last executing test programs:

2m50.651907759s ago: executing program 0 (id=1398):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040)
r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f00000001c0))
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x12, 0x4, "f37b0859"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0010b2000000b221bab786a4e3f27c4644f32c216fb7a080dd000730cf86288f2fb073f1c178ddaf428c188d519f84e7bf1f508156cd92eeda925244c33db19631faeddf37eaa3b60700ad8f1d111300003785c8ec6ee042a0fde19dc74b0a3ce921573f96fdb47e3368e259caddc9f5ccdd18843c1be88127ccbcfd0687dad50143c82aa100aa1e7e585eb459e32c6db5397e7deb7b39bf321c6e820b0000b3222da075bcbc54e1982843cf449c9daeedd0c7a5c562"], &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "3f958414d2653e5e0d3ccb1b0a2b10f0fa47fb6fd8b8699e3ea85d077b4b6d80884cad8e79d8d2adde5820c23e8a263d6eee877254134cb870bc3c9894fbb8419bcd9ea8017dce169edc95d8c3fcfcebbf3f654109927afc31b139dd907a69822f379c82d0be8deb2ec78624893b9a1c073c9fc816c2eda06b3b76b4c44c53995d97c5236bd0ef86609f861ca01020bfa1167047b4919ec646d2e8ab2cb9ec05d48fddea938e712da64830af900b412abba0ad936bda2b450c6e14e98667147e4ed63ad800624e2e4ed99d2df58025f75b"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="09fee458731671681a00020a1003020400020006000b10010408000b07080009"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0x2, 0x2, "5295a275", "9cee03f1"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x83, 0x9, 0x4, 0x3, 0xb}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000480)={0x0, 0x14, 0x81, "730891101ed7e0351b4ac7d654ab5452daa70678bf0cc025a4608c1b7e698d45b63309a045711ce285083cabd17db5da252e28978a0caa7299a6f4285132987a1d774de9311bc08da032d19ddf821ad3d116b5fe28ce262630b7c0dbc7524bcf5d065c414e1828b0a10213b9b40336955a2982b81bc13db43080394463a9f1680b"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0xb, 0x2, "b5b7"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2e6}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "19c8"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x101}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6})
r5 = syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}], 0x2})
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$lan78xx(r3, &(0x7f0000000d00)={0x14, &(0x7f0000000c00)={0x20, 0x22, 0xa4, {0xa4, 0x5, "dba3fd3f3667a1833595a2dfe79098da83b0f1491be3559d1e1a9b53cc161f9da48fa4a02cef544baf6c51dce204f213e61ff4fdac898edc75ee56ad174bc959012b190818ba47595540a1f8e67919391c9d99a327f6bed8eef85c7fe1f0bce844fe5aa30d31e36481c8f14fa7498bc28a22863a3e13730a67bc15e299b48725f7914193c631ee44476e091c4c81554f73d1f66f08a67678a1aa1174e963e63e353b"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0xf, 0xbc, "5756912ce525326d9d7bc8e6d1bea3af4bc30135c66aba4b241d7619ee5a41618987a98b2a2550e28609b974b276681cebb538d80ab84041a00bc1cef3e5995134b3350a1ed084ce4b30f0bf860611a5fe7f2833abcaf5b451f1c6142912acd855459e6e30c411074af50be214c10f21fb1970e8e6f1f0fe2169f944ab0763adec15f9ab3c87cf467049a847f0bf396ec96b14e4b299282acc26ef882ac2a315c32de1004a68f32b7ef437b06a86cbbee7845f0abf953c01fcc48dff"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f00)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000f40)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000f80)={0xc0, 0xa2, 0x2f, "cae6cf4ae14e7a4a5d5403e51ec581b36cc53eea604a4fb21a443568b6e91bb77153e7145527aca3ae611a095ee882"}})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x0, 0x0, 0xdf, {0xdf, 0x6, "912dc86b1cefc82a1d3336554410d556e3cad79f2e5092560335acbf5e5f7bda6f78283306113c386fe272c8b2d13a1c7ee296a62fdfc8462902928569f80bb6466276a3295083c35877e7a1b4a1af1385a27aa61262522099691da3992972c68007806d1d87bd94060008bde4115ee143390362288d16b0294c0d678262189c5d3a5f667a99e6df7807fee4f2d911030d56af469a996210cf5854824fb1e0447f8a27dad166874cac602651ae28ea9796a068a872cab806de8b3cfdde1047e20ae51fef76053653dc0e182ac58975a48fe2ec7ca9b53ae4fa4405cbff"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001400)={0x44, &(0x7f0000001180)={0x0, 0x1, 0x8a, "9115fced8bdd423891749af2eb322ced11d7b06a8778dde689032f4c371820e61c58edbbfe75d1e492e6acbd60fb8b8fbcd490df70f19e18d2289258af932f0f7a97f8b8d45d6c282e6978da58cfba44b18d609be431b90c3e2ba432424e5155b5933bb4319b79ce3b8ca8b1d69dc8846d886b971084bb1ade142507461688c02c43083c64f7063c4ef0"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x1a}, &(0x7f00000012c0)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x8000, 0x9, 0x2, 0x4, 0x2, 0x853}}, &(0x7f0000001300)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000001340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001380)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000013c0)={0x20, 0x89, 0x2, 0x1}})
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xfffffffffffffe82, 0x30, 0x400, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000a40)=0x12, 0x4)
syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="401700000000a3dbae84e26c375ceb29241b3d2535ba3121925d1d3c03e0e34d8508166bf2de57d0b0a60f54775e7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)

2m49.663100374s ago: executing program 0 (id=1401):
io_setup(0x5, &(0x7f0000000180)=<r0=>0x0)
r1 = socket(0x2b, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
socketpair(0x11, 0x3, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", <r7=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])

2m49.412843269s ago: executing program 0 (id=1403):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0)
write$vga_arbiter(r4, &(0x7f0000000140)=@other={'decodes', ' ', 'mem'}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@multicast2, 0x4e23, 0x0, 0x4e20, 0xff81, 0xa, 0x42da1d6091698faa, 0x80, 0x5e}, {0x9, 0x5, 0x0, 0x2, 0x5, 0x10000, 0x100000001, 0x1}, {0x8, 0xab, 0x1, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x9, @in=@broadcast, 0x3506, 0x4, 0x2, 0x19, 0x5, 0x2, 0x9}}, 0xe8)

2m48.855319295s ago: executing program 0 (id=1404):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff"], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
eventfd(0x86b5)
open$dir(&(0x7f0000000800)='./file0\x00', 0x10000, 0xa0)
eventfd2(0x100, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) (fail_nth: 1)

2m43.763572082s ago: executing program 0 (id=1414):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f210040290000000109021200"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x9, 0x8800, 0xe0, &(0x7f0000000080)="06b8d026bde375ba0477107970d89aa38a440412aa651a6c0f76ace1ce476aa5ef436c500f83839c578c2774c187dd53f20169fcab63be6aaef7f631faee17d45325d9285d8213a44685ddf4bc7c96d26f3bb2c63467cb67b0dd95e8886b01e0da39589736cde137f667a71e4412fd61189b34dc7fcb9b61a6161cf8243a8af8eb4d33b13dc44751d9c32c6d4cd3930ae34ceb0c03f0df4f55fe333207003650e66b5c9d4adf45b3dbf683cd60fb24897db0099772a7687adc0c68ee723e3aeea6e437b4bda2f33004d52bb4a364205313d57eed739b3efaa4e26b371d13739e"}, {0x7, 0x801, 0x1000, &(0x7f00000006c0)="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"}], 0x2})

2m42.322967417s ago: executing program 0 (id=1416):
r0 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
lseek(r0, 0x0, 0x4)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800006, 0x80010, r0, 0x3c032000)
r1 = userfaultfd(0x0)
fadvise64(r1, 0x2, 0x0, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x15e}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008044}, 0x20040854)
r6 = openat$cgroup_ro(r1, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000240)=""/237)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000380)={0x8, 0x8202, 0xde6, 0xd1, <r7=>0x0}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={r7, 0xb5, "bbd943a01595511cf2cd4390b76d0c2f673e97889b50b33de036233a18a06cbc93d3cf48c59fea724bd45f714ac057f738e31fb3500f421da6256f8444a365b3da5017cf289f572fc1a0bbb9e9b07177b8522f19e24484d2f69daad01453fb678835fe8becdcf8a6f6caf70c1d9359862930e88326cb2a2402802ce221213f1ab9a137748d6b4b98ca647127f917af181198257a4e6146d2b289c468d879aebd8bdaf8bc143f0a1371f2c0c9106674b4466002a844"}, &(0x7f00000004c0)=0xbd)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r8, 0x7cb, &(0x7f0000000540)={0x6, 0x2128c32c, 0xba})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000580)={{0x1, 0x0, 0x80, {0x4000, 0x2, 0x3}}, "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", "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"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000002600)=0x2, 0x0, 0x4)
r9 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_of_msg(r9, &(0x7f0000002640)={@r2t={{0x9, 0x8, 0x18, 0xf, 0x1c7f}, 0x800, 0x3ff, 0x2, 0x3}, @void}, 0x80, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000026c0)={0x8, 'virt_wifi0\x00', {'veth0_macvtap\x00'}, 0x3})
r10 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000002700)=0x168d)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002780)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x64, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8078}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x64}}, 0x4040000)
io_uring_enter(r2, 0x568d, 0xc6c, 0x1, &(0x7f00000028c0)={[0x410a]}, 0x8)
ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0)

1m21.490564161s ago: executing program 1 (id=1556):
syz_init_net_socket$x25(0x3, 0x5, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0)
write$vga_arbiter(r4, &(0x7f0000000140)=@other={'decodes', ' ', 'mem'}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@multicast2, 0x4e23, 0x0, 0x4e20, 0xff81, 0xa, 0x42da1d6091698faa, 0x80, 0x5e}, {0x9, 0x5, 0x0, 0x2, 0x5, 0x10000, 0x100000001, 0x1}, {0x8, 0xab, 0x1, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x9, @in=@broadcast, 0x3506, 0x4, 0x2, 0x19, 0x5, 0x2, 0x9}}, 0xe8)

1m16.609782137s ago: executing program 1 (id=1564):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0xbb)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRESHEX, @ANYBLOB="200002200629e79cfda25b5d54a9f5805b02000000000000000034591cba55feff000004a4f2c0bf2a9c0f937ac445a983951bb27df12f6b1e00000000000000", @ANYRES32=r7, @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20048800)
splice(r4, 0x0, r8, 0x0, 0x4ffe6, 0x0)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = io_uring_setup(0x34df, &(0x7f0000001140)={0x0, 0x5304, 0x0, 0x1, 0x22a, 0x0, r4})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r11, 0x1a, &(0x7f0000001380)={0x9}, 0x1)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x394}}, 0x0)
close(r10)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x204400, 0xa)
r12 = gettid()
sched_setscheduler(r12, 0x6, &(0x7f00000013c0)=0x800)

1m13.746179751s ago: executing program 1 (id=1567):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x0, 0x700}, &(0x7f0000000380)=0x40)

1m13.351736278s ago: executing program 1 (id=1569):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00009db000/0x3000)=nil, 0x800000})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10005, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff81a00000, 0x13, 0x0, 0x87, 0x1, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a)
close(0x3)

1m9.975912875s ago: executing program 1 (id=1574):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
pidfd_getfd(r4, r4, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]})
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
dup(r0)
preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/216, 0xd8}], 0x1, 0x4, 0x58c8, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)

1m6.971244384s ago: executing program 1 (id=1578):
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d042abd70000000000001000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24004010)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="1d844533fae7db4bd550076c3d1a8cbe4e725370fc4b13763387a01779cfaa213ae488415d4d10c310da0ca140338d60e30ff70d30dcb9e104db36bfcd9130176b4d7742de138f247a34d9d53b5749b7bf652195eeb3b24f02e64f2baae122c43a7bf291a7a2d40dddba6be0ce702b47d2e0ea354a70553c23f1dc10", 0x7c, 0xfffffffffffffffa)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000200)="59119dbd4112719893360c7fa109fd80020b51bfc7ddd4d03da7645a1797b7cba1bdad57dceca20dd96b8cf131fcafe3daca96acfb6ae4013ef0e3c0724df7d48fcb56946837868347ce84b79925f4b9d7938d0aa4f452e9aa", 0x59, r3)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000180)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha3-512\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0)
r6 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.state\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})
ioctl$TCFLSH(r6, 0x540b, 0x2)

52.938241427s ago: executing program 2 (id=1592):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x4})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2005, 0x6})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRESHEX=r0, @ANYRES64=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c0002000300c3d993330000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x7, 0x7ff00003}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r7 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r8)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000180)='./file2/file0\x00', &(0x7f00000001c0)={0x88080, 0xd4, 0x6}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xeb, 0xffffffffffffffff, 0x3}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(r7, &(0x7f00000003c0)='numa_maps\x00')
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_cache\x00')

51.714403579s ago: executing program 32 (id=1578):
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d042abd70000000000001000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24004010)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="1d844533fae7db4bd550076c3d1a8cbe4e725370fc4b13763387a01779cfaa213ae488415d4d10c310da0ca140338d60e30ff70d30dcb9e104db36bfcd9130176b4d7742de138f247a34d9d53b5749b7bf652195eeb3b24f02e64f2baae122c43a7bf291a7a2d40dddba6be0ce702b47d2e0ea354a70553c23f1dc10", 0x7c, 0xfffffffffffffffa)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000200)="59119dbd4112719893360c7fa109fd80020b51bfc7ddd4d03da7645a1797b7cba1bdad57dceca20dd96b8cf131fcafe3daca96acfb6ae4013ef0e3c0724df7d48fcb56946837868347ce84b79925f4b9d7938d0aa4f452e9aa", 0x59, r3)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000180)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha3-512\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0)
r6 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.state\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})
ioctl$TCFLSH(r6, 0x540b, 0x2)

51.555869038s ago: executing program 2 (id=1594):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4", 0xc5}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

51.253754483s ago: executing program 2 (id=1596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000080)="172106ea4962673f6be3b6ffce43649f8841166de6bf797e93ec443f470b30c00370e78c0e1a3bef40705908bacbe8cac57927a02496fa3d7dbd14769ca5f17533db73d043003843894a63f1c608bfa9a9", &(0x7f00000001c0)=""/136, &(0x7f00000004c0)="c7b17ec10f547612d759ed41eb49cd6f379c31c843e4b17928bc3f508b3fdf0b45312c9b0dca66778fd22cd7a728cff232975dd8d5f9660ddbd8ae384f8b65a5256becf94f2c5af121ed75d2f255b01adb0cdbb9002aa8bfe4aef5ac6aac3ec158b91afe4418cda8ac8984244dda674a0843dca96cb3aff9236bcbbf5f781c31403d7f2ca41d954ca067ccab847431e0ee35b19b471bb12b62b69b6ed01f9527d0533e13e8e3fb19d36861295536ce39bc1acd30a63d825eef19c1cee00c321a4e6339fe2c873bf0a5c330ab243df943647a68c545b7275c54a9a090af4fd668b30653940f3f8ffea729d7c0da05f0d4193c2de5c843f2", &(0x7f00000005c0)="7fb94f6ce0d321e38b583facaaf4ac4bc824be4335259f37d56b54d2932f1c1b58527f42ad02932f14acbe022cac2c0f732b2c85812a4b9406e7dbd50735bef7e3c3c8496a108a6fdd9eee211352b14c2206e7f86b320e3b37aebb5daea75e2aa94b505666140902fc192cff15d387190697333defb87487d668c38c84327ca8df91ce15f825dbf522ea26842356cc4579a2d6afeb3670cd65306631592b3144d1728cad2e1aa19c88c17ebcab4859ff7e34c8eeac98a5c627a19c81f862f2f6c5cf9b20648d5671ee679869fc71", 0x9, r0}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0xfffffffffffffc9e, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

