last executing test programs:

5m4.698608499s ago: executing program 0 (id=2409):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
fchdir(r1)
symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x1893e066d341cc71)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

5m4.602133669s ago: executing program 0 (id=2410):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, 0x0)
read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})
ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff})

5m4.43717743s ago: executing program 0 (id=2411):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000001c0)={0xf7, 0x8})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x4)
r10 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsmount(r10, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000f541b95b1a5f6ad600000000"], 0x8)

5m3.265669574s ago: executing program 0 (id=2416):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000, 0x61, 0x10, 0x34}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x841)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/182, 0xb6}], 0x20000000000000c9)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xc)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r4, @ANYBLOB="080006"], 0x24}}, 0x0)

5m2.889168312s ago: executing program 0 (id=2417):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1})
r4 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x143080)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000000))
poll(0x0, 0x0, 0x9)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
r5 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGARP(r5, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}})
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, 0x0, 0x0, 0x1)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m2.48283156s ago: executing program 0 (id=2419):
r0 = socket(0x10, 0x3, 0xfffffffd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff7}]}}]}, 0x38}}, 0x0)
syz_usbip_server_init(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040))
renameat2(r3, &(0x7f00000000c0)='./cgroup\x00', r3, &(0x7f0000000080)='./file0\x00', 0x1)

5m1.276827225s ago: executing program 32 (id=2419):
r0 = socket(0x10, 0x3, 0xfffffffd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff7}]}}]}, 0x38}}, 0x0)
syz_usbip_server_init(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040))
renameat2(r3, &(0x7f00000000c0)='./cgroup\x00', r3, &(0x7f0000000080)='./file0\x00', 0x1)

10.942580505s ago: executing program 3 (id=3666):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0xfe12, 0x0, 0x3, 0x2}}, 0x48)
ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0xc, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={<r7=>0x0, 0x280, 0x55a6}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90)
r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, &(0x7f0000000300)={0x0, 0x1, 0x9, 0x9, 0x5, 0x1, 0xf7, 0x81, 0x3, 0x3, 0x5, "f7f1000000000000004d2db7a81004bd6b122e1a4676098a420cd8be1f6c41e1"})
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0xa)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x2, 0x12)

8.466171204s ago: executing program 1 (id=3674):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x11a72, 0x3325dc})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
unshare(0xc040400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r5, 0x6)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00')
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c4, 0x65, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_simple={0x108, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xdb, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1c85729597a3ff8fed60b904846b3d3955fa8fb"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7e, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
socket$nl_route(0x10, 0x3, 0x0)

8.374043845s ago: executing program 4 (id=3676):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x303a00, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x303a00, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206050000000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff0800060000006d2305000500020000000500010006"], 0x68}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x84, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x4, 0x60d3, 0x8}) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x4, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x2) (async)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x6)
r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)
write(r6, &(0x7f0000000100)="9e", 0x1) (async)
write(r6, &(0x7f0000000100)="9e", 0x1)
write(r6, &(0x7f0000000080)="d7", 0x1) (async)
write(r6, &(0x7f0000000080)="d7", 0x1)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4}, 0x20)
setsockopt$sock_attach_bpf(r7, 0x1, 0x43, &(0x7f0000000000), 0xff7b)
sendmsg$inet(r7, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20009090)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x2, 0x2, 0xffffff82, 0xe, 0x8, "16cfb69012650eabfd955c6d9954beff89d9ef", 0x4, 0x9})
write(0xffffffffffffffff, &(0x7f0000000140)="df128f18b16e1b46caa196107f41d59e44d7e9c44ab05dd615ee71d25ac10f11938b293d7c465ef176340b0fea5085f16ae2f99cfe3f7468dfd687390af44cfefd4737b05a32c889f75b3f3db9079ebd9e898456f00d123ef616dfe6724b6055613b4a4f0df21b0e34bdbe96a12ecf8eafe7d13200c5c58865981c520345897acbf6ea854e23de9a766b823b604643fe05864239ff6f5c6e262e3b98b96e33b3", 0xa0) (async)
write(0xffffffffffffffff, &(0x7f0000000140)="df128f18b16e1b46caa196107f41d59e44d7e9c44ab05dd615ee71d25ac10f11938b293d7c465ef176340b0fea5085f16ae2f99cfe3f7468dfd687390af44cfefd4737b05a32c889f75b3f3db9079ebd9e898456f00d123ef616dfe6724b6055613b4a4f0df21b0e34bdbe96a12ecf8eafe7d13200c5c58865981c520345897acbf6ea854e23de9a766b823b604643fe05864239ff6f5c6e262e3b98b96e33b3", 0xa0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'nicvf0\x00', {0x8}, 0x7})
sendmmsg$inet6(r0, &(0x7f0000004340)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @remote, 0xc}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @flowinfo={{0x10, 0x29, 0xb, 0xfffffff7}}], 0x20}}], 0x1, 0x80c4)

8.275384953s ago: executing program 3 (id=3677):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x6b69, 0x220043)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x2b5, 0xffffffff, 0x101c, 0x11, 0x8, 0x0, 0x5, 0x4}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xffff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x232}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x498242, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000640)=""/203, 0xcb}, {0x0}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000002880)=""/4104, 0x103a}, {&(0x7f0000000540)=""/232, 0xe8}], 0x8, 0xff, 0x75)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r6, 0x80047437, 0x2000000a)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/31, 0x1f, 0x1, &(0x7f0000000800)=""/161, 0x4a}, &(0x7f0000000340)=0x40)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="000000000000000000000000000000010000000032000000ac1414aa0000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff0000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000002000000020004006a0000004c0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000", @ANYRES16, @ANYRESHEX=r0, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

8.216204231s ago: executing program 5 (id=3678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006d00)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe1ee}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

7.742515778s ago: executing program 4 (id=3679):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006)
listen(0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r7, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
preadv(r7, 0x0, 0x0, 0xc9, 0x1)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

6.484588836s ago: executing program 3 (id=3681):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02)

6.405668727s ago: executing program 4 (id=3682):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0xc00, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xfffffffffffffe67}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
fchdir(0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)

6.342603102s ago: executing program 1 (id=3683):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0xf79a, 0x0, 0x2000004, 0x3ce}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$kcm(0xa, 0x2, 0x73)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x69, 0x0, 0x0)

6.333488588s ago: executing program 5 (id=3684):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
r2 = open_tree(r1, &(0x7f0000000080)='\x00', 0x81901)
mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x70, 0x20000}, 0x20)
r3 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000700000200"], 0xc, 0x5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000380)=0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0)
socket(0x10, 0x803, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005})

5.860926047s ago: executing program 3 (id=3686):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = getpid()
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0)
r5 = syz_pidfd_open(r3, 0x0)
process_madvise(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)='H', 0x1}], 0x2, 0x66, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000c40)=[{&(0x7f00000004c0)="0e", 0x1}], 0x1)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x8, 0x1, 0x89}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c780})
io_uring_enter(r7, 0x3518, 0xaddf, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4810}, 0x4000840)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x89, &(0x7f0000000500)=ANY=[@ANYBLOB="120110b11dcbd17db9380069318c90cf53a703020000102505a1a440000102030109027700020104080a0904000001020d00000824060001b1ec4f0524000f000d240f01c7000000090057be0606241a01000107240a450581080a2407015b680180810007240a0b4f08070905810340000403060904010000020d00000904010102020d000009058202ff038107570905030208007f0940"], &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0x1, 0x0, 0x10, 0x6}, 0x24, &(0x7f0000000200)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x13, 0x7f, 0x91, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "a95f25a3e5bd9bc564927a9b352e38e7"}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xf8, &(0x7f00000003c0)=@string={0xf8, 0x3, "17712347755b7c4de0ed1e709ea07f55f6ce64261bfb7ed89579b4f17667cd28195777e4afe6e233fe00b539a969acb3df07d8f8e6e0faeeda2995034994342f9eafdf419663f720b60a1969613753b41df6edc9c025c9b868fa26171f9c949c7ca0490036b8cf0537131f1c05ecd946da19df7dc078cd34233997f8120949bf494b500978d01d42d7f6c2accf629f121f06c9f6878a68533d92d158988960ff7aa7a6f3b5bae7451b8658e022b86d5d3e24c418e03c8796acaf6af576fa8fee01ae2e3b48fe6cca7f4e41032fdce476b5df8cc3b80a6e4d919299f8f4cdda7a1976f3b100a8b7fc518a1c4b988365c167d3ee340a0b"}}]})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="40400000100001012200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0)

5.25854262s ago: executing program 1 (id=3688):
memfd_create(0x0, 0xe)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x410200)
bpf$PROG_LOAD(0x25, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c0000000207010100000000000000000200000108000540000000000900010073797a30000000000c00064000000000000000061c000780080001"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f40)=ANY=[@ANYBLOB="02000000420001062cbd7000fbdbdf2585000000"], 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x800)
socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0)
socket$inet(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006)
r7 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xedZd\x14\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7)
fcntl$addseals(r7, 0x409, 0xe)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1})
syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')

5.045957878s ago: executing program 4 (id=3689):
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x3934, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3908, 0x4, 0x0, 0x1, [{0x38e4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x38d0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "fc5bb0bcf8ce6cf4a5fc33e4c0a2099f5c8b1ce2e5cd67258120dd61bf7b07ca1f3eb8f62d36672cdc60a98fa440a5ffc63193a6ce792e34ef9d66118aca1c0f96f4ac9c565758fd9302c194b50580f077faa4a012c481e340532169ce32963e78f1aed22ee6fbe78880b84c1499c60bffa21e794651009715a97e25c92f3bc1daa82ff3e8e29d49d28ea4e2661c8897da66ac7d9db3c421e02fd4f6e67d7dc626786ad23103"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0c346fc11a3f1dd98c541d9ea1831c1f0134d0a06e1e6d5b60154a9d90d4239c0af4f523dcdf7a0d1af93850f5290ccc99c28214de6472c6b4bd719b634f889df22e605b86e2156fbedf9a02e7dfaf8d91d73079b9b77e6c3ffaf548601e6e9e4e56ddf7b1814c7b675461a62e8ea2e8a77b7d5da90e439a4a8f9156060bc1b0c16bade2a3d7709408e055ec0c48684df020a0431e936516291190656cd799d49417caf397489396142167be666014f7769496b3cd680c2c2fa2aae8d10c1487e64173114d6ac13fbb176eec601840f1361c2aa74314d28c17"}]}, @NFTA_IMMEDIATE_DATA={0x1280, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "183a164cd6a164ef9e45702e8d9a12589abb27cda8a5c96c5d0cfa7b16b47d5b54b22a3933c5bf09f6519875ebfe9499ffecc1ed4dbc0c7430c2a76c2e4af9cc6a38933873f4d39073ea71188657a3ebe2a1ee8f9908a7bd38a97e8e86bf8a2ebcf237cce31ee27392e12911755ce1052b09e608e277521905786b885a4441afbcae76c29e695bc16115c510c5c956b5866fd17d64e3d7a2f687"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x33, 0x1, "edf7a233ccd8ae5bc0dc0e12e7e93a59a6975fef3054736968634c0fe6c86ca76daece0b0e6d75ff5281a9c2f93baa"}, @NFTA_DATA_VALUE={0xb7, 0x1, "c3624646a0733162d7ad706eae9b6ae14fecf191e9c383c9ae219b4cb6a07d75b81e22f89cc1e34e65735160c37d81e68a6de88fc27d3954371c2a7c3e6a259b1e7e97c68cec4e12663fe4d31aad9bd2222e2eb636a10e0ba31900a240f0c182f4e398fed8a139e575cd3160af1cb618ab05072f716e6d33987604a6b14887cc392f8d050c331684a1e16a79e9ac441cf191c81c258f6cce5d89c61b5bcc136df7806474c8186bea6ece93dbe748c68bb19fe5"}, @NFTA_DATA_VALUE={0x23, 0x1, "c9efed5ff40d086b54cd48eab4e266a790cff16954cb8cee7ea3e2b9b424b8"}, @NFTA_DATA_VALUE={0x55, 0x1, "4b8ccb42a498d79345a6e297c3b8a1f7b6ffc8758f4ddb9ac7dbb57fa711ed9b94fff1ad758b0220ce66ff19780d605a5cb0988648981cf80c3ca17cd334003b490c65e62938877fcbb8cd5b901e95ad59"}]}, @NFTA_IMMEDIATE_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "8e7b613907d58531cb1d038dc825aa08cf5a796974fa2f5bf76859267bf21634241d3829cf0fe452762cb60ddc355017da642fc0e1341c92d07dc0f17f298c74168d759e9467316f05685baa6afe29ff9bd54c7e5af1a115d83a017cb9"}, @NFTA_DATA_VALUE={0x5c, 0x1, "1a08e24f6af752d4a21dbea2e5d31420c130ee7fa75e813f358d873e6698e795b2d1aff921e6c937446009475815b4a9a75a5643b0a6a8335fb704e971d01525d46a0c52c6058b26bbb5b955ba5913d95d397a11a6ae0312"}, @NFTA_DATA_VALUE={0x4f, 0x1, "35362b6fa295048ffa67695f4c872eb7c91bfa5f655a55a2715b494e307230bba1e6763ee24c000934b4215d8af0d169cbd7340722bac1a605479966b4f32701287d84ddadbd35ba065aac"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x80, 0x1, "d93f7119796f38db64274f8e1fa1137a44e8f4ed2a117e202df3e3aec1d8a3871304e14425d118a53722791b035570c648034bcb7cb501515837a577f97f4cfec7fd31739485d0b5b2dc49e358e554eabac26af05c9e1be32b1b938a13431bd6b5e0eccb30fa761b761b7eef79c099ef4b7dfdb720427b7f36b83de2"}]}, @NFTA_IMMEDIATE_DATA={0x20a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "9d8d253eaff5c1422124f5b2022c61efe3c2e9d8d9dbfc42e0031c23c1d2645e5a7e988c40484b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}]}, @NFTA_IMMEDIATE_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "4c837b4ac8803211c43793bdcdcc5b7acbf34b1f77e5bbf6111c4bb998b3753e915a0ef151b3e18d54b52c25fa117e26f3bf5e3f02622dd3b6a03d542bc7f5009d8e88cb361063b2d6289a3033bb73ce7b7e42a9242b1b38230da33bf896771bf66a3b527ede09081b8e6bdc2f96c86de6150404766fecb3edc3946ac30c7b92c8573ed4b421f96aecc07a01e1c82d639962a67d4a60f01faa15a413961f89074a940e59903c3d1a1cdf61fe97111a0321adb00635a53a35b5b69c42a862e4776dd7d34e8f055fea0e2496b6b75a6d017a4a5a2de0735ad1f3988d179cb45c6a5a492f30b07729f4c897cf60dd2f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc, 0x1, "37bd842910c4b86a"}, @NFTA_DATA_VALUE={0xb, 0x1, "30276153da80ad"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x395c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

4.86270301s ago: executing program 2 (id=3690):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000000)=@ethtool_ts_info}) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x840000000002, 0x3, 0xfc) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
ioctl$NS_GET_USERNS(r3, 0x8004b709, 0x0) (async)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xab32, 0x4, 0x3, 0x2bb}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
landlock_create_ruleset(&(0x7f0000000140)={0x4080, 0x1}, 0x18, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f00000001c0))
syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) (async)
socket$inet6(0xa, 0x800000000000002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)

4.696237454s ago: executing program 2 (id=3691):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4543, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x400, {0x0, 0x0, 0x0, 0x3, 0xb647, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaa05000000d741dd0000c50d38ef2a565ef1e83323691c5830e50a0700", "a9103939c787a16c1c0f59ded130e04d528539f3d3289737f0376472a964a02447a75df8a69ea917deb7ba06000080000000005239d200ecffffff0000000700", "24431a1e77a68e174f000000000000000010e200"}})
r2 = dup(r1)
read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) (fail_nth: 1)

4.655006276s ago: executing program 4 (id=3692):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x20000113, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x1ff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@rand_addr=0x64010102, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @multicast2, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x5, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff00010000000000809d0000000000ffffe0000002fc0100000000000000000000000080010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r7 = socket$kcm(0x1e, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0"], 0x27c}}, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0x5b01, 0x0)
syz_usb_disconnect(r6)

4.559312033s ago: executing program 5 (id=3693):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4543, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4)
ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000500))
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r0, 0x400, {0x0, 0x0, 0x0, 0x3, 0xb647, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaa05000000d741dd0000c50d38ef2a565ef1e83323691c5830e50a0700", "fb30e04d528539f3d3289737f0376472a964802447a75df8a69ea917deb7ba06000007000000005239d200ecffffff0000000700", "24431a1e77a68e174f000000000000000010e200"}})
r4 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000001c0)=0x12, 0x4)
r5 = dup(r3)
read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0x2020)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000004c0)={0x9, 0x0, 0x5, 0x8}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x2, 0x36c, [0x800000c0, 0x0, 0x0, 0x800002a6, 0x800003fc], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x2, 0x88e7, 'team0\x00', 'wg1\x00', 'ipvlan0\x00', 'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xd6, 0x16e, 0x1b6, [@physdev={{'physdev\x00', 0x0, 0x44}, {{'veth0_vlan\x00', {}, 'sit0\x00', {0xff}, 0x14, 0x11}}}], [@common=@nflog={'nflog\x00', 0x4c, {{0x4200, 0x6, 0xa, 0x0, 0x0, "3557d9359502fbc019702e363436e647fb87fd46c818eead66556053508da534e1eb47303cc9a6f5e90f8f6f943dde4602d03a712175535aca346cbb403b8303"}}}, @common=@STANDARD={'\x00', 0x4, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x24, {{0xbf, "55935e65a2e39056b0d554f920d2a730b59542e104478420f281e906f794", 0x4}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x9, 0x42, 0x9300, 'bridge_slave_0\x00', 'vcan0\x00', 'wlan1\x00', 'nr0\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @link_local, [0x0, 0x0, 0xff], 0x9e, 0xf6, 0x126, [@mark_m={{'mark_m\x00', 0x0, 0xc}, {{0x5, 0x10001, 0x2, 0x2}}}], [@snat={'snat\x00', 0xc, {{@empty, 0xffffffffffffffff}}}, @common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0xc, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x3bc)

4.486491219s ago: executing program 5 (id=3694):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

4.486154965s ago: executing program 2 (id=3695):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
unshare(0x100)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f5ff20a751bd1eb1a8ce8c000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet(0x2, 0x1, 0x100)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='s)', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

4.100545088s ago: executing program 1 (id=3696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
unshare(0x100)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f5ff20a751bd1eb1a8ce8c000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='s)', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

3.946014416s ago: executing program 5 (id=3697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
unshare(0x100)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f5ff20a751bd1eb1a8ce8c000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='s)', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

2.598184025s ago: executing program 3 (id=3698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f4816d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2)

