last executing test programs:

4m7.0040531s ago: executing program 2 (id=3):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5000000000003ad0d6a200000000c00095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x8, 0x3, 0x3a2e, 0x2, 0x4, 0xd2c7, 0x6, 0x4, 0x1, 0xe, 0x6, 0x5, 0xaf, 0x2231815}})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)="aa14b0abaffc61", 0x7}, {0x0}], 0x100000000000033a)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790003000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x89901)
umount2(&(0x7f0000000080)='./file0\x00', 0x2)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x5874, 0x8000000000000001})
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40090)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94)

4m6.804877251s ago: executing program 2 (id=6):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3, 0x5, 0x2, 0x6d}, {0x2, 0x5, 0xb4, 0x3}, {0xa0, 0xe, 0x61, 0x4}, {0x5, 0x8, 0x8e, 0x5}, {0xff7f, 0x0, 0x8, 0x4}]}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x2, &(0x7f0000000340)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3, 0x5, 0x2, 0x6d}, {0x2, 0x5, 0xb4, 0x3}, {0xa0, 0xe, 0x61, 0x4}, {0x5, 0x8, 0x8e, 0x5}, {0xff7f, 0x0, 0x8, 0x4}]}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000100)='%-010d \x00'}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x2, &(0x7f0000000340)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

4m6.585455423s ago: executing program 2 (id=7):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2009a3, 0x0, 0x0, 0x0, 0xc6c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)

4m6.400813338s ago: executing program 2 (id=8):
ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000140)={0x4fc48b83, 0x10000, 0x0, 0x40, 0x1, 0x1ff, 0x2, 0xc, 0x4, 0x7, 0x100, 0x7, &(0x7f0000000040)=[0x7, 0x2, 0x7fffffff, 0xfffffe01, 0x8], 0x5, &(0x7f00000000c0)="e042a1a24c3ca5e291fd0091fb12aca24eaf0b9ea1049495171e87397c2b8b9a3d7c57094c545ab4fe70957178078df43ec0b8e5a33e14a41b4f9a81fba9e0b587006b68252595de231512043b6e0d30d5bc96749f7bd5f4d8dc", 0x5a})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b801000dce401800c"], 0xe8}}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
tee(r2, 0xffffffffffffffff, 0x80000001, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000000440)=""/181, 0xb5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff)
pipe(&(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
r6 = socket(0xa, 0x3, 0x38)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x0, 0x0)

4m1.104837448s ago: executing program 2 (id=13):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r1=>0x0})
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1}}], 0x28)
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x82, 0x3, 0x4, 0x2, "e8ab3537a1389b6d"}, 0x48}}, 0x0)

4m0.628681131s ago: executing program 2 (id=14):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r0, 0xfffffff9)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, ')(@*'}], 0xa, "008b3d5978e084027813"}, 0x24)
write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}})
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000140)={0x40, 0x28, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3m44.968734969s ago: executing program 32 (id=14):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r0, 0xfffffff9)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, ')(@*'}], 0xa, "008b3d5978e084027813"}, 0x24)
write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}})
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000140)={0x40, 0x28, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

16.894106556s ago: executing program 3 (id=713):
syz_emit_ethernet(0x9f2, &(0x7f0000000800)={@random="ff2000", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x9bc, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0x9, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805df3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f306001a9f51a948b5b303f4f02500"/87}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0)

11.008538714s ago: executing program 4 (id=730):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x3, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)}, 0x40)
r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
unshare(0x22020600) (async)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) (async)
r5 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000a40)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) (async)
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}}}}}}, 0x0) (async)
fcntl$setstatus(r3, 0x403, 0x26c00) (async)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_procfs(0x0, 0x0) (async)
r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r8)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x6003, 0x0, 0x5, 0x3)
syz_open_procfs(r1, &(0x7f0000001080)='smaps_rollup\x00')

10.246795263s ago: executing program 0 (id=734):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB], 0x458c}, 0x1, 0x0, 0x0, 0xc0c4}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101"], 0x1138}}, 0xc000)

9.668179999s ago: executing program 0 (id=739):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f0000000380)=[{0x2000000, 0x0, 0x0, 0x40, 0x6}]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44c03, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = dup(r1)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0xffffffff80020810, 0x5, 0x1d7a, 0x5, 0xbe, 0x0, 0x0, 0x4, 0x6}}, 0x50)

7.945041661s ago: executing program 0 (id=742):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94)

7.633691643s ago: executing program 4 (id=745):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r0, 0x47c0, 0x20000000, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0xa82)
mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2800006, 0x13, r3, 0x1ffe0000000000)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r4 = getpgrp(0x0)
r5 = gettid()
rt_tgsigqueueinfo(r4, r5, 0xb, &(0x7f00000000c0)={0x3b, 0x8000006, 0x4})
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={[0x2]}, 0x8)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12d2191954c92c010203010902120001000010000914cf07000202ff0000000000000000"], 0x0)

7.448872004s ago: executing program 3 (id=746):
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100ff01000000000000e0000002000000000000000000000000ac14140d00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f0000000000000000000000000200000000000000000000000000000000000000000000030900000000000000ffffffffffffffff000000000000000000000000000000000000000e0000000001000002000000004400050020010000000000000000000000000000000000023c0000000a000000fc0100000000000000000000000000000000000004020000"], 0xfc}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="b7", 0x1}], 0x1}, 0x3e8)

7.126824014s ago: executing program 3 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = memfd_secret(0x80000)
readahead(r2, 0x7, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
lseek(r3, 0x1ff, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1], [0x88000001, 0x46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff41b, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x2000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0)
getdents64(r3, 0xffffffffffffffff, 0x43)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffe, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r5 = userfaultfd(0x1000)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2})

5.604879245s ago: executing program 1 (id=753):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a28700", "28bc90f4", "790f59276094db31"}, 0x28)
write$binfmt_aout(r4, 0x0, 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})

5.074706355s ago: executing program 3 (id=754):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.73912585s ago: executing program 3 (id=755):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0x8, 0xfd, 0x3, 0x11, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x10, 0x10001, 0x1}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f00000001c0)={r4})
r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x351a, 0x100, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a3200000000180003801400008008000340000000010400018004000b800900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}}, 0x0)

3.902074001s ago: executing program 4 (id=757):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f0000000380)=[{0x2000000, 0x0, 0x0, 0x40, 0x6}]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44c03, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
r6 = dup(r1)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0xffffffff80020810, 0x5, 0x1d7a, 0x5, 0xbe, 0x0, 0x0, 0x4, 0x6}}, 0x50)

3.724193208s ago: executing program 1 (id=759):
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(r0, 0x8, 0x0)

3.120981155s ago: executing program 5 (id=760):
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100ff01000000000000e0000002000000000000000000000000ac14140d00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f0000000000000000000000000200000000000000000000000000000000000000000000030900000000000000ffffffffffffffff000000000000000000000000000000000000000e0000000001000002000000004400050020010000000000000000000000000000000000023c0000000a000000fc0100000000000000000000000000000000000004020000"], 0xfc}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="b7", 0x1}], 0x1}, 0x3e8)

2.970466498s ago: executing program 1 (id=761):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x893, 0x101003)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0xa10000, 0x3, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x99096d, 0x9, '\x00', @p_u16=0x0}})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864d1, &(0x7f0000000200)={0x31, 0x0, 0x0, 0xb0b0b0b0})
connect$inet6(r1, &(0x7f0000000280)={0xa, 0xfdfe, 0x10000b, @mcast1, 0xa}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

2.801613503s ago: executing program 4 (id=762):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB], 0x458c}, 0x1, 0x0, 0x0, 0xc0c4}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101"], 0x1138}}, 0xc000)

2.712531324s ago: executing program 0 (id=763):
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0xa, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x2, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8, 0x800000065], 0x2000, 0x80cd4})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "0d3d4a3b5b7bc69a21cfb7f5eaac46dbe89b1347050000000000000002249341"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r9, 0x2, 0x0, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.711685104s ago: executing program 5 (id=764):
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c04100001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="0002cf0000000c000297"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
socket$inet6(0xa, 0x80002, 0x88)
pipe(&(0x7f0000000440))
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
accept(r2, 0x0, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7803, 0x2, {"00000000000000000000000000000001"}, 0x8000, 0x100005, 0x101}}}, 0xd4)
syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000040)={0x40, 0xe, 0xda, {0xda, 0xd, "52ce364b00a4fef9a51b5461f574e7e01fe3344497dbd3e9fe9baf947e9b13b95c770d0af9ddd23bdbfd7f05f57d9ccc59eeed32d3fe12692cc7e7ec7ec3e2de82480decd0b332812a6da6de3636fbbc7a4fb3ee32cb7d4e11a58cbfc60e18062c76c624ea25f332f238c2c4793dd3c5c449f884fa9a2e805990988cecc51823bb8fcf800a3c22ec983b16232803ed9f7d0077f74f3589b85a9bafadcbf4fdc2aab0fe07794842351cdd78b8565e321e0e7647612eef8a042e15250acda00a5ec303e3aebf062c59b21d1f796df673ccb67dec029477641c"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000366000000460382479e49b7c307bc8adb587d2942641b7f188e20a761319981569885b9843f43323a60f760120245de1005a72fd23b98f926b2d4ddea1ca344b30326d57118ccd11a467d"], &(0x7f0000000c40)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0x8e6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x2, 0x2, 0x5bf}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0xa, 0x9}]}}, &(0x7f0000000cc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x0, 0x4, 0x3, "ab20a32f", "0a7184a1"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, &(0x7f0000000d80)={0x40, 0x23, 0xe2, {0xe2, 0x6, "309095a580023888c7a8ba7a19f38dbe1bfddefb79ba2fb2f1c9ab6a2c609d649e2457d5a506f03b2bdd2fa3e050b337f0f58f3669cbaced3f6b980519135c675fe522ac3fb7be17f5a5d240280063af2861f0b9f857e37854a5462c78cf1e6b4b6325cad73ffabde3dbf664838017bf1c01ac263b32d9680126fe3976c38b61b9d86d1e5c08cbfac509a9a3a2e4da8edfb306dce7469f08ac706a1c63b08b25ede0b80bb578cf02ecec011e4c018d7d44adb01fab2e8d188a415f69cbea6c9fa21178c0c41e51188af2da21c7082183ef915bd2c9c11459c169105d47e0cebd"}}, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c03}}, &(0x7f0000000c80)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x6, "c7"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x69b}}}}, &(0x7f0000001100)={0x2c, &(0x7f0000001a40)={0x0, 0x30, 0x9c, "ebfed0528aa9da5da97045570712bee8f12d2a13800299c74ff1926f193916bf43c23bde55f42c7362873f631b6043bfb8d67c60f936d58b8da33a9e6f8bda0dbced5381ac3a30bf20cf41cac1bbdf25ad2c388bd1a5bf5876eba0db116f08b449698274f73384d5f8a5439c3717ed72bc08902cbc1621c6146bd19e16d4dd3a680348cb29d612af237d378a7cb88ff7504d1e8143c8b53c5901a782"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001040)={0x20, 0x1, 0x61, "1efa3056cec13c43389cf692a7bf3f973cea56e25c1b84e0cac7f14ae4f8d11771e1bf7537eefe47720f294760647cb983d44d6098728c25892518bd48d6a1188ecaa5fc1643859c79420c568b96e51b76e732f23a4a1bbbf8589cfb7e0ab9eab5"}, &(0x7f00000010c0)={0x20, 0x3, 0x1, 0x81}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000230000006111080000000000850000001900000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94)
syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000001140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x9, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d9ed6e58ef"}, {0x5, 0x24, 0x0, 0x3c9d}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xa9, 0x130b, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x11}, [@country_functional={0x6, 0x24, 0x7, 0xba, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xd, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0xf1, 0x5}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x310, 0x9, 0x7, 0x3a, 0x40, 0xf}, 0xcf, &(0x7f0000001300)={0x5, 0xf, 0xcf, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "fb89b5a2faf4e4fb5bf1ff9ff2b106e9"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0xf, 0x6, 0xe35a, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x10000, 0xff00, 0x3, [0x1769871bf9d74305, 0x0, 0x3fc0, 0xf]}, @generic={0x88, 0x10, 0x1, "c8ac8e289244de0c7fa5d43f9cf51eb436c227336c56f9151c7e157cdb2f50bb8e9ac10b697f17215d185813304c314af18f2a9c1d6ed528d706e086903e782e2b9328f81c21ac6eb332c7d798fab8ab6cb4cf2ecbfc1e8188811362339b06f01d38ef9beeb9ba9afd2359127b432ab58fd95cf1f59d9186b205b787785bc37b0086f2c6fc"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8}]}})

2.044336896s ago: executing program 5 (id=765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

2.021626587s ago: executing program 1 (id=766):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.808999338s ago: executing program 3 (id=767):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x3)
accept4$bt_l2cap(r1, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
syz_emit_ethernet(0x45, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}, "e9c9cee4837ae0"}}}}}, 0x0)

1.808484977s ago: executing program 5 (id=768):
syz_emit_ethernet(0x9f5, &(0x7f0000000800)={@random="ff2000", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x9bf, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805df3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f306001a9f51a948b5b303f4f02500"/87}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x0, 0xc8, "fca06311b404bf722cf06364ee49d1d33a69558cc4936aebf2f1a80d6cdb1d0cc17701e6152374fdc4bb7a24209117725839d0ee30d0041ab3b6cf4f16ab09546170b32b4ab35c624c848255416456abe7162b45ec1e8b42d7bba878ec610a8a03778931b49f53519887ee05795451ac3c3ca2d222e1a6fea611cd9f08adbb777e0cd67de188d27c0ee5e8bd2c76cff7ff14a4e249588ab5acd79044c61daf71fb88560d7fb1237c98a0707d84197b5b0605962c7a08f76b5a6f8ca28404a7a23f69aebcbb7ce8a992b52aee42756ba453856d6d187af7f62d4efbea4d1afccd1137e7f445233158ead8173baf8df610197656743854ffd52fa1aab3c5977422aca53d8ce83529638a997d9a9cca7402d939c39dec79ed274a586b69d798fb8649bb92dd78ed08c6518afcb196511b3e111826d4f1ef8e92d1e1c033160160a0dedea1baaed7eaa86adb4cb6c509116d66c5bde183defc33a4f907084ad89b92fea3cf60cce9aefceaa8a251fa5dc57ea1e648bf0a7a5b943f73291001790ccb1397d1b3e526ef30cbcc3204678063ffb9c4c07978b880a44e75a3be56f2029912631a1bc9d2e4f72127292dee3a98b1ebc03941a46475e8cacb75afa0e7d159bf83d925d1ea1849623eb3bc52acbf3f1be85c56ad2ae1c600b0e1124eaad8c21ba91878f9ceb9454352b0fe93856bb52bde7e08d14e5ac49e20e5af020c61de8fa2ca182bb1aa8049747e067011a553ce3bf7bd82c14cb4c90404c9b0451b590966c424918e0d582573c12a1c65aea5987350df5995fd38343be3a227f03f905a3c36102bbca9ccafb331e5f674b773e8f833919afbc0f8250da29a53dc260e0dcad772e542502924075ef5511cacd6fc533093f337d5a1ed93b50f2c186a86f6a2cd5ee37e77204fb99749a219ec6405e3860283ea41a2e69a1c48af70d4c56f6df00a2dd51acd29d1cae523ac9eeaaf3ea806395515bbb2c9a0168ff8c59c2975f2eee1f7b60e6fb9d0ef04f2940d956155fb0777e8be5a30debb690e243d4cf2663ddf7fa6f0ace86d0d881da1d8d7c08c62d08483661cd496771c42f7663d82ebfdb9f4caf2650f9d69c87e6867e426ce4521231d04efd516020b17b4e4bd7df8b33a6a6bdf6af4f2463f1ce96ede77d4dc9f89843ba7205e0e451933c0dc806896028beee7104b7792301e005806b0b06f652b91d96d5966f67d6a97631825851bc6c45f4a91a2a83e65c7df0048d167c4ecd3699b828f71358e4ca3f6918f30a981fcfe262bea444c6148577c9f1c76bf4d7111490110edae4b02b9cb43a79e34d96e93ac7d3351e151c1de3a8b2d4e73e92a08bec730d915bebe3f9c8d7f9e75f0e851ff63551b9b73547766827135fc683d8bf68199cad26910bea7a466153b22f6a7b48b8c34453ccc0ddd010d6cdff56023f5654fa6c3008bb7b33bf1db5634b47ca58e460285b1b4f4e32777c38f622fdd95bedabf3d5199d727ebbd4b9f2f396c7f43a29269afca56cfcd19d3a5dd1b316b8f4b0640f118df0518f6efceaa58cec88d581ff294b0cf5e9e5b8839e45d508c07f5fa7a9f91fd90fad1c9dc2110abda4eec60d60822be669f10e307dd1379284e956c59838020e8660cf5f852f92b8e0f43b98e9b3df23c69e16e8a3e7e3432620e8d6c3ca0d9b1b8d62da27bf73ec0fc32f6e3230375a2c4773838309966b8ba20cda4be78cfeb05629f34b539532cc625252b326b953cf0bd1292adc5893f93196548b3dedb6d0850cf187be05ddbaf19e36ceb5575c38b2b68992564988e4fa7d5e4b610917d4af1179ab4102d4dc73035ca709e7566f2e4f815ab4a702f6e2f5c917d77511d591965a587193e4d4e8ec9c330e5a76c8940b9521718f7c6af215efb77d308a3c23357b325840cdd53fc598e5e93f1b6c5a558c0522dbfeb9d23cf3b348c170ce18a58422eaf4fb59ba55fc3f808f9e1b6c817ea003e159ab064ee6beebc067be398c31d7248f2e31d41dcab766deffe603be89481d734d3af6e51ffa8cefdcfbcd27871162c66447edaa1bd8b3df8e061694592cd0cd1ac1a6329734ebb678ec84993fefd90e3f85a625e326b9d7817bd6c268b071fd5d5bb385bb478d56126cb2166948eabecb529d766c6900a5a7a897f0f1d898d295eeb9dc72e6fa521b86b2a604208b91016c1a08927a5944b1daa996500c4bccff47da146f389b03b02e6905ae8fdfc49d4848acad0e5f4ddd48f8e16cee2120fbfe6196133d4ee8d"}]}}}}}}, 0x0)

