last executing test programs:

30.110789014s ago: executing program 1 (id=1493):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00010025bd70000000000002000000ff"], 0x24}}, 0x844)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_emit_vhci(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0)

24.766012368s ago: executing program 3 (id=1539):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare(0x2e020400)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200028000000281f47afa22e61a546071ea9e43d359c479c37f545cb92e4490104000000000000b312a3260606"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)

22.515581666s ago: executing program 4 (id=1556):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x10000008eb9, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB], 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

22.341388805s ago: executing program 4 (id=1558):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a3000000000080003"], 0x28}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x14)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c000400010000010002800008000500", @ANYRES32=r7, @ANYBLOB="38e65338545a2d22f4a28fd215013227e424c9c065c973de2fed61988eab2f8f4e44b426444c94f1340d28aa4c9b84906e11c528a4322bc1ae4cc0cf3b208f2a965fdf6e83ea17506461d40f9b77bdb978733aa28fcff9becbe4883dc3c997b0"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x280, 0x300, 0x3f, 0x10000, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1000}, {0x2, 0x8, 0x1f}, {}, {}, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xa})
socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7)
syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00100000000086dd600a84750058060120110000000000000000000000000002fe8000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000080a00000002000098ca04020303d72204914f080a00000004000000ad13128098cf093cc9cd7b8ec814f9bcfdfea9051200000001fffffffe0000000300000006000000"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a81500810041000800459c001c03fc009a27ecf47800000004e00000011100907800000000"], 0x0)

22.310335246s ago: executing program 1 (id=1559):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040a01, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x3}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0xc0844123, &(0x7f0000000300)=0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, &(0x7f00000000c0)="929a320aa4dacf8fa0c59ce9783602e72a8a1bad4ebba3dbf0269634ec6051029bb414e4272664ce6e5a2041888896cb151e566aeca3e718fba79bb8714f9348b0e2434c5c5f77f96771e8811cb350a453752b07e8f40acd8864ebd73163eec8d03b2303b0a3ed6d87f5ab5fba479f25372cfcd989e1847f8ec4228d56598cccdcaf1bca0589e516f055", 0x8a, 0x4, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @loopback, 0x200}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

22.181492657s ago: executing program 2 (id=1560):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07", 0x51}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c0", 0xb5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a5612", 0x9c}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
r4 = fanotify_init(0x0, 0x2)
fchdir(r4)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
connect$can_j1939(r2, &(0x7f0000000280)={0x1d, r7, 0x3, {0x2, 0xf0}, 0x1}, 0x18)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0xffffffffffffffe0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22.067454498s ago: executing program 4 (id=1562):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180))
syz_usb_connect$uac2(0x2, 0xbd, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xa5, 0x80, 0x0, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xff, 0x1b, 0x3}, [@multiply_unit={0x7, 0x24, 0xc, 0x1, 0x2, 0xda, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, [0x3, 0xff, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x81, 0x5, 0x0, "cf2a6b77f16520"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x2, 0xc, {0x8, 0x25, 0x1, 0x2, 0xf, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x90, 0x4, 0x5d, 0x9, "c549c6598489ac216d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x6, 0x0, {0x8, 0x25, 0x1, 0x3, 0xc, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x4, 0x6, 0x9, 0xff, 0xf7}, 0x5b, &(0x7f0000000300)={0x5, 0xf, 0x5b, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xd8, 0x6, 0x7, 0xf0f, 0xba, [0xc0, 0x2040, 0xff, 0x3fcf, 0xff0000, 0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0xe1, 0x1, 0xb2f, 0x0, 0x7, [0x810f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0xbf}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0xd3, 0xf, 0x800, [0x30, 0xc0cf, 0xff0030]}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "f46181"}}, {0x4a, &(0x7f00000004c0)=@string={0x4a, 0x3, "af22d31e3b5bd7bbf80783d1393b99a11e811343b3d782796675020f9d8313e83c8bf8f13d9b2feeb98d4216a1998581ac3efd7fd7cd2ba3289241ee6245826d9da919b97d028dce"}}, {0x99, &(0x7f0000000540)=@string={0x99, 0x3, "6f45b91e7838aec53e3cc4d9e5118db7401d76f4b5f2a2231ddf421bd4916843119ba5a439ec2b30b7dfccd3bd98703604b3a09ebcff729da5bbdf645b26011564f06260cbf84ffcaa536e850f75b3c010846476ad8d9a714f93585092a39c7902446a4f958326cdcafab5f27e17e0b731aa33caf05cb68961a8f34e71d1c09c7dfc780b17b50304799ad2e188bcd0f016c869259eacc6"}}]})
r1 = dup(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x51}}, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
r3 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil)
socket(0x10, 0x2, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r4=>0x0}, &(0x7f0000000680)=0xc)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x2, r4, 0xee01, 0x0, 0x0, 0x22, 0x6}, 0x3, 0x101, 0x0, 0x1, 0x0, 0x0, 0x7})

21.841647965s ago: executing program 4 (id=1564):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x12, 0x4e24, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="5d7f9f0c37c757", 0x7}, {0x0}, {0x0, 0x20c}], 0x3}}], 0x1, 0x20008000)

21.70232971s ago: executing program 4 (id=1566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50)
keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, 0x20}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r6, 0x2000)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f00000006c0)=0x60)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r7, 0x1003}], 0x1, &(0x7f0000000200), 0x0, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000480)=@multiplanar_overlay={0x6, 0x1, 0x4, 0x0, 0xcea3, {}, {0x1, 0x0, 0x9, 0x10, 0x57, 0x5, "632a4b15"}, 0x4, 0x3, {&(0x7f0000000740)=[{0xe1cc, 0x2, {0x7}, 0xfffffffe}, {0x0, 0xfffffff9, {0x2b}, 0x2}]}, 0x8})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r9 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163440412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b40)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc35aa7e7f1b83b042d93bc9e4c773a47d3a158da988456d3e91e1f3b0026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xdf}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x842}], 0x18}], 0x1, 0x40800)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r10 = socket(0x10, 0x803, 0x0)
sendto(r10, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_INSN(r11, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0xfffffffffffffeae, 0x0, 0x2, 0x2})
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4)
recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

21.541325954s ago: executing program 1 (id=1567):
r0 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9e, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x6, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x7f}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x0, 0x4, 0x20, 0x98}, 0x28, &(0x7f0000000100)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x9, 0xf00, 0x4c5f, [0xff6030, 0xff000f, 0xc03f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x76, 0x7, 0x9, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "fc334597878d18e342b83844c4a42ad21cd4b078d5e7decddb794f55bf0e8310b31ec50c7ab8a4654dba4408a17f099baed0d6df159664606e78bc9e2fc8ceecacc43713010cd4f1f41bbb81"}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x40, 0x0, 0x8e, {0x8e, 0x6, "c40e42c0237ad2b0730ab803bda303caaf559dfbcf959f103473e4a220bca1c446aa288b3d6aba0be66c7b4fe0d0cef3d7d798b14c1584fb94452bcefcc31844ce5ca5803a79b22ccbe37237014f95870cff98b9ee368e65cf55cbdcb340926bbbca18a08fa46724925d24c97004e56f7bb26ce9d52a5607f8dfbaa1d7ba4a618e25b8794214bed787b6dec3"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xbc62e42ccc258a5f}}}, &(0x7f0000000600)={0x34, &(0x7f00000003c0)={0x40, 0xe, 0x40, "4671cf904c835a700202e8890190e7e8c088b52bdc51fd8fbddaffd8db3687832e6288ea54fd9914ee3228a1be90793bd1bfbf6813148232f0c3c03f7a628ba6"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000004c0)={0x20, 0x0, 0x86, {0x84, "53aa4c7241aaf454b6001de441dbea0e00bf8c5a8e03cde292c1d834cf24292c66c9fc065154ced886370844a4b8b239a41bddabc139f6363989e3e9da94f201a5ff99b16e50fff38f18655bd96659acac9cb538f11a6ad0a1cef16b2f0b81ba205a106742c4618f5634c458c11050f18ef69d1a1e0e3f84b5d34d134356402183665232"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x2}})
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000a80)=0x3)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d5, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x100, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40f910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde1b, 0x40, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_usb_connect(0x3, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0)
socket(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000640)={{0x12, 0x1, 0x4a0, 0x0, 0x0, 0x0, 0x0, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x3, 0x150, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x18, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x0, 0x84, {0x7, 0x25, 0x1, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfe, 0x3, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x4, 0x10, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x6, "", "f371"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x1a, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x96, 0x2, 0x80, 0xf0}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x9, 0x9, "19a1afa007361b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe9, 0xfe, 0x16, {0x7, 0x25, 0x1, 0x0, 0xd, 0x8000}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x9, 0x7, 0x1, 0x8, 0x7}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x3, [{0x43, &(0x7f0000000780)=@string={0x43, 0x3, "9f8f7131d183053c4f614439ab947e15d02e3984ea0b80502e4b894522745966b25e2f075e5b8259f7c624bdec64acd6a503d9f361e42c9ccce57ca09797e2137d"}}, {0xb8, &(0x7f0000000800)=@string={0xb8, 0x3, "d93b4dffc0b501457e055a6a0751abd1ff19ecbaa7f53dc56b480fe3350eb9586e99e90d750d23dd6877d221c6a865b9e17f7b80cabeb4d0a88b9c555204afb733892ff670a19416e7931bd013b7d6bf548ed152800b24ab1a07fd57a2410bdc4ce6bd40631dc35307536b722559a6fee378df15db4a29e971f27d8b34886f3202a9fc27e84316a32d3eed6220cc2d1651b4a99d73d784944c5d09fa79d50ef8e54d62198e029133e784040f71cddbbff87663943c81"}}, {0xcb, &(0x7f00000008c0)=@string={0xcb, 0x3, "b9044188862c126be7c0921ab28b6a21bc50c46ec2a0e5677b09209f73bf1a667af1d7e87a2368b1403283aeff74195a377018201ddf885d91c114b7c177a197c9a647625205b1628e7be7a4705e964e28f9d84ffad4e582ed966502ed73eeae651941123c97378eafaa2b8be33850158b9af0cec7ee7f92505098e20c0f42b73e70572ab512855127c3aca0aa6a12335f8ec01d5eaaa4461714235ec23c8376434f7eedf2a5bde1f8b8bf3f6476598459d65794c71a9921d42e06fc573d4e8522d6393b8cc8f5f39d"}}]})

21.540822446s ago: executing program 3 (id=1568):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x10000008eb9, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB], 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

21.540152965s ago: executing program 2 (id=1569):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0x14, 0x3e, 0x28, 0x40, 0x2c7c, 0x306, 0xb34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x92, 0x1, 0x40, 0xc0, "", [{{0x9, 0x4, 0x3e, 0xeb, 0x1, 0xff, 0xff, 0xff, 0xc, [], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0x1, 0xb8, 0x7}}]}}]}}]}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
setuid(0xee00)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x22, 0xe9, {0xe9, 0x2e, "6664f9fe9f9854d3401d92d26dfa2b25c3b42bd60a1f8491183452a21691fb1829e3d4b38666e37265722c2f5e0082a35ce2f57828cb12b4e1eee24d37a05e67f19dcd608e0cd5f890d66cf6c136d52e7d2560c3713f5ea3a87777a8a8b3bfea43e9d0f9bfaf554c30f8fe4ac4c64724365ce1fff76561135b61ffee80c76828904f119f9c1e3a2a5205faf4c3be35558ef33418358b1e081806f65e68732539aaca0d0333ad774a3226d3a71d6c20ec4735b6728e730cf64582eb09c4bbda0925bc4d9022372eee867e152145f000ec5745900efad363e06a673ab7f153b056e16e7437cae108"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000440)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xd, 0x80, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3f, 0x5, 0x2, 0x400, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa, 0x9, 0xef8}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1, 0x80, "cfc9931b", "809241c3"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf5, 0x8, 0x5, 0x7, 0x5, 0x2, 0x101}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x20, 0xb, 0x47, "75543caf56ca66b07badd897dae55c16743fb4d27c85ddccd9791cb8837f0f7b32768b0d9915b043fe57c0604c8e19eee6563cf421a6222de7c98cb0fa1cb101e66077a2e921fe"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x40, 0x80, [0x3b04fbaa75e9a8a5]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c3e3"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="56b01b734d19"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "cfb1"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xfd}})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r10, &(0x7f0000000200)='-:', 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x38, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0xb}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0xfffc, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x5}, 0x3c)

21.482581731s ago: executing program 4 (id=1571):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000700)=@raw=[@generic={0x7b, 0xa, 0x3, 0xffd4}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) (async)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000180)=ANY=[])

21.177649694s ago: executing program 2 (id=1573):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, 0x14)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x2, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0x20000000, 0x120}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040081}, 0x84)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000001c0)="0a744b619f8b7e77cd3ba432f62ed674bf021b7908da4f805b08769279fb0107958ce29b7956269009c41dcf67512b82c513c43ad7849afc88f887cd1da023500ec95688df8a41ba64234dbbf7d6ac0c5491d18066cf08b41758e2f4cf1ff69da30605f17d4998387bb69361c61b0f69a75e24d31734d78d2c49fddc904fbe968c733ef405a6ff547d726ae182801b267639b0beb8f348b5e08281cbd1a7348a793dfe5a08864447b62c2e7e85a40404175f23d8de98460684ccd4dc580989c7959cba35502af27d875176f347c387356adb9ad4dc85f112e56fa1f2d8dbd026fc63efd4c07f34c7294648", &(0x7f00000002c0)=""/250}, 0x20)
chdir(&(0x7f0000000140)='./file0\x00')
write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0], 0x8)

20.665711534s ago: executing program 0 (id=1576):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) (fail_nth: 4)

20.382358769s ago: executing program 3 (id=1577):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8840)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x880)

19.532996277s ago: executing program 3 (id=1578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xa}}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setitimer(0x1, &(0x7f0000000000)={{}, {0xb, 0x4}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4040011}, 0x8024)

19.421375602s ago: executing program 2 (id=1579):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44040010)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0xd8}}]}, 0x34}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r2 = openat(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x90583, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001600)=ANY=[@ANYBLOB="540100001000996f666633060000000000000000fc000000005fdc2b5eb7eac5a4000000000000000000000000000000000000010000000000000000000000000000000013b9b96f70b2f8c8867722532f838628648cbae19f1361c89215c8da2dcbfec9829278648011f4a5f7828200dcdf9bac6f43070600e0d7da1a276f8b91eddcff644276f8b95d654570a184817b04e88e56763f0fe798597fcff403d7e1aaea9561", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100, 0x130)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0xfff72000}]})
ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000001c0))
write$P9_RLERRORu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2d930700"/16], 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf}no=', @ANYRESHEX=r5, @ANYBLOB=',cachetag=/\\@^@.,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e80000000001700000000a00000"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r8=>0x0, <r9=>0x0})
close(r8)
recvmsg(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, &(0x7f0000000900)=""/248, 0xf8}, 0x41)
connect$unix(r7, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000440)=@rc, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/32, 0x20}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)=""/175, 0xaf}], 0x6, &(0x7f0000000ac0)=""/254, 0xfe}}, {{&(0x7f0000000bc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/38, 0x26}, {&(0x7f0000000cc0)=""/187, 0xbb}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000000e00)=""/237, 0xed}], 0x5, &(0x7f0000000740)=""/2, 0x2}, 0xffff98a8}, {{&(0x7f0000000fc0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001040)=""/244, 0xf4}, {&(0x7f0000001140)=""/134, 0x86}], 0x2, &(0x7f00000014c0)=""/33, 0x21}, 0x5}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000d80)=""/32, 0x20}, {&(0x7f00000012c0)=""/125, 0x7d}, {&(0x7f0000001340)=""/31, 0x1f}], 0x3}, 0x6f9d}], 0x4, 0x140, 0x0)
setrlimit(0xd, &(0x7f0000000180)={0x9, 0x8})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
fsopen(&(0x7f0000000140)='ext3\x00', 0x0)

19.418450397s ago: executing program 1 (id=1580):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x49822000)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20040000)
sendto$packet(r0, &(0x7f0000000040)="778d84eaac9bec21dba6babb43d39bf179e403e99629072224003524afd5c2698a87d99765badf3c945d4ef6883113fa59547df241161c846a7f1034849cdcc0bacb742ccbb329f085360a812837e192fe7c41a26e4192e76e18af91c2167b8c44e5cd6fe5bedba9d38ff369e4e22ef60d5d3eb68ac5be7788c7f0b4bc260c984f2eedab61f04c0fe6189fcbd8edf5e43e74daf6895cf1cbd272654eb2d9f67dc73af169fee782660fff2914559394484c6e61ae0522eb6ab9e7a451", 0xbc, 0x18, &(0x7f0000000100)={0x11, 0x4, r2, 0x1, 0x26, 0x6, @multicast}, 0x14)

19.359113287s ago: executing program 0 (id=1581):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c0", 0xb5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a5612", 0x9c}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
r4 = fanotify_init(0x0, 0x2)
fchdir(r4)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
connect$can_j1939(r2, &(0x7f0000000280)={0x1d, r7, 0x3, {0x2, 0xf0}, 0x1}, 0x18)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0xffffffffffffffe0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19.177718393s ago: executing program 3 (id=1582):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b01000001000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20004800)

19.172027097s ago: executing program 0 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1000}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
write$FUSE_LSEEK(r5, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x26d7207affe701c9}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x244, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb3a}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000005}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @remote, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @private0, 0xf}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2404c024}, 0x8040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000000000093040017"], 0x0, 0x37, 0x0, 0x1}, 0x28)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000340)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0xa, 0x40001, 0x401, 0x2, 0x0, 0xfd, 0xfefffffb, 0x40000, 0x3, 0x80000000, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0x1ff, 0x8003, 0x8, 0x6, 0xffffffff, 0xfffffff8]})
write$nbd(r8, &(0x7f0000000080)={0x67446698, 0x1, 0x2, 0x4, 0x3, "8d9c1071794cca084deba717591720e890424a5219a716c9160b957836f2307ee48700c65463bbe93481f58aa240651b1386d2982e503b1bea6be4cda124931a7c8043a0b44e2d322c400919cd618d2eecb66d81e89e131f538fb05338976a899e4f1bc2c5f3943fa59b89c91928ea0532c384bd9a80acee73002ca777ff052c0621ce1652c9a2e36b11bf2def8371eb0bcfdb06d154f020c4262416e1498d44a99c7026842599290c70e4c7ff2a2c88127cc7e57c039f406ae0e9feb264732cc6c980e453b1fe44ce4d0b8d7380aa2ca07bcc"}, 0xe3)