2.491933273s ago: executing program 2 (id=3699):
r0 = dup(0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xcd4, 0x0, 0x820, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "bf6a653b53ea129d"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "db2c8a294810af68"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2e6247d9a3f7825d"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "1b61cd24d4f61ca1"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9851e5fa421576ee"}]}, @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xdf}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3}]}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x314, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0x5, 0xce6}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x3e998000, @default, 0x2000, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @val={0x5, 0xf1, {0x2, 0x55, 0x9, "88227d18ed969b795991f8e9c44916524078ca45b5c1f1a471e97767fca206e30feb42dde6940b6993c42bb9f4b20d473c532171699b0421e4924e4af9211a4330c02dda2518cf321db8e9c33f4cb8a3f351f5440bf6a35ab8842cd9186377686c8c9426695af8b4b793c8738a67f9d66ae51afd66359c80e351c1c336004cf99ddf99deb322917c55c5ea7ba86f8f67bccedd6ff53197a62ffa8cb4dd54482cd0855f2a8d8b2e758232fadc2f0cc32d9125a1ae86ba26b39a5b2f1d3371b5f89a434b0b44e39aa725c0ab70d35f3ea67f265b3ae97bfdaf85cdf0286999565994df50de2a51ea9e3cbb8e80e2ff"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x5, 0x48}}, @void, [{0xdd, 0x93, "25ab438b406f96d99ddbc0ae543f172586265b9b75aef313e9de43ddb69f8da73d376e840daa04aa7c55dd01b0e981e4b23771593cdd7c72c9dba95860499799724a30cac9f6f74b377678aafc8f9029a9c474117afc2208471692e844717af4446af13e9f7843019e1e97389b357dcd63cc0356c0346046f4c892ab7489ae4155bc2f88e9a011783e2bc5fe231aa4fc37279f"}, {0xdd, 0xff, "d0f824930e957a98a22b36130731ad2304866646df4642bff29f6d1963323b667de394f05df5ce9bee2991cce961465698590655989b8708f4d5e0d12360c3d559583a3a4cfa0d8b7ef352f588329ca912facd06959ffbf0a7ab377dabce95a627442c4e4d2401f3bdd0e4ff1046de25bf37648555c8805335109188336609595d2d75163552a63e04613cd866d465bb64b4058d502d541e9c30ad20475ac7ea9099b6e6e9a12d69dd34f2f973c47bad461877eac03ca6ab42b8b3b57af1f8a41c0f1a6a933194bfcedce14db7c607be0819aba1cf16151e89dd6cacd67dd3c5e19ef952d62b000fc0e5c63936e871be9b96e274ace36c38c0ae8d4f5a0e22"}, {0xdd, 0x4d, "0abb818ae99ec3148c9ee46d24a90e0290cbc309222e75f77463e38c90d7b190b4dcc912401eeeff629baa88d3e9ec370a478bb824ecce60de8a672dad529b7cf3ad7a5946f7db541487504abc"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1e7, 0x7f, [@prep={0x83, 0x1f, {{}, 0xf, 0xe, @device_b, 0x9, @void, 0x5, 0xfffffff9, @broadcast, 0x80000000}}, @rann={0x7e, 0x15, {{0x0, 0x79}, 0x7, 0x1, @broadcast, 0x1, 0x400, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0x114, {0x52, 0x10, [{{}, @device_b, 0x6, @void, 0x2f}, {{0x0, 0x1}, @broadcast, 0x101, @value, 0x10}, {{0x0, 0x1}, @device_a, 0xffffffc6, @value=@broadcast, 0x42}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0xc}, {{}, @device_a, 0x101, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0x8b8, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_b, 0xf, @value=@device_b, 0x1e}, {{}, @broadcast, 0x1, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x9}, {{}, @device_a, 0x8001, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x9c, @value=@broadcast, 0xf}, {{}, @broadcast, 0x9, @void, 0xe}, {{0x0, 0x1}, @device_a, 0x4531, @value=@device_b, 0x40}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x25}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x6}]}}, @mic={0x8c, 0x18, {0x56, "f3d0202ebf26", @long="69114ee8d9aed77f481cd3a553d374e7"}}, @mesh_chsw={0x76, 0x6, {0xf, 0xfc, 0x16, 0xcb}}, @preq={0x82, 0x1a, {{0x1}, 0x7f, 0x5, 0x0, @broadcast, 0xfffff800, @void, 0x1000, 0x8}}, @perr={0x84, 0x48, {0x3, 0x4, [{{0x0, 0x1}, @device_b, 0x1, @value, 0x20}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0x10, @value, 0x9}, {{}, @broadcast, 0x2, @void, 0x17}]}}, @channel_switch={0x25, 0x3, {0x0, 0x9d}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x22b, 0x80, [@preq={0x82, 0x67, {{0x0, 0x1}, 0x60, 0x8, 0x5, @broadcast, 0x9, @void, 0x3172, 0x80, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0xff}, {{0x1}, @device_b, 0x3d}, {{0x1}, @device_b, 0xe}, {{0x1}, @broadcast, 0x7}, {{}, @device_b, 0x800}, {{0x1, 0x0, 0x1}, @broadcast, 0x100}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @link_id={0x65, 0x12}, @tim={0x5, 0x97, {0x1, 0xde, 0x8, "a7aa6334e83f8de2e63c3191e243e88bc8022bd91fb29051ebe3ced7cc69768f3ec44c7ebbed8eb4be6422811a31691579242463c7f3bb910a4c3bce15faa0af6e4ee36724bed26de0a76ee2c1e4bc496aea698946dd2db028f46e35e57b6f6a453a2c896c110afc7f154be34bbef0b5014209ce6baf0d8bbd836685dd6418cd5f22863a2ee8e49cc123a31335b5d7ae53e357b3"}}, @fast_bss_trans={0x37, 0xfb, {0x6, 0x7, "6dacdf124b2dfac7f42e334c1669fb43", "fdf10d448419e617edcbbad97442cf5d39ac3638cd4c9cb2426cc2f8f2a6175f", "694914434060b3eda192ebc3bfde88462078fe804d51e652e62d942257030c6f", [{0x2, 0x8, "5aa2d90df5e24764"}, {0x3, 0x20, "e42d5becba1d491e1fa7d9c7b6bb2d4f7a3f4f275742dded333101253489e5eb"}, {0x1, 0x17, "3c233daba267baa0fef33c436c6c2c048789285e9abc86"}, {0xfc, 0x26, "dfc25d2d45feab8c9303a37c94b996c3c4b346eafbb3600baf60be81878f5b2dc7951195ea3d"}, {0x1, 0x27, "318c95b8ab6f9d3b2d6c5900ce4375fd64561814c7fe5d2a341ddaf7d6c6fe584a62d8ca586ce4"}, {0x1, 0xd, "45efd6bb0dbeb134a1a48a0dfa"}, {0x0, 0x2, "5288"}]}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}]}, @NL80211_ATTR_BEACON_HEAD={0x4d8, 0xe, {{{}, {0x4}, @device_a, @broadcast, @from_mac=@device_b, {0x8, 0x1}}, 0x8, @default, 0x44, @void, @void, @val={0x3, 0x1, 0xb4}, @val={0x4, 0x6, {0x80, 0xa, 0x0, 0x3}}, @val={0x6, 0x2, 0x6}, @void, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x2, 0x0, 0x0, 0x48, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x5, 0x81}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x30, 0x29}}, @void, [{0xdd, 0xab, "456d8aa1fe2aae52f2085fb8fd41e7b42494788815e776a2ecaa3bd8ea9557d4aac31e761bbe9b11a0a58e6e50445a39058de8eac3fde5bc5f0ba2e3cbc59c7d4bd04e47f3808cf5cca129974594fa801418dba86a39297426eeb4719464849c5a88230a876a122af66ad960efe0939b1912324f0fdaef5a36e621208b99a39b2b0d2e5100340abd0af4ff3010c1b6ef2a90807b794704d65b2fd696b515f0cc080867ff74d7c28c6cf642"}, {0xdd, 0x7e, "9fbcf82ba4c2d8a84585cab7142848aae70dcb5af88cbfb45f60d4d158f8b7730c9bc507ba27d96e68784117e2feeebeaa2b0da4f0a03b182246cf532cdcf50846bed6418ec37413a0dc11e7b3088a41c360532da8c04270eddb5911db1595addfb790b50bc5ce6a83ae20367d5c1d5459fc7b23f1a2bd33c16e79b3a994"}, {0xdd, 0x51, "212c16a74948c8d301ce471d7ab3401a1546c33e1d8c6888f3b6f6cdc95c76dc21224f0d5552323ddf7dd74b8727462a993c74e90c9d89b828d0ec8d1ccea11a1987858d78aa5650f71567c91076a4cc3a"}, {0xdd, 0x77, "755b56f72a9fe105b0853b98d6362f93ece5035b9387d955f1c147c18b8a7248cb045b822fcced3bf5fad972f9a2c1aa7f2b713a0a0fc9d9b4a6108893ccb91e8f87907be72d90a0d4beeef3add66ffcc34b65e056c6bf2289cb7943b1612336e30b08efd0981c9fa8747a788b3bca3bda2f9584f354c2"}, {0xdd, 0xf7, "054bb4f24ef10088a2431bccfc84bb87dd6c1f65a3a9f0b2764037aa2a6ab465aba1992e0f9289a969b99e93acc35d44eb34b9ee70d176c1608681e1bee4ee279a38b3fd8f7f0b88655933257ba497a802fe5d80610dadd59393f065c95aee135c5b228eadf10b7f01842fe7dd9049c80efa4e2eb5fcfff3142ba5d30cc478b12576c4dca5fba9374668f09da4d61a54d0ded1c75602cf734012573642c4d17522b8e3a78476866c72f82834b1709a86bcc7d5a4661bb3042ed0a81e815ecf5a7e75cd81c6cb31ea3e9c3175e929c8953aaca1a6ff082d6976ebb2cd4eb12b6d618a1eba04c1fdf85522eb4ac5ef324a82696d42e19faf"}, {0xdd, 0xdb, "4b006fb254bd65468093a2cab0b2f122f1e9973e8006d7c143e09611c9a9ce280ed2e025cd666fea377a5d3069a412d7140902222128724666a0e9366cf811e1fab575abb21bef17425ddf100c8fe3a755d40e9bd9f66d590ff48b52f41e28416a1bd8832fd86b62518a29214f1dc36fec0141def09bf213ecd79a73bf7502b0a5656539ae9e220a76711f58b933b582a4587ca1e8c51f47a3db83ee43720a473638bb1f895a6fe6249506738e37fc33c94d030c21485243db33b4d9c9b9a95175ff803997e0b15603498d72b83cbd57a194ac9d2d717497fd520f"}, {0xdd, 0xa0, "3a35b1993ff9a06c617419b8b174638461a18a93d3fe36660538c14d4ef0a60053e9aac5a0b7b1790b0df4e08aada40bae3fab383b64ac2e2f5ee9413d22f522edfc31bac24be5908f6a8efcfe26985a24b5559f72b5e3bc591cc0a777217cce85689dd32b8bee9b6b23a789d7cd4174e7e27a16541d202d937a520c99ba3fa213d7fb174b33d2df42224b5de58cdb9762440d67a0940b0c458bc7f53419d4c6"}]}}]]}, 0xcd4}, 0x1, 0x0, 0x0, 0x841}, 0x20044094)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x80108906, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x2, 0x2, 0x1, r2}, 0x50)
r5 = gettid()
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r7=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0xc, 0x2, {}, 0x8000, 0x5, 0x6}}}, 0x90) (async)
capset(&(0x7f0000000040)={0x20080522, r5}, &(0x7f00000000c0)={0x0, 0x7f, 0x6, 0xffffff00, 0xcd00000, 0xe})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0x77, r4}, 0x38)
capset(&(0x7f0000000100)={0x19980330, r5}, &(0x7f0000000140)={0x5469, 0xffffff81, 0x0, 0xbeb, 0x1, 0x9})

2.407228754s ago: executing program 5 (id=3700):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0xc00, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xfffffffffffffe67}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)

2.196146123s ago: executing program 1 (id=3701):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000000700000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000001a00)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="3703c0f1a40000ff463a41c95125", 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}, 0x4c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
r6 = dup3(r5, r4, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x7)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_setup(0x5665, &(0x7f0000000300)={0x0, 0xd4ea, 0x400, 0x80000001, 0x803})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
io_setup(0x8, 0x0)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r9, &(0x7f0000000440), 0x0, 0x2a1f, 0x0, 0x3, r6}])
writev(r8, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2)
sendmsg$NFT_MSG_GETOBJ(r7, 0x0, 0x0)

2.146581044s ago: executing program 2 (id=3702):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000f53000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x64)
r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d00070100000000000000009f48469542ff5d3a13000200717472283414d6bba919736d34290000"], 0x2c}}, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6)
timer_create(0x2, 0x0, &(0x7f0000000040))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9)
ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0))
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}})

2.106612379s ago: executing program 3 (id=3703):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003cc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x292, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000280)=@can, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/241}, {&(0x7f0000000100)=""/35}, {&(0x7f0000000480)=""/87}, {&(0x7f0000000500)=""/59}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000000540)=""/248}, {&(0x7f0000000640)=""/249}, {&(0x7f0000000740)=""/123}], 0x0, &(0x7f0000000840)=""/176}, 0x6037}], 0x5, 0x1822b, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
get_robust_list(0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700))
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003300)=""/4102, 0x1006}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000580)=""/229, 0xe5}], 0x3, &(0x7f0000000740)=""/225, 0xe1}, 0x9}], 0x1, 0x42, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

570.511006ms ago: executing program 4 (id=3704):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000f53000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x64)
r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d00070100000000000000009f48469542ff5d3a13000200717472283414d6bba919736d34290000"], 0x2c}}, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6)
timer_create(0x2, 0x0, &(0x7f0000000040))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9)
ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0))
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}})

477.870086ms ago: executing program 2 (id=3705):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000001c0)={0xf7, 0x8})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0)
sendfile(r11, r11, 0x0, 0x4)
r12 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsmount(r12, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000f541b95b1a5f6ad600000000"], 0x8)

0s ago: executing program 1 (id=3706):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
unshare(0x2040400)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x648ac1, 0x85)
lseek(r1, 0x101, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x70bd26, 0xfffffffc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xe7ecab7b149847a4}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r5, 0x1, 0x70bd2a, 0x939, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x4800)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

