last executing test programs:

19m23.954349429s ago: executing program 1 (id=128):
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000080)={0x20000000200, 0x3, 0x3})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
getsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f00000003c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket(0x8, 0x800, 0xdf5)

19m18.015729368s ago: executing program 1 (id=138):
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000080)={0x20000000200, 0x3, 0x3})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
getsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f00000003c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket(0x8, 0x800, 0xdf5)

19m13.776143549s ago: executing program 1 (id=145):
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020)
syz_emit_ethernet(0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
r8 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0xab, &(0x7f00000001c0)=""/171)

19m10.702931719s ago: executing program 1 (id=151):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a0000000200", 0x6)
setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
syz_open_dev$MSR(0x0, 0x8, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x200)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@tcx}, 0x1c)
listns(&(0x7f0000000000)={0x20, 0x0, 0x3ff, 0x80, 0x0, 0x91}, &(0x7f0000000040)=[0x0], 0x1, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0)

19m7.20476723s ago: executing program 1 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x4000c2, 0xa3)
mmap$binder(&(0x7f00005a0000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='always', 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020)
write$selinux_load(r6, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "d060e525d29c3396e739a56f4ea87f7bd5f53c1c395ff11cd3965efcbeaf4815e43b86a5f1a486067c8b1398e4bc072146e265851950f8f76d80dbbda96ba4e3c3861f9ec7aa366703b938a713d14b7d8a715320fe2cfc73f4dfa069d8d7eb85752da5089edb862ac9ec8a66c165bf63faaaf66d180dcb002b19d135ce5a430e7e9b7ef6af98923a"}, 0x98)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
syz_genetlink_get_family_id$ethtool(0x0, r1)

19m4.48250083s ago: executing program 1 (id=161):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0)
socketpair(0x1, 0x5, 0x739b, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0xff)

18m48.435962941s ago: executing program 32 (id=161):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0)
socketpair(0x1, 0x5, 0x739b, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0xff)

16m57.770904063s ago: executing program 2 (id=352):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
fanotify_init(0x200, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9bd1020004940280080005af00e00000019a3f72016e6963766630000000020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000c00)="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", 0xff0}, {&(0x7f0000001c00)="3fd1ac50a1f7cf143aab021762734ba3953304c7b3c0a5bea24457b13c", 0x1d}, {&(0x7f0000001c40)="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", 0xff8}, {&(0x7f0000002c40)="03afd6db9974dc7a28c6e3ac7b45d074c5b0cc6ab6115554101b5cdee5552f3ae69da364dde46c580ea40f989db0afea700e34fa7a6e962910404a8911c72c7caf2971989d6912ef80903bd0d34b273343df68892bff7beb9705da09c89fd6aa", 0x60}, {&(0x7f0000002cc0)="b683e874462d865b40e42cdf7b1f36d8e4801432baffc4a2e041c698cf2a8b66d59569c0fd10cd7664ae967692071f9372c7d0545fb7218b683e299adbf27d9607fbb0c9a1a9c1f92533f9428e441e6bec5e4bed4fbc30f337b4efead83fe152d2b3ca5f01ec1d9e38688257e8556fb1c949b54d26b1b22525835a1d59e43c74af33406e3dcbce701cc33913bd9b9cf8a37ee70a435ca3d6605cf46f39a158f2c8ca8b30a0d73f2dfb20645c5af45f58e16d86", 0xb3}], 0x5}}], 0x1, 0x0)

16m55.339313548s ago: executing program 2 (id=359):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f"], 0x50)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16m54.993319959s ago: executing program 2 (id=360):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r1, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)

16m53.243000802s ago: executing program 2 (id=363):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e081338387d7c140000007fe292000800"/56], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9000000000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth1\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)

16m52.185554815s ago: executing program 2 (id=368):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x4000c2, 0xa3)
mmap$binder(&(0x7f00005a0000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='alway', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020)
write$selinux_load(r6, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "d060e525d29c3396e739a56f4ea87f7bd5f53c1c395ff11cd3965efcbeaf4815e43b86a5f1a486067c8b1398e4bc072146e265851950f8f76d80dbbda96ba4e3c3861f9ec7aa366703b938a713d14b7d8a715320fe2cfc73f4dfa069d8d7eb85752da5089edb862ac9ec8a66c165bf63faaaf66d180dcb002b19d135ce5a430e7e9b7ef6af98923a6784c131f7deb806ad304c8d87885699ce037645d345a5c465c45f16bfc641d8be506686024d2a287ea622ba72"}, 0xc5)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
syz_genetlink_get_family_id$ethtool(0x0, r1)

16m49.014273624s ago: executing program 2 (id=372):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340), 0x0, 0x7b, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000380), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)

16m33.827062621s ago: executing program 33 (id=372):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340), 0x0, 0x7b, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000380), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)

2m38.190158447s ago: executing program 5 (id=1798):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

2m37.774819796s ago: executing program 5 (id=1801):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100000", @ANYRES32=0x0, @ANYBLOB="f915e0"], 0x20}, 0x1, 0x0, 0x0, 0x24001010}, 0x4000000)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="610501"], 0x10e6)

2m36.909031159s ago: executing program 5 (id=1805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r1, 0x1, 0x2, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0)

2m36.791375744s ago: executing program 5 (id=1807):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

2m33.663488693s ago: executing program 5 (id=1813):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x5dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)

2m33.370044374s ago: executing program 0 (id=1815):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)

2m32.525932818s ago: executing program 0 (id=1818):
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080))
r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x8fd05b00fd43bce1)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206014b9800000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
socket$inet(0x2b, 0x4, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000340)={0x0, 0x1, 0x2f65, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xa00001, 0x5, '\x00', @p_u8=0x0}})

2m30.784814582s ago: executing program 0 (id=1825):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
clock_gettime(0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x1, 0x4, 0x101, 0xa, 0x7ff})
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074")

2m30.7171772s ago: executing program 0 (id=1826):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

2m30.577155545s ago: executing program 0 (id=1827):
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[])

2m30.425749394s ago: executing program 0 (id=1828):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='tcp 2', 0x5)

2m30.20148588s ago: executing program 5 (id=1829):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)

2m14.901245705s ago: executing program 34 (id=1828):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='tcp 2', 0x5)

2m14.63421749s ago: executing program 35 (id=1829):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)

30.20922436s ago: executing program 4 (id=2715):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
fcntl$setown(r0, 0x8, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x27, 0x0, &(0x7f0000000040)=""/39})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e993838202bb97263e20d133f29281464f37f2afb75a76a8e2f56368df24600c4220485506210c0554b0ee4a7f2f8dc0f4644cca3b91d5532d062", 0xfffffeea)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)

29.33793832s ago: executing program 4 (id=2717):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28)

28.133196354s ago: executing program 4 (id=2722):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

27.074675696s ago: executing program 4 (id=2728):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x20000', 0x24)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x20000000440011', 0x2d)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044', 0x5d)

26.396640517s ago: executing program 4 (id=2730):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe)

25.902677869s ago: executing program 4 (id=2733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28)

10.699721483s ago: executing program 36 (id=2733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28)

5.71790903s ago: executing program 6 (id=2794):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})

5.377936848s ago: executing program 6 (id=2796):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x951)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, 0x0)

5.353849578s ago: executing program 7 (id=2797):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.081492987s ago: executing program 6 (id=2800):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000010ef0ec47200000000000109022400010000c70009040005020300030009210000090122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.625207124s ago: executing program 7 (id=2806):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})

3.451950141s ago: executing program 7 (id=2808):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0))
close(r1)
pwritev(r2, &(0x7f0000004700)=[{&(0x7f0000000340)="f65a", 0x2}], 0x1, 0x1, 0x0)

3.4106287s ago: executing program 6 (id=2810):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x200, 0x0, 0x2cbfbf})

3.277605977s ago: executing program 6 (id=2811):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a)

2.922535787s ago: executing program 7 (id=2813):
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='rai', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1:0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)='active', 0x6)
readv(r1, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1)

2.92227202s ago: executing program 3 (id=2814):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2.869210773s ago: executing program 7 (id=2815):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103200000000709050203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

2.789443374s ago: executing program 6 (id=2816):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef0109021200"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x20, 0x23, 0x91, {0x91, 0xc, "ab1b3f5c2732c7d8e5dbd85cd297d873f8a6d0688729740f63136f76c5648aa105137acc9a0697543bd59f5ff0e291d5a8f3ca95c51881da7d19c7e29e785e91b9324c9a64cc24c6e0af785a43b90af7ec68343e01469f132f3100ad87c027bb127e7b8e5961069ee654249476551d2e7623f053cefd237a03f390cca532fc69e6ca6c3d1706269623b83c51285ff3"}}, 0x0}, 0x0)

2.620845113s ago: executing program 3 (id=2817):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.91010241s ago: executing program 8 (id=2819):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e)

1.602694974s ago: executing program 3 (id=2820):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4005, 0x10d, 0xd9, 0x10}, {0x0, 0x0, 0x5, 0x43, 0x1}, 0x201, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

1.35584977s ago: executing program 8 (id=2821):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

917.790532ms ago: executing program 8 (id=2822):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0))
close(r1)
pwritev(r2, &(0x7f0000004700)=[{&(0x7f0000000340)="f65a", 0x2}], 0x1, 0x1, 0x0)

752.168427ms ago: executing program 3 (id=2823):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0004060004000000000046ba006800652f6003ffffffff0a010100830bc4e0000001ac1414aa07024408310000000008442c30a1ff"], 0x76)

675.026921ms ago: executing program 7 (id=2824):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
writev(r0, &(0x7f0000002640)=[{&(0x7f00000024c0)="51862ff330cd0342b4d4d99d314b3fc800f3cae3eadaa060e4b9381ac6eb5be95edeee72290c", 0x26}], 0x1)

389.803039ms ago: executing program 8 (id=2825):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80)
write(r0, &(0x7f0000000180)='100000', 0x6)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

208.14447ms ago: executing program 8 (id=2826):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='rai', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1:0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)='active', 0x6)
readv(r1, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1)

194.717461ms ago: executing program 3 (id=2827):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000)

13.832476ms ago: executing program 8 (id=2828):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