1.698309953s ago: executing program 1 (id=769):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a28700", "28bc90f4", "790f59276094db31"}, 0x28)
write$binfmt_aout(r4, 0x0, 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})

1.540043963s ago: executing program 4 (id=770):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000006"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc36}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
sendto$inet6(r5, &(0x7f0000000880)="79a9adb4d16ce5b12031186af33c63973c576fb51333b30baf4dc7ee589ac6461ebde17437ef1a982f9779ceedc06db27366c8f4987bec8bf9c34aa33f61f75644b55e99e04c2f6576cd0114791d8cffac21ac9db02384d470789cacd8a35e674c13b2d96886654340a46976b263d4b76dc536247736b9ca4c64180f9311a0482646614b808b1dc575014aae5d8e79a5bdff938bb66195ae62cbe57d2a8e5c554e141339d68bc4561458e8ba15f36249ea530078c9141f899fd28a8e2872c409acee89ec19275c81539514f60ff3b6b5257683d6692c59cdada8c40ee3f5987c4cfbbeaf310884c29facc379bf1936f2acc13bd58693446a3a965e0cf5fbfa4939fae3a4714676f2090cfa0103547f8a4f121954572efeee8eea9f732f3bf0a9a499f955cea5cbe3970d4e61ab1e6147b395ede145861fb551270a33327d807eb491460fc4cb9c6b406d3de64ffe2cd9254cbb756df3a703bad43c9b9694b3faf6276bb1d74896fd381b16dd8713e2bbaf4324eff3b9960ab12402cf0ff1c8cc9e31aa4154566c06f93bc63a8cbcf4dc59013360eefd407e8cfaf3c095d26cb71b4862036a72783face828a82acd4be5c05696f3bc46d626443739360aa48c8d77cde90e188702826c504c3f49514932835c9ef82684eeaa80596d7c4cdca7d7e7030a696eafe81c4690509a7e18e04a9ce00ff57afcb8c378027bb36faaefb8043c9983a3b97f9dcefe1bdb68ca1be813ef58361ff3a39b0762778bbcf9456f5379fc8417abb08ad4a6e301567f973054cce3299e0400b93ea6c801869a392a05549d3eec8b466e91089b81ab68e1af63e28c5f8383dffc170c70c3af0144a682d3008ce153a4c834d23e30d8f92cef5165dd7fe58a53454aff096e784d5a007991b85bde0e51c6a22bf3f08f7da43c33662543bd40e165c943de059b83133891b79b14ad1d62b64c8e0f6ddd22d118d9c7e61227ef46e9b84894004b893598f8732fff7a218916cbaeaeec9adf5bf952aef16144d2514fe6845fe051ea9a6f79e5a81e84434a63acca07cb0ac68264d67a8ec0ca035e4ae72b0d7b28db6e2f5fb01ae5803e53cc1c61bd90a6d1f4d90b05b56298c2421f6f588c444d2cd3c8d79cdc725d7b74f7311c59877f72ae6be6d64f66b170785e3299b5c6f6eefce32b137c153123c79f660220871bbd8ce6ec402a24d130f58005f014907da6b21ba94786fda5f975e808110d73172f8b94b89c2757bbdf4232b3d3466e6bc9a3d1884bbaab25b06deb529961b58cd9950d956672fde2fec4a2eead5e266d10fc58cd7976ea0e59ac21d3062a2e03c85c39854c2d080755201c8b8829a502901cc7404479bd5bbdec7f04ce251c142e44e4dc1c6223b8102c3a3bce7dbedd63abfa2bfcef46b7b1d84a8aacbfeb9c45c6f371ad46961cc4c1d75e9f8a9d9d777d9dad387ef93342430a3210d3374974c02f85f5a4d62b576597035597c735335e6ca7f513ceea9a44af6fbc98d695965f5625759402f74b26f4509f98a6642649966ff03fbe16998dbfee833334dfd73999c43a08f611eae740a2e1b590320a75912285c3cddd51cec37f20cc7d5a998ec50a027da5f149947d4b809dc96c5d9edf0db5213e036b6a16d996d59dee02f9f89d6c7559b0256aab921a9be84fc6039a6233a45f88286c56ab8a2e0a8e4fbf603a59d9f96ded56c32e43cada30486fdf0d85d90f5cac1d55efcab8029f2e806e2c1dc45f47af02377e0d3c9e696e2fbd76947840310ad7ce662fbe0d3c829fde60503fac869816a18e68b25b6fb07e58ab0cc1f3b37e7b0e656d0d68bf6f905765934ba5e97a2cfb52c7101fc07e0db8a2b4f41ef8b46e3046b24231a6912cb11a995658a03be92b34cf9ce9c03006d83ccd94184541afd2be576ba36ce68b1f11feb10ac174e374eafbfe5c0f4d079849de20893564b603a160725c6127e48196d8e85c9020703e1c0c6519a92e616661e675db206540c69aa5081c3c1bc984b65d1cd2af7cca9daf8f5ccc8beae6250b1981a77c78c5d0adb3a2b6a5dbacefda8c5775907ea97147bf1bacb0406a69a8c0577ef2e3d65fd53cb6e20abcdc287b34dd94ee9edfd028363923cc43ff09bae7c9e910b59a55d0e0c3c877ff7cc524e8925b3ef6adc67bc5552c1d39da6d58d63b4e0633baeaa8b997b523cbea03a4d815c949d49b07968f120ff9dc36d09bdf51a762d6f930ca78e3254e0563e9d505d8ad2f24efa9ffc3702094528b57ae0adf0d09798674d7f3ba392f872378858263b0dd07180d7149f5081bea8338588ff8e44d047e1684be3348d1d07c8c8deeb54be09afcba593927a78fc0938b77aaa6d2f6d5cfdffbb4e2fbb0088586dbf5e86c27465a9065324b6c4386b13875f51b326b3c3cb820e3c33ca4c484aa601410929163b868b26343d4c01b6dcf759e5a35c75e422992133c76463f06756c266548c7876122e07306233fa89beadd9d73e10059b4b867fed32726c63b9d752f41790f7b612d6f6bc8128e7b9adff9c8471b84ab4c5851aacfe47cdd9a15c631d0a93c5df7e82e7293c7fe92abf7887de7717566298bd24f91b23d7a4a63ee5f3e9956650d783e06164d947dc3d97e4e460ab707f355d9bdd1ada23431eba8eeb766a6201b15dd8a4e2aeaaddfcf844775172f59157d7b7eb2b477ab42e9cca434e15f7900d0dd95def4c6de891f41810dad004fcb426c9b6ace39bc71ad25cd02470de00003ae989ea32bb7e1c153700e2eadd61818e8d0d6b852cea5c3362600dda64eb026b41f40d289ab5cce89809d45f748675ac824c0a5fba49d03a75dfbea55379d5e35f72de6a4a8a5675ce10186ae084efbc7e88f423f092d5148f96f225dcaf66447c4ca5f120ceb46b7f7d7bdf1d54b0ee011216eee3b6b746b513ed7992e1d93186c578025e74642d51eb0c38d12bdcc24e5559e83daba262b6612d60f543752c20b735ef53d83054bb7484f4ef1bade5801cf8e4d1043e7c210aa850065cd6f1a2eeaefe67ca18ac2e43cbe99600bc4ce743f72f5d4b184a89910beeccb60ab0c8d8eac91ae7cddc81d4b97b858a9ca49c1ba2cfa2ac85f251a2f3cd2f0f8ca06ddbbff21c41420b804db0cc19454d8f769d1ce2b4e2f6643b721eb35c6e48a62ddd9f1a3d607fe522f0b4de2256535e5e86711a20638e9bc3ecb7ee0f302c093f0cc50658e3014ad4d2ff1c02517981318f2ddee292e815c454d28cd0899b32e1355d2c8f141a247632cdb5e998317480b006f2396b74b5ac8896921aa3dfe7224e6e28a5b0ae013c6860536db57afa754e29dc02b5db3683b67784bee349d3f2b0894461fc598c39f471330c40d9f5095339a2430dbf9358c3157cab01e2a4920145e09e7ef3cb00a2b2e314dbe1e19ea1266cc809268bb938d781b90493937623c3d04a0cb3a02900a8625155632fb9e40cc26db126a3d07b7a1fcc5d0e8d15f0f4eaabd0446ad6b24e743c546d188d78a5e3352b0bc0e6f6b822cdca932624593bb7b0b1eb3adb8cf50444a435f091592519ce5c0d3a387106ac6e2f542cbc4dc2ef02c267a6bc9ebcccdac356f5bfebf050cd73c55e2b0953cd2c129c530b2bc1d94cfeb82f26b73fbffe621818404cca7a16eb478c94740d22a0fc0373789dd8a1a7f6540cbf80e81b18904062333c9e186275eb13d0eb1dc3dd43a8da7d43a87456692b99469c1158099e9fc86cf6d479d74700d9233c1a5de272855631bf446a60f7792f00c4a232c16bfff3c6b8f0299745c5b8deee1c55c4ee1d68b716a384e13c267866c561a8bd85d6e1e8c00bf18bfc7f7a014671ada5d68183e6ffd3509aae05d2286560693b7a429eaa0ed5c5feea5c65757f1254c1134610072c671dbd5dd73a04a2d05e237a078a6a2b789902d8fc74dbe77bb1ca5f650ed97c1230019c388f1ee1ec8c370ad3f0486f1d758b88b4b949a06bdbcc6763c4d17fde0ca21f7f45abebc56d1279a202f0280e86cc4362e3a1356a9c1e471845f5ef6707ea86d07a7d59523f78f45a61f9e9a80915369217e9776ee74b44997f6f0832e70b73c0cff6c007102546d4da699b129b174e8efffe1928f1e194d170fdba23638df17b871be0e203e613e7160638a18dd5e5bd15a7a766ccd6a143123224d195da3556f2214f418a1b4fd882b6e0f2a63abc62aa2eee5a208c0769d99262047dfde588b96e72897dee7fcb9ae71092165e5a416e954de21b6b1e2ed4afefff7444f2b55d0828622720a304e4b13d993f16d3d99062ec348952c71d8dbe2e0bc2a5b67915758449dd072d8f2ef2d63e7ff12830190a8901b8e94597e9f13d49c945cff39b7b9824a830298ff14d87531337add0663c640e9337a59fc66c2befcf38b78e4e709649bf404437a99f2af93563e7b108eb83f5b05edd2106afccd8bacb7cdd5eb6a64449baa24a595b5f59006ac0d1ebc94a9d3332b1a9e0063b746f99cf7da5a73dc92753f9bd11cdc8343a4ed58e000b291392fff9875fa3eeda598429e27ca68fb27f5d2703865ec04d440bc54927ed3f032ecdb42a55d66f55591f6645b946403663bf2bcfc6c076ebebc4febeabf578c06be073d5fd4a3b8af30dd77952234770b3775b11f58d900986ca0abb844b248e37053e1bcbfb64b27a7b4d4c3055d494e21f29a8f64dca2f97cf25207a6bf721ffb388b1661ec636d91e070a687e7ae23d332bd431f8d70348a39235691a8dece5cb8639871db49500610ed7e5191cb2220d4f3009f1e4c4e298252c5a25fc48040ea5531125a15afac19c76cfead8103ccb32dd6975cd3264338026270f128200b12e671bd9396c0b1fea168dc79eb7afacd4c4aa0804b240b30ca32eeb11c9d76e7c3fb30124c01eb12f400b695d589c875a6b71495be7ef902641dbe415770dc3e696628e81b758b7dc954ff7f45f3875a29e93e0f8fa6ca79e6633c27f4227f8909ccd70e3da79ed3085ca9cd78cb67fd789dc35fbb950d8bafd20f98a045754ca7d442a5f35e3cc110cdcd39cae9986edc0c2acfe1afd26ddf77b1eaff510f978f34b6852481d7d47de8efcf565106f7f23a886a0dc85236f659fa660864d5b52008411e84b483b58ff3d817ca50d98c06afac4b6e3bbd44a9f4ad14d9604f91accee280da76a99014aa1ee7fc95f319dd455f764115c2301b58148fc80f972531ccea6bf867824371ba1bf23cac23a311fa4a32c5c93a8f04042e1c621ef554c9b20c5f7c3eaf8314b23b524c10a2ba615deddfa5a240672283b8f5f1da769a8611b4e1206b36c6d74f882385f21a00e4ff1c1e792222999b85e8a952781ea2f8294cf6568943c15340d719b96a611b5b26a85a52e294f6b4080e3a07a8cb007273dbb00553d7acb2793b0bc09517e6840cc1467a331b90548ea0be6bb7c4da133972202472a537c874dcb5503b44cb93fc3b2443e0d1c3bf3d407cd515584357c6dd401a3ea6cacb198d72713fd986d479e141b7f0552e6ed3a621fb3ba4ba49c665f77215ef9208af51f663fb53e92110ab85795768fc98ba699006f7ce7f2f3e31c2e4d3f532d6a23fc2b29c42556851595aa082a1a6990262fac19864863c83d69383ccda280e5695f93f83f2e85469d159ada6c10149b71100d38dfbf8eb74b7038f51bc08d4213039f8bd8ea4701d6d870764a339294841b14391050172a192b2de2b20c30178ffd3234d456bec98aa971a61b90ef441f2f3b72f5125168b38f55c3ef488f66a9ee4c3cf1d72b887089a2ffe553cca71ba937b9cd4814dacf5dcbc05b1e4e553", 0x1000, 0x800, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1}, 0x1c)

1.420708539s ago: executing program 5 (id=771):
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800040, 0x1c6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(r0, 0x8, 0x0)

1.27718272s ago: executing program 0 (id=772):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
io_setup(0x20, 0x0)
utimes(0x0, 0x0)

44.802047ms ago: executing program 5 (id=773):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94)

44.322506ms ago: executing program 0 (id=774):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f0000000380)=[{0x2000000, 0x0, 0x0, 0x40, 0x6}]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44c03, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = dup(r1)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0xffffffff80020810, 0x5, 0x1d7a, 0x5, 0xbe, 0x0, 0x0, 0x4, 0x6}}, 0x50)

13.211445ms ago: executing program 4 (id=775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x81}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0xc010)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000040)={0x2, &(0x7f0000000380)})
r3 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00')
unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0)

0s ago: executing program 1 (id=776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xbe}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