18.944198718s ago: executing program 0 (id=1584):
r0 = socket$inet(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x4, 0x9)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = semget$private(0x0, 0x3, 0x1e4)
semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r3, &(0x7f00000000c0)=[{0x2}], 0x1f4)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000))
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240), 0x8)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3380b, 0xc4a48b7f26bf140b}, [@IFLA_OPERSTATE={0x5}, @IFLA_NUM_TX_QUEUES={0x58, 0x1f, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30040854)
shutdown(r0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
r7 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001)
r8 = fcntl$dupfd(r7, 0x0, r7)
readv(r8, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1)
read(r8, &(0x7f0000000380)=""/66, 0x42)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$snddsp(r8, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

18.839545551s ago: executing program 3 (id=1585):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write(r0, &(0x7f0000000000)="3d4d47fc95cb331571fce3903b", 0xd)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCEXCL(r1, 0x540c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2", 0xc9}], 0x3}], 0x1, 0x400c0)

18.839290637s ago: executing program 1 (id=1586):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000004280)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480d5}, 0x801c)

18.83894469s ago: executing program 2 (id=1587):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x10000008eb9, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00'], 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

18.684394788s ago: executing program 0 (id=1588):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000040000002f000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x9)
landlock_restrict_self(r2, 0xa)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x802, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3d6d}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

18.422805514s ago: executing program 2 (id=1589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x800)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000440)=0x1000000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@empty, <r8=>0x0}, &(0x7f0000000500)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x164, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40010}, 0x40800)
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r11 = eventfd2(0xe8db, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f00000007c0)={0x3, r11})
mmap$IORING_OFF_SQ_RING(0x0, 0x139cc6ef, 0x2000008, 0x20010, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x10}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x9}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x4}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6005}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x120, r13, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xf4, 0x3, "6f2ea9f9bf05155c0677cc4568bc56143ae6f783d9c6531276dae8566911a4c42ffb4f1dbb6f080a30a55b1613c86fdd5315518d57c24e08a021149e672b6e0a9d89f36d9eb90582cb4dd642abc34094dca2d3c2ea5b488462250c2d127bc516c5a168d108203c7158fbb9854c95eaefac3e789f230af532c5de99844e433cf39695dc217fdc12aab9cfa54929bb6c9bfff2b117bdf403b7e68a0f8fe4925d059c5e34489bafa151baf89ac99d54d6f7977e386d224e6734e4861556a0100c18e97b86458f9e0e5ba7c51870f44fe486ebf32e6c9251940a3575bdb9de4ee1b379418b52d6a641b889d27af9cd8deceb"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r14 = syz_open_dev$cec(&(0x7f0000000b80), 0x0, 0x4400)
ioctl$CEC_ADAP_G_PHYS_ADDR(r14, 0x80026101, &(0x7f0000000bc0))
ioctl$FS_IOC_GETFSLABEL(r12, 0x81009431, &(0x7f0000000c00))
syz_emit_ethernet(0x9d, &(0x7f0000000d00)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @generic="1241f708825ec8504ea8f39c36713a2b725797c27d4a3b81812e49c3e74065df984aba27425aa08c05cde5dc69cb249e625bd3671d15e3455f6b1e13c447896fc133c2c8dcddf484ad00cbccbb4297c9744cb0d08facbb52d1d1a960bcaa55111a02efa5df0074a8029937d12fceed46743035a3ec3081ea7f3a089b513331c81585a35fd67b2242b64268"}}}}, &(0x7f0000000dc0)={0x1, 0x3, [0xde7, 0x123, 0x1c2, 0x60e]})
r15 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x4c, &(0x7f0000000f00)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000fc0)=0x10)

18.25766289s ago: executing program 0 (id=1590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x80000000, 0x0, 0xd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x5, 0x1, 0x80000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 4)

17.191377915s ago: executing program 1 (id=1591):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x0, 0x102, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.436161157s ago: executing program 32 (id=1590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x80000000, 0x0, 0xd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x5, 0x1, 0x80000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 4)

1.180427132s ago: executing program 33 (id=1591):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x0, 0x102, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

714.827216ms ago: executing program 34 (id=1589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x800)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000440)=0x1000000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@empty, <r8=>0x0}, &(0x7f0000000500)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x164, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40010}, 0x40800)
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r11 = eventfd2(0xe8db, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f00000007c0)={0x3, r11})
mmap$IORING_OFF_SQ_RING(0x0, 0x139cc6ef, 0x2000008, 0x20010, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x10}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x9}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x4}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6005}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x120, r13, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xf4, 0x3, "6f2ea9f9bf05155c0677cc4568bc56143ae6f783d9c6531276dae8566911a4c42ffb4f1dbb6f080a30a55b1613c86fdd5315518d57c24e08a021149e672b6e0a9d89f36d9eb90582cb4dd642abc34094dca2d3c2ea5b488462250c2d127bc516c5a168d108203c7158fbb9854c95eaefac3e789f230af532c5de99844e433cf39695dc217fdc12aab9cfa54929bb6c9bfff2b117bdf403b7e68a0f8fe4925d059c5e34489bafa151baf89ac99d54d6f7977e386d224e6734e4861556a0100c18e97b86458f9e0e5ba7c51870f44fe486ebf32e6c9251940a3575bdb9de4ee1b379418b52d6a641b889d27af9cd8deceb"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r14 = syz_open_dev$cec(&(0x7f0000000b80), 0x0, 0x4400)
ioctl$CEC_ADAP_G_PHYS_ADDR(r14, 0x80026101, &(0x7f0000000bc0))
ioctl$FS_IOC_GETFSLABEL(r12, 0x81009431, &(0x7f0000000c00))
syz_emit_ethernet(0x9d, &(0x7f0000000d00)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @generic="1241f708825ec8504ea8f39c36713a2b725797c27d4a3b81812e49c3e74065df984aba27425aa08c05cde5dc69cb249e625bd3671d15e3455f6b1e13c447896fc133c2c8dcddf484ad00cbccbb4297c9744cb0d08facbb52d1d1a960bcaa55111a02efa5df0074a8029937d12fceed46743035a3ec3081ea7f3a089b513331c81585a35fd67b2242b64268"}}}}, &(0x7f0000000dc0)={0x1, 0x3, [0xde7, 0x123, 0x1c2, 0x60e]})
r15 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x4c, &(0x7f0000000f00)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000fc0)=0x10)

312.870618ms ago: executing program 35 (id=1585):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write(r0, &(0x7f0000000000)="3d4d47fc95cb331571fce3903b", 0xd)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCEXCL(r1, 0x540c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2", 0xc9}], 0x3}], 0x1, 0x400c0)

0s ago: executing program 36 (id=1571):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000700)=@raw=[@generic={0x7b, 0xa, 0x3, 0xffd4}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) (async)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000180)=ANY=[])

kernel console output (not intermixed with test programs):

