T15787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  822.350357][T15787] CPU: 0 UID: 0 PID: 15787 Comm: syz.2.3536 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  822.350387][T15787] Tainted: [L]=SOFTLOCKUP
[  822.350396][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  822.350408][T15787] Call Trace:
[  822.350417][T15787]  <TASK>
[  822.350428][T15787]  dump_stack_lvl+0xe8/0x150
[  822.350465][T15787]  should_fail_ex+0x46b/0x600
[  822.350495][T15787]  _copy_from_iter+0x1d3/0x1670
[  822.350527][T15787]  ? unwind_next_frame+0xa5/0x23c0
[  822.350562][T15787]  ? __pfx__copy_from_iter+0x10/0x10
[  822.350590][T15787]  ? tun_get_user+0x6ff/0x3de0
[  822.350626][T15787]  ? page_copy_sane+0x4e/0x270
[  822.350663][T15787]  copy_page_from_iter+0xdd/0x170
[  822.350695][T15787]  tun_get_user+0x1d4b/0x3de0
[  822.350724][T15787]  ? tun_get_user+0x6ff/0x3de0
[  822.350769][T15787]  ? __lock_acquire+0x6b5/0x2cf0
[  822.350795][T15787]  ? __pfx_tun_get_user+0x10/0x10
[  822.350828][T15787]  ? __lock_acquire+0x6b5/0x2cf0
[  822.350867][T15787]  ? ref_tracker_alloc+0x339/0x4b0
[  822.350890][T15787]  ? get_pid_task+0x20/0x1f0
[  822.350919][T15787]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  822.350946][T15787]  ? tun_get+0x1c/0x2f0
[  822.350974][T15787]  ? tun_get+0x1c/0x2f0
[  822.351010][T15787]  ? tun_get+0x1c/0x2f0
[  822.351039][T15787]  ? tun_get+0x1c/0x2f0
[  822.351069][T15787]  tun_chr_write_iter+0x119/0x200
[  822.351119][T15787]  vfs_write+0x629/0xba0
[  822.351158][T15787]  ? __pfx_vfs_write+0x10/0x10
[  822.351196][T15787]  ? __fget_files+0x2a/0x420
[  822.351227][T15787]  ksys_write+0x156/0x270
[  822.351259][T15787]  ? __pfx_ksys_write+0x10/0x10
[  822.351300][T15787]  do_syscall_64+0xe2/0xf80
[  822.351330][T15787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.351352][T15787]  ? trace_irq_disable+0x37/0x100
[  822.351382][T15787]  ? clear_bhb_loop+0x60/0xb0
[  822.351409][T15787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.351430][T15787] RIP: 0033:0x7f0d6dd8b78e
[  822.351452][T15787] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  822.351471][T15787] RSP: 002b:00007f0d6c01dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  822.351494][T15787] RAX: ffffffffffffffda RBX: 00007f0d6c01e6c0 RCX: 00007f0d6dd8b78e
[  822.351511][T15787] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8
[  822.351526][T15787] RBP: 00007f0d6c01e090 R08: 0000000000000000 R09: 0000000000000000
[  822.351540][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  822.351554][T15787] R13: 00007f0d6e046038 R14: 00007f0d6e045fa0 R15: 00007ffd6f747408
[  822.351589][T15787]  </TASK>
[  822.409104][T13741] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  822.599559][T13741] usb 5-1: device descriptor read/8, error -71
[  822.837630][T13741] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  822.886467][T13741] usb 5-1: device descriptor read/8, error -71
[  822.990657][T13741] usb usb5-port1: unable to enumerate USB device
[  824.213019][T15814] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  825.942470][T15825] use of bytesused == 0 is deprecated and will be removed in the future,
[  825.942492][T15825] use the actual size instead.
[  826.239584][T15812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3543'.
[  826.239606][T15812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3543'.
[  826.239629][T15812] netlink: 'syz.4.3543': attribute type 4 has an invalid length.