50.941575209s ago: executing program 2 (id=1597):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
getpeername$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x9e}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x22fb321bb45fc150, 0x8010, 0xffffffffffffffff, 0x703c8000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000043000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000067c000/0x2000)=nil, &(0x7f00007bc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x23a4, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0xfa, 0xf6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x17, 0x29, 0x2}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x8, 0xef, 0x2, 0x8, 0x3}, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0523000ef6030a860031c74f7761cdb6904436fecdd74f34eb0d9572915547e314e99b3874c9d3076c5c7e7fc01148a34e37c12035d1f2d986d49cf596d2deb8f60ff502cf030119a131faec57f31f871ef5fb0c776faffe914ba2d9a40b41eded4e94ccf8c9f540d6b71a09a228cfa6af5f33f151a974b35d71cc6e31c9184744c83450cf69fc5100fdbb923b6c6a1a0f06402ac17b43c59d819c8f8c06a3f0aa3079bc04997d27df156b17e8e2b994dc2d6199408eed4f4700f19e2d074aee4b28aeb8c47f62f22bb4289e"], 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x500a}}, {0x13, &(0x7f0000000840)=@string={0x13, 0x3, "5526d95f1b4c3fff0be1e2b19ce90d5b0c"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xcf, &(0x7f0000000b00)=@string={0xcf, 0x3, "e745a95ec85974cf048e1273d0007afca4757e678e30ba3e8e3774b38324ed4075ad8684339c63e3361575265450bf4e3a4748caa95690d144e73671368315fb44fa14af7fdebb1d10695d75d90cc1329bef69574cfa4de691018acd63caaca24a4fe959ac9c53b136763fdc4b26119dccb5975f9603357f07366eae580202991386106108de80675b6525f822f5b3250e855a3e227a35e254ec5f602e949f36e609e2d2524a9d402b190b7ec05d2e11ec52bdad192ab0e8ccb3351b6cee2c74feadb97262997bfaed8fd1e365"}}, {0x73, &(0x7f00000009c0)=ANY=[@ANYBLOB="7303975dd1195d5a7d1a81d22ae53c15317b2e7087cdd5c5e3c99d61d0b24bc684de4aa9c291dde99486a98f6c0b068eb6130ca909fe9ddcaa2b4c849b890bec72d395ae670298ce518c6872ccd902373c700afe13c4e3618d168a2b72d257abc2148062a2cf549974a4211d083252cc84334f"]}]})

47.339373825s ago: executing program 2 (id=1601):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000cd0000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040)
inotify_init1(0x800)

46.731196396s ago: executing program 2 (id=1602):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket(0x2, 0x3, 0xff)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x20, 0x18, 0x9, 0xf8, 0x0, 0x7fff, 0x0})
pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x9, 0xac, 0x7, 0x6b4, 0xffffffffffffffff, 0x1ff}, &(0x7f0000000280)={0x6e, 0x8, 0x4, 0xb, 0x8, 0x77, 0x5, 0x5f3}, &(0x7f00000002c0)={0x7, 0x0, 0x4, 0x1, 0x1, 0xc000000000, 0xffffffff, 0x4}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0xa]}, 0x8})
r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x404000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x4, 0x3, 0x1, 0x10, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x9, 0xe5, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x20001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xc, 0xde, &(0x7f0000000140)=""/222}, 0x94)

31.386648343s ago: executing program 33 (id=1602):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket(0x2, 0x3, 0xff)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x20, 0x18, 0x9, 0xf8, 0x0, 0x7fff, 0x0})
pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x9, 0xac, 0x7, 0x6b4, 0xffffffffffffffff, 0x1ff}, &(0x7f0000000280)={0x6e, 0x8, 0x4, 0xb, 0x8, 0x77, 0x5, 0x5f3}, &(0x7f00000002c0)={0x7, 0x0, 0x4, 0x1, 0x1, 0xc000000000, 0xffffffff, 0x4}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0xa]}, 0x8})
r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x404000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x4, 0x3, 0x1, 0x10, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x9, 0xe5, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x20001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xc, 0xde, &(0x7f0000000140)=""/222}, 0x94)

12.687033397s ago: executing program 4 (id=1637):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x7, 0x801, 0x0, &(0x7f00000006c0)}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

10.431592414s ago: executing program 3 (id=1640):
prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000200))
ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x8, 0x2003)

7.588175927s ago: executing program 3 (id=1641):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x0, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x2}})
ioctl(r5, 0x8b1b, &(0x7f0000000040))
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', <r8=>0x0, 0x29, 0x2d, 0xf2, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x1, 0x8, 0x9, 0x7}})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=@flushpolicy={0xbc, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in=@remote, 0x4e20, 0x9, 0x4e22, 0x10, 0x2, 0x0, 0x0, 0x3c, r8, r9}, {0xe4, 0x442d, 0x6, 0x101, 0xfffffffffffffffb, 0xe, 0x1, 0x1}, {0x7, 0x1, 0x3, 0x7}, 0x2, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x15}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="611040170f0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111420000000000851000000200e800850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = socket(0x10, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0d05604, &(0x7f0000000400)={0x1, @win={{0x7fff, 0x3, 0x2, 0x5}, 0x2, 0x2, 0x0, 0x7ff, 0x0, 0x5}})
close(0xffffffffffffffff)

7.586740188s ago: executing program 4 (id=1642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x8, r7)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
accept4(r8, 0x0, 0x0, 0x800)
r9 = syz_pidfd_open(r7, 0x0)
process_mrelease(r9, 0x700000000000000)

6.621160894s ago: executing program 4 (id=1643):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xfe9, &(0x7f0000002e00)=""/4073}, 0x94)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000040))
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb4600000})
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)="abd9", 0x2}], 0x2)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)

5.759302052s ago: executing program 3 (id=1644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x1000004, 0x303}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40000)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="63fcffffff0008", @ANYRES16=r8, @ANYBLOB="000326bd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d50002000000"], 0x24}}, 0x14)

4.517970471s ago: executing program 3 (id=1645):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2.574056301s ago: executing program 3 (id=1646):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xbb)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0})

2.487837332s ago: executing program 4 (id=1647):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25df5bfd, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.023359979s ago: executing program 4 (id=1648):
prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000200))
ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x8, 0x2003)

186.824231ms ago: executing program 4 (id=1649):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='.\x00', 0x511080, 0x0)
fcntl$notify(r0, 0x402, 0x23)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x40000008)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

0s ago: executing program 3 (id=1650):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x9, 0x8800, 0x0, 0x0}, {0x7, 0x801, 0x0, &(0x7f00000006c0)}], 0x2})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