224188][ T6085] 8021q: adding VLAN 0 to HW filter on device team0
[  142.353431][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.366593][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.427391][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.438991][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.621675][ T6226] netlink: set zone limit has 4 unknown bytes
[  144.210746][ T6250] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[  144.403080][ T6250] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  144.404952][ T6250] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  144.501013][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[  144.691247][ T6253] bond1: (slave gretap1): making interface the new active one
[  144.693751][ T6253] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  144.738591][ T6255] macvlan2: entered promiscuous mode
[  144.738614][ T6255] macvlan2: entered allmulticast mode
[  144.747749][ T6257] veth0_virt_wifi: entered promiscuous mode
[  144.747779][ T6257] veth0_virt_wifi: entered allmulticast mode
[  144.911557][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.442025][ T6267] capability: warning: `syz.1.93' uses 32-bit capabilities (legacy support in use)
[  146.005799][ T6283] netlink: zone id is out of range
[  146.005816][ T6283] netlink: zone id is out of range
[  146.079174][ T6282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.98'.
[  146.197753][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  146.247128][ T6279] netlink: set zone limit has 4 unknown bytes
[  146.360290][ T5891] usb 5-1: Using ep0 maxpacket: 32
[  146.375527][ T5891] usb 5-1: config 5 has an invalid interface number: 179 but max is 0
[  146.375559][ T5891] usb 5-1: config 5 has no interface number 0
[  146.375594][ T5891] usb 5-1: config 5 interface 179 has no altsetting 0
[  146.387874][ T5891] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[  146.387907][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.387928][ T5891] usb 5-1: Product: syz
[  146.387944][ T5891] usb 5-1: Manufacturer: syz
[  146.387959][ T5891] usb 5-1: SerialNumber: syz
[  146.397915][ T6085] veth0_vlan: entered promiscuous mode
[  146.446808][ T6085] veth1_vlan: entered promiscuous mode
[  146.820842][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.822137][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.850266][ T6085] veth0_macvtap: entered promiscuous mode
[  147.082688][ T6293] FAULT_INJECTION: forcing a failure.
[  147.082688][ T6293] name failslab, interval 1, probability 0, space 0, times 0
[  147.082817][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  147.082845][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  147.082860][ T6293] Call Trace:
[  147.082870][ T6293]  <TASK>
[  147.082880][ T6293]  dump_stack_lvl+0x189/0x250
[  147.082922][ T6293]  ? __pfx____ratelimit+0x10/0x10
[  147.082960][ T6293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.082992][ T6293]  ? __pfx__printk+0x10/0x10
[  147.083024][ T6293]  ? __pfx___might_resched+0x10/0x10
[  147.083054][ T6293]  should_fail_ex+0x46c/0x600
[  147.083093][ T6293]  ? __alloc_skb+0x255/0x430
[  147.083118][ T6293]  should_failslab+0xa8/0x100
[  147.083143][ T6293]  ? __alloc_skb+0x255/0x430
[  147.083165][ T6293]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  147.083210][ T6293]  __alloc_skb+0x255/0x430
[  147.083240][ T6293]  ? __pfx___alloc_skb+0x10/0x10
[  147.083268][ T6293]  ? netlink_autobind+0xdb/0x300
[  147.083310][ T6293]  ? netlink_autobind+0x2c2/0x300
[  147.083348][ T6293]  netlink_sendmsg+0x5c6/0xb30
[  147.083391][ T6293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.083433][ T6293]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.083466][ T6293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.083498][ T6293]  __sock_sendmsg+0x21c/0x270
[  147.083539][ T6293]  ____sys_sendmsg+0x508/0x810
[  147.083576][ T6293]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.083617][ T6293]  ? import_iovec+0x74/0xa0
[  147.083645][ T6293]  ___sys_sendmsg+0x21f/0x2a0
[  147.083678][ T6293]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.083751][ T6293]  ? __fget_files+0x2a/0x420
[  147.083776][ T6293]  ? __fget_files+0x3a6/0x420
[  147.083814][ T6293]  __x64_sys_sendmsg+0x1a1/0x260
[  147.083848][ T6293]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.083889][ T6293]  ? __pfx_ksys_write+0x10/0x10
[  147.083928][ T6293]  ? do_syscall_64+0xbe/0xf80
[  147.083957][ T6293]  do_syscall_64+0xfa/0xf80
[  147.083981][ T6293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.084005][ T6293]  ? clear_bhb_loop+0x60/0xb0
[  147.084033][ T6293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.084056][ T6293] RIP: 0033:0x7f3e7a98f749
[  147.084078][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.084097][ T6293] RSP: 002b:00007f3e78bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.084123][ T6293] RAX: ffffffffffffffda RBX: 00007f3e7abe5fa0 RCX: 00007f3e7a98f749
[  147.084140][ T6293] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  147.084154][ T6293] RBP: 00007f3e78bf6090 R08: 0000000000000000 R09: 0000000000000000
[  147.084168][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.084182][ T6293] R13: 00007f3e7abe6038 R14: 00007f3e7abe5fa0 R15: 00007ffd6c562818
[  147.084220][ T6293]  </TASK>
[  147.312698][ T6295] trusted_key: syz.0.100 sent an empty control message without MSG_MORE.
[  147.610498][ T6085] veth1_macvtap: entered promiscuous mode
[  148.101443][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.266932][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.369702][ T5891] usb-storage 5-1:5.179: USB Mass Storage device detected
[  148.462980][ T6303] netlink: 300 bytes leftover after parsing attributes in process `syz.1.102'.
[  148.872934][ T5986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.042176][ T5986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.059940][ T5986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.062295][ T5986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.308021][ T5891] usb 5-1: USB disconnect, device number 7
[  149.772725][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.772752][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.941579][ T3196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.941605][ T3196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.467752][ T5947] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  150.530268][ T6321] netlink: zone id is out of range
[  150.530293][ T6321] netlink: zone id is out of range
[  150.561314][ T6320] netlink: set zone limit has 4 unknown bytes
[  150.681631][ T5947] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  150.681665][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.687537][ T5947] usb 1-1: config 0 descriptor??
[  150.726683][ T5947] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  151.157970][   T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  151.318026][   T44] usb 2-1: Using ep0 maxpacket: 16
[  151.335828][   T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.335882][   T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.352704][   T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.352741][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.352764][   T44] usb 2-1: Product: syz
[  151.352782][   T44] usb 2-1: Manufacturer: syz
[  151.352799][   T44] usb 2-1: SerialNumber: syz
[  151.515470][ T5947] gp8psk: usb in 146 operation failed.
[  151.515492][ T5947] gp8psk: failed to get FW version
[  151.517518][ T5947] gp8psk: usb in 149 operation failed.
[  151.517535][ T5947] gp8psk: failed to get FPGA version
[  151.543252][ T5947] gp8psk: usb out operation failed.
[  151.543272][ T5947] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  151.543312][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  151.576431][ T5947] usb 1-1: USB disconnect, device number 5
[  151.652490][   T44] usb 2-1: 0:2 : does not exist
[  151.706544][   T44] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  151.883615][   T44] usb 2-1: USB disconnect, device number 9
[  151.950964][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.028004][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.208199][ T5919] usb 5-1: Using ep0 maxpacket: 32
[  152.214194][ T5919] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  152.214273][ T5919] usb 5-1: config 0 has no interface number 0
[  152.214328][ T5919] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.214450][ T5919] usb 5-1: config 0 interface 85 has no altsetting 0
[  152.219651][ T5919] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  152.219691][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.219717][ T5919] usb 5-1: Product: syz
[  152.219737][ T5919] usb 5-1: Manufacturer: syz
[  152.219753][ T5919] usb 5-1: SerialNumber: syz
[  152.686385][ T6343] netlink: set zone limit has 4 unknown bytes
[  152.917491][ T5919] usb 5-1: config 0 descriptor??
[  153.712689][ T6354] netlink: set zone limit has 4 unknown bytes
[  153.716422][ T6356] netlink: zone id is out of range
[  153.716440][ T6356] netlink: zone id is out of range
[  153.988450][ T6360] vivid-002: disconnect
[  153.992698][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'.
[  154.239201][ T6357] vivid-002: reconnect
[  154.587908][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  154.717765][ T5947] usb 6-1: device descriptor read/64, error -71
[  156.984087][ T5919] appletouch 5-1:0.85: Failed to request geyser raw mode
[  156.984328][ T5919] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  157.017810][ T5947] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  157.059638][ T5919] usb 5-1: USB disconnect, device number 8
[  157.178735][ T5947] usb 6-1: device descriptor read/64, error -71
[  157.250896][ T6374] vivid-000: disconnect
[  157.288496][ T5947] usb usb6-port1: attempt power cycle
[  157.447924][ T5891] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  158.021778][ T5891] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  158.021809][ T5891] usb 4-1: config 0 has no interface number 0
[  158.021868][ T5891] usb 4-1: config 0 interface 41 has no altsetting 0
[  158.339674][ T6373] vivid-000: reconnect
[  158.398368][ T5891] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  158.398400][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.398421][ T5891] usb 4-1: Product: syz
[  158.398434][ T5891] usb 4-1: Manufacturer: syz
[  158.398448][ T5891] usb 4-1: SerialNumber: syz
[  158.428015][ T5891] usb 4-1: config 0 descriptor??
[  158.827815][ T5963] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  158.837766][ T5947] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  158.987832][ T5947] usb 5-1: Using ep0 maxpacket: 8
[  158.990236][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.990302][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  158.990327][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.006013][ T5963] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  159.006118][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.068461][ T5947] usb 5-1: config 0 descriptor??
[  159.071172][ T5963] usb 6-1: config 0 descriptor??
[  159.092165][ T5947] gspca_main: vc032x-2.14.0 probing 046d:0892
[  159.195093][ T5963] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  159.291795][ T5891] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  159.303211][ T5891] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  159.530576][ T5891] usb 4-1: USB disconnect, device number 6
[  160.513697][ T5947] gspca_vc032x: reg_r err -110
[  160.513822][ T5947] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[  163.182258][ T5963] gp8psk: usb in 146 operation failed.
[  163.182345][ T5963] gp8psk: failed to get FW version
[  163.182871][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  163.185923][ T5963] gp8psk: usb in 149 operation failed.
[  163.186039][ T5963] gp8psk: failed to get FPGA version
[  163.189096][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  163.190401][ T5963] gp8psk: usb out operation failed.
[  163.190416][ T5963] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  163.190459][ T5963] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  163.524000][ T5947] usb 5-1: USB disconnect, device number 9
[  163.538846][ T5963] usb 6-1: USB disconnect, device number 5
[  163.562867][ T6394] FAULT_INJECTION: forcing a failure.
[  163.562867][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.562905][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  163.562930][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.562943][ T6394] Call Trace:
[  163.562951][ T6394]  <TASK>
[  163.562961][ T6394]  dump_stack_lvl+0x189/0x250
[  163.562995][ T6394]  ? __pfx____ratelimit+0x10/0x10
[  163.563030][ T6394]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.563060][ T6394]  ? __pfx__printk+0x10/0x10
[  163.563097][ T6394]  should_fail_ex+0x46c/0x600
[  163.563133][ T6394]  _copy_to_user+0x31/0xb0
[  163.563159][ T6394]  simple_read_from_buffer+0xe1/0x170
[  163.563188][ T6394]  proc_fail_nth_read+0x1b6/0x220
[  163.563224][ T6394]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.563258][ T6394]  ? rw_verify_area+0x2ac/0x4e0
[  163.563287][ T6394]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.563321][ T6394]  vfs_read+0x206/0xa30
[  163.563360][ T6394]  ? __pfx_vfs_read+0x10/0x10
[  163.563385][ T6394]  ? rawsock_connect+0x74/0x5f0
[  163.563416][ T6394]  ? bpf_lsm_socket_connect+0x9/0x20
[  163.563447][ T6394]  ? __sys_connect+0x346/0x450
[  163.563471][ T6394]  ? do_sys_openat2+0x15a/0x200
[  163.563495][ T6394]  ? __pfx___sys_connect+0x10/0x10
[  163.563525][ T6394]  ksys_read+0x14b/0x260
[  163.563559][ T6394]  ? __pfx_ksys_read+0x10/0x10
[  163.563593][ T6394]  ? do_syscall_64+0xbe/0xf80
[  163.563619][ T6394]  do_syscall_64+0xfa/0xf80
[  163.563642][ T6394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.563664][ T6394]  ? clear_bhb_loop+0x60/0xb0
[  163.563690][ T6394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.563712][ T6394] RIP: 0033:0x7f4d5101e15c
[  163.563732][ T6394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  163.563750][ T6394] RSP: 002b:00007f4d4f27e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.563774][ T6394] RAX: ffffffffffffffda RBX: 00007f4d51275fa0 RCX: 00007f4d5101e15c
[  163.563789][ T6394] RDX: 000000000000000f RSI: 00007f4d4f27e0a0 RDI: 0000000000000003
[  163.563813][ T6394] RBP: 00007f4d4f27e090 R08: 0000000000000000 R09: 0000000000000000
[  163.563826][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.563839][ T6394] R13: 00007f4d51276038 R14: 00007f4d51275fa0 R15: 00007fff103c7b98
[  163.563875][ T6394]  </TASK>
[  163.805821][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'.
[  164.050734][   T37] kauditd_printk_skb: 821 callbacks suppressed
[  164.050754][   T37] audit: type=1326 audit(1765873743.877:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.052400][   T37] audit: type=1326 audit(1765873743.877:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.052455][   T37] audit: type=1326 audit(1765873743.877:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.055462][   T37] audit: type=1326 audit(1765873743.877:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.074629][ T6407] netlink: zone id is out of range
[  164.074646][ T6407] netlink: zone id is out of range
[  164.083638][ T6401] netlink: set zone limit has 4 unknown bytes
[  164.131333][   T37] audit: type=1326 audit(1765873743.957:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.133030][   T37] audit: type=1326 audit(1765873743.957:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e7a98f783 code=0x7ffc0000
[  164.140630][   T37] audit: type=1326 audit(1765873743.957:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7a98f749 code=0x7ffc0000
[  164.140699][   T37] audit: type=1326 audit(1765873743.957:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3e7a98f807 code=0x7ffc0000
[  164.146589][   T37] audit: type=1326 audit(1765873743.967:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3e7a946bdd code=0x7ffc0000
[  164.152574][   T37] audit: type=1326 audit(1765873743.967:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3e7a9c3e89 code=0x7ffc0000
[  164.269337][ T6409] netlink: 'syz.5.136': attribute type 1 has an invalid length.
[  164.346022][ T6405] tipc: Can't bind to reserved service type 1
[  164.984529][ T6414] macvlan2: entered promiscuous mode
[  164.984558][ T6414] macvlan2: entered allmulticast mode
[  167.020259][ T6425] kexec: Could not allocate control_code_buffer
[  167.035430][ T5947] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  167.194575][ T5947] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  167.194608][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.221406][ T5947] usb 4-1: config 0 descriptor??
[  167.266908][ T5947] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  167.406714][ T6448] netlink: zone id is out of range
[  167.406731][ T6448] netlink: zone id is out of range
[  167.416507][ T6447] netlink: set zone limit has 4 unknown bytes
[  168.596476][ T5947] gp8psk: usb in 146 operation failed.
[  168.596502][ T5947] gp8psk: failed to get FW version
[  168.596948][ T5947] gp8psk: usb in 149 operation failed.
[  168.596962][ T5947] gp8psk: failed to get FPGA version
[  168.597326][ T5947] gp8psk: usb out operation failed.
[  168.597336][ T5947] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  168.597362][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  168.685253][ T5947] usb 4-1: USB disconnect, device number 7
[  168.988177][ T5804] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff
[  169.608921][ T6395] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  169.763103][ T6395] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  169.763133][ T6395] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  169.763187][ T6395] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.769453][ T6395] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  169.769490][ T6395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.769512][ T6395] usb 1-1: Product: syz
[  169.769530][ T6395] usb 1-1: Manufacturer: syz
[  169.769547][ T6395] usb 1-1: SerialNumber: syz
[  170.304523][ T6395] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  170.304617][ T6395] cdc_ncm 1-1:1.0: bind() failure
[  170.330845][ T6395] usb 1-1: USB disconnect, device number 6
[  170.415938][ T6479] netlink: set zone limit has 4 unknown bytes
[  170.681511][ T6482] netlink: set zone limit has 4 unknown bytes
[  170.681762][ T6483] netlink: zone id is out of range
[  170.681774][ T6483] netlink: zone id is out of range
[  171.461312][ T5805] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  171.607742][ T5805] usb 1-1: Using ep0 maxpacket: 16
[  171.613209][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.614782][ T5805] usb 1-1: config 6 has an invalid interface number: 228 but max is 0
[  171.614809][ T5805] usb 1-1: config 6 has no interface number 0
[  171.614862][ T5805] usb 1-1: config 6 interface 228 altsetting 14 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  171.614891][ T5805] usb 1-1: config 6 interface 228 has no altsetting 0
[  171.668045][ T5805] usb 1-1: New USB device found, idVendor=0403, idProduct=f3c2, bcdDevice=60.22
[  171.668081][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.668104][ T5805] usb 1-1: Product: syz
[  171.668120][ T5805] usb 1-1: Manufacturer: й
[  171.668135][ T5805] usb 1-1: SerialNumber: syz
[  171.970828][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.976093][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.152438][ T5805] rndis_host 1-1:6.228: skipping garbage
[  172.152465][ T5805] usb 1-1: bad CDC descriptors
[  172.155721][ T5805] ftdi_sio 1-1:6.228: FTDI USB Serial Device converter detected
[  172.196183][ T5805] ftdi_sio ttyUSB0: unknown device type: 0x6022
[  172.218885][ T5805] usb 1-1: USB disconnect, device number 7
[  172.225335][ T5805] ftdi_sio 1-1:6.228: device disconnected
[  172.237554][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.163'.
[  174.227194][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.5.170'.
[  174.240095][ T6523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.170'.
[  174.247946][ T5987] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  174.291600][ T6524] netlink: zone id is out of range