0x4a/0xa0
[  890.288836][T17198]  fuse_iget+0x381/0x9b0
[  890.288853][T17198]  ? __pfx_fuse_iget+0x10/0x10
[  890.288863][T17198]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  890.288877][T17198]  ? __page_table_check_zero+0x406/0x530
[  890.288895][T17198]  fuse_lookup_name+0x713/0x860
[  890.288915][T17198]  ? __pfx_fuse_lookup_name+0x10/0x10
[  890.288938][T17198]  ? do_raw_spin_unlock+0x122/0x240
[  890.288952][T17198]  ? __pfx_fuse_inode_eq+0x10/0x10
[  890.288964][T17198]  ? fuse_get_dentry+0x1c6/0x470
[  890.288980][T17198]  fuse_get_dentry+0x290/0x470
[  890.288994][T17198]  ? __pfx_fuse_get_dentry+0x10/0x10
[  890.289016][T17198]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  890.289037][T17198]  fuse_fh_to_dentry+0x131/0x1d0
[  890.289050][T17198]  ? stack_depot_save_flags+0x41b/0x860
[  890.289066][T17198]  ? __pfx_fuse_fh_to_dentry+0x10/0x10
[  890.289085][T17198]  exportfs_decode_fh_raw+0x178/0x6e0
[  890.289103][T17198]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[  890.289118][T17198]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[  890.289155][T17198]  do_handle_to_path+0xa4/0x1a0
[  890.289169][T17198]  do_handle_open+0x6b4/0x8f0
[  890.289184][T17198]  ? __pfx_do_handle_open+0x10/0x10
[  890.289196][T17198]  ? ksys_write+0x22a/0x250
[  890.289212][T17198]  ? __pfx_ksys_write+0x10/0x10
[  890.289228][T17198]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  890.289244][T17198]  ? lockdep_hardirqs_on+0x9c/0x150
[  890.289261][T17198]  __do_fast_syscall_32+0xb6/0x2b0
[  890.289271][T17198]  ? lockdep_hardirqs_on+0x9c/0x150
[  890.289287][T17198]  do_fast_syscall_32+0x34/0x80
[  890.289297][T17198]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  890.289310][T17198] RIP: 0023:0xf70bd539
[  890.289320][T17198] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  890.289329][T17198] RSP: 002b:00000000f548c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000156
[  890.289342][T17198] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800021c0
[  890.289349][T17198] RDX: 00000000feffffff RSI: 0000000000000000 RDI: 0000000000000000
[  890.289356][T17198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  890.289362][T17198] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  890.289368][T17198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  890.289384][T17198]  </TASK>
[  890.659999][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  890.753451][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  890.763504][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  890.776738][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  890.785939][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.890611][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'.
[  890.909536][T17197] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  891.132512][T17191] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3418'.
[  891.168055][T17191] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3418'.
[  891.226010][    T9] usb 6-1: usb_control_msg returned -71
[  891.238730][    T9] usbtmc 6-1:16.0: can't read capabilities
[  891.274771][    T9] usb 6-1: USB disconnect, device number 38
[  891.407505][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'.
[  891.502030][T17211] FAULT_INJECTION: forcing a failure.
[  891.502030][T17211] name failslab, interval 1, probability 0, space 0, times 0
[  891.524772][T17211] CPU: 1 UID: 0 PID: 17211 Comm: syz.4.3425 Not tainted syzkaller #0 PREEMPT(full) 
[  891.524801][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  891.524814][T17211] Call Trace:
[  891.524822][T17211]  <TASK>
[  891.524832][T17211]  dump_stack_lvl+0x189/0x250
[  891.524864][T17211]  ? __pfx____ratelimit+0x10/0x10
[  891.524892][T17211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  891.524918][T17211]  ? __pfx__printk+0x10/0x10
[  891.524945][T17211]  ? __pfx___might_resched+0x10/0x10
[  891.524972][T17211]  should_fail_ex+0x414/0x560
[  891.525007][T17211]  should_failslab+0xa8/0x100
[  891.525030][T17211]  __kmalloc_noprof+0xcb/0x7f0
[  891.525060][T17211]  ? snd_pcm_hw_refine+0x967/0x1640
[  891.525091][T17211]  snd_pcm_hw_refine+0x967/0x1640
[  891.525117][T17211]  ? __kasan_kmalloc+0x93/0xb0
[  891.525147][T17211]  ? snd_pcm_oss_write+0x2fb/0x1190
[  891.525174][T17211]  ? __do_fast_syscall_32+0xb6/0x2b0
[  891.525193][T17211]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  891.525220][T17211]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  891.525290][T17211]  snd_pcm_hw_param_first+0x3e9/0xaf0
[  891.525329][T17211]  snd_pcm_hw_param_near+0x460/0x500
[  891.525356][T17211]  ? kfree+0x19a/0x6d0
[  891.525387][T17211]  ? snd_pcm_hw_param_value+0x2b9/0x510
[  891.525420][T17211]  snd_pcm_oss_change_params_locked+0x1048/0x3e40
[  891.525467][T17211]  ? __mutex_lock+0x335/0x1350
[  891.525510][T17211]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  891.525537][T17211]  ? aa_file_perm+0x44d/0x1550
[  891.525571][T17211]  ? __lock_acquire+0xab9/0xd20
[  891.525592][T17211]  ? __pfx_aa_file_perm+0x10/0x10
[  891.525615][T17211]  snd_pcm_oss_write+0x2fb/0x1190
[  891.525641][T17211]  ? get_pid_task+0x20/0x1f0
[  891.525684][T17211]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  891.525712][T17211]  ? bpf_lsm_file_permission+0x9/0x20
[  891.525732][T17211]  ? security_file_permission+0x75/0x290
[  891.525758][T17211]  ? rw_verify_area+0x255/0x4d0
[  891.525783][T17211]  ? __lock_acquire+0xab9/0xd20
[  891.525800][T17211]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  891.525828][T17211]  vfs_write+0x27e/0xb30
[  891.525866][T17211]  ? __pfx_vfs_write+0x10/0x10
[  891.525896][T17211]  ? __fget_files+0x2a/0x420
[  891.525918][T17211]  ? __fget_files+0x2a/0x420
[  891.525936][T17211]  ? __fget_files+0x3a0/0x420
[  891.525953][T17211]  ? __fget_files+0x2a/0x420
[  891.525981][T17211]  ksys_write+0x145/0x250
[  891.526006][T17211]  ? exc_page_fault+0x82/0x100
[  891.526035][T17211]  ? __pfx_ksys_write+0x10/0x10
[  891.526065][T17211]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  891.526096][T17211]  ? lockdep_hardirqs_on+0x9c/0x150
[  891.526127][T17211]  __do_fast_syscall_32+0xb6/0x2b0
[  891.526146][T17211]  ? lockdep_hardirqs_on+0x9c/0x150
[  891.526195][T17211]  do_fast_syscall_32+0x34/0x80
[  891.526215][T17211]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  891.526239][T17211] RIP: 0023:0xf7f55539
[  891.526256][T17211] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  891.526275][T17211] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  891.526295][T17211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  891.526309][T17211] RDX: 000000000000ffaa RSI: 0000000000000000 RDI: 0000000000000000
[  891.526322][T17211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  891.526334][T17211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  891.526346][T17211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  891.526383][T17211]  </TASK>
[  892.112601][T17223] FAULT_INJECTION: forcing a failure.
[  892.112601][T17223] name failslab, interval 1, probability 0, space 0, times 0
[  892.145355][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.4.3427 Not tainted syzkaller #0 PREEMPT(full) 
[  892.145381][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  892.145393][T17223] Call Trace:
[  892.145401][T17223]  <TASK>
[  892.145408][T17223]  dump_stack_lvl+0x189/0x250
[  892.145439][T17223]  ? __pfx____ratelimit+0x10/0x10
[  892.145465][T17223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  892.145489][T17223]  ? __pfx__printk+0x10/0x10
[  892.145514][T17223]  ? __pfx___might_resched+0x10/0x10
[  892.145540][T17223]  should_fail_ex+0x414/0x560
[  892.145584][T17223]  should_failslab+0xa8/0x100
[  892.145607][T17223]  kmem_cache_alloc_node_noprof+0x77/0x710
[  892.145636][T17223]  ? __alloc_skb+0x112/0x2d0
[  892.145661][T17223]  __alloc_skb+0x112/0x2d0
[  892.145685][T17223]  netlink_ack+0x146/0xa50
[  892.145702][T17223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  892.145727][T17223]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  892.145750][T17223]  ? __pfx_nl80211_post_doit+0x10/0x10
[  892.145774][T17223]  ? __asan_memcpy+0x40/0x70
[  892.145800][T17223]  ? __pfx_ref_tracker_free+0x10/0x10
[  892.145827][T17223]  netlink_rcv_skb+0x28c/0x470
[  892.145845][T17223]  ? __lock_acquire+0xab9/0xd20
[  892.145865][T17223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  892.145891][T17223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  892.145931][T17223]  ? down_read+0x1ad/0x2e0
[  892.145953][T17223]  genl_rcv+0x28/0x40
[  892.145976][T17223]  netlink_unicast+0x82f/0x9e0
[  892.146033][T17223]  ? __pfx_netlink_unicast+0x10/0x10
[  892.146065][T17223]  ? netlink_sendmsg+0x642/0xb30
[  892.146082][T17223]  ? skb_put+0x11b/0x210
[  892.146106][T17223]  netlink_sendmsg+0x805/0xb30
[  892.146156][T17223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  892.146180][T17223]  ? __import_iovec+0x5d4/0x7f0
[  892.146203][T17223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  892.146234][T17223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  892.146254][T17223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  892.146275][T17223]  __sock_sendmsg+0x21c/0x270
[  892.146305][T17223]  ____sys_sendmsg+0x505/0x830
[  892.146332][T17223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  892.146372][T17223]  ___sys_sendmsg+0x21f/0x2a0
[  892.146397][T17223]  ? __pfx____sys_sendmsg+0x10/0x10
[  892.146456][T17223]  ? __fget_files+0x2a/0x420
[  892.146475][T17223]  ? __fget_files+0x3a0/0x420
[  892.146504][T17223]  __sys_sendmsg+0x164/0x220
[  892.146529][T17223]  ? __pfx___sys_sendmsg+0x10/0x10
[  892.146566][T17223]  ? __pfx_ksys_write+0x10/0x10
[  892.146597][T17223]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  892.146628][T17223]  ? lockdep_hardirqs_on+0x9c/0x150
[  892.146660][T17223]  __do_fast_syscall_32+0xb6/0x2b0
[  892.146680][T17223]  ? lockdep_hardirqs_on+0x9c/0x150
[  892.146712][T17223]  do_fast_syscall_32+0x34/0x80
[  892.146731][T17223]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  892.146754][T17223] RIP: 0023:0xf7f55539
[  892.146770][T17223] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  892.146788][T17223] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  892.146809][T17223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080
[  892.146822][T17223] RDX: 0000000000004814 RSI: 0000000000000000 RDI: 0000000000000000
[  892.146833][T17223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  892.146844][T17223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  892.146856][T17223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  892.146886][T17223]  </TASK>
[  892.518126][T17222] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  892.694057][    T9] usb 2-1: USB disconnect, device number 22
[  892.964515][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.027198][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.168853][T17238] fuse: Unknown parameter 'ÿÿ00000000000000000000003'
[  893.198288][  T983] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  893.402423][  T983] usb 6-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32
[  893.412550][  T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.421160][  T983] usb 6-1: Product: syz
[  893.425429][  T983] usb 6-1: Manufacturer: syz
[  893.432438][  T983] usb 6-1: SerialNumber: syz
[  893.458075][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  893.468658][  T983] usb 6-1: config 0 descriptor??
[  893.484383][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.487285][  T983] pwc: Logitech QuickCam Zoom (new model) USB webcam detected.
[  893.571087][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.690815][  T983] pwc: Failed to set LED on/off time (-71)
[  893.721330][  T983] pwc: send_video_command error -71
[  893.726742][  T983] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  893.736413][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  893.753749][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  893.756144][  T983] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  893.777931][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  893.793497][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  893.803360][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.812491][    T9] usb 2-1: Product: syz
[  893.816804][    T9] usb 2-1: Manufacturer: syz
[  893.821539][    T9] usb 2-1: SerialNumber: syz
[  893.839039][    T9] usb 2-1: config 0 descriptor??
[  893.853170][T17242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  893.864077][T17242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  893.871781][  T983] usb 6-1: USB disconnect, device number 39
[  893.898965][    T9] usb 2-1: ucan: probing device on interface #0
[  894.312934][    T9] usb 2-1: ucan: device reported invalid device info
[  894.320906][    T9] usb 2-1: ucan: probe failed; try to update the device firmware
[  894.468684][T17262] kvm: emulating exchange as write
[  894.484169][T17262] FAULT_INJECTION: forcing a failure.
[  894.484169][T17262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  894.534406][T17262] CPU: 0 UID: 0 PID: 17262 Comm: syz.5.3439 Not tainted syzkaller #0 PREEMPT(full) 
[  894.534435][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  894.534447][T17262] Call Trace:
[  894.534456][T17262]  <TASK>
[  894.534465][T17262]  dump_stack_lvl+0x189/0x250
[  894.534497][T17262]  ? __pfx____ratelimit+0x10/0x10
[  894.534528][T17262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  894.534556][T17262]  ? __pfx__printk+0x10/0x10
[  894.534587][T17262]  should_fail_ex+0x414/0x560
[  894.534621][T17262]  _copy_to_user+0x31/0xb0
[  894.534648][T17262]  simple_read_from_buffer+0xe1/0x170
[  894.534684][T17262]  proc_fail_nth_read+0x1b3/0x220
[  894.534713][T17262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  894.534742][T17262]  ? rw_verify_area+0x2a6/0x4d0
[  894.534769][T17262]  ? __lock_acquire+0xab9/0xd20
[  894.534783][T17262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  894.534808][T17262]  vfs_read+0x200/0xa30
[  894.534833][T17262]  ? fdget_pos+0x247/0x320
[  894.534856][T17262]  ? __pfx___mutex_lock+0x10/0x10
[  894.534886][T17262]  ? __pfx_vfs_read+0x10/0x10
[  894.534914][T17262]  ? __fget_files+0x2a/0x420
[  894.534936][T17262]  ? __fget_files+0x3a0/0x420
[  894.534954][T17262]  ? __fget_files+0x2a/0x420
[  894.534981][T17262]  ksys_read+0x145/0x250
[  894.535007][T17262]  ? exc_page_fault+0x82/0x100
[  894.535035][T17262]  ? __pfx_ksys_read+0x10/0x10
[  894.535063][T17262]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  894.535093][T17262]  ? lockdep_hardirqs_on+0x9c/0x150
[  894.535122][T17262]  __do_fast_syscall_32+0xb6/0x2b0
[  894.535141][T17262]  ? lockdep_hardirqs_on+0x9c/0x150
[  894.535171][T17262]  do_fast_syscall_32+0x34/0x80
[  894.535189][T17262]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  894.535220][T17262] RIP: 0023:0xf7fc1539
[  894.535238][T17262] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  894.535255][T17262] RSP: 002b:00000000f54b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  894.535276][T17262] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54b6620
[  894.535290][T17262] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000
[  894.535303][T17262] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  894.535315][T17262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  894.535326][T17262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  894.535357][T17262]  </TASK>
[  894.913386][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  894.913404][   T30] audit: type=1326 audit(1763639233.301:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  894.942851][   T30] audit: type=1326 audit(1763639233.301:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  894.966987][   T30] audit: type=1326 audit(1763639233.301:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  894.991035][   T30] audit: type=1326 audit(1763639233.301:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.014101][   T30] audit: type=1326 audit(1763639233.301:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.037952][   T30] audit: type=1326 audit(1763639233.301:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.076740][   T30] audit: type=1326 audit(1763639233.301:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=0 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.098706][    C1] vkms_vblank_simulate: vblank timer overrun
[  895.115524][   T30] audit: type=1326 audit(1763639233.311:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.144251][   T30] audit: type=1326 audit(1763639233.311:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.186960][   T30] audit: type=1326 audit(1763639233.311:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  895.328449][T17281] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  895.335012][T17281] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  895.345267][T17281] vhci_hcd vhci_hcd.0: Device attached
[  895.348988][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  895.477935][T14275] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  895.507969][    T9] usb 3-1: Using ep0 maxpacket: 16
[  895.514920][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  895.530419][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  895.539829][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.550795][    T9] usb 3-1: Product: syz
[  895.554982][    T9] usb 3-1: Manufacturer: syz
[  895.560056][    T9] usb 3-1: SerialNumber: syz
[  895.566396][    T9] usb 3-1: config 0 descriptor??
[  895.571512][ T5911] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  895.579156][ T5932] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  895.628349][T14275] usb 4-1: Using ep0 maxpacket: 16
[  895.635063][T14275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.646507][T14275] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  895.656403][T14275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.667212][T14275] usb 4-1: config 0 descriptor??
[  895.737884][ T5911] usb 6-1: Using ep0 maxpacket: 32
[  895.746429][ T5911] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  895.755665][ T5911] usb 6-1: config 0 has no interface number 0
[  895.762205][ T5911] usb 6-1: config 0 interface 184 has no altsetting 0
[  895.771207][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  895.781915][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.790084][ T5911] usb 6-1: Product: syz
[  895.794295][ T5911] usb 6-1: Manufacturer: syz
[  895.799028][ T5911] usb 6-1: SerialNumber: syz
[  895.805948][ T5911] usb 6-1: config 0 descriptor??
[  895.816356][ T5911] smsc75xx v1.0.0
[  896.088070][T14275] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  896.171642][T17282] vhci_hcd: connection reset by peer
[  896.193879][T13872] vhci_hcd: stop threads
[  896.198603][T13872] vhci_hcd: release socket
[  896.203212][T13872] vhci_hcd: disconnect device
[  896.217572][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  896.229473][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  896.239190][ T5911] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  896.250092][  T983] usb 2-1: USB disconnect, device number 23
[  896.250496][ T5911] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  896.298472][ T5911] usb 4-1: USB disconnect, device number 24
[  896.740055][  T983] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  896.898583][  T983] usb 2-1: Using ep0 maxpacket: 32
[  896.920042][  T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.939468][  T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.968022][  T983] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  897.002109][  T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.026470][  T983] usb 2-1: config 0 descriptor??
[  897.180906][T17302] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3451'.
[  897.188822][  T983] hub 2-1:0.0: USB hub found
[  897.230464][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'.
[  897.411468][  T983] hub 2-1:0.0: 1 port detected
[  897.777962][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  897.927888][    T9] usb 5-1: Using ep0 maxpacket: 32
[  897.939487][    T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  897.949269][    T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  897.958003][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  897.967165][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  897.976963][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  897.986830][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  897.999947][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  898.021382][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.038503][    T9] usb 5-1: config 0 descriptor??
[  898.064489][T17316] binder: 17312:17316 ioctl c0306201 0 returned -14
[  898.074985][T17316] binder: 17312:17316 ioctl c0306201 0 returned -14
[  898.190869][T14275] usb 3-1: USB disconnect, device number 33
[  898.263647][    T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  898.471969][T14275] usb 5-1: USB disconnect, device number 26
[  898.486706][T14275] usblp0: removed
[  898.681450][T17324] binder: 17321:17324 ioctl c0306201 0 returned -14
[  898.729728][T17324] binder: 17321:17324 ioctl c0306201 0 returned -14
[  898.773619][   T24] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  898.846516][T14275] usb 6-1: USB disconnect, device number 40
[  899.628170][ T5911] usb 2-1: USB disconnect, device number 24
[  900.295832][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  900.295845][   T30] audit: type=1326 audit(1763639238.681:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.295887][   T30] audit: type=1326 audit(1763639238.681:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.295910][   T30] audit: type=1326 audit(1763639238.681:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.295934][   T30] audit: type=1326 audit(1763639238.681:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.295956][   T30] audit: type=1326 audit(1763639238.681:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=0 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.301472][   T30] audit: type=1326 audit(1763639238.691:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.301731][   T30] audit: type=1326 audit(1763639238.691:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.309565][   T30] audit: type=1326 audit(1763639238.701:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.310802][   T30] audit: type=1326 audit(1763639238.701:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.312034][   T30] audit: type=1326 audit(1763639238.701:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  900.618510][T17343] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  900.625870][T17343] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  900.636292][T17343] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  900.643805][T17343] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  900.652445][T17343] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  900.660156][T17343] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  900.666200][T17343] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  900.675995][T17343] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  900.685063][T17343] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  900.693225][T17343] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  900.702120][T17343] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  900.710434][T17343] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  900.716573][T17343] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  900.723957][T17343] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  900.730598][ T5932] vhci_hcd: vhci_device speed not set
[  900.931483][T17364] FAULT_INJECTION: forcing a failure.
[  900.931483][T17364] name failslab, interval 1, probability 0, space 0, times 0
[  900.953953][T17364] CPU: 1 UID: 0 PID: 17364 Comm: syz.2.3468 Not tainted syzkaller #0 PREEMPT(full) 
[  900.953980][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  900.953993][T17364] Call Trace:
[  900.954001][T17364]  <TASK>
[  900.954009][T17364]  dump_stack_lvl+0x189/0x250
[  900.954039][T17364]  ? __pfx____ratelimit+0x10/0x10
[  900.954066][T17364]  ? __pfx_dump_stack_lvl+0x10/0x10
[  900.954088][T17364]  ? __pfx__printk+0x10/0x10
[  900.954111][T17364]  ? __lock_acquire+0xab9/0xd20
[  900.954138][T17364]  should_fail_ex+0x414/0x560
[  900.954173][T17364]  should_failslab+0xa8/0x100
[  900.954196][T17364]  kmem_cache_alloc_noprof+0x74/0x6e0
[  900.954224][T17364]  ? skb_clone+0x212/0x3a0
[  900.954252][T17364]  skb_clone+0x212/0x3a0
[  900.954278][T17364]  __netlink_deliver_tap+0x404/0x850
[  900.954311][T17364]  ? netlink_deliver_tap+0x2e/0x1b0
[  900.954334][T17364]  netlink_deliver_tap+0x19c/0x1b0
[  900.954356][T17364]  netlink_unicast+0x7fa/0x9e0
[  900.954393][T17364]  ? __pfx_netlink_unicast+0x10/0x10
[  900.954424][T17364]  ? netlink_sendmsg+0x642/0xb30
[  900.954442][T17364]  ? skb_put+0x11b/0x210
[  900.954466][T17364]  netlink_sendmsg+0x805/0xb30
[  900.954496][T17364]  ? __pfx_netlink_sendmsg+0x10/0x10
[  900.954517][T17364]  ? __import_iovec+0x5d4/0x7f0
[  900.954539][T17364]  ? aa_sock_msg_perm+0xf1/0x1d0