001
[  594.866117][ T9631] R13: 00007f367a1d6038 R14: 00007f367a1d5fa0 R15: 00007ffe4220b178
[  594.866153][ T9631]  </TASK>
[  596.002992][   T37] audit: type=1326 audit(1768182762.794:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.003362][   T37] audit: type=1326 audit(1768182762.794:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.066098][   T37] audit: type=1326 audit(1768182762.864:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.067188][   T37] audit: type=1326 audit(1768182762.864:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069362][   T37] audit: type=1326 audit(1768182762.864:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069416][   T37] audit: type=1326 audit(1768182762.864:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069462][   T37] audit: type=1326 audit(1768182762.864:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069509][   T37] audit: type=1326 audit(1768182762.864:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069554][   T37] audit: type=1326 audit(1768182762.864:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.069602][   T37] audit: type=1326 audit(1768182762.864:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689d95f749 code=0x7ffc0000
[  596.309466][ T9654] fuse: Bad value for 'fd'
[  596.775024][ T9111] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  597.103724][ T9111] usb 2-1: Using ep0 maxpacket: 16
[  597.106296][ T9111] usb 2-1: config 5 has an invalid interface number: 37 but max is 0
[  597.106326][ T9111] usb 2-1: config 5 has no interface number 0
[  597.106365][ T9111] usb 2-1: config 5 interface 37 has no altsetting 0
[  597.109171][ T9111] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  597.109197][ T9111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.109216][ T9111] usb 2-1: Product: syz
[  597.109229][ T9111] usb 2-1: Manufacturer: syz
[  597.109243][ T9111] usb 2-1: SerialNumber: syz
[  598.519554][ T9111] go7007 2-1:5.37: probe with driver go7007 failed with error -12
[  598.560685][ T9111] usb 2-1: USB disconnect, device number 31
[  600.488831][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.489095][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.489329][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.489537][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.489754][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.506386][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.508951][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.509520][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.510057][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.511108][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  600.724386][ T6046] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  600.888103][ T9696] fuse: Bad value for 'fd'
[  603.152103][ T9717] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  605.422930][ T9747] FAULT_INJECTION: forcing a failure.
[  605.422930][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.422982][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.0.1319 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  605.423013][ T9747] Tainted: [L]=SOFTLOCKUP
[  605.423022][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  605.423035][ T9747] Call Trace:
[  605.423043][ T9747]  <TASK>
[  605.423053][ T9747]  dump_stack_lvl+0xe8/0x150
[  605.423088][ T9747]  should_fail_ex+0x46c/0x600
[  605.423124][ T9747]  _copy_from_user+0x2d/0xb0
[  605.423148][ T9747]  ___sys_sendmsg+0x158/0x2a0
[  605.423182][ T9747]  ? __pfx____sys_sendmsg+0x10/0x10
[  605.423249][ T9747]  ? __fget_files+0x2a/0x420
[  605.423273][ T9747]  ? __fget_files+0x3a6/0x420
[  605.423307][ T9747]  __x64_sys_sendmsg+0x1a1/0x260
[  605.423339][ T9747]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  605.423380][ T9747]  ? __pfx_ksys_write+0x10/0x10
[  605.423425][ T9747]  do_syscall_64+0xec/0xf80
[  605.423452][ T9747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.423473][ T9747]  ? trace_irq_disable+0x37/0x100
[  605.423497][ T9747]  ? clear_bhb_loop+0x60/0xb0
[  605.423523][ T9747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.423544][ T9747] RIP: 0033:0x7f3679f7f749
[  605.423562][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  605.423580][ T9747] RSP: 002b:00007f36781de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  605.423602][ T9747] RAX: ffffffffffffffda RBX: 00007f367a1d5fa0 RCX: 00007f3679f7f749
[  605.423616][ T9747] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003
[  605.423630][ T9747] RBP: 00007f36781de090 R08: 0000000000000000 R09: 0000000000000000
[  605.423642][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.423655][ T9747] R13: 00007f367a1d6038 R14: 00007f367a1d5fa0 R15: 00007ffe4220b178
[  605.423687][ T9747]  </TASK>
[  605.754733][ T9111] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  605.903951][ T9111] usb 5-1: Using ep0 maxpacket: 16
[  605.906512][ T9111] usb 5-1: config 5 has an invalid interface number: 37 but max is 0
[  605.906542][ T9111] usb 5-1: config 5 has no interface number 0
[  605.906577][ T9111] usb 5-1: config 5 interface 37 has no altsetting 0
[  605.916415][ T9111] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  605.916447][ T9111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.916469][ T9111] usb 5-1: Product: syz
[  605.916485][ T9111] usb 5-1: Manufacturer: syz
[  605.916501][ T9111] usb 5-1: SerialNumber: syz
[  606.297158][ T9111] go7007 5-1:5.37: probe with driver go7007 failed with error -12
[  606.327202][ T9111] usb 5-1: USB disconnect, device number 26
[  607.434427][ T5810] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  608.171235][ T5810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.171265][ T5810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  608.171306][ T5810] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping
[  608.171332][ T5810] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  608.172900][ T5810] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  608.172931][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  608.172953][ T5810] usb 5-1: SerialNumber: syz
[  608.811122][ T6046] kernel write not supported for file /media3 (pid: 6046 comm: kworker/0:12)
[  608.827792][ T5810] usb 5-1: 0:2 : does not exist
[  608.827897][ T5810] usb 5-1: unit 5 not found!
[  608.875059][ T5810] usb 5-1: USB disconnect, device number 27
[  608.936193][ T7813] udevd[7813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  609.189150][ T9787] FAULT_INJECTION: forcing a failure.
[  609.189150][ T9787] name failslab, interval 1, probability 0, space 0, times 0
[  609.189225][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: syz.0.1332 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  609.189257][ T9787] Tainted: [L]=SOFTLOCKUP
[  609.189265][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  609.189279][ T9787] Call Trace:
[  609.189290][ T9787]  <TASK>
[  609.189301][ T9787]  dump_stack_lvl+0xe8/0x150
[  609.189337][ T9787]  should_fail_ex+0x46c/0x600
[  609.189373][ T9787]  ? key_alloc+0x308/0xfe0
[  609.189394][ T9787]  should_failslab+0xa8/0x100
[  609.189433][ T9787]  ? key_alloc+0x308/0xfe0
[  609.189452][ T9787]  kmem_cache_alloc_noprof+0x84/0x6c0
[  609.189487][ T9787]  ? key_user_lookup+0x1bc/0x460
[  609.189513][ T9787]  key_alloc+0x308/0xfe0
[  609.189549][ T9787]  keyring_alloc+0x45/0xb0
[  609.189580][ T9787]  keyctl_get_persistent+0x497/0x750
[  609.189616][ T9787]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  609.189659][ T9787]  ? __se_sys_keyctl+0x6c0/0x910
[  609.189699][ T9787]  __se_sys_keyctl+0x6cd/0x910
[  609.189736][ T9787]  ? __pfx___se_sys_keyctl+0x10/0x10
[  609.189772][ T9787]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  609.189805][ T9787]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  609.189844][ T9787]  ? irqentry_exit+0x5e8/0x670
[  609.189867][ T9787]  ? lockdep_hardirqs_on+0x7b/0x110
[  609.189889][ T9787]  ? irqentry_exit+0x5e8/0x670
[  609.189909][ T9787]  ? rcu_is_watching+0x15/0xb0
[  609.189949][ T9787]  ? __x64_sys_keyctl+0x20/0xc0
[  609.189986][ T9787]  do_syscall_64+0xec/0xf80
[  609.190008][ T9787]  ? rcu_is_watching+0x15/0xb0
[  609.190026][ T9787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.190049][ T9787]  ? clear_bhb_loop+0x60/0xb0
[  609.190077][ T9787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.190099][ T9787] RIP: 0033:0x7f3679f7f749
[  609.190120][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.190139][ T9787] RSP: 002b:00007f367819c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  609.190163][ T9787] RAX: ffffffffffffffda RBX: 00007f367a1d6180 RCX: 00007f3679f7f749
[  609.190181][ T9787] RDX: fffffffffffffffb RSI: 0000000000000000 RDI: 0000000000000016
[  609.190196][ T9787] RBP: 00007f367819c090 R08: 0000000000000000 R09: 0000000000000000
[  609.190210][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.190224][ T9787] R13: 00007f367a1d6218 R14: 00007f367a1d6180 R15: 00007ffe4220b178
[  609.190262][ T9787]  </TASK>
[  611.409583][ T5810] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  611.580560][ T5810] usb 1-1: Using ep0 maxpacket: 8
[  611.598340][ T5810] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  611.598374][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.598397][ T5810] usb 1-1: Product: syz
[  611.598413][ T5810] usb 1-1: Manufacturer: syz
[  611.598429][ T5810] usb 1-1: SerialNumber: syz
[  611.659170][ T5810] usb 1-1: config 0 descriptor??
[  611.751485][ T5924] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  611.831024][ T9812] FAULT_INJECTION: forcing a failure.
[  611.831024][ T9812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.831064][ T9812] CPU: 0 UID: 0 PID: 9812 Comm: syz.1.1341 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  611.831096][ T9812] Tainted: [L]=SOFTLOCKUP
[  611.831103][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  611.831116][ T9812] Call Trace:
[  611.831125][ T9812]  <TASK>
[  611.831134][ T9812]  dump_stack_lvl+0xe8/0x150
[  611.831176][ T9812]  should_fail_ex+0x46c/0x600
[  611.831220][ T9812]  _copy_from_user+0x2d/0xb0
[  611.831245][ T9812]  __sys_bpf+0x1e3/0x860
[  611.831273][ T9812]  ? __pfx___sys_bpf+0x10/0x10
[  611.831295][ T9812]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  611.831344][ T9812]  ? ksys_write+0x230/0x260
[  611.831379][ T9812]  ? __pfx_ksys_write+0x10/0x10
[  611.831419][ T9812]  __x64_sys_bpf+0x7c/0x90
[  611.831443][ T9812]  do_syscall_64+0xec/0xf80
[  611.831466][ T9812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.831488][ T9812]  ? trace_irq_disable+0x37/0x100
[  611.831512][ T9812]  ? clear_bhb_loop+0x60/0xb0
[  611.831538][ T9812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.831560][ T9812] RIP: 0033:0x7f689d95f749
[  611.831578][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.831598][ T9812] RSP: 002b:00007f689bbc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  611.831622][ T9812] RAX: ffffffffffffffda RBX: 00007f689dbb5fa0 RCX: 00007f689d95f749
[  611.831639][ T9812] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000008
[  611.831653][ T9812] RBP: 00007f689bbc6090 R08: 0000000000000000 R09: 0000000000000000
[  611.831666][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.831679][ T9812] R13: 00007f689dbb6038 R14: 00007f689dbb5fa0 R15: 00007ffda83c7c18
[  611.831714][ T9812]  </TASK>
[  611.930141][ T5924] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  611.930241][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.930295][ T5924] usb 5-1: config 0 has no interface number 0
[  611.930423][ T5924] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  611.930502][ T5924] usb 5-1: config 0 interface 41 has no altsetting 0
[  612.046615][ T5924] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  612.046650][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.046697][ T5924] usb 5-1: Product: syz
[  612.046739][ T5924] usb 5-1: Manufacturer: syz
[  612.046774][ T5924] usb 5-1: SerialNumber: syz
[  612.407354][ T5924] usb 5-1: config 0 descriptor??
[  612.974593][ T5810] usb write operation failed. (-71)
[  612.975045][ T5810] usb write operation failed. (-71)
[  612.975474][ T5810] usb write operation failed. (-71)
[  612.975493][ T5810] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  612.977875][ T5810] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  612.977917][ T5810] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  613.115799][ T5924] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  615.736644][ T9837] FAULT_INJECTION: forcing a failure.
[  615.736644][ T9837] name failslab, interval 1, probability 0, space 0, times 0
[  615.736714][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.2.1346 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  615.736747][ T9837] Tainted: [L]=SOFTLOCKUP
[  615.736755][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  615.736769][ T9837] Call Trace:
[  615.736778][ T9837]  <TASK>
[  615.736788][ T9837]  dump_stack_lvl+0xe8/0x150
[  615.736825][ T9837]  should_fail_ex+0x46c/0x600
[  615.736863][ T9837]  should_failslab+0xa8/0x100
[  615.736886][ T9837]  __kmalloc_noprof+0xe0/0x7e0
[  615.736918][ T9837]  ? kfree+0x4d/0x900
[  615.736943][ T9837]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  615.736974][ T9837]  tomoyo_realpath_from_path+0xe3/0x5d0
[  615.737000][ T9837]  ? tomoyo_domain+0xd9/0x130
[  615.737030][ T9837]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  615.737061][ T9837]  tomoyo_path_number_perm+0x1e8/0x5a0
[  615.737103][ T9837]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  615.737143][ T9837]  ? __pfx___schedule+0x10/0x10
[  615.737219][ T9837]  ? security_file_ioctl+0x26e/0x2d0
[  615.737258][ T9837]  security_file_ioctl+0xcb/0x2d0
[  615.737293][ T9837]  __se_sys_ioctl+0x47/0x170
[  615.737326][ T9837]  do_syscall_64+0xec/0xf80
[  615.737348][ T9837]  ? rcu_is_watching+0x15/0xb0
[  615.737368][ T9837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.737391][ T9837]  ? clear_bhb_loop+0x60/0xb0
[  615.737419][ T9837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.737442][ T9837] RIP: 0033:0x7fb063bdf749
[  615.737462][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  615.737482][ T9837] RSP: 002b:00007fb061dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  615.737506][ T9837] RAX: ffffffffffffffda RBX: 00007fb063e36180 RCX: 00007fb063bdf749
[  615.737523][ T9837] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000006
[  615.737539][ T9837] RBP: 00007fb061dfc090 R08: 0000000000000000 R09: 0000000000000000
[  615.737553][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  615.737567][ T9837] R13: 00007fb063e36218 R14: 00007fb063e36180 R15: 00007ffcac90c828
[  615.737605][ T9837]  </TASK>
[  615.737689][ T9837] ERROR: Out of memory at tomoyo_realpath_from_path.
[  616.986843][ T5928] usb 5-1: USB disconnect, device number 28
[  617.123771][ T5924] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  617.317436][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  617.317465][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  617.317504][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping
[  617.317530][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  617.319043][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  617.319073][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  617.319097][ T5924] usb 2-1: SerialNumber: syz
[  617.623290][ T5924] usb 2-1: 0:2 : does not exist
[  617.623421][ T5924] usb 2-1: unit 5 not found!
[  617.661607][ T5924] usb 2-1: USB disconnect, device number 32
[  617.736325][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  618.076330][ T9859] __nla_validate_parse: 23 callbacks suppressed
[  618.076354][ T9859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1355'.
[  618.385403][ T9862] FAULT_INJECTION: forcing a failure.
[  618.385403][ T9862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  618.385445][ T9862] CPU: 0 UID: 0 PID: 9862 Comm: syz.1.1358 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  618.385477][ T9862] Tainted: [L]=SOFTLOCKUP
[  618.385485][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  618.385499][ T9862] Call Trace:
[  618.385508][ T9862]  <TASK>
[  618.385517][ T9862]  dump_stack_lvl+0xe8/0x150
[  618.385555][ T9862]  should_fail_ex+0x46c/0x600
[  618.385602][ T9862]  _copy_from_user+0x2d/0xb0
[  618.385627][ T9862]  ___sys_sendmsg+0x158/0x2a0
[  618.385661][ T9862]  ? __pfx____sys_sendmsg+0x10/0x10
[  618.385730][ T9862]  ? __fget_files+0x2a/0x420
[  618.385754][ T9862]  ? __fget_files+0x3a6/0x420
[  618.385789][ T9862]  __x64_sys_sendmsg+0x1a1/0x260
[  618.385822][ T9862]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  618.385862][ T9862]  ? __pfx_ksys_write+0x10/0x10
[  618.385907][ T9862]  do_syscall_64+0xec/0xf80
[  618.385931][ T9862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.385953][ T9862]  ? trace_irq_disable+0x37/0x100
[  618.385977][ T9862]  ? clear_bhb_loop+0x60/0xb0
[  618.386005][ T9862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.386028][ T9862] RIP: 0033:0x7f689d95f749
[  618.386048][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  618.386069][ T9862] RSP: 002b:00007f689bbc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  618.386094][ T9862] RAX: ffffffffffffffda RBX: 00007f689dbb5fa0 RCX: 00007f689d95f749
[  618.386111][ T9862] RDX: 0000000000048010 RSI: 0000200000001140 RDI: 0000000000000003
[  618.386126][ T9862] RBP: 00007f689bbc6090 R08: 0000000000000000 R09: 0000000000000000
[  618.386139][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  618.386152][ T9862] R13: 00007f689dbb6038 R14: 00007f689dbb5fa0 R15: 00007ffda83c7c18
[  618.386187][ T9862]  </TASK>
[  618.789115][ T9867] tmpfs: Bad value for 'nr_inodes'
[  618.792388][ T9868] tmpfs: Bad value for 'nr_inodes'
[  622.200003][ T9879] FAULT_INJECTION: forcing a failure.
[  622.200003][ T9879] name failslab, interval 1, probability 0, space 0, times 0
[  622.200060][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.1.1362 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  622.200093][ T9879] Tainted: [L]=SOFTLOCKUP
[  622.200102][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  622.200114][ T9879] Call Trace:
[  622.200127][ T9879]  <TASK>
[  622.200136][ T9879]  dump_stack_lvl+0xe8/0x150
[  622.200167][ T9879]  should_fail_ex+0x46c/0x600
[  622.200192][ T9879]  should_failslab+0xa8/0x100
[  622.200209][ T9879]  __kmalloc_noprof+0xe0/0x7e0
[  622.200230][ T9879]  ? kernfs_fop_write_iter+0x159/0x540
[  622.200252][ T9879]  kernfs_fop_write_iter+0x159/0x540
[  622.200275][ T9879]  vfs_write+0x5d5/0xb40
[  622.200299][ T9879]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  622.200317][ T9879]  ? __pfx_vfs_write+0x10/0x10