[  826.723548][T12360] hsr_slave_0: left promiscuous mode
[  826.763102][T12360] hsr_slave_1: left promiscuous mode
[  826.764243][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  826.764272][T12360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  826.813024][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  826.813054][T12360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  826.946947][   T38] kauditd_printk_skb: 40 callbacks suppressed
[  826.946966][   T38] audit: type=1326 audit(1770372200.782:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ad6daeb9 code=0x7ffc0000
[  826.947025][   T38] audit: type=1326 audit(1770372200.792:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ad6daeb9 code=0x7ffc0000
[  826.947071][   T38] audit: type=1326 audit(1770372200.792:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70ad69b78e code=0x7ffc0000
[  826.947117][   T38] audit: type=1326 audit(1770372200.792:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  826.947164][   T38] audit: type=1326 audit(1770372200.792:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  826.952515][   T38] audit: type=1326 audit(1770372200.792:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  826.952572][   T38] audit: type=1326 audit(1770372200.792:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  827.132755][   T38] audit: type=1326 audit(1770372200.981:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  827.194167][   T38] audit: type=1326 audit(1770372201.055:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  827.257399][  T869] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  827.262427][   T38] audit: type=1326 audit(1770372201.128:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70ad6dab4b code=0x7ffc0000
[  827.381381][T12360] veth1_macvtap: left promiscuous mode
[  827.381494][T12360] veth0_macvtap: left promiscuous mode
[  827.381791][T12360] veth1_vlan: left promiscuous mode
[  827.381973][T12360] veth0_vlan: left promiscuous mode
[  827.419158][  T869] usb 1-1: Using ep0 maxpacket: 8
[  827.426306][  T869] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  827.426335][  T869] usb 1-1: config 0 has no interface number 0
[  827.445087][  T869] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  827.445120][  T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.445140][  T869] usb 1-1: Product: syz
[  827.445156][  T869] usb 1-1: Manufacturer: syz
[  827.445170][  T869] usb 1-1: SerialNumber: syz
[  827.491723][  T869] usb 1-1: config 0 descriptor??
[  827.561764][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  827.706102][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  827.723243][ T5886] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  827.723294][ T5886] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  827.724227][ T5886] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  827.724311][ T5886] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  827.726219][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0
[  827.795446][ T5886] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  827.795541][ T5886] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  827.795567][ T5886] usb 3-1: Product: syz
[  827.795583][ T5886] usb 3-1: Manufacturer: syz
[  827.795600][ T5886] usb 3-1: SerialNumber: syz
[  827.884618][ T5886] usb 3-1: config 0 descriptor??
[  827.940408][ T5886] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  828.048830][ T5886] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  828.338165][T13741] usb 3-1: USB disconnect, device number 13
[  828.338255][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  828.376674][T13741] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  831.887066][T12360] team0 (unregistering): Port device team_slave_1 removed
[  832.215958][T12360] team0 (unregistering): Port device team_slave_0 removed
[  832.344781][  T869] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22
[  834.708608][T15850] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3551'.
[  834.739773][T15593] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  834.808599][T13741] usb 1-1: USB disconnect, device number 49
[  834.859514][T15593] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  834.971791][T15593] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  835.072267][T15593] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  835.111123][T15904] evm: overlay not supported
[  835.358461][T15916] 9p: Bad value for 'rfdno'
[  835.399922][T15916] program syz.3.3560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  835.419831][T15593] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.472388][T15593] 8021q: adding VLAN 0 to HW filter on device team0
[  835.545754][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.545905][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  835.631430][T12354] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.660492][T12354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  835.915809][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'.
[  836.702402][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'.
[  836.781044][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'.
[  836.854979][T15959] FAULT_INJECTION: forcing a failure.