[  900.954569][T17364]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  900.954589][T17364]  ? __pfx_netlink_sendmsg+0x10/0x10
[  900.954611][T17364]  __sock_sendmsg+0x21c/0x270
[  900.954642][T17364]  ____sys_sendmsg+0x505/0x830
[  900.954669][T17364]  ? __pfx_____sys_sendmsg+0x10/0x10
[  900.954707][T17364]  ___sys_sendmsg+0x21f/0x2a0
[  900.954731][T17364]  ? __pfx____sys_sendmsg+0x10/0x10
[  900.954791][T17364]  ? __fget_files+0x2a/0x420
[  900.954809][T17364]  ? __fget_files+0x3a0/0x420
[  900.954837][T17364]  __sys_sendmsg+0x164/0x220
[  900.954861][T17364]  ? __pfx___sys_sendmsg+0x10/0x10
[  900.954892][T17364]  ? __pfx_ksys_write+0x10/0x10
[  900.954930][T17364]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  900.954962][T17364]  ? lockdep_hardirqs_on+0x9c/0x150
[  900.954994][T17364]  __do_fast_syscall_32+0xb6/0x2b0
[  900.955013][T17364]  ? lockdep_hardirqs_on+0x9c/0x150
[  900.955044][T17364]  do_fast_syscall_32+0x34/0x80
[  900.955063][T17364]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  900.955086][T17364] RIP: 0023:0xf70bd539
[  900.955104][T17364] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  900.955122][T17364] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  900.955142][T17364] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  900.955154][T17364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  900.955163][T17364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  900.955174][T17364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  900.955184][T17364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  900.955214][T17364]  </TASK>
[  901.252004][ T5911] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  901.327479][T17370] FAULT_INJECTION: forcing a failure.
[  901.327479][T17370] name failslab, interval 1, probability 0, space 0, times 0
[  901.342542][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.5.3470 Not tainted syzkaller #0 PREEMPT(full) 
[  901.342570][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  901.342583][T17370] Call Trace:
[  901.342591][T17370]  <TASK>
[  901.342600][T17370]  dump_stack_lvl+0x189/0x250
[  901.342633][T17370]  ? __pfx____ratelimit+0x10/0x10
[  901.342661][T17370]  ? __pfx_dump_stack_lvl+0x10/0x10
[  901.342688][T17370]  ? __pfx__printk+0x10/0x10
[  901.342705][T17370]  ? __sock_sendmsg+0x21c/0x270
[  901.342733][T17370]  ? __se_sys_splice+0x2e1/0x460
[  901.342752][T17370]  ? do_fast_syscall_32+0x34/0x80
[  901.342780][T17370]  should_fail_ex+0x414/0x560
[  901.342816][T17370]  should_failslab+0xa8/0x100
[  901.342838][T17370]  kmem_cache_alloc_noprof+0x74/0x6e0
[  901.342867][T17370]  ? skb_clone+0x212/0x3a0
[  901.342901][T17370]  skb_clone+0x212/0x3a0
[  901.342928][T17370]  __netlink_deliver_tap+0x404/0x850
[  901.342961][T17370]  ? netlink_deliver_tap+0x2e/0x1b0
[  901.342983][T17370]  netlink_deliver_tap+0x19c/0x1b0
[  901.343010][T17370]  netlink_sendskb+0x68/0x140
[  901.343041][T17370]  netlink_unicast+0x397/0x9e0
[  901.343067][T17370]  ? __asan_memcpy+0x40/0x70
[  901.343103][T17370]  ? __pfx_netlink_unicast+0x10/0x10
[  901.343143][T17370]  netlink_rcv_skb+0x28c/0x470
[  901.343164][T17370]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  901.343197][T17370]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  901.343230][T17370]  ? netlink_deliver_tap+0x2e/0x1b0
[  901.343260][T17370]  netlink_unicast+0x82f/0x9e0
[  901.343298][T17370]  ? __pfx_netlink_unicast+0x10/0x10
[  901.343330][T17370]  ? netlink_sendmsg+0x642/0xb30
[  901.343349][T17370]  ? skb_put+0x11b/0x210
[  901.343373][T17370]  netlink_sendmsg+0x805/0xb30
[  901.343405][T17370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  901.343430][T17370]  ? aa_sock_msg_perm+0xf1/0x1d0
[  901.343462][T17370]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  901.343482][T17370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  901.343505][T17370]  __sock_sendmsg+0x21c/0x270
[  901.343535][T17370]  sock_sendmsg+0x158/0x230
[  901.343569][T17370]  ? __pfx_sock_sendmsg+0x10/0x10
[  901.343610][T17370]  ? __asan_memset+0x22/0x50
[  901.343635][T17370]  ? iov_iter_bvec+0xb8/0x180
[  901.343663][T17370]  splice_to_socket+0x8f5/0xf00
[  901.343717][T17370]  ? __pfx_splice_to_socket+0x10/0x10
[  901.343775][T17370]  ? get_pid_task+0x20/0x1f0
[  901.343818][T17370]  ? bpf_lsm_file_permission+0x9/0x20
[  901.343840][T17370]  ? security_file_permission+0x75/0x290
[  901.343866][T17370]  ? rw_verify_area+0x255/0x4d0
[  901.343901][T17370]  ? __pfx_splice_to_socket+0x10/0x10
[  901.343930][T17370]  do_splice+0xc79/0x1660
[  901.343978][T17370]  ? __pfx_do_splice+0x10/0x10
[  901.344008][T17370]  __se_sys_splice+0x2e1/0x460
[  901.344035][T17370]  ? __pfx___se_sys_splice+0x10/0x10
[  901.344058][T17370]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  901.344089][T17370]  ? __ia32_sys_splice+0x21/0xf0
[  901.344113][T17370]  __do_fast_syscall_32+0xb6/0x2b0
[  901.344132][T17370]  ? lockdep_hardirqs_on+0x9c/0x150
[  901.344166][T17370]  do_fast_syscall_32+0x34/0x80
[  901.344185][T17370]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  901.344209][T17370] RIP: 0023:0xf7fc1539
[  901.344228][T17370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  901.344247][T17370] RSP: 002b:00000000f549555c EFLAGS: 00000206 ORIG_RAX: 0000000000000139
[  901.344269][T17370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  901.344283][T17370] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000008001
[  901.344295][T17370] RBP: 000000000000000d R08: 0000000000000000 R09: 0000000000000000
[  901.344308][T17370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  901.344320][T17370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  901.344352][T17370]  </TASK>
[  901.751186][T17374] FAULT_INJECTION: forcing a failure.
[  901.751186][T17374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.764663][T17374] CPU: 1 UID: 0 PID: 17374 Comm: syz.2.3471 Not tainted syzkaller #0 PREEMPT(full) 
[  901.764690][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  901.764703][T17374] Call Trace:
[  901.764712][T17374]  <TASK>
[  901.764721][T17374]  dump_stack_lvl+0x189/0x250
[  901.764754][T17374]  ? __pfx____ratelimit+0x10/0x10
[  901.764782][T17374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  901.764808][T17374]  ? __pfx__printk+0x10/0x10
[  901.764840][T17374]  should_fail_ex+0x414/0x560
[  901.764876][T17374]  _copy_to_user+0x31/0xb0
[  901.764903][T17374]  video_usercopy+0xe32/0x1450
[  901.764938][T17374]  ? __pfx_subdev_do_ioctl_lock+0x10/0x10
[  901.764967][T17374]  ? __pfx_video_usercopy+0x10/0x10
[  901.765008][T17374]  ? __fget_files+0x2a/0x420
[  901.765031][T17374]  v4l2_ioctl+0x18d/0x1e0
[  901.765058][T17374]  v4l2_compat_ioctl32+0x1d7/0x260
[  901.765091][T17374]  __ia32_compat_sys_ioctl+0x543/0x840
[  901.765121][T17374]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  901.765148][T17374]  ? __fget_files+0x3a0/0x420
[  901.765174][T17374]  ? fput+0xa0/0xd0
[  901.765197][T17374]  ? ksys_write+0x22a/0x250
[  901.765223][T17374]  ? exc_page_fault+0x82/0x100
[  901.765252][T17374]  ? __pfx_ksys_write+0x10/0x10
[  901.765282][T17374]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  901.765314][T17374]  ? lockdep_hardirqs_on+0x9c/0x150
[  901.765345][T17374]  __do_fast_syscall_32+0xb6/0x2b0
[  901.765365][T17374]  ? lockdep_hardirqs_on+0x9c/0x150
[  901.765397][T17374]  do_fast_syscall_32+0x34/0x80
[  901.765416][T17374]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  901.765460][T17374] RIP: 0023:0xf70bd539
[  901.765477][T17374] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  901.765496][T17374] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  901.765517][T17374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0205647
[  901.765531][T17374] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  901.765544][T17374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  901.765557][T17374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  901.765569][T17374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  901.765606][T17374]  </TASK>
[  901.768058][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  902.103430][T13656] Bluetooth: hci2: command 0x0406 tx timeout
[  902.157088][T17382] fuse: Bad value for 'rootmode'
[  902.258850][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  902.282791][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  902.292223][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.308378][ T5911] usb 2-1: Product: syz
[  902.312583][ T5911] usb 2-1: Manufacturer: syz
[  902.319790][ T5911] usb 2-1: SerialNumber: syz
[  902.332237][ T5911] usb 2-1: config 0 descriptor??
[  902.477891][   T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  902.569718][  T812] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  902.660265][T13656] Bluetooth: hci4: command 0x0c1a tx timeout
[  902.726684][   T24] usb 3-1: Using ep0 maxpacket: 8
[  902.743677][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.761634][  T812] usb 5-1: device descriptor read/64, error -71
[  902.770248][T13656] Bluetooth: hci0: command 0x0c1a tx timeout
[  902.770558][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  902.776518][T13656] Bluetooth: hci1: command 0x0c1a tx timeout
[  902.810650][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  902.860476][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  902.928316][   T24] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  902.950360][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.967168][T17401] loop2: detected capacity change from 0 to 7
[  902.969827][   T24] usb 3-1: Product: syz
[  902.978336][T17401] Dev loop2: unable to read RDB block 7
[  902.979951][   T24] usb 3-1: Manufacturer: syz
[  902.983919][T17401]  loop2: AHDI p1 p2 p3
[  902.995062][T17401] loop2: partition table partially beyond EOD, truncated
[  902.998270][   T24] usb 3-1: SerialNumber: syz
[  903.002958][T17401] loop2: p1 start 1818582900 is beyond EOD, truncated
[  903.014247][T17401] loop2: p3 start 335544320 is beyond EOD, truncated
[  903.016700][   T24] usb 3-1: config 0 descriptor??
[  903.051566][  T812] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  903.074968][   T24] radioshark 3-1:0.0: Invalid radioSHARK device
[  903.087913][   T24] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[  903.110768][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  903.207914][  T812] usb 5-1: device descriptor read/64, error -71
[  903.318260][  T812] usb usb5-port1: attempt power cycle
[  903.327920][ T5911] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  903.487938][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  903.495025][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short
[  903.504316][ T5911] usb 4-1: config 178 has an invalid interface number: 24 but max is 1
[  903.513195][ T5911] usb 4-1: config 178 has an invalid descriptor of length 223, skipping remainder of the config
[  903.527277][ T5911] usb 4-1: config 178 has 1 interface, different from the descriptor's value: 2
[  903.537149][ T5911] usb 4-1: config 178 has no interface number 0
[  903.543558][ T5911] usb 4-1: config 178 interface 24 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  903.554902][ T5911] usb 4-1: config 178 interface 24 has no altsetting 0
[  903.563992][ T5911] usb 4-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=24.5c
[  903.573172][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.581376][ T5911] usb 4-1: Product: syz
[  903.585592][ T5911] usb 4-1: Manufacturer: syz
[  903.590327][ T5911] usb 4-1: SerialNumber: syz
[  903.687889][  T812] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  903.708781][  T812] usb 5-1: device descriptor read/8, error -71
[  903.757941][   T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  903.907896][   T24] usb 6-1: Using ep0 maxpacket: 32
[  903.914730][   T24] usb 6-1: config 0 has an invalid interface number: 179 but max is 0
[  903.923286][   T24] usb 6-1: config 0 has no interface number 0
[  903.929481][   T24] usb 6-1: config 0 interface 179 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  903.940765][   T24] usb 6-1: config 0 interface 179 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  903.953559][  T812] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  903.962085][   T24] usb 6-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  903.973800][   T24] usb 6-1: New USB device found, idVendor=0c26, idProduct=000a, bcdDevice=cd.76
[  903.983111][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.991875][  T812] usb 5-1: device descriptor read/8, error -71
[  904.000555][   T24] usb 6-1: config 0 descriptor??
[  904.119740][  T812] usb usb5-port1: unable to enumerate USB device
[  904.177973][T17396] Bluetooth: hci2: command 0x0406 tx timeout
[  904.212262][   T24] usb 6-1: string descriptor 0 read error: -71
[  904.222516][   T24] ftdi_sio 6-1:0.179: FTDI USB Serial Device converter detected
[  904.232996][   T24] ftdi_sio ttyUSB0: unknown device type: 0xcd76
[  904.246082][   T24] usb 6-1: USB disconnect, device number 41
[  904.258520][   T24] ftdi_sio 6-1:0.179: device disconnected
[  904.307913][  T812] usb 2-1: USB disconnect, device number 25
[  904.738636][T17396] Bluetooth: hci4: command 0x0c1a tx timeout
[  904.827945][T17396] Bluetooth: hci1: command 0x0c1a tx timeout
[  904.834110][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout
[  904.838075][T13656] Bluetooth: hci0: command 0x0c1a tx timeout
[  905.119336][ T6284] usb 3-1: USB disconnect, device number 34
[  905.545427][ T5911] rndis_host 4-1:178.24: skipping garbage
[  905.551468][ T5911] usb 4-1: bad CDC descriptors
[  905.556677][  T812] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  905.558035][ T5911] cdc_acm 4-1:178.24: skipping garbage
[  905.586134][T17421] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3484'.
[  905.607667][ T5911] usb 4-1: USB disconnect, device number 25
[  905.720782][  T812] usb 6-1: Using ep0 maxpacket: 16
[  905.802622][  T812] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  905.821695][  T812] usb 6-1: config 1 has an invalid interface descriptor of length 3, skipping
[  905.837906][  T812] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  905.857396][  T812] usb 6-1: config 1 has no interface number 1
[  905.884284][  T812] usb 6-1: config 1 interface 2 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  905.917743][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  905.972666][  T812] usb 6-1: config 1 interface 2 has no altsetting 2
[  906.005570][  T812] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  906.023221][  T812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.031438][  T812] usb 6-1: Product: syz
[  906.035733][  T812] usb 6-1: Manufacturer: syz
[  906.040995][  T812] usb 6-1: SerialNumber: syz
[  906.137926][   T24] usb 5-1: Using ep0 maxpacket: 8
[  906.147922][ T5911] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  906.147956][   T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  906.163917][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  906.173772][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  906.250171][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  906.270006][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  906.296198][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  906.319921][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.374521][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  906.392705][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.428046][ T5911] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  906.442713][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.463105][ T5911] usb 4-1: config 0 descriptor??
[  906.687005][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  906.692747][   T24] usbtmc 5-1:16.0: can't read capabilities
[  906.817922][T17396] Bluetooth: hci4: command 0x0c1a tx timeout
[  906.928846][T17396] Bluetooth: hci3: command 0x0c1a tx timeout
[  906.929285][T13656] Bluetooth: hci1: command 0x0c1a tx timeout
[  906.935058][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout
[  906.956231][ T5911] savu 0003:1E7D:2D5A.001F: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  906.980596][T17421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3484'.
[  906.989721][T17421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3484'.
[  907.168659][T17421] usbtmc 5-1:16.0: usb_control_msg returned -71
[  907.177384][ T5911] usb 5-1: USB disconnect, device number 31
[  907.509817][ T5911] usb 4-1: USB disconnect, device number 26
[  908.116663][  T812] usb 6-1: USB disconnect, device number 42
[  908.200171][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'.
[  908.216969][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  908.827971][T17449] binder: 17445:17449 ioctl c0306201 80000680 returned -14
[  909.818017][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  909.938607][T17462] misc userio: Begin command sent, but we're already running
[  910.010302][ T5911] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  910.020339][ T5911] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  910.113343][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  910.138238][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  910.171456][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  910.249784][ T5911] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  910.296219][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  910.327873][ T5911] usb 5-1: Product: syz
[  910.332080][ T5911] usb 5-1: Manufacturer: syz
[  910.376842][ T5911] cdc_wdm 5-1:1.0: skipping garbage
[  910.397101][ T5911] cdc_wdm 5-1:1.0: skipping garbage
[  910.425325][ T5911] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  910.437849][ T5911] cdc_wdm 5-1:1.0: Unknown control protocol
[  910.577527][T17473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3501'.
[  911.467954][ T6284] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  911.524713][T17488] bond1 (unregistering): Released all slaves
[  911.645354][ T6284] usb 3-1: config 5 has an invalid interface number: 10 but max is 3
[  911.661761][ T6284] usb 3-1: config 5 has an invalid interface number: 88 but max is 3
[  911.687950][ T6284] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  911.716927][ T6284] usb 3-1: config 5 has an invalid interface number: 186 but max is 3
[  911.731227][ T6284] usb 3-1: config 5 has an invalid descriptor of length 101, skipping remainder of the config
[  911.749066][ T6284] usb 3-1: config 5 has 3 interfaces, different from the descriptor's value: 4
[  911.760229][ T6284] usb 3-1: config 5 has no interface number 0
[  911.766328][ T6284] usb 3-1: config 5 has no interface number 1
[  911.785212][ T6284] usb 3-1: config 5 has no interface number 2
[  911.805983][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  911.828605][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  911.846549][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  911.858493][ T6284] usb 3-1: config 5 interface 10 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  911.870966][ T6284] usb 3-1: config 5 interface 10 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  911.887740][T17497] fuse: Bad value for 'fd'
[  911.915450][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  911.933777][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  912.001851][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  912.012892][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  912.029974][ T6284] usb 3-1: config 5 interface 10 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  912.043756][ T6284] usb 3-1: config 5 interface 10 altsetting 2 endpoint 0x3 has invalid maxpacket 2047, setting to 64
[  912.054949][ T6284] usb 3-1: config 5 interface 88 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  912.126062][ T6284] usb 3-1: too many endpoints for config 5 interface 186 altsetting 98: 233, using maximum allowed: 30
[  912.143016][ T6284] usb 3-1: config 5 interface 186 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 233
[  912.157947][  T812] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  912.182826][ T6284] usb 3-1: config 5 interface 10 has no altsetting 0
[  912.189621][ T6284] usb 3-1: config 5 interface 88 has no altsetting 0
[  912.201280][ T6284] usb 3-1: config 5 interface 186 has no altsetting 0
[  912.216943][ T6284] usb 3-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=51.03
[  912.242863][ T6284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.291279][ T6284] usb 3-1: Product: syz
[  912.300935][ T6284] usb 3-1: Manufacturer: syz
[  912.312716][ T6284] usb 3-1: SerialNumber: syz
[  912.329583][  T812] usb 4-1: config 0 has an invalid interface number: 154 but max is 0
[  912.523489][  T812] usb 4-1: config 0 has no interface number 0
[  912.530954][  T983] usb 5-1: USB disconnect, device number 32
[  912.571538][  T812] usb 4-1: New USB device found, idVendor=19d2, idProduct=1589, bcdDevice=8f.60
[  912.609838][  T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.627111][ T6284] usb 3-1: USB disconnect, device number 35
[  912.912523][  T812] usb 4-1: config 0 descriptor??
[  912.940095][  T812] option 4-1:0.154: GSM modem (1-port) converter detected
[  913.134411][ T5932] usb 4-1: USB disconnect, device number 27
[  913.144496][ T5932] option 4-1:0.154: device disconnected
[  913.502103][T17519] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3513'.
[  913.767902][  T812] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  913.927926][  T812] usb 3-1: Using ep0 maxpacket: 8
[  913.938786][  T812] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  913.948151][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  913.956133][  T812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  913.982060][  T812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  914.042645][  T812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  914.057449][  T812] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  914.074769][  T812] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  914.106396][  T812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.151589][ T5932] usb 5-1: Using ep0 maxpacket: 8
[  914.186878][ T5932] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  914.245755][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.270547][ T5932] usb 5-1: Product: syz
[  914.274762][ T5932] usb 5-1: Manufacturer: syz
[  914.279521][ T5911] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  914.296216][T17535] FAULT_INJECTION: forcing a failure.
[  914.296216][T17535] name failslab, interval 1, probability 0, space 0, times 0
[  914.321184][ T5932] usb 5-1: SerialNumber: syz
[  914.327930][T17535] CPU: 1 UID: 0 PID: 17535 Comm: syz.5.3519 Not tainted syzkaller #0 PREEMPT(full) 
[  914.327951][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  914.327958][T17535] Call Trace:
[  914.327963][T17535]  <TASK>
[  914.327974][T17535]  dump_stack_lvl+0x189/0x250
[  914.327994][T17535]  ? __pfx____ratelimit+0x10/0x10
[  914.328010][T17535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  914.328024][T17535]  ? __pfx__printk+0x10/0x10
[  914.328038][T17535]  ? __pfx___might_resched+0x10/0x10
[  914.328049][T17535]  ? fs_reclaim_acquire+0x7d/0x100
[  914.328069][T17535]  should_fail_ex+0x414/0x560
[  914.328088][T17535]  should_failslab+0xa8/0x100
[  914.328100][T17535]  __kmalloc_cache_noprof+0x6f/0x6f0
[  914.328115][T17535]  ? sctp_association_new+0x89/0x25f0
[  914.328131][T17535]  sctp_association_new+0x89/0x25f0
[  914.328144][T17535]  ? sctp_has_association+0x1cd/0x1f0
[  914.328157][T17535]  ? sctp_has_association+0x2f/0x1f0
[  914.328173][T17535]  sctp_connect_new_asoc+0x2c5/0x690
[  914.328187][T17535]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  914.328199][T17535]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  914.328210][T17535]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  914.328219][T17535]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  914.328231][T17535]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  914.328242][T17535]  ? security_sctp_bind_connect+0x7e/0x2e0
[  914.328257][T17535]  sctp_sendmsg+0x155c/0x2810
[  914.328275][T17535]  ? __pfx_sctp_sendmsg+0x10/0x10
[  914.328287][T17535]  ? aa_sk_perm+0x81e/0x950
[  914.328301][T17535]  ? _copy_from_user+0x94/0xb0
[  914.328316][T17535]  ? __pfx_aa_sk_perm+0x10/0x10
[  914.328332][T17535]  ? sock_rps_record_flow+0x19/0x410
[  914.328344][T17535]  ? inet_sendmsg+0x2f4/0x370
[  914.328354][T17535]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  914.328366][T17535]  __sock_sendmsg+0x19c/0x270
[  914.328383][T17535]  ____sys_sendmsg+0x505/0x830
[  914.328398][T17535]  ? __pfx_____sys_sendmsg+0x10/0x10
[  914.328418][T17535]  ___sys_sendmsg+0x21f/0x2a0
[  914.328431][T17535]  ? __pfx____sys_sendmsg+0x10/0x10
[  914.328463][T17535]  ? __fget_files+0x2a/0x420
[  914.328473][T17535]  ? __fget_files+0x3a0/0x420
[  914.328489][T17535]  __sys_sendmsg+0x164/0x220
[  914.328501][T17535]  ? __pfx___sys_sendmsg+0x10/0x10
[  914.328518][T17535]  ? __pfx_ksys_write+0x10/0x10
[  914.328534][T17535]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  914.328551][T17535]  ? lockdep_hardirqs_on+0x9c/0x150
[  914.328567][T17535]  __do_fast_syscall_32+0xb6/0x2b0