0s ago: executing program 3 (id=2829):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 0 interfaces, different from the descriptor's value: 1
[ 1196.001790][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.047347][   T44] usb 9-1: config 0 descriptor??
[ 1196.082062][T15493] FAULT_INJECTION: forcing a failure.
[ 1196.082062][T15493] name failslab, interval 1, probability 0, space 0, times 0
[ 1196.082087][T15493] CPU: 1 UID: 0 PID: 15493 Comm: syz.7.2267 Not tainted syzkaller #0 PREEMPT(full) 
[ 1196.082111][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1196.082123][T15493] Call Trace:
[ 1196.082131][T15493]  <TASK>
[ 1196.082139][T15493]  dump_stack_lvl+0x100/0x190
[ 1196.082177][T15493]  should_fail_ex.cold+0x5/0xa
[ 1196.082206][T15493]  should_failslab+0xc2/0x120
[ 1196.082235][T15493]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1196.082258][T15493]  ? __pfx_map_id_range_down+0x10/0x10
[ 1196.082283][T15493]  ? rcu_is_watching+0x13/0xc0
[ 1196.082309][T15493]  ? security_inode_alloc+0x3b/0x2c0
[ 1196.082336][T15493]  security_inode_alloc+0x3b/0x2c0
[ 1196.082360][T15493]  inode_init_always_gfp+0xc6f/0xfb0
[ 1196.082391][T15493]  alloc_inode+0x8e/0x250
[ 1196.082412][T15493]  sock_alloc+0x44/0x280
[ 1196.082439][T15493]  ? security_socket_create+0x7f/0x250
[ 1196.082462][T15493]  sock_create_lite+0x82/0x120
[ 1196.082493][T15493]  __netlink_kernel_create+0xbd/0x750
[ 1196.082517][T15493]  ? __lock_acquire+0x5c0/0x1f40
[ 1196.082541][T15493]  ? __pfx___netlink_kernel_create+0x10/0x10
[ 1196.082572][T15493]  ? __pfx_diag_net_init+0x10/0x10
[ 1196.082597][T15493]  diag_net_init+0xbd/0x140
[ 1196.082625][T15493]  ? __pfx_diag_net_init+0x10/0x10
[ 1196.082649][T15493]  ? find_held_lock+0x2b/0x80
[ 1196.082677][T15493]  ? __pfx_sock_diag_rcv+0x10/0x10
[ 1196.082700][T15493]  ? __pfx_sock_diag_bind+0x10/0x10
[ 1196.082727][T15493]  ? __raw_spin_lock_init+0x3a/0x110
[ 1196.082753][T15493]  ? __pfx_cma_init_net+0x10/0x10
[ 1196.082782][T15493]  ops_init+0x1e2/0x5f0
[ 1196.082813][T15493]  setup_net+0x118/0x3a0
[ 1196.082841][T15493]  ? __pfx_setup_net+0x10/0x10
[ 1196.082877][T15493]  copy_net_ns+0x345/0x7a0
[ 1196.082898][T15493]  create_new_namespaces+0x3ea/0xac0
[ 1196.082928][T15493]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1196.082953][T15493]  ksys_unshare+0x4a2/0xa70
[ 1196.082977][T15493]  ? __pfx_ksys_unshare+0x10/0x10
[ 1196.083009][T15493]  __x64_sys_unshare+0x31/0x40
[ 1196.083032][T15493]  do_syscall_64+0x123/0x790
[ 1196.083057][T15493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.083077][T15493] RIP: 0033:0x7f656539e199
[ 1196.083094][T15493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1196.083112][T15493] RSP: 002b:00007f6566191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1196.083132][T15493] RAX: ffffffffffffffda RBX: 00007f6565625fa0 RCX: 00007f656539e199
[ 1196.083145][T15493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044040000
[ 1196.083157][T15493] RBP: 00007f65654350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1196.083169][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.083186][T15493] R13: 00007f6565626038 R14: 00007f6565625fa0 R15: 00007fff1c1d42f8
[ 1196.083212][T15493]  </TASK>
[ 1196.588368][   T30] audit: type=1400 audit(1791230037.489:441): avc:  denied  { create } for  pid=15503 comm="syz.3.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1196.591359][   T30] audit: type=1400 audit(1791230037.489:442): avc:  denied  { ioctl } for  pid=15503 comm="syz.3.2269" path="socket:[47701]" dev="sockfs" ino=47701 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1197.444477][T13526] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1197.595970][T13526] usb 5-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00
[ 1197.596929][T13526] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1197.596953][T13526] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1197.596977][T13526] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1197.597072][T13526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.600726][T13526] usb 5-1: config 0 descriptor??
[ 1197.794440][    C1] net_ratelimit: 162 callbacks suppressed
[ 1197.918165][T15529] binder: BINDER_SET_CONTEXT_MGR already set
[ 1197.918192][T15529] binder: 15528:15529 ioctl 4018620d 2000000002c0 returned -16
[ 1198.044212][T13526] usbhid 5-1:0.0: can't add hid device: -71
[ 1198.044326][T13526] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1198.065921][T13526] usb 5-1: USB disconnect, device number 20
[ 1198.426491][T15537] ubi0: attaching mtd0
[ 1198.439587][T15537] ubi0: scanning is finished
[ 1198.803942][T13526] usb 9-1: USB disconnect, device number 8
[ 1198.902329][T15537] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1198.902347][T15537] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1198.902363][T15537] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1198.902379][T15537] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1198.902394][T15537] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1198.902408][T15537] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1198.902421][T15537] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3892658551
[ 1198.902439][T15537] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1198.903098][T15540] ubi0: background thread "ubi_bgt0d" started, PID 15540
[ 1199.461057][   T30] audit: type=1400 audit(1791230040.359:443): avc:  denied  { append } for  pid=15558 comm="syz.6.2293" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1199.696656][   T30] audit: type=1400 audit(1791230040.599:444): avc:  denied  { name_bind } for  pid=15567 comm="syz.7.2296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1199.761681][   T30] audit: type=1400 audit(1791230040.659:445): avc:  denied  { append } for  pid=15571 comm="syz.3.2298" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1199.836578][T15570] FAULT_INJECTION: forcing a failure.
[ 1199.836578][T15570] name failslab, interval 1, probability 0, space 0, times 0
[ 1199.836607][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.6.2297 Not tainted syzkaller #0 PREEMPT(full) 
[ 1199.836631][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1199.836644][T15570] Call Trace:
[ 1199.836652][T15570]  <TASK>
[ 1199.836660][T15570]  dump_stack_lvl+0x100/0x190
[ 1199.836696][T15570]  should_fail_ex.cold+0x5/0xa
[ 1199.836726][T15570]  should_failslab+0xc2/0x120
[ 1199.836753][T15570]  __kmalloc_noprof+0xfc/0x840
[ 1199.836775][T15570]  ? sk_prot_alloc+0x10b/0x2a0
[ 1199.836800][T15570]  sk_prot_alloc+0x10b/0x2a0
[ 1199.836821][T15570]  sk_alloc+0x36/0xe80
[ 1199.836848][T15570]  xsk_create+0x117/0x760
[ 1199.836876][T15570]  __sock_create+0x339/0x860
[ 1199.836904][T15570]  __sys_socket+0x14d/0x260
[ 1199.836928][T15570]  ? __pfx___sys_socket+0x10/0x10
[ 1199.836958][T15570]  __x64_sys_socket+0x72/0xb0
[ 1199.836980][T15570]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1199.837002][T15570]  do_syscall_64+0x123/0x790
[ 1199.837027][T15570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1199.837048][T15570] RIP: 0033:0x7f526499e199
[ 1199.837065][T15570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.837085][T15570] RSP: 002b:00007f5265874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1199.837109][T15570] RAX: ffffffffffffffda RBX: 00007f5264c25fa0 RCX: 00007f526499e199
[ 1199.837123][T15570] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[ 1199.837136][T15570] RBP: 00007f5264a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1199.837148][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1199.837161][T15570] R13: 00007f5264c26038 R14: 00007f5264c25fa0 R15: 00007fff5c890c98
[ 1199.837185][T15570]  </TASK>
[ 1200.310421][T15589] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1201.323381][   T30] audit: type=1400 audit(1791230042.219:446): avc:  denied  { map } for  pid=15603 comm="syz.7.2312" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1201.444434][ T5715] gspca_vc032x: Unknown sensor...
[ 1201.444503][ T5715] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[ 1201.450928][ T5715] usb 7-1: USB disconnect, device number 11
[ 1201.569396][T15617] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1201.740612][   T30] audit: type=1400 audit(1791230042.639:447): avc:  denied  { read write } for  pid=15603 comm="syz.7.2312" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1201.740663][   T30] audit: type=1400 audit(1791230042.639:448): avc:  denied  { open } for  pid=15603 comm="syz.7.2312" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1201.741499][   T30] audit: type=1400 audit(1791230042.639:449): avc:  denied  { ioctl } for  pid=15603 comm="syz.7.2312" path="/dev/video0" dev="devtmpfs" ino=929 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1202.005090][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1202.161046][   T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00
[ 1202.163586][   T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1202.163613][   T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1202.163805][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1202.163852][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.217439][   T10] usb 5-1: config 0 descriptor??
[ 1202.396134][T15637] FAULT_INJECTION: forcing a failure.
[ 1202.396134][T15637] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1202.396163][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.8.2323 Not tainted syzkaller #0 PREEMPT(full) 
[ 1202.396187][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1202.396199][T15637] Call Trace:
[ 1202.396206][T15637]  <TASK>
[ 1202.396214][T15637]  dump_stack_lvl+0x100/0x190
[ 1202.396247][T15637]  should_fail_ex.cold+0x5/0xa
[ 1202.396274][T15637]  get_futex_key+0x1d0/0x14f0
[ 1202.396304][T15637]  ? __pfx_get_futex_key+0x10/0x10
[ 1202.396339][T15637]  futex_wake+0xf4/0x5e0
[ 1202.396362][T15637]  ? __pfx_futex_wake+0x10/0x10
[ 1202.396383][T15637]  ? percpu_counter_add_batch+0xb9/0x230
[ 1202.396409][T15637]  ? errseq_sample+0x51/0x70
[ 1202.396433][T15637]  ? file_init_path+0x48e/0x670
[ 1202.396464][T15637]  do_futex+0x2b2/0x440
[ 1202.396493][T15637]  ? __pfx_do_futex+0x10/0x10
[ 1202.396519][T15637]  ? fd_install+0x223/0x580
[ 1202.396556][T15637]  __x64_sys_futex+0x34f/0x4d0
[ 1202.396584][T15637]  ? __sys_socket+0xac/0x260
[ 1202.396609][T15637]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1202.396645][T15637]  do_syscall_64+0x123/0x790
[ 1202.396670][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1202.396690][T15637] RIP: 0033:0x7f9dacf9e199
[ 1202.396706][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.396725][T15637] RSP: 002b:00007f9dadf2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1202.396745][T15637] RAX: ffffffffffffffda RBX: 00007f9dad225fa8 RCX: 00007f9dacf9e199
[ 1202.396758][T15637] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dad225fac
[ 1202.396770][T15637] RBP: 00007f9dad225fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1202.396782][T15637] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 1202.396794][T15637] R13: 00007f9dad226038 R14: 00007ffd806d6bd0 R15: 00007ffd806d6cb8
[ 1202.396820][T15637]  </TASK>
[ 1202.711295][   T30] audit: type=1400 audit(1791230043.609:450): avc:  denied  { create } for  pid=15642 comm="syz.7.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1202.711998][   T30] audit: type=1400 audit(1791230043.609:451): avc:  denied  { map } for  pid=15642 comm="syz.7.2327" path="socket:[49239]" dev="sockfs" ino=49239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1202.712222][   T30] audit: type=1400 audit(1791230043.609:452): avc:  denied  { read } for  pid=15642 comm="syz.7.2327" path="socket:[49239]" dev="sockfs" ino=49239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1202.814166][   T10] hid_parser_main: 465 callbacks suppressed
[ 1202.814187][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814211][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814233][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814253][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814275][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814296][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.814317][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.827404][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.827444][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.827464][   T10] asus 0003:0B05:1869.0007: unknown main item tag 0x0
[ 1202.827505][   T10] asus 0003:0B05:1869.0007: unbalanced collection at end of report description
[ 1202.827993][   T10] asus 0003:0B05:1869.0007: Asus hid parse failed: -22
[ 1202.828209][   T10] asus 0003:0B05:1869.0007: probe with driver asus failed with error -22
[ 1202.835735][    C1] net_ratelimit: 121 callbacks suppressed
[ 1202.946131][   T30] audit: type=1400 audit(1791230043.849:453): avc:  denied  { write } for  pid=15646 comm="syz.6.2326" name="subsystems" dev="configfs" ino=44952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1202.946428][   T30] audit: type=1400 audit(1791230043.849:454): avc:  denied  { write } for  pid=15646 comm="syz.6.2326" name="subsystems" dev="configfs" ino=44952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1202.983274][   T10] usb 5-1: USB disconnect, device number 21
[ 1203.677551][T15676] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 1204.441178][T15698] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1204.464914][T15698] bond1 (unregistering): Released all slaves
[ 1204.926470][T15712] i2c i2c-0: delete_device: Can't find device in list
[ 1205.089060][T15703] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04
[ 1205.191084][T15722] binder_alloc: 15718: binder_alloc_buf, no vma
[ 1205.800915][   T30] audit: type=1400 audit(1791230046.699:455): avc:  denied  { ioctl } for  pid=15740 comm="syz.8.2365" path="/dev/sg0" dev="devtmpfs" ino=814 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1205.924112][   T30] audit: type=1400 audit(1791230046.819:456): avc:  denied  { transfer } for  pid=15747 comm="syz.7.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1205.924322][T15749] binder: 15747:15749 unknown command 0