472][   T37] audit: type=1326 audit(1785658301.253:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.4.1127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf8aebe019 code=0x7ffc0000
[  361.498913][   T37] audit: type=1326 audit(1785658301.333:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.4.1127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8aebe019 code=0x7ffc0000
[  361.508079][ T5721] imon:send_packet: packet tx failed (-71)
[  361.542547][ T5721] imon 4-1:155.0: panel buttons/knobs setup failed
[  361.542615][ T5721] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  361.542624][ T5721]  (id 0x00)
[  362.038162][ T5721] rc_core: IR keymap rc-imon-pad not found
[  362.038178][ T5721] Registered IR keymap rc-empty
[  362.038313][ T5721] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  362.038325][ T5721] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  362.038598][ T5721] imon:send_packet: packet tx failed (-71)
[  362.057640][ T5721] imon 4-1:155.0: remote input dev register failed
[  362.057801][ T5721] imon 4-1:155.0: imon_init_intf0: rc device setup failed
[  362.225564][ T9348] FAULT_INJECTION: forcing a failure.
[  362.225564][ T9348] name failslab, interval 1, probability 0, space 0, times 0
[  362.225590][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.0.1133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  362.225606][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  362.225614][ T9348] Call Trace:
[  362.225618][ T9348]  <TASK>
[  362.225624][ T9348]  dump_stack_lvl+0xe8/0x150
[  362.225649][ T9348]  should_fail_ex+0x467/0x600
[  362.225672][ T9348]  should_failslab+0xa8/0x100
[  362.225689][ T9348]  __kmalloc_noprof+0xfe/0x780
[  362.225703][ T9348]  ? tomoyo_encode+0x2ad/0x570
[  362.225719][ T9348]  ? tomoyo_encode+0x2ad/0x570
[  362.225738][ T9348]  tomoyo_encode+0x2ad/0x570
[  362.225757][ T9348]  tomoyo_realpath_from_path+0x5fa/0x640
[  362.225779][ T9348]  ? tomoyo_path_number_perm+0x219/0x5f0
[  362.225793][ T9348]  tomoyo_path_number_perm+0x246/0x5f0
[  362.225808][ T9348]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  362.225821][ T9348]  ? __lock_acquire+0x683/0x2ce0
[  362.225843][ T9348]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  362.225859][ T9348]  ? hook_file_ioctl+0x1f3/0x600
[  362.225946][ T9348]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.225974][ T9348]  ? __fget_files+0x2a/0x420
[  362.225989][ T9348]  ? __fget_files+0x2a/0x420
[  362.226001][ T9348]  ? __fget_files+0x3a8/0x420
[  362.226013][ T9348]  ? __fget_files+0x2a/0x420
[  362.226035][ T9348]  security_file_ioctl+0xc3/0x2a0
[  362.226115][ T9348]  __se_sys_ioctl+0x47/0x170
[  362.226152][ T9348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.226165][ T9348]  do_syscall_64+0x174/0x580
[  362.226183][ T9348]  ? clear_bhb_loop+0x40/0x90
[  362.226198][ T9348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.226210][ T9348] RIP: 0033:0x7fb8e230e019
[  362.226223][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.226234][ T9348] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  362.226249][ T9348] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  362.226258][ T9348] RDX: 00002000000005c0 RSI: 0000000000002285 RDI: 0000000000000003
[  362.226266][ T9348] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  362.226274][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.226281][ T9348] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  362.226300][ T9348]  </TASK>
[  362.371291][ T9348] ERROR: Out of memory at tomoyo_realpath_from_path.
[  363.438682][ T5856] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  363.602219][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  363.605723][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short
[  363.624725][ T5856] usb 3-1: config 9 has an invalid interface number: 57 but max is 0
[  363.624745][ T5856] usb 3-1: config 9 has no interface number 0
[  363.624765][ T5856] usb 3-1: config 9 interface 57 has no altsetting 0
[  363.657064][ T5856] usb 3-1: string descriptor 0 read error: -22
[  363.657166][ T5856] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  363.657181][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.893983][ T9388] FAULT_INJECTION: forcing a failure.
[  363.893983][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.894011][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  363.894026][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  363.894042][ T9388] Call Trace:
[  363.894047][ T9388]  <TASK>
[  363.894052][ T9388]  dump_stack_lvl+0xe8/0x150
[  363.894077][ T9388]  should_fail_ex+0x467/0x600
[  363.894101][ T9388]  _copy_from_iter+0x1d3/0x1660
[  363.894115][ T9388]  ? rcu_is_watching+0x15/0xb0
[  363.894132][ T9388]  ? trace_kmem_cache_alloc+0x29/0xe0
[  363.894148][ T9388]  ? __pfx__copy_from_iter+0x10/0x10
[  363.894160][ T9388]  ? __alloc_skb+0x276/0x7a0
[  363.894174][ T9388]  ? __alloc_skb+0x276/0x7a0
[  363.894190][ T9388]  ? netlink_sendmsg+0x650/0xb40
[  363.894206][ T9388]  ? skb_put+0x112/0x210
[  363.894221][ T9388]  netlink_sendmsg+0x6c0/0xb40
[  363.894242][ T9388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.894259][ T9388]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  363.894278][ T9388]  ? __kernel_text_address+0xd/0x30
[  363.894291][ T9388]  ? unwind_get_return_address+0x4d/0x90
[  363.894307][ T9388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.894323][ T9388]  sock_sendmsg_nosec+0x13a/0x180
[  363.894343][ T9388]  ____sys_sendmsg+0x565/0x870
[  363.894359][ T9388]  ? __might_fault+0xaf/0x130
[  363.894376][ T9388]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.894396][ T9388]  ? import_iovec+0x73/0xa0
[  363.894413][ T9388]  ___sys_sendmsg+0x2a5/0x360
[  363.894428][ T9388]  ? __lock_acquire+0x683/0x2ce0
[  363.894444][ T9388]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.894478][ T9388]  ? __fget_files+0x2a/0x420
[  363.894491][ T9388]  ? __fget_files+0x3a8/0x420
[  363.894509][ T9388]  __x64_sys_sendmsg+0x1b7/0x290
[  363.894527][ T9388]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.894552][ T9388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.894565][ T9388]  do_syscall_64+0x174/0x580
[  363.894582][ T9388]  ? trace_irq_disable+0x3b/0x140
[  363.894600][ T9388]  ? clear_bhb_loop+0x40/0x90
[  363.894615][ T9388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.894627][ T9388] RIP: 0033:0x7fb8e230e019
[  363.894640][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.894650][ T9388] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.894664][ T9388] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  363.894673][ T9388] RDX: 00000000200080c4 RSI: 0000200000000100 RDI: 0000000000000003
[  363.894681][ T9388] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  363.894688][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.894695][ T9388] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  363.894713][ T9388]  </TASK>
[  364.252004][ T9391] FAULT_INJECTION: forcing a failure.
[  364.252004][ T9391] name failslab, interval 1, probability 0, space 0, times 0
[  364.252030][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.4.1143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  364.252045][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  364.252053][ T9391] Call Trace:
[  364.252058][ T9391]  <TASK>
[  364.252063][ T9391]  dump_stack_lvl+0xe8/0x150
[  364.252091][ T9391]  should_fail_ex+0x467/0x600
[  364.252115][ T9391]  should_failslab+0xa8/0x100
[  364.252131][ T9391]  kmem_cache_alloc_noprof+0xa4/0x650
[  364.252144][ T9391]  ? skb_clone+0x212/0x3a0
[  364.252161][ T9391]  ? skb_clone+0x212/0x3a0
[  364.252180][ T9391]  skb_clone+0x212/0x3a0
[  364.252199][ T9391]  __netlink_deliver_tap+0x413/0x860
[  364.252222][ T9391]  ? netlink_deliver_tap+0x2e/0x1b0
[  364.252239][ T9391]  netlink_deliver_tap+0x19c/0x1b0
[  364.252256][ T9391]  netlink_unicast+0x7b8/0x990
[  364.252276][ T9391]  netlink_sendmsg+0x813/0xb40
[  364.252298][ T9391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.252316][ T9391]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  364.252334][ T9391]  ? __kernel_text_address+0xd/0x30
[  364.252347][ T9391]  ? unwind_get_return_address+0x4d/0x90
[  364.252363][ T9391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.252378][ T9391]  sock_sendmsg_nosec+0x13a/0x180
[  364.252399][ T9391]  sock_write_iter+0x2e4/0x3f0
[  364.252418][ T9391]  ? __pfx_sock_write_iter+0x10/0x10
[  364.252448][ T9391]  do_iter_readv_writev+0x624/0x8d0
[  364.252467][ T9391]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  364.252487][ T9391]  ? bpf_lsm_file_permission+0x9/0x20
[  364.252634][ T9391]  ? security_file_permission+0x75/0x260
[  364.252650][ T9391]  ? rw_verify_area+0x209/0x4d0
[  364.252667][ T9391]  vfs_writev+0x34c/0x990
[  364.252704][ T9391]  ? do_raw_spin_lock+0x12b/0x2f0
[  364.252725][ T9391]  ? __pfx_vfs_writev+0x10/0x10
[  364.252745][ T9391]  ? __fget_files+0x2a/0x420
[  364.252761][ T9391]  ? __fget_files+0x3a8/0x420
[  364.252773][ T9391]  ? __fget_files+0x2a/0x420
[  364.252791][ T9391]  do_writev+0x15a/0x2e0
[  364.252804][ T9391]  ? __pfx_do_writev+0x10/0x10
[  364.252820][ T9391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.252834][ T9391]  do_syscall_64+0x174/0x580
[  364.252850][ T9391]  ? trace_irq_disable+0x3b/0x140
[  364.252863][ T9391]  ? clear_bhb_loop+0x40/0x90
[  364.252878][ T9391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.252890][ T9391] RIP: 0033:0x7fbf8aebe019
[  364.252903][ T9391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.252914][ T9391] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  364.252929][ T9391] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  364.252938][ T9391] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[  364.252946][ T9391] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  364.252954][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.252961][ T9391] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  364.252980][ T9391]  </TASK>
[  364.728171][ T5856] video4linux radio48: keene_cmd_set failed (-110)
[  364.728200][ T5856] radio-keene 3-1:9.57: V4L2 device registered as radio48
[  364.817472][   T10] usb 3-1: USB disconnect, device number 36
[  368.076424][ T5721] imon 4-1:155.0: unable to initialize intf0, err 0
[  368.076441][ T5721] imon:imon_probe: failed to initialize context!
[  368.076449][ T5721] imon 4-1:155.0: unable to register, err -19
[  368.324714][ T5721] usb 4-1: USB disconnect, device number 33
[  368.657049][ T9425] FAULT_INJECTION: forcing a failure.
[  368.657049][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.657091][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  368.657106][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  368.657114][ T9425] Call Trace:
[  368.657120][ T9425]  <TASK>
[  368.657126][ T9425]  dump_stack_lvl+0xe8/0x150
[  368.657152][ T9425]  should_fail_ex+0x467/0x600
[  368.657174][ T9425]  _copy_to_user+0x31/0xb0
[  368.657191][ T9425]  simple_read_from_buffer+0xe1/0x170
[  368.657273][ T9425]  proc_fail_nth_read+0x1be/0x230
[  368.657289][ T9425]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  368.657309][ T9425]  ? rw_verify_area+0x250/0x4d0
[  368.657325][ T9425]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  368.657338][ T9425]  vfs_read+0x219/0xa90
[  368.657359][ T9425]  ? __pfx_vfs_read+0x10/0x10
[  368.657375][ T9425]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  368.657392][ T9425]  ? lockdep_hardirqs_on+0x7a/0x110
[  368.657409][ T9425]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  368.657424][ T9425]  ? mutex_lock_nested+0x152/0x1d0
[  368.657436][ T9425]  ? fdget_pos+0x252/0x320
[  368.657454][ T9425]  ksys_read+0x156/0x270
[  368.657471][ T9425]  ? __pfx_ksys_read+0x10/0x10
[  368.657491][ T9425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.657504][ T9425]  do_syscall_64+0x174/0x580
[  368.657529][ T9425]  ? trace_irq_disable+0x3b/0x140
[  368.657542][ T9425]  ? clear_bhb_loop+0x40/0x90
[  368.657557][ T9425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.657570][ T9425] RIP: 0033:0x7fb8e22ce84e
[  368.657582][ T9425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  368.657593][ T9425] RSP: 002b:00007fb8e0565fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  368.657608][ T9425] RAX: ffffffffffffffda RBX: 00007fb8e05666c0 RCX: 00007fb8e22ce84e
[  368.657617][ T9425] RDX: 000000000000000f RSI: 00007fb8e05660a0 RDI: 0000000000000004
[  368.657624][ T9425] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  368.657632][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.657639][ T9425] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  368.657658][ T9425]  </TASK>
[  369.533356][ T9439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.897522][ T5721] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  369.987430][ T5856] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  370.047470][ T5721] usb 4-1: Using ep0 maxpacket: 8
[  370.048970][ T5721] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[  370.048989][ T5721] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.049011][ T5721] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  370.049035][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.146290][ T5721] usb 4-1: config 0 descriptor??
[  370.177449][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  370.180630][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short
[  370.184947][ T5856] usb 3-1: config 9 has an invalid interface number: 57 but max is 0
[  370.184968][ T5856] usb 3-1: config 9 has no interface number 0
[  370.184995][ T5856] usb 3-1: config 9 interface 57 has no altsetting 0
[  370.240719][ T5856] usb 3-1: string descriptor 0 read error: -22
[  370.240812][ T5856] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  370.240827][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.466476][ T9526] FAULT_INJECTION: forcing a failure.
[  371.466476][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.466502][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.0.1172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  371.466517][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.466525][ T9526] Call Trace:
[  371.466530][ T9526]  <TASK>
[  371.466539][ T9526]  dump_stack_lvl+0xe8/0x150
[  371.466563][ T9526]  should_fail_ex+0x467/0x600
[  371.466587][ T9526]  _copy_from_user+0x2d/0xb0
[  371.466603][ T9526]  kstrtouint_from_user+0xd6/0x180
[  371.466617][ T9526]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  371.466635][ T9526]  ? __lock_acquire+0x683/0x2ce0
[  371.466659][ T9526]  proc_fail_nth_write+0x8e/0x210
[  371.466674][ T9526]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  371.466692][ T9526]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  371.466705][ T9526]  vfs_write+0x29f/0xbb0
[  371.466727][ T9526]  ? __pfx_vfs_write+0x10/0x10
[  371.466744][ T9526]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  371.466762][ T9526]  ? lockdep_hardirqs_on+0x7a/0x110
[  371.466777][ T9526]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  371.466793][ T9526]  ? mutex_lock_nested+0x152/0x1d0
[  371.466804][ T9526]  ? fdget_pos+0x252/0x320
[  371.466823][ T9526]  ksys_write+0x156/0x270
[  371.466840][ T9526]  ? __pfx_ksys_write+0x10/0x10
[  371.466860][ T9526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.466873][ T9526]  do_syscall_64+0x174/0x580
[  371.466889][ T9526]  ? trace_irq_disable+0x3b/0x140
[  371.466902][ T9526]  ? clear_bhb_loop+0x40/0x90
[  371.466924][ T9526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.466936][ T9526] RIP: 0033:0x7fb8e22ce84e
[  371.466948][ T9526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.466959][ T9526] RSP: 002b:00007fb8e0544fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  371.466974][ T9526] RAX: ffffffffffffffda RBX: 00007fb8e05456c0 RCX: 00007fb8e22ce84e
[  371.466983][ T9526] RDX: 0000000000000001 RSI: 00007fb8e05450a0 RDI: 0000000000000004
[  371.466991][ T9526] RBP: 00007fb8e0545090 R08: 0000000000000000 R09: 0000000000000000
[  371.466998][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.467006][ T9526] R13: 00007fb8e2596128 R14: 00007fb8e2596090 R15: 00007fff9363cab8
[  371.467025][ T9526]  </TASK>
[  371.628348][ T5856] video4linux radio48: keene_cmd_set failed (-110)
[  371.628370][ T5856] radio-keene 3-1:9.57: V4L2 device registered as radio48
[  371.912450][ T5721] usb 3-1: USB disconnect, device number 37
[  372.191772][ T9545] kexec: Could not allocate control_code_buffer
[  372.625839][ T5721] usb 4-1: USB disconnect, device number 34
[  373.179000][ T5721] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  373.512955][ T5721] usb 5-1: device descriptor read/64, error -71
[  373.908365][ T5721] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  373.987137][ T9598] FAULT_INJECTION: forcing a failure.
[  373.987137][ T9598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  373.987163][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.0.1188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  373.987178][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  373.987186][ T9598] Call Trace:
[  373.987191][ T9598]  <TASK>
[  373.987196][ T9598]  dump_stack_lvl+0xe8/0x150
[  373.987221][ T9598]  should_fail_ex+0x467/0x600
[  373.987243][ T9598]  _copy_from_iter+0x1d3/0x1660
[  373.987262][ T9598]  ? rcu_is_watching+0x15/0xb0
[  373.987278][ T9598]  ? trace_kmem_cache_alloc+0x29/0xe0
[  373.987293][ T9598]  ? __pfx__copy_from_iter+0x10/0x10
[  373.987305][ T9598]  ? __alloc_skb+0x276/0x7a0
[  373.987319][ T9598]  ? __alloc_skb+0x276/0x7a0
[  373.987335][ T9598]  ? netlink_sendmsg+0x650/0xb40
[  373.987351][ T9598]  ? skb_put+0x112/0x210
[  373.987367][ T9598]  netlink_sendmsg+0x6c0/0xb40
[  373.987388][ T9598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.987405][ T9598]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  373.987424][ T9598]  ? __kernel_text_address+0xd/0x30
[  373.987436][ T9598]  ? unwind_get_return_address+0x4d/0x90
[  373.987452][ T9598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.987467][ T9598]  sock_sendmsg_nosec+0x13a/0x180
[  373.987488][ T9598]  ____sys_sendmsg+0x565/0x870
[  373.987504][ T9598]  ? __might_fault+0xaf/0x130
[  373.987521][ T9598]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.987542][ T9598]  ? import_iovec+0x73/0xa0
[  373.987558][ T9598]  ___sys_sendmsg+0x2a5/0x360
[  373.987573][ T9598]  ? __lock_acquire+0x683/0x2ce0
[  373.987589][ T9598]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.987625][ T9598]  ? __fget_files+0x2a/0x420
[  373.987638][ T9598]  ? __fget_files+0x3a8/0x420
[  373.987656][ T9598]  __x64_sys_sendmsg+0x1b7/0x290
[  373.987674][ T9598]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.987700][ T9598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.987714][ T9598]  do_syscall_64+0x174/0x580
[  373.987730][ T9598]  ? trace_irq_disable+0x3b/0x140
[  373.987743][ T9598]  ? clear_bhb_loop+0x40/0x90
[  373.987757][ T9598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.987769][ T9598] RIP: 0033:0x7fb8e230e019
[  373.987782][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.987792][ T9598] RSP: 002b:00007fb8e0545028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.987806][ T9598] RAX: ffffffffffffffda RBX: 00007fb8e2596090 RCX: 00007fb8e230e019
[  373.987815][ T9598] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  373.987822][ T9598] RBP: 00007fb8e0545090 R08: 0000000000000000 R09: 0000000000000000
[  373.987830][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.987837][ T9598] R13: 00007fb8e2596128 R14: 00007fb8e2596090 R15: 00007fff9363cab8
[  373.987856][ T9598]  </TASK>
[  374.291600][ T5721] usb 5-1: device descriptor read/64, error -71
[  374.397715][ T5721] usb usb5-port1: attempt power cycle