[  836.854979][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  836.855020][T15959] CPU: 0 UID: 0 PID: 15959 Comm: syz.3.3573 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  836.855051][T15959] Tainted: [L]=SOFTLOCKUP
[  836.855059][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  836.855090][T15959] Call Trace:
[  836.855099][T15959]  <TASK>
[  836.855110][T15959]  dump_stack_lvl+0xe8/0x150
[  836.855155][T15959]  should_fail_ex+0x46b/0x600
[  836.855186][T15959]  _copy_from_user+0x2d/0xb0
[  836.855216][T15959]  ___sys_sendmsg+0x1c6/0x360
[  836.855240][T15959]  ? __lock_acquire+0x6b5/0x2cf0
[  836.855270][T15959]  ? __pfx____sys_sendmsg+0x10/0x10
[  836.855331][T15959]  ? __fget_files+0x2a/0x420
[  836.855352][T15959]  ? __fget_files+0x3a6/0x420
[  836.855384][T15959]  __x64_sys_sendmsg+0x1c3/0x2a0
[  836.855412][T15959]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  836.855446][T15959]  ? __pfx_ksys_write+0x10/0x10
[  836.855488][T15959]  do_syscall_64+0xe2/0xf80
[  836.855517][T15959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.855539][T15959]  ? trace_irq_disable+0x37/0x100
[  836.855570][T15959]  ? clear_bhb_loop+0x60/0xb0
[  836.855598][T15959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.855621][T15959] RIP: 0033:0x7f3bf1eaaeb9
[  836.855642][T15959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  836.855662][T15959] RSP: 002b:00007f3bf00fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  836.855686][T15959] RAX: ffffffffffffffda RBX: 00007f3bf2125fa0 RCX: 00007f3bf1eaaeb9
[  836.855703][T15959] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003
[  836.855718][T15959] RBP: 00007f3bf00fe090 R08: 0000000000000000 R09: 0000000000000000
[  836.855732][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  836.855746][T15959] R13: 00007f3bf2126038 R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  836.855781][T15959]  </TASK>
[  837.144162][T15593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  837.288337][T15593] veth0_vlan: entered promiscuous mode
[  837.351346][T15593] veth1_vlan: entered promiscuous mode
[  837.605934][T15593] veth0_macvtap: entered promiscuous mode
[  837.794231][T15593] veth1_macvtap: entered promiscuous mode
[  838.216332][T15593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  838.313788][T15593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  838.423242][T12340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  838.424724][T12340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  838.424988][T12340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  838.425031][T12340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  838.864552][ T6390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  838.864572][ T6390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.019450][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.019476][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  840.357459][T16019] FAULT_INJECTION: forcing a failure.
[  840.357459][T16019] name failslab, interval 1, probability 0, space 0, times 0
[  840.357500][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.3.3595 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  840.357532][T16019] Tainted: [L]=SOFTLOCKUP
[  840.357541][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  840.357554][T16019] Call Trace:
[  840.357564][T16019]  <TASK>
[  840.357575][T16019]  dump_stack_lvl+0xe8/0x150
[  840.357613][T16019]  should_fail_ex+0x46b/0x600
[  840.357642][T16019]  should_failslab+0xa8/0x100
[  840.357677][T16019]  __kmalloc_noprof+0xdf/0x7c0
[  840.357708][T16019]  ? kfree+0x4d/0x8f0
[  840.357732][T16019]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  840.357762][T16019]  tomoyo_realpath_from_path+0xe3/0x5d0
[  840.357786][T16019]  ? tomoyo_domain+0xd8/0x130
[  840.357815][T16019]  ? tomoyo_path_number_perm+0x219/0x630
[  840.357848][T16019]  tomoyo_path_number_perm+0x246/0x630
[  840.357883][T16019]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  840.357912][T16019]  ? __lock_acquire+0x6b5/0x2cf0
[  840.357941][T16019]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.358011][T16019]  ? __fget_files+0x2a/0x420
[  840.358036][T16019]  ? __fget_files+0x2a/0x420
[  840.358055][T16019]  ? __fget_files+0x3a6/0x420
[  840.358073][T16019]  ? __fget_files+0x2a/0x420
[  840.358098][T16019]  security_file_ioctl+0xc3/0x2a0
[  840.358143][T16019]  __se_sys_ioctl+0x47/0x170
[  840.358172][T16019]  do_syscall_64+0xe2/0xf80
[  840.358201][T16019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.358222][T16019]  ? trace_irq_disable+0x37/0x100
[  840.358252][T16019]  ? clear_bhb_loop+0x60/0xb0
[  840.358278][T16019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.358300][T16019] RIP: 0033:0x7f3bf1eaaeb9
[  840.358320][T16019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.358338][T16019] RSP: 002b:00007f3bf00fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  840.358360][T16019] RAX: ffffffffffffffda RBX: 00007f3bf2125fa0 RCX: 00007f3bf1eaaeb9
[  840.358377][T16019] RDX: 0000200000000340 RSI: 00000000c05c6104 RDI: 0000000000000005
[  840.358392][T16019] RBP: 00007f3bf00fe090 R08: 0000000000000000 R09: 0000000000000000
[  840.358404][T16019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  840.358417][T16019] R13: 00007f3bf2126038 R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  840.358452][T16019]  </TASK>
[  840.358461][T16019] ERROR: Out of memory at tomoyo_realpath_from_path.