[ 1205.924338][T15749] binder: 15747:15749 ioctl c0306201 2000000001c0 returned -22
[ 1206.124233][T15751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15751 comm=syz.6.2370
[ 1206.497707][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2373'.
[ 1207.000763][T15795] FAULT_INJECTION: forcing a failure.
[ 1207.000763][T15795] name failslab, interval 1, probability 0, space 0, times 0
[ 1207.000798][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.6.2385 Not tainted syzkaller #0 PREEMPT(full) 
[ 1207.000823][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1207.000836][T15795] Call Trace:
[ 1207.000844][T15795]  <TASK>
[ 1207.000853][T15795]  dump_stack_lvl+0x100/0x190
[ 1207.000889][T15795]  should_fail_ex.cold+0x5/0xa
[ 1207.000917][T15795]  should_failslab+0xc2/0x120
[ 1207.000946][T15795]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1207.000968][T15795]  ? fuse_get_tree+0x88/0x490
[ 1207.001004][T15795]  fuse_get_tree+0x88/0x490
[ 1207.001031][T15795]  vfs_get_tree+0x92/0x320
[ 1207.001050][T15795]  path_mount+0x7d0/0x24c0
[ 1207.001074][T15795]  ? __pfx_path_mount+0x10/0x10
[ 1207.001093][T15795]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1207.001117][T15795]  ? putname+0xb1/0x110
[ 1207.001143][T15795]  ? kmem_cache_free+0x127/0x6c0
[ 1207.001173][T15795]  ? __x64_sys_mount+0x293/0x310
[ 1207.001192][T15795]  __x64_sys_mount+0x293/0x310
[ 1207.001213][T15795]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1207.001241][T15795]  do_syscall_64+0x123/0x790
[ 1207.001266][T15795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.001287][T15795] RIP: 0033:0x7f526499e199
[ 1207.001305][T15795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1207.001325][T15795] RSP: 002b:00007f5265874028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1207.001346][T15795] RAX: ffffffffffffffda RBX: 00007f5264c25fa0 RCX: 00007f526499e199
[ 1207.001360][T15795] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000
[ 1207.001373][T15795] RBP: 00007f5264a350b8 R08: 00002000000002c0 R09: 0000000000000000
[ 1207.001386][T15795] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[ 1207.001398][T15795] R13: 00007f5264c26038 R14: 00007f5264c25fa0 R15: 00007fff5c890c98
[ 1207.001425][T15795]  </TASK>
[ 1207.480752][   T30] audit: type=1400 audit(1791230048.379:457): avc:  denied  { bind } for  pid=15804 comm="syz.7.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1207.484032][T15805] Bluetooth: MGMT ver 1.23
[ 1207.487510][   T30] audit: type=1400 audit(1791230048.379:458): avc:  denied  { write } for  pid=15804 comm="syz.7.2390" path="socket:[49712]" dev="sockfs" ino=49712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1207.904315][T15822] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1208.034460][    C1] net_ratelimit: 117 callbacks suppressed
[ 1208.225014][   T30] audit: type=1400 audit(1791230049.129:459): avc:  denied  { connect } for  pid=15826 comm="syz.3.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1208.944510][T13526] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1209.074782][T13526] usb 8-1: device descriptor read/64, error -71
[ 1209.345561][T13526] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1209.474547][T13526] usb 8-1: device descriptor read/64, error -71
[ 1209.555216][ T4920] Bluetooth: hci0: command 0x0406 tx timeout
[ 1209.555380][T14603] Bluetooth: hci0: Opcode 0x0401 failed: -110
[ 1209.584919][T13526] usb usb8-port1: attempt power cycle
[ 1209.846287][   T30] audit: type=1400 audit(1791230050.749:460): avc:  denied  { relabelfrom } for  pid=15856 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1209.848914][   T30] audit: type=1400 audit(1791230050.749:461): avc:  denied  { relabelto } for  pid=15856 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1209.926031][T13526] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1209.946806][T13526] usb 8-1: device descriptor read/8, error -71
[ 1210.072148][T15877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1210.185650][T13526] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1210.206298][T13526] usb 8-1: device descriptor read/8, error -71
[ 1210.312100][T14603] Bluetooth: hci1: unexpected event for opcode 0x1003
[ 1210.315492][T13526] usb usb8-port1: unable to enumerate USB device
[ 1211.374859][ T8426] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1211.526045][ T8426] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1211.527141][ T8426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.527159][ T8426] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1211.540653][ T8426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.540670][ T8426] usb 5-1: Product: syz
[ 1211.540683][ T8426] usb 5-1: Manufacturer: syz
[ 1211.540696][ T8426] usb 5-1: SerialNumber: syz
[ 1211.543623][ T8426] usb 5-1: config 0 descriptor??
[ 1211.759971][ T8426] usb 5-1: USB disconnect, device number 22
[ 1213.120394][T15913] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1213.234574][    C1] net_ratelimit: 135 callbacks suppressed
[ 1214.892992][T15917] infiniband syz1: set active
[ 1214.893009][T15917] infiniband syz1: added bond_slave_1
[ 1214.908301][T15917] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1214.914905][T15917] infiniband syz1: Couldn't open port 1
[ 1214.916778][T15917] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1214.916814][T15917] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1214.916851][T15917] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1214.998439][T15917] RDS/IB: syz1: added
[ 1214.998486][T15917] smc: adding ib device syz1 with port count 1
[ 1214.998504][T15917] smc:    ib device syz1 port 1 has no pnetid
[ 1216.746484][T15980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1216.796860][T15980] md: could not open device unknown-block(1,0).
[ 1216.889444][T15980] md: personality for level rai is not loaded!
[ 1217.230084][T15994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1217.324726][T15994] md: could not open device unknown-block(1,0).
[ 1217.439253][T15994] md: personality for level rai is not loaded!
[ 1217.724528][   T44] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1217.875143][   T44] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1217.876155][   T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.876173][   T44] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1217.878231][   T44] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1217.878250][   T44] usb 7-1: Product: syz
[ 1217.878265][   T44] usb 7-1: Manufacturer: syz
[ 1217.878280][   T44] usb 7-1: SerialNumber: syz
[ 1217.882570][   T44] usb 7-1: config 0 descriptor??
[ 1218.186138][T14780] usb 7-1: USB disconnect, device number 12
[ 1218.261134][   T30] audit: type=1400 audit(1791230059.159:462): avc:  denied  { mount } for  pid=16019 comm="syz.7.2467" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1218.300832][   T30] audit: type=1400 audit(1791230059.199:463): avc:  denied  { unmount } for  pid=14605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1218.354292][T16024] FAULT_INJECTION: forcing a failure.
[ 1218.354292][T16024] name failslab, interval 1, probability 0, space 0, times 0
[ 1218.354324][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.7.2468 Not tainted syzkaller #0 PREEMPT(full) 
[ 1218.354350][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1218.354362][T16024] Call Trace:
[ 1218.354370][T16024]  <TASK>
[ 1218.354378][T16024]  dump_stack_lvl+0x100/0x190
[ 1218.354412][T16024]  should_fail_ex.cold+0x5/0xa
[ 1218.354440][T16024]  should_failslab+0xc2/0x120
[ 1218.354468][T16024]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1218.354490][T16024]  ? raw_ioctl_init+0x164/0x850
[ 1218.354518][T16024]  raw_ioctl_init+0x164/0x850
[ 1218.354541][T16024]  ? __pfx_raw_ioctl_init+0x10/0x10
[ 1218.354563][T16024]  ? tomoyo_path_number_perm+0x188/0x580
[ 1218.354600][T16024]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1218.354621][T16024]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1218.354649][T16024]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1218.354681][T16024]  raw_ioctl+0x138a/0x2b80
[ 1218.354709][T16024]  ? __pfx_raw_ioctl+0x10/0x10
[ 1218.354730][T16024]  ? selinux_file_ioctl+0x13b/0x290
[ 1218.354752][T16024]  ? selinux_file_ioctl+0xb6/0x290
[ 1218.354778][T16024]  ? __pfx_raw_ioctl+0x10/0x10
[ 1218.354801][T16024]  __x64_sys_ioctl+0x18e/0x210
[ 1218.354824][T16024]  do_syscall_64+0x123/0x790
[ 1218.354847][T16024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.354868][T16024] RIP: 0033:0x7f656539de2b
[ 1218.354884][T16024] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1218.354902][T16024] RSP: 002b:00007f656618ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1218.354922][T16024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f656539de2b
[ 1218.354935][T16024] RDX: 00007f656618ffd0 RSI: 0000000041015500 RDI: 0000000000000004
[ 1218.354953][T16024] RBP: 00007f656618ffd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 1218.354966][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f656618efa0
[ 1218.354978][T16024] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000
[ 1218.355003][T16024]  </TASK>
[ 1218.435638][    C1] net_ratelimit: 132 callbacks suppressed
[ 1218.965050][ T8426] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1219.382412][ T8426] usb 5-1: Using ep0 maxpacket: 32
[ 1219.387331][ T8426] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1219.388866][ T8426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.393521][ T8426] usb 5-1: config 0 descriptor??
[ 1219.407570][ T8426] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1219.936792][T16057] syzkaller0: entered promiscuous mode
[ 1219.936836][T16057] syzkaller0: entered allmulticast mode
[ 1220.497043][T13526] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1220.512550][   T25] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[ 1220.644515][   T25] usb 7-1: device descriptor read/64, error -71
[ 1220.651650][T13526] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1220.662816][T13526] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1220.662854][T13526] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1220.687057][T13526] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1220.687076][T13526] usb 9-1: Product: syz
[ 1220.687091][T13526] usb 9-1: Manufacturer: syz
[ 1220.687124][T13526] usb 9-1: SerialNumber: syz
[ 1220.690181][T13526] usb 9-1: config 0 descriptor??
[ 1220.787605][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'.
[ 1220.787656][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2488'.
[ 1220.900719][   T25] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[ 1221.029987][   T25] usb 7-1: device descriptor read/64, error -71
[ 1221.137961][   T25] usb usb7-port1: attempt power cycle
[ 1221.271611][ T8426] gspca_vc032x: reg_r err -32
[ 1221.271623][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271657][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271667][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271675][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271683][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271691][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271700][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271708][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271716][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271724][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271733][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271741][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271750][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271759][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271767][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271776][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271785][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271793][ T8426] gspca_vc032x: I2c Bus Busy Wait 00
[ 1221.271802][ T8426] gspca_vc032x: Unknown sensor...
[ 1221.271857][ T8426] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[ 1221.481067][   T25] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1221.503381][   T25] usb 7-1: device descriptor read/8, error -71
[ 1221.740327][   T25] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1221.757390][   T25] usb 7-1: device descriptor read/8, error -71
[ 1221.868860][   T25] usb usb7-port1: unable to enumerate USB device
[ 1222.320273][   T25] usb 5-1: USB disconnect, device number 23
[ 1223.557243][ T7971] net_ratelimit: 347 callbacks suppressed
[ 1223.645144][   T30] audit: type=1400 audit(1791230064.549:464): avc:  denied  { mounton } for  pid=16094 comm="syz.4.2497" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1223.712929][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1223.713113][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 1223.766912][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1223.767023][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 1223.776568][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1223.776650][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 1223.777059][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1223.777125][T16095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 1223.777139][T16095] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[ 1223.789699][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'.
[ 1223.789726][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2488'.
[ 1223.882397][ T4273] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1223.884866][ T4273] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1223.909283][ T7971] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1223.913556][ T8426] usb 9-1: USB disconnect, device number 9
[ 1223.919734][   T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1224.081239][T16103] tipc: Started in network mode