[  374.567562][ T5856] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  374.720069][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  374.728306][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  374.744206][ T5856] usb 4-1: config 9 has an invalid interface number: 57 but max is 0
[  374.744225][ T5856] usb 4-1: config 9 has no interface number 0
[  374.744245][ T5856] usb 4-1: config 9 interface 57 has no altsetting 0
[  374.781574][ T5721] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  374.786553][ T5856] usb 4-1: string descriptor 0 read error: -22
[  374.786642][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  374.786657][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.803034][ T5721] usb 5-1: device descriptor read/8, error -71
[  375.040430][ T5721] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  375.061067][ T5721] usb 5-1: device descriptor read/8, error -71
[  375.170709][ T5721] usb usb5-port1: unable to enumerate USB device
[  375.382059][ T9551] kexec: Could not allocate control_code_buffer
[  375.889542][ T5856] video4linux radio48: keene_cmd_main failed (-71)
[  375.889740][ T5856] radio-keene 4-1:9.57: V4L2 device registered as radio48
[  375.981095][ T5856] usb 4-1: USB disconnect, device number 35
[  376.055136][ T9653] netlink: 'syz.2.1198': attribute type 8 has an invalid length.
[  376.217511][ T5851] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  376.288208][ T5721] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  376.367471][ T5851] usb 2-1: Using ep0 maxpacket: 8
[  376.369210][ T5851] usb 2-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[  376.369227][ T5851] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  376.369250][ T5851] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  376.369264][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.450088][ T5721] usb 1-1: Using ep0 maxpacket: 8
[  376.525442][ T5721] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  376.525485][ T5721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  376.525502][ T5721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  376.525517][ T5721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  376.525532][ T5721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  376.525546][ T5721] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.525573][ T5721] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  376.525587][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.673585][ T5851] usb 2-1: config 0 descriptor??
[  376.850133][ T5721] usb 1-1: GET_CAPABILITIES returned 0
[  376.850165][ T5721] usbtmc 1-1:16.0: can't read capabilities
[  376.899996][ T5853] usb 2-1: USB disconnect, device number 20
[  377.230964][ T5721] usb 1-1: USB disconnect, device number 12
[  377.370396][ T9708] FAULT_INJECTION: forcing a failure.
[  377.370396][ T9708] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  377.370424][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.2.1209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  377.370440][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.370455][ T9708] Call Trace:
[  377.370460][ T9708]  <TASK>
[  377.370466][ T9708]  dump_stack_lvl+0xe8/0x150
[  377.370491][ T9708]  should_fail_ex+0x467/0x600
[  377.370514][ T9708]  prepare_alloc_pages+0x223/0x690
[  377.370584][ T9708]  __alloc_frozen_pages_noprof+0x12f/0x380
[  377.370602][ T9708]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  377.370620][ T9708]  ? __pfx_policy_nodemask+0x10/0x10
[  377.370668][ T9708]  ? lockdep_hardirqs_on+0x7a/0x110
[  377.370686][ T9708]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  377.370702][ T9708]  alloc_pages_mpol+0xce/0x280
[  377.370720][ T9708]  alloc_pages_noprof+0xd2/0x2f0
[  377.370737][ T9708]  get_free_pages_noprof+0xf/0x80
[  377.370752][ T9708]  __kasan_populate_vmalloc+0x38/0x1c0
[  377.370787][ T9708]  ? rt_spin_unlock+0x163/0x200
[  377.370801][ T9708]  alloc_vmap_area+0xd1a/0x1420
[  377.370853][ T9708]  ? __pfx_alloc_vmap_area+0x10/0x10
[  377.370872][ T9708]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  377.370887][ T9708]  ? __get_vm_area_node+0x136/0x300
[  377.370904][ T9708]  ? __get_vm_area_node+0x136/0x300
[  377.370926][ T9708]  __get_vm_area_node+0x1f2/0x300
[  377.370947][ T9708]  __vmalloc_node_range_noprof+0x358/0x1730
[  377.370960][ T9708]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.370978][ T9708]  ? is_bpf_text_address+0x26/0x2b0
[  377.371002][ T9708]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  377.371013][ T9708]  ? is_bpf_text_address+0x26/0x2b0
[  377.371029][ T9708]  ? kernel_text_address+0xa5/0xe0
[  377.371045][ T9708]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.371056][ T9708]  __vmalloc_noprof+0xd2/0x120
[  377.371068][ T9708]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.371083][ T9708]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.371095][ T9708]  ? bpf_prog_alloc+0x2a/0x1a0
[  377.371109][ T9708]  bpf_prog_alloc+0x3c/0x1a0
[  377.371124][ T9708]  bpf_prog_load+0x7f8/0x1c00
[  377.371159][ T9708]  ? __pfx_bpf_prog_load+0x10/0x10
[  377.371185][ T9708]  __sys_bpf+0xd0d/0xd90
[  377.371202][ T9708]  ? __pfx___sys_bpf+0x10/0x10
[  377.371216][ T9708]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  377.371235][ T9708]  ? rt_mutex_slowunlock+0x219/0x460
[  377.371261][ T9708]  ? ksys_write+0x248/0x270
[  377.371279][ T9708]  ? __pfx_ksys_write+0x10/0x10
[  377.371297][ T9708]  __x64_sys_bpf+0xba/0xd0
[  377.371316][ T9708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.371329][ T9708]  do_syscall_64+0x174/0x580
[  377.371346][ T9708]  ? clear_bhb_loop+0x40/0x90
[  377.371361][ T9708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.371373][ T9708] RIP: 0033:0x7fe3ca33e019
[  377.371386][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.371397][ T9708] RSP: 002b:00007fe3c8596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.371411][ T9708] RAX: ffffffffffffffda RBX: 00007fe3ca5c5fa0 RCX: 00007fe3ca33e019
[  377.371421][ T9708] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  377.371429][ T9708] RBP: 00007fe3c8596090 R08: 0000000000000000 R09: 0000000000000000
[  377.371436][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.371451][ T9708] R13: 00007fe3ca5c6038 R14: 00007fe3ca5c5fa0 R15: 00007fff0a210ff8
[  377.371472][ T9708]  </TASK>
[  377.376071][ T9708] syz.2.1209: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  377.376217][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.2.1209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  377.376232][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.376240][ T9708] Call Trace:
[  377.376245][ T9708]  <TASK>
[  377.376250][ T9708]  dump_stack_lvl+0xe8/0x150
[  377.376274][ T9708]  warn_alloc+0x24c/0x270
[  377.376289][ T9708]  ? kasan_quarantine_put+0xbb/0x1f0
[  377.376302][ T9708]  ? __pfx_warn_alloc+0x10/0x10
[  377.376317][ T9708]  ? __get_vm_area_node+0x20b/0x300
[  377.376339][ T9708]  ? __get_vm_area_node+0x20b/0x300
[  377.376364][ T9708]  __vmalloc_node_range_noprof+0x37d/0x1730
[  377.376381][ T9708]  ? is_bpf_text_address+0x26/0x2b0
[  377.376406][ T9708]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  377.376418][ T9708]  ? is_bpf_text_address+0x26/0x2b0
[  377.376433][ T9708]  ? kernel_text_address+0xa5/0xe0
[  377.376457][ T9708]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.376469][ T9708]  __vmalloc_noprof+0xd2/0x120
[  377.376481][ T9708]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.376496][ T9708]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  377.376508][ T9708]  ? bpf_prog_alloc+0x2a/0x1a0
[  377.376522][ T9708]  bpf_prog_alloc+0x3c/0x1a0
[  377.376536][ T9708]  bpf_prog_load+0x7f8/0x1c00
[  377.376556][ T9708]  ? __pfx_bpf_prog_load+0x10/0x10
[  377.376583][ T9708]  __sys_bpf+0xd0d/0xd90
[  377.376601][ T9708]  ? __pfx___sys_bpf+0x10/0x10
[  377.376615][ T9708]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  377.376635][ T9708]  ? rt_mutex_slowunlock+0x219/0x460
[  377.376659][ T9708]  ? ksys_write+0x248/0x270
[  377.376675][ T9708]  ? __pfx_ksys_write+0x10/0x10
[  377.376694][ T9708]  __x64_sys_bpf+0xba/0xd0
[  377.376712][ T9708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.376727][ T9708]  do_syscall_64+0x174/0x580
[  377.376744][ T9708]  ? clear_bhb_loop+0x40/0x90
[  377.376758][ T9708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.376771][ T9708] RIP: 0033:0x7fe3ca33e019
[  377.376783][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.376794][ T9708] RSP: 002b:00007fe3c8596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.376807][ T9708] RAX: ffffffffffffffda RBX: 00007fe3ca5c5fa0 RCX: 00007fe3ca33e019
[  377.376816][ T9708] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  377.376824][ T9708] RBP: 00007fe3c8596090 R08: 0000000000000000 R09: 0000000000000000
[  377.376831][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.376839][ T9708] R13: 00007fe3ca5c6038 R14: 00007fe3ca5c5fa0 R15: 00007fff0a210ff8
[  377.376857][ T9708]  </TASK>
[  377.492238][ T9708] Mem-Info:
[  377.492250][ T9708] active_anon:185 inactive_anon:9610 isolated_anon:0
[  377.492250][ T9708]  active_file:19412 inactive_file:39570 isolated_file:0
[  377.492250][ T9708]  unevictable:768 dirty:1453 writeback:0
[  377.492250][ T9708]  slab_reclaimable:11829 slab_unreclaimable:101045
[  377.492250][ T9708]  mapped:33624 shmem:1290 pagetables:1325
[  377.492250][ T9708]  sec_pagetables:0 bounce:0
[  377.492250][ T9708]  kernel_misc_reclaimable:0
[  377.492250][ T9708]  free:1302532 free_pcp:8586 free_cma:0
[  377.492285][ T9708] Node 0 active_anon:740kB inactive_anon:38440kB active_file:77432kB inactive_file:158280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134496kB dirty:5808kB writeback:0kB shmem:3624kB kernel_stack:13376kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  377.492316][ T9708] Node 1 active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  377.492344][ T9708] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  377.492381][ T9708] lowmem_reserve[]: 0 2500 2502 2502 2502
[  377.492403][ T9708] Node 0 DMA32 free:1263244kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:38440kB active_file:77432kB inactive_file:158280kB unevictable:1536kB writepending:5808kB zspages:0kB present:3129332kB managed:2560536kB mlocked:0kB bounce:0kB free_pcp:34344kB local_pcp:34344kB free_cma:0kB
[  377.492441][ T9708] lowmem_reserve[]: 0 0 1 1 1
[  377.492459][ T9708] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  377.492493][ T9708] lowmem_reserve[]: 0 0 0 0 0
[  377.492512][ T9708] Node 1 Normal free:3931524kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  377.492547][ T9708] lowmem_reserve[]: 0 0 0 0 0
[  377.492566][ T9708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  377.492634][ T9708] Node 0 DMA32: 1232*4kB (UME) 1193*8kB (UME) 902*16kB (UME) 596*32kB (UME) 273*64kB (UME) 182*128kB (UM) 74*256kB (UM) 27*512kB (UM) 11*1024kB (UME) 4*2048kB (M) 274*4096kB (UM) = 1263272kB
[  377.492724][ T9708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  377.492780][ T9708] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 3*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931524kB
[  377.492868][ T9708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  377.492879][ T9708] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB
[  377.492888][ T9708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  377.492898][ T9708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.492907][ T9708] 60268 total pagecache pages
[  377.492911][ T9708] 0 pages in swap cache
[  377.492916][ T9708] Free swap  = 124996kB
[  377.492920][ T9708] Total swap = 124996kB
[  377.492925][ T9708] 2097051 pages RAM
[  377.492929][ T9708] 0 pages HighMem/MovableOnly
[  377.492933][ T9708] 424839 pages reserved
[  377.492938][ T9708] 0 pages cma reserved
[  378.810065][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  378.810114][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  378.814824][ T9726] FAULT_INJECTION: forcing a failure.
[  378.814824][ T9726] name failslab, interval 1, probability 0, space 0, times 0
[  378.814849][ T9726] CPU: 0 UID: 0 PID: 9726 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  378.814865][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  378.814881][ T9726] Call Trace:
[  378.814886][ T9726]  <TASK>
[  378.814892][ T9726]  dump_stack_lvl+0xe8/0x150
[  378.814918][ T9726]  should_fail_ex+0x467/0x600
[  378.814944][ T9726]  should_failslab+0xa8/0x100
[  378.814961][ T9726]  kmem_cache_alloc_node_noprof+0xae/0x670
[  378.814975][ T9726]  ? preload_this_cpu_lock+0x49/0xc0
[  378.814990][ T9726]  ? preload_this_cpu_lock+0x49/0xc0
[  378.815004][ T9726]  ? alloc_vmap_area+0x21c/0x1420
[  378.815025][ T9726]  preload_this_cpu_lock+0x49/0xc0
[  378.815040][ T9726]  alloc_vmap_area+0x3c3/0x1420
[  378.815067][ T9726]  ? __pfx_alloc_vmap_area+0x10/0x10
[  378.815085][ T9726]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  378.815100][ T9726]  ? __get_vm_area_node+0x136/0x300
[  378.815117][ T9726]  ? __get_vm_area_node+0x136/0x300
[  378.815138][ T9726]  __get_vm_area_node+0x1f2/0x300
[  378.815160][ T9726]  __vmalloc_node_range_noprof+0x358/0x1730
[  378.815173][ T9726]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  378.815192][ T9726]  ? is_bpf_text_address+0x26/0x2b0
[  378.815216][ T9726]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  378.815228][ T9726]  ? is_bpf_text_address+0x26/0x2b0
[  378.815243][ T9726]  ? kernel_text_address+0xa5/0xe0
[  378.815259][ T9726]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  378.815271][ T9726]  __vmalloc_noprof+0xd2/0x120
[  378.815282][ T9726]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  378.815297][ T9726]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  378.815309][ T9726]  ? bpf_prog_alloc+0x2a/0x1a0
[  378.815323][ T9726]  bpf_prog_alloc+0x3c/0x1a0
[  378.815337][ T9726]  bpf_prog_load+0x7f8/0x1c00
[  378.815357][ T9726]  ? __pfx_bpf_prog_load+0x10/0x10
[  378.815385][ T9726]  __sys_bpf+0xd0d/0xd90
[  378.815402][ T9726]  ? __pfx___sys_bpf+0x10/0x10
[  378.815416][ T9726]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  378.815436][ T9726]  ? rt_mutex_slowunlock+0x219/0x460
[  378.815459][ T9726]  ? ksys_write+0x248/0x270
[  378.815476][ T9726]  ? __pfx_ksys_write+0x10/0x10
[  378.815494][ T9726]  __x64_sys_bpf+0xba/0xd0
[  378.815513][ T9726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.815526][ T9726]  do_syscall_64+0x174/0x580
[  378.815542][ T9726]  ? trace_irq_disable+0x3b/0x140
[  378.815554][ T9726]  ? clear_bhb_loop+0x40/0x90
[  378.815569][ T9726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.815580][ T9726] RIP: 0033:0x7fbf8aebe019
[  378.815593][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.815603][ T9726] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  378.815617][ T9726] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  378.815626][ T9726] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005
[  378.815634][ T9726] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  378.815642][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.815649][ T9726] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  378.815668][ T9726]  </TASK>
[  379.637437][ T5856] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  379.790163][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  379.818131][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  379.819070][ T5856] usb 4-1: config 9 has an invalid interface number: 57 but max is 0
[  379.819086][ T5856] usb 4-1: config 9 has no interface number 0
[  379.819105][ T5856] usb 4-1: config 9 interface 57 has no altsetting 0
[  379.823341][ T5856] usb 4-1: string descriptor 0 read error: -22
[  379.823437][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  379.823452][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.890959][ T9750] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1219'.
[  379.964116][ T5721] IPVS: starting estimator thread 0...
[  380.080373][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.117097][ T9756] IPVS: using max 14 ests per chain, 33600 per kthread
[  380.778086][   T37] kauditd_printk_skb: 29 callbacks suppressed
[  380.778103][   T37] audit: type=1400 audit(1785658320.553:207): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9764 comm="syz.0.1222" src=1 netif=wpan0
[  380.822026][ T5856] video4linux radio48: keene_cmd_main failed (-71)
[  380.822047][ T5856] radio-keene 4-1:9.57: V4L2 device registered as radio48
[  380.858767][ T5856] usb 4-1: USB disconnect, device number 36
[  381.618584][ T9791] FAULT_INJECTION: forcing a failure.
[  381.618584][ T9791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.618610][ T9791] CPU: 0 UID: 0 PID: 9791 Comm: syz.3.1227 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  381.618625][ T9791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  381.618633][ T9791] Call Trace:
[  381.618638][ T9791]  <TASK>
[  381.618643][ T9791]  dump_stack_lvl+0xe8/0x150
[  381.618668][ T9791]  should_fail_ex+0x467/0x600
[  381.618691][ T9791]  _copy_from_iter+0x1d3/0x1660
[  381.618707][ T9791]  ? rcu_is_watching+0x15/0xb0
[  381.618724][ T9791]  ? trace_kmem_cache_alloc+0x29/0xe0
[  381.618739][ T9791]  ? __pfx__copy_from_iter+0x10/0x10
[  381.618751][ T9791]  ? __alloc_skb+0x276/0x7a0
[  381.618764][ T9791]  ? __alloc_skb+0x276/0x7a0
[  381.618781][ T9791]  ? __alloc_skb+0x4cc/0x7a0
[  381.618793][ T9791]  ? skb_put+0x112/0x210
[  381.618808][ T9791]  pfkey_sendmsg+0x25f/0x11d0
[  381.618894][ T9791]  ? unwind_next_frame+0x8f/0x2550
[  381.618912][ T9791]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  381.618926][ T9791]  ? smack_socket_sendmsg+0x1a9/0x590
[  381.618944][ T9791]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  381.618961][ T9791]  ? __lock_acquire+0x683/0x2ce0
[  381.618977][ T9791]  ? __lock_acquire+0x683/0x2ce0
[  381.618991][ T9791]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  381.619010][ T9791]  ? __kernel_text_address+0xd/0x30
[  381.619023][ T9791]  ? unwind_get_return_address+0x4d/0x90
[  381.619038][ T9791]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  381.619052][ T9791]  sock_sendmsg_nosec+0x13a/0x180
[  381.619073][ T9791]  ____sys_sendmsg+0x565/0x870
[  381.619089][ T9791]  ? __might_fault+0xaf/0x130
[  381.619106][ T9791]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.619127][ T9791]  ? import_iovec+0x73/0xa0
[  381.619143][ T9791]  ___sys_sendmsg+0x2a5/0x360
[  381.619158][ T9791]  ? __lock_acquire+0x683/0x2ce0
[  381.619172][ T9791]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.619207][ T9791]  ? __fget_files+0x2a/0x420
[  381.619219][ T9791]  ? __fget_files+0x3a8/0x420
[  381.619241][ T9791]  __x64_sys_sendmsg+0x1b7/0x290
[  381.619259][ T9791]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.619285][ T9791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.619298][ T9791]  do_syscall_64+0x174/0x580
[  381.619315][ T9791]  ? trace_irq_disable+0x3b/0x140
[  381.619327][ T9791]  ? clear_bhb_loop+0x40/0x90
[  381.619341][ T9791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.619353][ T9791] RIP: 0033:0x7fad35e8e019
[  381.619366][ T9791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.619377][ T9791] RSP: 002b:00007fad340e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.619391][ T9791] RAX: ffffffffffffffda RBX: 00007fad36115fa0 RCX: 00007fad35e8e019
[  381.619400][ T9791] RDX: 000000002000c040 RSI: 0000200000000140 RDI: 0000000000000016
[  381.619408][ T9791] RBP: 00007fad340e6090 R08: 0000000000000000 R09: 0000000000000000
[  381.619416][ T9791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.619423][ T9791] R13: 00007fad36116038 R14: 00007fad36115fa0 R15: 00007ffc8a20d178
[  381.619441][ T9791]  </TASK>
[  383.172046][ T9830] FAULT_INJECTION: forcing a failure.
[  383.172046][ T9830] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  383.172073][ T9830] CPU: 0 UID: 0 PID: 9830 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  383.172089][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  383.172096][ T9830] Call Trace:
[  383.172101][ T9830]  <TASK>
[  383.172107][ T9830]  dump_stack_lvl+0xe8/0x150
[  383.172133][ T9830]  should_fail_ex+0x467/0x600
[  383.172156][ T9830]  prepare_alloc_pages+0x223/0x690
[  383.172174][ T9830]  __alloc_frozen_pages_noprof+0x12f/0x380
[  383.172191][ T9830]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  383.172209][ T9830]  ? __pfx_policy_nodemask+0x10/0x10
[  383.172223][ T9830]  ? lockdep_hardirqs_on+0x7a/0x110
[  383.172245][ T9830]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  383.172261][ T9830]  alloc_pages_mpol+0xce/0x280
[  383.172278][ T9830]  alloc_pages_noprof+0xd2/0x2f0
[  383.172295][ T9830]  get_free_pages_noprof+0xf/0x80
[  383.172310][ T9830]  __kasan_populate_vmalloc+0x38/0x1c0
[  383.172330][ T9830]  ? rt_spin_unlock+0x163/0x200
[  383.172344][ T9830]  alloc_vmap_area+0xd1a/0x1420
[  383.172371][ T9830]  ? __pfx_alloc_vmap_area+0x10/0x10
[  383.172390][ T9830]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  383.172404][ T9830]  ? __get_vm_area_node+0x136/0x300
[  383.172422][ T9830]  ? __get_vm_area_node+0x136/0x300
[  383.172443][ T9830]  __get_vm_area_node+0x1f2/0x300
[  383.172465][ T9830]  __vmalloc_node_range_noprof+0x358/0x1730
[  383.172478][ T9830]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  383.172496][ T9830]  ? is_bpf_text_address+0x26/0x2b0
[  383.172521][ T9830]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  383.172533][ T9830]  ? is_bpf_text_address+0x26/0x2b0
[  383.172548][ T9830]  ? kernel_text_address+0xa5/0xe0
[  383.172564][ T9830]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  383.172576][ T9830]  __vmalloc_noprof+0xd2/0x120
[  383.172588][ T9830]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  383.172602][ T9830]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  383.172615][ T9830]  ? bpf_prog_alloc+0x2a/0x1a0
[  383.172628][ T9830]  bpf_prog_alloc+0x3c/0x1a0
[  383.172642][ T9830]  bpf_prog_load+0x7f8/0x1c00
[  383.172663][ T9830]  ? __pfx_bpf_prog_load+0x10/0x10
[  383.172690][ T9830]  __sys_bpf+0xd0d/0xd90
[  383.172707][ T9830]  ? __pfx___sys_bpf+0x10/0x10
[  383.172722][ T9830]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  383.172740][ T9830]  ? rt_mutex_slowunlock+0x219/0x460
[  383.172764][ T9830]  ? ksys_write+0x248/0x270
[  383.172781][ T9830]  ? __pfx_ksys_write+0x10/0x10
[  383.172799][ T9830]  __x64_sys_bpf+0xba/0xd0
[  383.172818][ T9830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.172831][ T9830]  do_syscall_64+0x174/0x580
[  383.172847][ T9830]  ? trace_irq_disable+0x3b/0x140
[  383.172865][ T9830]  ? clear_bhb_loop+0x40/0x90
[  383.172879][ T9830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.172891][ T9830] RIP: 0033:0x7fb8e230e019
[  383.172903][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.172914][ T9830] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  383.172928][ T9830] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  383.172937][ T9830] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  383.172945][ T9830] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  383.172952][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.172960][ T9830] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  383.172978][ T9830]  </TASK>
[  384.167036][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.410582][ T9865] overlay: ./file0 is not a directory
[  384.827492][ T9881] FAULT_INJECTION: forcing a failure.
[  384.827492][ T9881] name failslab, interval 1, probability 0, space 0, times 0
[  384.827518][ T9881] CPU: 0 UID: 0 PID: 9881 Comm: syz.4.1248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  384.827535][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  384.827542][ T9881] Call Trace:
[  384.827547][ T9881]  <TASK>
[  384.827553][ T9881]  dump_stack_lvl+0xe8/0x150
[  384.827578][ T9881]  should_fail_ex+0x467/0x600
[  384.827602][ T9881]  should_failslab+0xa8/0x100
[  384.827619][ T9881]  __kvmalloc_node_noprof+0x17a/0x8a0
[  384.827635][ T9881]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  384.827708][ T9881]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  384.827728][ T9881]  bpf_test_run_xdp_live+0x1ef/0x1c20
[  384.827748][ T9881]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  384.827768][ T9881]  ? rt_mutex_slowunlock+0x219/0x460
[  384.827782][ T9881]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  384.827803][ T9881]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  384.827847][ T9881]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  384.827868][ T9881]  ? _copy_from_user+0x94/0xb0
[  384.827883][ T9881]  ? bpf_test_init+0x113/0x150
[  384.827900][ T9881]  ? xdp_convert_md_to_buff+0x5b/0x330
[  384.827918][ T9881]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  384.827943][ T9881]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  384.827962][ T9881]  ? __fget_files+0x2a/0x420
[  384.827979][ T9881]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  384.827996][ T9881]  bpf_prog_test_run+0x2cb/0x340
[  384.828013][ T9881]  __sys_bpf+0xa22/0xd90
[  384.828031][ T9881]  ? __pfx___sys_bpf+0x10/0x10
[  384.828045][ T9881]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  384.828064][ T9881]  ? rt_mutex_slowunlock+0x219/0x460
[  384.828088][ T9881]  ? ksys_write+0x248/0x270
[  384.828105][ T9881]  ? __pfx_ksys_write+0x10/0x10
[  384.828123][ T9881]  __x64_sys_bpf+0xba/0xd0
[  384.828142][ T9881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.828155][ T9881]  do_syscall_64+0x174/0x580
[  384.828172][ T9881]  ? trace_irq_disable+0x3b/0x140
[  384.828184][ T9881]  ? clear_bhb_loop+0x40/0x90
[  384.828198][ T9881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.828210][ T9881] RIP: 0033:0x7fbf8aebe019
[  384.828223][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.828234][ T9881] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  384.828249][ T9881] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  384.828258][ T9881] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  384.828266][ T9881] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  384.828273][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.828280][ T9881] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  384.828299][ T9881]  </TASK>
[  389.272359][ T9896] FAULT_INJECTION: forcing a failure.
[  389.272359][ T9896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  389.272386][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  389.272401][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.272409][ T9896] Call Trace:
[  389.272414][ T9896]  <TASK>
[  389.272419][ T9896]  dump_stack_lvl+0xe8/0x150
[  389.272445][ T9896]  should_fail_ex+0x467/0x600
[  389.272467][ T9896]  _copy_from_user+0x2d/0xb0
[  389.272483][ T9896]  ____sys_sendmsg+0x31b/0x870
[  389.272505][ T9896]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.272526][ T9896]  ? import_iovec+0x73/0xa0
[  389.272542][ T9896]  ___sys_sendmsg+0x2a5/0x360
[  389.272557][ T9896]  ? __lock_acquire+0x683/0x2ce0
[  389.272573][ T9896]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.272592][ T9896]  ? kstrtouint+0x6e/0xe0
[  389.272623][ T9896]  ? __fget_files+0x2a/0x420
[  389.272637][ T9896]  ? __fget_files+0x3a8/0x420
[  389.272655][ T9896]  __sys_sendmmsg+0x279/0x4d0
[  389.272674][ T9896]  ? __pfx___sys_sendmmsg+0x10/0x10
[  389.272695][ T9896]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  389.272716][ T9896]  ? ksys_write+0x248/0x270
[  389.272733][ T9896]  ? __pfx_ksys_write+0x10/0x10
[  389.272751][ T9896]  __x64_sys_sendmmsg+0xa0/0xc0
[  389.272767][ T9896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.272780][ T9896]  do_syscall_64+0x174/0x580
[  389.272796][ T9896]  ? trace_irq_disable+0x3b/0x140
[  389.272817][ T9896]  ? clear_bhb_loop+0x40/0x90
[  389.272831][ T9896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.272843][ T9896] RIP: 0033:0x7fb8e230e019
[  389.272855][ T9896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.272866][ T9896] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  389.272884][ T9896] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  389.272893][ T9896] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003
[  389.272900][ T9896] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  389.272908][ T9896] R10: 0000000024040000 R11: 0000000000000246 R12: 0000000000000001
[  389.272915][ T9896] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  389.272934][ T9896]  </TASK>
[  393.408923][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.077986][ T9952] FAULT_INJECTION: forcing a failure.
[  394.077986][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.078013][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.4.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  394.078030][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  394.078037][ T9952] Call Trace:
[  394.078042][ T9952]  <TASK>
[  394.078048][ T9952]  dump_stack_lvl+0xe8/0x150
[  394.078074][ T9952]  should_fail_ex+0x467/0x600
[  394.078097][ T9952]  _copy_from_user+0x2d/0xb0
[  394.078112][ T9952]  ___sys_recvmsg+0x173/0x5a0
[  394.078133][ T9952]  ? __pfx____sys_recvmsg+0x10/0x10
[  394.078153][ T9952]  ? __fget_files+0x2a/0x420
[  394.078182][ T9952]  do_recvmmsg+0x320/0x7f0
[  394.078203][ T9952]  ? __pfx_do_recvmmsg+0x10/0x10
[  394.078220][ T9952]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  394.078283][ T9952]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  394.078304][ T9952]  __x64_sys_recvmmsg+0x198/0x250
[  394.078322][ T9952]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  394.078344][ T9952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.078357][ T9952]  do_syscall_64+0x174/0x580
[  394.078374][ T9952]  ? trace_irq_disable+0x3b/0x140
[  394.078387][ T9952]  ? clear_bhb_loop+0x40/0x90
[  394.078401][ T9952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.078413][ T9952] RIP: 0033:0x7fbf8aebe019
[  394.078426][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.078437][ T9952] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  394.078452][ T9952] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  394.078461][ T9952] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003
[  394.078469][ T9952] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  394.078476][ T9952] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  394.078483][ T9952] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  394.078501][ T9952]  </TASK>
[  395.507734][ T9996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1281'.
[  395.618651][T10001] FAULT_INJECTION: forcing a failure.
[  395.618651][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.618678][T10001] CPU: 0 UID: 0 PID: 10001 Comm: syz.0.1282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  395.618694][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.618701][T10001] Call Trace:
[  395.618706][T10001]  <TASK>
[  395.618711][T10001]  dump_stack_lvl+0xe8/0x150
[  395.618736][T10001]  should_fail_ex+0x467/0x600
[  395.618760][T10001]  _copy_from_iter+0x1d3/0x1660
[  395.618774][T10001]  ? rcu_is_watching+0x15/0xb0
[  395.618791][T10001]  ? trace_kmem_cache_alloc+0x29/0xe0
[  395.618805][T10001]  ? __pfx__copy_from_iter+0x10/0x10
[  395.618818][T10001]  ? __alloc_skb+0x276/0x7a0
[  395.618832][T10001]  ? __alloc_skb+0x276/0x7a0
[  395.618848][T10001]  ? netlink_sendmsg+0x650/0xb40
[  395.618864][T10001]  ? skb_put+0x112/0x210
[  395.618879][T10001]  netlink_sendmsg+0x6c0/0xb40
[  395.618900][T10001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.618917][T10001]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  395.618936][T10001]  ? __kernel_text_address+0xd/0x30
[  395.618948][T10001]  ? unwind_get_return_address+0x4d/0x90
[  395.618964][T10001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.618979][T10001]  sock_sendmsg_nosec+0x13a/0x180
[  395.619000][T10001]  ____sys_sendmsg+0x565/0x870
[  395.619015][T10001]  ? __might_fault+0xaf/0x130
[  395.619033][T10001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.619054][T10001]  ? import_iovec+0x73/0xa0
[  395.619070][T10001]  ___sys_sendmsg+0x2a5/0x360
[  395.619085][T10001]  ? __lock_acquire+0x683/0x2ce0
[  395.619100][T10001]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.619134][T10001]  ? __fget_files+0x2a/0x420
[  395.619147][T10001]  ? __fget_files+0x3a8/0x420
[  395.619164][T10001]  __x64_sys_sendmsg+0x1b7/0x290
[  395.619182][T10001]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.619207][T10001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.619228][T10001]  do_syscall_64+0x174/0x580
[  395.619245][T10001]  ? trace_irq_disable+0x3b/0x140
[  395.619258][T10001]  ? clear_bhb_loop+0x40/0x90
[  395.619272][T10001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.619284][T10001] RIP: 0033:0x7fb8e230e019
[  395.619296][T10001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.619307][T10001] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.619321][T10001] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  395.619330][T10001] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000011
[  395.619338][T10001] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  395.619346][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.619353][T10001] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  395.619371][T10001]  </TASK>
[  397.932427][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  398.083236][   T10] usb 2-1: config 255 has an invalid interface number: 71 but max is 1
[  398.083259][   T10] usb 2-1: config 255 has an invalid interface number: 141 but max is 1
[  398.083272][   T10] usb 2-1: config 255 has no interface number 0
[  398.083282][   T10] usb 2-1: config 255 has no interface number 1
[  398.083325][   T10] usb 2-1: config 255 interface 141 altsetting 11 bulk endpoint 0xE has invalid maxpacket 1024
[  398.083340][   T10] usb 2-1: config 255 interface 141 altsetting 11 endpoint 0x9 has invalid maxpacket 1032, setting to 64
[  398.083356][   T10] usb 2-1: config 255 interface 141 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  398.083369][   T10] usb 2-1: config 255 interface 141 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[  398.083383][   T10] usb 2-1: config 255 interface 141 altsetting 11 endpoint 0xB has invalid maxpacket 1032, setting to 64
[  398.083400][   T10] usb 2-1: config 255 interface 141 altsetting 11 endpoint 0x1 has invalid maxpacket 1455, setting to 64
[  398.083416][   T10] usb 2-1: config 255 interface 71 has no altsetting 0
[  398.083427][   T10] usb 2-1: config 255 interface 141 has no altsetting 0
[  398.153203][   T10] usb 2-1: New USB device found, idVendor=2001, idProduct=3a01, bcdDevice=1b.57
[  398.153232][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.153247][   T10] usb 2-1: Product: 䍳黌럹Ἲノ䀻䢣ꥈ㷥ﮪ橲䠶銆㶰狐聫阰밡춁䀹ᦹ蔃輦ᐿ啫꯭뵺먀ﳭ헄㴐툾猯ﱑ鸷뒾Ѷ螰琢婵駶ਬ侧㞿솮ꑤ櫈譨䥫쬹౺횤ᰑ㈥멉丈츆畚
[  398.153261][   T10] usb 2-1: Manufacturer: Ж
[  398.153270][   T10] usb 2-1: SerialNumber: ⺰짹㭎ⷶ검㎮
[  398.582099][   T10] usb 2-1: Could not find all expected endpoints
[  398.643079][   T10] usb 2-1: Could not find all expected endpoints
[  398.715457][   T10] usb 2-1: USB disconnect, device number 21
[  398.893112][T10099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1309'.
[  399.116095][T10109] tipc: Withdrawal distribution failure
[  399.454260][T10119] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1315'.
[  399.472956][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.606437][T10129] mmap: syz.0.1316 (10129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  399.652767][T10131] FAULT_INJECTION: forcing a failure.
[  399.652767][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  399.657217][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.3.1318 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  399.657238][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.657246][T10131] Call Trace:
[  399.657251][T10131]  <TASK>
[  399.657257][T10131]  dump_stack_lvl+0xe8/0x150
[  399.657287][T10131]  should_fail_ex+0x467/0x600
[  399.657311][T10131]  _copy_from_iter+0x1d3/0x1660
[  399.657325][T10131]  ? rcu_is_watching+0x15/0xb0
[  399.657342][T10131]  ? trace_kmem_cache_alloc+0x29/0xe0
[  399.657357][T10131]  ? __pfx__copy_from_iter+0x10/0x10
[  399.657369][T10131]  ? __alloc_skb+0x276/0x7a0
[  399.657383][T10131]  ? __alloc_skb+0x276/0x7a0
[  399.657399][T10131]  ? netlink_sendmsg+0x650/0xb40
[  399.657415][T10131]  ? skb_put+0x112/0x210
[  399.657431][T10131]  netlink_sendmsg+0x6c0/0xb40
[  399.657452][T10131]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.657469][T10131]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  399.657492][T10131]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.657507][T10131]  sock_sendmsg_nosec+0x13a/0x180
[  399.657529][T10131]  ____sys_sendmsg+0x565/0x870
[  399.657545][T10131]  ? __might_fault+0xaf/0x130
[  399.657562][T10131]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.657582][T10131]  ? import_iovec+0x73/0xa0
[  399.657598][T10131]  ___sys_sendmsg+0x2a5/0x360
[  399.657622][T10131]  ? __lock_acquire+0x683/0x2ce0
[  399.657638][T10131]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.657674][T10131]  ? __fget_files+0x2a/0x420
[  399.657687][T10131]  ? __fget_files+0x3a8/0x420
[  399.657705][T10131]  __x64_sys_sendmsg+0x1b7/0x290
[  399.657723][T10131]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.657749][T10131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.657762][T10131]  do_syscall_64+0x174/0x580
[  399.657779][T10131]  ? trace_irq_disable+0x3b/0x140
[  399.657791][T10131]  ? clear_bhb_loop+0x40/0x90
[  399.657806][T10131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.657817][T10131] RIP: 0033:0x7fad35e8e019
[  399.657830][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.657841][T10131] RSP: 002b:00007fad340e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.657855][T10131] RAX: ffffffffffffffda RBX: 00007fad36115fa0 RCX: 00007fad35e8e019
[  399.657865][T10131] RDX: 0000000000048080 RSI: 0000200000000340 RDI: 0000000000000005
[  399.657873][T10131] RBP: 00007fad340e6090 R08: 0000000000000000 R09: 0000000000000000
[  399.657880][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.657887][T10131] R13: 00007fad36116038 R14: 00007fad36115fa0 R15: 00007ffc8a20d178
[  399.657906][T10131]  </TASK>
[  400.229436][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'.
[  400.406161][T10152] random: crng reseeded on system resumption
[  400.426658][T10152] FAULT_INJECTION: forcing a failure.
[  400.426658][T10152] name failslab, interval 1, probability 0, space 0, times 0
[  400.426682][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.1322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  400.426697][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  400.426705][T10152] Call Trace:
[  400.426709][T10152]  <TASK>
[  400.426715][T10152]  dump_stack_lvl+0xe8/0x150
[  400.426748][T10152]  should_fail_ex+0x467/0x600
[  400.426771][T10152]  should_failslab+0xa8/0x100
[  400.426788][T10152]  __kmalloc_noprof+0xfe/0x780
[  400.426800][T10152]  ? rcu_is_watching+0x15/0xb0
[  400.426816][T10152]  ? tomoyo_realpath_from_path+0xef/0x640
[  400.426833][T10152]  ? tomoyo_realpath_from_path+0xef/0x640
[  400.426852][T10152]  tomoyo_realpath_from_path+0xef/0x640
[  400.426874][T10152]  ? tomoyo_path_number_perm+0x219/0x5f0
[  400.426888][T10152]  tomoyo_path_number_perm+0x246/0x5f0
[  400.426903][T10152]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  400.426916][T10152]  ? __lock_acquire+0x683/0x2ce0
[  400.426937][T10152]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  400.426954][T10152]  ? hook_file_ioctl+0x1f3/0x600
[  400.426971][T10152]  ? lockdep_hardirqs_on+0x7a/0x110
[  400.426998][T10152]  ? __fget_files+0x2a/0x420
[  400.427013][T10152]  ? __fget_files+0x2a/0x420
[  400.427024][T10152]  ? __fget_files+0x3a8/0x420
[  400.427036][T10152]  ? __fget_files+0x2a/0x420