[  914.328578][T17535]  ? lockdep_hardirqs_on+0x9c/0x150
[  914.328594][T17535]  do_fast_syscall_32+0x34/0x80
[  914.328604][T17535]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  914.328617][T17535] RIP: 0023:0xf7fc1539
[  914.328627][T17535] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  914.328636][T17535] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  914.328649][T17535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  914.328657][T17535] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000
[  914.328663][T17535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  914.328669][T17535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  914.328676][T17535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  914.328692][T17535]  </TASK>
[  914.688392][T17519] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3513'.
[  914.698478][T17519] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3513'.
[  914.708669][ T5932] usb 5-1: config 0 descriptor??
[  914.716999][ T5932] gspca_main: se401-2.14.0 probing 047d:5003
[  914.763370][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  914.789821][  T812] usb 3-1: usb_control_msg returned -71
[  914.795480][  T812] usbtmc 3-1:16.0: can't read capabilities
[  914.822125][  T812] usb 3-1: USB disconnect, device number 36
[  914.854020][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  915.044035][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3521'.
[  915.068207][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  915.083923][ T5911] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  915.093384][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.101534][ T5911] usb 2-1: Product: syz
[  915.106713][ T5911] usb 2-1: Manufacturer: syz
[  915.111487][ T5911] usb 2-1: SerialNumber: syz
[  915.121802][ T5911] usb 2-1: config 0 descriptor??
[  915.133609][T17530] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  915.163232][T17530] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  915.188676][ T5911] usb 2-1: ucan: probing device on interface #0
[  915.235194][ T5932] gspca_se401: Wrong descriptor type
[  915.419830][T17546] FAULT_INJECTION: forcing a failure.
[  915.419830][T17546] name failslab, interval 1, probability 0, space 0, times 0
[  915.435583][T17546] CPU: 0 UID: 0 PID: 17546 Comm: syz.5.3523 Not tainted syzkaller #0 PREEMPT(full) 
[  915.435612][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  915.435624][T17546] Call Trace:
[  915.435643][T17546]  <TASK>
[  915.435652][T17546]  dump_stack_lvl+0x189/0x250
[  915.435683][T17546]  ? __pfx____ratelimit+0x10/0x10
[  915.435712][T17546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  915.435738][T17546]  ? __pfx__printk+0x10/0x10
[  915.435765][T17546]  ? __pfx___might_resched+0x10/0x10
[  915.435786][T17546]  ? fs_reclaim_acquire+0x7d/0x100
[  915.435823][T17546]  should_fail_ex+0x414/0x560
[  915.435858][T17546]  should_failslab+0xa8/0x100
[  915.435880][T17546]  __kmalloc_noprof+0xcb/0x7f0
[  915.435907][T17546]  ? tomoyo_encode+0x28b/0x550
[  915.435943][T17546]  tomoyo_encode+0x28b/0x550
[  915.435979][T17546]  tomoyo_realpath_from_path+0x58d/0x5d0
[  915.436021][T17546]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  915.436047][T17546]  tomoyo_path_number_perm+0x1e8/0x5a0
[  915.436076][T17546]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  915.436105][T17546]  ? __lock_acquire+0xab9/0xd20
[  915.436138][T17546]  ? __lock_acquire+0xab9/0xd20
[  915.436179][T17546]  ? __fget_files+0x2a/0x420
[  915.436204][T17546]  ? __fget_files+0x3a0/0x420
[  915.436222][T17546]  ? __fget_files+0x2a/0x420
[  915.436246][T17546]  security_file_ioctl_compat+0xcb/0x2d0
[  915.436274][T17546]  __ia32_compat_sys_ioctl+0x128/0x840
[  915.436305][T17546]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  915.436333][T17546]  ? handle_softirqs+0x717/0x870
[  915.436359][T17546]  ? __irq_exit_rcu+0xca/0x1f0
[  915.436387][T17546]  ? __pfx_handle_softirqs+0x10/0x10
[  915.436415][T17546]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  915.436447][T17546]  ? lockdep_hardirqs_on+0x9c/0x150
[  915.436479][T17546]  __do_fast_syscall_32+0xb6/0x2b0
[  915.436507][T17546]  do_fast_syscall_32+0x34/0x80
[  915.436526][T17546]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  915.436550][T17546] RIP: 0023:0xf7fc1539
[  915.436567][T17546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  915.436586][T17546] RSP: 002b:00000000f549555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  915.436607][T17546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005422
[  915.436620][T17546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  915.436639][T17546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  915.436651][T17546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  915.436663][T17546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  915.436694][T17546]  </TASK>
[  915.436940][T17546] ERROR: Out of memory at tomoyo_realpath_from_path.
[  915.715512][  T812] usb 5-1: USB disconnect, device number 33
[  915.788104][ T5911] usb 2-1: ucan: device reported invalid device info
[  915.804078][ T5911] usb 2-1: ucan: probe failed; try to update the device firmware
[  915.968978][T17554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3526'.
[  916.185820][T17562] binder: 17557:17562 ioctl c0306201 0 returned -14
[  916.199122][T17562] binder: 17557:17562 ioctl c0306201 0 returned -14
[  917.196814][T17580] FAULT_INJECTION: forcing a failure.
[  917.196814][T17580] name failslab, interval 1, probability 0, space 0, times 0
[  917.209868][T17580] CPU: 0 UID: 0 PID: 17580 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT(full) 
[  917.209884][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  917.209892][T17580] Call Trace:
[  917.209897][T17580]  <TASK>
[  917.209902][T17580]  dump_stack_lvl+0x189/0x250
[  917.209922][T17580]  ? __pfx____ratelimit+0x10/0x10
[  917.209937][T17580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  917.209951][T17580]  ? __pfx__printk+0x10/0x10
[  917.209963][T17580]  ? __pfx___might_resched+0x10/0x10
[  917.209980][T17580]  ? fs_reclaim_acquire+0x7d/0x100
[  917.210013][T17580]  should_fail_ex+0x414/0x560
[  917.210045][T17580]  should_failslab+0xa8/0x100
[  917.210066][T17580]  kmem_cache_alloc_node_noprof+0x77/0x710
[  917.210083][T17580]  ? __alloc_skb+0x112/0x2d0
[  917.210097][T17580]  __alloc_skb+0x112/0x2d0
[  917.210108][T17580]  sock_omalloc+0xd8/0x1e0
[  917.210122][T17580]  msg_zerocopy_realloc+0x9c/0x850
[  917.210140][T17580]  __ip6_append_data+0xca2/0x3f30
[  917.210163][T17580]  ? gdlm_lock+0x2b0/0x930
[  917.210182][T17580]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  917.210208][T17580]  ? __pfx___ip6_append_data+0x10/0x10
[  917.210223][T17580]  ? ip6_setup_cork+0xa1c/0x10e0
[  917.210242][T17580]  ip6_make_skb+0x2ce/0x410
[  917.210259][T17580]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  917.210275][T17580]  ? __pfx_ip6_make_skb+0x10/0x10
[  917.210297][T17580]  ? ip6_dst_hoplimit+0x65/0x3e0
[  917.210310][T17580]  ? ip6_dst_hoplimit+0x65/0x3e0
[  917.210324][T17580]  udpv6_sendmsg+0x1d1a/0x2510
[  917.210347][T17580]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  917.210365][T17580]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  917.210382][T17580]  ? __pfx___might_resched+0x10/0x10
[  917.210393][T17580]  ? exc_page_fault+0xab/0x100
[  917.210416][T17580]  ? aa_sk_perm+0x81e/0x950
[  917.210432][T17580]  ? copy_compat_iovec_from_user+0xf8/0x140
[  917.210452][T17580]  ? inet_send_prepare+0x5c/0x270
[  917.210464][T17580]  ? inet6_sendmsg+0xe4/0x120
[  917.210477][T17580]  __sock_sendmsg+0xe5/0x270
[  917.210493][T17580]  ____sys_sendmsg+0x52d/0x830
[  917.210508][T17580]  ? __pfx_____sys_sendmsg+0x10/0x10
[  917.210534][T17580]  ___sys_sendmsg+0x21f/0x2a0
[  917.210547][T17580]  ? __pfx____sys_sendmsg+0x10/0x10
[  917.210559][T17580]  ? __lock_acquire+0xab9/0xd20
[  917.210586][T17580]  ? __fget_files+0x2a/0x420
[  917.210597][T17580]  ? __fget_files+0x3a0/0x420
[  917.210612][T17580]  __sys_sendmmsg+0x28e/0x430
[  917.210627][T17580]  ? __pfx___sys_sendmmsg+0x10/0x10
[  917.210637][T17580]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  917.210667][T17580]  ? ksys_write+0x22a/0x250
[  917.210681][T17580]  ? exc_page_fault+0x82/0x100
[  917.210695][T17580]  ? __pfx_ksys_write+0x10/0x10
[  917.210713][T17580]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  917.210727][T17580]  __do_fast_syscall_32+0xb6/0x2b0
[  917.210737][T17580]  ? lockdep_hardirqs_on+0x9c/0x150
[  917.210754][T17580]  do_fast_syscall_32+0x34/0x80
[  917.210764][T17580]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  917.210780][T17580] RIP: 0023:0xf70bd539
[  917.210790][T17580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  917.210799][T17580] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  917.210811][T17580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0
[  917.210819][T17580] RDX: 0000000000000172 RSI: 0000000004000000 RDI: 0000000000000000
[  917.210826][T17580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  917.210832][T17580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  917.210838][T17580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  917.210854][T17580]  </TASK>
[  917.748141][ T5911] usb 2-1: USB disconnect, device number 26
[  917.867389][T17585] netlink: 'syz.1.3537': attribute type 2 has an invalid length.
[  917.971027][T17585] netlink: 'syz.1.3537': attribute type 9 has an invalid length.
[  918.007944][T17585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3537'.
[  918.042151][T17585] fuse: Bad value for 'fd'
[  918.065921][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3534'.
[  918.096105][T17585] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  918.150292][T17593] fuse: Unknown parameter 'group_id00000000000000000000'
[  918.210004][T17585] bond1 (unregistering): Released all slaves
[  918.572104][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3541'.
[  918.782020][T17606] sctp: [Deprecated]: syz.3.3543 (pid 17606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  918.782020][T17606] Use struct sctp_sack_info instead
[  919.198678][T17618] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3546'.
[  919.252438][T17617] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3545'.
[  919.367898][  T812] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  919.487898][ T5911] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  919.519791][  T812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  919.557948][ T6284] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  919.596200][  T812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  919.637902][ T5911] usb 5-1: Using ep0 maxpacket: 8
[  919.655790][ T5911] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  919.670116][  T812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  919.692832][  T812] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  919.708596][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  919.722615][ T6284] usb 4-1: Using ep0 maxpacket: 8
[  919.728017][  T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.736104][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  919.756134][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  919.766897][  T812] usb 2-1: Product: syz
[  919.772268][ T6284] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  919.790744][ T6284] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  919.800983][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  919.807866][  T812] usb 2-1: Manufacturer: syz
[  919.847479][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  919.847495][ T6284] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  919.847523][ T6284] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  919.857490][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.973533][T17625] binder: 17621:17625 ioctl c0306201 0 returned -14
[  919.988626][T17625] binder: 17621:17625 ioctl c0306201 0 returned -14
[  920.030841][  T812] usb 2-1: SerialNumber: syz
[  920.050832][  T812] usb 2-1: config 0 descriptor??
[  920.060310][ T6284] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  920.077408][T17615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  920.109850][T17615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  920.119100][  T812] usb 2-1: ucan: probing device on interface #0
[  920.131750][T17618] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3546'.
[  920.252858][T17618] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3546'.
[  920.367016][ T6284] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  920.373746][ T5911] usb 5-1: usb_control_msg returned -71
[  920.385435][ T6284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.388145][ T5911] usbtmc 5-1:16.0: can't read capabilities
[  920.411185][T17628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3549'.
[  920.502797][ T5911] usb 5-1: USB disconnect, device number 34
[  920.708856][  T812] usb 2-1: ucan: device reported invalid device info
[  920.715930][  T812] usb 2-1: ucan: probe failed; try to update the device firmware
[  920.724751][T17617] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3545'.
[  920.734037][T17617] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3545'.
[  920.756729][ T6284] usb 4-1: usb_control_msg returned -71
[  920.762448][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  920.805664][ T6284] usbtmc 4-1:16.0: can't read capabilities
[  920.951327][ T6284] usb 4-1: USB disconnect, device number 28
[  920.967861][   T24] usb 3-1: Using ep0 maxpacket: 8
[  921.006568][   T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  921.071912][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  921.125224][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  921.143193][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  921.154870][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  921.177330][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  921.188390][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.414621][   T24] usb 3-1: GET_CAPABILITIES returned 0
[  921.420571][   T24] usbtmc 3-1:16.0: can't read capabilities
[  921.654816][T17628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3549'.
[  921.664501][T17628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3549'.
[  921.834305][T17628] usbtmc 3-1:16.0: usb_control_msg returned -71
[  921.835514][   T24] usb 3-1: USB disconnect, device number 37
[  922.576967][   T24] usb 2-1: USB disconnect, device number 27
[  923.299040][   T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  923.464222][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  923.466787][T17663] fuse: Unknown parameter '€„ü-{aÓ‡³Pöw��܊æsÇDÅu¦Ñz¦ÿM�Ð loÜ'
[  923.484280][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.509500][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  923.559006][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  923.599106][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.645926][   T24] usb 2-1: config 0 descriptor??
[  923.724498][T17670] binder: 17664:17670 ioctl c0306201 0 returned -14
[  923.736859][T17670] binder: 17664:17670 ioctl c0306201 0 returned -14
[  923.894012][T17674] __nla_validate_parse: 3 callbacks suppressed
[  923.894032][T17674] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3561'.
[  924.108198][   T24] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  924.297907][  T983] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  924.550131][ T6284] usb 2-1: USB disconnect, device number 28
[  924.569918][  T983] usb 3-1: Using ep0 maxpacket: 8
[  924.592969][  T983] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  924.609711][  T983] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  924.662572][  T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  924.697848][  T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  924.718055][T17676] fido_id[17676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  924.730376][  T983] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  924.773674][T17683] FAULT_INJECTION: forcing a failure.
[  924.773674][T17683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  924.787318][  T983] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  924.796870][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.3.3564 Not tainted syzkaller #0 PREEMPT(full) 
[  924.796896][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  924.796909][T17683] Call Trace:
[  924.796918][T17683]  <TASK>
[  924.796925][T17683]  dump_stack_lvl+0x189/0x250
[  924.796954][T17683]  ? __pfx____ratelimit+0x10/0x10
[  924.796978][T17683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  924.797002][T17683]  ? __pfx__printk+0x10/0x10
[  924.797023][T17683]  ? __might_fault+0xb0/0x130
[  924.797059][T17683]  should_fail_ex+0x414/0x560
[  924.797089][T17683]  _copy_to_iter+0x589/0x1790
[  924.797124][T17683]  ? __pfx__copy_to_iter+0x10/0x10
[  924.797150][T17683]  ? __skb_try_recv_from_queue+0x2b2/0x730
[  924.797182][T17683]  ? __skb_try_recv_datagram+0x3d5/0x4d0
[  924.797218][T17683]  __skb_datagram_iter+0xf8/0x990
[  924.797243][T17683]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  924.797278][T17683]  skb_copy_datagram_iter+0xc5/0x230
[  924.797306][T17683]  netlink_recvmsg+0x2ab/0xa30
[  924.797338][T17683]  ? __pfx_netlink_recvmsg+0x10/0x10
[  924.797358][T17683]  ? __kmalloc_noprof+0x432/0x7f0
[  924.797381][T17683]  ? iovec_from_user+0x87/0x250
[  924.797406][T17683]  ? aa_sock_msg_perm+0xf1/0x1d0
[  924.797433][T17683]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  924.797451][T17683]  ? security_socket_recvmsg+0x7e/0x2e0
[  924.797468][T17683]  ? __pfx_netlink_recvmsg+0x10/0x10
[  924.797486][T17683]  sock_recvmsg+0x22c/0x270
[  924.797515][T17683]  ____sys_recvmsg+0x1c9/0x460
[  924.797544][T17683]  ? __pfx_____sys_recvmsg+0x10/0x10
[  924.797562][T17683]  ? get_compat_msghdr+0x37e/0x4a0
[  924.797599][T17683]  ___sys_recvmsg+0x1b5/0x510
[  924.797624][T17683]  ? __pfx____sys_recvmsg+0x10/0x10
[  924.797665][T17683]  ? __fget_files+0x3a0/0x420
[  924.797713][T17683]  do_recvmmsg+0x36a/0x770
[  924.797741][T17683]  ? __pfx_do_recvmmsg+0x10/0x10
[  924.797772][T17683]  ? _copy_from_user+0x94/0xb0
[  924.797801][T17683]  ? __fget_files+0x3a0/0x420
[  924.797824][T17683]  __sys_recvmmsg+0x127/0x280
[  924.797859][T17683]  ? __pfx___sys_recvmmsg+0x10/0x10
[  924.797881][T17683]  ? __pfx_ksys_write+0x10/0x10
[  924.797913][T17683]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  924.797939][T17683]  __do_fast_syscall_32+0xb6/0x2b0
[  924.797957][T17683]  ? lockdep_hardirqs_on+0x9c/0x150
[  924.797994][T17683]  do_fast_syscall_32+0x34/0x80
[  924.798012][T17683]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  924.798036][T17683] RIP: 0023:0xf7f05539
[  924.798061][T17683] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  924.798084][T17683] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  924.798104][T17683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0
[  924.798118][T17683] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700
[  924.798130][T17683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  924.798141][T17683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  924.798151][T17683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  924.798181][T17683]  </TASK>
[  925.107882][  T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.497932][   T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  925.670208][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  925.680500][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  925.713711][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  925.717985][T17671] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3561'.
[  925.738221][T17671] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3561'.
[  925.775603][  T983] usb 3-1: usb_control_msg returned -71
[  925.824265][  T983] usbtmc 3-1:16.0: can't read capabilities
[  925.861316][   T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  925.874048][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.975101][   T24] usb 6-1: Product: syz
[  925.985868][  T983] usb 3-1: USB disconnect, device number 38
[  925.995305][   T24] usb 6-1: Manufacturer: syz
[  926.014998][   T24] usb 6-1: SerialNumber: syz
[  926.033901][   T24] usb 6-1: config 0 descriptor??
[  926.043675][T17681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  926.052699][T17681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  926.067099][   T24] usb 6-1: ucan: probing device on interface #0
[  926.084892][T17687] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3565'.
[  926.095187][T17690] netlink: 'syz.4.3566': attribute type 29 has an invalid length.
[  926.112134][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3566'.
[  926.121344][T17690] netlink: 'syz.4.3566': attribute type 29 has an invalid length.
[  926.129462][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3566'.
[  926.150535][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'.
[  926.376368][T17694] netlink: 'syz.4.3568': attribute type 2 has an invalid length.
[  926.384460][T17694] netlink: 'syz.4.3568': attribute type 9 has an invalid length.
[  926.395438][T17694] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3568'.
[  926.408782][T17694] fuse: Bad value for 'fd'
[  926.457006][T17694] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  926.471360][T17694] bond1 (unregistering): Released all slaves
[  926.478700][   T24] usb 6-1: ucan: device reported invalid device info
[  926.485411][   T24] usb 6-1: ucan: probe failed; try to update the device firmware
[  926.540068][T17700] fuse: Unknown parameter 'group_id00000000000000000000'
[  927.509935][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'.
[  927.728267][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'.
[  928.057959][  T812] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  928.070361][ T5911] usb 6-1: USB disconnect, device number 43
[  928.272726][T17736] FAULT_INJECTION: forcing a failure.
[  928.272726][T17736] name failslab, interval 1, probability 0, space 0, times 0
[  928.286787][T17736] CPU: 0 UID: 0 PID: 17736 Comm: syz.5.3578 Not tainted syzkaller #0 PREEMPT(full) 
[  928.286804][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  928.286811][T17736] Call Trace:
[  928.286816][T17736]  <TASK>
[  928.286821][T17736]  dump_stack_lvl+0x189/0x250
[  928.286841][T17736]  ? __pfx____ratelimit+0x10/0x10
[  928.286857][T17736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  928.286870][T17736]  ? __pfx__printk+0x10/0x10
[  928.286884][T17736]  ? __lock_acquire+0xab9/0xd20
[  928.286900][T17736]  should_fail_ex+0x414/0x560
[  928.286921][T17736]  should_failslab+0xa8/0x100
[  928.286933][T17736]  kmem_cache_alloc_noprof+0x74/0x6e0
[  928.286948][T17736]  ? skb_clone+0x212/0x3a0
[  928.286963][T17736]  skb_clone+0x212/0x3a0
[  928.286977][T17736]  __netlink_deliver_tap+0x404/0x850
[  928.286995][T17736]  ? netlink_deliver_tap+0x2e/0x1b0
[  928.287007][T17736]  netlink_deliver_tap+0x19c/0x1b0
[  928.287018][T17736]  netlink_unicast+0x7fa/0x9e0
[  928.287038][T17736]  ? __pfx_netlink_unicast+0x10/0x10
[  928.287054][T17736]  ? netlink_sendmsg+0x642/0xb30
[  928.287063][T17736]  ? skb_put+0x11b/0x210
[  928.287076][T17736]  netlink_sendmsg+0x805/0xb30
[  928.287091][T17736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  928.287103][T17736]  ? __import_iovec+0x5d4/0x7f0
[  928.287116][T17736]  ? aa_sock_msg_perm+0xf1/0x1d0
[  928.287133][T17736]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  928.287143][T17736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  928.287154][T17736]  __sock_sendmsg+0x21c/0x270
[  928.287170][T17736]  ____sys_sendmsg+0x505/0x830
[  928.287185][T17736]  ? __pfx_____sys_sendmsg+0x10/0x10
[  928.287205][T17736]  ___sys_sendmsg+0x21f/0x2a0
[  928.287218][T17736]  ? __pfx____sys_sendmsg+0x10/0x10
[  928.287249][T17736]  ? __fget_files+0x2a/0x420
[  928.287261][T17736]  ? __fget_files+0x3a0/0x420
[  928.287276][T17736]  __sys_sendmsg+0x164/0x220
[  928.287289][T17736]  ? __pfx___sys_sendmsg+0x10/0x10
[  928.287305][T17736]  ? __pfx_ksys_write+0x10/0x10
[  928.287321][T17736]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  928.287338][T17736]  ? lockdep_hardirqs_on+0x9c/0x150
[  928.287355][T17736]  __do_fast_syscall_32+0xb6/0x2b0
[  928.287365][T17736]  ? lockdep_hardirqs_on+0x9c/0x150
[  928.287382][T17736]  do_fast_syscall_32+0x34/0x80
[  928.287392][T17736]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  928.287405][T17736] RIP: 0023:0xf7fc1539
[  928.287415][T17736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  928.287424][T17736] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  928.287437][T17736] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  928.287444][T17736] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000
[  928.287458][T17736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  928.287469][T17736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  928.287479][T17736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  928.287495][T17736]  </TASK>
[  928.968102][  T812] usb 2-1: Using ep0 maxpacket: 8
[  928.984988][  T812] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  929.020189][  T812] usb 2-1: config 0 interface 0 has no altsetting 0