[  174.291615][ T6524] netlink: zone id is out of range
[  174.403134][ T5987] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  174.403161][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.451222][ T5987] usb 1-1: config 0 descriptor??
[  174.507188][ T5987] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  174.519830][ T6526] warning: `syz.1.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  174.744228][ T6522] netlink: set zone limit has 4 unknown bytes
[  175.017820][ T5947] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  175.145579][ T6530] netlink: 'syz.1.173': attribute type 3 has an invalid length.
[  175.147235][ T6530] sctp: [Deprecated]: syz.1.173 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.147235][ T6530] Use struct sctp_sack_info instead
[  175.191286][ T5947] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  175.191327][ T5947] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  175.191356][ T5947] usb 6-1: config 0 interface 0 has no altsetting 0
[  175.204926][ T5987] gp8psk: FW Version = 133.227.44 (0x85e32c)  Build 2178/221/212
[  175.249794][ T5947] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.249826][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  175.249848][ T5947] usb 6-1: Product: syz
[  175.249864][ T5947] usb 6-1: Manufacturer: syz
[  175.249879][ T5947] usb 6-1: SerialNumber: syz
[  175.294223][ T5947] usb 6-1: config 0 descriptor??
[  175.444602][ T5987] gp8psk: usb in 149 operation failed.
[  175.444626][ T5987] gp8psk: failed to get FPGA version
[  175.445069][ T5987] gp8psk: usb out operation failed.
[  175.445082][ T5987] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  175.445123][ T5987] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  175.566500][ T5987] usb 1-1: USB disconnect, device number 8
[  175.583432][ T5947] usb 6-1: selecting invalid altsetting 0
[  175.800781][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.801479][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.801990][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.828030][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.837106][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.901495][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.927958][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  175.928457][ T6527] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  176.004997][ T5788] usb 6-1: USB disconnect, device number 6
[  178.013265][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.108665][ T6556] delete_channel: no stack
[  180.498149][ T5788] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  180.523127][ T6558] syz.3.181 uses obsolete (PF_INET,SOCK_PACKET)
[  180.657747][ T5788] usb 5-1: Using ep0 maxpacket: 8
[  180.662041][ T5788] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  180.662072][ T5788] usb 5-1: config 2 has no interface number 0
[  180.662128][ T5788] usb 5-1: config 2 interface 31 has no altsetting 0
[  180.666556][ T5788] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  180.666604][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.666625][ T5788] usb 5-1: Product: syz
[  180.666641][ T5788] usb 5-1: Manufacturer: syz
[  180.666656][ T5788] usb 5-1: SerialNumber: syz
[  180.836821][ T6571] netlink: zone id is out of range
[  180.836835][ T6571] netlink: zone id is out of range
[  180.948095][ T5788] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71
[  180.984183][ T5788] usb 5-1: USB disconnect, device number 10
[  181.172296][ T6569] netlink: set zone limit has 4 unknown bytes
[  181.778408][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  181.963688][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  181.975797][ T5890] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  181.975830][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.975850][ T5890] usb 4-1: config 0 has no interface number 0
[  182.018280][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  182.018314][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.018410][ T5890] usb 4-1: Product: syz
[  182.018425][ T5890] usb 4-1: Manufacturer: syz
[  182.018440][ T5890] usb 4-1: SerialNumber: syz
[  182.124835][ T5890] usb 4-1: config 0 descriptor??
[  182.154219][ T5890] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  182.154272][ T5890] uvcvideo 4-1:0.105: No valid video chain found.
[  182.493764][ T6580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  182.493795][ T6580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.566782][ T6580] vhci_hcd vhci_hcd.0: Device attached
[  182.754188][   T44] usb 4-1: USB disconnect, device number 8
[  182.756282][ T6591] vhci_hcd: connection closed
[  182.813561][ T6370] vhci_hcd vhci_hcd.3: stop threads
[  182.814329][ T6370] vhci_hcd vhci_hcd.3: release socket
[  182.828121][ T6370] vhci_hcd vhci_hcd.3: disconnect device
[  182.838059][ T5890] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  182.838296][ T5890] usb 39-1: enqueue for inactive port 0
[  182.927977][ T5890] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  185.825995][ T6610] netlink: set zone limit has 4 unknown bytes
[  187.433400][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'.
[  187.697906][ T5788] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  188.261215][ T6631] trusted_key: encrypted_key: insufficient parameters specified
[  188.265997][ T6631] Bluetooth: MGMT ver 1.23
[  188.466184][ T5788] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  188.466212][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.466227][ T5788] usb 6-1: Product: syz
[  188.466246][ T5788] usb 6-1: Manufacturer: syz
[  188.466256][ T5788] usb 6-1: SerialNumber: syz
[  188.506662][ T5788] usb 6-1: config 0 descriptor??
[  189.006325][ T5788] usb 6-1: can't set config #0, error -71
[  189.023444][ T5788] usb 6-1: USB disconnect, device number 7
[  190.515192][ T6657] netlink: set zone limit has 4 unknown bytes
[  190.542645][ T6656] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  190.547092][ T6657] netlink: zone id is out of range
[  190.547109][ T6657] netlink: zone id is out of range
[  191.065458][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  191.212044][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.212084][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.212126][ T5890] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00
[  191.212151][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.225428][ T6667] binder: BINDER_SET_CONTEXT_MGR already set
[  191.225449][ T6667] binder: 6666:6667 ioctl 4018620d 200000000040 returned -16
[  191.260421][ T5890] usb 1-1: config 0 descriptor??
[  191.715407][ T5890] usbhid 1-1:0.0: can't add hid device: -71
[  191.715545][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  191.848316][ T5890] usb 1-1: USB disconnect, device number 9
[  194.132072][ T6690] 9p: Bad value for 'rfdno'
[  195.979967][ T6712] netlink: 'syz.0.231': attribute type 10 has an invalid length.
[  196.023790][ T6712] 8021q: adding VLAN 0 to HW filter on device team0
[  196.102581][ T6712] bond0: (slave team0): Enslaving as an active interface with an up link
[  199.991106][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  199.991180][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  200.467726][ T6052] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  200.617773][ T6052] usb 1-1: Using ep0 maxpacket: 32
[  200.619545][ T6052] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  200.619567][ T6052] usb 1-1: config 0 has no interface number 0
[  200.619604][ T6052] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  200.619622][ T6052] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  200.619639][ T6052] usb 1-1: config 0 interface 126 has no altsetting 0
[  200.622073][ T6052] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  200.622098][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.622114][ T6052] usb 1-1: Product: syz
[  200.622125][ T6052] usb 1-1: Manufacturer: syz
[  200.622136][ T6052] usb 1-1: SerialNumber: syz
[  200.722496][ T6052] usb 1-1: config 0 descriptor??
[  200.725056][ T6758] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.725212][ T6758] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  201.333174][ T6052] ir_usb 1-1:0.126: IR Dongle converter detected
[  201.573085][ T6052] usb 1-1: IRDA class descriptor not found, device not bound
[  202.213511][ T6052] usb 1-1: USB disconnect, device number 10
[  203.739059][ T6754] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  204.998520][ T6754] usb 5-1: Using ep0 maxpacket: 16
[  205.013644][ T6754] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  205.013685][ T6754] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  205.013712][ T6754] usb 5-1: Product: syz
[  205.013731][ T6754] usb 5-1: Manufacturer: syz
[  205.013749][ T6754] usb 5-1: SerialNumber: syz
[  205.029349][ T6754] usb 5-1: config 0 descriptor??
[  206.017855][ T6754] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  206.179983][ T6754] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  206.180015][ T6754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.180036][ T6754] usb 1-1: Product: syz
[  206.180052][ T6754] usb 1-1: Manufacturer: syz
[  206.180067][ T6754] usb 1-1: SerialNumber: syz
[  206.222151][ T6754] usb 1-1: config 0 descriptor??
[  206.269487][ T6392] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  206.271054][ T6754] gspca_main: sunplus-2.14.0 probing 055f:c230
[  206.410414][ T6052] usb 5-1: USB disconnect, device number 11
[  206.419063][ T6392] usb 2-1: Using ep0 maxpacket: 8
[  206.424052][ T6392] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[  206.424086][ T6392] usb 2-1: config 0 has no interface number 0
[  206.449471][ T6392] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 7.55
[  206.449503][ T6392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.449524][ T6392] usb 2-1: Product: syz
[  206.449539][ T6392] usb 2-1: Manufacturer: syz
[  206.449555][ T6392] usb 2-1: SerialNumber: syz
[  206.593245][ T6392] usb 2-1: config 0 descriptor??
[  206.631729][ T6754] gspca_sunplus: reg_r err -32
[  206.631846][ T6754] sunplus 1-1:0.0: probe with driver sunplus failed with error -32
[  206.716783][ T6392] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  206.763528][ T6392] usb 2-1: invalid MIDI in EP 0
[  208.768587][ T5890] usb 1-1: USB disconnect, device number 11
[  209.994877][ T6392] snd-usb-audio 2-1:0.3: probe with driver snd-usb-audio failed with error -22
[  210.094381][ T6392] usb 2-1: USB disconnect, device number 10
[  210.286261][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.3/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  212.482537][ T6392] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  212.562853][   T37] kauditd_printk_skb: 73 callbacks suppressed
[  212.562874][   T37] audit: type=1326 audit(1765873792.387:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  212.563252][   T37] audit: type=1326 audit(1765873792.387:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  212.563552][   T37] audit: type=1326 audit(1765873792.387:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  212.564007][   T37] audit: type=1326 audit(1765873792.387:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  212.566853][   T37] audit: type=1326 audit(1765873792.387:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  212.707731][ T6392] usb 4-1: Using ep0 maxpacket: 8
[  212.713699][ T6392] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  212.713733][ T6392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.713755][ T6392] usb 4-1: Product: syz
[  212.713771][ T6392] usb 4-1: Manufacturer: syz
[  212.713787][ T6392] usb 4-1: SerialNumber: syz
[  212.761306][ T6392] usb 4-1: config 0 descriptor??
[  212.769396][ T6839] syz.0.269 (6839) used greatest stack depth: 17096 bytes left
[  212.787546][ T6392] gspca_main: se401-2.14.0 probing 047d:5003
[  213.062088][ T6856] FAULT_INJECTION: forcing a failure.
[  213.062088][ T6856] name failslab, interval 1, probability 0, space 0, times 0
[  213.062129][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.5.263 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  213.062155][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  213.062170][ T6856] Call Trace:
[  213.062180][ T6856]  <TASK>
[  213.062190][ T6856]  dump_stack_lvl+0x189/0x250
[  213.062227][ T6856]  ? __pfx____ratelimit+0x10/0x10
[  213.062262][ T6856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.062292][ T6856]  ? __pfx__printk+0x10/0x10
[  213.062322][ T6856]  ? __pfx___might_resched+0x10/0x10
[  213.062347][ T6856]  ? fs_reclaim_acquire+0x7d/0x100
[  213.062373][ T6856]  should_fail_ex+0x46c/0x600
[  213.062410][ T6856]  should_failslab+0xa8/0x100
[  213.062435][ T6856]  __kvmalloc_node_noprof+0x181/0x940
[  213.062471][ T6856]  ? alloc_netdev_mqs+0xa6/0x11b0
[  213.062513][ T6856]  alloc_netdev_mqs+0xa6/0x11b0
[  213.062544][ T6856]  ? __pfx_ipvlan_link_setup+0x10/0x10
[  213.062576][ T6856]  rtnl_create_link+0x31f/0xcf0
[  213.062629][ T6856]  rtnl_newlink_create+0x25c/0xb00
[  213.062674][ T6856]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  213.062701][ T6856]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  213.062731][ T6856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.062758][ T6856]  ? bpf_lsm_capable+0x9/0x20
[  213.062794][ T6856]  rtnl_newlink+0x16e7/0x1c90
[  213.062822][ T6856]  ? kasan_save_track+0x3e/0x80
[  213.062869][ T6856]  ? __pfx_rtnl_newlink+0x10/0x10
[  213.062898][ T6856]  ? __lock_acquire+0x6b6/0x2cf0
[  213.062949][ T6856]  ? __local_bh_enable+0x27b/0x410
[  213.062982][ T6856]  ? __local_bh_enable+0x28c/0x410
[  213.063007][ T6856]  ? reacquire_held_locks+0x121/0x1c0
[  213.063045][ T6856]  ? __pfx___local_bh_enable+0x10/0x10
[  213.063081][ T6856]  ? __local_bh_enable_ip+0x1c0/0x2e0
[  213.063107][ T6856]  ? lockdep_hardirqs_on+0x98/0x140
[  213.063141][ T6856]  ? __lock_acquire+0x6b6/0x2cf0
[  213.063180][ T6856]  ? __dev_queue_xmit+0x259/0x31d0
[  213.063215][ T6856]  ? __dev_queue_xmit+0x259/0x31d0
[  213.063246][ T6856]  ? __dev_queue_xmit+0x1936/0x31d0
[  213.063275][ T6856]  ? netlink_unicast+0x811/0xa10
[  213.063299][ T6856]  ? netlink_sendmsg+0x805/0xb30
[  213.063354][ T6856]  ? __pfx_rtnl_newlink+0x10/0x10
[  213.063373][ T6856]  rtnetlink_rcv_msg+0x7cf/0xb70
[  213.063397][ T6856]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  213.063415][ T6856]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  213.063433][ T6856]  ? ref_tracker_free+0x61e/0x7c0
[  213.063458][ T6856]  ? __asan_memcpy+0x40/0x70
[  213.063482][ T6856]  ? __pfx_ref_tracker_free+0x10/0x10
[  213.063504][ T6856]  ? __skb_clone+0x63/0x7a0
[  213.063536][ T6856]  netlink_rcv_skb+0x208/0x470
[  213.063560][ T6856]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  213.063581][ T6856]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.063692][ T6856]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.063728][ T6856]  netlink_unicast+0x846/0xa10
[  213.063759][ T6856]  ? __pfx_netlink_unicast+0x10/0x10
[  213.063782][ T6856]  ? netlink_sendmsg+0x642/0xb30
[  213.063803][ T6856]  ? skb_put+0x11b/0x210
[  213.063826][ T6856]  netlink_sendmsg+0x805/0xb30
[  213.063860][ T6856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.063891][ T6856]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.063915][ T6856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.063939][ T6856]  __sock_sendmsg+0x21c/0x270
[  213.063969][ T6856]  ____sys_sendmsg+0x508/0x810
[  213.063996][ T6856]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.064026][ T6856]  ? import_iovec+0x74/0xa0
[  213.064047][ T6856]  ___sys_sendmsg+0x21f/0x2a0
[  213.064071][ T6856]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.064125][ T6856]  ? __fget_files+0x2a/0x420
[  213.064143][ T6856]  ? __fget_files+0x3a6/0x420
[  213.064171][ T6856]  __x64_sys_sendmsg+0x1a1/0x260
[  213.064196][ T6856]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.064227][ T6856]  ? __pfx_ksys_write+0x10/0x10
[  213.064256][ T6856]  ? do_syscall_64+0xbe/0xf80
[  213.064278][ T6856]  do_syscall_64+0xfa/0xf80
[  213.064296][ T6856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.064314][ T6856]  ? clear_bhb_loop+0x60/0xb0
[  213.064335][ T6856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.064352][ T6856] RIP: 0033:0x7fd397b2f749
[  213.064370][ T6856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.064385][ T6856] RSP: 002b:00007fd395d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.064405][ T6856] RAX: ffffffffffffffda RBX: 00007fd397d85fa0 RCX: 00007fd397b2f749
[  213.064418][ T6856] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003
[  213.064429][ T6856] RBP: 00007fd395d96090 R08: 0000000000000000 R09: 0000000000000000
[  213.064440][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.064450][ T6856] R13: 00007fd397d86038 R14: 00007fd397d85fa0 R15: 00007fff81de0d98
[  213.064479][ T6856]  </TASK>
[  213.076464][ T6857] use of bytesused == 0 is deprecated and will be removed in the future,
[  213.076482][ T6857] use the actual size instead.
[  213.209109][ T6392] gspca_se401: ExtraFeatures: 239
[  213.209127][ T6392] gspca_se401: Too many frame sizes
[  213.329394][ T6859] openvswitch: netlink: Duplicate or invalid key (type 0).
[  213.329439][ T6859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.571718][ T6692] usb 4-1: USB disconnect, device number 9
[  214.063695][ T6870] FAULT_INJECTION: forcing a failure.
[  214.063695][ T6870] name failslab, interval 1, probability 0, space 0, times 0
[  214.063731][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  214.063754][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  214.063767][ T6870] Call Trace:
[  214.063775][ T6870]  <TASK>
[  214.063785][ T6870]  dump_stack_lvl+0x189/0x250
[  214.063819][ T6870]  ? __pfx____ratelimit+0x10/0x10
[  214.063852][ T6870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.063880][ T6870]  ? __pfx__printk+0x10/0x10
[  214.063909][ T6870]  ? __pfx___might_resched+0x10/0x10
[  214.063932][ T6870]  ? fs_reclaim_acquire+0x7d/0x100
[  214.063956][ T6870]  should_fail_ex+0x46c/0x600
[  214.063988][ T6870]  should_failslab+0xa8/0x100
[  214.064010][ T6870]  __kmalloc_cache_noprof+0x84/0x6d0
[  214.064043][ T6870]  ? comedi_open+0x8b/0x5c0
[  214.064072][ T6870]  comedi_open+0x8b/0x5c0
[  214.064096][ T6870]  ? rt_spin_unlock+0x161/0x200
[  214.064129][ T6870]  chrdev_open+0x4cf/0x5e0
[  214.064152][ T6870]  ? __pfx_chrdev_open+0x10/0x10
[  214.064175][ T6870]  ? fsnotify_open_perm_and_set_mode+0x116/0x620
[  214.064208][ T6870]  ? __pfx_chrdev_open+0x10/0x10
[  214.064227][ T6870]  do_dentry_open+0x7d0/0x1270
[  214.064265][ T6870]  vfs_open+0x3b/0x350
[  214.064284][ T6870]  ? path_openat+0x340f/0x3df0
[  214.064316][ T6870]  path_openat+0x342a/0x3df0
[  214.064382][ T6870]  ? __pfx_path_openat+0x10/0x10
[  214.064426][ T6870]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  214.064448][ T6870]  ? lockdep_hardirqs_on+0x98/0x140
[  214.064470][ T6870]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  214.064499][ T6870]  do_filp_open+0x1fa/0x410
[  214.064542][ T6870]  ? __pfx_do_filp_open+0x10/0x10
[  214.064567][ T6870]  ? rt_mutex_slowunlock+0x493/0x8a0
[  214.064620][ T6870]  ? alloc_fd+0x64f/0x6c0
[  214.064653][ T6870]  do_sys_openat2+0x121/0x200
[  214.064680][ T6870]  ? __pfx_do_sys_openat2+0x10/0x10
[  214.064709][ T6870]  ? ksys_write+0x230/0x260
[  214.064741][ T6870]  ? __pfx_ksys_write+0x10/0x10
[  214.064876][ T6870]  __x64_sys_openat+0x138/0x170
[  214.064910][ T6870]  do_syscall_64+0xfa/0xf80
[  214.064932][ T6870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.064953][ T6870]  ? clear_bhb_loop+0x60/0xb0
[  214.064980][ T6870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.065001][ T6870] RIP: 0033:0x7f4d5101df90
[  214.065021][ T6870] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  214.065039][ T6870] RSP: 002b:00007f4d4f27df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  214.065062][ T6870] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4d5101df90
[  214.065077][ T6870] RDX: 0000000000000002 RSI: 00007f4d4f27dfa0 RDI: 00000000ffffff9c
[  214.065091][ T6870] RBP: 00007f4d4f27dfa0 R08: 0000000000000000 R09: 0000000000000000