[  840.684790][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'.
[  844.058298][T13741] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  844.182368][T13741] usb 1-1: device descriptor read/64, error -71
[  844.292248][T12032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  844.310518][T12032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  844.324210][T12032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  844.333786][T12032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  844.335593][T12032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  844.412597][T13741] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  844.544024][T13741] usb 1-1: device descriptor read/64, error -71
[  844.827071][T13741] usb usb1-port1: attempt power cycle
[  845.573026][T13741] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  845.592820][T13741] usb 1-1: device descriptor read/8, error -71
[  846.186384][T16069] chnl_net:caif_netlink_parms(): no params data found
[  846.277452][ T5809] Bluetooth: hci1: command tx timeout
[  846.292875][T16092] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3620'.
[  846.392157][T12591] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  846.565627][T12591] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4
[  846.565662][T12591] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  846.565682][T12591] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64
[  846.565702][T12591] usb 3-1: config 0 interface 0 has no altsetting 0
[  846.568174][T12591] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  846.568206][T12591] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  846.568222][T12591] usb 3-1: Product: syz
[  846.568233][T12591] usb 3-1: Manufacturer: syz
[  846.568245][T12591] usb 3-1: SerialNumber: syz
[  846.578310][T12591] usb 3-1: config 0 descriptor??
[  846.601441][T13741] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  846.658962][T13741] usb 1-1: Using ep0 maxpacket: 32
[  846.673310][T16089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  846.692425][T13741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.692459][T13741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.692499][T13741] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  846.692524][T13741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.756380][T12591] usb 3-1: selecting invalid altsetting 0
[  846.760480][T13741] usb 1-1: config 0 descriptor??
[  846.768035][T13741] hub 1-1:0.0: USB hub found
[  846.965967][T13741] hub 1-1:0.0: 6 ports detected
[  846.966507][T13741] hub 1-1:0.0: insufficient power available to use all downstream ports
[  847.040036][T12591] usb 3-1: USB disconnect, device number 14
[  847.256465][T16105] udevd[16105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  847.629887][   T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  847.777598][   T31] usb 4-1: Using ep0 maxpacket: 32
[  847.778860][   T31] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  847.780310][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.780335][   T31] usb 4-1: config 0 has no interface number 0
[  847.781772][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.781798][   T31] usb 4-1: config 0 has no interface number 0
[  847.796854][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.797049][   T31] usb 4-1: config 0 has no interface number 0
[  847.870761][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.870850][   T31] usb 4-1: config 0 has no interface number 0
[  847.874341][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.874361][   T31] usb 4-1: config 0 has no interface number 0
[  847.902892][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.902921][   T31] usb 4-1: config 0 has no interface number 0
[  847.927775][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.927805][   T31] usb 4-1: config 0 has no interface number 0
[  847.929278][   T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  847.929303][   T31] usb 4-1: config 0 has no interface number 0
[  847.980364][   T31] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  847.980460][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.980483][   T31] usb 4-1: Product: syz
[  847.980500][   T31] usb 4-1: Manufacturer: syz
[  847.980516][   T31] usb 4-1: SerialNumber: syz
[  848.042873][   T31] usb 4-1: config 0 descriptor??
[  848.054270][T12360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.075136][   T31] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz)
[  848.260497][ T5809] Bluetooth: hci1: command tx timeout
[  848.309377][T16069] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.309577][T16069] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.309770][T16069] bridge_slave_0: entered allmulticast mode
[  848.313116][T16069] bridge_slave_0: entered promiscuous mode
[  848.345636][T16069] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.345858][T16069] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.346145][T16069] bridge_slave_1: entered allmulticast mode
[  848.349087][T16069] bridge_slave_1: entered promiscuous mode
[  848.422482][T16069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.427865][T16069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.465673][T16109] FAULT_INJECTION: forcing a failure.