[  622.200343][ T9879]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  622.200360][ T9879]  ? lockdep_hardirqs_on+0x7b/0x110
[  622.200378][ T9879]  ? mutex_lock_nested+0x154/0x1d0
[  622.200398][ T9879]  ? fdget_pos+0x253/0x320
[  622.200422][ T9879]  ksys_write+0x14b/0x260
[  622.200442][ T9879]  ? do_raw_spin_unlock+0x122/0x240
[  622.200462][ T9879]  ? __pfx_ksys_write+0x10/0x10
[  622.200492][ T9879]  do_syscall_64+0xec/0xf80
[  622.200508][ T9879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.200523][ T9879]  ? clear_bhb_loop+0x60/0xb0
[  622.200542][ T9879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.200557][ T9879] RIP: 0033:0x7f689d95f749
[  622.200571][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  622.200585][ T9879] RSP: 002b:00007f689bba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  622.200601][ T9879] RAX: ffffffffffffffda RBX: 00007f689dbb6090 RCX: 00007f689d95f749
[  622.200612][ T9879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  622.200621][ T9879] RBP: 00007f689bba5090 R08: 0000000000000000 R09: 0000000000000000
[  622.200631][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.200640][ T9879] R13: 00007f689dbb6128 R14: 00007f689dbb6090 R15: 00007ffda83c7c18
[  622.200665][ T9879]  </TASK>
[  623.814339][ T9892] FAULT_INJECTION: forcing a failure.
[  623.814339][ T9892] name failslab, interval 1, probability 0, space 0, times 0
[  623.814380][ T9892] CPU: 1 UID: 0 PID: 9892 Comm: syz.0.1369 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  623.814409][ T9892] Tainted: [L]=SOFTLOCKUP
[  623.814416][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  623.814429][ T9892] Call Trace:
[  623.814437][ T9892]  <TASK>
[  623.814446][ T9892]  dump_stack_lvl+0xe8/0x150
[  623.814482][ T9892]  should_fail_ex+0x46c/0x600
[  623.814520][ T9892]  should_failslab+0xa8/0x100
[  623.814543][ T9892]  __kvmalloc_node_noprof+0x181/0x940
[  623.814580][ T9892]  ? seq_read_iter+0x203/0xe20
[  623.814610][ T9892]  ? mutex_lock_nested+0x154/0x1d0
[  623.814641][ T9892]  ? seq_read_iter+0xb8/0xe20
[  623.814675][ T9892]  seq_read_iter+0x203/0xe20
[  623.814706][ T9892]  ? _parse_integer_limit+0x1ae/0x1f0
[  623.814745][ T9892]  ? __asan_memset+0x22/0x50
[  623.814781][ T9892]  seq_read+0x36c/0x480
[  623.814810][ T9892]  ? get_pid_task+0x20/0x1f0
[  623.814850][ T9892]  ? __pfx_seq_read+0x10/0x10
[  623.814881][ T9892]  ? __lock_acquire+0x6b6/0x2cf0
[  623.814928][ T9892]  ? __pfx_seq_read+0x10/0x10
[  623.814956][ T9892]  proc_reg_read+0x1f6/0x2f0
[  623.814978][ T9892]  ? __pfx_proc_reg_read+0x10/0x10
[  623.815001][ T9892]  vfs_read+0x206/0xa30
[  623.815041][ T9892]  ? __pfx_vfs_read+0x10/0x10
[  623.815075][ T9892]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  623.815098][ T9892]  ? lockdep_hardirqs_on+0x7b/0x110
[  623.815121][ T9892]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  623.815144][ T9892]  ? mutex_lock_nested+0x154/0x1d0
[  623.815173][ T9892]  ? fdget_pos+0x253/0x320
[  623.815207][ T9892]  ksys_read+0x14b/0x260
[  623.815247][ T9892]  ? __pfx_ksys_read+0x10/0x10
[  623.815291][ T9892]  do_syscall_64+0xec/0xf80
[  623.815314][ T9892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.815336][ T9892]  ? trace_irq_disable+0x37/0x100
[  623.815359][ T9892]  ? clear_bhb_loop+0x60/0xb0
[  623.815386][ T9892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.815408][ T9892] RIP: 0033:0x7f3679f7f749
[  623.815428][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  623.815447][ T9892] RSP: 002b:00007f36781de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  623.815471][ T9892] RAX: ffffffffffffffda RBX: 00007f367a1d5fa0 RCX: 00007f3679f7f749
[  623.815488][ T9892] RDX: 0000000000002020 RSI: 0000200000002640 RDI: 0000000000000003
[  623.815502][ T9892] RBP: 00007f36781de090 R08: 0000000000000000 R09: 0000000000000000
[  623.815516][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.815529][ T9892] R13: 00007f367a1d6038 R14: 00007f367a1d5fa0 R15: 00007ffe4220b178
[  623.815567][ T9892]  </TASK>
[  624.831798][ T9899] FAULT_INJECTION: forcing a failure.
[  624.831798][ T9899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.831893][ T9899] CPU: 0 UID: 0 PID: 9899 Comm: syz.2.1371 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  624.831926][ T9899] Tainted: [L]=SOFTLOCKUP
[  624.831937][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  624.831952][ T9899] Call Trace:
[  624.831958][ T9899]  <TASK>
[  624.831965][ T9899]  dump_stack_lvl+0xe8/0x150
[  624.831990][ T9899]  should_fail_ex+0x46c/0x600
[  624.832016][ T9899]  _copy_from_user+0x2d/0xb0
[  624.832031][ T9899]  ___sys_recvmsg+0x12e/0x510
[  624.832052][ T9899]  ? rcu_is_watching+0x15/0xb0
[  624.832070][ T9899]  ? __pfx____sys_recvmsg+0x10/0x10
[  624.832094][ T9899]  ? __fget_files+0x2a/0x420
[  624.832123][ T9899]  ? __fget_files+0x3a6/0x420
[  624.832146][ T9899]  __x64_sys_recvmsg+0x19e/0x260
[  624.832168][ T9899]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  624.832208][ T9899]  do_syscall_64+0xec/0xf80
[  624.832224][ T9899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.832239][ T9899]  ? clear_bhb_loop+0x60/0xb0
[  624.832258][ T9899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.832272][ T9899] RIP: 0033:0x7fb063bdf749
[  624.832287][ T9899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.832299][ T9899] RSP: 002b:00007fb061e1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  624.832316][ T9899] RAX: ffffffffffffffda RBX: 00007fb063e36090 RCX: 00007fb063bdf749
[  624.832327][ T9899] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000007
[  624.832338][ T9899] RBP: 00007fb061e1d090 R08: 0000000000000000 R09: 0000000000000000
[  624.832347][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.832357][ T9899] R13: 00007fb063e36128 R14: 00007fb063e36090 R15: 00007ffcac90c828
[  624.832381][ T9899]  </TASK>
[  626.031895][ T9904] FAULT_INJECTION: forcing a failure.
[  626.031895][ T9904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.031937][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.0.1374 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  626.031968][ T9904] Tainted: [L]=SOFTLOCKUP
[  626.031975][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  626.031995][ T9904] Call Trace:
[  626.032003][ T9904]  <TASK>
[  626.032013][ T9904]  dump_stack_lvl+0xe8/0x150
[  626.032050][ T9904]  should_fail_ex+0x46c/0x600
[  626.032087][ T9904]  _copy_to_user+0x31/0xb0
[  626.032112][ T9904]  simple_read_from_buffer+0xe1/0x170
[  626.032140][ T9904]  proc_fail_nth_read+0x1b6/0x220
[  626.032176][ T9904]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  626.032212][ T9904]  ? rw_verify_area+0x2ac/0x4e0
[  626.032240][ T9904]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  626.032273][ T9904]  vfs_read+0x206/0xa30
[  626.032311][ T9904]  ? __pfx_vfs_read+0x10/0x10
[  626.032337][ T9904]  ? lockdep_hardirqs_on+0x7b/0x110
[  626.032364][ T9904]  ? do_sys_openat2+0x15a/0x200
[  626.032389][ T9904]  ? kmem_cache_free+0x18f/0x8d0
[  626.032420][ T9904]  ? do_sys_openat2+0x15a/0x200
[  626.032460][ T9904]  ksys_read+0x14b/0x260
[  626.032494][ T9904]  ? __pfx_ksys_read+0x10/0x10
[  626.032537][ T9904]  do_syscall_64+0xec/0xf80
[  626.032559][ T9904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.032580][ T9904]  ? trace_irq_disable+0x37/0x100
[  626.032603][ T9904]  ? clear_bhb_loop+0x60/0xb0
[  626.032630][ T9904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.032652][ T9904] RIP: 0033:0x7f3679f7e15c
[  626.032671][ T9904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  626.032691][ T9904] RSP: 002b:00007f36781de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  626.032714][ T9904] RAX: ffffffffffffffda RBX: 00007f367a1d5fa0 RCX: 00007f3679f7e15c
[  626.032731][ T9904] RDX: 000000000000000f RSI: 00007f36781de0a0 RDI: 0000000000000004
[  626.032746][ T9904] RBP: 00007f36781de090 R08: 0000000000000000 R09: 0000000000000000
[  626.032759][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.032773][ T9904] R13: 00007f367a1d6038 R14: 00007f367a1d5fa0 R15: 00007ffe4220b178
[  626.032808][ T9904]  </TASK>
[  626.307177][ T5901] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  626.439858][ T5901] usb 5-1: device descriptor read/64, error -71
[  626.673611][ T5901] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  626.803638][ T5901] usb 5-1: device descriptor read/64, error -71
[  626.914275][ T5901] usb usb5-port1: attempt power cycle
[  627.274914][ T5901] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  627.343674][ T5819] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  627.594072][ T5901] usb 5-1: device not accepting address 31, error -71
[  627.695982][ T5819] usb 2-1: config 1 has an invalid interface number: 5 but max is 2
[  627.696014][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.696035][ T5819] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  627.696060][ T5819] usb 2-1: config 1 has no interface number 1
[  627.697636][ T5819] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  627.697665][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  627.697688][ T5819] usb 2-1: SerialNumber: syz
[  627.789520][ T6780] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  627.922550][ T5819] usb 2-1: 0:2 : does not exist
[  627.922644][ T5819] usb 2-1: unit 5 not found!
[  627.966338][ T6780] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  627.966369][ T6780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  627.967688][ T6780] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  627.967717][ T6780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  627.967739][ T6780] usb 4-1: SerialNumber: syz
[  628.019280][ T5819] usb 2-1: USB disconnect, device number 33
[  628.185213][ T6340] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  628.248109][ T7313] udevd[7313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  628.268464][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.269742][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.326281][ T6780] usb 4-1: 0:2 : does not exist
[  628.339343][ T6780] usb 4-1: 0:0: failed to get current value for ch 0 (-22)
[  628.341474][ T6340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.341530][ T6340] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  628.341551][ T6340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.373125][ T6340] usb 3-1: config 0 descriptor??
[  628.432844][ T6780] usb 4-1: USB disconnect, device number 34
[  628.450088][ T6340] pwc: Askey VC010 type 2 USB webcam detected.
[  628.701323][ T7313] udevd[7313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  628.874842][ T6340] pwc: recv_control_msg error -32 req 02 val 2b00
[  628.877854][ T6340] pwc: recv_control_msg error -32 req 02 val 2700
[  628.879939][ T6340] pwc: recv_control_msg error -32 req 02 val 2c00
[  628.881975][ T6340] pwc: recv_control_msg error -32 req 04 val 1000
[  629.053418][ T6340] pwc: recv_control_msg error -32 req 04 val 1300
[  629.054243][ T6340] pwc: recv_control_msg error -32 req 04 val 1400
[  629.332984][ T6340] pwc: recv_control_msg error -71 req 02 val 2100
[  629.334979][ T6340] pwc: recv_control_msg error -71 req 04 val 1500
[  629.335588][ T6340] pwc: recv_control_msg error -71 req 02 val 2500
[  629.336069][ T6340] pwc: recv_control_msg error -71 req 02 val 2400
[  629.336555][ T6340] pwc: recv_control_msg error -71 req 02 val 2600
[  629.337020][ T6340] pwc: recv_control_msg error -71 req 02 val 2900
[  629.344959][ T6340] pwc: recv_control_msg error -71 req 02 val 2800
[  629.345704][ T6340] pwc: recv_control_msg error -71 req 04 val 1100
[  629.346195][ T6340] pwc: recv_control_msg error -71 req 04 val 1200
[  630.032627][   T37] kauditd_printk_skb: 6 callbacks suppressed
[  630.032647][   T37] audit: type=1326 audit(1768182796.824:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.063291][   T37] audit: type=1326 audit(1768182796.824:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.090885][   T37] audit: type=1326 audit(1768182796.884:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.092166][   T37] audit: type=1326 audit(1768182796.884:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.093011][   T37] audit: type=1326 audit(1768182796.884:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.159499][   T37] audit: type=1326 audit(1768182796.884:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.160310][   T37] audit: type=1326 audit(1768182796.954:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  630.364062][ T6340] pwc: Registered as video103.
[  630.368733][ T6340] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  630.429350][ T6340] usb 3-1: USB disconnect, device number 35
[  630.934321][ T6046] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  631.733594][ T6046] usb 4-1: Using ep0 maxpacket: 16
[  631.751187][ T6046] usb 4-1: config 5 has an invalid interface number: 37 but max is 0
[  631.751217][ T6046] usb 4-1: config 5 has no interface number 0
[  631.751255][ T6046] usb 4-1: config 5 interface 37 has no altsetting 0
[  631.776975][ T6046] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  631.777008][ T6046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.777029][ T6046] usb 4-1: Product: syz
[  631.777045][ T6046] usb 4-1: Manufacturer: syz
[  631.777059][ T6046] usb 4-1: SerialNumber: syz
[  632.013700][ T6340] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  632.086923][ T6046] go7007 4-1:5.37: probe with driver go7007 failed with error -12
[  632.108672][ T6046] usb 4-1: USB disconnect, device number 35
[  632.167642][ T6340] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  632.167673][ T6340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  632.169186][ T6340] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  632.169215][ T6340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  632.169236][ T6340] usb 3-1: SerialNumber: syz
[  632.308725][ T9988] FAULT_INJECTION: forcing a failure.
[  632.308725][ T9988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.308774][ T9988] CPU: 1 UID: 0 PID: 9988 Comm: syz.4.1402 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  632.308808][ T9988] Tainted: [L]=SOFTLOCKUP
[  632.308816][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  632.308832][ T9988] Call Trace:
[  632.308841][ T9988]  <TASK>
[  632.308850][ T9988]  dump_stack_lvl+0xe8/0x150
[  632.308887][ T9988]  should_fail_ex+0x46c/0x600
[  632.308922][ T9988]  _copy_from_user+0x2d/0xb0
[  632.308950][ T9988]  keyctl_pkey_params_get_2+0x107/0x480
[  632.308984][ T9988]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  632.309033][ T9988]  keyctl_pkey_e_d_s+0xb9/0x320
[  632.309062][ T9988]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  632.309095][ T9988]  ? do_raw_spin_lock+0x121/0x290
[  632.309130][ T9988]  __se_sys_keyctl+0x469/0x910
[  632.309167][ T9988]  ? __pfx___se_sys_keyctl+0x10/0x10
[  632.309195][ T9988]  ? lockdep_hardirqs_on+0x7b/0x110
[  632.309219][ T9988]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  632.309243][ T9988]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  632.309274][ T9988]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  632.309316][ T9988]  ? fput+0xa0/0xd0
[  632.309352][ T9988]  ? ksys_write+0x230/0x260
[  632.309386][ T9988]  ? __pfx_ksys_write+0x10/0x10
[  632.309424][ T9988]  ? __x64_sys_keyctl+0x20/0xc0
[  632.309460][ T9988]  do_syscall_64+0xec/0xf80
[  632.309485][ T9988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.309507][ T9988]  ? trace_irq_disable+0x37/0x100
[  632.309531][ T9988]  ? clear_bhb_loop+0x60/0xb0
[  632.309558][ T9988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.309581][ T9988] RIP: 0033:0x7ff4eda7f749
[  632.309602][ T9988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  632.309630][ T9988] RSP: 002b:00007ff4ebcde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  632.309654][ T9988] RAX: ffffffffffffffda RBX: 00007ff4edcd5fa0 RCX: 00007ff4eda7f749
[  632.309681][ T9988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000019
[  632.309706][ T9988] RBP: 00007ff4ebcde090 R08: 0000000000000000 R09: 0000000000000000
[  632.309756][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.309770][ T9988] R13: 00007ff4edcd6038 R14: 00007ff4edcd5fa0 R15: 00007ffc2492abc8
[  632.309895][ T9988]  </TASK>
[  632.612559][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.613131][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.707674][ T6340] usb 3-1: 0:2 : does not exist
[  632.740234][ T6340] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  632.931926][ T6340] usb 3-1: USB disconnect, device number 36
[  633.329762][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  633.515680][T10001] overlayfs: failed to resolve './file0': -2
[  636.937347][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  636.937412][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  637.887416][T10019] FAULT_INJECTION: forcing a failure.
[  637.887416][T10019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.887483][T10019] CPU: 1 UID: 0 PID: 10019 Comm: syz.2.1411 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  637.887523][T10019] Tainted: [L]=SOFTLOCKUP
[  637.887531][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  637.887545][T10019] Call Trace:
[  637.887554][T10019]  <TASK>
[  637.887564][T10019]  dump_stack_lvl+0xe8/0x150
[  637.887601][T10019]  should_fail_ex+0x46c/0x600
[  637.887636][T10019]  _copy_from_user+0x2d/0xb0
[  637.887660][T10019]  ___sys_sendmsg+0x158/0x2a0
[  637.887694][T10019]  ? __pfx____sys_sendmsg+0x10/0x10
[  637.887762][T10019]  ? __fget_files+0x2a/0x420
[  637.887786][T10019]  ? __fget_files+0x3a6/0x420
[  637.887820][T10019]  __sys_sendmmsg+0x22d/0x430
[  637.887856][T10019]  ? __pfx___sys_sendmmsg+0x10/0x10
[  637.887897][T10019]  ? irqentry_exit+0x5e8/0x670
[  637.887952][T10019]  __x64_sys_sendmmsg+0xa0/0xc0
[  637.887984][T10019]  do_syscall_64+0xec/0xf80
[  637.888006][T10019]  ? rcu_is_watching+0x15/0xb0
[  637.888025][T10019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.888047][T10019]  ? clear_bhb_loop+0x60/0xb0
[  637.888075][T10019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.888097][T10019] RIP: 0033:0x7fb063bdf749
[  637.888116][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.888135][T10019] RSP: 002b:00007fb061dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  637.888158][T10019] RAX: ffffffffffffffda RBX: 00007fb063e36180 RCX: 00007fb063bdf749
[  637.888175][T10019] RDX: 0000000000000314 RSI: 0000200000000480 RDI: 0000000000000006
[  637.888189][T10019] RBP: 00007fb061dfc090 R08: 0000000000000000 R09: 0000000000000000
[  637.888203][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.888216][T10019] R13: 00007fb063e36218 R14: 00007fb063e36180 R15: 00007ffcac90c828
[  637.888252][T10019]  </TASK>