[  929.047117][  T812] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  929.088814][  T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.096893][  T812] usb 2-1: Product: syz
[  929.117886][  T812] usb 2-1: Manufacturer: syz
[  929.128271][  T812] usb 2-1: SerialNumber: syz
[  929.158685][  T812] usb 2-1: config 0 descriptor??
[  929.183603][  T812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  929.209820][T17738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3579'.
[  929.335836][T17751] netlink: 'syz.5.3584': attribute type 2 has an invalid length.
[  929.377959][T17751] netlink: 'syz.5.3584': attribute type 9 has an invalid length.
[  929.417373][T17753] fuse: Bad value for 'fd'
[  929.421972][T17751] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3584'.
[  929.532778][  T812] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[  929.556448][  T812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  929.567507][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'.
[  929.570882][T17753] fuse: Unknown parameter 'group_id00000000000000000000'
[  929.578991][  T812] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  929.595120][T17751] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  929.649335][T17751] bond1 (unregistering): Released all slaves
[  930.060018][ T5911] hid (null): unknown global tag 0xc
[  930.065335][ T5911] hid (null): invalid report_size 19507
[  930.073657][ T5911] hid (null): report_id 16586 is invalid
[  930.091568][ T5911] hid (null): unknown global tag 0xc
[  930.098704][ T5911] hid (null): invalid report_size 57839
[  930.105417][ T5911] hid (null): report_id 4089299327 is invalid
[  930.119511][ T5911] hid-generic 0002:7FFFFFFF:0008.0021: reserved main item tag 0xd
[  930.135545][ T5911] hid-generic 0002:7FFFFFFF:0008.0021: unknown main item tag 0x1
[  930.144499][ T5911] hid-generic 0002:7FFFFFFF:0008.0021: unknown global tag 0xc
[  930.152207][ T5911] hid-generic 0002:7FFFFFFF:0008.0021: item 0 2 1 12 parsing failed
[  930.197503][ T5911] hid-generic 0002:7FFFFFFF:0008.0021: probe with driver hid-generic failed with error -22
[  930.517884][  T812] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  930.753336][T17773] tipc: New replicast peer: 255.255.255.255
[  930.760881][T17773] tipc: Enabled bearer <udp:syz2>, priority 20
[  930.761494][  T812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  930.779516][  T812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  930.794622][  T812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  930.808050][  T812] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  930.820144][  T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.830392][  T812] usb 3-1: Product: syz
[  930.834675][  T812] usb 3-1: Manufacturer: syz
[  930.889708][  T812] usb 3-1: SerialNumber: syz
[  930.921351][  T812] usb 3-1: config 0 descriptor??
[  930.930226][T17764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  930.938715][T17764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  930.964995][  T812] usb 3-1: ucan: probing device on interface #0
[  931.240252][ T5904] usb 2-1: USB disconnect, device number 29
[  931.393942][  T812] usb 3-1: ucan: device reported invalid device info
[  931.451275][  T812] usb 3-1: ucan: probe failed; try to update the device firmware
[  931.628479][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  931.634810][T17790] fuse: Unknown parameter 'group_i¾5°'
[  931.634970][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  931.788168][ T5911] tipc: Node number set to 336705280
[  932.566294][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'.
[  932.809575][T17810] binder: 17807:17810 ioctl c0306201 0 returned -14
[  932.828544][T17810] binder: 17807:17810 ioctl c0306201 0 returned -14
[  933.144226][T17814] binder: 17811:17814 ioctl c0306201 0 returned -14
[  933.154647][T17814] binder: 17811:17814 ioctl c0306201 0 returned -14
[  933.295766][  T812] usb 3-1: USB disconnect, device number 39
[  933.511599][T17778] delete_channel: no stack
[  933.577066][T17820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3602'.
[  933.888997][ T5904] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  933.901366][T17824] FAULT_INJECTION: forcing a failure.
[  933.901366][T17824] name failslab, interval 1, probability 0, space 0, times 0
[  933.988197][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.5.3604 Not tainted syzkaller #0 PREEMPT(full) 
[  933.988224][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  933.988236][T17824] Call Trace:
[  933.988245][T17824]  <TASK>
[  933.988255][T17824]  dump_stack_lvl+0x189/0x250
[  933.988283][T17824]  ? __pfx____ratelimit+0x10/0x10
[  933.988300][T17824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  933.988314][T17824]  ? __pfx__printk+0x10/0x10
[  933.988326][T17824]  ? __kernel_text_address+0xd/0x40
[  933.988343][T17824]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  933.988360][T17824]  should_fail_ex+0x414/0x560
[  933.988383][T17824]  should_failslab+0xa8/0x100
[  933.988396][T17824]  __kmalloc_cache_noprof+0x6f/0x6f0
[  933.988411][T17824]  ? __pfx_stack_trace_save+0x10/0x10
[  933.988424][T17824]  ? tipc_udp_enable+0x160/0xb30
[  933.988439][T17824]  tipc_udp_enable+0x160/0xb30
[  933.988452][T17824]  ? kasan_save_track+0x3e/0x80
[  933.988468][T17824]  ? __pfx_tipc_udp_enable+0x10/0x10
[  933.988478][T17824]  ? genl_family_rcv_msg_doit+0x215/0x300
[  933.988491][T17824]  ? genl_rcv_msg+0x60e/0x790
[  933.988502][T17824]  ? netlink_rcv_skb+0x208/0x470
[  933.988518][T17824]  ? genl_rcv+0x28/0x40
[  933.988528][T17824]  ? netlink_unicast+0x82f/0x9e0
[  933.988542][T17824]  ? netlink_sendmsg+0x805/0xb30
[  933.988551][T17824]  ? __sock_sendmsg+0x21c/0x270
[  933.988564][T17824]  ? ____sys_sendmsg+0x505/0x830
[  933.988573][T17824]  ? ___sys_sendmsg+0x21f/0x2a0
[  933.988583][T17824]  ? __sys_sendmsg+0x164/0x220
[  933.988593][T17824]  ? __do_fast_syscall_32+0xb6/0x2b0
[  933.988602][T17824]  ? do_fast_syscall_32+0x34/0x80
[  933.988610][T17824]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  933.988647][T17824]  ? __kasan_kmalloc+0x93/0xb0
[  933.988663][T17824]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  933.988682][T17824]  __tipc_nl_bearer_enable+0xc21/0x13f0
[  933.988699][T17824]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  933.988709][T17824]  ? __mutex_lock+0x335/0x1350
[  933.988732][T17824]  ? tipc_nl_bearer_enable+0x17/0x40
[  933.988744][T17824]  ? __pfx___mutex_lock+0x10/0x10
[  933.988760][T17824]  ? rcu_is_watching+0x15/0xb0
[  933.988774][T17824]  ? __nla_parse+0x40/0x60
[  933.988787][T17824]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  933.988801][T17824]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  933.988817][T17824]  tipc_nl_bearer_enable+0x22/0x40
[  933.988828][T17824]  genl_family_rcv_msg_doit+0x215/0x300
[  933.988846][T17824]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  933.988872][T17824]  genl_rcv_msg+0x60e/0x790
[  933.988889][T17824]  ? __pfx_genl_rcv_msg+0x10/0x10
[  933.988902][T17824]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  933.988914][T17824]  ? __asan_memcpy+0x40/0x70
[  933.988927][T17824]  ? __pfx_ref_tracker_free+0x10/0x10
[  933.988943][T17824]  netlink_rcv_skb+0x208/0x470
[  933.988952][T17824]  ? __lock_acquire+0xab9/0xd20
[  933.988963][T17824]  ? __pfx_genl_rcv_msg+0x10/0x10
[  933.988977][T17824]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  933.988998][T17824]  ? down_read+0x1ad/0x2e0
[  933.989010][T17824]  genl_rcv+0x28/0x40
[  933.989022][T17824]  netlink_unicast+0x82f/0x9e0
[  933.989042][T17824]  ? __pfx_netlink_unicast+0x10/0x10
[  933.989058][T17824]  ? netlink_sendmsg+0x642/0xb30
[  933.989068][T17824]  ? skb_put+0x11b/0x210
[  933.989081][T17824]  netlink_sendmsg+0x805/0xb30
[  933.989097][T17824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  933.989109][T17824]  ? __import_iovec+0x5d4/0x7f0
[  933.989122][T17824]  ? aa_sock_msg_perm+0xf1/0x1d0
[  933.989139][T17824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  933.989149][T17824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  933.989160][T17824]  __sock_sendmsg+0x21c/0x270
[  933.989176][T17824]  ____sys_sendmsg+0x505/0x830
[  933.989191][T17824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  933.989211][T17824]  ___sys_sendmsg+0x21f/0x2a0
[  933.989225][T17824]  ? __pfx____sys_sendmsg+0x10/0x10
[  933.989257][T17824]  ? __fget_files+0x2a/0x420
[  933.989269][T17824]  ? __fget_files+0x3a0/0x420
[  933.989285][T17824]  __sys_sendmsg+0x164/0x220
[  933.989297][T17824]  ? __pfx___sys_sendmsg+0x10/0x10
[  933.989314][T17824]  ? __pfx_ksys_write+0x10/0x10
[  933.989330][T17824]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  933.989347][T17824]  ? lockdep_hardirqs_on+0x9c/0x150
[  933.989364][T17824]  __do_fast_syscall_32+0xb6/0x2b0
[  933.989374][T17824]  ? lockdep_hardirqs_on+0x9c/0x150
[  933.989391][T17824]  do_fast_syscall_32+0x34/0x80
[  933.989401][T17824]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  933.989413][T17824] RIP: 0023:0xf7fc1539
[  933.989423][T17824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  933.989433][T17824] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  933.989445][T17824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800010c0
[  933.989453][T17824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  933.989460][T17824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  933.989466][T17824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  933.989472][T17824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  933.989489][T17824]  </TASK>
[  933.989516][T17824] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  934.677943][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  934.697748][ T5904] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  934.706025][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  934.908280][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  934.933791][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  934.967879][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  934.998017][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  935.046665][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.077081][T17836] binder: 17832:17836 ioctl c0306201 0 returned -14
[  935.090485][T17836] binder: 17832:17836 ioctl c0306201 0 returned -14
[  935.404810][ T5904] usb 2-1: GET_CAPABILITIES returned 0
[  935.424449][ T5904] usbtmc 2-1:16.0: can't read capabilities
[  935.587196][T17820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3602'.
[  935.596411][T17820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3602'.
[  935.747240][T17820] usbtmc 2-1:16.0: usb_control_msg returned -71
[  935.762669][ T5911] usb 2-1: USB disconnect, device number 30
[  936.385984][T17843] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3610'.
[  936.838611][ T1584] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  937.049586][ T1584] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  937.105183][ T1584] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  937.163580][ T1584] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  937.214700][ T1584] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  937.227959][ T1584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.245660][ T1584] usb 4-1: Product: syz
[  937.256710][ T1584] usb 4-1: Manufacturer: syz
[  937.272821][ T1584] usb 4-1: SerialNumber: syz
[  937.312829][ T1584] usb 4-1: config 0 descriptor??
[  937.332868][T17861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  937.358004][T17861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  937.377306][ T1584] usb 4-1: ucan: probing device on interface #0
[  937.512444][T17873] binder: 17868:17873 ioctl c0306201 0 returned -14
[  937.522662][T17873] binder: 17868:17873 ioctl c0306201 0 returned -14
[  937.781764][ T1584] usb 4-1: ucan: device reported invalid device info
[  937.791764][ T1584] usb 4-1: ucan: probe failed; try to update the device firmware
[  939.654107][ T5932] usb 4-1: USB disconnect, device number 29
[  940.130028][T17895] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3624'.
[  940.879368][ T6284] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  941.037941][ T6284] usb 6-1: Using ep0 maxpacket: 8
[  941.060243][ T6284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  941.123260][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'.
[  941.134677][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'.
[  941.148217][ T6284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.367415][ T6284] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  941.399834][ T6284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.401459][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'.
[  941.418213][ T6284] usb 6-1: config 0 descriptor??
[  941.661719][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'.
[  941.680386][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'.
[  941.693064][T17909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.709614][T17909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.732530][ T5149] Bluetooth: hci2: unexpected event for opcode 0x204e
[  941.755154][T17926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3630'.
[  941.792302][T17909] input: syz1 as /devices/virtual/input/input55
[  941.817967][ T5932] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  941.860409][ T6284] usbhid 6-1:0.0: can't add hid device: -71
[  941.866677][ T6284] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  941.882313][ T6284] usb 6-1: USB disconnect, device number 44
[  942.105925][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  942.135791][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  942.177883][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  942.217181][ T5932] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  942.229111][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.258245][ T5932] usb 5-1: Product: syz
[  942.268759][ T5932] usb 5-1: Manufacturer: syz
[  942.273380][ T5932] usb 5-1: SerialNumber: syz
[  942.287939][T14275] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  942.321897][ T5932] usb 5-1: config 0 descriptor??
[  942.477966][T14275] usb 4-1: Using ep0 maxpacket: 8
[  942.489691][T14275] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  942.498714][T14275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  942.537939][T14275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  942.582097][T14275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  942.622398][T17923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3631'.
[  942.654545][T17931] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  942.703086][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'.
[  942.714959][T14275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  942.812144][T14275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  942.913732][T14275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.946291][T17934] tipc: Started in network mode
[  942.965806][T17934] tipc: Node identity 7f000001, cluster identity 4711
[  942.995055][T17934] tipc: Enabled bearer <udp:syz2>, priority 20
[  943.217082][T14275] usb 4-1: GET_CAPABILITIES returned 0
[  943.249559][T14275] usbtmc 4-1:16.0: can't read capabilities
[  943.287917][  T983] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  943.449341][T17926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3630'.
[  943.464354][T17926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3630'.
[  943.480673][  T983] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  943.493003][  T983] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  943.648586][  T983] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  943.662084][T17926] usbtmc 4-1:16.0: usb_control_msg returned -71
[  943.669072][ T5904] usb 4-1: USB disconnect, device number 30
[  943.746299][  T983] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  943.764907][  T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.831516][  T983] usb 6-1: Product: syz
[  943.870051][  T983] usb 6-1: Manufacturer: syz
[  943.882732][  T983] usb 6-1: SerialNumber: syz
[  943.930119][  T983] usb 6-1: config 0 descriptor??
[  943.975888][T17936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  943.984859][T17936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  944.019526][  T983] usb 6-1: ucan: probing device on interface #0
[  944.179810][ T6284] tipc: Node number set to 2130706433
[  944.425071][  T983] usb 6-1: ucan: device reported invalid device info
[  944.442762][  T983] usb 6-1: ucan: probe failed; try to update the device firmware
[  945.336606][T17963] input: syz1 as /devices/virtual/input/input58
[  945.873989][T17970] support for the xor transformation has been removed.
[  946.086063][ T5904] usb 6-1: USB disconnect, device number 45
[  946.245504][T17973] FAULT_INJECTION: forcing a failure.
[  946.245504][T17973] name failslab, interval 1, probability 0, space 0, times 0
[  946.381098][T17973] CPU: 0 UID: 0 PID: 17973 Comm: syz.5.3643 Not tainted syzkaller #0 PREEMPT(full) 
[  946.381129][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  946.381141][T17973] Call Trace:
[  946.381149][T17973]  <TASK>
[  946.381158][T17973]  dump_stack_lvl+0x189/0x250
[  946.381191][T17973]  ? __pfx____ratelimit+0x10/0x10
[  946.381218][T17973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  946.381244][T17973]  ? __pfx__printk+0x10/0x10
[  946.381269][T17973]  ? __pfx___might_resched+0x10/0x10
[  946.381290][T17973]  ? fs_reclaim_acquire+0x7d/0x100
[  946.381323][T17973]  should_fail_ex+0x414/0x560
[  946.381357][T17973]  should_failslab+0xa8/0x100
[  946.381379][T17973]  __kmalloc_noprof+0xcb/0x7f0
[  946.381405][T17973]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  946.381432][T17973]  ? rcu_is_watching+0x15/0xb0
[  946.381457][T17973]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  946.381490][T17973]  genl_family_rcv_msg_doit+0xb8/0x300
[  946.381523][T17973]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  946.381558][T17973]  ? apparmor_capable+0x137/0x1b0
[  946.381583][T17973]  ? bpf_lsm_capable+0x9/0x20
[  946.381615][T17973]  ? security_capable+0x7e/0x2e0
[  946.381649][T17973]  genl_rcv_msg+0x60e/0x790
[  946.381680][T17973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  946.381700][T17973]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  946.381730][T17973]  ? __asan_memcpy+0x40/0x70
[  946.381752][T17973]  ? __pfx_ref_tracker_free+0x10/0x10
[  946.381778][T17973]  netlink_rcv_skb+0x208/0x470
[  946.381794][T17973]  ? __lock_acquire+0xab9/0xd20
[  946.381813][T17973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  946.381836][T17973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  946.381875][T17973]  ? down_read+0x1ad/0x2e0
[  946.381898][T17973]  genl_rcv+0x28/0x40
[  946.381920][T17973]  netlink_unicast+0x82f/0x9e0
[  946.381959][T17973]  ? __pfx_netlink_unicast+0x10/0x10
[  946.381987][T17973]  ? netlink_sendmsg+0x642/0xb30
[  946.382004][T17973]  ? skb_put+0x11b/0x210
[  946.382025][T17973]  netlink_sendmsg+0x805/0xb30
[  946.382055][T17973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  946.382078][T17973]  ? __import_iovec+0x5d4/0x7f0
[  946.382101][T17973]  ? aa_sock_msg_perm+0xf1/0x1d0
[  946.382138][T17973]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  946.382158][T17973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  946.382180][T17973]  __sock_sendmsg+0x21c/0x270
[  946.382230][T17973]  ____sys_sendmsg+0x505/0x830
[  946.382258][T17973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  946.382296][T17973]  ___sys_sendmsg+0x21f/0x2a0
[  946.382320][T17973]  ? __pfx____sys_sendmsg+0x10/0x10
[  946.382378][T17973]  ? __fget_files+0x2a/0x420
[  946.382396][T17973]  ? __fget_files+0x3a0/0x420
[  946.382425][T17973]  __sys_sendmsg+0x164/0x220
[  946.382448][T17973]  ? __pfx___sys_sendmsg+0x10/0x10
[  946.382479][T17973]  ? __pfx_ksys_write+0x10/0x10
[  946.382509][T17973]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  946.382541][T17973]  ? lockdep_hardirqs_on+0x9c/0x150
[  946.382572][T17973]  __do_fast_syscall_32+0xb6/0x2b0
[  946.382592][T17973]  ? lockdep_hardirqs_on+0x9c/0x150
[  946.382632][T17973]  do_fast_syscall_32+0x34/0x80
[  946.382651][T17973]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  946.382675][T17973] RIP: 0023:0xf7fc1539
[  946.382692][T17973] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  946.382710][T17973] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  946.382731][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  946.382746][T17973] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  946.382757][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  946.382768][T17973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  946.382779][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  946.382810][T17973]  </TASK>
[  947.764482][T17993] TCP: TCP_TX_DELAY enabled
[  948.309969][T17996] __nla_validate_parse: 1 callbacks suppressed
[  948.309990][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3651'.
[  948.325703][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'.
[  949.105307][T18013] FAULT_INJECTION: forcing a failure.
[  949.105307][T18013] name failslab, interval 1, probability 0, space 0, times 0
[  949.137944][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.1.3656 Not tainted syzkaller #0 PREEMPT(full) 
[  949.137970][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  949.137984][T18013] Call Trace:
[  949.137992][T18013]  <TASK>
[  949.138001][T18013]  dump_stack_lvl+0x189/0x250
[  949.138035][T18013]  ? __pfx____ratelimit+0x10/0x10
[  949.138061][T18013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  949.138083][T18013]  ? __pfx__printk+0x10/0x10
[  949.138108][T18013]  ? __pfx___might_resched+0x10/0x10
[  949.138134][T18013]  should_fail_ex+0x414/0x560
[  949.138167][T18013]  should_failslab+0xa8/0x100
[  949.138190][T18013]  __kmalloc_noprof+0xcb/0x7f0
[  949.138216][T18013]  ? kfree+0x4d/0x6d0
[  949.138236][T18013]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  949.138272][T18013]  tomoyo_realpath_from_path+0xe3/0x5d0
[  949.138303][T18013]  ? tomoyo_domain+0xd9/0x130
[  949.138328][T18013]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  949.138354][T18013]  tomoyo_path_number_perm+0x1e8/0x5a0
[  949.138383][T18013]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  949.138429][T18013]  ? __lock_acquire+0xab9/0xd20
[  949.138471][T18013]  ? __fget_files+0x2a/0x420
[  949.138503][T18013]  ? __fget_files+0x3a0/0x420
[  949.138521][T18013]  ? __fget_files+0x2a/0x420
[  949.138545][T18013]  security_file_ioctl_compat+0xcb/0x2d0
[  949.138574][T18013]  __ia32_compat_sys_ioctl+0x128/0x840
[  949.138605][T18013]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  949.138633][T18013]  ? __fget_files+0x3a0/0x420
[  949.138659][T18013]  ? fput+0xa0/0xd0
[  949.138683][T18013]  ? ksys_write+0x22a/0x250
[  949.138709][T18013]  ? exc_page_fault+0x82/0x100
[  949.138739][T18013]  ? __pfx_ksys_write+0x10/0x10
[  949.138770][T18013]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  949.138800][T18013]  ? lockdep_hardirqs_on+0x9c/0x150
[  949.138832][T18013]  __do_fast_syscall_32+0xb6/0x2b0
[  949.138850][T18013]  ? lockdep_hardirqs_on+0x9c/0x150
[  949.138880][T18013]  do_fast_syscall_32+0x34/0x80
[  949.138897][T18013]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  949.138920][T18013] RIP: 0023:0xf70ed539
[  949.138933][T18013] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  949.138943][T18013] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  949.138956][T18013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46
[  949.138963][T18013] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  949.138970][T18013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  949.138976][T18013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  949.138983][T18013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  949.138999][T18013]  </TASK>
[  949.141231][T18013] ERROR: Out of memory at tomoyo_realpath_from_path.
[  949.708255][T14275] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  949.856022][T14275] usb 4-1: device descriptor read/64, error -71
[  949.880789][T18021] FAULT_INJECTION: forcing a failure.
[  949.880789][T18021] name failslab, interval 1, probability 0, space 0, times 0
[  949.900781][T18021] CPU: 0 UID: 0 PID: 18021 Comm: syz.1.3659 Not tainted syzkaller #0 PREEMPT(full) 
[  949.900810][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  949.900822][T18021] Call Trace:
[  949.900830][T18021]  <TASK>
[  949.900841][T18021]  dump_stack_lvl+0x189/0x250
[  949.900871][T18021]  ? __pfx____ratelimit+0x10/0x10
[  949.900898][T18021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  949.900924][T18021]  ? __pfx__printk+0x10/0x10
[  949.900950][T18021]  ? __pfx___might_resched+0x10/0x10
[  949.900978][T18021]  should_fail_ex+0x414/0x560
[  949.901006][T18021]  should_failslab+0xa8/0x100
[  949.901018][T18021]  __kmalloc_noprof+0xcb/0x7f0
[  949.901033][T18021]  ? kfree+0x4d/0x6d0
[  949.901044][T18021]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  949.901065][T18021]  tomoyo_realpath_from_path+0xe3/0x5d0
[  949.901082][T18021]  ? tomoyo_domain+0xd9/0x130