[  848.465673][T16109] name failslab, interval 1, probability 0, space 0, times 0
[  848.465713][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.3.3626 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  848.465742][T16109] Tainted: [L]=SOFTLOCKUP
[  848.465754][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  848.465768][T16109] Call Trace:
[  848.465777][T16109]  <TASK>
[  848.465787][T16109]  dump_stack_lvl+0xe8/0x150
[  848.465825][T16109]  should_fail_ex+0x46b/0x600
[  848.465855][T16109]  should_failslab+0xa8/0x100
[  848.465890][T16109]  __kmalloc_noprof+0xdf/0x7c0
[  848.465922][T16109]  ? kfree+0x4d/0x8f0
[  848.465946][T16109]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  848.465975][T16109]  tomoyo_realpath_from_path+0xe3/0x5d0
[  848.466001][T16109]  ? tomoyo_domain+0xd8/0x130
[  848.466056][T16109]  ? tomoyo_path_number_perm+0x219/0x630
[  848.466088][T16109]  tomoyo_path_number_perm+0x246/0x630
[  848.466124][T16109]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  848.466153][T16109]  ? __lock_acquire+0x6b5/0x2cf0
[  848.466190][T16109]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.466261][T16109]  ? __fget_files+0x2a/0x420
[  848.466284][T16109]  ? __fget_files+0x2a/0x420
[  848.466303][T16109]  ? __fget_files+0x3a6/0x420
[  848.466322][T16109]  ? __fget_files+0x2a/0x420
[  848.466346][T16109]  security_file_ioctl+0xc3/0x2a0
[  848.466379][T16109]  __se_sys_ioctl+0x47/0x170
[  848.466408][T16109]  do_syscall_64+0xe2/0xf80
[  848.466438][T16109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.466461][T16109]  ? clear_bhb_loop+0x60/0xb0
[  848.466487][T16109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.466509][T16109] RIP: 0033:0x7f3bf1eaab4b
[  848.466529][T16109] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  848.466549][T16109] RSP: 002b:00007f3bf00fcf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  848.466572][T16109] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3bf1eaab4b
[  848.466588][T16109] RDX: 00007f3bf00fcfe0 RSI: 0000000040085507 RDI: 0000000000000003
[  848.466603][T16109] RBP: 0000000000000003 R08: 00007f3bf2250320 R09: 0000000000000000
[  848.466617][T16109] R10: 0000000000000003 R11: 0000000000000246 R12: 00002000000002c0
[  848.466632][T16109] R13: 000000000000000a R14: 00007f3bf2125fa0 R15: 00007ffc3505f198
[  848.466667][T16109]  </TASK>
[  848.495366][T16109] ERROR: Out of memory at tomoyo_realpath_from_path.
[  848.743292][T13741] hub 1-1:0.0: hub_ext_port_status failed (err = -32)
[  848.853710][T16069] team0: Port device team_slave_0 added
[  848.887965][T16121] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3631'.
[  849.108411][T12360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.207775][T16069] team0: Port device team_slave_1 added
[  849.562437][T16129] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size.