[ 1224.081261][T16103] tipc: Node identity ac1414aa, cluster identity 4711
[ 1224.081474][T16103] tipc: New replicast peer: 172.20.20.187
[ 1224.082455][T16103] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1224.744417][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2509'.
[ 1225.003339][T16136] FAULT_INJECTION: forcing a failure.
[ 1225.003339][T16136] name failslab, interval 1, probability 0, space 0, times 0
[ 1225.003369][T16136] CPU: 1 UID: 0 PID: 16136 Comm: syz.4.2512 Not tainted syzkaller #0 PREEMPT(full) 
[ 1225.003392][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1225.003404][T16136] Call Trace:
[ 1225.003412][T16136]  <TASK>
[ 1225.003420][T16136]  dump_stack_lvl+0x100/0x190
[ 1225.003453][T16136]  should_fail_ex.cold+0x5/0xa
[ 1225.003479][T16136]  should_failslab+0xc2/0x120
[ 1225.003506][T16136]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1225.003526][T16136]  ? io_wq_create+0x6a/0x9a0
** 29 printk messages dropped **
** 274 printk messages dropped **
[ 1225.260413][   T25] tipc: Node number set to 2886997162
[ 1225.315609][T16139] rdma_rxe: rxe_newlink: failed to add lo
** 258 printk messages dropped **
** 888 printk messages dropped **
** 819 printk messages dropped **
** 2327 printk messages dropped **
** 491 printk messages dropped **
** 940 printk messages dropped **
** 257 printk messages dropped **
** 252 printk messages dropped **
** 494 printk messages dropped **
** 88 printk messages dropped **
** 1468 printk messages dropped **
** 302 printk messages dropped **
** 255 printk messages dropped **
** 279 printk messages dropped **
** 256 printk messages dropped **
** 254 printk messages dropped **
** 258 printk messages dropped **
** 271 printk messages dropped **
** 247 printk messages dropped **
** 176 printk messages dropped **
[ 1227.448120][T16167] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1227.580544][T16161] kAFS: unable to lookup cell 'Þ({^ú@'
[ 1228.011672][   T30] audit: type=1400 audit(1791230068.909:465): avc:  denied  { read write } for  pid=16172 comm="syz.7.2526" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1228.012426][   T30] audit: type=1400 audit(1791230068.909:466): avc:  denied  { open } for  pid=16172 comm="syz.7.2526" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1228.107219][T16177] FAULT_INJECTION: forcing a failure.
[ 1228.107219][T16177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.107249][T16177] CPU: 1 UID: 0 PID: 16177 Comm: syz.8.2527 Not tainted syzkaller #0 PREEMPT(full) 
[ 1228.107273][T16177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1228.107286][T16177] Call Trace:
[ 1228.107293][T16177]  <TASK>
[ 1228.107302][T16177]  dump_stack_lvl+0x100/0x190
[ 1228.107336][T16177]  should_fail_ex.cold+0x5/0xa
[ 1228.107363][T16177]  _copy_to_user+0x32/0xd0
[ 1228.107389][T16177]  io_uring_setup.cold+0x14b9/0x1cde
[ 1228.107413][T16177]  ? __pfx_io_uring_setup+0x10/0x10
[ 1228.107438][T16177]  ? find_held_lock+0x2b/0x80
[ 1228.107484][T16177]  ? xfd_validate_state+0x129/0x190
[ 1228.107513][T16177]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1228.107541][T16177]  do_syscall_64+0x123/0x790
[ 1228.107567][T16177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1228.107588][T16177] RIP: 0033:0x7f9dacf9e199
[ 1228.107605][T16177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.107622][T16177] RSP: 002b:00007f9dadf2efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1228.107642][T16177] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f9dacf9e199
[ 1228.107655][T16177] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020
[ 1228.107669][T16177] RBP: 00007f9dad0350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1228.107680][T16177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000200000000000
[ 1228.107693][T16177] R13: 0000000000000000 R14: 00002000000000c0 R15: 00007ffd806d6cb8
[ 1228.107719][T16177]  </TASK>
[ 1228.141567][T16175] 0x000000000000-0x000000010000 : ""
[ 1228.167925][   T30] audit: type=1400 audit(1791230069.039:467): avc:  denied  { ioctl } for  pid=16172 comm="syz.7.2526" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1228.461703][T16175] ftl_cs: FTL header not found.
[ 1228.552241][T16175] FAULT_INJECTION: forcing a failure.
[ 1228.552241][T16175] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.552265][T16175] CPU: 1 UID: 0 PID: 16175 Comm: syz.7.2526 Not tainted syzkaller #0 PREEMPT(full) 
[ 1228.552291][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1228.552304][T16175] Call Trace:
[ 1228.552312][T16175]  <TASK>
[ 1228.552320][T16175]  dump_stack_lvl+0x100/0x190
[ 1228.552353][T16175]  should_fail_ex.cold+0x5/0xa
[ 1228.552381][T16175]  should_failslab+0xc2/0x120
[ 1228.552409][T16175]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1228.552434][T16175]  ? __kernfs_new_node+0xd2/0xa10
[ 1228.552459][T16175]  __kernfs_new_node+0xd2/0xa10
[ 1228.552479][T16175]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1228.552499][T16175]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1228.552520][T16175]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1228.552543][T16175]  ? lock_acquire+0x1d1/0x380
[ 1228.552565][T16175]  ? kernfs_root+0x23/0x2a0
[ 1228.552593][T16175]  ? find_held_lock+0x2b/0x80
[ 1228.552622][T16175]  ? kernfs_root+0xee/0x2a0
[ 1228.552651][T16175]  ? kernfs_root+0xee/0x2a0
[ 1228.552685][T16175]  kernfs_create_dir_ns+0xa6/0x2b0
[ 1228.552710][T16175]  sysfs_create_dir_ns+0x13a/0x2b0
[ 1228.552738][T16175]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1228.552768][T16175]  ? rcu_is_watching+0x13/0xc0
[ 1228.552799][T16175]  kobject_add_internal+0x2c8/0x930
[ 1228.552835][T16175]  kobject_add+0x16a/0x1e0
[ 1228.552861][T16175]  ? __pfx_kobject_add+0x10/0x10
[ 1228.552889][T16175]  ? __kasan_kmalloc+0xaa/0xb0
[ 1228.552914][T16175]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
** 25 printk messages dropped **
[ 1228.553613][T16175]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1228.553634][T16175]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1228.553655][T16175]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1228.553684][T16175]  ? __pfx___mutex_lock+0x10/0x10
[ 1228.553707][T16175]  ? __fget_files+0x34/0x3d0
[ 1228.553749][T16175]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1228.553771][T16175]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1228.553796][T16175]  __x64_sys_ioctl+0x18e/0x210
[ 1228.553825][T16175]  do_syscall_64+0x123/0x790
[ 1228.553849][T16175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1228.553870][T16175] RIP: 0033:0x7f656539e199
[ 1228.553887][T16175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
** 15 printk messages dropped **
[ 1228.594551][   T13] net_ratelimit: 126 callbacks suppressed
** 5 printk messages dropped **
** 2 printk messages dropped **
[ 1229.278609][T16202] syzkaller0: entered promiscuous mode
[ 1229.278625][T16202] syzkaller0: entered allmulticast mode
[ 1229.595636][T16212] FAULT_INJECTION: forcing a failure.
[ 1229.595636][T16212] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.595662][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.7.2541 Not tainted syzkaller #0 PREEMPT(full) 
[ 1229.595685][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1229.595698][T16212] Call Trace:
[ 1229.595705][T16212]  <TASK>
[ 1229.595713][T16212]  dump_stack_lvl+0x100/0x190
[ 1229.595743][T16212]  should_fail_ex.cold+0x5/0xa
[ 1229.595769][T16212]  should_failslab+0xc2/0x120
[ 1229.595796][T16212]  __kmalloc_node_noprof+0xff/0x880
[ 1229.595819][T16212]  ? __get_vm_area_node+0x1ff/0x350
[ 1229.595844][T16212]  ? __get_vm_area_node+0x22b/0x350
[ 1229.595867][T16212]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[ 1229.595900][T16212]  __vmalloc_node_range_noprof+0x3d4/0x1420
[ 1229.595930][T16212]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[ 1229.595959][T16212]  ? create_io_thread+0xc2/0x110
[ 1229.595984][T16212]  ? __memcg_slab_post_alloc_hook+0x71e/0x10c0
[ 1229.596003][T16212]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1229.596031][T16212]  ? rcu_is_watching+0x13/0xc0
[ 1229.596059][T16212]  ? trace_kmem_cache_alloc+0xdd/0x100
[ 1229.596090][T16212]  ? create_io_thread+0xc2/0x110
[ 1229.596112][T16212]  __vmalloc_node_noprof+0xad/0xf0
** 214 printk messages dropped **
** 242 printk messages dropped **
** 269 printk messages dropped **
** 321 printk messages dropped **
** 10 printk messages dropped **
** 6611 printk messages dropped **
** 82 printk messages dropped **
** 817 printk messages dropped **
** 6565 printk messages dropped **
[ 1230.399167][T16227] tipc: Started in network mode
[ 1230.399195][T16227] tipc: Node identity ac1414aa, cluster identity 4711
[ 1230.399426][T16227] tipc: New replicast peer: 172.20.20.187
[ 1230.401762][T16227] tipc: Enabled bearer <udp:syz0>, priority 10
** 2517 printk messages dropped **
** 2508 printk messages dropped **
** 2537 printk messages dropped **
** 3718 printk messages dropped **
** 318 printk messages dropped **
** 306 printk messages dropped **
** 304 printk messages dropped **
** 304 printk messages dropped **
** 303 printk messages dropped **
** 300 printk messages dropped **
** 298 printk messages dropped **
** 300 printk messages dropped **
** 306 printk messages dropped **
** 297 printk messages dropped **
** 303 printk messages dropped **
** 303 printk messages dropped **
** 320 printk messages dropped **
** 326 printk messages dropped **
** 310 printk messages dropped **
** 294 printk messages dropped **
** 302 printk messages dropped **
** 305 printk messages dropped **
** 296 printk messages dropped **
** 300 printk messages dropped **
** 193 printk messages dropped **
** 6 printk messages dropped **
** 5 printk messages dropped **
[ 1231.516010][   T25] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1231.516158][   T44] tipc: Node number set to 2886997162
[ 1231.776886][   T25] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1231.778319][   T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.778340][   T25] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1231.780864][   T25] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1231.780884][   T25] usb 9-1: Product: syz
[ 1231.780898][   T25] usb 9-1: Manufacturer: syz
[ 1231.780913][   T25] usb 9-1: SerialNumber: syz
[ 1231.783621][   T25] usb 9-1: config 0 descriptor??
[ 1231.816413][   T30] audit: type=1400 audit(1791230072.719:468): avc:  denied  { name_connect } for  pid=16245 comm="syz.6.2554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1231.976706][   T30] audit: type=1400 audit(1791230072.879:469): avc:  denied  { getopt } for  pid=16245 comm="syz.6.2554" laddr=::ffff:172.20.20.170 lport=41619 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1232.006504][   T30] audit: type=1400 audit(1791230072.909:470): avc:  denied  { read } for  pid=5266 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1232.131933][T16251] syzkaller0: entered promiscuous mode
[ 1232.132085][T16251] syzkaller0: entered allmulticast mode
[ 1232.330658][   T25] usb 9-1: USB disconnect, device number 10
[ 1232.863130][   T30] audit: type=1400 audit(1791230073.759:471): avc:  denied  { create } for  pid=16257 comm="syz.3.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1233.170399][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
** 1856 printk messages dropped **
** 375 printk messages dropped **
** 292 printk messages dropped **
** 30 printk messages dropped **
[ 1233.432178][   T44] usb 7-1: new high-speed USB device number 17 using dummy_hcd
** 2551 printk messages dropped **
** 1 printk messages dropped **
[ 1233.606078][ T6661] net_ratelimit: 132 callbacks suppressed
** 2542 printk messages dropped **
[ 1233.766711][   T44] usb 7-1: Using ep0 maxpacket: 32
[ 1233.786236][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1233.786276][   T44] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1233.807185][   T44] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[ 1233.807209][   T44] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[ 1233.807229][   T44] usb 7-1: config 14 has no interface number 0
[ 1233.807246][   T44] usb 7-1: config 14 has no interface number 1
[ 1233.807304][   T44] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1233.807325][   T44] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1233.807347][   T44] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1233.807369][   T44] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1233.807392][   T44] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1233.807414][   T44] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1233.807435][   T44] usb 7-1: config 14 interface 57 has no altsetting 0
[ 1233.807450][   T44] usb 7-1: config 14 interface 228 has no altsetting 0
[ 1233.884401][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1233.884421][   T44] usb 7-1: Product: syz
[ 1233.884436][   T44] usb 7-1: Manufacturer: syz
[ 1233.884451][   T44] usb 7-1: SerialNumber: syz
[ 1234.386561][ T8426] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1234.406126][   T44] legousbtower 7-1:14.57: interrupt endpoints not found
[ 1234.739293][   T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1234.753927][ T8426] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1234.755142][ T8426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.755195][ T8426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.757620][ T8426] usb 5-1: config 0 descriptor??
[ 1234.794293][ T8426] pwc: Askey VC010 type 2 USB webcam detected.
[ 1234.977467][   T44] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1234.979585][   T44] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1235.045286][   T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1235.053743][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.053797][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1235.053817][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1235.070142][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.070160][   T25] usb 4-1: Product: syz
[ 1235.070174][   T25] usb 4-1: Manufacturer: syz