[  639.277002][T10029] netlink: 'syz.3.1412': attribute type 83 has an invalid length.
[  639.304146][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'.
[  640.892387][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  640.911854][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  641.009858][ T9780] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  641.837339][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  641.919094][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  641.920707][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  642.136257][ T9780] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  642.136311][ T9780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  642.177711][ T9780] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  642.177745][ T9780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  642.177765][ T9780] usb 3-1: SerialNumber: syz
[  642.577820][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.578428][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.905354][ T9780] usb 3-1: 0:2 : does not exist
[  642.965257][ T9780] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  643.135053][ T9780] usb 3-1: USB disconnect, device number 37
[  643.853032][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  643.964938][ T5118] Bluetooth: hci5: command tx timeout
[  644.447280][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  646.440740][ T5118] Bluetooth: hci5: command tx timeout
[  646.927631][ T9780] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  647.073567][ T9780] usb 3-1: Using ep0 maxpacket: 32
[  647.077550][ T9780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.077591][ T9780] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  647.077620][ T9780] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  647.079268][ T9780] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  647.079297][ T9780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  647.079321][ T9780] usb 3-1: SerialNumber: syz
[  647.185680][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  647.189090][ T9780] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  647.435689][ T9780] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  647.454340][ T9780] usb 3-1: USB disconnect, device number 38
[  647.797691][ T1178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.701560][ T5118] Bluetooth: hci5: command tx timeout
[  650.970130][ T1178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.745607][ T5118] Bluetooth: hci5: command tx timeout
[  651.940884][ T1178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.690582][T10040] chnl_net:caif_netlink_parms(): no params data found
[  655.098526][ T1178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.125949][T10040] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.126082][T10040] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.126328][T10040] bridge_slave_0: entered allmulticast mode
[  657.165232][T10040] bridge_slave_0: entered promiscuous mode
[  657.193304][T10126] FAULT_INJECTION: forcing a failure.
[  657.193304][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.193365][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.3.1437 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  657.193398][T10126] Tainted: [L]=SOFTLOCKUP
[  657.193405][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  657.193424][T10126] Call Trace:
[  657.193432][T10126]  <TASK>
[  657.193440][T10126]  dump_stack_lvl+0xe8/0x150
[  657.193475][T10126]  should_fail_ex+0x46c/0x600
[  657.193510][T10126]  _copy_from_user+0x2d/0xb0
[  657.193533][T10126]  ___sys_recvmsg+0x12e/0x510
[  657.193560][T10126]  ? get_pid_task+0x20/0x1f0
[  657.193588][T10126]  ? get_pid_task+0x20/0x1f0
[  657.193620][T10126]  ? __pfx____sys_recvmsg+0x10/0x10
[  657.193655][T10126]  ? __fget_files+0x2a/0x420
[  657.193696][T10126]  ? __fget_files+0x3a6/0x420
[  657.193731][T10126]  __x64_sys_recvmsg+0x19e/0x260
[  657.193759][T10126]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  657.193804][T10126]  ? __pfx_ksys_write+0x10/0x10
[  657.193826][T10126]  ? trace_csd_function_exit+0x7f/0x1c0
[  657.193853][T10126]  do_syscall_64+0xec/0xf80
[  657.193869][T10126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.193885][T10126]  ? clear_bhb_loop+0x60/0xb0
[  657.193903][T10126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.193919][T10126] RIP: 0033:0x7f685ad6f749
[  657.193932][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.193946][T10126] RSP: 002b:00007f6858fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  657.193964][T10126] RAX: ffffffffffffffda RBX: 00007f685afc6090 RCX: 00007f685ad6f749
[  657.193975][T10126] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006
[  657.193986][T10126] RBP: 00007f6858fad090 R08: 0000000000000000 R09: 0000000000000000
[  657.193995][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.194005][T10126] R13: 00007f685afc6128 R14: 00007f685afc6090 R15: 00007ffc0bbfdd38
[  657.194029][T10126]  </TASK>
[  657.285325][T10127] overlayfs: failed to resolve './file0': -2
[  657.480510][T10040] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.483339][T10040] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.499594][T10040] bridge_slave_1: entered allmulticast mode
[  657.519331][T10040] bridge_slave_1: entered promiscuous mode
[  658.621471][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.718653][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.863733][T10137] FAULT_INJECTION: forcing a failure.
[  658.863733][T10137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.863775][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.1.1440 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  658.863806][T10137] Tainted: [L]=SOFTLOCKUP
[  658.863815][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  658.863828][T10137] Call Trace:
[  658.863837][T10137]  <TASK>
[  658.863847][T10137]  dump_stack_lvl+0xe8/0x150
[  658.863883][T10137]  should_fail_ex+0x46c/0x600
[  658.863921][T10137]  _copy_to_user+0x31/0xb0
[  658.863946][T10137]  simple_read_from_buffer+0xe1/0x170
[  658.863976][T10137]  proc_fail_nth_read+0x1b6/0x220
[  658.864012][T10137]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  658.864048][T10137]  ? rw_verify_area+0x2ac/0x4e0
[  658.864078][T10137]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  658.864113][T10137]  vfs_read+0x206/0xa30
[  658.864152][T10137]  ? __pfx_vfs_read+0x10/0x10
[  658.864184][T10137]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  658.864208][T10137]  ? lockdep_hardirqs_on+0x7b/0x110
[  658.864230][T10137]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  658.864254][T10137]  ? mutex_lock_nested+0x154/0x1d0
[  658.864283][T10137]  ? fdget_pos+0x253/0x320
[  658.864316][T10137]  ksys_read+0x14b/0x260
[  658.864349][T10137]  ? __pfx_ksys_read+0x10/0x10
[  658.864393][T10137]  do_syscall_64+0xec/0xf80
[  658.864416][T10137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.864439][T10137]  ? trace_irq_disable+0x37/0x100
[  658.864463][T10137]  ? clear_bhb_loop+0x60/0xb0
[  658.864490][T10137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.864512][T10137] RIP: 0033:0x7f689d95e15c
[  658.864532][T10137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  658.864552][T10137] RSP: 002b:00007f689bb84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  658.864589][T10137] RAX: ffffffffffffffda RBX: 00007f689dbb6180 RCX: 00007f689d95e15c
[  658.864605][T10137] RDX: 000000000000000f RSI: 00007f689bb840a0 RDI: 0000000000000006
[  658.864619][T10137] RBP: 00007f689bb84090 R08: 0000000000000000 R09: 0000000000000000
[  658.864632][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.864645][T10137] R13: 00007f689dbb6218 R14: 00007f689dbb6180 R15: 00007ffda83c7c18
[  658.864681][T10137]  </TASK>
[  659.477464][   T37] audit: type=1326 audit(1768182826.274:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.477760][   T37] audit: type=1326 audit(1768182826.274:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.481377][   T37] audit: type=1326 audit(1768182826.274:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.481707][   T37] audit: type=1326 audit(1768182826.274:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.482093][   T37] audit: type=1326 audit(1768182826.274:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.482935][   T37] audit: type=1326 audit(1768182826.274:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.483409][   T37] audit: type=1326 audit(1768182826.274:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.532576][ T1178] bridge_slave_1: left allmulticast mode
[  659.533189][ T1178] bridge_slave_1: left promiscuous mode
[  659.578489][   T37] audit: type=1326 audit(1768182826.374:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.578619][   T37] audit: type=1326 audit(1768182826.374:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.584558][   T37] audit: type=1326 audit(1768182826.374:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10140 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f685ad6f749 code=0x7ffc0000
[  659.596533][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.896521][ T1178] bridge_slave_0: left allmulticast mode
[  659.896548][ T1178] bridge_slave_0: left promiscuous mode
[  659.896748][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.294056][T10163] overlayfs: failed to resolve './file0': -2
[  666.574386][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.659746][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.696378][ T1178] bond0 (unregistering): Released all slaves
[  666.758648][T10040] team0: Port device team_slave_0 added
[  666.851624][T10040] team0: Port device team_slave_1 added
[  667.367316][   T37] kauditd_printk_skb: 7 callbacks suppressed
[  667.367337][   T37] audit: type=1326 audit(1768182834.164:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.367758][   T37] audit: type=1326 audit(1768182834.164:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.368087][   T37] audit: type=1326 audit(1768182834.164:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.368462][   T37] audit: type=1326 audit(1768182834.164:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.368841][   T37] audit: type=1326 audit(1768182834.164:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.383623][   T37] audit: type=1326 audit(1768182834.164:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.384915][   T37] audit: type=1326 audit(1768182834.184:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.389153][   T37] audit: type=1326 audit(1768182834.184:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.390232][   T37] audit: type=1326 audit(1768182834.184:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.394174][   T37] audit: type=1326 audit(1768182834.184:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb063bdf749 code=0x7ffc0000
[  667.570959][T10195] tmpfs: Bad value for 'mpol'
[  667.878281][T10200] overlayfs: failed to resolve './file0': -2
[  669.750543][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.750561][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.750592][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.754471][ T5819] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  669.809537][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.809551][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.809572][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.923699][ T5819] usb 5-1: Using ep0 maxpacket: 8
[  669.926779][ T5819] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  669.926858][ T5819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  669.926882][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  669.926908][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  669.926934][ T5819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.926978][ T5819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  669.927002][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.251529][ T5819] usb 5-1: GET_CAPABILITIES returned 0
[  670.251584][ T5819] usbtmc 5-1:16.0: can't read capabilities
[  670.431309][T10237] binder: 10236:10237 ioctl c0306201 200000000240 returned -11
[  671.857376][ T9780] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  672.021458][ T9780] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  672.021491][ T9780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  672.045918][ T9780] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  672.045941][ T9780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  672.045956][ T9780] usb 2-1: SerialNumber: syz
[  672.160555][T10261] overlayfs: failed to resolve './file0': -2
[  672.370061][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.398000][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.470092][ T9780] usb 2-1: 0:2 : does not exist
[  672.487909][ T9780] usb 2-1: 0:0: failed to get current value for ch 0 (-22)
[  672.581680][ T5819] usb 5-1: USB disconnect, device number 33
[  672.612928][ T9780] usb 2-1: USB disconnect, device number 34
[  672.647413][T10266] FAULT_INJECTION: forcing a failure.
[  672.647413][T10266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.647445][T10266] CPU: 0 UID: 0 PID: 10266 Comm: syz.3.1475 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  672.647468][T10266] Tainted: [L]=SOFTLOCKUP
[  672.647473][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  672.647483][T10266] Call Trace:
[  672.647489][T10266]  <TASK>
[  672.647495][T10266]  dump_stack_lvl+0xe8/0x150
[  672.647522][T10266]  should_fail_ex+0x46c/0x600
[  672.647547][T10266]  _copy_from_user+0x2d/0xb0
[  672.647564][T10266]  ___sys_sendmsg+0x158/0x2a0
[  672.647588][T10266]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.647635][T10266]  ? __fget_files+0x2a/0x420
[  672.647651][T10266]  ? __fget_files+0x3a6/0x420
[  672.647675][T10266]  __x64_sys_sendmsg+0x1a1/0x260
[  672.647698][T10266]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  672.647725][T10266]  ? __pfx_ksys_write+0x10/0x10
[  672.647756][T10266]  do_syscall_64+0xec/0xf80
[  672.647772][T10266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.647787][T10266]  ? trace_irq_disable+0x37/0x100
[  672.647804][T10266]  ? clear_bhb_loop+0x60/0xb0
[  672.647822][T10266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.647837][T10266] RIP: 0033:0x7f685ad6f749
[  672.647851][T10266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.647865][T10266] RSP: 002b:00007f6858fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.647883][T10266] RAX: ffffffffffffffda RBX: 00007f685afc5fa0 RCX: 00007f685ad6f749
[  672.647894][T10266] RDX: 0000000004048084 RSI: 0000200000000080 RDI: 0000000000000003
[  672.647904][T10266] RBP: 00007f6858fce090 R08: 0000000000000000 R09: 0000000000000000
[  672.647914][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.647936][T10266] R13: 00007f685afc6038 R14: 00007f685afc5fa0 R15: 00007ffc0bbfdd38
[  672.647961][T10266]  </TASK>
[  672.937275][T10040] hsr_slave_0: entered promiscuous mode
[  672.955066][T10040] hsr_slave_1: entered promiscuous mode
[  672.958098][T10040] debugfs: 'hsr0' already exists in 'hsr'
[  672.958134][T10040] Cannot create hsr debugfs directory
[  673.478960][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  674.314088][T10279] ALSA: mixer_oss: invalid OSS volume 'LIDE'
[  674.318920][T10279] syz.2.1478 uses obsolete (PF_INET,SOCK_PACKET)
[  674.731961][ T1178] hsr_slave_0: left promiscuous mode
[  674.744776][ T1178] hsr_slave_1: left promiscuous mode
[  674.750489][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  674.750625][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.832986][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  674.833017][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.947151][ T5810] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  675.947276][ T5810] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  676.100329][ T1178] veth1_macvtap: left promiscuous mode
[  676.100636][ T1178] veth0_macvtap: left promiscuous mode
[  676.101070][ T1178] veth1_vlan: left promiscuous mode
[  676.101487][ T1178] veth0_vlan: left promiscuous mode
[  676.189571][ T5810] usb 1-1: USB disconnect, device number 13
[  676.653618][ T5810] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  676.803630][ T5810] usb 2-1: Using ep0 maxpacket: 16
[  676.827463][ T5810] usb 2-1: config 5 has an invalid interface number: 37 but max is 0
[  676.827493][ T5810] usb 2-1: config 5 has no interface number 0
[  676.827526][ T5810] usb 2-1: config 5 interface 37 has no altsetting 0
[  676.830583][ T5810] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  676.830617][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.830632][ T5810] usb 2-1: Product: syz
[  676.830643][ T5810] usb 2-1: Manufacturer: syz
[  676.830653][ T5810] usb 2-1: SerialNumber: syz
[  677.025480][ T5884] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  677.178192][ T5810] go7007 2-1:5.37: probe with driver go7007 failed with error -12
[  677.195950][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  677.196005][ T5884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  677.196031][ T5884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  677.198138][ T5810] usb 2-1: USB disconnect, device number 35
[  677.198712][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  677.198741][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.198763][ T5884] usb 5-1: Product: syz
[  677.198779][ T5884] usb 5-1: Manufacturer: syz
[  677.198794][ T5884] usb 5-1: SerialNumber: syz
[  677.319530][T10310] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  677.542641][T10309] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  677.647560][ T5884] cdc_ncm 5-1:1.0: bind() failure
[  677.657281][ T5884] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  677.662598][ T5884] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  677.685035][ T5884] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  677.712306][ T5884] usb 5-1: USB disconnect, device number 34
[  682.889756][ T1178] team0 (unregistering): Port device team_slave_1 removed
[  683.224916][ T1178] team0 (unregistering): Port device team_slave_0 removed
[  685.833203][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'.
[  686.693588][ T5810] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  686.864088][ T5810] usb 4-1: Using ep0 maxpacket: 32
[  686.867126][ T5810] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  686.867160][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.964271][ T5810] usb 4-1: config 0 descriptor??
[  687.181054][ T5810] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  687.197521][ T5810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  687.197575][ T5810] dib0700: firmware download failed at 7 with -22