[  850.110376][   T31] etas_es58x 4-1:0.2: could not retrieve the product info string
[  850.165664][T12591] usb 1-1: USB disconnect, device number 53
[  850.249215][ T5809] Bluetooth: hci1: command tx timeout
[  850.839711][ T5872] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  851.011032][ T5872] usb 3-1: Using ep0 maxpacket: 16
[  851.013122][ T5872] usb 3-1: config 2 has an invalid interface number: 249 but max is 1
[  851.013143][ T5872] usb 3-1: config 2 has an invalid interface number: 232 but max is 1
[  851.013159][ T5872] usb 3-1: config 2 has no interface number 0
[  851.013172][ T5872] usb 3-1: config 2 has no interface number 1
[  851.013214][ T5872] usb 3-1: config 2 interface 249 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 64
[  851.013233][ T5872] usb 3-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  851.013249][ T5872] usb 3-1: config 2 interface 249 altsetting 10 has a duplicate endpoint with address 0x3, skipping
[  851.013268][ T5872] usb 3-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  851.013290][ T5872] usb 3-1: config 2 interface 249 altsetting 10 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  851.013323][ T5872] usb 3-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  851.013351][ T5872] usb 3-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  851.013369][ T5872] usb 3-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  851.013386][ T5872] usb 3-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  851.013404][ T5872] usb 3-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  851.013421][ T5872] usb 3-1: config 2 interface 232 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  851.013436][ T5872] usb 3-1: config 2 interface 249 has no altsetting 0
[  851.013450][ T5872] usb 3-1: config 2 interface 232 has no altsetting 0
[  851.016938][ T5872] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a58, bcdDevice=ee.c2
[  851.016961][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.016977][ T5872] usb 3-1: Product: 叨溰〕⎅굣䜖⽃蹣㑌株䜺ᶄ홁翟内ᇚ䈇北⩒࿏⹹珧ᴲ驊
[  851.016992][ T5872] usb 3-1: Manufacturer: Љ
[  851.017003][ T5872] usb 3-1: SerialNumber: 、
[  851.133055][T16143] input: syz1 as /devices/virtual/input/input25
[  851.258744][T13741] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  851.297415][T16140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  851.743727][T12360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.805991][T16069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  851.806006][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  851.806027][T16069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  851.811257][T13741] usb 1-1: Using ep0 maxpacket: 16
[  851.873918][T13741] usb 1-1: config 0 has an invalid interface number: 195 but max is 0
[  851.873958][T13741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  851.873979][T13741] usb 1-1: config 0 has no interface number 0
[  851.920291][T13741] usb 1-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf
[  851.920326][T13741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.920349][T13741] usb 1-1: Product: syz
[  851.920364][T13741] usb 1-1: Manufacturer: syz
[  851.920379][T13741] usb 1-1: SerialNumber: syz
[  852.041158][T16069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  852.041173][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.041196][T16069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  852.116380][T13741] usb 1-1: config 0 descriptor??
[  852.189578][   T31] usb 4-1: USB disconnect, device number 45
[  852.221110][ T5809] Bluetooth: hci1: command tx timeout
[  852.264697][   T31] etas_es58x 4-1:0.2: Disconnecting syz syz
[  852.267561][ T5872] usb 3-1: USB disconnect, device number 15
[  852.333151][T13741] cxacru 1-1:0.195: usbatm_usb_probe: bind failed: -19!
[  852.448952][T12360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.609173][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  852.609249][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  852.785648][T16069] hsr_slave_0: entered promiscuous mode
[  852.787183][T16069] hsr_slave_1: entered promiscuous mode
[  852.955383][    T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  853.106456][   T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  853.129620][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  853.129654][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.129676][    T9] usb 2-1: Product: syz
[  853.129692][    T9] usb 2-1: Manufacturer: syz
[  853.129707][    T9] usb 2-1: SerialNumber: syz
[  853.209689][    T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  853.249539][   T31] usb 4-1: Using ep0 maxpacket: 16
[  853.259010][   T31] usb 4-1: config 2 has an invalid interface number: 249 but max is 1
[  853.259048][   T31] usb 4-1: config 2 has an invalid interface number: 232 but max is 1
[  853.259070][   T31] usb 4-1: config 2 has no interface number 0
[  853.259087][   T31] usb 4-1: config 2 has no interface number 1
[  853.259145][   T31] usb 4-1: config 2 interface 249 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 64
[  853.259173][   T31] usb 4-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  853.259197][   T31] usb 4-1: config 2 interface 249 altsetting 10 has a duplicate endpoint with address 0x3, skipping
[  853.259223][   T31] usb 4-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  853.259248][   T31] usb 4-1: config 2 interface 249 altsetting 10 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  853.259276][   T31] usb 4-1: config 2 interface 249 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  853.259317][   T31] usb 4-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  853.259341][   T31] usb 4-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  853.259366][   T31] usb 4-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  853.259392][   T31] usb 4-1: config 2 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  853.259415][   T31] usb 4-1: config 2 interface 232 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  853.259437][   T31] usb 4-1: config 2 interface 249 has no altsetting 0
[  853.259457][   T31] usb 4-1: config 2 interface 232 has no altsetting 0
[  853.314794][   T31] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a58, bcdDevice=ee.c2
[  853.314860][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.314884][   T31] usb 4-1: Product: 叨溰〕⎅굣䜖⽃蹣㑌株䜺ᶄ홁翟内ᇚ䈇北⩒࿏⹹珧ᴲ驊
[  853.314905][   T31] usb 4-1: Manufacturer: Љ
[  853.314921][   T31] usb 4-1: SerialNumber: 、
[  853.469556][T16147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  853.541195][ T5886] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  853.760839][   T31] usb 4-1: USB disconnect, device number 46
[  853.837631][T12360] bridge_slave_1: left allmulticast mode
[  853.837655][T12360] bridge_slave_1: left promiscuous mode
[  853.854941][T12360] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.914326][T12591] usb 1-1: USB disconnect, device number 54
[  854.365187][T16168] FAULT_INJECTION: forcing a failure.