[  214.065104][ T6870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  214.065116][ T6870] R13: 00007f4d51276038 R14: 00007f4d51275fa0 R15: 00007fff103c7b98
[  214.065151][ T6870]  </TASK>
[  214.238269][ T6692] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  214.410511][ T6692] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  214.410541][ T6692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.410555][ T6692] usb 6-1: Product: syz
[  214.410565][ T6692] usb 6-1: Manufacturer: syz
[  214.410576][ T6692] usb 6-1: SerialNumber: syz
[  214.569071][ T6876] openvswitch: netlink: Message has 4 unknown bytes.
[  214.710695][ T6692] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  214.711037][ T6692] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  214.723876][ T6692] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  214.790624][ T6692] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  214.838601][ T5889] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  214.938808][ T6878] Driver unsupported XDP return value 0 on prog  (id 70) dev N/A, expect packet loss!
[  215.065104][ T5889] usb 4-1: device descriptor read/64, error -71
[  215.067161][ T6692] usb 6-1: USB disconnect, device number 8
[  215.311164][ T5889] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  215.437739][ T5889] usb 4-1: device descriptor read/64, error -71
[  215.552071][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  215.556780][ T5889] usb usb4-port1: attempt power cycle
[  215.606289][ T6894] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.290'.
[  215.700115][ T5890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  215.700147][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.738472][ T5890] usb 5-1: config 0 descriptor??
[  215.803334][ T6052] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  215.907771][ T5889] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  215.928588][ T5889] usb 4-1: device descriptor read/8, error -71
[  215.983439][ T6052] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  215.983462][ T6052] usb 6-1: config 0 has no interface number 0
[  215.983506][ T6052] usb 6-1: config 0 interface 41 has no altsetting 0
[  216.012446][ T6052] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  216.012520][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.012535][ T6052] usb 6-1: Product: syz
[  216.012546][ T6052] usb 6-1: Manufacturer: syz
[  216.012556][ T6052] usb 6-1: SerialNumber: syz
[  216.037931][ T5987] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  216.045229][ T6052] usb 6-1: config 0 descriptor??
[  216.267943][ T5889] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  216.288888][ T5889] usb 4-1: device descriptor read/8, error -71
[  216.307735][ T5987] usb 1-1: Using ep0 maxpacket: 8
[  216.307872][ T5917] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  216.311965][ T5987] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  216.311997][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.360589][ T5987] usb 1-1: config 0 descriptor??
[  216.399307][ T5889] usb usb4-port1: unable to enumerate USB device
[  216.467792][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  216.498555][ T5917] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  216.498588][ T5917] usb 2-1: config 0 has no interface number 0
[  216.498735][ T5917] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  216.534861][ T5917] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  216.535141][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.535166][ T5917] usb 2-1: Product: syz
[  216.535181][ T5917] usb 2-1: Manufacturer: syz
[  216.535197][ T5917] usb 2-1: SerialNumber: syz
[  216.605334][ T5917] usb 2-1: config 0 descriptor??
[  216.654820][ T6901] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  216.666272][ T6052] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  216.752394][ T6052] usb 6-1: USB disconnect, device number 9
[  216.800968][ T5890] ath6kl: Failed to submit usb control message: -71
[  216.801027][ T5890] ath6kl: unable to send the bmi data to the device: -71
[  216.801042][ T5890] ath6kl: Unable to send get target info: -71
[  216.814737][ T5890] ath6kl: Failed to init ath6kl core: -71
[  216.862742][ T6901] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  216.931463][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.948816][ T5890] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  216.999733][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.090579][ T5115] Bluetooth: hci0: command 0x0406 tx timeout
[  217.090622][ T5115] Bluetooth: hci2: command 0x0406 tx timeout
[  217.090646][ T5115] Bluetooth: hci3: command 0x0406 tx timeout
[  217.090668][ T5115] Bluetooth: hci4: command 0x0406 tx timeout
[  217.091783][ T5804] Bluetooth: hci1: command 0x0406 tx timeout
[  217.094302][ T5987] monterey 0003:0566:3004.0001: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.0-1/input0
[  217.098675][ T5917] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  217.098935][ T5917] asix 2-1:0.188: probe with driver asix failed with error -71
[  217.104976][ T5890] usb 5-1: USB disconnect, device number 12
[  217.208238][ T5917] usb 2-1: USB disconnect, device number 11
[  217.279408][ T5987] usb 1-1: USB disconnect, device number 12
[  218.251583][ T6907] fido_id[6907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  218.319579][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[  218.374682][ T6925] vxcan3: entered promiscuous mode
[  218.374704][ T6925] vxcan3: entered allmulticast mode
[  218.389489][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[  218.444833][ T6925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.299'.
[  218.444857][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[  218.658013][ T5803] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  218.800523][   T37] audit: type=1326 audit(1765873798.627:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.802341][   T37] audit: type=1326 audit(1765873798.627:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.802500][   T37] audit: type=1326 audit(1765873798.627:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.802689][   T37] audit: type=1326 audit(1765873798.627:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.803036][   T37] audit: type=1326 audit(1765873798.627:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.803696][   T37] audit: type=1326 audit(1765873798.627:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.810798][ T5803] usb 5-1: Using ep0 maxpacket: 16
[  218.814059][   T37] audit: type=1326 audit(1765873798.637:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.814119][   T37] audit: type=1326 audit(1765873798.637:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.814249][   T37] audit: type=1326 audit(1765873798.637:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.814301][   T37] audit: type=1326 audit(1765873798.637:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5101f749 code=0x7ffc0000
[  218.832031][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.832079][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.832107][ T5803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  218.832160][ T5803] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  218.832188][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.854468][ T5803] usb 5-1: config 0 descriptor??
[  218.859158][ T6934] binder: 6933:6934 ioctl 3b66 1 returned -22
[  218.917705][ T5917] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  219.244746][ T5917] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  219.244778][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.323275][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2
[  219.323336][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323364][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323392][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323421][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323449][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323476][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.323503][ T5803] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  219.324646][ T5917] usb 4-1: config 0 descriptor??
[  219.361856][ T5803] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  219.361899][ T5803] microsoft 0003:045E:07DA.0002: no inputs found
[  219.361917][ T5803] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[  219.444127][ T5917] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  219.470071][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.475719][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.502133][   T44] usb 5-1: USB disconnect, device number 13
[  219.708251][ T5803] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  219.758923][ T6945] overlayfs: failed to resolve './file1': -2
[  219.794362][ T6942] fido_id[6942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  220.057765][ T5803] usb 2-1: Using ep0 maxpacket: 32
[  220.061763][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.061802][ T5803] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.061850][ T5803] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  220.061875][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.074628][ T5803] usb 2-1: config 0 descriptor??
[  220.215306][ T5917] gp8psk: FW Version = 133.227.44 (0x85e32c)  Build 2178/221/212
[  220.367888][   T44] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  220.428140][ T5917] gp8psk: usb in 149 operation failed.
[  220.428162][ T5917] gp8psk: failed to get FPGA version
[  220.428553][ T5917] gp8psk: usb out operation failed.
[  220.428565][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  220.428600][ T5917] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  220.491014][ T5917] usb 4-1: USB disconnect, device number 14
[  220.540597][   T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  220.540626][   T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  220.540710][   T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.540729][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.763368][ T6947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  220.763549][ T6947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  220.878484][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  220.881426][ T5803] usbhid 2-1:0.0: can't add hid device: -71
[  220.881567][ T5803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  220.954207][ T5803] usb 2-1: USB disconnect, device number 12
[  220.983284][   T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  221.214689][   T44] usb 1-1: USB disconnect, device number 13
[  221.248182][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.461862][ T6957] input: syz0 as /devices/virtual/input/input6
[  222.604086][ T6966] JFS: discard option not supported on device
[  222.638771][ T6966] Mount JFS Failure: -22
[  222.638820][ T6966] jfs_mount failed w/return code = -22
[  223.737809][ T5890] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  223.904684][ T5890] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  223.904820][ T5890] usb 5-1: config 0 has no interface number 0
[  223.936821][ T5890] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  223.936853][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.936874][ T5890] usb 5-1: Product: syz
[  223.936889][ T5890] usb 5-1: Manufacturer: syz
[  223.936903][ T5890] usb 5-1: SerialNumber: syz
[  223.990091][ T5890] usb 5-1: config 0 descriptor??
[  224.167771][ T5987] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  224.307829][ T5987] usb 1-1: device descriptor read/64, error -71
[  224.589891][ T5987] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  224.717725][ T5987] usb 1-1: device descriptor read/64, error -71
[  224.826320][ T5890] usb 5-1: Firmware version (0.0) predates our first public release.
[  224.826346][ T5890] usb 5-1: Please update to version 0.2 or newer
[  224.828642][ T5987] usb usb1-port1: attempt power cycle
[  224.985160][ T5890] usb 5-1: USB disconnect, device number 14
[  225.168030][ T5987] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  225.326036][ T5987] usb 1-1: device descriptor read/8, error -71
[  225.529926][ T6392] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  225.570502][ T5987] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  225.589114][ T5987] usb 1-1: device descriptor read/8, error -71
[  225.691314][ T6392] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  225.691348][ T6392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.700749][ T5987] usb usb1-port1: unable to enumerate USB device
[  225.730834][ T6392] usb 4-1: config 0 descriptor??
[  225.747200][ T6392] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  227.009721][ T6392] gp8psk: FW Version = 133.227.44 (0x85e32c)  Build 2178/221/212
[  227.215975][ T6392] gp8psk: usb in 149 operation failed.
[  227.215996][ T6392] gp8psk: failed to get FPGA version
[  227.216411][ T6392] gp8psk: usb out operation failed.
[  227.216425][ T6392] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  227.216469][ T6392] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  227.224399][ T6392] usb 4-1: USB disconnect, device number 15
[  227.267837][ T5987] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  227.392221][ T7017] bond1: option tlb_dynamic_lb: invalid value (3)
[  227.411147][ T7017] bond1 (unregistering): Released all slaves
[  227.428285][ T5987] usb 6-1: Using ep0 maxpacket: 16
[  227.434586][ T5987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.434613][ T5987] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.437504][ T5987] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.437534][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.437690][ T5987] usb 6-1: Product: syz
[  227.437706][ T5987] usb 6-1: Manufacturer: syz
[  227.437721][ T5987] usb 6-1: SerialNumber: syz
[  229.217376][ T5987] usb 6-1: cannot find UAC_HEADER
[  229.445842][ T5987] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  229.463043][ T5987] usb 6-1: USB disconnect, device number 10
[  229.592946][ T7039] input: syz0 as /devices/virtual/input/input7
[  229.731656][ T7035] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  230.110727][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.298927][ T5939] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  230.464091][ T5939] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  230.464136][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.464161][ T5939] usb 2-1: Product: syz
[  230.464177][ T5939] usb 2-1: Manufacturer: syz
[  230.464193][ T5939] usb 2-1: SerialNumber: syz
[  230.667742][ T6395] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  230.817709][ T6395] usb 1-1: Using ep0 maxpacket: 32
[  230.823184][ T6395] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  230.823938][ T6395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.715966][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.716581][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.756089][ T5939] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  232.756156][ T5939] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  232.756651][ T5939] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  232.756704][ T5939] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  232.757746][ T5939] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  232.828200][ T6395] usb 1-1: config 0 descriptor??
[  232.880659][ T5939] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  232.996575][ T5939] usb 2-1: USB disconnect, device number 13
[  233.049354][ T6395] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  233.069614][ T6395] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  233.071177][ T6395] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  233.071264][ T6395] usb 1-1: media controller created
[  233.134154][ T6395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  233.257936][ T6395] az6027: usb out operation failed. (-71)
[  233.258499][ T6395] az6027: usb out operation failed. (-71)
[  233.258513][ T6395] stb0899_attach: Driver disabled by Kconfig
[  233.258522][ T6395] az6027: no front-end attached
[  233.258522][ T6395] 
[  233.258919][ T6395] az6027: usb out operation failed. (-71)
[  233.258933][ T6395] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  233.307450][ T6395] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  234.711195][ T6395] dvb-usb: schedule remote query interval to 400 msecs.
[  234.712123][ T6395] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  234.886728][ T6395] usb 1-1: USB disconnect, device number 18
[  234.892710][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'.
[  235.147219][ T6395] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  235.794060][ T7106] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  235.819421][ T5806] Bluetooth: hci5: link tx timeout
[  235.820611][ T5806] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  236.230676][ T7108] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  237.376941][ T7130] netlink: 'syz.4.348': attribute type 10 has an invalid length.
[  237.980470][ T7130] team0: Device veth1_macvtap failed to register rx_handler
[  238.119016][   T61] Bluetooth: hci5: command 0x0406 tx timeout
[  239.950982][ T7159] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  239.951011][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.951011][ T7159] 
[  239.951271][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.951656][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.951656][ T7159] 
[  239.951672][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.952017][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.952017][ T7159] 
[  239.952032][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.952355][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.952355][ T7159] 
[  239.952369][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.952662][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.952662][ T7159] 
[  239.952676][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.953008][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.953008][ T7159] 
[  239.953022][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.953330][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.953330][ T7159] 
[  239.953344][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.953668][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.953668][ T7159] 
[  239.953682][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.953969][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.953969][ T7159] 
[  239.953983][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.954312][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.954312][ T7159] 
[  239.954327][ T7159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  239.954620][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.954620][ T7159] 
[  239.954952][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.954952][ T7159] 
[  239.955257][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.955257][ T7159] 
[  239.955598][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.955598][ T7159] 
[  239.955888][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.955888][ T7159] 
[  239.956207][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.956207][ T7159] 
[  239.956501][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.956501][ T7159] 
[  239.956840][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.956840][ T7159] 
[  239.957127][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.957127][ T7159] 
[  239.957450][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  239.957450][ T7159] 
[  240.483995][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.483995][ T7159] 
[  240.484320][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.484320][ T7159] 
[  240.484622][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.484622][ T7159] 
[  240.484909][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.484909][ T7159] 
[  240.485200][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.485200][ T7159] 
[  240.485521][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.485521][ T7159] 
[  240.487184][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.487184][ T7159] 