[  687.274686][ T6340] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  687.281677][ T5810] usb 4-1: USB disconnect, device number 36
[  687.426280][ T6340] usb 3-1: device descriptor read/64, error -71
[  687.494918][ T5928] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  687.654427][ T5928] usb 2-1: Using ep0 maxpacket: 32
[  687.657526][ T5810] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  687.660521][ T5928] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  687.660554][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.676863][ T6340] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  687.733023][ T5928] usb 2-1: config 0 descriptor??
[  687.813946][ T5810] usb 5-1: Using ep0 maxpacket: 32
[  687.815620][ T6340] usb 3-1: device descriptor read/64, error -71
[  687.838916][ T5810] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  687.838950][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.864959][ T5810] usb 5-1: config 0 descriptor??
[  687.930109][ T6340] usb usb3-port1: attempt power cycle
[  687.982698][ T5928] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  687.988877][ T5928] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  687.988951][ T5928] dib0700: firmware download failed at 7 with -22
[  688.036219][ T5928] usb 2-1: USB disconnect, device number 36
[  688.240139][ T5810] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  688.242605][ T5810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  688.242661][ T5810] dib0700: firmware download failed at 7 with -22
[  688.248843][ T5810] usb 5-1: USB disconnect, device number 35
[  688.678834][ T6340] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  688.869220][ T6340] usb 3-1: device descriptor read/8, error -71
[  689.273545][ T6340] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  689.296327][ T6340] usb 3-1: device descriptor read/8, error -71
[  689.564929][ T6340] usb usb3-port1: unable to enumerate USB device
[  691.433692][ T9780] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  691.956702][ T9780] usb 5-1: Using ep0 maxpacket: 32
[  692.056065][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.056102][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.056153][ T9780] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  692.056180][ T9780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.122374][ T9780] usb 5-1: config 0 descriptor??
[  692.174693][ T9780] hub 5-1:0.0: USB hub found
[  692.352033][ T9780] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  693.280462][ T9780] usbhid 5-1:0.0: can't add hid device: -71
[  693.280603][ T9780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  693.385696][ T9780] usb 5-1: USB disconnect, device number 36
[  693.887336][T10040] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  694.939545][T10040] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  695.302204][ T5928] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  695.512181][T10040] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  695.515014][ T5928] usb 4-1: Using ep0 maxpacket: 32
[  695.519626][ T5928] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  695.519656][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.567135][ T5928] usb 4-1: config 0 descriptor??
[  695.904408][ T5928] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  695.906544][ T5928] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  695.906594][ T5928] dib0700: firmware download failed at 7 with -22
[  696.831496][ T5810] usb 4-1: USB disconnect, device number 37
[  696.849412][T10040] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  697.123559][ T9780] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  697.386650][T10040] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.458237][T10040] 8021q: adding VLAN 0 to HW filter on device team0
[  697.479078][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.479245][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.543492][ T9780] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  697.543523][ T9780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.543544][ T9780] usb 5-1: config 0 has no interface number 0
[  697.543593][ T9780] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  697.543623][ T9780] usb 5-1: config 0 interface 41 has no altsetting 0
[  697.549046][ T9780] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  697.549078][ T9780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.549100][ T9780] usb 5-1: Product: syz
[  697.549116][ T9780] usb 5-1: Manufacturer: syz
[  697.549131][ T9780] usb 5-1: SerialNumber: syz
[  697.625396][T10485] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  697.721021][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.722889][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.472752][ T9780] usb 5-1: config 0 descriptor??
[  698.497086][ T9780] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  699.643314][T10500] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  700.115889][T10513] FAULT_INJECTION: forcing a failure.
[  700.115889][T10513] name failslab, interval 1, probability 0, space 0, times 0
[  700.115931][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.3.1529 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.115960][T10513] Tainted: [L]=SOFTLOCKUP
[  700.115968][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  700.115982][T10513] Call Trace:
[  700.115990][T10513]  <TASK>
[  700.115999][T10513]  dump_stack_lvl+0xe8/0x150
[  700.116036][T10513]  should_fail_ex+0x46c/0x600
[  700.116071][T10513]  should_failslab+0xa8/0x100
[  700.116097][T10513]  __kmalloc_node_track_caller_noprof+0xe2/0x810
[  700.116134][T10513]  ? key_alloc+0x308/0xfe0
[  700.116154][T10513]  ? key_alloc+0x34c/0xfe0
[  700.116173][T10513]  ? kmem_cache_alloc_noprof+0x1e4/0x6c0
[  700.116204][T10513]  kmemdup_noprof+0x2b/0x70
[  700.116231][T10513]  key_alloc+0x34c/0xfe0
[  700.116263][T10513]  keyring_alloc+0x45/0xb0
[  700.116292][T10513]  lookup_user_key+0x3e3/0x1090
[  700.116325][T10513]  ? __pfx_lookup_user_key+0x10/0x10
[  700.116350][T10513]  ? __might_fault+0xb0/0x130
[  700.116385][T10513]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  700.116426][T10513]  __se_sys_add_key+0x2fa/0x410
[  700.116460][T10513]  ? __pfx___se_sys_add_key+0x10/0x10
[  700.116499][T10513]  ? __x64_sys_add_key+0x20/0xc0
[  700.116531][T10513]  do_syscall_64+0xec/0xf80
[  700.116556][T10513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.116578][T10513]  ? trace_irq_disable+0x37/0x100
[  700.116602][T10513]  ? clear_bhb_loop+0x60/0xb0
[  700.116629][T10513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.116651][T10513] RIP: 0033:0x7f685ad6f749
[  700.116671][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.116691][T10513] RSP: 002b:00007f6858fce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  700.116714][T10513] RAX: ffffffffffffffda RBX: 00007f685afc5fa0 RCX: 00007f685ad6f749
[  700.116730][T10513] RDX: 0000200000001740 RSI: 0000000000000000 RDI: 0000200000001700
[  700.116744][T10513] RBP: 00007f6858fce090 R08: ffffffffffffffff R09: 0000000000000000
[  700.116759][T10513] R10: 00000000000001e7 R11: 0000000000000246 R12: 0000000000000001
[  700.116773][T10513] R13: 00007f685afc6038 R14: 00007f685afc5fa0 R15: 00007ffc0bbfdd38
[  700.116808][T10513]  </TASK>
[  702.855218][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  702.855294][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  703.419861][ T6015] usb 5-1: USB disconnect, device number 37
[  703.913768][ T6015] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  704.175186][ T6015] usb 2-1: Using ep0 maxpacket: 32
[  704.657106][T10545] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  704.994649][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  705.120084][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  705.134557][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  705.136758][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  705.138051][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  705.240246][ T6015] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  705.240279][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.262246][ T6015] usb 2-1: config 0 descriptor??
[  705.552087][ T6015] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  705.555714][ T6015] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  705.555768][ T6015] dib0700: firmware download failed at 7 with -22
[  705.787494][ T6339] usb 2-1: USB disconnect, device number 37
[  706.191142][T10561] FAULT_INJECTION: forcing a failure.
[  706.191142][T10561] name failslab, interval 1, probability 0, space 0, times 0
[  706.191183][T10561] CPU: 1 UID: 0 PID: 10561 Comm: syz.2.1539 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  706.191214][T10561] Tainted: [L]=SOFTLOCKUP
[  706.191222][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  706.191236][T10561] Call Trace:
[  706.191245][T10561]  <TASK>
[  706.191255][T10561]  dump_stack_lvl+0xe8/0x150
[  706.191292][T10561]  should_fail_ex+0x46c/0x600
[  706.191328][T10561]  should_failslab+0xa8/0x100
[  706.191353][T10561]  __kmalloc_noprof+0xe0/0x7e0
[  706.191386][T10561]  ? bpf_test_init+0x9f/0x150
[  706.191422][T10561]  bpf_test_init+0x9f/0x150
[  706.191455][T10561]  bpf_prog_test_run_xdp+0x503/0x10e0
[  706.191511][T10561]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  706.191548][T10561]  ? __fget_files+0x2a/0x420
[  706.191577][T10561]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  706.191609][T10561]  bpf_prog_test_run+0x2cd/0x340
[  706.191641][T10561]  __sys_bpf+0x562/0x860
[  706.191669][T10561]  ? __pfx___sys_bpf+0x10/0x10
[  706.191691][T10561]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  706.191740][T10561]  ? ksys_write+0x230/0x260
[  706.191774][T10561]  ? __pfx_ksys_write+0x10/0x10
[  706.191813][T10561]  __x64_sys_bpf+0x7c/0x90
[  706.191837][T10561]  do_syscall_64+0xec/0xf80
[  706.191860][T10561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.191882][T10561]  ? trace_irq_disable+0x37/0x100
[  706.191905][T10561]  ? clear_bhb_loop+0x60/0xb0
[  706.191932][T10561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.191954][T10561] RIP: 0033:0x7fb063bdf749
[  706.191974][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.191992][T10561] RSP: 002b:00007fb061e3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  706.192015][T10561] RAX: ffffffffffffffda RBX: 00007fb063e35fa0 RCX: 00007fb063bdf749
[  706.192032][T10561] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  706.192047][T10561] RBP: 00007fb061e3e090 R08: 0000000000000000 R09: 0000000000000000
[  706.192061][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.192075][T10561] R13: 00007fb063e36038 R14: 00007fb063e35fa0 R15: 00007ffcac90c828
[  706.192111][T10561]  </TASK>
[  707.177795][T10043] Bluetooth: hci2: command tx timeout
[  707.331859][ T6780] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  707.723606][ T6780] usb 4-1: Using ep0 maxpacket: 8
[  707.799144][ T6780] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  707.799175][ T6780] usb 4-1: config 179 has no interface number 0
[  707.799224][ T6780] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  707.799253][ T6780] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  707.799284][ T6780] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  707.799314][ T6780] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  707.799343][ T6780] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  707.799373][ T6780] usb 4-1: config 179 interface 65 has no altsetting 0
[  707.799411][ T6780] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  707.799436][ T6780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.936709][T10569] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1540'.
[  707.951451][ T6780] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13
[  708.071358][ T5154] input input13: unable to receive magic message: -110
[  708.532363][ T5154] input input13: unable to receive magic message: -32
[  708.630995][ T5154] input input13: unable to receive magic message: -32
[  708.695623][ T6015] usb 4-1: USB disconnect, device number 38
[  708.695674][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  708.696081][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  709.720360][T10043] Bluetooth: hci2: command tx timeout
[  710.728583][T10599] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  711.771869][T10607] vxcan1 speed is unknown, defaulting to 1000
[  711.776516][T10607] vxcan1 speed is unknown, defaulting to 1000
[  711.780830][T10607] vxcan1 speed is unknown, defaulting to 1000
[  711.818519][T10043] Bluetooth: hci2: command tx timeout
[  712.074219][T10607] infiniband syz2: set active
[  712.074241][T10607] infiniband syz2: added vxcan1
[  712.657839][T10607] RDS/IB: syz2: added
[  712.658822][T10607] smc: adding ib device syz2 with port count 1
[  712.659249][T10607] smc:    ib device syz2 port 1 has no pnetid
[  712.685062][ T6015] vxcan1 speed is unknown, defaulting to 1000
[  712.689378][T10607] vxcan1 speed is unknown, defaulting to 1000
[  712.824967][ T5864] vxcan1 speed is unknown, defaulting to 1000
[  713.218114][T10607] vxcan1 speed is unknown, defaulting to 1000
[  713.430405][T10607] vxcan1 speed is unknown, defaulting to 1000
[  713.635991][T10607] vxcan1 speed is unknown, defaulting to 1000
[  713.841848][T10607] vxcan1 speed is unknown, defaulting to 1000
[  713.883598][T10043] Bluetooth: hci2: command tx timeout
[  714.068693][T10607] vxcan1 speed is unknown, defaulting to 1000
[  714.505984][T10536] chnl_net:caif_netlink_parms(): no params data found
[  714.741858][ T5864] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  714.795533][ T5864] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  717.023716][ T9780] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  717.190057][ T9780] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  717.190086][ T9780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  717.192571][ T9780] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  717.192599][ T9780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  717.192615][ T9780] usb 3-1: SerialNumber: syz
[  717.535895][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.536459][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.549289][ T9780] usb 3-1: 0:2 : does not exist
[  717.592016][ T9780] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  717.686157][ T9780] usb 3-1: USB disconnect, device number 43
[  717.817010][T10536] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.817219][T10536] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.817469][T10536] bridge_slave_0: entered allmulticast mode
[  717.831253][T10368] udevd[10368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  717.846345][T10536] bridge_slave_0: entered promiscuous mode
[  717.896093][T10536] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.896269][T10536] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.896485][T10536] bridge_slave_1: entered allmulticast mode
[  717.898486][T10536] bridge_slave_1: entered promiscuous mode
[  717.945647][ T5864] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  718.104913][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  718.107165][ T5864] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  718.107196][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.120939][ T5864] usb 4-1: config 0 descriptor??
[  720.055240][ T5864] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  720.057396][ T5864] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  720.057465][ T5864] dib0700: firmware download failed at 7 with -22
[  720.255629][ T5810] usb 4-1: USB disconnect, device number 39
[  720.553992][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.574996][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.634318][T10646] netlink: 'syz.4.1553': attribute type 83 has an invalid length.
[  720.713575][ T5810] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  720.883616][ T5810] usb 3-1: Using ep0 maxpacket: 32
[  720.886171][ T5810] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  720.886203][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.892185][ T5810] usb 3-1: config 0 descriptor??
[  721.726471][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1553'.
[  722.805374][ T5810] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  722.841548][ T5810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  722.841619][ T5810] dib0700: firmware download failed at 7 with -22
[  723.424033][ T5810] usb 3-1: USB disconnect, device number 44
[  723.495844][T10536] team0: Port device team_slave_0 added
[  723.498717][T10536] team0: Port device team_slave_1 added
[  723.616662][T10656] 9p: Bad value for 'wfdno'
[  724.237646][T10663] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  726.990767][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.990787][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.990816][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.057190][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.057207][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.057229][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.902431][T10536] hsr_slave_0: entered promiscuous mode
[  727.906268][T10536] hsr_slave_1: entered promiscuous mode
[  727.910817][   T42] bridge_slave_1: left allmulticast mode
[  727.910882][   T42] bridge_slave_1: left promiscuous mode
[  727.911567][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.037860][   T42] bridge_slave_0: left allmulticast mode
[  728.037889][   T42] bridge_slave_0: left promiscuous mode
[  728.038149][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.264361][ T5864] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  728.425296][ T5864] usb 5-1: Using ep0 maxpacket: 32
[  728.427740][ T5864] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  728.427773][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.433368][ T5864] usb 5-1: config 0 descriptor??
[  728.504252][ T5985] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  728.687363][ T5864] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  728.723258][ T5864] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  728.724274][ T5864] dib0700: firmware download failed at 7 with -22
[  729.602421][ T9780] usb 5-1: USB disconnect, device number 38
[  729.621740][ T5985] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  729.621769][ T5985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  729.621792][ T5985] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  729.621816][ T5985] usb 2-1: config 1 has no interface number 1
[  729.621865][ T5985] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  729.626262][ T5985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  729.626295][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.626316][ T5985] usb 2-1: Product: syz