[ 1235.070187][   T25] usb 4-1: SerialNumber: syz
[ 1235.077297][   T25] usb 4-1: config 0 descriptor??
[ 1235.312393][ T8426] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1235.313054][ T8426] pwc: recv_control_msg error -32 req 02 val 2700
[ 1235.320262][ T8426] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1235.324836][ T8426] pwc: recv_control_msg error -32 req 04 val 1000
[ 1235.326782][ T8426] pwc: recv_control_msg error -32 req 04 val 1300
[ 1235.328026][ T8426] pwc: recv_control_msg error -32 req 04 val 1400
[ 1235.330294][T16289] syzkaller0: entered promiscuous mode
[ 1235.330308][T16289] syzkaller0: entered allmulticast mode
[ 1235.336878][ T8426] pwc: recv_control_msg error -32 req 02 val 2000
[ 1235.339499][ T8426] pwc: recv_control_msg error -32 req 02 val 2100
[ 1235.340458][ T8426] pwc: recv_control_msg error -32 req 04 val 1500
[ 1235.351989][ T8426] pwc: recv_control_msg error -32 req 02 val 2500
[ 1235.353248][ T8426] pwc: recv_control_msg error -32 req 02 val 2400
[ 1235.368956][ T8426] pwc: recv_control_msg error -32 req 02 val 2600
[ 1235.375586][ T8426] pwc: recv_control_msg error -32 req 02 val 2900
[ 1235.377639][ T8426] pwc: recv_control_msg error -32 req 02 val 2800
[ 1235.566211][   T25] usb 4-1: USB disconnect, device number 31
[ 1235.640327][   T30] audit: type=1400 audit(1791230076.509:472): avc:  denied  { write } for  pid=16263 comm="syz.6.2559" name="legousbtower0" dev="devtmpfs" ino=3474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1235.673322][ T8426] pwc: recv_control_msg error -71 req 04 val 1200
[ 1235.675733][ T8426] pwc: Registered as video103.
[ 1235.689060][ T8426] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44
[ 1235.713911][   T30] audit: type=1400 audit(1791230076.609:473): avc:  denied  { read } for  pid=4956 comm="acpid" name="event4" dev="devtmpfs" ino=3485 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1235.713951][   T30] audit: type=1400 audit(1791230076.609:474): avc:  denied  { open } for  pid=4956 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3485 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1235.716643][   T30] audit: type=1400 audit(1791230076.609:475): avc:  denied  { ioctl } for  pid=4956 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3485 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1235.772729][ T8426] usb 5-1: USB disconnect, device number 24
[ 1235.863663][T16293] udevd[16293]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
** 3949 printk messages dropped **
[ 1236.150668][   T10] usb 7-1: USB disconnect, device number 17
** 2692 printk messages dropped **
[ 1236.337207][   T30] audit: type=1400 audit(1791230077.239:476): avc:  denied  { create } for  pid=16298 comm="syz.8.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1237.585208][   T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1237.644089][   T30] audit: type=1400 audit(1791230078.539:477): avc:  denied  { setopt } for  pid=16310 comm="syz.8.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1237.644127][   T30] audit: type=1400 audit(1791230078.539:478): avc:  denied  { bind } for  pid=16310 comm="syz.8.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1237.684944][   T30] audit: type=1400 audit(1791230078.589:479): avc:  denied  { write } for  pid=16310 comm="syz.8.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1237.685230][   T30] audit: type=1400 audit(1791230078.589:480): avc:  denied  { connect } for  pid=16310 comm="syz.8.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1237.770696][   T25] usb 8-1: Using ep0 maxpacket: 16
[ 1237.771469][   T25] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1237.772592][   T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1237.772649][   T25] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1237.772673][   T25] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1237.772718][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.828291][   T25] usb 8-1: config 0 descriptor??
[ 1237.846661][   T25] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1238.194838][T14780] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1238.374439][T14780] usb 5-1: Using ep0 maxpacket: 16
[ 1238.375110][T14780] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1238.376191][T14780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.376211][T14780] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1238.376262][T14780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.393325][T14780] usb 5-1: config 0 descriptor??
[ 1238.585418][T16324] syzkaller0: entered promiscuous mode
[ 1238.585433][T16324] syzkaller0: entered allmulticast mode
[ 1238.713994][   T30] audit: type=1400 audit(1791230079.609:481): avc:  denied  { connect } for  pid=16332 comm="syz.6.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1238.783895][T16333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input45
[ 1238.914567][ T7971] net_ratelimit: 127 callbacks suppressed
[ 1239.104501][T16345] FAULT_INJECTION: forcing a failure.
[ 1239.104501][T16345] name failslab, interval 1, probability 0, space 0, times 0
[ 1239.104536][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.6.2586 Not tainted syzkaller #0 PREEMPT(full) 
[ 1239.104560][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1239.104573][T16345] Call Trace:
[ 1239.104581][T16345]  <TASK>
[ 1239.104589][T16345]  dump_stack_lvl+0x100/0x190
[ 1239.104624][T16345]  should_fail_ex.cold+0x5/0xa
[ 1239.104651][T16345]  should_failslab+0xc2/0x120
[ 1239.104680][T16345]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1239.104702][T16345]  ? __pfx_map_id_range_down+0x10/0x10
[ 1239.104724][T16345]  ? rcu_is_watching+0x13/0xc0
[ 1239.104757][T16345]  ? security_inode_alloc+0x3b/0x2c0
[ 1239.104785][T16345]  security_inode_alloc+0x3b/0x2c0
[ 1239.104808][T16345]  inode_init_always_gfp+0xc6f/0xfb0
[ 1239.104840][T16345]  alloc_inode+0x8e/0x250
[ 1239.104864][T16345]  new_inode+0x22/0x1c0
[ 1239.104886][T16345]  bdev_alloc+0x2b/0x420
[ 1239.104907][T16345]  ? bdi_init+0x3f4/0x5b0
[ 1239.104929][T16345]  ? bdi_init+0x49f/0x5b0
[ 1239.104952][T16345]  __alloc_disk_node+0x116/0x6b0
[ 1239.104975][T16345]  __blk_alloc_disk+0xd2/0x170
[ 1239.104995][T16345]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1239.105013][T16345]  ? __pfx___debug_object_init+0x10/0x10
[ 1239.105052][T16345]  ? lockdep_init_map_type+0x5c/0x250
[ 1239.105077][T16345]  ? lockdep_init_map_type+0x5c/0x250
[ 1239.105103][T16345]  dm_create+0x5e8/0x1530
[ 1239.105125][T16345]  dev_create+0x121/0x2a0
[ 1239.105147][T16345]  ? __pfx_dev_create+0x10/0x10
[ 1239.105175][T16345]  ctl_ioctl+0x4d2/0xcc0
[ 1239.105195][T16345]  ? __pfx_dev_create+0x10/0x10
[ 1239.105220][T16345]  ? __pfx_ctl_ioctl+0x10/0x10
[ 1239.105261][T16345]  ? selinux_file_ioctl+0x13b/0x290
[ 1239.105284][T16345]  ? selinux_file_ioctl+0xb6/0x290
[ 1239.105311][T16345]  dm_ctl_ioctl+0x22/0x30
[ 1239.105330][T16345]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 1239.105351][T16345]  __x64_sys_ioctl+0x18e/0x210
[ 1239.105375][T16345]  do_syscall_64+0x123/0x790
[ 1239.105399][T16345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1239.105419][T16345] RIP: 0033:0x7f526499e199
[ 1239.105437][T16345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1239.105456][T16345] RSP: 002b:00007f5265874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1239.105475][T16345] RAX: ffffffffffffffda RBX: 00007f5264c25fa0 RCX: 00007f526499e199
[ 1239.105489][T16345] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[ 1239.105503][T16345] RBP: 00007f5264a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1239.105517][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1239.105529][T16345] R13: 00007f5264c26038 R14: 00007f5264c25fa0 R15: 00007fff5c890c98
[ 1239.105555][T16345]  </TASK>
[ 1239.456567][T16351] syzkaller0: entered promiscuous mode
[ 1239.456581][T16351] syzkaller0: entered allmulticast mode
[ 1239.542096][   T30] audit: type=1400 audit(1791230080.439:482): avc:  denied  { read append } for  pid=16353 comm="syz.6.2591" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1239.542414][   T30] audit: type=1400 audit(1791230080.439:483): avc:  denied  { open } for  pid=16353 comm="syz.6.2591" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1239.692371][T14603] Bluetooth: hci0: unexpected event for opcode 0x0419
[ 1240.359483][ T8426] usb 8-1: USB disconnect, device number 11
[ 1240.542116][   T30] audit: type=1400 audit(1791230081.439:484): avc:  denied  { write } for  pid=16367 comm="syz.7.2596" name="subsystems" dev="configfs" ino=44952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1240.542353][   T30] audit: type=1400 audit(1791230081.439:485): avc:  denied  { write } for  pid=16367 comm="syz.7.2596" name="subsystems" dev="configfs" ino=44952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1240.899880][T16354] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1240.900744][T16354] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1240.969360][ T8426] usb 5-1: USB disconnect, device number 25
[ 1241.056941][T16354] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1241.057106][T16354] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1241.085801][T16354] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1241.086578][T16354] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1241.089810][T16354] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1241.089973][T16354] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1241.113228][T16354] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1241.113445][T16354] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1241.201534][T16354] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1241.201789][T16354] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1241.253528][T16354] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1241.271788][T16381] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16)
[ 1241.272761][T16381] i2c i2c-0: delete_device: Can't find device in list
[ 1241.275933][T16354] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1241.287903][T16354] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1241.347551][T16354] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1241.592053][   T30] audit: type=1400 audit(1791230082.489:486): avc:  denied  { listen } for  pid=16389 comm="syz.8.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1241.794449][T14603] Bluetooth: hci1: command 0x0406 tx timeout
[ 1241.845183][T16394] syzkaller0: entered promiscuous mode
[ 1241.845347][T16394] syzkaller0: entered allmulticast mode
[ 1242.019360][T16410] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16)
[ 1242.020859][T16410] i2c i2c-0: delete_device: Can't find device in list
[ 1242.054555][   T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1242.230714][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1242.236866][   T10] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1242.241642][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.241725][   T10] usb 9-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1242.241749][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1242.241791][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.255059][   T10] usb 9-1: config 0 descriptor??
[ 1242.281732][   T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1243.026845][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1243.026858][   T30] audit: type=1400 audit(1791230083.929:488): avc:  denied  { ioctl } for  pid=16435 comm="syz.3.2618" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1243.075230][T14603] Bluetooth: hci2: command 0x0406 tx timeout
[ 1243.154494][T14603] Bluetooth: hci0: command 0x0406 tx timeout
[ 1243.154539][T14603] Bluetooth: hci5: command 0x0406 tx timeout
[ 1243.154586][T14603] Bluetooth: hci3: command 0x0406 tx timeout
[ 1243.234473][ T4920] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1243.312371][T16443] syzkaller0: entered promiscuous mode
[ 1243.312386][T16443] syzkaller0: entered allmulticast mode
[ 1243.314527][ T4920] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1243.573074][   T30] audit: type=1400 audit(1791230084.469:489): avc:  denied  { lock } for  pid=16444 comm="syz.7.2621" path="socket:[51508]" dev="sockfs" ino=51508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1243.610788][   T30] audit: type=1400 audit(1791230084.509:490): avc:  denied  { audit_write } for  pid=16444 comm="syz.7.2621" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1243.642010][   T30] audit: type=1107 audit(1791230084.539:491): pid=16444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ÌçG'3š•lÕ¨‹K>uwIh$ô0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y'
[ 1243.874639][ T4920] Bluetooth: hci1: command 0x0406 tx timeout
[ 1243.959929][  T167] net_ratelimit: 245 callbacks suppressed
[ 1244.214700][ T8426] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1244.335061][   T44] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1244.377697][ T8426] usb 5-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00
[ 1244.378854][ T8426] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1244.378880][ T8426] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1244.378906][ T8426] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1244.378951][ T8426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.409377][ T8426] usb 5-1: config 0 descriptor??
[ 1244.508942][   T44] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1244.510916][   T44] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1244.510952][   T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1244.510978][   T44] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1244.564937][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.564956][   T44] usb 8-1: Product: syz
[ 1244.564970][   T44] usb 8-1: Manufacturer: syz
[ 1244.564985][   T44] usb 8-1: SerialNumber: syz
[ 1244.600220][   T44] usb 8-1: config 0 descriptor??
[ 1244.874783][ T5718] usb 9-1: USB disconnect, device number 11
[ 1244.953415][ T8426] hid_parser_main: 4 callbacks suppressed