[  854.365187][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  854.365257][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.2.3645 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  854.365289][T16168] Tainted: [L]=SOFTLOCKUP
[  854.365298][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  854.365312][T16168] Call Trace:
[  854.365322][T16168]  <TASK>
[  854.365332][T16168]  dump_stack_lvl+0xe8/0x150
[  854.365369][T16168]  should_fail_ex+0x46b/0x600
[  854.365399][T16168]  _copy_from_user+0x2d/0xb0
[  854.365430][T16168]  __sys_bind+0x1cc/0x410
[  854.365467][T16168]  ? __pfx___sys_bind+0x10/0x10
[  854.365510][T16168]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  854.365568][T16168]  __x64_sys_bind+0x7a/0x90
[  854.365603][T16168]  do_syscall_64+0xe2/0xf80
[  854.365632][T16168]  ? rcu_is_watching+0x15/0xb0
[  854.365659][T16168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.365683][T16168]  ? clear_bhb_loop+0x60/0xb0
[  854.365718][T16168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.365740][T16168] RIP: 0033:0x7f0d6ddcaeb9
[  854.365761][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.365781][T16168] RSP: 002b:00007f0d6bfdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  854.365806][T16168] RAX: ffffffffffffffda RBX: 00007f0d6e046180 RCX: 00007f0d6ddcaeb9
[  854.365823][T16168] RDX: 0000000000000014 RSI: 0000200000000040 RDI: 0000000000000005
[  854.365838][T16168] RBP: 00007f0d6bfdc090 R08: 0000000000000000 R09: 0000000000000000
[  854.365852][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  854.365865][T16168] R13: 00007f0d6e046218 R14: 00007f0d6e046180 R15: 00007ffd6f747408
[  854.365901][T16168]  </TASK>
[  854.874422][  T869] usb 2-1: USB disconnect, device number 52
[  854.916529][   T31] ==================================================================
[  854.916547][   T31] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  854.916589][   T31] Read of size 8 at addr ffffc9000e2b3008 by task kworker/1:0/31
[  854.916605][   T31] 
[  854.916619][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  854.916647][   T31] Tainted: [L]=SOFTLOCKUP
[  854.916654][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  854.916668][   T31] Workqueue: usb_hub_wq hub_event
[  854.916690][   T31] Call Trace:
[  854.916699][   T31]  <TASK>
[  854.916707][   T31]  dump_stack_lvl+0xe8/0x150
[  854.916734][   T31]  print_report+0xba/0x230
[  854.916755][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.916783][   T31]  kasan_report+0x117/0x150
[  854.916811][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.916843][   T31]  __list_add_valid_or_report+0x4e/0x130
[  854.916873][   T31]  kcov_remote_stop+0x457/0x680
[  854.916902][   T31]  hub_event+0x49d8/0x4f60
[  854.916918][   T31]  ? __perf_event_task_sched_in+0xf2/0x1800
[  854.916952][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  854.916988][   T31]  ? __pfx_hub_event+0x10/0x10
[  854.917004][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.917024][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.917040][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.917058][   T31]  process_scheduled_works+0xaec/0x17a0
[  854.917088][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  854.917104][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  854.917134][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  854.917161][   T31]  ? schedule+0x90/0x360
[  854.917188][   T31]  worker_thread+0xda6/0x1360
[  854.917217][   T31]  kthread+0x726/0x8b0
[  854.917240][   T31]  ? __pfx_worker_thread+0x10/0x10
[  854.917257][   T31]  ? __pfx_kthread+0x10/0x10