[  240.487520][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.487520][ T7159] 
[  240.508387][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.508387][ T7159] 
[  240.508742][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.508742][ T7159] 
[  240.509105][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.509105][ T7159] 
[  240.509448][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.509448][ T7159] 
[  240.509768][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.509768][ T7159] 
[  240.510085][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.510085][ T7159] 
[  240.510423][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.510423][ T7159] 
[  240.510751][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.510751][ T7159] 
[  240.511071][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.511071][ T7159] 
[  240.511407][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.511407][ T7159] 
[  240.511741][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.511741][ T7159] 
[  240.512062][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.512062][ T7159] 
[  240.512392][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.512392][ T7159] 
[  240.512734][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.512734][ T7159] 
[  240.513069][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.513069][ T7159] 
[  240.513447][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.513447][ T7159] 
[  240.513760][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.513760][ T7159] 
[  240.514125][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.514125][ T7159] 
[  240.514450][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.514450][ T7159] 
[  240.514810][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.514810][ T7159] 
[  240.515129][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.515129][ T7159] 
[  240.515507][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.515507][ T7159] 
[  240.515799][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.515799][ T7159] 
[  240.559762][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.559762][ T7159] 
[  240.560143][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.560143][ T7159] 
[  240.560645][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.560645][ T7159] 
[  240.561011][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.561011][ T7159] 
[  240.561324][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.561324][ T7159] 
[  240.567933][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.567933][ T7159] 
[  240.568329][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.568329][ T7159] 
[  240.568754][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.568754][ T7159] 
[  240.569200][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.569200][ T7159] 
[  240.573762][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.573762][ T7159] 
[  240.574105][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.574105][ T7159] 
[  240.588095][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.588095][ T7159] 
[  240.588566][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.588566][ T7159] 
[  240.589095][ T7159] CIFS mount error: No usable UNC path provided in device string!
[  240.589095][ T7159] 
[  241.638241][ T6052] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  241.817744][ T6052] usb 1-1: Using ep0 maxpacket: 16
[  241.820999][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.821034][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.821058][ T6052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  241.821104][ T6052] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  241.821128][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.952009][ T6052] usb 1-1: config 0 descriptor??
[  242.057727][ T7072] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  242.207738][ T7072] usb 2-1: Using ep0 maxpacket: 8
[  242.216845][ T7072] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  242.216908][ T7072] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  242.216932][ T7072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.234444][ T7208] process 'syz.5.391' launched './file1' with NULL argv: empty string added
[  242.234749][ T7208] FAULT_INJECTION: forcing a failure.
[  242.234749][ T7208] name failslab, interval 1, probability 0, space 0, times 0
[  242.234786][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.5.391 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  242.234812][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  242.234841][ T7208] Call Trace:
[  242.234857][ T7208]  <TASK>
[  242.234867][ T7208]  dump_stack_lvl+0x189/0x250
[  242.234906][ T7208]  ? __pfx____ratelimit+0x10/0x10
[  242.234946][ T7208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.234981][ T7208]  ? __pfx__printk+0x10/0x10
[  242.235012][ T7208]  ? __pfx___might_resched+0x10/0x10
[  242.235044][ T7208]  should_fail_ex+0x46c/0x600
[  242.235083][ T7208]  should_failslab+0xa8/0x100
[  242.235111][ T7208]  __kmalloc_noprof+0xe0/0x7e0
[  242.235143][ T7208]  ? kfree+0x4d/0x900
[  242.235169][ T7208]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  242.235210][ T7208]  tomoyo_realpath_from_path+0xe3/0x5d0
[  242.235238][ T7208]  ? kmem_cache_free+0x18f/0x8d0
[  242.235271][ T7208]  ? kern_path+0x3f/0x50
[  242.235306][ T7208]  tomoyo_realpath_nofollow+0xbb/0x100
[  242.235331][ T7208]  ? __pfx_tomoyo_realpath_nofollow+0x10/0x10
[  242.235372][ T7208]  tomoyo_find_next_domain+0x252/0x1aa0
[  242.235423][ T7208]  ? tomoyo_bprm_check_security+0xf1/0x180
[  242.235449][ T7208]  ? __pfx_tomoyo_find_next_domain+0x10/0x10
[  242.235489][ T7208]  ? tomoyo_bprm_check_security+0xf1/0x180
[  242.235518][ T7208]  tomoyo_bprm_check_security+0x11d/0x180
[  242.235549][ T7208]  security_bprm_check+0x89/0x270
[  242.235577][ T7208]  bprm_execve+0x887/0x1400
[  242.235627][ T7208]  ? __pfx_bprm_execve+0x10/0x10
[  242.235659][ T7208]  ? copy_string_kernel+0x25f/0x2a0
[  242.235697][ T7208]  do_execveat_common+0x510/0x6a0
[  242.235745][ T7208]  __x64_sys_execveat+0xc4/0xe0
[  242.235782][ T7208]  do_syscall_64+0xfa/0xf80
[  242.235806][ T7208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.235831][ T7208]  ? clear_bhb_loop+0x60/0xb0
[  242.235860][ T7208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.235885][ T7208] RIP: 0033:0x7fd397b2f749
[  242.235906][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.235927][ T7208] RSP: 002b:00007fd395d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  242.235952][ T7208] RAX: ffffffffffffffda RBX: 00007fd397d85fa0 RCX: 00007fd397b2f749
[  242.235968][ T7208] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  242.235984][ T7208] RBP: 00007fd395d96090 R08: 0000000000000000 R09: 0000000000000000
[  242.235999][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  242.236014][ T7208] R13: 00007fd397d86038 R14: 00007fd397d85fa0 R15: 00007fff81de0d98
[  242.236055][ T7208]  </TASK>
[  242.246906][ T7072] usb 2-1: config 0 descriptor??
[  242.251797][ T7208] ERROR: Out of memory at tomoyo_realpath_from_path.
[  242.321554][ T7072] gspca_main: vc032x-2.14.0 probing 046d:0892
[  242.501550][ T6052] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  242.501593][ T6052] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  242.501624][ T6052] microsoft 0003:045E:07DA.0003: unknown global tag 0xd
[  242.501642][ T6052] microsoft 0003:045E:07DA.0003: item 0 2 1 13 parsing failed
[  242.502496][ T6052] microsoft 0003:045E:07DA.0003: parse failed
[  242.502610][ T6052] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22
[  242.644691][ T7205] geneve2: entered promiscuous mode
[  242.644722][ T7205] geneve2: entered allmulticast mode
[  245.959729][   T44] usb 1-1: USB disconnect, device number 19
[  246.808388][   T44] usb 2-1: USB disconnect, device number 14
[  247.132228][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  247.138581][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  247.176812][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  247.181298][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  247.200046][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  247.201523][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  247.209355][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  247.212506][ T7242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  247.212564][ T7242] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  247.928092][ T6395] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  248.099943][ T6395] usb 5-1: config 2 has an invalid interface number: 165 but max is 0
[  248.099975][ T6395] usb 5-1: config 2 has no interface number 0
[  248.100013][ T6395] usb 5-1: config 2 interface 165 has no altsetting 0
[  248.102477][ T6395] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=31.b6
[  248.102509][ T6395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.102530][ T6395] usb 5-1: Product: syz
[  248.102546][ T6395] usb 5-1: Manufacturer: syz
[  248.102562][ T6395] usb 5-1: SerialNumber: syz
[  248.176697][ T6395] uvcvideo 5-1:2.165: Found UVC 0.00 device syz (1bcf:0b40)
[  248.176730][ T6395] uvcvideo 5-1:2.165: Forcing UVC version to 1.0a
[  248.176752][ T6395] uvcvideo 5-1:2.165: No valid video chain found.
[  251.238249][ T5788] usb 5-1: USB disconnect, device number 15
[  253.007985][ T5917] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  253.175154][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  253.337907][ T5917] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  253.337943][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.338026][ T5917] usb 5-1: Product: syz
[  253.338043][ T5917] usb 5-1: Manufacturer: syz
[  253.338335][ T5917] usb 5-1: SerialNumber: syz
[  253.473873][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  253.894009][ T6392] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  253.937276][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  254.143796][ T5917] usb 5-1: config 0 descriptor??
[  254.167791][ T6392] usb 6-1: device descriptor read/64, error -32
[  254.170232][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  254.427830][ T6392] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  254.574170][ T7312] hpfs: Bad magic ... probably not HPFS
[  254.667751][ T6392] usb 6-1: device descriptor read/64, error -71
[  254.788660][ T6392] usb usb6-port1: attempt power cycle
[  254.912380][ T7315] netlink: 'syz.1.425': attribute type 2 has an invalid length.
[  255.147823][ T6392] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  257.218713][ T6392] usb 6-1: device descriptor read/8, error -71
[  257.547827][ T6392] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  257.578061][ T6392] usb 6-1: device descriptor read/8, error -71
[  257.678064][ T6392] usb usb6-port1: unable to enumerate USB device
[  257.808113][  T995] usb 5-1: USB disconnect, device number 16
[  257.847680][ T7276] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  258.265828][ T7276] usb 2-1: Using ep0 maxpacket: 16
[  258.293092][ T7276] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  258.293131][ T7276] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  258.293154][ T7276] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  258.293174][ T7276] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  258.293194][ T7276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  258.293215][ T7276] usb 2-1: config 0 has no interface number 0
[  258.293268][ T7276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  258.293297][ T7276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  258.293320][ T7276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  258.293345][ T7276] usb 2-1: too many endpoints for config 0 interface 125 altsetting 250: 215, using maximum allowed: 30
[  258.293386][ T7276] usb 2-1: config 0 interface 125 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 215
[  258.293416][ T7276] usb 2-1: config 0 interface 125 has no altsetting 0
[  258.293435][ T7276] usb 2-1: config 0 interface 125 has no altsetting 1
[  258.407782][ T7276] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  258.407815][ T7276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.407836][ T7276] usb 2-1: Product: syz
[  258.407851][ T7276] usb 2-1: Manufacturer: syz
[  258.407866][ T7276] usb 2-1: SerialNumber: syz
[  258.481102][ T7276] usb 2-1: config 0 descriptor??
[  260.092519][ T7364] block device autoloading is deprecated and will be removed.
[  260.159090][  T995] usb 2-1: USB disconnect, device number 15
[  260.429067][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'.
[  260.483618][ T7373] FAULT_INJECTION: forcing a failure.
[  260.483618][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.483657][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  260.483699][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.483720][ T7373] Call Trace:
[  260.483729][ T7373]  <TASK>
[  260.483739][ T7373]  dump_stack_lvl+0x189/0x250
[  260.483771][ T7373]  ? __pfx____ratelimit+0x10/0x10
[  260.483805][ T7373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.483835][ T7373]  ? __pfx__printk+0x10/0x10
[  260.483872][ T7373]  should_fail_ex+0x46c/0x600
[  260.483907][ T7373]  _copy_to_user+0x31/0xb0
[  260.483932][ T7373]  simple_read_from_buffer+0xe1/0x170
[  260.483961][ T7373]  proc_fail_nth_read+0x1b6/0x220
[  260.483998][ T7373]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  260.484034][ T7373]  ? rw_verify_area+0x2ac/0x4e0
[  260.484065][ T7373]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  260.484098][ T7373]  vfs_read+0x206/0xa30
[  260.484138][ T7373]  ? __pfx_vfs_read+0x10/0x10
[  260.484164][ T7373]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  260.484203][ T7373]  ? mutex_lock_nested+0x154/0x1d0
[  260.484229][ T7373]  ? fdget_pos+0x253/0x320
[  260.484262][ T7373]  ksys_read+0x14b/0x260
[  260.484295][ T7373]  ? __pfx_ksys_read+0x10/0x10
[  260.484329][ T7373]  ? do_syscall_64+0xbe/0xf80
[  260.484355][ T7373]  do_syscall_64+0xfa/0xf80
[  260.484377][ T7373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.484398][ T7373]  ? clear_bhb_loop+0x60/0xb0
[  260.484425][ T7373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.484447][ T7373] RIP: 0033:0x7f3e7a98e15c
[  260.484467][ T7373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  260.484487][ T7373] RSP: 002b:00007f3e78bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  260.484511][ T7373] RAX: ffffffffffffffda RBX: 00007f3e7abe5fa0 RCX: 00007f3e7a98e15c
[  260.484527][ T7373] RDX: 000000000000000f RSI: 00007f3e78bf60a0 RDI: 0000000000000004
[  260.484542][ T7373] RBP: 00007f3e78bf6090 R08: 0000000000000000 R09: 0000000000000000
[  260.484555][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.484576][ T7373] R13: 00007f3e7abe6038 R14: 00007f3e7abe5fa0 R15: 00007ffd6c562818
[  260.484613][ T7373]  </TASK>
[  261.104933][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  261.105010][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  261.698962][  T995] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  261.880527][  T995] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  261.880559][  T995] usb 4-1: config 0 has no interface number 0
[  261.880613][  T995] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  261.880638][  T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.930512][  T995] usb 4-1: config 0 descriptor??
[  261.967697][  T995] usb 4-1: selecting invalid altsetting 1
[  261.997765][  T995] dvb_ttusb_budget: ttusb_init_controller: error
[  261.997788][  T995] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  262.238097][  T995] DVB: Unable to find symbol cx22700_attach()
[  262.503838][  T995] DVB: Unable to find symbol tda10046_attach()
[  262.503856][  T995] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  262.535098][ T5803] usb 4-1: USB disconnect, device number 16
[  265.103438][ T7449] netlink: set zone limit has 4 unknown bytes
[  266.497368][ T7473] input: syz0 as /devices/virtual/input/input10
[  267.544093][ T7483] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[  267.544737][ T7481] netlink: 'syz.1.479': attribute type 2 has an invalid length.
[  269.767921][ T7483] bond1: entered promiscuous mode
[  269.768455][ T7483] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.903931][ T7481] !: entered promiscuous mode
[  269.912203][ T7492] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  270.496912][ T7510] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  273.281464][ T7542] input: syz0 as /devices/virtual/input/input11
[  275.183540][ T7559] ubi31: attaching mtd0
[  275.183569][ T7559] ubi31 error: ubi_attach_mtd_dev: bad VID header (7236535) or data offsets (7236599)
[  275.742588][ T7537] netlink: set zone limit has 4 unknown bytes
[  275.958340][ T5890] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  276.140681][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  276.144472][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.144509][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.144551][ T5890] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  276.144575][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.166585][ T5890] usb 4-1: config 0 descriptor??
[  278.092994][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.109518][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.213852][ T5890] corsair 0003:1B1C:1B02.0004: item fetching failed at offset 3/5
[  278.214406][ T5890] corsair 0003:1B1C:1B02.0004: parse failed
[  278.214485][ T5890] corsair 0003:1B1C:1B02.0004: probe with driver corsair failed with error -22
[  278.436290][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.437054][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.467308][   T44] usb 4-1: USB disconnect, device number 17
[  280.015679][ T7613] input: syz0 as /devices/virtual/input/input12
[  282.757916][   T37] kauditd_printk_skb: 33 callbacks suppressed
[  282.757934][   T37] audit: type=1326 audit(1765873862.577:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  282.758241][   T37] audit: type=1326 audit(1765873862.587:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  282.764585][   T37] audit: type=1326 audit(1765873862.587:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa85b17df90 code=0x7ffc0000
[  282.841632][   T37] audit: type=1326 audit(1765873862.587:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  282.842001][   T37] audit: type=1326 audit(1765873862.667:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  282.842327][   T37] audit: type=1326 audit(1765873862.667:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  282.842648][   T37] audit: type=1326 audit(1765873862.667:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85b17f749 code=0x7ffc0000
[  285.241750][ T7648] netlink: 'syz.3.542': attribute type 1 has an invalid length.
[  286.288618][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'.
[  288.757699][ T5805] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  288.898085][ T5805] usb 4-1: device descriptor read/64, error -71
[  289.136174][ T7684] Invalid ELF header magic: != ELF
[  289.158120][ T5805] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  289.287787][ T5805] usb 4-1: device descriptor read/64, error -71
[  289.488457][ T5805] usb usb4-port1: attempt power cycle
[  289.733333][ T7690] netlink: 'syz.4.544': attribute type 2 has an invalid length.
[  289.733499][ T7690] FAULT_INJECTION: forcing a failure.
[  289.733499][ T7690] name failslab, interval 1, probability 0, space 0, times 0
[  289.733530][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.4.544 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  289.733555][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.733569][ T7690] Call Trace:
[  289.733577][ T7690]  <TASK>
[  289.733587][ T7690]  dump_stack_lvl+0x189/0x250
[  289.733620][ T7690]  ? __pfx____ratelimit+0x10/0x10
[  289.733654][ T7690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.733685][ T7690]  ? __pfx__printk+0x10/0x10
[  289.733713][ T7690]  ? __pfx___might_resched+0x10/0x10
[  289.733736][ T7690]  ? fs_reclaim_acquire+0x7d/0x100
[  289.733760][ T7690]  should_fail_ex+0x46c/0x600
[  289.733794][ T7690]  should_failslab+0xa8/0x100
[  289.733818][ T7690]  __kmalloc_cache_noprof+0x84/0x6d0