[ 1244.953433][ T8426] asus 0003:0B05:1869.0008: unknown main item tag 0x0
[ 1244.953454][ T8426] asus 0003:0B05:1869.0008: unbalanced collection at end of report description
[ 1244.954040][ T8426] asus 0003:0B05:1869.0008: Asus hid parse failed: -22
[ 1244.954124][ T8426] asus 0003:0B05:1869.0008: probe with driver asus failed with error -22
[ 1245.154960][ T4920] Bluetooth: hci2: command 0x0406 tx timeout
[ 1245.194637][ T8426] usb 5-1: USB disconnect, device number 26
[ 1245.234528][ T4920] Bluetooth: hci3: command 0x0406 tx timeout
[ 1245.234571][ T4920] Bluetooth: hci5: command 0x0406 tx timeout
[ 1245.234601][ T4920] Bluetooth: hci0: command 0x0406 tx timeout
[ 1245.314754][T14603] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1245.338406][   T44] usb 8-1: USB disconnect, device number 12
[ 1245.394688][T14603] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1245.557301][T16256] udevd[16256]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1246.346424][   T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1246.420225][   T30] audit: type=1400 audit(1791230087.319:492): avc:  denied  { name_bind } for  pid=16518 comm="syz.4.2650" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1246.447128][ T8426] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1246.513216][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1246.515404][   T10] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1246.516474][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1246.516523][   T10] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1246.516545][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1246.516587][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.554921][   T10] usb 8-1: config 0 descriptor??
[ 1246.585433][T16523] netlink: 'syz.4.2652': attribute type 10 has an invalid length.
[ 1246.586237][   T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1246.612314][ T8426] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1246.614622][ T8426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1246.614646][ T8426] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1246.652568][T16523] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1246.662118][ T8426] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1246.662137][ T8426] usb 9-1: Product: syz
[ 1246.662152][ T8426] usb 9-1: Manufacturer: syz
[ 1246.662168][ T8426] usb 9-1: SerialNumber: syz
[ 1246.687202][ T8426] usb 9-1: config 0 descriptor??
[ 1246.691062][T16523] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1246.692196][T16524] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2652'.
[ 1246.752219][T16524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1246.777201][T16524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1246.794559][ T5725] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1246.818453][T16524] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1246.915743][T16524] bridge0: port 3(netdevsim0) entered disabled state
[ 1246.916131][T16524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.916477][T16524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1246.946205][ T5725] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1246.947336][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1246.947373][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1246.947396][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1246.954500][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.954521][ T5725] usb 7-1: Product: syz
[ 1246.954537][ T5725] usb 7-1: Manufacturer: syz
[ 1246.954552][ T5725] usb 7-1: SerialNumber: syz
[ 1246.960655][ T5725] usb 7-1: config 0 descriptor??
[ 1247.159133][T16526] FAULT_INJECTION: forcing a failure.
[ 1247.159133][T16526] name failslab, interval 1, probability 0, space 0, times 0
[ 1247.159168][T16526] CPU: 0 UID: 0 PID: 16526 Comm: syz.3.2653 Not tainted syzkaller #0 PREEMPT(full) 
[ 1247.159192][T16526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1247.159204][T16526] Call Trace:
[ 1247.159212][T16526]  <TASK>
[ 1247.159220][T16526]  dump_stack_lvl+0x100/0x190
[ 1247.159255][T16526]  should_fail_ex.cold+0x5/0xa
[ 1247.159283][T16526]  should_failslab+0xc2/0x120
[ 1247.159311][T16526]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1247.159335][T16526]  ? __kasan_kmalloc+0xaa/0xb0
[ 1247.159361][T16526]  ? ceph_init_fs_context+0x4b/0x530
[ 1247.159389][T16526]  ceph_init_fs_context+0x4b/0x530
[ 1247.159413][T16526]  alloc_fs_context+0x60c/0xf40
[ 1247.159439][T16526]  __x64_sys_fsopen+0xed/0x220
[ 1247.159463][T16526]  do_syscall_64+0x123/0x790
[ 1247.159488][T16526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.159509][T16526] RIP: 0033:0x7f0c5159e199
[ 1247.159525][T16526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1247.159545][T16526] RSP: 002b:00007f0c524ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[ 1247.159566][T16526] RAX: ffffffffffffffda RBX: 00007f0c51825fa0 RCX: 00007f0c5159e199
[ 1247.159579][T16526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280
[ 1247.159592][T16526] RBP: 00007f0c516350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1247.159605][T16526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1247.159618][T16526] R13: 00007f0c51826038 R14: 00007f0c51825fa0 R15: 00007ffc3a7b3188
[ 1247.159647][T16526]  </TASK>
[ 1247.265024][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'.
[ 1247.268515][   T30] audit: type=1400 audit(1791230088.169:493): avc:  denied  { ioctl } for  pid=16522 comm="syz.4.2652" path="socket:[51899]" dev="sockfs" ino=51899 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1247.271183][T16523] mmap: syz.4.2652 (16523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1247.291559][T16524] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[ 1247.340893][T16524] bond0 (unregistering): Released all slaves
[ 1247.394790][T14603] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1247.474634][T14603] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1247.549840][   T25] usb 9-1: USB disconnect, device number 12
[ 1247.553684][ T5725] usb 7-1: USB disconnect, device number 18
[ 1247.808010][T16535] netlink: 'syz.3.2655': attribute type 1 has an invalid length.
[ 1247.960501][T16535] bond1: entered promiscuous mode
[ 1247.964092][T16535] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1248.097818][T16535] bridge3: entered promiscuous mode
[ 1248.103886][T16535] bond1: (slave bridge3): Enslaving as an active interface with an up link
[ 1248.641976][T16549] rdma_rxe: rxe_newlink: failed to add lo
[ 1249.094881][ T6661] net_ratelimit: 169 callbacks suppressed
[ 1249.167988][ T8426] usb 8-1: USB disconnect, device number 13
[ 1249.292842][T16567] FAULT_INJECTION: forcing a failure.
[ 1249.292842][T16567] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.292873][T16567] CPU: 1 UID: 0 PID: 16567 Comm: syz.7.2662 Not tainted syzkaller #0 PREEMPT(full) 
[ 1249.292897][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1249.292910][T16567] Call Trace:
[ 1249.292918][T16567]  <TASK>
[ 1249.292927][T16567]  dump_stack_lvl+0x100/0x190
[ 1249.292960][T16567]  should_fail_ex.cold+0x5/0xa
[ 1249.292988][T16567]  should_failslab+0xc2/0x120
[ 1249.293016][T16567]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1249.293036][T16567]  ? snd_seq_port_use_ptr+0x3c/0x300
[ 1249.293070][T16567]  ? snd_seq_port_connect+0x61/0x540
[ 1249.293107][T16567]  snd_seq_port_connect+0x61/0x540
[ 1249.293138][T16567]  ? check_subscription_permission.isra.0+0x146/0x240
[ 1249.293172][T16567]  snd_seq_ioctl_subscribe_port+0x219/0x490
[ 1249.293206][T16567]  ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10
[ 1249.293237][T16567]  ? lock_acquire+0x1d1/0x380
[ 1249.293259][T16567]  ? clientptr+0x20/0x190
[ 1249.293286][T16567]  ? find_held_lock+0x2b/0x80
[ 1249.293315][T16567]  ? clientptr+0x80/0x190
[ 1249.293346][T16567]  call_seq_client_ctl+0xa3/0x130
[ 1249.293376][T16567]  snd_seq_kernel_client_ctl+0x35/0x50
[ 1249.293406][T16567]  snd_seq_oss_midi_open+0x465/0x680
[ 1249.293432][T16567]  ? __pfx_snd_seq_oss_midi_open+0x10/0x10
[ 1249.293464][T16567]  ? kasan_save_track+0x14/0x30
[ 1249.293488][T16567]  ? __kasan_kmalloc+0xaa/0xb0
[ 1249.293516][T16567]  snd_seq_oss_synth_setup_midi+0x131/0x590
[ 1249.293546][T16567]  snd_seq_oss_open+0x82e/0xa10
[ 1249.293581][T16567]  odev_open+0x6f/0x90
[ 1249.293608][T16567]  ? __pfx_odev_open+0x10/0x10
[ 1249.293636][T16567]  soundcore_open+0x2e3/0x5a0
[ 1249.293675][T16567]  ? __pfx_soundcore_open+0x10/0x10
[ 1249.293704][T16567]  chrdev_open+0x234/0x6a0
[ 1249.293733][T16567]  ? __pfx_chrdev_open+0x10/0x10
[ 1249.293761][T16567]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1249.293790][T16567]  do_dentry_open+0x6ab/0x14d0
[ 1249.293813][T16567]  ? __pfx_chrdev_open+0x10/0x10
[ 1249.293846][T16567]  vfs_open+0x82/0x3f0
[ 1249.293879][T16567]  path_openat+0x19fa/0x2440
[ 1249.293911][T16567]  ? __pfx_path_openat+0x10/0x10
[ 1249.293946][T16567]  do_file_open+0x20e/0x430
[ 1249.293976][T16567]  ? __pfx_do_file_open+0x10/0x10
[ 1249.294023][T16567]  ? _raw_spin_unlock+0x28/0x50
[ 1249.294054][T16567]  ? alloc_fd+0x471/0x7a0
[ 1249.294090][T16567]  do_sys_openat2+0x10f/0x1e0
[ 1249.294120][T16567]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1249.294162][T16567]  __x64_sys_openat+0x12d/0x210
[ 1249.294194][T16567]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1249.294236][T16567]  do_syscall_64+0x123/0x790
[ 1249.294263][T16567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.294284][T16567] RIP: 0033:0x7f656539e199
[ 1249.294302][T16567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1249.294321][T16567] RSP: 002b:00007f6566191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1249.294340][T16567] RAX: ffffffffffffffda RBX: 00007f6565625fa0 RCX: 00007f656539e199
[ 1249.294352][T16567] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c
[ 1249.294363][T16567] RBP: 00007f65654350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1249.294374][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1249.294386][T16567] R13: 00007f6565626038 R14: 00007f6565625fa0 R15: 00007fff1c1d42f8
[ 1249.294413][T16567]  </TASK>
[ 1249.888440][T16572] 0x000000000000-0x000000010000 : ""
[ 1250.112272][T16572] ftl_cs: FTL header not found.
[ 1250.350882][T16572] FAULT_INJECTION: forcing a failure.
[ 1250.350882][T16572] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.350911][T16572] CPU: 1 UID: 0 PID: 16572 Comm: syz.6.2664 Not tainted syzkaller #0 PREEMPT(full) 
[ 1250.350933][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1250.350947][T16572] Call Trace:
[ 1250.350954][T16572]  <TASK>
[ 1250.350963][T16572]  dump_stack_lvl+0x100/0x190
[ 1250.350996][T16572]  should_fail_ex.cold+0x5/0xa
[ 1250.351024][T16572]  should_failslab+0xc2/0x120
[ 1250.351055][T16572]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1250.351082][T16572]  ? __kernfs_new_node+0xd2/0xa10
[ 1250.351108][T16572]  __kernfs_new_node+0xd2/0xa10
[ 1250.351133][T16572]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1250.351156][T16572]  ? lock_acquire+0x1d1/0x380
[ 1250.351182][T16572]  ? kernfs_root+0x23/0x2a0
[ 1250.351213][T16572]  ? find_held_lock+0x2b/0x80
[ 1250.351242][T16572]  ? kernfs_root+0xee/0x2a0
[ 1250.351270][T16572]  ? kernfs_root+0xee/0x2a0
[ 1250.351306][T16572]  kernfs_new_node+0x117/0x150
[ 1250.351332][T16572]  __kernfs_create_file+0x53/0x350
[ 1250.351362][T16572]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1250.351397][T16572]  internal_create_group+0x593/0xfb0
[ 1250.351433][T16572]  ? kernfs_create_dir_ns+0x16f/0x2b0
[ 1250.351456][T16572]  ? __pfx_internal_create_group+0x10/0x10
[ 1250.351489][T16572]  ? sysfs_create_dir_ns+0x14c/0x2b0
[ 1250.351519][T16572]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1250.351548][T16572]  ? sysfs_create_dir_ns+0x14c/0x2b0
[ 1250.351581][T16572]  internal_create_groups+0x9d/0x150
[ 1250.351615][T16572]  kobject_add_internal+0x317/0x930
[ 1250.351656][T16572]  kobject_add+0x16a/0x1e0
[ 1250.351687][T16572]  ? __pfx_kobject_add+0x10/0x10
[ 1250.351718][T16572]  ? __pfx_kobject_add+0x10/0x10
[ 1250.351758][T16572]  blk_register_queue+0x8d/0x630
[ 1250.351786][T16572]  __add_disk+0x7dd/0xf10
[ 1250.351822][T16572]  add_disk_fwnode+0x118/0x480
[ 1250.351859][T16572]  add_mtd_blktrans_dev+0xd0b/0x1520
[ 1250.351892][T16572]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 1250.351934][T16572]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1250.351957][T16572]  ? mtdblock_add_mtd+0x4a/0x270
[ 1250.351986][T16572]  mtdblock_add_mtd+0x1cc/0x270
[ 1250.352012][T16572]  blktrans_notify_add+0xa2/0xf0
[ 1250.352037][T16572]  add_mtd_device+0xb6d/0x1820
[ 1250.352071][T16572]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1250.352098][T16572]  ? __pfx_add_mtd_device+0x10/0x10
[ 1250.352136][T16572]  mtd_add_partition+0x376/0x6a0
[ 1250.352158][T16572]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1250.352178][T16572]  ? __might_fault+0xc5/0x140
[ 1250.352198][T16572]  ? __might_fault+0xc5/0x140
[ 1250.352229][T16572]  mtdchar_blkpg_ioctl+0x207/0x250
[ 1250.352251][T16572]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1250.352296][T16572]  mtdchar_ioctl+0x1670/0x1fd0
[ 1250.352322][T16572]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1250.352346][T16572]  ? lock_acquire+0x1d1/0x380
[ 1250.352369][T16572]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1250.352397][T16572]  ? rcu_is_watching+0x13/0xc0
[ 1250.352426][T16572]  ? trace_contention_end+0x126/0x160
[ 1250.352455][T16572]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1250.352479][T16572]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1250.352502][T16572]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1250.352534][T16572]  ? __pfx___mutex_lock+0x10/0x10
[ 1250.352558][T16572]  ? __fget_files+0x34/0x3d0
[ 1250.352602][T16572]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1250.352624][T16572]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1250.352655][T16572]  __x64_sys_ioctl+0x18e/0x210