[  854.917280][   T31]  ? rt_spin_unlock+0x14f/0x200
[  854.917305][   T31]  ? rt_spin_unlock+0x160/0x200
[  854.917326][   T31]  ? __pfx_kthread+0x10/0x10
[  854.917352][   T31]  ret_from_fork+0x51b/0xa40
[  854.917377][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  854.917399][   T31]  ? __switch_to+0xc82/0x1410
[  854.917435][   T31]  ? __pfx_kthread+0x10/0x10
[  854.917464][   T31]  ret_from_fork_asm+0x1a/0x30
[  854.917507][   T31]  </TASK>
[  854.917516][   T31] 
[  854.917523][   T31] The buggy address belongs to a vmalloc virtual mapping
[  854.917544][   T31] Memory state around the buggy address:
[  854.917557][   T31]  ffffc9000e2b2f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  854.917572][   T31]  ffffc9000e2b2f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  854.917588][   T31] >ffffc9000e2b3000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  854.917609][   T31]                       ^
[  854.917622][   T31]  ffffc9000e2b3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  854.917637][   T31]  ffffc9000e2b3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  854.917650][   T31] ==================================================================
[  854.917668][   T31] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  854.917692][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  854.917723][   T31] Tainted: [L]=SOFTLOCKUP
[  854.917732][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  854.917748][   T31] Workqueue: usb_hub_wq hub_event
[  854.917770][   T31] Call Trace:
[  854.917778][   T31]  <TASK>
[  854.917788][   T31]  vpanic+0x1e0/0x670
[  854.917820][   T31]  panic+0xc5/0xd0
[  854.917849][   T31]  ? __pfx_panic+0x10/0x10
[  854.917882][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.917923][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.917965][   T31]  check_panic_on_warn+0x89/0xb0
[  854.917997][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.918033][   T31]  end_report+0x6f/0x140
[  854.918066][   T31]  kasan_report+0x128/0x150
[  854.918099][   T31]  ? __list_add_valid_or_report+0x4e/0x130
[  854.918138][   T31]  __list_add_valid_or_report+0x4e/0x130
[  854.918177][   T31]  kcov_remote_stop+0x457/0x680
[  854.918210][   T31]  hub_event+0x49d8/0x4f60
[  854.918232][   T31]  ? __perf_event_task_sched_in+0xf2/0x1800
[  854.918261][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  854.918306][   T31]  ? __pfx_hub_event+0x10/0x10
[  854.918328][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.918353][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.918374][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[  854.918397][   T31]  process_scheduled_works+0xaec/0x17a0
[  854.918435][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  854.918456][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  854.918492][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  854.918526][   T31]  ? schedule+0x90/0x360
[  854.918557][   T31]  worker_thread+0xda6/0x1360
[  854.918593][   T31]  kthread+0x726/0x8b0
[  854.918622][   T31]  ? __pfx_worker_thread+0x10/0x10
[  854.918644][   T31]  ? __pfx_kthread+0x10/0x10
[  854.918670][   T31]  ? rt_spin_unlock+0x14f/0x200
[  854.918695][   T31]  ? rt_spin_unlock+0x160/0x200
[  854.918718][   T31]  ? __pfx_kthread+0x10/0x10
[  854.918745][   T31]  ret_from_fork+0x51b/0xa40
[  854.918777][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  854.918799][   T31]  ? __switch_to+0xc82/0x1410
[  854.918832][   T31]  ? __pfx_kthread+0x10/0x10
[  854.918861][   T31]  ret_from_fork_asm+0x1a/0x30
[  854.918902][   T31]  </TASK>
[  854.919499][   T31] Kernel Offset: disabled