[  949.901095][T18021]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  949.901108][T18021]  tomoyo_path_number_perm+0x1e8/0x5a0
[  949.901123][T18021]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  949.901151][T18021]  ? __lock_acquire+0xab9/0xd20
[  949.901173][T18021]  ? __fget_files+0x2a/0x420
[  949.901186][T18021]  ? __fget_files+0x3a0/0x420
[  949.901196][T18021]  ? __fget_files+0x2a/0x420
[  949.901208][T18021]  security_file_ioctl_compat+0xcb/0x2d0
[  949.901223][T18021]  __ia32_compat_sys_ioctl+0x128/0x840
[  949.901239][T18021]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  949.901253][T18021]  ? __fget_files+0x3a0/0x420
[  949.901267][T18021]  ? fput+0xa0/0xd0
[  949.901279][T18021]  ? ksys_write+0x22a/0x250
[  949.901293][T18021]  ? exc_page_fault+0x82/0x100
[  949.901309][T18021]  ? __pfx_ksys_write+0x10/0x10
[  949.901332][T18021]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  949.901349][T18021]  ? lockdep_hardirqs_on+0x9c/0x150
[  949.901365][T18021]  __do_fast_syscall_32+0xb6/0x2b0
[  949.901376][T18021]  ? lockdep_hardirqs_on+0x9c/0x150
[  949.901399][T18021]  do_fast_syscall_32+0x34/0x80
[  949.901409][T18021]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  949.901421][T18021] RIP: 0023:0xf70ed539
[  949.901432][T18021] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  949.901441][T18021] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  949.901454][T18021] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88
[  949.901462][T18021] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  949.901469][T18021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  949.901475][T18021] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  949.901481][T18021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  949.901498][T18021]  </TASK>
[  949.901590][T18021] ERROR: Out of memory at tomoyo_realpath_from_path.
[  950.318000][T14275] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  950.458800][T14275] usb 4-1: device descriptor read/64, error -71
[  950.582740][T14275] usb usb4-port1: attempt power cycle
[  950.932282][T14275] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  950.958536][T14275] usb 4-1: device descriptor read/8, error -71
[  951.230403][T14275] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  951.263228][T14275] usb 4-1: device descriptor read/8, error -71
[  951.664502][T14275] usb usb4-port1: unable to enumerate USB device
[  952.738010][ T5932] iguanair 5-1:0.0: failed to get version
[  952.788263][ T5932] iguanair 5-1:0.0: probe with driver iguanair failed with error -110
[  953.022167][ T5932] usb 5-1: USB disconnect, device number 35
[  953.271695][T18054] blkio.reset_stats is deprecated
[  954.279975][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3667'.
[  954.360926][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'.
[  954.768620][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'.
[  954.785993][T18074] FAULT_INJECTION: forcing a failure.
[  954.785993][T18074] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  954.799856][T18074] CPU: 1 UID: 0 PID: 18074 Comm: syz.5.3671 Not tainted syzkaller #0 PREEMPT(full) 
[  954.799880][T18074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  954.799890][T18074] Call Trace:
[  954.799897][T18074]  <TASK>
[  954.799905][T18074]  dump_stack_lvl+0x189/0x250
[  954.799935][T18074]  ? __pfx____ratelimit+0x10/0x10
[  954.799964][T18074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  954.799991][T18074]  ? __pfx__printk+0x10/0x10
[  954.800020][T18074]  ? __might_fault+0xb0/0x130
[  954.800060][T18074]  should_fail_ex+0x414/0x560
[  954.800096][T18074]  _copy_from_user+0x2d/0xb0
[  954.800124][T18074]  get_compat_msghdr+0xad/0x4a0
[  954.800153][T18074]  ? __pfx_get_compat_msghdr+0x10/0x10
[  954.800186][T18074]  ___sys_sendmsg+0x193/0x2a0
[  954.800210][T18074]  ? __pfx____sys_sendmsg+0x10/0x10
[  954.800267][T18074]  ? __fget_files+0x2a/0x420
[  954.800286][T18074]  ? __fget_files+0x3a0/0x420
[  954.800310][T18074]  __sys_sendmsg+0x164/0x220
[  954.800334][T18074]  ? __pfx___sys_sendmsg+0x10/0x10
[  954.800366][T18074]  ? __pfx_ksys_write+0x10/0x10
[  954.800397][T18074]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  954.800429][T18074]  ? lockdep_hardirqs_on+0x9c/0x150
[  954.800456][T18074]  __do_fast_syscall_32+0xb6/0x2b0
[  954.800475][T18074]  ? lockdep_hardirqs_on+0x9c/0x150
[  954.800505][T18074]  do_fast_syscall_32+0x34/0x80
[  954.800523][T18074]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  954.800546][T18074] RIP: 0023:0xf7fc1539
[  954.800563][T18074] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  954.800580][T18074] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  954.800602][T18074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[  954.800616][T18074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  954.800626][T18074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  954.800635][T18074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  954.800645][T18074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  954.800673][T18074]  </TASK>
[  955.030353][   T30] kauditd_printk_skb: 125 callbacks suppressed
[  955.030371][   T30] audit: type=1326 audit(1763639293.421:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.1.3672" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0
[  955.495503][T18086] syzkaller1: entered promiscuous mode
[  955.504135][T18086] syzkaller1: entered allmulticast mode
[  955.785163][T18093] input: syz1 as /devices/virtual/input/input60
[  956.621668][T18106] loop9: detected capacity change from 0 to 7
[  956.634318][T18106] Dev loop9: unable to read RDB block 7
[  956.766289][T18106]  loop9: unable to read partition table
[  956.838040][T18106] loop9: partition table beyond EOD, truncated
[  956.844365][T18106] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  958.079157][T18125] syzkaller1: entered promiscuous mode
[  958.086343][T18125] syzkaller1: entered allmulticast mode
[  958.102745][T18125] FAULT_INJECTION: forcing a failure.
[  958.102745][T18125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  958.146870][T18125] CPU: 1 UID: 0 PID: 18125 Comm: syz.2.3687 Not tainted syzkaller #0 PREEMPT(full) 
[  958.146898][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  958.146909][T18125] Call Trace:
[  958.146918][T18125]  <TASK>
[  958.146926][T18125]  dump_stack_lvl+0x189/0x250
[  958.146957][T18125]  ? __pfx____ratelimit+0x10/0x10
[  958.146984][T18125]  ? __pfx_dump_stack_lvl+0x10/0x10
[  958.147007][T18125]  ? __pfx__printk+0x10/0x10
[  958.147036][T18125]  should_fail_ex+0x414/0x560
[  958.147069][T18125]  _copy_to_user+0x31/0xb0
[  958.147096][T18125]  simple_read_from_buffer+0xe1/0x170
[  958.147128][T18125]  proc_fail_nth_read+0x1b3/0x220
[  958.147156][T18125]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  958.147184][T18125]  ? rw_verify_area+0x2a6/0x4d0
[  958.147208][T18125]  ? __lock_acquire+0xab9/0xd20
[  958.147228][T18125]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  958.147251][T18125]  vfs_read+0x200/0xa30
[  958.147283][T18125]  ? fdget_pos+0x247/0x320
[  958.147306][T18125]  ? __pfx___mutex_lock+0x10/0x10
[  958.147334][T18125]  ? __pfx_vfs_read+0x10/0x10
[  958.147362][T18125]  ? __fget_files+0x2a/0x420
[  958.147385][T18125]  ? __fget_files+0x3a0/0x420
[  958.147402][T18125]  ? __fget_files+0x2a/0x420
[  958.147428][T18125]  ksys_read+0x145/0x250
[  958.147453][T18125]  ? exc_page_fault+0x82/0x100
[  958.147483][T18125]  ? __pfx_ksys_read+0x10/0x10
[  958.147511][T18125]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  958.147540][T18125]  ? lockdep_hardirqs_on+0x9c/0x150
[  958.147569][T18125]  __do_fast_syscall_32+0xb6/0x2b0
[  958.147588][T18125]  ? lockdep_hardirqs_on+0x9c/0x150
[  958.147618][T18125]  do_fast_syscall_32+0x34/0x80
[  958.147636][T18125]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  958.147658][T18125] RIP: 0023:0xf70bd539
[  958.147676][T18125] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  958.147693][T18125] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  958.147713][T18125] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad620
[  958.147726][T18125] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000
[  958.147737][T18125] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  958.147747][T18125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  958.147761][T18125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  958.147794][T18125]  </TASK>
[  958.387426][    C1] vkms_vblank_simulate: vblank timer overrun
[  958.736468][T18134] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3688'.
[  958.749425][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'.
[  958.864767][ T5932] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  959.023781][ T5932] usb 4-1: device descriptor read/64, error -71
[  959.121802][T18145] loop6: detected capacity change from 0 to 91
[  959.174860][T18145] buffer_io_error: 27 callbacks suppressed
[  959.174884][T18145] Buffer I/O error on dev loop6, logical block 11, async page read
[  959.327556][T18151] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3692'.
[  959.427933][ T5932] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  959.604620][ T5932] usb 4-1: device descriptor read/64, error -71
[  959.718471][ T5932] usb usb4-port1: attempt power cycle
[  959.758473][ T6284] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  960.013123][ T6284] usb 5-1: Using ep0 maxpacket: 8
[  960.146177][ T5932] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  960.240051][ T5932] usb 4-1: device descriptor read/8, error -71
[  960.263371][ T6284] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  960.276639][ T6284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  960.294480][ T6284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  960.316256][ T6284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  960.365588][ T6284] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  960.442917][ T6284] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  960.513926][ T5932] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  960.585359][ T5932] usb 4-1: device descriptor read/8, error -71
[  960.700366][ T5932] usb usb4-port1: unable to enumerate USB device
[  961.058002][ T6284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.265704][T18168] syzkaller1: entered promiscuous mode
[  961.271456][T18168] syzkaller1: entered allmulticast mode
[  961.407089][T18151] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3692'.
[  961.416668][T18151] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3692'.
[  961.435090][ T6284] usb 5-1: usb_control_msg returned -71
[  961.441863][ T6284] usbtmc 5-1:16.0: can't read capabilities
[  961.473164][ T6284] usb 5-1: USB disconnect, device number 36
[  961.853557][T18183] binder: 18178:18183 ioctl c0306201 0 returned -14
[  961.878316][T18183] binder: 18178:18183 ioctl c0306201 0 returned -14
[  961.998048][ T6284] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  962.168263][ T6284] usb 4-1: Using ep0 maxpacket: 16
[  962.178144][ T6284] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  962.199301][ T6284] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  962.208718][ T6284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.227695][ T6284] usb 4-1: Product: syz
[  962.237237][ T6284] usb 4-1: Manufacturer: syz
[  962.255153][ T6284] usb 4-1: SerialNumber: syz
[  962.318056][ T6284] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input61
[  962.665963][T18184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.748743][T18184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.827811][    C1] sched: DL replenish lagged too much
[  995.439896][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  995.453782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.538608][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1057.552820][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1077.949028][  T812] usb 4-1: USB disconnect, device number 39
[ 1178.477790][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1178.484797][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P43/1:b..l P5571/1:b..l P18191/3:b..l
[ 1178.495397][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=122545, q=638 ncpus=2)
[ 1178.503221][    C1] task:syz.4.3704      state:R  running task     stack:24968 pid:18191 tgid:18185 ppid:15335  task_flags:0x400040 flags:0x10080003
[ 1178.517984][    C1] Call Trace:
[ 1178.521279][    C1]  <TASK>
[ 1178.524218][    C1]  __schedule+0x1798/0x4cc0
[ 1178.528763][    C1]  ? __pfx___schedule+0x10/0x10
[ 1178.533646][    C1]  ? folio_try_get+0x1c/0x340
[ 1178.538327][    C1]  ? preempt_schedule+0xae/0xc0
[ 1178.543196][    C1]  preempt_schedule_common+0x83/0xd0
[ 1178.548499][    C1]  preempt_schedule+0xae/0xc0
[ 1178.553193][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[ 1178.558587][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1178.563798][    C1]  _raw_spin_unlock+0x3f/0x50
[ 1178.568493][    C1]  filemap_map_pages+0x179f/0x1e20
[ 1178.573633][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1178.578495][    C1]  ? filemap_map_pages+0x162/0x1e20
[ 1178.583707][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1178.589184][    C1]  ? __handle_mm_fault+0x2789/0x5400
[ 1178.594481][    C1]  ? __handle_mm_fault+0x2789/0x5400
[ 1178.599782][    C1]  __handle_mm_fault+0x347e/0x5400
[ 1178.604930][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1178.610427][    C1]  ? find_vma+0xe7/0x160
[ 1178.614685][    C1]  ? __pfx_find_vma+0x10/0x10
[ 1178.619386][    C1]  handle_mm_fault+0x40a/0x8e0
[ 1178.624173][    C1]  do_user_addr_fault+0x764/0x1380
[ 1178.629310][    C1]  exc_page_fault+0x82/0x100
[ 1178.633919][    C1]  asm_exc_page_fault+0x26/0x30
[ 1178.638776][    C1] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 1178.644598][    C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[ 1178.664213][    C1] RSP: 0018:ffffc9000e9978d8 EFLAGS: 00050206
[ 1178.670297][    C1] RAX: 00007ffffffff001 RBX: 000000000000001c RCX: 000000000000001c
[ 1178.678276][    C1] RDX: 0000000000000001 RSI: 00000000800d5000 RDI: ffffc9000e997960
[ 1178.686259][    C1] RBP: ffffc9000e9979f0 R08: 0000000000000003 R09: 0000000000000004
[ 1178.694237][    C1] R10: dffffc0000000000 R11: fffff52001d32f2f R12: ffffc9000e997960
[ 1178.702217][    C1] R13: ffffc9000e997ca0 R14: ffffc9000e997960 R15: 00000000800d5000
[ 1178.710303][    C1]  _copy_from_user+0x7a/0xb0
[ 1178.714916][    C1]  get_compat_msghdr+0xad/0x4a0
[ 1178.719781][    C1]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1178.725266][    C1]  ? ___sys_recvmsg+0x1c4/0x510
[ 1178.730123][    C1]  ? kfree+0x4d/0x6d0
[ 1178.734124][    C1]  ___sys_recvmsg+0x17f/0x510
[ 1178.738820][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1178.744053][    C1]  ? __fget_files+0x3a0/0x420
[ 1178.748752][    C1]  do_recvmmsg+0x36a/0x770
[ 1178.753189][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1178.758146][    C1]  ? __ia32_compat_sys_ioctl+0x824/0x840
[ 1178.763807][    C1]  __sys_recvmmsg+0x19d/0x280
[ 1178.768504][    C1]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1178.773710][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1178.778493][    C1]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 1178.784658][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[ 1178.789788][    C1]  do_fast_syscall_32+0x34/0x80
[ 1178.794739][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1178.801078][    C1] RIP: 0023:0xf7f55539
[ 1178.805150][    C1] RSP: 002b:00000000f540455c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 1178.813584][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[ 1178.821570][    C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[ 1178.829575][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1178.837548][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1178.845522][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1178.853515][    C1]  </TASK>
[ 1178.856535][    C1] task:crond           state:R  running task     stack:23720 pid:5571  tgid:5571  ppid:1      task_flags:0x400000 flags:0x00080001
[ 1178.870048][    C1] Call Trace:
[ 1178.873418][    C1]  <TASK>
[ 1178.876354][    C1]  __schedule+0x1798/0x4cc0
[ 1178.880987][    C1]  ? __pfx___schedule+0x10/0x10
[ 1178.885866][    C1]  ? is_bpf_text_address+0x292/0x2b0
[ 1178.891181][    C1]  ? preempt_schedule_irq+0xaa/0x150
[ 1178.896496][    C1]  preempt_schedule_irq+0xb5/0x150
[ 1178.901630][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1178.907378][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1178.913200][    C1]  irqentry_exit+0x6f/0x90
[ 1178.917635][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1178.923627][    C1] RIP: 0010:lock_release+0x9/0x3e0
[ 1178.928756][    C1] Code: 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 80 ed d0
[ 1178.948377][    C1] RSP: 0018:ffffc90003aaf718 EFLAGS: 00000202
[ 1178.954462][    C1] RAX: 0000000000000001 RBX: ffffffff90183d01 RCX: 9268bde91f402c00
[ 1178.962441][    C1] RDX: ffffc90003aaf801 RSI: ffffffff81738c45 RDI: ffffffff8df3d6e0
[ 1178.970420][    C1] RBP: dffffc0000000000 R08: ffffc90003aafc80 R09: 0000000000000000
[ 1178.978397][    C1] R10: ffffc90003aaf858 R11: fffff52000755f0d R12: ffffc90003aafc90
[ 1178.986379][    C1] R13: ffffc90003aa8000 R14: ffffc90003aaf808 R15: ffffffff81738c45
[ 1178.994366][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1178.999504][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.004630][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1179.009406][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.014537][    C1]  unwind_next_frame+0x19a9/0x2390
[ 1179.019669][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.024793][    C1]  ? qlist_free_all+0x97/0x140
[ 1179.029572][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1179.035745][    C1]  arch_stack_walk+0x11c/0x150
[ 1179.040528][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[ 1179.046183][    C1]  stack_trace_save+0x9c/0xe0
[ 1179.050880][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1179.056272][    C1]  save_stack+0xf5/0x1f0
[ 1179.060531][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1179.065394][    C1]  ? __free_frozen_pages+0xbc4/0xd30
[ 1179.070691][    C1]  ? __put_partials+0x146/0x170
[ 1179.075555][    C1]  ? put_cpu_partial+0x1f2/0x2e0
[ 1179.080528][    C1]  ? __slab_free+0x2b9/0x390
[ 1179.085138][    C1]  ? qlist_free_all+0x97/0x140
[ 1179.089938][    C1]  ? page_ext_put+0x97/0xc0
[ 1179.094476][    C1]  __reset_page_owner+0x71/0x1f0
[ 1179.099440][    C1]  __free_frozen_pages+0xbc4/0xd30
[ 1179.104587][    C1]  __put_partials+0x146/0x170
[ 1179.109289][    C1]  put_cpu_partial+0x1f2/0x2e0
[ 1179.114072][    C1]  __slab_free+0x2b9/0x390
[ 1179.118505][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1179.124500][    C1]  ? __phys_addr+0xd3/0x180
[ 1179.129021][    C1]  qlist_free_all+0x97/0x140
[ 1179.133628][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1179.139102][    C1]  __kasan_slab_alloc+0x22/0x80
[ 1179.143982][    C1]  kmem_cache_alloc_noprof+0x367/0x6e0
[ 1179.149467][    C1]  ? getname_flags+0xb8/0x540
[ 1179.154167][    C1]  getname_flags+0xb8/0x540
[ 1179.158686][    C1]  do_sys_openat2+0xbc/0x1c0
[ 1179.163292][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1179.168512][    C1]  ? __pfx_task_work_run+0x10/0x10
[ 1179.173643][    C1]  __x64_sys_openat+0x138/0x170
[ 1179.178519][    C1]  do_syscall_64+0xfa/0xfa0
[ 1179.183035][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.189106][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1179.194756][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1179.199448][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.205372][    C1] RIP: 0033:0x7fd1cf968407
[ 1179.209799][    C1] RSP: 002b:00007fffb2650c30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1179.218224][    C1] RAX: ffffffffffffffda RBX: 00007fd1cf818c80 RCX: 00007fd1cf968407
[ 1179.226207][    C1] RDX: 0000000000000000 RSI: 00007fd1cfb5b764 RDI: ffffffffffffff9c
[ 1179.234184][    C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[ 1179.242157][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fd1cfb67492
[ 1179.250138][    C1] R13: 00007fd1cfb67492 R14: 0000000000000001 R15: 000000000000002c
[ 1179.258137][    C1]  </TASK>
[ 1179.261159][    C1] task:kworker/1:1     state:R  running task     stack:21896 pid:43    tgid:43    ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1179.274739][    C1] Workqueue:  0x0 (wg-crypt-wg2)
[ 1179.279699][    C1] Call Trace:
[ 1179.282983][    C1]  <TASK>
[ 1179.285919][    C1]  __schedule+0x1798/0x4cc0
[ 1179.290461][    C1]  ? __pfx___schedule+0x10/0x10
[ 1179.295327][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1179.300197][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1179.305059][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1179.309920][    C1]  preempt_schedule_notrace+0xd1/0x110
[ 1179.315397][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[ 1179.321474][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.326615][    C1]  preempt_schedule_notrace_thunk+0x16/0x30
[ 1179.332529][    C1]  rcu_is_watching+0x7f/0xb0
[ 1179.337130][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.342250][    C1]  unwind_next_frame+0x1965/0x2390
[ 1179.347378][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1179.352502][    C1]  ? __kasan_slab_alloc+0x22/0x80
[ 1179.357545][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1179.363712][    C1]  arch_stack_walk+0x11c/0x150
[ 1179.368494][    C1]  ? __kmalloc_cache_noprof+0x36f/0x6f0
[ 1179.374057][    C1]  stack_trace_save+0x9c/0xe0
[ 1179.378745][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1179.384145][    C1]  save_stack+0xf5/0x1f0
[ 1179.388405][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1179.393268][    C1]  ? __free_frozen_pages+0xbc4/0xd30
[ 1179.398568][    C1]  ? __put_partials+0x146/0x170
[ 1179.403424][    C1]  ? put_cpu_partial+0x1f2/0x2e0
[ 1179.408371][    C1]  ? __slab_free+0x2b9/0x390
[ 1179.412964][    C1]  ? qlist_free_all+0x97/0x140
[ 1179.417735][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[ 1179.423379][    C1]  ? __kasan_slab_alloc+0x22/0x80
[ 1179.428432][    C1]  ? page_ext_put+0x97/0xc0
[ 1179.432962][    C1]  __reset_page_owner+0x71/0x1f0
[ 1179.437917][    C1]  __free_frozen_pages+0xbc4/0xd30
[ 1179.443054][    C1]  __put_partials+0x146/0x170
[ 1179.447743][    C1]  put_cpu_partial+0x1f2/0x2e0
[ 1179.452516][    C1]  __slab_free+0x2b9/0x390
[ 1179.456941][    C1]  ? __phys_addr+0xd3/0x180
[ 1179.461463][    C1]  qlist_free_all+0x97/0x140
[ 1179.466076][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1179.471550][    C1]  __kasan_slab_alloc+0x22/0x80
[ 1179.476415][    C1]  __kmalloc_cache_noprof+0x36f/0x6f0
[ 1179.481806][    C1]  ? __kthread_create_on_node+0xef/0x3e0
[ 1179.487444][    C1]  ? __init_swait_queue_head+0xa9/0x150
[ 1179.493017][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1179.498141][    C1]  __kthread_create_on_node+0xef/0x3e0
[ 1179.503613][    C1]  ? __pfx___kthread_create_on_node+0x10/0x10
[ 1179.509688][    C1]  ? string+0x279/0x2b0
[ 1179.513874][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1179.518995][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1179.524116][    C1]  kthread_create_on_node+0xdd/0x130
[ 1179.529419][    C1]  ? __pfx_kthread_create_on_node+0x10/0x10
[ 1179.535331][    C1]  ? __kmalloc_cache_node_noprof+0x471/0x6f0
[ 1179.541326][    C1]  ? format_worker_id+0x110/0x260
[ 1179.546369][    C1]  create_worker+0x299/0x720
[ 1179.550978][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1179.555755][    C1]  ? __pfx_create_worker+0x10/0x10
[ 1179.560889][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1179.566105][    C1]  worker_thread+0x33e/0xda0
[ 1179.570731][    C1]  kthread+0x711/0x8a0
[ 1179.574813][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1179.579929][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.584530][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1179.589741][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1179.594949][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.599552][    C1]  ret_from_fork+0x4bc/0x870
[ 1179.604152][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1179.609274][    C1]  ? __switch_to_asm+0x39/0x70
[ 1179.614052][    C1]  ? __switch_to_asm+0x33/0x70
[ 1179.618821][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.623428][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1179.628220][    C1]  </TASK>
[ 1179.631239][    C1] rcu: rcu_preempt kthread starved for 9235 jiffies! g122545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1179.642433][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1179.652411][    C1] rcu: RCU grace-period kthread stack dump:
[ 1179.658302][    C1] task:rcu_preempt     state:R  running task     stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1179.671805][    C1] Call Trace:
[ 1179.675089][    C1]  <TASK>
[ 1179.678036][    C1]  __schedule+0x1798/0x4cc0
[ 1179.682575][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1179.687429][    C1]  ? __pfx___schedule+0x10/0x10
[ 1179.692316][    C1]  ? schedule+0x91/0x360
[ 1179.696583][    C1]  schedule+0x165/0x360