[ 1250.352682][T16572]  do_syscall_64+0x123/0x790
[ 1250.352709][T16572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.352732][T16572] RIP: 0033:0x7f526499e199
[ 1250.352752][T16572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1250.352772][T16572] RSP: 002b:00007f5265874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1250.352793][T16572] RAX: ffffffffffffffda RBX: 00007f5264c25fa0 RCX: 00007f526499e199
[ 1250.352807][T16572] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000004
[ 1250.352820][T16572] RBP: 00007f5264a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1250.352833][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1250.352846][T16572] R13: 00007f5264c26038 R14: 00007f5264c25fa0 R15: 00007fff5c890c98
[ 1250.352876][T16572]  </TASK>
[ 1250.662509][ T8426] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1250.787774][T16590] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2670'.
[ 1250.833096][T16572] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock2)
[ 1251.028097][ T8426] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1251.029099][ T8426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.029118][ T8426] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1251.029882][   T13] IPVS: starting estimator thread 0...
[ 1251.031288][ T8426] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1251.031307][ T8426] usb 4-1: Product: syz
[ 1251.031322][ T8426] usb 4-1: Manufacturer: syz
[ 1251.031337][ T8426] usb 4-1: SerialNumber: syz
[ 1251.144506][ T8426] usb 4-1: config 0 descriptor??
[ 1251.259211][T16595] IPVS: using max 42 ests per chain, 100800 per kthread
[ 1251.592829][   T25] usb 4-1: USB disconnect, device number 32
[ 1251.699349][T16589] lo speed is unknown, defaulting to 1000
[ 1251.854519][ T8426] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1251.884468][ T5725] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1252.004684][ T8426] usb 8-1: Using ep0 maxpacket: 8
[ 1252.005473][ T8426] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1252.006451][ T8426] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1252.006508][ T8426] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1252.006530][ T8426] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1252.006553][ T8426] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1252.006575][ T8426] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1252.006628][ T8426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.080695][ T5725] usb 7-1: Using ep0 maxpacket: 16
[ 1252.094845][ T5725] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1252.105784][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1252.105839][ T5725] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1252.105863][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1252.105909][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.110156][ T5725] usb 7-1: config 0 descriptor??
[ 1252.160727][ T5725] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1252.174482][   T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1252.328112][   T25] usb 5-1: Using ep0 maxpacket: 16
[ 1252.330575][   T25] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1252.332257][   T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1252.332278][   T25] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1252.332303][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1252.332366][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.341434][   T25] usb 5-1: config 0 descriptor??
[ 1252.359935][ T8426] usb 8-1: usb_control_msg returned -71
[ 1252.359967][ T8426] usbtmc 8-1:16.0: can't read capabilities
[ 1252.372753][   T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1252.406490][ T8426] usb 8-1: USB disconnect, device number 14
[ 1254.274398][    C0] net_ratelimit: 157 callbacks suppressed
[ 1254.464770][ T8426] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1254.614719][ T8426] usb 4-1: Using ep0 maxpacket: 16
[ 1254.616872][ T8426] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1254.618115][ T8426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1254.618168][ T8426] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1254.618191][ T8426] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1254.618234][ T8426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.668063][ T8426] usb 4-1: config 0 descriptor??
[ 1254.697229][ T8426] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1254.792553][ T8426] usb 7-1: USB disconnect, device number 19
[ 1254.957217][   T44] usb 5-1: USB disconnect, device number 27
[ 1255.504448][ T5725] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1255.664683][ T8426] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[ 1255.695128][ T5725] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[ 1255.696029][ T5725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1255.697368][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1255.697380][ T5725] usb 5-1: Product: syz
[ 1255.697389][ T5725] usb 5-1: Manufacturer: syz
[ 1255.705240][ T5725] navman 5-1:1.0: navman converter detected
[ 1255.737090][ T5725] usb 5-1: navman converter now attached to ttyUSB0
[ 1255.837074][ T8426] usb 8-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[ 1255.838180][ T8426] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1255.838234][ T8426] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1255.838287][ T8426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1255.854804][ T8426] usb 8-1: config 0 descriptor??
[ 1255.897685][   T44] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1255.931410][ T8426] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1256.022482][ T8426] usb 5-1: USB disconnect, device number 28
[ 1256.038010][ T8426] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[ 1256.039599][ T8426] navman 5-1:1.0: device disconnected
[ 1256.059071][   T44] usb 7-1: Using ep0 maxpacket: 16
[ 1256.068302][   T44] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1256.069355][   T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.069423][   T44] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1256.069447][   T44] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1256.069517][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.072191][   T44] usb 7-1: config 0 descriptor??
[ 1256.135365][   T44] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1256.730473][T16668] FAULT_INJECTION: forcing a failure.
[ 1256.730473][T16668] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.730507][T16668] CPU: 1 UID: 0 PID: 16668 Comm: syz.4.2695 Not tainted syzkaller #0 PREEMPT(full) 
[ 1256.730532][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1256.730544][T16668] Call Trace:
[ 1256.730553][T16668]  <TASK>
[ 1256.730561][T16668]  dump_stack_lvl+0x100/0x190
[ 1256.730596][T16668]  should_fail_ex.cold+0x5/0xa
[ 1256.730622][T16668]  should_failslab+0xc2/0x120
[ 1256.730651][T16668]  __kmalloc_cache_node_noprof+0x94/0x720
[ 1256.730681][T16668]  ? register_lock_class+0x3f/0x7b0
[ 1256.730705][T16668]  ? blkg_alloc+0xbd/0xf80
[ 1256.730732][T16668]  blkg_alloc+0xbd/0xf80
[ 1256.730755][T16668]  ? __pfx___might_resched+0x10/0x10
[ 1256.730774][T16668]  ? __xas_nomem+0x1b4/0x670
[ 1256.730796][T16668]  ? xas_load+0x44/0x5c0
[ 1256.730822][T16668]  blkcg_init_disk+0x183/0x700
[ 1256.730846][T16668]  ? __pfx_blkcg_init_disk+0x10/0x10
[ 1256.730869][T16668]  ? lock_acquire+0x1d1/0x380
[ 1256.730893][T16668]  ? find_held_lock+0x2b/0x80
[ 1256.730919][T16668]  ? __alloc_disk_node+0x2d4/0x6b0
[ 1256.730938][T16668]  ? __alloc_disk_node+0x2d4/0x6b0
[ 1256.730962][T16668]  __alloc_disk_node+0x2f6/0x6b0
[ 1256.730986][T16668]  __blk_alloc_disk+0xd2/0x170
[ 1256.731006][T16668]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1256.731025][T16668]  ? __pfx___debug_object_init+0x10/0x10
[ 1256.731065][T16668]  ? lockdep_init_map_type+0x5c/0x250
[ 1256.731090][T16668]  ? lockdep_init_map_type+0x5c/0x250
[ 1256.731117][T16668]  dm_create+0x5e8/0x1530
[ 1256.731140][T16668]  dev_create+0x121/0x2a0
[ 1256.731162][T16668]  ? __pfx_dev_create+0x10/0x10
[ 1256.731190][T16668]  ctl_ioctl+0x4d2/0xcc0
[ 1256.731210][T16668]  ? __pfx_dev_create+0x10/0x10
[ 1256.731232][T16668]  ? __pfx_ctl_ioctl+0x10/0x10
[ 1256.731284][T16668]  ? selinux_file_ioctl+0x13b/0x290
[ 1256.731308][T16668]  ? selinux_file_ioctl+0xb6/0x290
[ 1256.731335][T16668]  dm_ctl_ioctl+0x22/0x30
[ 1256.731355][T16668]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 1256.731376][T16668]  __x64_sys_ioctl+0x18e/0x210
[ 1256.731403][T16668]  do_syscall_64+0x123/0x790
[ 1256.731428][T16668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1256.731448][T16668] RIP: 0033:0x7f9fec39e199
[ 1256.731465][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1256.731484][T16668] RSP: 002b:00007f9fed24b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1256.731505][T16668] RAX: ffffffffffffffda RBX: 00007f9fec625fa0 RCX: 00007f9fec39e199
[ 1256.731518][T16668] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[ 1256.731531][T16668] RBP: 00007f9fec4350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1256.731543][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1256.731555][T16668] R13: 00007f9fec626038 R14: 00007f9fec625fa0 R15: 00007ffc2a694bd8
[ 1256.731581][T16668]  </TASK>
[ 1257.230631][   T44] usb 4-1: USB disconnect, device number 33
[ 1257.326243][   T30] audit: type=1400 audit(1791230098.229:494): avc:  denied  { bind } for  pid=16672 comm="syz.4.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1257.361373][   T30] audit: type=1400 audit(1791230098.259:495): avc:  denied  { connect } for  pid=16672 comm="syz.4.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1258.441178][ T8426] usb 8-1: USB disconnect, device number 15
[ 1258.590599][T16656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1258.702997][ T8426] usb 7-1: USB disconnect, device number 20
[ 1258.852787][T16696] 0x000000000000-0x000000010000 : ""
[ 1258.878909][T16696] ftl_cs: FTL header not found.
[ 1258.944510][   T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1258.978885][T14603] Bluetooth: hci1: unexpected event for opcode 0x0419
[ 1259.094667][   T44] usb 4-1: Using ep0 maxpacket: 32
[ 1259.102689][   T44] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1259.102726][   T44] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1259.122311][   T44] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[ 1259.122332][   T44] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[ 1259.122352][   T44] usb 4-1: config 14 has no interface number 0
[ 1259.122367][   T44] usb 4-1: config 14 has no interface number 1
[ 1259.122414][   T44] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1259.122436][   T44] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1259.122460][   T44] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1259.122485][   T44] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1259.122512][   T44] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1259.122536][   T44] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1259.122559][   T44] usb 4-1: config 14 interface 57 has no altsetting 0
[ 1259.122576][   T44] usb 4-1: config 14 interface 228 has no altsetting 0
[ 1259.193738][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.193757][   T44] usb 4-1: Product: syz
[ 1259.193772][   T44] usb 4-1: Manufacturer: syz
[ 1259.193786][   T44] usb 4-1: SerialNumber: syz
[ 1259.394475][   T13] net_ratelimit: 140 callbacks suppressed
[ 1259.927827][   T44] legousbtower 4-1:14.57: interrupt endpoints not found
[ 1260.263101][T16700] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1260.273009][   T44] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1260.290488][   T44] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1260.321549][T16700] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1260.321891][T16700] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1260.322214][T16700] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1260.322589][T16700] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1260.323539][T16700] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1260.323883][T16700] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1260.759531][T16735] binder: 16728:16735 ioctl c0306201 0 returned -14
[ 1261.054576][T14603] Bluetooth: hci1: command 0x0406 tx timeout
[ 1261.314105][ T8426] usb 4-1: USB disconnect, device number 34
[ 1261.357829][ T8426] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1262.284710][   T44] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1262.354753][ T4920] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1262.354796][ T4920] Bluetooth: hci0: command 0x0406 tx timeout
[ 1262.354828][ T4920] Bluetooth: hci5: command 0x0406 tx timeout
[ 1262.354861][ T4920] Bluetooth: hci3: command 0x0406 tx timeout
[ 1262.354894][ T4920] Bluetooth: hci2: command 0x0406 tx timeout
[ 1262.355020][T14603] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1262.456757][   T44] usb 9-1: Using ep0 maxpacket: 16
[ 1262.461680][   T44] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1262.506789][   T44] usb 9-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1262.506814][   T44] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1262.506858][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.511155][   T44] usb 9-1: config 0 descriptor??
[ 1262.557628][   T44] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1262.979648][T14603] Bluetooth: hci6: unexpected event for opcode 0x0419
[ 1263.833094][T16769] lo speed is unknown, defaulting to 1000
[ 1264.125510][T16773] binder: 16772:16773 ioctl c0306201 0 returned -14
[ 1264.434429][    C1] net_ratelimit: 184 callbacks suppressed
[ 1264.603591][ T5718] usb 9-1: USB disconnect, device number 13
[ 1264.705632][   T44] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1264.855554][   T44] usb 8-1: Using ep0 maxpacket: 32