[  400.427051][T10152]  security_file_ioctl+0xc3/0x2a0
[  400.427066][T10152]  __se_sys_ioctl+0x47/0x170
[  400.427083][T10152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.427097][T10152]  do_syscall_64+0x174/0x580
[  400.427112][T10152]  ? trace_irq_disable+0x3b/0x140
[  400.427125][T10152]  ? clear_bhb_loop+0x40/0x90
[  400.427140][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.427152][T10152] RIP: 0033:0x7fbdab8ce019
[  400.427165][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.427176][T10152] RSP: 002b:00007fbda9b05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  400.427191][T10152] RAX: ffffffffffffffda RBX: 00007fbdabb56090 RCX: 00007fbdab8ce019
[  400.427200][T10152] RDX: 0000000000000000 RSI: 00000000400c330d RDI: 0000000000000008
[  400.427208][T10152] RBP: 00007fbda9b05090 R08: 0000000000000000 R09: 0000000000000000
[  400.427216][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.427224][T10152] R13: 00007fbdabb56128 R14: 00007fbdabb56090 R15: 00007ffdde0ea818
[  400.427242][T10152]  </TASK>
[  400.427247][T10152] ERROR: Out of memory at tomoyo_realpath_from_path.
[  401.303751][T10179] FAULT_INJECTION: forcing a failure.
[  401.303751][T10179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.303779][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.1.1332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  401.303795][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  401.303803][T10179] Call Trace:
[  401.303808][T10179]  <TASK>
[  401.303814][T10179]  dump_stack_lvl+0xe8/0x150
[  401.303839][T10179]  should_fail_ex+0x467/0x600
[  401.303863][T10179]  _copy_from_iter+0x1d3/0x1660
[  401.303879][T10179]  ? rcu_is_watching+0x15/0xb0
[  401.303896][T10179]  ? trace_kmem_cache_alloc+0x29/0xe0
[  401.303911][T10179]  ? __pfx__copy_from_iter+0x10/0x10
[  401.303924][T10179]  ? __alloc_skb+0x276/0x7a0
[  401.303938][T10179]  ? __alloc_skb+0x276/0x7a0
[  401.303954][T10179]  ? netlink_sendmsg+0x650/0xb40
[  401.303975][T10179]  ? skb_put+0x112/0x210
[  401.303990][T10179]  netlink_sendmsg+0x6c0/0xb40
[  401.304012][T10179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.304029][T10179]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  401.304049][T10179]  ? __kernel_text_address+0xd/0x30
[  401.304061][T10179]  ? unwind_get_return_address+0x4d/0x90
[  401.304078][T10179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.304093][T10179]  sock_sendmsg_nosec+0x13a/0x180
[  401.304115][T10179]  ____sys_sendmsg+0x565/0x870
[  401.304131][T10179]  ? __might_fault+0xaf/0x130
[  401.304148][T10179]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.304177][T10179]  ? import_iovec+0x73/0xa0
[  401.304194][T10179]  ___sys_sendmsg+0x2a5/0x360
[  401.304210][T10179]  ? __lock_acquire+0x683/0x2ce0
[  401.304225][T10179]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.304262][T10179]  ? __fget_files+0x2a/0x420
[  401.304275][T10179]  ? __fget_files+0x3a8/0x420
[  401.304294][T10179]  __x64_sys_sendmsg+0x1b7/0x290
[  401.304312][T10179]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  401.304338][T10179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.304352][T10179]  do_syscall_64+0x174/0x580
[  401.304369][T10179]  ? trace_irq_disable+0x3b/0x140
[  401.304382][T10179]  ? clear_bhb_loop+0x40/0x90
[  401.304397][T10179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.304409][T10179] RIP: 0033:0x7fbdab8ce019
[  401.304422][T10179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.304433][T10179] RSP: 002b:00007fbda9b26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.304447][T10179] RAX: ffffffffffffffda RBX: 00007fbdabb55fa0 RCX: 00007fbdab8ce019
[  401.304456][T10179] RDX: 0000000000008090 RSI: 00002000000000c0 RDI: 0000000000000004
[  401.304465][T10179] RBP: 00007fbda9b26090 R08: 0000000000000000 R09: 0000000000000000
[  401.304472][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.304479][T10179] R13: 00007fbdabb56038 R14: 00007fbdabb55fa0 R15: 00007ffdde0ea818
[  401.304498][T10179]  </TASK>
[  402.417832][T10211] FAULT_INJECTION: forcing a failure.
[  402.417832][T10211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.417859][T10211] CPU: 0 UID: 0 PID: 10211 Comm: syz.1.1342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  402.417875][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  402.417883][T10211] Call Trace:
[  402.417888][T10211]  <TASK>
[  402.417894][T10211]  dump_stack_lvl+0xe8/0x150
[  402.417919][T10211]  should_fail_ex+0x467/0x600
[  402.417942][T10211]  _copy_from_iter+0x1d3/0x1660
[  402.417958][T10211]  ? rcu_is_watching+0x15/0xb0
[  402.417975][T10211]  ? trace_kmem_cache_alloc+0x29/0xe0
[  402.417990][T10211]  ? __pfx__copy_from_iter+0x10/0x10
[  402.418003][T10211]  ? __alloc_skb+0x276/0x7a0
[  402.418017][T10211]  ? __alloc_skb+0x276/0x7a0
[  402.418033][T10211]  ? netlink_sendmsg+0x650/0xb40
[  402.418050][T10211]  ? skb_put+0x112/0x210
[  402.418066][T10211]  netlink_sendmsg+0x6c0/0xb40
[  402.418086][T10211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.418104][T10211]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  402.418123][T10211]  ? __kernel_text_address+0xd/0x30
[  402.418136][T10211]  ? unwind_get_return_address+0x4d/0x90
[  402.418153][T10211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.418169][T10211]  sock_sendmsg_nosec+0x13a/0x180
[  402.418190][T10211]  ____sys_sendmsg+0x565/0x870
[  402.418207][T10211]  ? __might_fault+0xaf/0x130
[  402.418227][T10211]  ? __pfx_____sys_sendmsg+0x10/0x10
[  402.418249][T10211]  ? import_iovec+0x73/0xa0
[  402.418265][T10211]  ___sys_sendmsg+0x2a5/0x360
[  402.418280][T10211]  ? __lock_acquire+0x683/0x2ce0
[  402.418296][T10211]  ? __pfx____sys_sendmsg+0x10/0x10
[  402.418331][T10211]  ? __fget_files+0x2a/0x420
[  402.418344][T10211]  ? __fget_files+0x3a8/0x420
[  402.418362][T10211]  __x64_sys_sendmsg+0x1b7/0x290
[  402.418380][T10211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  402.418406][T10211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.418419][T10211]  do_syscall_64+0x174/0x580
[  402.418436][T10211]  ? trace_irq_disable+0x3b/0x140
[  402.418450][T10211]  ? clear_bhb_loop+0x40/0x90
[  402.418465][T10211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.418477][T10211] RIP: 0033:0x7fbdab8ce019
[  402.418490][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.418501][T10211] RSP: 002b:00007fbda9b26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.418516][T10211] RAX: ffffffffffffffda RBX: 00007fbdabb55fa0 RCX: 00007fbdab8ce019
[  402.418526][T10211] RDX: 0000000000000000 RSI: 0000200000000e00 RDI: 0000000000000003
[  402.418534][T10211] RBP: 00007fbda9b26090 R08: 0000000000000000 R09: 0000000000000000
[  402.418541][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.418549][T10211] R13: 00007fbdabb56038 R14: 00007fbdabb55fa0 R15: 00007ffdde0ea818
[  402.418567][T10211]  </TASK>
[  403.520929][T10233] FAULT_INJECTION: forcing a failure.
[  403.520929][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.520955][T10233] CPU: 0 UID: 0 PID: 10233 Comm: syz.4.1347 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  403.520971][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  403.520979][T10233] Call Trace:
[  403.520984][T10233]  <TASK>
[  403.520990][T10233]  dump_stack_lvl+0xe8/0x150
[  403.521015][T10233]  should_fail_ex+0x467/0x600
[  403.521038][T10233]  _copy_from_user+0x2d/0xb0
[  403.521054][T10233]  memdup_user+0x5e/0xd0
[  403.521111][T10233]  strndup_user+0x68/0xd0
[  403.521129][T10233]  __se_sys_fsconfig+0x4d6/0x810
[  403.521172][T10233]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  403.521190][T10233]  ? ksys_write+0x248/0x270
[  403.521207][T10233]  ? __pfx_ksys_write+0x10/0x10
[  403.521227][T10233]  ? __x64_sys_fsconfig+0x20/0xc0
[  403.521244][T10233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.521257][T10233]  do_syscall_64+0x174/0x580
[  403.521274][T10233]  ? trace_irq_disable+0x3b/0x140
[  403.521288][T10233]  ? clear_bhb_loop+0x40/0x90
[  403.521302][T10233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.521314][T10233] RIP: 0033:0x7fbf8aebe019
[  403.521327][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.521338][T10233] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  403.521356][T10233] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  403.521366][T10233] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000000000000004
[  403.521374][T10233] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  403.521382][T10233] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  403.521390][T10233] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  403.521409][T10233]  </TASK>
[  403.707620][ T5856] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  403.812320][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  403.908538][ T5856] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  403.908561][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.908575][ T5856] usb 2-1: Product: ц
[  403.908584][ T5856] usb 2-1: Manufacturer: ᐇ
[  403.908593][ T5856] usb 2-1: SerialNumber: 懴
[  404.420000][ T5856] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  404.675920][T10270] FAULT_INJECTION: forcing a failure.
[  404.675920][T10270] name failslab, interval 1, probability 0, space 0, times 0
[  404.675946][T10270] CPU: 0 UID: 0 PID: 10270 Comm: syz.2.1355 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  404.675961][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.675969][T10270] Call Trace:
[  404.675974][T10270]  <TASK>
[  404.675980][T10270]  dump_stack_lvl+0xe8/0x150
[  404.676006][T10270]  should_fail_ex+0x467/0x600
[  404.676031][T10270]  should_failslab+0xa8/0x100
[  404.676048][T10270]  __kmalloc_cache_noprof+0xa0/0x6b0
[  404.676063][T10270]  ? tipc_topsrv_queue_evt+0xec/0x300
[  404.676160][T10270]  ? tipc_topsrv_queue_evt+0xec/0x300
[  404.676181][T10270]  tipc_topsrv_queue_evt+0xec/0x300
[  404.676200][T10270]  tipc_sub_report_overlap+0x4bd/0x8b0
[  404.676241][T10270]  tipc_nametbl_remove_publ+0xd1e/0x1b00
[  404.676308][T10270]  ? tipc_nametbl_remove_publ+0x141/0x1b00
[  404.676326][T10270]  ? __pfx_rt_spin_lock+0x10/0x10
[  404.676348][T10270]  tipc_nametbl_withdraw+0x97/0x2b0
[  404.676367][T10270]  ? tipc_nametbl_withdraw+0x70/0x2b0
[  404.676387][T10270]  tipc_sk_withdraw+0x305/0x640
[  404.676407][T10270]  ? __pfx_tipc_sk_withdraw+0x10/0x10
[  404.676421][T10270]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  404.676458][T10270]  ? lockdep_hardirqs_on+0x7a/0x110
[  404.676479][T10270]  tipc_sk_bind+0x245/0x300
[  404.676502][T10270]  __sys_bind+0x2e9/0x410
[  404.676518][T10270]  ? __pfx___sys_bind+0x10/0x10
[  404.676541][T10270]  ? __pfx_ksys_write+0x10/0x10
[  404.676562][T10270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.676576][T10270]  __x64_sys_bind+0x7a/0x90
[  404.676591][T10270]  do_syscall_64+0x174/0x580
[  404.676607][T10270]  ? trace_irq_disable+0x3b/0x140
[  404.676621][T10270]  ? clear_bhb_loop+0x40/0x90
[  404.676637][T10270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.676649][T10270] RIP: 0033:0x7fe3ca33e019
[  404.676663][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.676678][T10270] RSP: 002b:00007fe3c8596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  404.676693][T10270] RAX: ffffffffffffffda RBX: 00007fe3ca5c5fa0 RCX: 00007fe3ca33e019
[  404.676702][T10270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  404.676710][T10270] RBP: 00007fe3c8596090 R08: 0000000000000000 R09: 0000000000000000
[  404.676717][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.676725][T10270] R13: 00007fe3ca5c6038 R14: 00007fe3ca5c5fa0 R15: 00007fff0a210ff8
[  404.676747][T10270]  </TASK>
[  405.198299][ T5856] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  405.235617][ T5856] usb 2-1: USB disconnect, device number 22
[  406.133341][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'.
[  406.133367][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'.
[  406.236454][T10310] fuse: Bad value for 'fd'
[  406.259651][T10310] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1364'.
[  406.278424][   T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  406.300613][T10308] program syz.4.1365 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  406.370606][T10317] FAULT_INJECTION: forcing a failure.
[  406.370606][T10317] name failslab, interval 1, probability 0, space 0, times 0
[  406.370754][T10317] CPU: 0 UID: 0 PID: 10317 Comm: syz.1.1367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  406.370771][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  406.370779][T10317] Call Trace:
[  406.370785][T10317]  <TASK>
[  406.370791][T10317]  dump_stack_lvl+0xe8/0x150
[  406.370817][T10317]  should_fail_ex+0x467/0x600
[  406.370841][T10317]  should_failslab+0xa8/0x100
[  406.370861][T10317]  kmem_cache_alloc_node_noprof+0xae/0x670
[  406.370875][T10317]  ? preload_this_cpu_lock+0x49/0xc0
[  406.370890][T10317]  ? preload_this_cpu_lock+0x49/0xc0
[  406.370905][T10317]  ? alloc_vmap_area+0x21c/0x1420
[  406.370932][T10317]  preload_this_cpu_lock+0x49/0xc0
[  406.370948][T10317]  alloc_vmap_area+0x3c3/0x1420
[  406.370975][T10317]  ? __pfx_alloc_vmap_area+0x10/0x10
[  406.370994][T10317]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  406.371009][T10317]  ? __get_vm_area_node+0x136/0x300
[  406.371026][T10317]  ? __get_vm_area_node+0x136/0x300
[  406.371051][T10317]  __get_vm_area_node+0x1f2/0x300
[  406.371073][T10317]  __vmalloc_node_range_noprof+0x358/0x1730
[  406.371086][T10317]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  406.371105][T10317]  ? is_bpf_text_address+0x26/0x2b0
[  406.371130][T10317]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  406.371142][T10317]  ? is_bpf_text_address+0x26/0x2b0
[  406.371158][T10317]  ? kernel_text_address+0xa5/0xe0
[  406.371175][T10317]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  406.371188][T10317]  __vmalloc_noprof+0xd2/0x120
[  406.371199][T10317]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  406.371215][T10317]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  406.371227][T10317]  ? bpf_prog_alloc+0x2a/0x1a0
[  406.371241][T10317]  bpf_prog_alloc+0x3c/0x1a0
[  406.371256][T10317]  bpf_prog_load+0x7f8/0x1c00
[  406.371276][T10317]  ? __pfx_bpf_prog_load+0x10/0x10
[  406.371304][T10317]  __sys_bpf+0xd0d/0xd90
[  406.371322][T10317]  ? __pfx___sys_bpf+0x10/0x10
[  406.371336][T10317]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  406.371357][T10317]  ? rt_mutex_slowunlock+0x219/0x460
[  406.371381][T10317]  ? ksys_write+0x248/0x270
[  406.371398][T10317]  ? __pfx_ksys_write+0x10/0x10
[  406.371417][T10317]  __x64_sys_bpf+0xba/0xd0
[  406.371436][T10317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.371449][T10317]  do_syscall_64+0x174/0x580
[  406.371466][T10317]  ? trace_irq_disable+0x3b/0x140
[  406.371479][T10317]  ? clear_bhb_loop+0x40/0x90
[  406.371494][T10317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.371507][T10317] RIP: 0033:0x7fbdab8ce019
[  406.371520][T10317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.371543][T10317] RSP: 002b:00007fbda9b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  406.371558][T10317] RAX: ffffffffffffffda RBX: 00007fbdabb55fa0 RCX: 00007fbdab8ce019
[  406.371568][T10317] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  406.371576][T10317] RBP: 00007fbda9b26090 R08: 0000000000000000 R09: 0000000000000000
[  406.371583][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.371591][T10317] R13: 00007fbdabb56038 R14: 00007fbdabb55fa0 R15: 00007ffdde0ea818
[  406.371610][T10317]  </TASK>
[  406.428277][   T10] usb 3-1: Using ep0 maxpacket: 16
[  406.433362][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.433379][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  406.504451][   T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  406.504474][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.504487][   T10] usb 3-1: Product: syz
[  406.504496][   T10] usb 3-1: Manufacturer: syz
[  406.504504][   T10] usb 3-1: SerialNumber: syz
[  406.760036][   T10] usb 3-1: config 0 descriptor??
[  406.911703][T10323] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1368'.
[  406.950274][T10323] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1368'.
[  407.240449][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.307237][   T37] audit: type=1326 audit(1785658347.133:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.307692][   T37] audit: type=1326 audit(1785658347.133:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.307726][   T37] audit: type=1326 audit(1785658347.133:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.329429][ T5851] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  407.398366][   T37] audit: type=1326 audit(1785658347.233:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.398403][   T37] audit: type=1326 audit(1785658347.233:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.398429][   T37] audit: type=1326 audit(1785658347.233:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.398454][   T37] audit: type=1326 audit(1785658347.233:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.398566][   T37] audit: type=1326 audit(1785658347.233:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.398594][   T37] audit: type=1326 audit(1785658347.233:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.418807][   T37] audit: type=1326 audit(1785658347.243:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.3.1372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad35e8e019 code=0x7ffc0000
[  407.620931][ T5851] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  407.620955][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.620967][ T5851] usb 2-1: Product: ц
[  407.620976][ T5851] usb 2-1: Manufacturer: ᐇ
[  407.620985][ T5851] usb 2-1: SerialNumber: 懴
[  407.751483][   T10] usb 3-1: USB disconnect, device number 38
[  408.113457][ T5851] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  409.009185][   T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  409.168295][   T10] usb 3-1: Using ep0 maxpacket: 8
[  409.341872][T10407] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  409.341888][T10407] netlink: 9528 bytes leftover after parsing attributes in process `syz.1.1384'.
[  409.403718][ T5851] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  409.592443][ T5851] usb 2-1: USB disconnect, device number 23
[  409.852599][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  409.853377][   T10] usb 3-1: unable to read config index 0 descriptor/start: -71
[  409.853401][   T10] usb 3-1: can't read configurations, error -71
[  410.050583][T10423] overlay: ./file0 is not a directory
[  410.200908][ T5851] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  410.349697][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short
[  410.351587][ T5851] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  410.384546][ T5851] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  410.384568][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.384581][ T5851] usb 2-1: Product: syz
[  410.384590][ T5851] usb 2-1: Manufacturer: syz
[  410.384598][ T5851] usb 2-1: SerialNumber: syz
[  410.518461][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  410.558384][T10446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1391'.
[  410.776629][ T5851] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  410.971533][ T5851] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  410.971553][ T5851] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  411.371972][ T5851] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  411.371995][ T5851] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  411.395896][ T5856] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  411.572544][T10407] 9p: Bad value for 'rfdno'
[  411.584919][ T5856] usb 4-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  411.584941][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.584954][ T5856] usb 4-1: Product: ц