[  289.733852][ T7690]  ? ovs_flow_tbl_init+0x1f6/0x7f0
[  289.733884][ T7690]  ovs_flow_tbl_init+0x1f6/0x7f0
[  289.733912][ T7690]  ? ovs_dp_cmd_new+0x1ac/0xaf0
[  289.733945][ T7690]  ovs_dp_cmd_new+0x24b/0xaf0
[  289.733989][ T7690]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  289.734027][ T7690]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  289.734060][ T7690]  genl_family_rcv_msg_doit+0x215/0x300
[  289.734090][ T7690]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  289.734126][ T7690]  ? bpf_lsm_capable+0x9/0x20
[  289.734147][ T7690]  ? security_capable+0x7e/0x2e0
[  289.734202][ T7690]  genl_rcv_msg+0x60e/0x790
[  289.734231][ T7690]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.734251][ T7690]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  289.734298][ T7690]  netlink_rcv_skb+0x208/0x470
[  289.734328][ T7690]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.734352][ T7690]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.734396][ T7690]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.734425][ T7690]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.734458][ T7690]  genl_rcv+0x28/0x40
[  289.734477][ T7690]  netlink_unicast+0x846/0xa10
[  289.734513][ T7690]  ? __pfx_netlink_unicast+0x10/0x10
[  289.734541][ T7690]  ? netlink_sendmsg+0x642/0xb30
[  289.734568][ T7690]  ? skb_put+0x11b/0x210
[  289.734599][ T7690]  netlink_sendmsg+0x805/0xb30
[  289.734638][ T7690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.734676][ T7690]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.734704][ T7690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.734735][ T7690]  __sock_sendmsg+0x21c/0x270
[  289.734772][ T7690]  ____sys_sendmsg+0x508/0x810
[  289.734806][ T7690]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.734844][ T7690]  ? import_iovec+0x74/0xa0
[  289.734869][ T7690]  ___sys_sendmsg+0x21f/0x2a0
[  289.734900][ T7690]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.734969][ T7690]  ? __fget_files+0x2a/0x420
[  289.734992][ T7690]  ? __fget_files+0x3a6/0x420
[  289.735028][ T7690]  __x64_sys_sendmsg+0x1a1/0x260
[  289.735059][ T7690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.735098][ T7690]  ? __pfx_ksys_write+0x10/0x10
[  289.735134][ T7690]  ? do_syscall_64+0xbe/0xf80
[  289.735168][ T7690]  do_syscall_64+0xfa/0xf80
[  289.735190][ T7690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.735218][ T7690]  ? clear_bhb_loop+0x60/0xb0
[  289.735244][ T7690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.735265][ T7690] RIP: 0033:0x7f4a1919f749
[  289.735286][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.735306][ T7690] RSP: 002b:00007f4a17406038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.735329][ T7690] RAX: ffffffffffffffda RBX: 00007f4a193f5fa0 RCX: 00007f4a1919f749
[  289.735344][ T7690] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  289.735359][ T7690] RBP: 00007f4a17406090 R08: 0000000000000000 R09: 0000000000000000
[  289.735372][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.735385][ T7690] R13: 00007f4a193f6038 R14: 00007f4a193f5fa0 R15: 00007ffe2c329fc8
[  289.735420][ T7690]  </TASK>
[  290.691261][ T7704] netlink: 'syz.1.564': attribute type 11 has an invalid length.
[  290.802328][ T7704] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20000
[  291.511386][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'.
[  291.986416][ T7724] netlink: 620 bytes leftover after parsing attributes in process `syz.0.571'.
[  294.117856][ T5788] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  294.317799][ T5788] usb 5-1: Using ep0 maxpacket: 16
[  294.329150][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.329193][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.329222][ T5788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  294.329273][ T5788] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  294.329301][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.343502][ T5788] usb 5-1: config 0 descriptor??
[  294.591765][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.592391][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.633334][ T7766] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 4, id = 0
[  294.831990][ T5788] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  294.832031][ T5788] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  294.832062][ T5788] microsoft 0003:045E:07DA.0005: item fetching failed at offset 32/34
[  294.833420][ T5788] microsoft 0003:045E:07DA.0005: parse failed
[  294.833533][ T5788] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[  295.016974][ T5889] usb 5-1: USB disconnect, device number 17
[  295.299065][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  295.308440][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  300.619563][ T7803] netlink: 'syz.5.595': attribute type 2 has an invalid length.
[  301.541919][ T7817] Set syz0 is full, maxelem 0 reached
[  301.822761][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  301.959775][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.960272][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.011670][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.012248][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.227792][ T7799] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  304.501095][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  304.780203][   T31] usb 2-1: Using ep0 maxpacket: 8
[  304.789334][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.789410][   T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  304.789438][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.806916][   T31] usb 2-1: config 0 descriptor??
[  304.879400][   T31] gspca_main: vc032x-2.14.0 probing 046d:0892
[  306.648544][ T7872] FAULT_INJECTION: forcing a failure.
[  306.648544][ T7872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.648608][ T7872] CPU: 0 UID: 0 PID: 7872 Comm: syz.5.618 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  306.648635][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.648648][ T7872] Call Trace:
[  306.648658][ T7872]  <TASK>
[  306.648668][ T7872]  dump_stack_lvl+0x189/0x250
[  306.648698][ T7872]  ? __pfx____ratelimit+0x10/0x10
[  306.648723][ T7872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.648744][ T7872]  ? __pfx__printk+0x10/0x10
[  306.648771][ T7872]  should_fail_ex+0x46c/0x600
[  306.648795][ T7872]  _copy_to_user+0x31/0xb0
[  306.648812][ T7872]  simple_read_from_buffer+0xe1/0x170
[  306.648833][ T7872]  proc_fail_nth_read+0x1b6/0x220
[  306.648858][ T7872]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.648883][ T7872]  ? rw_verify_area+0x2ac/0x4e0
[  306.648905][ T7872]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.648929][ T7872]  vfs_read+0x206/0xa30
[  306.648962][ T7872]  ? __pfx_vfs_read+0x10/0x10
[  306.648981][ T7872]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  306.649008][ T7872]  ? mutex_lock_nested+0x154/0x1d0
[  306.649027][ T7872]  ? fdget_pos+0x253/0x320
[  306.649050][ T7872]  ksys_read+0x14b/0x260
[  306.649073][ T7872]  ? __pfx_ksys_read+0x10/0x10
[  306.649092][ T7872]  ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0
[  306.649111][ T7872]  ? syscall_user_dispatch+0x4f/0x90
[  306.649139][ T7872]  do_syscall_64+0xfa/0xf80
[  306.649156][ T7872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.649171][ T7872]  ? clear_bhb_loop+0x60/0xb0
[  306.649189][ T7872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.649205][ T7872] RIP: 0033:0x7fd397b2e15c
[  306.649219][ T7872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  306.649233][ T7872] RSP: 002b:00007fd395d75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  306.649249][ T7872] RAX: ffffffffffffffda RBX: 00007fd397d86090 RCX: 00007fd397b2e15c
[  306.649261][ T7872] RDX: 000000000000000f RSI: 00007fd395d750a0 RDI: 0000000000000005
[  306.649271][ T7872] RBP: 00007fd395d75090 R08: 0000000000000000 R09: 0000000000000000
[  306.649280][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.649290][ T7872] R13: 00007fd397d86128 R14: 00007fd397d86090 R15: 00007fff81de0d98
[  306.649315][ T7872]  </TASK>
[  307.671159][   T31] gspca_vc032x: reg_r err -110
[  307.671269][   T31] vc032x 2-1:0.0: probe with driver vc032x failed with error -110
[  307.794414][ T5788] usb 2-1: USB disconnect, device number 16
[  308.032011][ T7878] FAULT_INJECTION: forcing a failure.
[  308.032011][ T7878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.032049][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.4.622 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  308.032075][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.032088][ T7878] Call Trace:
[  308.032097][ T7878]  <TASK>
[  308.032107][ T7878]  dump_stack_lvl+0x189/0x250
[  308.032140][ T7878]  ? __pfx____ratelimit+0x10/0x10
[  308.032175][ T7878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.032204][ T7878]  ? __pfx__printk+0x10/0x10
[  308.032226][ T7878]  ? __might_fault+0xb0/0x130
[  308.032271][ T7878]  should_fail_ex+0x46c/0x600
[  308.032307][ T7878]  _copy_from_user+0x2d/0xb0
[  308.032330][ T7878]  do_ip_getsockopt+0x25f/0x1b60
[  308.032369][ T7878]  ? __pfx_do_ip_getsockopt+0x10/0x10
[  308.032400][ T7878]  ? kstrtoull+0x12f/0x1d0
[  308.032432][ T7878]  ? __lock_acquire+0x6b6/0x2cf0
[  308.032471][ T7878]  ? __lock_acquire+0x6b6/0x2cf0
[  308.032518][ T7878]  ? __lock_acquire+0x6b6/0x2cf0
[  308.032559][ T7878]  ip_getsockopt+0xbb/0x220
[  308.032594][ T7878]  ? __pfx_ip_getsockopt+0x10/0x10
[  308.032627][ T7878]  ? sock_common_getsockopt+0x2d/0xb0
[  308.032655][ T7878]  ? raw_getsockopt+0xce/0x200
[  308.032675][ T7878]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  308.032698][ T7878]  do_sock_getsockopt+0x2b4/0x3d0
[  308.032729][ T7878]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  308.032755][ T7878]  ? do_syscall_64+0x80/0xf80
[  308.032776][ T7878]  ? __fget_files+0x2a/0x420
[  308.032798][ T7878]  ? __fget_files+0x3a6/0x420
[  308.032819][ T7878]  ? __fget_files+0x2a/0x420
[  308.032849][ T7878]  __x64_sys_getsockopt+0x1ab/0x250
[  308.032876][ T7878]  ? do_syscall_64+0x80/0xf80
[  308.032898][ T7878]  ? do_syscall_64+0x80/0xf80
[  308.032923][ T7878]  do_syscall_64+0xfa/0xf80
[  308.032946][ T7878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.032969][ T7878]  ? clear_bhb_loop+0x60/0xb0
[  308.032996][ T7878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.033017][ T7878] RIP: 0033:0x7f4a1919f749
[  308.033037][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.033057][ T7878] RSP: 002b:00007f4a17406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  308.033080][ T7878] RAX: ffffffffffffffda RBX: 00007f4a193f5fa0 RCX: 00007f4a1919f749
[  308.033097][ T7878] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003
[  308.033110][ T7878] RBP: 00007f4a17406090 R08: 0000200000000200 R09: 0000000000000000
[  308.033125][ T7878] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  308.033139][ T7878] R13: 00007f4a193f6038 R14: 00007f4a193f5fa0 R15: 00007ffe2c329fc8
[  308.033174][ T7878]  </TASK>
[  310.651345][  T995] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  311.307712][  T995] usb 5-1: Using ep0 maxpacket: 16
[  311.310473][  T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  311.310536][  T995] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  311.310560][  T995] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  311.310585][  T995] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  311.310608][  T995] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  311.310633][  T995] usb 5-1: config 1 interface 0 has no altsetting 0
[  311.310669][  T995] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  311.310693][  T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.413111][  T995] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  311.668404][  T995] scsi host1: usb-storage 5-1:1.0
[  311.831772][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.832344][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.835851][  T995] usb 5-1: USB disconnect, device number 19
[  313.151546][ T7912] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.627'.
[  313.454698][ T7923] netlink: 288 bytes leftover after parsing attributes in process `syz.4.629'.
[  313.817759][  T995] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  313.947708][   T44] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  314.100770][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  314.100808][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.100850][   T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  314.100876][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.150326][   T44] usb 2-1: config 0 descriptor??
[  314.186442][  T995] usb 4-1: Using ep0 maxpacket: 32
[  314.196340][  T995] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  314.196374][  T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.231513][  T995] usb 4-1: config 0 descriptor??
[  314.259887][  T995] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  314.503709][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503754][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503784][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503813][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503842][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503871][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503901][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503930][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503961][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.503993][   T44] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  314.631419][   T44] redragon 0003:0C45:760B.0006: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0
[  314.638620][  T995] gspca_vc032x: reg_w err -71
[  314.638650][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638662][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638673][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638682][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638692][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638702][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638710][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638719][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638728][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638737][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638746][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638756][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638766][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638775][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638785][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638794][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638804][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638812][  T995] gspca_vc032x: I2c Bus Busy Wait 00
[  314.638820][  T995] gspca_vc032x: Unknown sensor...
[  314.638910][  T995] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  314.695759][  T995] usb 4-1: USB disconnect, device number 21
[  315.126710][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'.
[  317.934283][ T5919] usb 2-1: USB disconnect, device number 17
[  320.307652][ T7998] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.659'.
[  322.768112][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  322.768186][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  323.858073][   T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  323.987700][   T44] usb 1-1: device descriptor read/64, error -71
[  324.230534][   T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  324.317671][ T6692] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  324.357751][   T44] usb 1-1: device descriptor read/64, error -71
[  324.474468][ T6692] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  324.474501][ T6692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.474521][ T6692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  324.474641][ T6692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.475500][   T44] usb usb1-port1: attempt power cycle
[  324.523514][ T6692] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  324.523548][ T6692] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  324.523570][ T6692] usb 2-1: Product: syz
[  324.523585][ T6692] usb 2-1: Manufacturer: syz
[  324.561872][ T6692] cdc_wdm 2-1:1.0: skipping garbage
[  324.561893][ T6692] cdc_wdm 2-1:1.0: skipping garbage
[  324.562533][ T6692] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  324.785822][ T8025] netlink: 'syz.1.668': attribute type 1 has an invalid length.
[  324.785847][ T8025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.668'.
[  325.010219][   T44] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  326.001886][ T6392] usb 2-1: USB disconnect, device number 18
[  326.023332][   T44] usb 1-1: device descriptor read/8, error -71
[  326.781607][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'.
[  326.798552][   T44] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  326.820652][   T44] usb 1-1: Using ep0 maxpacket: 16
[  326.823078][   T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.823104][   T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  326.848434][   T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  326.848473][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.848499][   T44] usb 1-1: Product: syz
[  326.848517][   T44] usb 1-1: Manufacturer: syz
[  326.848534][   T44] usb 1-1: SerialNumber: syz
[  328.408156][   T44] usb 1-1: cannot find UAC_HEADER
[  328.473811][ T5803] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  328.727076][   T44] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  328.752122][ T5803] usb 2-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config
[  328.752168][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0
[  328.752206][ T5803] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  328.752232][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.479774][   T44] usb 1-1: USB disconnect, device number 23
[  329.512721][ T5803] usb 2-1: config 0 descriptor??
[  329.742946][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  329.772233][ T5803] usb 2-1: string descriptor 0 read error: -71
[  329.788356][ T5803] hub 2-1:0.0: bad descriptor, ignoring hub
[  329.788392][ T5803] hub 2-1:0.0: probe with driver hub failed with error -5
[  329.790255][ T5803] sierra 2-1:0.0: Sierra USB modem converter detected
[  329.796234][ T5803] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  329.859334][ T5803] usb 2-1: USB disconnect, device number 19
[  329.894315][ T5803] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  329.895017][ T5803] sierra 2-1:0.0: device disconnected
[  330.040779][  T995] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  330.218061][  T995] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  330.218094][  T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.218115][  T995] usb 5-1: Product: syz
[  330.218131][  T995] usb 5-1: Manufacturer: syz
[  330.218146][  T995] usb 5-1: SerialNumber: syz
[  330.292737][  T995] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  330.495683][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  330.739206][ T8094] random: crng reseeded on system resumption
[  330.972416][ T5803] usb 5-1: USB disconnect, device number 20
[  331.508868][ T8111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  332.077855][ T5963] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  332.081863][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  332.106119][ T5917] ath9k_htc: Failed to initialize the device
[  332.140446][ T5803] usb 5-1: ath9k_htc: USB layer deinitialized
[  332.507680][ T5963] usb 1-1: Using ep0 maxpacket: 32
[  332.510134][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0
[  332.510174][ T5963] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  332.510200][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.521521][ T5963] usb 1-1: config 0 descriptor??
[  335.081458][ T5963] corsair-cpro 0003:1B1C:0C10.0007: unexpected long global item
[  335.082411][ T5963] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -22
[  335.181211][ T5963] usb 1-1: USB disconnect, device number 24