[  729.626331][ T5985] usb 2-1: Manufacturer: syz
[  729.626347][ T5985] usb 2-1: SerialNumber: syz
[  729.937804][T10692] fuse: Bad value for 'user_id'
[  729.937840][T10692] fuse: Bad value for 'user_id'
[  730.022538][ T9780] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  730.513585][T10708] FAULT_INJECTION: forcing a failure.
[  730.513585][T10708] name failslab, interval 1, probability 0, space 0, times 0
[  730.513658][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.2.1571 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  730.513690][T10708] Tainted: [L]=SOFTLOCKUP
[  730.513699][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  730.513713][T10708] Call Trace:
[  730.513722][T10708]  <TASK>
[  730.513732][T10708]  dump_stack_lvl+0xe8/0x150
[  730.513770][T10708]  should_fail_ex+0x46c/0x600
[  730.513806][T10708]  ? __alloc_skb+0x1dc/0x3a0
[  730.513832][T10708]  should_failslab+0xa8/0x100
[  730.513855][T10708]  ? __alloc_skb+0x1dc/0x3a0
[  730.513877][T10708]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  730.513910][T10708]  ? __local_bh_enable_ip+0x1c3/0x2c0
[  730.513939][T10708]  ? __alloc_skb+0x198/0x3a0
[  730.513965][T10708]  __alloc_skb+0x1dc/0x3a0
[  730.513996][T10708]  hci_mgmt_cmd+0x1c5/0xfa0
[  730.514045][T10708]  hci_sock_sendmsg+0x6d7/0xf30
[  730.514084][T10708]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  730.514113][T10708]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  730.514151][T10708]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  730.514191][T10708]  __sock_sendmsg+0x21c/0x270
[  730.514231][T10708]  sock_write_iter+0x27f/0x370
[  730.514268][T10708]  ? __pfx_sock_write_iter+0x10/0x10
[  730.514327][T10708]  vfs_write+0x5d5/0xb40
[  730.514365][T10708]  ? __pfx_sock_write_iter+0x10/0x10
[  730.514399][T10708]  ? __pfx_vfs_write+0x10/0x10
[  730.514435][T10708]  ? __rcu_read_unlock+0x84/0xe0
[  730.514468][T10708]  ? __fget_files+0x2a/0x420
[  730.514503][T10708]  ksys_write+0x14b/0x260
[  730.514536][T10708]  ? __pfx_ksys_write+0x10/0x10
[  730.514581][T10708]  do_syscall_64+0xec/0xf80
[  730.514604][T10708]  ? rcu_is_watching+0x15/0xb0
[  730.514622][T10708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.514645][T10708]  ? clear_bhb_loop+0x60/0xb0
[  730.514673][T10708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.514694][T10708] RIP: 0033:0x7fb063bdf749
[  730.514715][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.514734][T10708] RSP: 002b:00007fb061dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  730.514758][T10708] RAX: ffffffffffffffda RBX: 00007fb063e36180 RCX: 00007fb063bdf749
[  730.514775][T10708] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007
[  730.514790][T10708] RBP: 00007fb061dfc090 R08: 0000000000000000 R09: 0000000000000000
[  730.514804][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  730.514817][T10708] R13: 00007fb063e36218 R14: 00007fb063e36180 R15: 00007ffcac90c828
[  730.514854][T10708]  </TASK>
[  730.516050][T10708] Bluetooth: MGMT ver 1.23
[  731.262680][ T9780] usb 4-1: Using ep0 maxpacket: 32
[  731.296732][ T9780] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  731.296766][ T9780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.302530][ T9780] usb 4-1: config 0 descriptor??
[  731.535265][ T5985] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  731.535401][ T5985] usb 2-1: MIDIStreaming interface descriptor not found
[  731.603104][ T9780] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  731.622005][ T9780] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  731.622081][ T9780] dib0700: firmware download failed at 7 with -22
[  731.807741][ T5985] usb 2-1: USB disconnect, device number 38
[  732.005799][ T9780] usb 4-1: USB disconnect, device number 40
[  732.060813][T10718] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  734.681044][T10733] random: crng reseeded on system resumption
[  735.687735][   T37] kauditd_printk_skb: 31 callbacks suppressed
[  735.687756][   T37] audit: type=1326 audit(1768182902.474:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.687810][   T37] audit: type=1326 audit(1768182902.474:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.687857][   T37] audit: type=1326 audit(1768182902.474:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.687905][   T37] audit: type=1326 audit(1768182902.474:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.687952][   T37] audit: type=1326 audit(1768182902.474:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.688001][   T37] audit: type=1326 audit(1768182902.474:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.688049][   T37] audit: type=1326 audit(1768182902.474:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.688095][   T37] audit: type=1326 audit(1768182902.474:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  735.688142][   T37] audit: type=1326 audit(1768182902.474:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  737.214087][ T5819] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  737.365861][ T5819] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  737.365894][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.365916][ T5819] usb 3-1: config 0 has no interface number 0
[  737.365966][ T5819] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  737.365996][ T5819] usb 3-1: config 0 interface 41 has no altsetting 0
[  737.369252][ T5819] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  737.369286][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.369309][ T5819] usb 3-1: Product: syz
[  737.369325][ T5819] usb 3-1: Manufacturer: syz
[  737.369342][ T5819] usb 3-1: SerialNumber: syz
[  737.380525][ T5819] usb 3-1: config 0 descriptor??
[  737.412436][ T5819] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22
[  738.926243][   T37] audit: type=1326 audit(1768182905.484:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda7f749 code=0x7ffc0000
[  742.672939][T10581] udevd[10581]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  742.852445][    T9] usb 3-1: USB disconnect, device number 45
[  744.483870][ T6340] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  744.963619][ T6340] usb 4-1: Using ep0 maxpacket: 32
[  744.980234][ T6340] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  744.980278][ T6340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.272276][ T6340] usb 4-1: config 0 descriptor??
[  745.660438][ T6340] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  745.662456][ T6340] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  745.662503][ T6340] dib0700: firmware download failed at 7 with -22
[  746.635594][ T5928] usb 4-1: USB disconnect, device number 41
[  748.193837][T10785] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  748.193858][T10785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  748.198944][T10785] vhci_hcd vhci_hcd.0: Device attached
[  748.509152][ T9780] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  748.563699][ T6780] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  748.625709][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.663286][T10791] block nbd0: Unsupported socket: should be TCP or UNIX.
[  748.705988][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.716597][ T9780] usb 5-1: config 0 has no interfaces?
[  748.716641][ T9780] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  748.716668][ T9780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.752429][ T9780] usb 5-1: config 0 descriptor??
[  748.784921][   T42] bond0 (unregistering): Released all slaves
[  749.223348][T10791] process 'syz.2.1592' launched './file2' with NULL argv: empty string added
[  749.599170][T10785] overlayfs: missing 'workdir'
[  749.728400][ T6780] usb 41-1: device descriptor read/64, error -71
[  749.983770][ T6780] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  750.099591][ T5864] usb 5-1: USB disconnect, device number 39
[  750.100615][T10788] vhci_hcd: connection closed
[  750.143676][ T1178] vhci_hcd vhci_hcd.4: stop threads
[  750.146024][ T1178] vhci_hcd vhci_hcd.4: release socket
[  750.208304][ T1178] vhci_hcd vhci_hcd.4: disconnect device
[  750.758674][T10544] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  750.762108][T10544] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  750.793661][T10544] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  750.798520][T10544] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  750.799297][T10544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  753.088745][ T5810] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  753.236091][ T5810] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  753.236122][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  753.237651][ T5810] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  753.237682][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  753.237704][ T5810] usb 3-1: SerialNumber: syz
[  753.585286][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.585771][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.629380][ T5810] usb 3-1: 0:2 : does not exist
[  753.641264][ T5810] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  753.709319][ T5810] usb 3-1: USB disconnect, device number 46
[  753.840629][T10368] udevd[10368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  754.844221][T10043] Bluetooth: hci5: command tx timeout
[  754.954963][   T42] hsr_slave_0: left promiscuous mode
[  756.574807][   T42] hsr_slave_1: left promiscuous mode
[  756.576036][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.603681][ T6780] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  756.621400][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.923981][T10043] Bluetooth: hci5: command tx timeout
[  759.951935][T10043] Bluetooth: hci5: command tx timeout
[  762.895635][T10043] Bluetooth: hci5: command tx timeout
[  762.945264][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  762.945341][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  763.338925][T10544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  763.358628][T10544] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  763.360668][T10544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  763.394365][T10544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  763.395387][T10544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  763.484352][ T5985] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  763.649739][ T5985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  763.649775][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.649798][ T5985] usb 4-1: Product: syz
[  763.649815][ T5985] usb 4-1: Manufacturer: syz
[  763.649831][ T5985] usb 4-1: SerialNumber: syz
[  763.681009][ T5985] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  763.754583][ T6340] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  764.413594][ T6001] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  764.565841][ T6001] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  764.565872][ T6001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  764.570088][ T6001] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  764.570121][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  764.570143][ T6001] usb 5-1: SerialNumber: syz
[  764.914352][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.916471][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.024931][ T6001] usb 5-1: 0:2 : does not exist
[  765.032864][ T6001] usb 5-1: 0:0: failed to get current value for ch 0 (-22)
[  765.112869][ T6340] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  765.115600][ T6340] ath9k_htc: Failed to initialize the device
[  765.123201][ T5985] usb 4-1: USB disconnect, device number 42
[  765.134515][ T6001] usb 5-1: USB disconnect, device number 40
[  765.147398][ T5985] usb 4-1: ath9k_htc: USB layer deinitialized
[  765.167901][    C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  765.261847][   T42] team0 (unregistering): Port device team_slave_1 removed
[  765.345816][T10368] udevd[10368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  765.484321][T10043] Bluetooth: hci3: command tx timeout
[  765.586980][   T42] team0 (unregistering): Port device team_slave_0 removed
[  765.747695][T10891] FAULT_INJECTION: forcing a failure.
[  765.747695][T10891] name failslab, interval 1, probability 0, space 0, times 0
[  765.747736][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.4.1617 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  765.747768][T10891] Tainted: [L]=SOFTLOCKUP
[  765.747777][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  765.747790][T10891] Call Trace:
[  765.747798][T10891]  <TASK>
[  765.747807][T10891]  dump_stack_lvl+0xe8/0x150
[  765.747843][T10891]  should_fail_ex+0x46c/0x600
[  765.747878][T10891]  ? getname_flags+0xb8/0x540
[  765.747900][T10891]  should_failslab+0xa8/0x100
[  765.747922][T10891]  ? getname_flags+0xb8/0x540
[  765.747941][T10891]  kmem_cache_alloc_noprof+0x84/0x6c0
[  765.747974][T10891]  ? strncpy_from_user+0x150/0x2c0
[  765.748006][T10891]  getname_flags+0xb8/0x540
[  765.748033][T10891]  __x64_sys_renameat2+0xba/0xe0
[  765.748058][T10891]  do_syscall_64+0xec/0xf80
[  765.748081][T10891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.748103][T10891]  ? trace_irq_disable+0x37/0x100
[  765.748127][T10891]  ? clear_bhb_loop+0x60/0xb0
[  765.748154][T10891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.748176][T10891] RIP: 0033:0x7ff4eda7f749
[  765.748195][T10891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  765.748213][T10891] RSP: 002b:00007ff4ebcde038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  765.748245][T10891] RAX: ffffffffffffffda RBX: 00007ff4edcd5fa0 RCX: 00007ff4eda7f749
[  765.748262][T10891] RDX: ffffffffffffff9c RSI: 0000200000000400 RDI: ffffffffffffff9c
[  765.748278][T10891] RBP: 00007ff4ebcde090 R08: 0000000000000000 R09: 0000000000000000
[  765.748293][T10891] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001
[  765.748307][T10891] R13: 00007ff4edcd6038 R14: 00007ff4edcd5fa0 R15: 00007ffc2492abc8
[  765.748342][T10891]  </TASK>
[  767.563700][T10043] Bluetooth: hci3: command tx timeout
[  769.910027][T10043] Bluetooth: hci3: command tx timeout
[  770.535498][T10544] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  770.541407][T10544] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  770.542811][T10544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  770.556319][T10544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  770.557606][T10544] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  771.974826][T10544] Bluetooth: hci3: command tx timeout
[  772.305287][T10811] vxcan1 speed is unknown, defaulting to 1000
[  772.604297][T10544] Bluetooth: hci6: command tx timeout
[  772.654858][ T5985] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  772.840552][ T5985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  772.840594][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.840617][ T5985] usb 4-1: Product: syz
[  772.840633][ T5985] usb 4-1: Manufacturer: syz
[  772.840648][ T5985] usb 4-1: SerialNumber: syz
[  773.017316][ T5985] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  773.041086][  T820] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  773.449641][ T5810] usb 4-1: USB disconnect, device number 43
[  774.542422][  T820] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  774.577748][  T820] ath9k_htc: Failed to initialize the device
[  774.818654][T10544] Bluetooth: hci6: command tx timeout
[  774.901903][ T5810] usb 4-1: ath9k_htc: USB layer deinitialized
[  777.284270][T10544] Bluetooth: hci6: command tx timeout
[  777.356339][T10875] vxcan1 speed is unknown, defaulting to 1000
[  777.594572][ T6340] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  777.676760][  T820] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  777.744834][ T6340] usb 4-1: Using ep0 maxpacket: 32
[  777.748224][ T6340] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  777.748255][ T6340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.798629][ T6340] usb 4-1: config 0 descriptor??
[  777.828323][  T820] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  777.828354][  T820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  777.828375][  T820] usb 5-1: config 0 has no interface number 0
[  777.828483][  T820] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  777.828513][  T820] usb 5-1: config 0 interface 41 has no altsetting 0
[  777.831528][  T820] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  777.831613][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.831637][  T820] usb 5-1: Product: syz
[  777.831653][  T820] usb 5-1: Manufacturer: syz
[  777.831669][  T820] usb 5-1: SerialNumber: syz
[  777.929509][  T820] usb 5-1: config 0 descriptor??
[  777.956571][  T820] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  778.020055][ T6340] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  778.051242][ T6340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  778.052246][ T6340] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  778.052302][ T6340] usb 4-1: media controller created
[  778.093283][ T6340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  778.225184][T10945] dib0700: tx buffer length is larger than 4. Not supported.
[  778.264564][ T6340] DVB: Unable to find symbol dib7000p_attach()
[  778.264583][ T6340] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  780.046926][T10544] Bluetooth: hci6: command tx timeout
[  780.156791][T10903] vxcan1 speed is unknown, defaulting to 1000
[  780.234865][ T6340] rc_core: IR keymap rc-dib0700-rc5 not found
[  780.234890][ T6340] Registered IR keymap rc-empty
[  780.235213][ T6340] dvb-usb: could not initialize remote control.
[  780.235224][ T6340] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  780.288108][ T6340] usb 4-1: USB disconnect, device number 44
[  780.389676][ T6340] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  780.825570][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.983763][T10966] loop5: detected capacity change from 0 to 7
[  781.068103][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  781.105948][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.106234][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.110095][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.110135][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.121497][T10964] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  781.239260][ T9780] usb 5-1: USB disconnect, device number 41