[  411.584963][ T5856] usb 4-1: Manufacturer: ᐇ
[  411.584972][ T5856] usb 4-1: SerialNumber: 懴
[  411.633446][ T5851] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  412.173319][ T5856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  412.387769][ T5851] usb 2-1: USB disconnect, device number 24
[  412.642931][ T5856] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  412.772815][ T5856] usb 4-1: USB disconnect, device number 37
[  417.614830][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  417.961463][T10578] FAULT_INJECTION: forcing a failure.
[  417.961463][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.961488][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.2.1417 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  417.961504][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.961511][T10578] Call Trace:
[  417.961516][T10578]  <TASK>
[  417.961522][T10578]  dump_stack_lvl+0xe8/0x150
[  417.961548][T10578]  should_fail_ex+0x467/0x600
[  417.961572][T10578]  _copy_from_iter+0x1d3/0x1660
[  417.961585][T10578]  ? rcu_is_watching+0x15/0xb0
[  417.961602][T10578]  ? trace_kmem_cache_alloc+0x29/0xe0
[  417.961617][T10578]  ? kmem_cache_alloc_noprof+0x3bd/0x650
[  417.961629][T10578]  ? __build_skb+0x62/0x440
[  417.961643][T10578]  ? __build_skb+0x62/0x440
[  417.961656][T10578]  ? __pfx__copy_from_iter+0x10/0x10
[  417.961671][T10578]  ? __build_skb+0x2a2/0x440
[  417.961690][T10578]  ? netlink_sendmsg+0x650/0xb40
[  417.961706][T10578]  ? skb_put+0x112/0x210
[  417.961722][T10578]  netlink_sendmsg+0x6c0/0xb40
[  417.961744][T10578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.961762][T10578]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  417.961781][T10578]  ? __kernel_text_address+0xd/0x30
[  417.961794][T10578]  ? unwind_get_return_address+0x4d/0x90
[  417.961810][T10578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.961826][T10578]  sock_sendmsg_nosec+0x13a/0x180
[  417.961847][T10578]  ____sys_sendmsg+0x565/0x870
[  417.961863][T10578]  ? __might_fault+0xaf/0x130
[  417.961881][T10578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  417.961902][T10578]  ? import_iovec+0x73/0xa0
[  417.961919][T10578]  ___sys_sendmsg+0x2a5/0x360
[  417.961934][T10578]  ? __lock_acquire+0x683/0x2ce0
[  417.961951][T10578]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.962003][T10578]  ? __fget_files+0x2a/0x420
[  417.962018][T10578]  ? __fget_files+0x3a8/0x420
[  417.962037][T10578]  __x64_sys_sendmsg+0x1b7/0x290
[  417.962055][T10578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  417.962082][T10578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.962096][T10578]  do_syscall_64+0x174/0x580
[  417.962113][T10578]  ? trace_irq_disable+0x3b/0x140
[  417.962128][T10578]  ? clear_bhb_loop+0x40/0x90
[  417.962143][T10578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.962155][T10578] RIP: 0033:0x7fe3ca33e019
[  417.962168][T10578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.962179][T10578] RSP: 002b:00007fe3c8596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.962193][T10578] RAX: ffffffffffffffda RBX: 00007fe3ca5c5fa0 RCX: 00007fe3ca33e019
[  417.962203][T10578] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000004
[  417.962211][T10578] RBP: 00007fe3c8596090 R08: 0000000000000000 R09: 0000000000000000
[  417.962219][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.962226][T10578] R13: 00007fe3ca5c6038 R14: 00007fe3ca5c5fa0 R15: 00007fff0a210ff8
[  417.962245][T10578]  </TASK>
[  418.326771][T10581] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  418.586015][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  418.627733][ T5856] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  418.777735][ T5721] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  418.785325][ T5856] usb 4-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  418.785346][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.785359][ T5856] usb 4-1: Product: ц
[  418.785368][ T5856] usb 4-1: Manufacturer: ᐇ
[  418.785377][ T5856] usb 4-1: SerialNumber: 懴
[  418.936479][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short
[  418.951627][ T5721] usb 3-1: config 255 has an invalid interface number: 71 but max is 1
[  418.951650][ T5721] usb 3-1: config 255 has an invalid interface number: 141 but max is 1
[  418.951663][ T5721] usb 3-1: config 255 has no interface number 0
[  418.951673][ T5721] usb 3-1: config 255 has no interface number 1
[  418.951777][ T5721] usb 3-1: config 255 interface 141 altsetting 11 bulk endpoint 0xE has invalid maxpacket 1024
[  418.951795][ T5721] usb 3-1: config 255 interface 141 altsetting 11 endpoint 0x9 has invalid maxpacket 1032, setting to 64
[  418.951812][ T5721] usb 3-1: config 255 interface 141 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  418.951826][ T5721] usb 3-1: config 255 interface 141 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[  418.951840][ T5721] usb 3-1: config 255 interface 141 altsetting 11 endpoint 0xB has invalid maxpacket 1032, setting to 64
[  418.951857][ T5721] usb 3-1: config 255 interface 141 altsetting 11 endpoint 0x1 has invalid maxpacket 1455, setting to 64
[  418.951922][ T5721] usb 3-1: config 255 interface 71 has no altsetting 0
[  418.951940][ T5721] usb 3-1: config 255 interface 141 has no altsetting 0
[  419.087190][ T5721] usb 3-1: New USB device found, idVendor=2001, idProduct=3a01, bcdDevice=1b.57
[  419.087212][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.087224][ T5721] usb 3-1: Product: 䍳黌럹Ἲノ䀻䢣ꥈ㷥ﮪ橲䠶銆㶰狐聫阰밡춁䀹ᦹ蔃輦ᐿ啫꯭뵺먀ﳭ헄㴐툾猯ﱑ鸷뒾Ѷ螰琢婵駶ਬ侧㞿솮ꑤ櫈譨䥫쬹౺횤ᰑ㈥멉丈츆畚
[  419.087238][ T5721] usb 3-1: Manufacturer: Ж
[  419.087247][ T5721] usb 3-1: SerialNumber: syz
[  419.248440][T10614] FAULT_INJECTION: forcing a failure.
[  419.248440][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.248470][T10614] CPU: 0 UID: 0 PID: 10614 Comm: syz.4.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  419.248486][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.248494][T10614] Call Trace:
[  419.248499][T10614]  <TASK>
[  419.248505][T10614]  dump_stack_lvl+0xe8/0x150
[  419.248531][T10614]  should_fail_ex+0x467/0x600
[  419.248554][T10614]  _copy_from_iter+0x1d3/0x1660
[  419.248570][T10614]  ? rcu_is_watching+0x15/0xb0
[  419.248586][T10614]  ? trace_kmem_cache_alloc+0x29/0xe0
[  419.248602][T10614]  ? __pfx__copy_from_iter+0x10/0x10
[  419.248614][T10614]  ? __alloc_skb+0x276/0x7a0
[  419.248628][T10614]  ? __alloc_skb+0x276/0x7a0
[  419.248645][T10614]  ? netlink_sendmsg+0x650/0xb40
[  419.248661][T10614]  ? skb_put+0x112/0x210
[  419.248677][T10614]  netlink_sendmsg+0x6c0/0xb40
[  419.248699][T10614]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.248717][T10614]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  419.248737][T10614]  ? __kernel_text_address+0xd/0x30
[  419.248750][T10614]  ? unwind_get_return_address+0x4d/0x90
[  419.248766][T10614]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.248782][T10614]  sock_sendmsg_nosec+0x13a/0x180
[  419.248803][T10614]  ____sys_sendmsg+0x565/0x870
[  419.248819][T10614]  ? __might_fault+0xaf/0x130
[  419.248836][T10614]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.248857][T10614]  ? import_iovec+0x73/0xa0
[  419.248874][T10614]  ___sys_sendmsg+0x2a5/0x360
[  419.248890][T10614]  ? __lock_acquire+0x683/0x2ce0
[  419.248906][T10614]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.248942][T10614]  ? __fget_files+0x2a/0x420
[  419.248955][T10614]  ? __fget_files+0x3a8/0x420
[  419.248974][T10614]  __x64_sys_sendmsg+0x1b7/0x290
[  419.248992][T10614]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.249018][T10614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.249032][T10614]  do_syscall_64+0x174/0x580
[  419.249049][T10614]  ? trace_irq_disable+0x3b/0x140
[  419.249062][T10614]  ? clear_bhb_loop+0x40/0x90
[  419.249080][T10614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.249092][T10614] RIP: 0033:0x7fbf8aebe019
[  419.249105][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.249116][T10614] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.249131][T10614] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  419.249141][T10614] RDX: 0000000020000854 RSI: 0000200000000180 RDI: 0000000000000003
[  419.249149][T10614] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  419.249157][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.249164][T10614] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  419.249183][T10614]  </TASK>
[  419.937187][ T5721] usb 3-1: Could not find all expected endpoints
[  419.969496][ T5721] usb 3-1: Could not find all expected endpoints
[  420.033405][ T5856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  425.325341][ T5721] usb 3-1: USB disconnect, device number 41
[  425.560007][ T5856] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  425.591096][ T5856] usb 4-1: USB disconnect, device number 38
[  426.153125][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'.
[  426.690256][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  426.778312][ T5721] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  427.470663][ T5721] usb 2-1: too many endpoints for config 0 interface 0 altsetting 113: 212, using maximum allowed: 30
[  427.470695][ T5721] usb 2-1: config 0 interface 0 altsetting 113 has an endpoint descriptor with address 0x92, changing to 0x82
[  427.470712][ T5721] usb 2-1: config 0 interface 0 altsetting 113 endpoint 0x82 has invalid maxpacket 15180, setting to 64
[  427.470727][ T5721] usb 2-1: config 0 interface 0 altsetting 113 has 1 endpoint descriptor, different from the interface descriptor's value: 212
[  427.470744][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0
[  427.473303][ T5721] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  427.473322][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.473335][ T5721] usb 2-1: Product: syz
[  427.473352][ T5721] usb 2-1: Manufacturer: syz
[  427.473361][ T5721] usb 2-1: SerialNumber: syz
[  427.597191][ T5721] usb 2-1: config 0 descriptor??
[  427.641540][ T5721] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 02c0
[  427.748796][ T5851] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  428.037673][ T5851] usb 4-1: Using ep0 maxpacket: 8
[  429.297401][ T5721] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  429.449744][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short
[  429.450563][ T5851] usb 4-1: unable to read config index 0 descriptor/start: -71
[  429.450587][ T5851] usb 4-1: can't read configurations, error -71
[  429.477354][ T5721] usb 3-1: Using ep0 maxpacket: 16
[  429.479030][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.479047][ T5721] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  429.490826][ T5721] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  429.490848][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.490860][ T5721] usb 3-1: Product: syz
[  429.490869][ T5721] usb 3-1: Manufacturer: syz
[  429.490878][ T5721] usb 3-1: SerialNumber: syz
[  429.705658][ T5721] usb 3-1: config 0 descriptor??
[  430.364290][ T5721] usb 3-1: USB disconnect, device number 42
[  434.851742][T10795] netlink: 'syz.3.1461': attribute type 1 has an invalid length.
[  434.851762][T10795] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1461'.
[  434.851773][T10795] netlink: 'syz.3.1461': attribute type 1 has an invalid length.
[  435.074357][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.074730][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.129214][   T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  435.295289][   T10] usb 3-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  435.295312][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.295324][   T10] usb 3-1: Product: ц
[  435.295334][   T10] usb 3-1: Manufacturer: ᐇ
[  435.295342][   T10] usb 3-1: SerialNumber: 懴
[  435.935752][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  436.406577][   T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  436.437401][   T10] usb 3-1: USB disconnect, device number 43
[  436.779711][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.780079][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.947465][   T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  437.099539][   T10] usb 3-1: Using ep0 maxpacket: 16
[  437.101173][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.101200][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  437.103090][   T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  437.103109][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.103121][   T10] usb 3-1: Product: syz
[  437.103130][   T10] usb 3-1: Manufacturer: syz
[  437.103139][   T10] usb 3-1: SerialNumber: syz
[  437.189152][   T10] usb 3-1: config 0 descriptor??
[  437.219271][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  440.234178][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.448797][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  441.224768][   T10] usb 3-1: USB disconnect, device number 44
[  441.484631][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'.
[  444.584013][T11029] netlink: 'syz.2.1522': attribute type 15 has an invalid length.
[  444.584032][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1522'.
[  444.827381][ T1832] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  444.981651][ T1832] usb 4-1: unable to get BOS descriptor or descriptor too short
[  444.987113][ T1832] usb 4-1: config 255 has an invalid interface number: 71 but max is 1
[  444.987134][ T1832] usb 4-1: config 255 has an invalid interface number: 141 but max is 1
[  444.987147][ T1832] usb 4-1: config 255 has no interface number 0
[  444.987157][ T1832] usb 4-1: config 255 has no interface number 1
[  444.987201][ T1832] usb 4-1: config 255 interface 141 altsetting 11 bulk endpoint 0xE has invalid maxpacket 1024
[  444.987216][ T1832] usb 4-1: config 255 interface 141 altsetting 11 endpoint 0x9 has invalid maxpacket 1032, setting to 64
[  444.987233][ T1832] usb 4-1: config 255 interface 141 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  444.987246][ T1832] usb 4-1: config 255 interface 141 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[  444.988067][ T1832] usb 4-1: config 255 interface 141 altsetting 11 endpoint 0xB has invalid maxpacket 1032, setting to 64
[  444.988088][ T1832] usb 4-1: config 255 interface 141 altsetting 11 endpoint 0x1 has invalid maxpacket 1455, setting to 64
[  444.988104][ T1832] usb 4-1: config 255 interface 71 has no altsetting 0
[  444.988115][ T1832] usb 4-1: config 255 interface 141 has no altsetting 0
[  445.097649][ T1832] usb 4-1: New USB device found, idVendor=2001, idProduct=3a01, bcdDevice=1b.57
[  445.097674][ T1832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.097689][ T1832] usb 4-1: Product: syz
[  445.097698][ T1832] usb 4-1: Manufacturer: syz
[  445.097707][ T1832] usb 4-1: SerialNumber: syz
[  445.441306][ T1832] usb 4-1: Could not find all expected endpoints
[  445.481940][ T1832] usb 4-1: Could not find all expected endpoints
[  445.561266][ T1832] usb 4-1: USB disconnect, device number 41
[  445.664977][T11070] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1532'.
[  446.045321][T11081] FAULT_INJECTION: forcing a failure.
[  446.045321][T11081] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  446.045350][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.2.1535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  446.045366][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.045373][T11081] Call Trace:
[  446.045378][T11081]  <TASK>
[  446.045384][T11081]  dump_stack_lvl+0xe8/0x150
[  446.045411][T11081]  should_fail_ex+0x467/0x600
[  446.045435][T11081]  prepare_alloc_pages+0x223/0x690
[  446.045460][T11081]  __alloc_frozen_pages_noprof+0x12f/0x380
[  446.045478][T11081]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  446.045496][T11081]  ? __pfx_policy_nodemask+0x10/0x10
[  446.045513][T11081]  ? reacquire_held_locks+0x104/0x190
[  446.045535][T11081]  alloc_pages_mpol+0xce/0x280
[  446.045553][T11081]  alloc_pages_noprof+0xd2/0x2f0
[  446.045570][T11081]  __pmd_alloc+0x3a/0x5e0
[  446.045586][T11081]  huge_pte_alloc+0x531/0x630
[  446.045652][T11081]  ? hugetlb_vma_lock_read+0x99/0x2d0
[  446.045674][T11081]  hugetlb_fault+0x42f/0x12c0
[  446.045698][T11081]  ? __pfx_hugetlb_fault+0x10/0x10
[  446.045722][T11081]  ? mt_find+0x481/0x630
[  446.045776][T11081]  handle_mm_fault+0xe45/0x13f0
[  446.045795][T11081]  ? handle_mm_fault+0xe8/0x13f0
[  446.045808][T11081]  ? __pfx_handle_mm_fault+0x10/0x10
[  446.045824][T11081]  ? find_vma+0xed/0x160
[  446.045836][T11081]  ? __pfx_find_vma+0x10/0x10
[  446.045850][T11081]  ? __lock_acquire+0x683/0x2ce0
[  446.045866][T11081]  ? lock_mm_and_find_vma+0xa7/0x340
[  446.045898][T11081]  do_user_addr_fault+0x744/0x1340
[  446.045921][T11081]  exc_page_fault+0x6a/0xc0
[  446.045938][T11081]  asm_exc_page_fault+0x26/0x30
[  446.045950][T11081] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  446.045965][T11081] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 2a 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  446.045976][T11081] RSP: 0018:ffffc9000950fd58 EFLAGS: 00050216
[  446.045989][T11081] RAX: 00007ffffffff001 RBX: 0000000000000012 RCX: 0000000000000012
[  446.045998][T11081] RDX: 0000000000000001 RSI: 0000200000000700 RDI: ffffc9000950fdc0
[  446.046006][T11081] RBP: ffffc9000950feb8 R08: ffffc9000950fdd1 R09: 1ffff920012a1fba
[  446.046016][T11081] R10: dffffc0000000000 R11: fffff520012a1fbb R12: 0000200000000700
[  446.046024][T11081] R13: ffffc9000950fdc0 R14: ffffc9000950fdc0 R15: 0000200000000700
[  446.046044][T11081]  _copy_from_user+0x7a/0xb0
[  446.046061][T11081]  __sys_bind+0x1cc/0x410
[  446.046077][T11081]  ? __pfx___sys_bind+0x10/0x10
[  446.046100][T11081]  ? __pfx_ksys_write+0x10/0x10
[  446.046119][T11081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.046133][T11081]  __x64_sys_bind+0x7a/0x90
[  446.046147][T11081]  do_syscall_64+0x174/0x580
[  446.046163][T11081]  ? trace_irq_disable+0x3b/0x140
[  446.046176][T11081]  ? clear_bhb_loop+0x40/0x90
[  446.046191][T11081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.046203][T11081] RIP: 0033:0x7fe3ca33e019
[  446.046216][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.046226][T11081] RSP: 002b:00007fe3c8596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  446.046238][T11081] RAX: ffffffffffffffda RBX: 00007fe3ca5c5fa0 RCX: 00007fe3ca33e019
[  446.046247][T11081] RDX: 0000000000000012 RSI: 0000200000000700 RDI: 0000000000000004
[  446.046255][T11081] RBP: 00007fe3c8596090 R08: 0000000000000000 R09: 0000000000000000
[  446.046263][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.046271][T11081] R13: 00007fe3ca5c6038 R14: 00007fe3ca5c5fa0 R15: 00007fff0a210ff8
[  446.046290][T11081]  </TASK>
[  446.776085][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'.
[  446.776111][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'.
[  446.880717][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'.
[  446.880744][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'.
[  447.035068][T11114] FAULT_INJECTION: forcing a failure.
[  447.035068][T11114] name failslab, interval 1, probability 0, space 0, times 0
[  447.035095][T11114] CPU: 0 UID: 0 PID: 11114 Comm: syz.4.1543 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  447.035111][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.035119][T11114] Call Trace:
[  447.035124][T11114]  <TASK>
[  447.035131][T11114]  dump_stack_lvl+0xe8/0x150
[  447.035165][T11114]  should_fail_ex+0x467/0x600
[  447.035193][T11114]  should_failslab+0xa8/0x100
[  447.035209][T11114]  kmem_cache_alloc_noprof+0xa4/0x650
[  447.035223][T11114]  ? skb_clone+0x212/0x3a0
[  447.035240][T11114]  ? skb_clone+0x212/0x3a0
[  447.035260][T11114]  skb_clone+0x212/0x3a0