[ 1179.700748][    C1]  schedule_timeout+0x12b/0x270
[ 1179.705608][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1179.710989][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1179.716902][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1179.722309][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1179.727894][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1179.732786][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1179.738952][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1179.744256][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1179.749476][    C1]  ? finish_swait+0xcd/0x1f0
[ 1179.754084][    C1]  rcu_gp_kthread+0x99/0x390
[ 1179.758682][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1179.763887][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1179.768833][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1179.773875][    C1]  kthread+0x711/0x8a0
[ 1179.777955][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1179.783157][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.787765][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1179.792975][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1179.798187][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.802793][    C1]  ret_from_fork+0x4bc/0x870
[ 1179.807395][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1179.812587][    C1]  ? __switch_to_asm+0x39/0x70
[ 1179.817352][    C1]  ? __switch_to_asm+0x33/0x70
[ 1179.822120][    C1]  ? __pfx_kthread+0x10/0x10
[ 1179.826723][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1179.831513][    C1]  </TASK>
[ 1179.834536][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1179.840872][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1179.849812][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1179.859872][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2d/0x40
[ 1179.866135][    C1] Code: fa 31 c0 83 3d a7 66 36 04 00 74 1e 83 3d aa 95 36 04 00 74 15 65 48 8b 0c 25 08 50 6e 92 31 c0 83 b9 2c 0b 00 00 00 0f 94 c0 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
[ 1179.885758][    C1] RSP: 0018:ffffc90000a07bc8 EFLAGS: 00000246
[ 1179.891838][    C1] RAX: 0000000000000001 RBX: ffffffff897baf53 RCX: ffff88801ce9dac0
[ 1179.899818][    C1] RDX: 0000000000000100 RSI: ffffffff8bbf08c0 RDI: ffffffff8bbf0880
[ 1179.907793][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff897baf53
[ 1179.915771][    C1] R10: 0000000000000003 R11: ffffffff897c02c0 R12: dffffc0000000000
[ 1179.923751][    C1] R13: dffffc0000000000 R14: ffff888029f0a800 R15: 0000000000000031
[ 1179.931733][    C1] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[ 1179.940674][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1179.947265][    C1] CR2: 00000000800cd000 CR3: 000000005e49c000 CR4: 00000000003526f0
[ 1179.955255][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1179.963235][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1179.971211][    C1] Call Trace:
[ 1179.974492][    C1]  <IRQ>
[ 1179.977339][    C1]  synproxy_pernet+0xec/0x240
[ 1179.982027][    C1]  ipv6_synproxy_hook+0xa9/0xda0
[ 1179.986977][    C1]  ? nf_nat_ipv6_fn+0x21d/0x2d0
[ 1179.991845][    C1]  ? __pfx_ipv6_synproxy_hook+0x10/0x10
[ 1179.997397][    C1]  ? ip6table_mangle_net_exit+0x10/0x20
[ 1180.002952][    C1]  ? nf_nat_ipv6_out+0x2f8/0x380
[ 1180.007909][    C1]  ? __pfx_ipv6_synproxy_hook+0x10/0x10
[ 1180.013467][    C1]  nf_hook_slow+0xc5/0x220
[ 1180.017893][    C1]  nf_hook+0x217/0x380
[ 1180.021982][    C1]  ? nf_hook+0x9d/0x380
[ 1180.026146][    C1]  ? __pfx_nf_hook+0x10/0x10
[ 1180.030760][    C1]  ? __pfx_ip6_finish_output+0x10/0x10
[ 1180.036259][    C1]  ? ip6_output+0x126/0x550
[ 1180.040786][    C1]  ip6_output+0x30b/0x550
[ 1180.045129][    C1]  ? __pfx_ip6_finish_output+0x10/0x10
[ 1180.050611][    C1]  synproxy_send_tcp_ipv6+0x543/0x700
[ 1180.056005][    C1]  ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10
[ 1180.061907][    C1]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 1180.067288][    C1]  ? kmem_cache_alloc_node_noprof+0x483/0x710
[ 1180.073379][    C1]  ? __build_skb_around+0x262/0x3f0
[ 1180.078586][    C1]  ? synproxy_send_client_synack_ipv6+0x34f/0xca0
[ 1180.085006][    C1]  ? skb_put+0x11b/0x210
[ 1180.089261][    C1]  synproxy_send_client_synack_ipv6+0x80e/0xca0
[ 1180.095524][    C1]  ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10
[ 1180.102298][    C1]  ? nft_log_eval+0x214/0xab0
[ 1180.106982][    C1]  ? synproxy_pernet+0x45/0x270
[ 1180.111847][    C1]  nft_synproxy_eval_v6+0x36e/0x560
[ 1180.117062][    C1]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[ 1180.122793][    C1]  ? nf_ip_checksum+0x13c/0x510
[ 1180.127660][    C1]  nft_synproxy_do_eval+0x3d7/0x570
[ 1180.132891][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1180.138624][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1180.144019][    C1]  nft_do_chain+0x40c/0x1920
[ 1180.148624][    C1]  ? ip6t_do_table+0x1376/0x1560
[ 1180.153581][    C1]  ? nf_nat_inet_fn+0x924/0xba0
[ 1180.158444][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[ 1180.163476][    C1]  ? ipv6_find_hdr+0xc78/0x1050
[ 1180.168354][    C1]  ? nf_nat_ipv6_fn+0x21d/0x2d0
[ 1180.173222][    C1]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[ 1180.178441][    C1]  nft_do_chain_inet+0x25d/0x340
[ 1180.183387][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1180.188856][    C1]  ? nf_nat_ipv6_local_in+0x14f/0x650
[ 1180.194248][    C1]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[ 1180.199989][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1180.204151][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1180.209616][    C1]  nf_hook_slow+0xc5/0x220
[ 1180.214044][    C1]  NF_HOOK+0x206/0x3a0
[ 1180.218117][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1180.223493][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1180.227654][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1180.232360][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1180.237779][    C1]  ip6_input+0x16a/0x270
[ 1180.242042][    C1]  ? ip6_input+0x23/0x270
[ 1180.246471][    C1]  NF_HOOK+0x30c/0x3a0
[ 1180.250639][    C1]  ? skb_orphan+0xaf/0xd0
[ 1180.254989][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1180.260210][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1180.264376][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1180.268974][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1180.274191][    C1]  __netif_receive_skb+0xd3/0x380
[ 1180.279237][    C1]  ? process_backlog+0x2d5/0x14f0
[ 1180.284278][    C1]  process_backlog+0x60e/0x14f0
[ 1180.289161][    C1]  ? __pfx_process_backlog+0x10/0x10
[ 1180.294567][    C1]  __napi_poll+0xc7/0x360
[ 1180.298909][    C1]  ? skb_defer_free_flush+0x229/0x250
[ 1180.304297][    C1]  net_rx_action+0x5f7/0xdf0
[ 1180.308916][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1180.314142][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1180.319308][    C1]  handle_softirqs+0x286/0x870
[ 1180.324082][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 1180.328868][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1180.334170][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1180.339388][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 1180.343987][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1180.349206][    C1]  irq_exit_rcu+0x9/0x30
[ 1180.353455][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1180.359099][    C1]  </IRQ>
[ 1180.362033][    C1]  <TASK>
[ 1180.364968][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1180.370990][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1180.376721][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1180.396338][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 1180.402418][    C1] RAX: cb339ef5b57acc00 RBX: ffffffff81967b47 RCX: cb339ef5b57acc00
[ 1180.410401][    C1] RDX: 0000000000000001 RSI: ffffffff8d70e43a RDI: ffffffff8bbf08e0
[ 1180.418386][    C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[ 1180.426367][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cee70
[ 1180.434351][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58
[ 1180.442335][    C1]  ? do_idle+0x1e7/0x510
[ 1180.446600][    C1]  default_idle+0x13/0x20
[ 1180.450934][    C1]  default_idle_call+0x73/0xb0
[ 1180.455702][    C1]  do_idle+0x1e7/0x510
[ 1180.459791][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1180.464401][    C1]  cpu_startup_entry+0x44/0x60
[ 1180.469170][    C1]  start_secondary+0x101/0x110
[ 1180.473956][    C1]  common_startup_64+0x13e/0x147
[ 1180.478921][    C1]  </TASK>
[ 1180.776292][   T31] INFO: task kworker/1:5:5904 blocked for more than 187 seconds.
[ 1180.792064][   T31]       Not tainted syzkaller #0
[ 1180.797033][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1180.813771][   T31] task:kworker/1:5     state:D stack:21512 pid:5904  tgid:5904  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1180.834008][   T31] Workqueue: events_power_efficient reg_check_chans_work
[ 1180.850085][   T31] Call Trace:
[ 1180.853395][   T31]  <TASK>
[ 1180.856342][   T31]  __schedule+0x1798/0x4cc0
[ 1180.869988][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1180.876391][   T31]  ? __pfx___schedule+0x10/0x10
[ 1180.889961][   T31]  ? schedule+0x91/0x360
[ 1180.894257][   T31]  schedule+0x165/0x360
[ 1180.915099][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1180.929053][   T31]  __mutex_lock+0x7e6/0x1350
[ 1180.933709][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1180.940874][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1180.948724][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1180.977260][   T31]  ? reg_check_chans_work+0x170/0xf40
[ 1180.991025][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1180.996114][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1181.011050][   T31]  reg_check_chans_work+0x170/0xf40
[ 1181.016309][   T31]  ? __pfx_reg_check_chans_work+0x10/0x10
[ 1181.030446][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1181.035687][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1181.050483][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1181.056255][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1181.070870][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1181.076910][   T31]  worker_thread+0x8a0/0xda0
[ 1181.089965][   T31]  kthread+0x711/0x8a0
[ 1181.094081][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1181.115718][   T31]  ? __pfx_kthread+0x10/0x10
[ 1181.128746][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1181.133989][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1181.156732][   T31]  ? __pfx_kthread+0x10/0x10
[ 1181.170282][   T31]  ret_from_fork+0x4bc/0x870
[ 1181.174927][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1181.188322][   T31]  ? __switch_to_asm+0x39/0x70
[ 1181.193213][   T31]  ? __switch_to_asm+0x33/0x70
[ 1181.214576][   T31]  ? __pfx_kthread+0x10/0x10
[ 1181.235829][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1181.249203][   T31]  </TASK>
[ 1181.252332][   T31] 
[ 1181.252332][   T31] Showing all locks held in the system:
[ 1181.269044][   T31] 1 lock held by kthreadd/2:
[ 1181.273668][   T31] 4 locks held by kworker/R-netns/8:
[ 1181.288012][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1181.315517][   T31]  #1: ffffc900000d7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1181.334439][   T31]  #2: ffffffff8f2beed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[ 1181.352139][   T31]  #3: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[ 1181.370494][   T31] 3 locks held by kworker/u8:0/12:
[ 1181.375646][   T31] 3 locks held by kworker/u8:1/13:
[ 1181.389791][   T31] 3 locks held by kworker/1:0/24:
[ 1181.394850][   T31] 5 locks held by kdevtmpfs/26:
[ 1181.408073][   T31] 1 lock held by khungtaskd/31:
[ 1181.412958][   T31]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1181.431184][   T31] 2 locks held by kworker/1:1/43:
[ 1181.436234][   T31] 4 locks held by kworker/u8:3/50:
[ 1181.449743][   T31] 3 locks held by kworker/u8:4/62:
[ 1181.454875][   T31] 2 locks held by kswapd0/86:
[ 1181.468606][   T31] 6 locks held by kworker/1:2/812:
[ 1181.473757][   T31] 2 locks held by kworker/1:3/983:
[ 1181.488230][   T31] 3 locks held by kworker/u8:5/1151:
[ 1181.493551][   T31] 5 locks held by aoe_tx0/1301:
[ 1181.515000][   T31] 3 locks held by kworker/R-ipv6_/3184:
[ 1181.528925][   T31]  #0: ffff88802f315148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1181.549036][   T31]  #1: ffffc9000bd57b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1181.572284][   T31]  #2: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1181.590810][   T31] 2 locks held by kworker/R-bat_e/3409:
[ 1181.596386][   T31] 3 locks held by kworker/u8:6/3562:
[ 1181.610053][   T31] 2 locks held by kworker/u8:7/4557:
[ 1181.615365][   T31] 1 lock held by klogd/5188:
[ 1181.628316][   T31] 2 locks held by udevd/5199:
[ 1181.633020][   T31] 2 locks held by dhcpcd/5493:
[ 1181.654323][   T31] 2 locks held by crond/5571:
[ 1181.668057][   T31] 2 locks held by getty/5589:
[ 1181.672767][   T31]  #0: ffff8880339180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1181.691483][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1181.710019][   T31] 2 locks held by kworker/0:3/5876:
[ 1181.715244][   T31] 4 locks held by kworker/1:5/5904:
[ 1181.728827][   T31]  #0: ffff88801a056948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1181.750132][   T31]  #1: ffffc9000451fba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1181.770379][   T31]  #2: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40
[ 1181.789458][   T31]  #3: ffff88807bef0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x170/0xf40
[ 1181.808232][   T31] 2 locks held by kworker/0:8/5932:
[ 1181.813470][   T31] 3 locks held by kworker/1:6/6284:
[ 1181.835721][   T31] 4 locks held by kworker/u8:2/12055:
[ 1181.849648][   T31] 3 locks held by kworker/u8:8/12057:
[ 1181.855064][   T31] 4 locks held by kworker/u8:9/12059:
[ 1181.869553][   T31] 5 locks held by kworker/u8:10/12061:
[ 1181.875051][   T31] 4 locks held by kworker/u8:11/12063:
[ 1181.889576][   T31] 3 locks held by kworker/u8:12/12065:
[ 1181.895079][   T31] 3 locks held by kworker/u8:13/12067:
[ 1181.909434][   T31] 4 locks held by kworker/u8:14/12069:
[ 1181.914929][   T31] 4 locks held by kworker/u8:15/12070:
[ 1181.928738][   T31] 2 locks held by syz-executor/13661:
[ 1181.934136][   T31] 3 locks held by kworker/u8:16/13872:
[ 1181.947997][   T31] 2 locks held by syz-executor/15423:
[ 1181.953409][   T31] 3 locks held by kworker/1:4/16925:
[ 1181.975958][   T31] 2 locks held by syz.3.3703/18177:
[ 1181.990221][   T31] 4 locks held by syz.4.3704/18191:
[ 1181.995457][   T31] 1 lock held by syz.2.3705/18190:
[ 1182.008879][   T31] 3 locks held by kworker/u8:17/18198:
[ 1182.014375][   T31] 2 locks held by kworker/1:7/18200:
[ 1182.028434][   T31] 
[ 1182.029663][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.030783][   T31] =============================================
[ 1182.030783][   T31] 
[ 1182.053481][   T31] NMI backtrace for cpu 1
[ 1182.053505][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1182.053542][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1182.053555][   T31] Call Trace:
[ 1182.053570][   T31]  <TASK>
[ 1182.053579][   T31]  dump_stack_lvl+0x189/0x250
[ 1182.053614][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1182.053641][   T31]  ? __pfx__printk+0x10/0x10
[ 1182.053674][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1182.053701][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1182.053726][   T31]  ? __pfx__printk+0x10/0x10
[ 1182.053751][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1182.053785][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1182.053812][   T31]  watchdog+0xf60/0xfa0
[ 1182.053837][   T31]  ? watchdog+0x1e2/0xfa0
[ 1182.053863][   T31]  kthread+0x711/0x8a0
[ 1182.053892][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1182.053911][   T31]  ? __pfx_kthread+0x10/0x10
[ 1182.053939][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1182.053965][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1182.053991][   T31]  ? __pfx_kthread+0x10/0x10
[ 1182.054018][   T31]  ret_from_fork+0x4bc/0x870
[ 1182.054042][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1182.054069][   T31]  ? __switch_to_asm+0x39/0x70
[ 1182.054086][   T31]  ? __switch_to_asm+0x33/0x70
[ 1182.054101][   T31]  ? __pfx_kthread+0x10/0x10
[ 1182.054128][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1182.054162][   T31]  </TASK>
[ 1182.054170][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1182.433637][    C0] NMI backtrace for cpu 0
[ 1182.433657][    C0] CPU: 0 UID: 0 PID: 3409 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) 
[ 1182.433678][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1182.433690][    C0] Workqueue: bat_events batadv_tt_purge
[ 1182.433718][    C0] RIP: 0010:lock_release+0x14a/0x3e0
[ 1182.433737][    C0] Code: 89 f6 e8 59 24 a9 09 44 89 64 24 14 45 89 e5 85 c0 0f 84 dd 00 00 00 48 85 ed 0f 84 19 01 00 00 83 7d 24 00 0f 85 ea 01 00 00 <8b> 45 20 3d 00 00 20 00 48 8b 5c 24 08 8b 54 24 14 72 25 89 c1 81
[ 1182.433753][    C0] RSP: 0018:ffffc90000006bd0 EFLAGS: 00000046
[ 1182.433766][    C0] RAX: 0000000000000001 RBX: 0000000000000019 RCX: 66b1cef0e7f62000
[ 1182.433779][    C0] RDX: ffffc90000006d01 RSI: ffffffff8df3d6e0 RDI: ffff8880301be6b8
[ 1182.433792][    C0] RBP: ffff8880301be6b8 R08: ffffc9000c427f38 R09: 0000000000000000
[ 1182.433804][    C0] R10: ffffc90000006d58 R11: fffff52000000dad R12: 0000000000000005
[ 1182.433817][    C0] R13: 0000000000000005 R14: ffffffff8df3d6e0 R15: ffff8880301bdac0
[ 1182.433829][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[ 1182.433843][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1182.433855][    C0] CR2: 00000000801e1018 CR3: 0000000021ad2000 CR4: 00000000003526f0
[ 1182.433870][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1182.433882][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1182.433894][    C0] Call Trace:
[ 1182.433900][    C0]  <IRQ>
[ 1182.433909][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1182.433931][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1182.433949][    C0]  unwind_next_frame+0x19a9/0x2390
[ 1182.433970][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1182.433989][    C0]  ? ret_from_fork+0x4bc/0x870
[ 1182.434007][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1182.434030][    C0]  arch_stack_walk+0x11c/0x150
[ 1182.434051][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1182.434068][    C0]  stack_trace_save+0x9c/0xe0
[ 1182.434088][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1182.434110][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1182.434129][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1182.434145][    C0]  kasan_save_track+0x3e/0x80
[ 1182.434167][    C0]  ? kasan_save_track+0x3e/0x80
[ 1182.434188][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1182.434211][    C0]  ? kmem_cache_alloc_node_noprof+0x433/0x710
[ 1182.434233][    C0]  ? __alloc_skb+0x112/0x2d0
[ 1182.434253][    C0]  ? synproxy_send_client_synack_ipv6+0x169/0xca0
[ 1182.434273][    C0]  ? nft_synproxy_eval_v6+0x36e/0x560
[ 1182.434294][    C0]  ? nft_synproxy_do_eval+0x3d7/0x570
[ 1182.434314][    C0]  ? nft_do_chain+0x40c/0x1920
[ 1182.434333][    C0]  ? nft_do_chain_inet+0x25d/0x340
[ 1182.434353][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1182.434369][    C0]  ? NF_HOOK+0x206/0x3a0
[ 1182.434383][    C0]  ? ip6_input+0x16a/0x270
[ 1182.434397][    C0]  ? NF_HOOK+0x30c/0x3a0
[ 1182.434410][    C0]  ? __netif_receive_skb+0xd3/0x380
[ 1182.434433][    C0]  ? process_backlog+0x60e/0x14f0
[ 1182.434456][    C0]  ? __napi_poll+0xc7/0x360
[ 1182.434476][    C0]  ? net_rx_action+0x5f7/0xdf0
[ 1182.434498][    C0]  ? handle_softirqs+0x286/0x870
[ 1182.434516][    C0]  ? do_softirq+0xec/0x180
[ 1182.434531][    C0]  ? __local_bh_enable_ip+0x17d/0x1c0
[ 1182.434548][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[ 1182.434568][    C0]  ? process_scheduled_works+0xae1/0x17b0
[ 1182.434585][    C0]  ? rescuer_thread+0x53c/0xdd0
[ 1182.434604][    C0]  ? kthread+0x711/0x8a0
[ 1182.434624][    C0]  ? ret_from_fork+0x4bc/0x870
[ 1182.434651][    C0]  ? __local_bh_enable_ip+0x17d/0x1c0
[ 1182.434669][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 1182.434693][    C0]  kmem_cache_alloc_node_noprof+0x433/0x710
[ 1182.434716][    C0]  ? __alloc_skb+0x112/0x2d0
[ 1182.434733][    C0]  __alloc_skb+0x112/0x2d0
[ 1182.434749][    C0]  synproxy_send_client_synack_ipv6+0x169/0xca0
[ 1182.434769][    C0]  ? synproxy_pernet+0x45/0x270
[ 1182.434793][    C0]  ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10
[ 1182.434812][    C0]  ? nft_tunnel_get_reduce+0x3a0/0x640
[ 1182.434830][    C0]  ? synproxy_pernet+0x45/0x270
[ 1182.434853][    C0]  nft_synproxy_eval_v6+0x36e/0x560
[ 1182.434876][    C0]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[ 1182.434900][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1182.434922][    C0]  nft_synproxy_do_eval+0x3d7/0x570
[ 1182.434945][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1182.434968][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1182.434990][    C0]  nft_do_chain+0x40c/0x1920
[ 1182.435011][    C0]  ? ip6t_do_table+0x1376/0x1560
[ 1182.435036][    C0]  ? nf_nat_inet_fn+0x924/0xba0
[ 1182.435058][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1182.435077][    C0]  ? ipv6_find_hdr+0xc78/0x1050
[ 1182.435106][    C0]  ? nf_nat_ipv6_fn+0x21d/0x2d0
[ 1182.435130][    C0]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[ 1182.435155][    C0]  nft_do_chain_inet+0x25d/0x340
[ 1182.435176][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1182.435195][    C0]  ? nf_nat_ipv6_local_in+0x14f/0x650
[ 1182.435221][    C0]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[ 1182.435247][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1182.435266][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1182.435287][    C0]  nf_hook_slow+0xc5/0x220
[ 1182.435306][    C0]  NF_HOOK+0x206/0x3a0
[ 1182.435321][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1182.435337][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1182.435351][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1182.435367][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1182.435388][    C0]  ip6_input+0x16a/0x270
[ 1182.435402][    C0]  ? ip6_input+0x23/0x270
[ 1182.435418][    C0]  NF_HOOK+0x30c/0x3a0
[ 1182.435432][    C0]  ? skb_orphan+0xaf/0xd0
[ 1182.435448][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1182.435462][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1182.435477][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1182.435492][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1182.435512][    C0]  __netif_receive_skb+0xd3/0x380
[ 1182.435535][    C0]  ? process_backlog+0x2d5/0x14f0
[ 1182.435560][    C0]  process_backlog+0x60e/0x14f0
[ 1182.435589][    C0]  ? __pfx_process_backlog+0x10/0x10
[ 1182.435612][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1182.435635][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1182.435658][    C0]  __napi_poll+0xc7/0x360
[ 1182.435678][    C0]  ? skb_defer_free_flush+0x229/0x250
[ 1182.435702][    C0]  net_rx_action+0x5f7/0xdf0
[ 1182.435731][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1182.435769][    C0]  handle_softirqs+0x286/0x870
[ 1182.435787][    C0]  ? do_softirq+0xec/0x180
[ 1182.435805][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1182.435825][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[ 1182.435845][    C0]  do_softirq+0xec/0x180
[ 1182.435861][    C0]  </IRQ>
[ 1182.435867][    C0]  <TASK>
[ 1182.435874][    C0]  ? __pfx_do_softirq+0x10/0x10
[ 1182.435894][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[ 1182.435909][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[ 1182.435927][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1182.435945][    C0]  ? do_raw_spin_unlock+0x122/0x240
[ 1182.435966][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[ 1182.435988][    C0]  batadv_tt_purge+0x4d1/0x9e0
[ 1182.436011][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1182.436029][    C0]  process_scheduled_works+0xae1/0x17b0
[ 1182.436058][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1182.436079][    C0]  ? assign_work+0x381/0x410
[ 1182.436097][    C0]  rescuer_thread+0x53c/0xdd0
[ 1182.436118][    C0]  ? rescuer_thread+0xbb/0xdd0
[ 1182.436144][    C0]  kthread+0x711/0x8a0
[ 1182.436166][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[ 1182.436185][    C0]  ? __pfx_kthread+0x10/0x10
[ 1182.436206][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1182.436228][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1182.436254][    C0]  ? __pfx_kthread+0x10/0x10
[ 1182.436276][    C0]  ret_from_fork+0x4bc/0x870
[ 1182.436293][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1182.436312][    C0]  ? __switch_to_asm+0x39/0x70
[ 1182.436326][    C0]  ? __switch_to_asm+0x33/0x70
[ 1182.436339][    C0]  ? __pfx_kthread+0x10/0x10
[ 1182.436360][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1182.436381][    C0]  </TASK>
[ 1183.198442][ T1301] ieee802154 phy1 wpan1: encryption failed: -22