[  781.284843][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.284890][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.285143][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.285167][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.287144][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.287178][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.287992][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.288024][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.288245][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.288276][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.288469][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.288498][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.288547][T10368] ldm_validate_partition_table(): Disk read failed.
[  781.288708][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  781.288737][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.288972][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  781.349885][T10368] Dev loop5: unable to read RDB block 0
[  781.405374][T10368]  loop5: unable to read partition table
[  781.406095][T10368] loop5: partition table beyond EOD, truncated
[  781.516182][T10966] ldm_validate_partition_table(): Disk read failed.
[  781.517323][T10966] Dev loop5: unable to read RDB block 0
[  781.518453][T10966]  loop5: unable to read partition table
[  781.518702][T10966] loop5: partition table beyond EOD, truncated
[  781.519412][T10966] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  781.929687][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.008929][T10811] chnl_net:caif_netlink_parms(): no params data found
[  784.305283][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.443538][ T9780] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  784.603474][ T9780] usb 4-1: Using ep0 maxpacket: 32
[  784.606966][ T9780] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  784.606996][ T9780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.612381][ T9780] usb 4-1: config 0 descriptor??
[  784.820218][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.912795][ T9780] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  784.926863][ T9780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  784.927467][ T9780] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  784.927515][ T9780] usb 4-1: media controller created
[  784.970414][ T9780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  785.116727][T10978] dib0700: tx buffer length is larger than 4. Not supported.
[  785.154113][ T6780] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  785.160143][ T9780] DVB: Unable to find symbol dib7000p_attach()
[  785.160156][ T9780] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  785.243928][ T9780] rc_core: IR keymap rc-dib0700-rc5 not found
[  785.243953][ T9780] Registered IR keymap rc-empty
[  785.244257][ T9780] dvb-usb: could not initialize remote control.
[  785.244268][ T9780] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  785.308177][ T9780] usb 4-1: USB disconnect, device number 45
[  785.312010][ T6780] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  785.312041][ T6780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.312056][ T6780] usb 5-1: Product: syz
[  785.312067][ T6780] usb 5-1: Manufacturer: syz
[  785.312078][ T6780] usb 5-1: SerialNumber: syz
[  785.385598][ T6780] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  785.419832][ T5901] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  785.587025][ T9780] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  785.619231][T10811] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.619466][T10811] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.619730][T10811] bridge_slave_0: entered allmulticast mode
[  785.627467][T10811] bridge_slave_0: entered promiscuous mode
[  785.717044][T10811] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.717147][T10811] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.717353][T10811] bridge_slave_1: entered allmulticast mode
[  785.722413][T10811] bridge_slave_1: entered promiscuous mode
[  786.811752][ T5901] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  786.811893][ T5901] ath9k_htc: Failed to initialize the device
[  786.829103][ T5985] usb 5-1: USB disconnect, device number 42
[  786.866784][    C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  786.869707][ T5985] usb 5-1: ath9k_htc: USB layer deinitialized
[  787.234847][ T5985] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  787.239835][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  787.306438][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  787.383562][ T5985] usb 4-1: Using ep0 maxpacket: 32
[  787.385694][ T5985] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  787.385724][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.437241][ T5985] usb 4-1: config 0 descriptor??
[  787.869204][ T5985] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  787.885495][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  787.886328][ T5985] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  787.886387][ T5985] usb 4-1: media controller created
[  788.558694][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  788.975213][T10811] team0: Port device team_slave_0 added
[  788.975668][T10875] chnl_net:caif_netlink_parms(): no params data found
[  789.021515][ T5985] DVB: Unable to find symbol dib7000p_attach()
[  789.021531][ T5985] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  789.132632][T10811] team0: Port device team_slave_1 added
[  789.204807][ T5985] rc_core: IR keymap rc-dib0700-rc5 not found
[  789.204831][ T5985] Registered IR keymap rc-empty
[  789.205139][ T5985] dvb-usb: could not initialize remote control.
[  789.205150][ T5985] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  789.240605][  T820] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  789.242342][ T5985] usb 4-1: USB disconnect, device number 46
[  789.320717][ T5985] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  789.384836][  T820] usb 5-1: Using ep0 maxpacket: 32
[  789.389809][  T820] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  789.389842][  T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.428177][  T820] usb 5-1: config 0 descriptor??
[  791.104247][  T820] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  791.123103][  T820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  791.135474][  T820] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  791.135536][  T820] usb 5-1: media controller created
[  791.182281][  T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  791.281883][  T820] DVB: Unable to find symbol dib7000p_attach()
[  791.281902][  T820] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  791.463790][  T820] rc_core: IR keymap rc-dib0700-rc5 not found
[  791.463815][  T820] Registered IR keymap rc-empty
[  791.464076][  T820] dvb-usb: could not initialize remote control.
[  791.464087][  T820] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  791.587304][  T820] usb 5-1: USB disconnect, device number 43
[  791.665480][  T820] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  791.722328][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.866953][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  791.866972][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.867001][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  791.868484][T10903] chnl_net:caif_netlink_parms(): no params data found
[  791.970579][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  791.970599][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.970631][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.057282][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.630326][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.074916][T10875] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.075075][T10875] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.075241][T10875] bridge_slave_0: entered allmulticast mode
[  795.077809][T10875] bridge_slave_0: entered promiscuous mode
[  795.227653][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.243580][ T5810] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  795.310683][T10811] hsr_slave_0: entered promiscuous mode
[  795.311834][T10811] hsr_slave_1: entered promiscuous mode
[  795.312569][T10811] debugfs: 'hsr0' already exists in 'hsr'
[  795.312589][T10811] Cannot create hsr debugfs directory
[  795.313042][T10875] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.313192][T10875] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.313571][T10875] bridge_slave_1: entered allmulticast mode
[  795.319147][T10875] bridge_slave_1: entered promiscuous mode
[  795.408922][ T5810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  795.408955][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.408970][ T5810] usb 5-1: Product: syz
[  795.408980][ T5810] usb 5-1: Manufacturer: syz
[  795.408991][ T5810] usb 5-1: SerialNumber: syz
[  795.463223][ T5810] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  795.505666][ T6780] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  796.134076][  T820] usb 5-1: USB disconnect, device number 44
[  796.606159][ T6780] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  796.656810][ T6780] ath9k_htc: Failed to initialize the device
[  796.869487][T10903] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.869701][T10903] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.869959][T10903] bridge_slave_0: entered allmulticast mode
[  796.872939][T10903] bridge_slave_0: entered promiscuous mode
[  796.916435][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.013742][  T820] usb 5-1: ath9k_htc: USB layer deinitialized
[  797.089200][T10903] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.089333][T10903] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.089553][T10903] bridge_slave_1: entered allmulticast mode
[  798.975920][T10903] bridge_slave_1: entered promiscuous mode
[  798.998470][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.188029][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'.
[  799.397504][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'.
[  801.557547][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.588882][T10875] team0: Port device team_slave_0 added
[  801.617169][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.646282][T10875] team0: Port device team_slave_1 added
[  801.824896][ T5810] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  801.973680][ T5810] usb 4-1: Using ep0 maxpacket: 32
[  801.977346][ T5810] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  801.977396][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.982500][ T5810] usb 4-1: config 0 descriptor??
[  802.178499][T10903] team0: Port device team_slave_0 added
[  802.179714][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.179728][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.179750][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.256180][ T5810] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  802.277346][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  802.277401][T10903] team0: Port device team_slave_1 added
[  802.278302][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.278318][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.278350][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.285215][ T5810] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  802.285349][ T5810] usb 4-1: media controller created
[  802.425839][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  802.459078][T11070] ------------[ cut here ]------------
[  802.459094][T11070] usb 4-1: BOGUS control dir, pipe 80002f80 doesn't match bRequestType c0
[  802.459121][T11070] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.3.1650/11070
[  802.459168][T11070] Modules linked in:
[  802.459192][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.3.1650 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  802.459223][T11070] Tainted: [L]=SOFTLOCKUP
[  802.459231][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  802.459246][T11070] RIP: 0010:usb_submit_urb+0x111c/0x18d0
[  802.459275][T11070] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9
[  802.459296][T11070] RSP: 0018:ffffc900040d7940 EFLAGS: 00010246
[  802.459314][T11070] RAX: 0000000000000000 RBX: ffff88801d720400 RCX: 0000000080002f80
[  802.459330][T11070] RDX: ffff888031460ec0 RSI: ffffffff8b83a8e0 RDI: ffffffff8ee6e670
[  802.459348][T11070] RBP: 1ffff11005707788 R08: 00000000000000c0 R09: 0000000000000000
[  802.459363][T11070] R10: ffffc900040d7a40 R11: fffff5200081af54 R12: ffff88814c54d100
[  802.459381][T11070] R13: ffff88802b83bc40 R14: 0000000080002f80 R15: ffff888031460ec0
[  802.459399][T11070] FS:  00007f6858fce6c0(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000
[  802.459419][T11070] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  802.459434][T11070] CR2: 000000110c35ff3d CR3: 00000000334c8000 CR4: 00000000003526f0
[  802.459454][T11070] Call Trace:
[  802.459464][T11070]  <TASK>
[  802.459481][T11070]  ? __init_swait_queue_head+0xa9/0x150
[  802.459516][T11070]  usb_start_wait_urb+0x115/0x4f0
[  802.459555][T11070]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  802.459606][T11070]  usb_control_msg+0x232/0x3e0
[  802.459642][T11070]  dib0700_i2c_xfer+0xba7/0xf70
[  802.459705][T11070]  __i2c_transfer+0x79a/0x1f00
[  802.459736][T11070]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  802.459764][T11070]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  802.459790][T11070]  ? i2c_transfer+0xc8/0x2d0
[  802.459817][T11070]  i2c_transfer+0x1cc/0x2d0
[  802.459848][T11070]  i2cdev_ioctl_rdwr+0x460/0x740
[  802.459891][T11070]  i2cdev_ioctl+0x64e/0x820
[  802.459917][T11070]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  802.459948][T11070]  ? __fget_files+0x3a6/0x420
[  802.459970][T11070]  ? __fget_files+0x2a/0x420
[  802.459998][T11070]  ? bpf_lsm_file_ioctl+0x9/0x20
[  802.460032][T11070]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  802.460060][T11070]  __se_sys_ioctl+0xff/0x170
[  802.460094][T11070]  do_syscall_64+0xec/0xf80
[  802.460118][T11070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.460140][T11070]  ? trace_irq_disable+0x37/0x100
[  802.460164][T11070]  ? clear_bhb_loop+0x60/0xb0
[  802.460191][T11070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.460214][T11070] RIP: 0033:0x7f685ad6f749
[  802.460235][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  802.460256][T11070] RSP: 002b:00007f6858fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  802.460280][T11070] RAX: ffffffffffffffda RBX: 00007f685afc5fa0 RCX: 00007f685ad6f749
[  802.460297][T11070] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004
[  802.460312][T11070] RBP: 00007f685adf3f91 R08: 0000000000000000 R09: 0000000000000000
[  802.460327][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.460340][T11070] R13: 00007f685afc6038 R14: 00007f685afc5fa0 R15: 00007ffc0bbfdd38
[  802.460379][T11070]  </TASK>
[  802.460405][T11070] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  802.460425][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.3.1650 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  802.460457][T11070] Tainted: [L]=SOFTLOCKUP
[  802.460465][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  802.460480][T11070] Call Trace:
[  802.460489][T11070]  <TASK>
[  802.460498][T11070]  vpanic+0x1e0/0x670
[  802.460534][T11070]  panic+0xb9/0xc0
[  802.460565][T11070]  ? __pfx_panic+0x10/0x10
[  802.460617][T11070]  __warn+0x317/0x4b0
[  802.460647][T11070]  ? usb_submit_urb+0x105c/0x18d0
[  802.460684][T11070]  ? usb_submit_urb+0x105c/0x18d0
[  802.460711][T11070]  __report_bug+0x288/0x500
[  802.460734][T11070]  ? usb_submit_urb+0x105c/0x18d0
[  802.460768][T11070]  ? __pfx___report_bug+0x10/0x10
[  802.460798][T11070]  ? lockdep_hardirqs_on+0x7b/0x110
[  802.460821][T11070]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  802.460856][T11070]  report_bug_entry+0x19a/0x290
[  802.460879][T11070]  ? usb_submit_urb+0x111c/0x18d0
[  802.460904][T11070]  ? usb_submit_urb+0x1121/0x18d0
[  802.460928][T11070]  handle_bug+0xca/0x200
[  802.460956][T11070]  exc_invalid_op+0x1a/0x50
[  802.460983][T11070]  asm_exc_invalid_op+0x1a/0x20
[  802.461002][T11070] RIP: 0010:usb_submit_urb+0x111c/0x18d0
[  802.461028][T11070] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9
[  802.461047][T11070] RSP: 0018:ffffc900040d7940 EFLAGS: 00010246
[  802.461067][T11070] RAX: 0000000000000000 RBX: ffff88801d720400 RCX: 0000000080002f80
[  802.461083][T11070] RDX: ffff888031460ec0 RSI: ffffffff8b83a8e0 RDI: ffffffff8ee6e670
[  802.461101][T11070] RBP: 1ffff11005707788 R08: 00000000000000c0 R09: 0000000000000000
[  802.461117][T11070] R10: ffffc900040d7a40 R11: fffff5200081af54 R12: ffff88814c54d100
[  802.461135][T11070] R13: ffff88802b83bc40 R14: 0000000080002f80 R15: ffff888031460ec0
[  802.461181][T11070]  ? __init_swait_queue_head+0xa9/0x150
[  802.461214][T11070]  usb_start_wait_urb+0x115/0x4f0
[  802.461266][T11070]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  802.461321][T11070]  usb_control_msg+0x232/0x3e0
[  802.461359][T11070]  dib0700_i2c_xfer+0xba7/0xf70
[  802.461417][T11070]  __i2c_transfer+0x79a/0x1f00
[  802.461448][T11070]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  802.461475][T11070]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  802.461502][T11070]  ? i2c_transfer+0xc8/0x2d0
[  802.461532][T11070]  i2c_transfer+0x1cc/0x2d0
[  802.461564][T11070]  i2cdev_ioctl_rdwr+0x460/0x740
[  802.461605][T11070]  i2cdev_ioctl+0x64e/0x820
[  802.461633][T11070]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  802.461663][T11070]  ? __fget_files+0x3a6/0x420
[  802.461693][T11070]  ? __fget_files+0x2a/0x420
[  802.461721][T11070]  ? bpf_lsm_file_ioctl+0x9/0x20
[  802.461754][T11070]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  802.461783][T11070]  __se_sys_ioctl+0xff/0x170
[  802.461816][T11070]  do_syscall_64+0xec/0xf80
[  802.461838][T11070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.461860][T11070]  ? trace_irq_disable+0x37/0x100
[  802.461883][T11070]  ? clear_bhb_loop+0x60/0xb0
[  802.461911][T11070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.461933][T11070] RIP: 0033:0x7f685ad6f749
[  802.461952][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  802.461972][T11070] RSP: 002b:00007f6858fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  802.461997][T11070] RAX: ffffffffffffffda RBX: 00007f685afc5fa0 RCX: 00007f685ad6f749
[  802.462013][T11070] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004
[  802.462026][T11070] RBP: 00007f685adf3f91 R08: 0000000000000000 R09: 0000000000000000
[  802.462040][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.462054][T11070] R13: 00007f685afc6038 R14: 00007f685afc5fa0 R15: 00007ffc0bbfdd38
[  802.462093][T11070]  </TASK>
[  802.462707][T11070] Kernel Offset: disabled