[  447.035278][T11114]  __netlink_deliver_tap+0x413/0x860
[  447.035302][T11114]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.035319][T11114]  netlink_deliver_tap+0x19c/0x1b0
[  447.035336][T11114]  netlink_unicast+0x7b8/0x990
[  447.035357][T11114]  netlink_sendmsg+0x813/0xb40
[  447.035379][T11114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.035397][T11114]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  447.035416][T11114]  ? __kernel_text_address+0xd/0x30
[  447.035429][T11114]  ? unwind_get_return_address+0x4d/0x90
[  447.035445][T11114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.035461][T11114]  sock_sendmsg_nosec+0x13a/0x180
[  447.035482][T11114]  sock_write_iter+0x2e4/0x3f0
[  447.035502][T11114]  ? __pfx_sock_write_iter+0x10/0x10
[  447.035531][T11114]  do_iter_readv_writev+0x624/0x8d0
[  447.035551][T11114]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  447.035571][T11114]  ? bpf_lsm_file_permission+0x9/0x20
[  447.035590][T11114]  ? security_file_permission+0x75/0x260
[  447.035606][T11114]  ? rw_verify_area+0x209/0x4d0
[  447.035623][T11114]  vfs_writev+0x34c/0x990
[  447.035637][T11114]  ? do_raw_spin_lock+0x12b/0x2f0
[  447.035658][T11114]  ? __pfx_vfs_writev+0x10/0x10
[  447.035678][T11114]  ? __fget_files+0x2a/0x420
[  447.035695][T11114]  ? __fget_files+0x3a8/0x420
[  447.035707][T11114]  ? __fget_files+0x2a/0x420
[  447.035725][T11114]  do_writev+0x15a/0x2e0
[  447.035738][T11114]  ? __pfx_do_writev+0x10/0x10
[  447.035755][T11114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.035768][T11114]  do_syscall_64+0x174/0x580
[  447.035785][T11114]  ? trace_irq_disable+0x3b/0x140
[  447.035798][T11114]  ? clear_bhb_loop+0x40/0x90
[  447.035813][T11114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.035825][T11114] RIP: 0033:0x7fbf8aebe019
[  447.035839][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.035850][T11114] RSP: 002b:00007fbf89116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  447.035864][T11114] RAX: ffffffffffffffda RBX: 00007fbf8b145fa0 RCX: 00007fbf8aebe019
[  447.035874][T11114] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  447.035882][T11114] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  447.035890][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.035897][T11114] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  447.035916][T11114]  </TASK>
[  447.268092][ T5721] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  447.448118][ T5721] usb 4-1: device descriptor read/64, error -71
[  447.524384][T11099] bridge1: entered promiscuous mode
[  447.524423][T11099] bridge1: entered allmulticast mode
[  447.601055][T11121] sctp: [Deprecated]: syz.4.1544 (pid 11121) Use of struct sctp_assoc_value in delayed_ack socket option.
[  447.601055][T11121] Use struct sctp_sack_info instead
[  447.601600][T11121] FAULT_INJECTION: forcing a failure.
[  447.601600][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.601623][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.4.1544 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  447.601638][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.601646][T11121] Call Trace:
[  447.601651][T11121]  <TASK>
[  447.601657][T11121]  dump_stack_lvl+0xe8/0x150
[  447.601682][T11121]  should_fail_ex+0x467/0x600
[  447.601705][T11121]  _copy_to_user+0x31/0xb0
[  447.601722][T11121]  simple_read_from_buffer+0xe1/0x170
[  447.601740][T11121]  proc_fail_nth_read+0x1be/0x230
[  447.601754][T11121]  ? __local_bh_enable+0x1e1/0x2f0
[  447.601772][T11121]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.601787][T11121]  ? rw_verify_area+0x250/0x4d0
[  447.601805][T11121]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.601818][T11121]  vfs_read+0x219/0xa90
[  447.601838][T11121]  ? __pfx_vfs_read+0x10/0x10
[  447.601855][T11121]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  447.601873][T11121]  ? lockdep_hardirqs_on+0x7a/0x110
[  447.601889][T11121]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  447.601905][T11121]  ? mutex_lock_nested+0x152/0x1d0
[  447.601917][T11121]  ? fdget_pos+0x252/0x320
[  447.601935][T11121]  ksys_read+0x156/0x270
[  447.601952][T11121]  ? __pfx_ksys_read+0x10/0x10
[  447.601966][T11121]  ? fput+0xa0/0xd0
[  447.601983][T11121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.602001][T11121]  do_syscall_64+0x174/0x580
[  447.602018][T11121]  ? trace_irq_disable+0x3b/0x140
[  447.602030][T11121]  ? clear_bhb_loop+0x40/0x90
[  447.602046][T11121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.602058][T11121] RIP: 0033:0x7fbf8ae7e84e
[  447.602071][T11121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  447.602082][T11121] RSP: 002b:00007fbf89115fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  447.602097][T11121] RAX: ffffffffffffffda RBX: 00007fbf891166c0 RCX: 00007fbf8ae7e84e
[  447.602106][T11121] RDX: 000000000000000f RSI: 00007fbf891160a0 RDI: 0000000000000004
[  447.602114][T11121] RBP: 00007fbf89116090 R08: 0000000000000000 R09: 0000000000000000
[  447.602121][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.602129][T11121] R13: 00007fbf8b146038 R14: 00007fbf8b145fa0 R15: 00007ffd0b13f1d8
[  447.602147][T11121]  </TASK>
[  447.730347][ T5721] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  447.958106][ T5721] usb 4-1: device descriptor read/64, error -71
[  448.032544][T11108] bridge2: entered promiscuous mode
[  448.032569][T11108] bridge2: entered allmulticast mode
[  448.072660][ T5721] usb usb4-port1: attempt power cycle
[  448.322935][T11134] sctp: [Deprecated]: syz.2.1548 (pid 11134) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.322935][T11134] Use struct sctp_sack_info instead
[  448.427412][ T5721] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  448.448058][ T5721] usb 4-1: device descriptor read/8, error -71
[  448.687497][ T5721] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  448.709517][ T5721] usb 4-1: device descriptor read/8, error -71
[  448.817732][ T5721] usb usb4-port1: unable to enumerate USB device
[  449.994255][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.013028][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.332938][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  450.390825][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.395217][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.435647][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.452958][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.520870][   T10] usb 5-1: config index 0 descriptor too short (expected 80, got 72)
[  450.522752][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  450.522772][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.522784][   T10] usb 5-1: Product: syz
[  450.522793][   T10] usb 5-1: Manufacturer: syz
[  450.522802][   T10] usb 5-1: SerialNumber: syz
[  450.558512][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  450.731039][    T9] usb 3-1: Using ep0 maxpacket: 32
[  450.735510][    T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  450.735531][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.735543][    T9] usb 3-1: config 0 has no interface number 0
[  450.735570][    T9] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  450.786828][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  450.786850][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.786863][    T9] usb 3-1: Product: syz
[  450.786872][    T9] usb 3-1: Manufacturer: syz
[  450.786881][    T9] usb 3-1: SerialNumber: syz
[  450.871282][    T9] usb 3-1: config 0 descriptor??
[  450.933462][    T9] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  450.933518][    T9] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  451.091572][ T1832] usb 2-1: USB disconnect, device number 25
[  451.318237][T11248] FAULT_INJECTION: forcing a failure.
[  451.318237][T11248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.318264][T11248] CPU: 0 UID: 0 PID: 11248 Comm: syz.0.1576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  451.318280][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  451.318288][T11248] Call Trace:
[  451.318296][T11248]  <TASK>
[  451.318302][T11248]  dump_stack_lvl+0xe8/0x150
[  451.318332][T11248]  should_fail_ex+0x467/0x600
[  451.318358][T11248]  _copy_from_iter+0x1d3/0x1660
[  451.318378][T11248]  ? __pfx__copy_from_iter+0x10/0x10
[  451.318391][T11248]  ? netlink_sendmsg+0x5d4/0xb40
[  451.318410][T11248]  ? netlink_sendmsg+0x5d4/0xb40
[  451.318430][T11248]  ? netlink_sendmsg+0x650/0xb40
[  451.318445][T11248]  ? skb_put+0x112/0x210
[  451.318463][T11248]  netlink_sendmsg+0x6c0/0xb40
[  451.318485][T11248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.318502][T11248]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  451.318523][T11248]  ? __kernel_text_address+0xd/0x30
[  451.318537][T11248]  ? unwind_get_return_address+0x4d/0x90
[  451.318554][T11248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.318570][T11248]  sock_sendmsg_nosec+0x13a/0x180
[  451.318593][T11248]  ____sys_sendmsg+0x565/0x870
[  451.318609][T11248]  ? __might_fault+0xaf/0x130
[  451.318628][T11248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.318650][T11248]  ? import_iovec+0x73/0xa0
[  451.318667][T11248]  ___sys_sendmsg+0x2a5/0x360
[  451.318682][T11248]  ? __lock_acquire+0x683/0x2ce0
[  451.318699][T11248]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.318742][T11248]  ? __fget_files+0x2a/0x420
[  451.318757][T11248]  ? __fget_files+0x3a8/0x420
[  451.318776][T11248]  __x64_sys_sendmsg+0x1b7/0x290
[  451.318795][T11248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.318822][T11248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.318836][T11248]  do_syscall_64+0x174/0x580
[  451.318856][T11248]  ? trace_irq_disable+0x3b/0x140
[  451.318870][T11248]  ? clear_bhb_loop+0x40/0x90
[  451.318885][T11248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.318897][T11248] RIP: 0033:0x7fb8e230e019
[  451.318910][T11248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.318922][T11248] RSP: 002b:00007fb8e0566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.318937][T11248] RAX: ffffffffffffffda RBX: 00007fb8e2595fa0 RCX: 00007fb8e230e019
[  451.318947][T11248] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  451.318955][T11248] RBP: 00007fb8e0566090 R08: 0000000000000000 R09: 0000000000000000
[  451.318963][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.318970][T11248] R13: 00007fb8e2596038 R14: 00007fb8e2595fa0 R15: 00007fff9363cab8
[  451.318990][T11248]  </TASK>
[  451.479423][    T9] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  451.479904][    T9] usbhid 3-1:0.35: couldn't find an input interrupt endpoint
[  451.918361][ T5851] usb 3-1: USB disconnect, device number 45
[  452.740338][ T5721] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  456.124036][ T5721] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  457.170210][T11315] syzkaller0: entered promiscuous mode
[  457.170228][T11315] syzkaller0: entered allmulticast mode
[  458.159091][T11325] FAULT_INJECTION: forcing a failure.
[  458.159091][T11325] name failslab, interval 1, probability 0, space 0, times 0
[  458.159117][T11325] CPU: 0 UID: 0 PID: 11325 Comm: syz.0.1590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  458.159132][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.159140][T11325] Call Trace:
[  458.159145][T11325]  <TASK>
[  458.159151][T11325]  dump_stack_lvl+0xe8/0x150
[  458.159177][T11325]  should_fail_ex+0x467/0x600
[  458.159201][T11325]  should_failslab+0xa8/0x100
[  458.159218][T11325]  kmem_cache_alloc_node_noprof+0xae/0x670
[  458.159232][T11325]  ? __alloc_skb+0x1d7/0x7a0
[  458.159251][T11325]  ? __alloc_skb+0x1d7/0x7a0
[  458.159268][T11325]  __alloc_skb+0x1d7/0x7a0
[  458.159285][T11325]  alloc_skb_with_frags+0xc6/0x760
[  458.159308][T11325]  sock_alloc_send_pskb+0x884/0x9a0
[  458.159329][T11325]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  458.159414][T11325]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  458.159435][T11325]  ? dev_get_by_index+0x22/0x2d0
[  458.159472][T11325]  ? dev_get_by_index+0x22/0x2d0
[  458.159493][T11325]  packet_sendmsg+0x3258/0x5040
[  458.159532][T11325]  ? __lock_acquire+0x683/0x2ce0
[  458.159554][T11325]  ? __lock_acquire+0x683/0x2ce0
[  458.159572][T11325]  ? do_raw_spin_lock+0x12b/0x2f0
[  458.159593][T11325]  ? unwind_next_frame+0x8f/0x2550
[  458.159612][T11325]  ? smack_socket_sendmsg+0x1f8/0x590
[  458.159630][T11325]  ? __pfx_packet_sendmsg+0x10/0x10
[  458.159655][T11325]  ? __lock_acquire+0x683/0x2ce0
[  458.159670][T11325]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  458.159690][T11325]  ? __kernel_text_address+0xd/0x30
[  458.159703][T11325]  ? unwind_get_return_address+0x4d/0x90
[  458.159719][T11325]  ? __pfx_packet_sendmsg+0x10/0x10
[  458.159736][T11325]  sock_sendmsg_nosec+0x13a/0x180
[  458.159758][T11325]  ____sys_sendmsg+0x565/0x870
[  458.159780][T11325]  ? __pfx_____sys_sendmsg+0x10/0x10
[  458.159802][T11325]  ? import_iovec+0x73/0xa0
[  458.159819][T11325]  ___sys_sendmsg+0x2a5/0x360
[  458.159834][T11325]  ? __lock_acquire+0x683/0x2ce0
[  458.159849][T11325]  ? __pfx____sys_sendmsg+0x10/0x10
[  458.159886][T11325]  ? __fget_files+0x2a/0x420
[  458.159900][T11325]  ? __fget_files+0x3a8/0x420
[  458.159918][T11325]  __x64_sys_sendmsg+0x1b7/0x290
[  458.159937][T11325]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  458.159964][T11325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.159977][T11325]  do_syscall_64+0x174/0x580
[  458.159995][T11325]  ? trace_irq_disable+0x3b/0x140
[  458.160008][T11325]  ? clear_bhb_loop+0x40/0x90
[  458.160023][T11325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.160042][T11325] RIP: 0033:0x7fb8e230e019
[  458.160055][T11325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.160066][T11325] RSP: 002b:00007fb8e0545028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.160081][T11325] RAX: ffffffffffffffda RBX: 00007fb8e2596090 RCX: 00007fb8e230e019
[  458.160091][T11325] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  458.160099][T11325] RBP: 00007fb8e0545090 R08: 0000000000000000 R09: 0000000000000000
[  458.160106][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.160114][T11325] R13: 00007fb8e2596128 R14: 00007fb8e2596090 R15: 00007fff9363cab8
[  458.160133][T11325]  </TASK>
[  459.131303][ T5721] ath9k_htc: Failed to initialize the device
[  469.167363][ T5851] usb 5-1: USB disconnect, device number 13
[  469.212711][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  469.374175][ T5851] usb 5-1: ath9k_htc: USB layer deinitialized
[  470.836722][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  470.892034][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  470.949871][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  470.989058][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  470.989811][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  471.986927][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.076869][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.094950][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.108117][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.109294][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  472.946731][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  472.993850][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  473.014138][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  473.014138][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  473.033912][   T59] ==================================================================
[  473.033987][   T59] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[  473.034047][   T59] Read of size 8 at addr ffffc90004cc9008 by task kworker/u9:0/59
[  473.034059][   T59] 
[  473.034154][   T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  473.034221][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.034231][   T59] Workqueue: hci7 hci_rx_work
[  473.034292][   T59] Call Trace:
[  473.034300][   T59]  <TASK>
[  473.034307][   T59]  dump_stack_lvl+0xe8/0x150
[  473.034337][   T59]  print_address_description+0x55/0x1e0
[  473.034371][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.034385][   T59]  print_report+0x58/0x70
[  473.034402][   T59]  kasan_report+0x117/0x150
[  473.034418][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.034433][   T59]  __list_del_entry_valid_or_report+0xb5/0x190
[  473.034446][   T59]  kcov_remote_start+0x295/0x6f0
[  473.034501][   T59]  hci_rx_work+0x10f/0x1020
[  473.034518][   T59]  ? process_scheduled_works+0xa20/0x14e0
[  473.034548][   T59]  process_scheduled_works+0xa8e/0x14e0
[  473.034575][   T59]  ? __pfx_process_scheduled_works+0x10/0x10
[  473.034591][   T59]  ? assign_work+0x3cf/0x5d0
[  473.034606][   T59]  worker_thread+0xa47/0xfb0
[  473.034628][   T59]  kthread+0x388/0x470
[  473.034661][   T59]  ? __pfx_worker_thread+0x10/0x10
[  473.034675][   T59]  ? __pfx_kthread+0x10/0x10
[  473.034693][   T59]  ret_from_fork+0x514/0xb70
[  473.034728][   T59]  ? __pfx_ret_from_fork+0x10/0x10
[  473.034746][   T59]  ? __switch_to+0xc89/0x1420
[  473.034776][   T59]  ? __pfx_kthread+0x10/0x10
[  473.034793][   T59]  ret_from_fork_asm+0x1a/0x30
[  473.034829][   T59]  </TASK>
[  473.034834][   T59] 
[  473.034838][   T59] The buggy address belongs to a vmalloc virtual mapping
[  473.034870][   T59] Memory state around the buggy address:
[  473.034894][   T59]  ffffc90004cc8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  473.034903][   T59]  ffffc90004cc8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  473.034911][   T59] >ffffc90004cc9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  473.034918][   T59]                       ^
[  473.034940][   T59]  ffffc90004cc9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  473.034948][   T59]  ffffc90004cc9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  473.034954][   T59] ==================================================================
[  473.034979][   T59] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  473.034989][   T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  473.035004][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.035012][   T59] Workqueue: hci7 hci_rx_work
[  473.035027][   T59] Call Trace:
[  473.035031][   T59]  <TASK>
[  473.035036][   T59]  vpanic+0x56c/0xa60
[  473.035048][   T59]  ? rcu_is_watching+0x15/0xb0
[  473.035065][   T59]  ? __pfx_vpanic+0x10/0x10
[  473.035078][   T59]  panic+0xc5/0xd0
[  473.035089][   T59]  ? __pfx_panic+0x10/0x10
[  473.035100][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.035115][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.035127][   T59]  check_panic_on_warn+0x89/0xb0
[  473.035155][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.035167][   T59]  end_report+0x73/0x170
[  473.035180][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.035192][   T59]  kasan_report+0x128/0x150
[  473.035206][   T59]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  473.035220][   T59]  __list_del_entry_valid_or_report+0xb5/0x190
[  473.035234][   T59]  kcov_remote_start+0x295/0x6f0
[  473.035253][   T59]  hci_rx_work+0x10f/0x1020
[  473.035269][   T59]  ? process_scheduled_works+0xa20/0x14e0
[  473.035283][   T59]  process_scheduled_works+0xa8e/0x14e0
[  473.035303][   T59]  ? __pfx_process_scheduled_works+0x10/0x10
[  473.035322][   T59]  ? assign_work+0x3cf/0x5d0
[  473.035337][   T59]  worker_thread+0xa47/0xfb0
[  473.035363][   T59]  kthread+0x388/0x470
[  473.035380][   T59]  ? __pfx_worker_thread+0x10/0x10
[  473.035395][   T59]  ? __pfx_kthread+0x10/0x10
[  473.035412][   T59]  ret_from_fork+0x514/0xb70
[  473.035430][   T59]  ? __pfx_ret_from_fork+0x10/0x10
[  473.035449][   T59]  ? __switch_to+0xc89/0x1420
[  473.035464][   T59]  ? __pfx_kthread+0x10/0x10
[  473.035482][   T59]  ret_from_fork_asm+0x1a/0x30
[  473.035497][   T59]  </TASK>
[  473.035554][   T59] Kernel Offset: disabled