[  336.174306][ T8165] usb usb8: usbfs: process 8165 (syz.4.719) did not claim interface 0 before use
[  336.238876][ T8167] FAULT_INJECTION: forcing a failure.
[  336.238876][ T8167] name failslab, interval 1, probability 0, space 0, times 0
[  336.238914][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.5.720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  336.238939][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  336.238953][ T8167] Call Trace:
[  336.238962][ T8167]  <TASK>
[  336.238971][ T8167]  dump_stack_lvl+0x189/0x250
[  336.239006][ T8167]  ? __pfx____ratelimit+0x10/0x10
[  336.239040][ T8167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.239070][ T8167]  ? __pfx__printk+0x10/0x10
[  336.239098][ T8167]  ? __pfx___might_resched+0x10/0x10
[  336.239128][ T8167]  should_fail_ex+0x46c/0x600
[  336.239162][ T8167]  should_failslab+0xa8/0x100
[  336.239186][ T8167]  __kmalloc_noprof+0xe0/0x7e0
[  336.239217][ T8167]  ? kfree+0x4d/0x900
[  336.239241][ T8167]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  336.239271][ T8167]  tomoyo_realpath_from_path+0xe3/0x5d0
[  336.239295][ T8167]  ? tomoyo_domain+0xd9/0x130
[  336.239323][ T8167]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  336.239354][ T8167]  tomoyo_path_number_perm+0x1e8/0x5a0
[  336.239387][ T8167]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  336.239422][ T8167]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  336.239453][ T8167]  ? lockdep_hardirqs_on+0x98/0x140
[  336.239507][ T8167]  ? __fget_files+0x2a/0x420
[  336.239536][ T8167]  ? __fget_files+0x3a6/0x420
[  336.239557][ T8167]  ? __fget_files+0x2a/0x420
[  336.239584][ T8167]  security_file_ioctl+0xcb/0x2d0
[  336.239619][ T8167]  __se_sys_ioctl+0x47/0x170
[  336.239653][ T8167]  do_syscall_64+0xfa/0xf80
[  336.239675][ T8167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.239698][ T8167]  ? clear_bhb_loop+0x60/0xb0
[  336.239725][ T8167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.239746][ T8167] RIP: 0033:0x7fd397b2f749
[  336.239765][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.239785][ T8167] RSP: 002b:00007fd395d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  336.239808][ T8167] RAX: ffffffffffffffda RBX: 00007fd397d85fa0 RCX: 00007fd397b2f749
[  336.239826][ T8167] RDX: 0000200000000300 RSI: 00000000c0105502 RDI: 0000000000000003
[  336.239840][ T8167] RBP: 00007fd395d96090 R08: 0000000000000000 R09: 0000000000000000
[  336.239854][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.239867][ T8167] R13: 00007fd397d86038 R14: 00007fd397d85fa0 R15: 00007fff81de0d98
[  336.239904][ T8167]  </TASK>
[  336.239912][ T8167] ERROR: Out of memory at tomoyo_realpath_from_path.
[  336.239939][ T8167] usb usb8: usbfs: process 8167 (syz.5.720) did not claim interface 0 before use
[  339.668162][ T5917] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  340.218797][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  340.232094][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  340.315369][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  340.315403][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.315425][ T5917] usb 2-1: Product: syz
[  340.315561][ T5917] usb 2-1: Manufacturer: syz
[  340.315731][ T5917] usb 2-1: SerialNumber: syz
[  340.493867][ T5917] usb 2-1: config 0 descriptor??
[  340.881120][ T5917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  340.883304][ T5917] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  340.988749][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  341.110417][ T5917] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  341.207855][ T5917] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  341.207889][ T5917] em28xx 2-1:0.0: board has no eeprom
[  341.269106][ T5917] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  341.269140][ T5917] em28xx 2-1:0.0: dvb set to bulk mode.
[  341.269559][    T9] em28xx 2-1:0.0: Binding DVB extension
[  341.315032][ T5917] usb 2-1: USB disconnect, device number 20
[  341.317340][ T5917] em28xx 2-1:0.0: Disconnecting em28xx
[  341.414342][    T9] em28xx 2-1:0.0: Registering input extension
[  341.414987][ T5917] em28xx 2-1:0.0: Closing input extension
[  341.506587][ T5917] em28xx 2-1:0.0: Freeing device
[  342.467783][ T5917] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  342.661198][ T5917] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  342.661233][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.701774][ T5917] usb 2-1: config 0 descriptor??
[  342.733807][ T5917] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  344.179336][ T5917] gp8psk: FW Version = 133.227.44 (0x85e32c)  Build 2178/221/212
[  344.388445][ T5917] gp8psk: usb in 149 operation failed.
[  344.388470][ T5917] gp8psk: failed to get FPGA version
[  344.388894][ T5917] gp8psk: usb out operation failed.
[  344.388908][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  344.388951][ T5917] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  344.446009][ T5917] usb 2-1: USB disconnect, device number 21
[  344.797836][ T8090] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  344.937656][ T8090] usb 5-1: device descriptor read/64, error -71
[  346.880477][ T8090] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  347.009133][ T8090] usb 5-1: device descriptor read/64, error -71
[  347.331360][ T8090] usb usb5-port1: attempt power cycle
[  348.151392][ T8262] 9p: Bad value for 'rfdno'
[  348.303509][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'.
[  351.769535][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  351.769567][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  351.769596][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  351.769612][ T5806] Workqueue: hci2 hci_rx_work
[  351.769637][ T5806] Call Trace:
[  351.769646][ T5806]  <TASK>
[  351.769657][ T5806]  dump_stack_lvl+0x189/0x250
[  351.769695][ T5806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.769724][ T5806]  ? __pfx__printk+0x10/0x10
[  351.769754][ T5806]  ? kernfs_path_from_node+0x2c/0x280
[  351.769787][ T5806]  ? kernfs_path_from_node+0x243/0x280
[  351.769819][ T5806]  ? kernfs_path_from_node+0x2c/0x280
[  351.769856][ T5806]  sysfs_create_dir_ns+0x259/0x280
[  351.769887][ T5806]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  351.769977][ T5806]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  351.770014][ T5806]  ? rt_spin_unlock+0x161/0x200
[  351.770049][ T5806]  kobject_add_internal+0x6b1/0xcd0
[  351.770085][ T5806]  kobject_add+0x155/0x220
[  351.770115][ T5806]  ? __pfx_kobject_add+0x10/0x10
[  351.770150][ T5806]  ? get_device_parent+0x370/0x3a0
[  351.770180][ T5806]  device_add+0x408/0xb80
[  351.770208][ T5806]  hci_conn_add_sysfs+0xd5/0x210
[  351.770252][ T5806]  le_conn_complete_evt+0xf1d/0x1420
[  351.770280][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  351.770311][ T5806]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  351.770336][ T5806]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  351.770359][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  351.770386][ T5806]  ? skb_pull_data+0xfb/0x200
[  351.770423][ T5806]  hci_le_conn_complete_evt+0x187/0x480
[  351.770458][ T5806]  hci_event_packet+0x78f/0x1260
[  351.770492][ T5806]  ? reacquire_held_locks+0x121/0x1c0
[  351.770530][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  351.770559][ T5806]  ? __pfx_hci_event_packet+0x10/0x10
[  351.770593][ T5806]  ? rt_spin_unlock+0x150/0x200
[  351.770633][ T5806]  ? hci_send_to_monitor+0xe2/0x590
[  351.770666][ T5806]  hci_rx_work+0x3ee/0x1060
[  351.770696][ T5806]  ? process_scheduled_works+0x9ef/0x1770
[  351.770725][ T5806]  process_scheduled_works+0xad1/0x1770
[  351.770782][ T5806]  ? __pfx_process_scheduled_works+0x10/0x10
[  351.770827][ T5806]  worker_thread+0x8a0/0xda0
[  351.770884][ T5806]  kthread+0x711/0x8a0
[  351.770928][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  351.770955][ T5806]  ? __pfx_kthread+0x10/0x10
[  351.770984][ T5806]  ? rt_spin_unlock+0x150/0x200
[  351.771017][ T5806]  ? rt_spin_unlock+0x161/0x200
[  351.771045][ T5806]  ? __pfx_kthread+0x10/0x10
[  351.771077][ T5806]  ret_from_fork+0x599/0xb30
[  351.771107][ T5806]  ? __pfx_ret_from_fork+0x10/0x10
[  351.771145][ T5806]  ? __switch_to_asm+0x39/0x70
[  351.771178][ T5806]  ? __switch_to_asm+0x33/0x70
[  351.771208][ T5806]  ? __pfx_kthread+0x10/0x10
[  351.771240][ T5806]  ret_from_fork_asm+0x1a/0x30
[  351.771293][ T5806]  </TASK>
[  351.771420][ T5806] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  351.771466][ T5806] Bluetooth: hci2: failed to register connection device
[  352.126150][ T5806] ==================================================================
[  352.126176][ T5806] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.126225][ T5806] Read of size 8 at addr ffff88802907c7b0 by task kworker/u9:3/5806
[  352.126248][ T5806] 
[  352.126262][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.126293][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.126312][ T5806] Workqueue: hci2 hci_rx_work
[  352.126337][ T5806] Call Trace:
[  352.126347][ T5806]  <TASK>
[  352.126360][ T5806]  dump_stack_lvl+0x189/0x250
[  352.126393][ T5806]  ? rcu_is_watching+0x15/0xb0
[  352.126418][ T5806]  ? __kasan_check_byte+0x12/0x40
[  352.126458][ T5806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.126490][ T5806]  ? rcu_is_watching+0x15/0xb0
[  352.126514][ T5806]  ? lock_release+0x4b/0x3b0
[  352.126554][ T5806]  ? __virt_addr_valid+0x1c8/0x5c0
[  352.126589][ T5806]  ? __virt_addr_valid+0x4a5/0x5c0
[  352.126628][ T5806]  print_report+0xca/0x240
[  352.126660][ T5806]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.126695][ T5806]  kasan_report+0x118/0x150
[  352.126736][ T5806]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.126780][ T5806]  l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.126824][ T5806]  l2cap_connect_cfm+0x367/0x10e0
[  352.126867][ T5806]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  352.126913][ T5806]  ? mutex_lock_nested+0x154/0x1d0
[  352.126947][ T5806]  ? hci_connect_cfm+0x2c/0x140
[  352.126975][ T5806]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  352.127010][ T5806]  hci_connect_cfm+0x95/0x140
[  352.127041][ T5806]  le_conn_complete_evt+0xf65/0x1420
[  352.127072][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  352.127103][ T5806]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  352.127131][ T5806]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  352.127156][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  352.127184][ T5806]  ? skb_pull_data+0xfb/0x200
[  352.127224][ T5806]  hci_le_conn_complete_evt+0x187/0x480
[  352.127260][ T5806]  hci_event_packet+0x78f/0x1260
[  352.127297][ T5806]  ? reacquire_held_locks+0x121/0x1c0
[  352.127339][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  352.127369][ T5806]  ? __pfx_hci_event_packet+0x10/0x10
[  352.127406][ T5806]  ? rt_spin_unlock+0x150/0x200
[  352.127446][ T5806]  ? hci_send_to_monitor+0xe2/0x590
[  352.127482][ T5806]  hci_rx_work+0x3ee/0x1060
[  352.127515][ T5806]  ? process_scheduled_works+0x9ef/0x1770
[  352.127541][ T5806]  process_scheduled_works+0xad1/0x1770
[  352.127586][ T5806]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.127624][ T5806]  worker_thread+0x8a0/0xda0
[  352.127668][ T5806]  kthread+0x711/0x8a0
[  352.127701][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  352.127730][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.127763][ T5806]  ? rt_spin_unlock+0x150/0x200
[  352.127799][ T5806]  ? rt_spin_unlock+0x161/0x200
[  352.127830][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.127866][ T5806]  ret_from_fork+0x599/0xb30
[  352.127904][ T5806]  ? __pfx_ret_from_fork+0x10/0x10
[  352.127941][ T5806]  ? __switch_to_asm+0x39/0x70
[  352.127975][ T5806]  ? __switch_to_asm+0x33/0x70
[  352.128011][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.128047][ T5806]  ret_from_fork_asm+0x1a/0x30
[  352.128097][ T5806]  </TASK>
[  352.128106][ T5806] 
[  352.128112][ T5806] Allocated by task 5806:
[  352.128123][ T5806]  kasan_save_track+0x3e/0x80
[  352.128155][ T5806]  __kasan_kmalloc+0x93/0xb0
[  352.128188][ T5806]  __kmalloc_noprof+0x23e/0x7e0
[  352.128224][ T5806]  sk_prot_alloc+0xe7/0x220
[  352.128250][ T5806]  sk_alloc+0x3a/0x390
[  352.128275][ T5806]  bt_sock_alloc+0x3b/0x310
[  352.128299][ T5806]  l2cap_sock_new_connection_cb+0xe2/0x2e0
[  352.128334][ T5806]  l2cap_connect_cfm+0x367/0x10e0
[  352.128363][ T5806]  hci_connect_cfm+0x95/0x140
[  352.128385][ T5806]  le_conn_complete_evt+0xf65/0x1420
[  352.128413][ T5806]  hci_le_conn_complete_evt+0x187/0x480
[  352.128439][ T5806]  hci_event_packet+0x78f/0x1260
[  352.128471][ T5806]  hci_rx_work+0x3ee/0x1060
[  352.128491][ T5806]  process_scheduled_works+0xad1/0x1770
[  352.128516][ T5806]  worker_thread+0x8a0/0xda0
[  352.128541][ T5806]  kthread+0x711/0x8a0
[  352.128571][ T5806]  ret_from_fork+0x599/0xb30
[  352.128593][ T5806]  ret_from_fork_asm+0x1a/0x30
[  352.128627][ T5806] 
[  352.128632][ T5806] Freed by task 8294:
[  352.128644][ T5806]  kasan_save_track+0x3e/0x80
[  352.128675][ T5806]  kasan_save_free_info+0x46/0x50
[  352.128700][ T5806]  __kasan_slab_free+0x5c/0x80
[  352.128732][ T5806]  kfree+0x1bd/0x900
[  352.128759][ T5806]  __sk_destruct+0x626/0x880
[  352.128785][ T5806]  l2cap_sock_cleanup_listen+0xe0/0x450
[  352.128817][ T5806]  l2cap_sock_release+0x6e/0x270
[  352.128847][ T5806]  sock_close+0xc3/0x240
[  352.128885][ T5806]  __fput+0x45b/0xa80
[  352.128910][ T5806]  task_work_run+0x1d4/0x260
[  352.128943][ T5806]  get_signal+0x11c4/0x1310
[  352.128967][ T5806]  arch_do_signal_or_restart+0x9a/0x7a0
[  352.129003][ T5806]  exit_to_user_mode_loop+0x87/0x4f0
[  352.129034][ T5806]  do_syscall_64+0x2d0/0xf80
[  352.129055][ T5806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.129079][ T5806] 
[  352.129084][ T5806] The buggy address belongs to the object at ffff88802907c000
[  352.129084][ T5806]  which belongs to the cache kmalloc-2k of size 2048
[  352.129106][ T5806] The buggy address is located 1968 bytes inside of
[  352.129106][ T5806]  freed 2048-byte region [ffff88802907c000, ffff88802907c800)
[  352.129131][ T5806] 
[  352.129138][ T5806] The buggy address belongs to the physical page:
[  352.129166][ T5806] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29078
[  352.129190][ T5806] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  352.129212][ T5806] flags: 0x80000000000040(head|node=0|zone=1)
[  352.129237][ T5806] page_type: f5(slab)
[  352.129260][ T5806] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  352.129282][ T5806] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  352.129306][ T5806] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  352.129328][ T5806] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  352.129350][ T5806] head: 0080000000000003 ffffea0000a41e01 00000000ffffffff 00000000ffffffff
[  352.129372][ T5806] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  352.129384][ T5806] page dumped because: kasan: bad access detected
[  352.129397][ T5806] page_owner tracks the page as allocated
[  352.129406][ T5806] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17039093295, free_ts 0
[  352.129448][ T5806]  post_alloc_hook+0x234/0x290
[  352.129481][ T5806]  get_page_from_freelist+0x28c0/0x2960
[  352.129503][ T5806]  __alloc_frozen_pages_noprof+0x181/0x370
[  352.129526][ T5806]  alloc_pages_mpol+0xd1/0x380
[  352.129545][ T5806]  allocate_slab+0x86/0x3b0
[  352.129572][ T5806]  ___slab_alloc+0xb10/0x1400
[  352.129593][ T5806]  __slab_alloc+0xc6/0x1f0
[  352.129616][ T5806]  __kmalloc_cache_noprof+0x101/0x6d0
[  352.129649][ T5806]  usb_create_ep_devs+0x59/0x230
[  352.129683][ T5806]  usb_set_configuration+0x1bc7/0x2110
[  352.129714][ T5806]  usb_generic_driver_probe+0x8d/0x150
[  352.129742][ T5806]  usb_probe_device+0x1c4/0x3c0
[  352.129772][ T5806]  really_probe+0x26d/0xad0
[  352.129798][ T5806]  __driver_probe_device+0x18c/0x320
[  352.129822][ T5806]  driver_probe_device+0x4f/0x240
[  352.129847][ T5806]  __device_attach_driver+0x279/0x430
[  352.129882][ T5806] page_owner free stack trace missing
[  352.129891][ T5806] 
[  352.129896][ T5806] Memory state around the buggy address:
[  352.129910][ T5806]  ffff88802907c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.129928][ T5806]  ffff88802907c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.129946][ T5806] >ffff88802907c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.129959][ T5806]                                      ^
[  352.129973][ T5806]  ffff88802907c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  352.129989][ T5806]  ffff88802907c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  352.130003][ T5806] ==================================================================
[  352.130085][ T5806] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  352.130109][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.130139][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.130157][ T5806] Workqueue: hci2 hci_rx_work
[  352.130180][ T5806] Call Trace:
[  352.130190][ T5806]  <TASK>
[  352.130201][ T5806]  dump_stack_lvl+0x99/0x250
[  352.130234][ T5806]  ? __asan_memcpy+0x40/0x70
[  352.130266][ T5806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.130305][ T5806]  ? __pfx__printk+0x10/0x10
[  352.130337][ T5806]  vpanic+0x237/0x6d0
[  352.130371][ T5806]  ? __pfx_vpanic+0x10/0x10
[  352.130402][ T5806]  ? preempt_schedule+0xae/0xc0
[  352.130440][ T5806]  ? __pfx_preempt_schedule+0x10/0x10
[  352.130483][ T5806]  panic+0xb9/0xc0
[  352.130514][ T5806]  ? __pfx_panic+0x10/0x10
[  352.130549][ T5806]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  352.130580][ T5806]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.130616][ T5806]  check_panic_on_warn+0x89/0xb0
[  352.130654][ T5806]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.130691][ T5806]  end_report+0x6f/0x140
[  352.130727][ T5806]  kasan_report+0x129/0x150
[  352.130766][ T5806]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.130810][ T5806]  l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  352.130850][ T5806]  l2cap_connect_cfm+0x367/0x10e0
[  352.130895][ T5806]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  352.130924][ T5806]  ? mutex_lock_nested+0x154/0x1d0
[  352.130950][ T5806]  ? hci_connect_cfm+0x2c/0x140
[  352.130972][ T5806]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  352.131002][ T5806]  hci_connect_cfm+0x95/0x140
[  352.131028][ T5806]  le_conn_complete_evt+0xf65/0x1420
[  352.131056][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  352.131081][ T5806]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  352.131107][ T5806]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  352.131129][ T5806]  ? lockdep_hardirqs_on+0x98/0x140
[  352.131152][ T5806]  ? skb_pull_data+0xfb/0x200
[  352.131186][ T5806]  hci_le_conn_complete_evt+0x187/0x480
[  352.131217][ T5806]  hci_event_packet+0x78f/0x1260
[  352.131249][ T5806]  ? reacquire_held_locks+0x121/0x1c0
[  352.131285][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  352.131312][ T5806]  ? __pfx_hci_event_packet+0x10/0x10
[  352.131345][ T5806]  ? rt_spin_unlock+0x150/0x200
[  352.131379][ T5806]  ? hci_send_to_monitor+0xe2/0x590
[  352.131410][ T5806]  hci_rx_work+0x3ee/0x1060
[  352.131435][ T5806]  ? process_scheduled_works+0x9ef/0x1770
[  352.131462][ T5806]  process_scheduled_works+0xad1/0x1770
[  352.131504][ T5806]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.131539][ T5806]  worker_thread+0x8a0/0xda0
[  352.131580][ T5806]  kthread+0x711/0x8a0
[  352.131612][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  352.131637][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.131665][ T5806]  ? rt_spin_unlock+0x150/0x200
[  352.131694][ T5806]  ? rt_spin_unlock+0x161/0x200
[  352.131722][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.131752][ T5806]  ret_from_fork+0x599/0xb30
[  352.131777][ T5806]  ? __pfx_ret_from_fork+0x10/0x10
[  352.131806][ T5806]  ? __switch_to_asm+0x39/0x70
[  352.131836][ T5806]  ? __switch_to_asm+0x33/0x70
[  352.131866][ T5806]  ? __pfx_kthread+0x10/0x10
[  352.131906][ T5806]  ret_from_fork_asm+0x1a/0x30
[  352.131949][ T5806]  </TASK>
[  352.132302][ T5806] Kernel Offset: disabled