[ 1264.860943][   T44] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1264.860986][   T44] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1264.862005][   T44] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[ 1264.862038][   T44] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[ 1264.862058][   T44] usb 8-1: config 14 has no interface number 0
[ 1264.862075][   T44] usb 8-1: config 14 has no interface number 1
[ 1264.862124][   T44] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1264.862149][   T44] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1264.862174][   T44] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1264.862199][   T44] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1264.862226][   T44] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1264.862251][   T44] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1264.862275][   T44] usb 8-1: config 14 interface 57 has no altsetting 0
[ 1264.862291][   T44] usb 8-1: config 14 interface 228 has no altsetting 0
[ 1264.924491][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.924511][   T44] usb 8-1: Product: syz
[ 1264.924526][   T44] usb 8-1: Manufacturer: syz
[ 1264.924540][   T44] usb 8-1: SerialNumber: syz
[ 1265.470511][   T44] legousbtower 8-1:14.57: interrupt endpoints not found
[ 1265.617280][   T12] syzkaller0: tun_net_xmit 76
[ 1265.617449][   T12] syzkaller0: tun_net_xmit 48
[ 1265.645063][ T5718] syzkaller0: tun_net_xmit 76
[ 1265.889033][   T44] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1265.890119][T14603] Bluetooth: hci0: unexpected event for opcode 0x0419
[ 1265.891503][   T44] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1266.640069][   T30] audit: type=1400 audit(1791230107.529:496): avc:  denied  { shutdown } for  pid=16804 comm="syz.6.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1266.744577][ T5718] usb 8-1: USB disconnect, device number 16
[ 1266.770444][ T5718] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1266.997104][T14603] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[ 1266.997161][T14603] Bluetooth: hci6: Injecting HCI hardware error event
[ 1266.999514][ T5612] Bluetooth: hci6: hardware error 0x00
[ 1267.668960][T16814] 0x000000000000-0x000000010000 : ""
[ 1267.692956][T16814] ftl_cs: FTL header not found.
[ 1269.079981][ T5612] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1269.474818][    C0] net_ratelimit: 138 callbacks suppressed
[ 1269.776773][T16829] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1269.824466][ T5718] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1269.954937][ T5612] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1269.956653][ T5612] Bluetooth: hci0: Injecting HCI hardware error event
[ 1269.960098][T14603] Bluetooth: hci0: hardware error 0x00
[ 1269.974609][ T5718] usb 7-1: Using ep0 maxpacket: 8
[ 1269.986324][ T5718] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1270.004811][ T5718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1270.004832][ T5718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1270.004888][ T5718] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1270.004912][ T5718] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1270.004963][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.097031][ T5718] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1270.097050][ T5718] hub 7-1:1.0: probe with driver hub failed with error -5
[ 1270.097528][ T5718] cdc_wdm 7-1:1.0: skipping garbage
[ 1270.097542][ T5718] cdc_wdm 7-1:1.0: skipping garbage
[ 1270.100769][ T5718] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1270.100785][ T5718] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1270.696713][   T10] usb 7-1: USB disconnect, device number 21
[ 1271.065505][T16840] md: could not open device unknown-block(1,0).
[ 1271.240809][T16846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1271.251947][T16846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1271.261823][T16846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1271.263260][T16846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1271.279210][T16846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1271.324670][T16840] md: personality for level rai is not loaded!
[ 1272.034677][T14603] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1272.474446][ T8426] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1272.491514][T16844] lo speed is unknown, defaulting to 1000
[ 1272.624412][ T8426] usb 8-1: Using ep0 maxpacket: 16
[ 1272.625063][ T8426] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1272.626190][ T8426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1272.626215][ T8426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1272.626237][ T8426] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1272.626290][ T8426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.630150][ T8426] usb 8-1: config 0 descriptor??
[ 1272.864821][T16873] 0x000000000000-0x000000010000 : ""
[ 1272.890300][T16873] ftl_cs: FTL header not found.
[ 1273.168886][ T8426] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0009/input/input46
[ 1273.233690][ T8426] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[ 1273.316436][T14603] Bluetooth: hci7: command tx timeout
[ 1273.407470][ T5337] usb 8-1: USB disconnect, device number 17
[ 1273.414550][   T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1273.454641][ T5725] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1273.616454][   T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1273.617420][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1273.617481][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.634513][ T5725] usb 9-1: Using ep0 maxpacket: 8
[ 1273.637497][ T5725] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1273.637524][ T5725] usb 9-1: no configurations
[ 1273.637536][ T5725] usb 9-1: can't read configurations, error -22
[ 1273.645842][   T10] usb 7-1: config 0 descriptor??
[ 1273.653129][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[ 1273.776964][ T5725] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1273.925156][ T5725] usb 9-1: Using ep0 maxpacket: 8
[ 1273.929143][ T5725] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1273.929178][ T5725] usb 9-1: no configurations
[ 1273.929191][ T5725] usb 9-1: can't read configurations, error -22
[ 1273.932994][ T5725] usb usb9-port1: attempt power cycle
[ 1274.071657][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1274.074753][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[ 1274.101842][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1274.112168][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[ 1274.134899][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[ 1274.145684][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[ 1274.159329][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[ 1274.159923][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[ 1274.164825][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[ 1274.171246][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[ 1274.204542][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[ 1274.208455][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[ 1274.209117][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[ 1274.213094][   T10] pwc: recv_control_msg error -32 req 02 val 2800
[ 1274.239582][T16844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1274.241167][T16844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1274.241326][T16844] bridge_slave_0: entered allmulticast mode
[ 1274.242815][T16844] bridge_slave_0: entered promiscuous mode
[ 1274.275861][T16844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1274.275990][T16844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1274.276150][T16844] bridge_slave_1: entered allmulticast mode
[ 1274.277643][T16844] bridge_slave_1: entered promiscuous mode
[ 1274.305727][ T5725] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1274.333233][ T5725] usb 9-1: Using ep0 maxpacket: 8
[ 1274.335071][ T5725] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1274.335103][ T5725] usb 9-1: no configurations
[ 1274.335115][ T5725] usb 9-1: can't read configurations, error -22
[ 1274.389169][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1274.391762][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1274.420334][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[ 1274.449705][   T10] pwc: Registered as video103.
[ 1274.472767][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input47
[ 1274.475564][ T5725] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1274.489282][   T10] usb 7-1: USB disconnect, device number 22
[ 1274.534323][ T5725] usb 9-1: Using ep0 maxpacket: 8
[ 1274.539049][ T5725] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1274.539080][ T5725] usb 9-1: no configurations
[ 1274.539090][ T5725] usb 9-1: can't read configurations, error -22
[ 1274.540645][ T5725] usb usb9-port1: unable to enumerate USB device
[ 1274.566336][ T5718] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[ 1274.659911][T16844] team0: Port device team_slave_0 added
[ 1274.671665][T16844] team0: Port device team_slave_1 added
[ 1274.729938][ T5718] usb 8-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[ 1274.730911][ T5718] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1274.730975][ T5718] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1274.731028][ T5718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.757847][ T1014] net_ratelimit: 179 callbacks suppressed
[ 1274.769310][ T5718] usb 8-1: config 0 descriptor??
[ 1274.796311][ T5718] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1274.829143][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1274.829153][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1274.829173][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1274.830623][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1274.830632][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1274.830653][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1275.024242][T16844] hsr_slave_0: entered promiscuous mode
[ 1275.032542][T16844] hsr_slave_1: entered promiscuous mode
[ 1275.033146][T16844] debugfs: 'hsr0' already exists in 'hsr'
[ 1275.033160][T16844] Cannot create hsr debugfs directory
[ 1275.322635][   T30] audit: type=1400 audit(1791230116.219:497): avc:  denied  { create } for  pid=16893 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1275.323243][   T30] audit: type=1400 audit(1791230116.219:498): avc:  denied  { write } for  pid=16893 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1275.372107][T16894] syzkaller0: entered promiscuous mode
[ 1275.372131][T16894] syzkaller0: entered allmulticast mode
[ 1275.395039][T14603] Bluetooth: hci7: command tx timeout
[ 1275.450949][T16844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.580975][T16901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16901 comm=syz.8.2766
[ 1277.379728][ T5337] usb 8-1: USB disconnect, device number 18
[ 1277.484845][T14603] Bluetooth: hci7: command tx timeout
[ 1278.555504][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'.
[ 1278.556122][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'.
[ 1278.672789][T16844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.811671][   T30] audit: type=1400 audit(1791230119.709:499): avc:  denied  { ioctl } for  pid=16920 comm="syz.6.2771" path="socket:[54441]" dev="sockfs" ino=54441 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1278.849022][T16844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.922349][T16844] bridge0: port 3(netdevsim0) entered disabled state
[ 1278.945986][T16844] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[ 1278.946008][T16844] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[ 1278.947473][T16844] bridge0: port 3(netdevsim0) entered disabled state
[ 1278.951355][T16844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1279.518754][T16844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1279.535389][ T5337] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1279.555142][T14603] Bluetooth: hci7: command tx timeout
[ 1279.570359][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1279.582326][T16844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1279.604259][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1279.616559][T16844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1279.637411][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1279.639709][T16844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1279.665085][ T8426] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1279.685777][T16931] md: could not open device unknown-block(1,0).
[ 1279.687084][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1279.693868][ T5337] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1279.697554][ T5337] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.697609][ T5337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.705432][ T5337] usb 7-1: config 0 descriptor??
[ 1279.708392][ T5337] pwc: Askey VC010 type 2 USB webcam detected.
[ 1279.812985][T16934] md: personality for level rai is not loaded!
[ 1279.825015][ T8426] usb 9-1: Using ep0 maxpacket: 8
[ 1279.827533][ T8426] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1279.828512][ T8426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.828532][ T8426] usb 9-1: config 0 has no interfaces?
[ 1279.830710][ T8426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1279.830729][ T8426] usb 9-1: Product: syz
[ 1279.830744][ T8426] usb 9-1: Manufacturer: syz
[ 1279.830758][ T8426] usb 9-1: SerialNumber: syz
[ 1279.833290][ T8426] usb 9-1: config 0 descriptor??
[ 1279.879761][  T167] net_ratelimit: 141 callbacks suppressed
[ 1280.063393][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1280.073993][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1280.082664][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1280.098484][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1280.099935][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1280.160314][ T5337] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1280.160957][ T5337] pwc: recv_control_msg error -32 req 02 val 2700
[ 1280.161546][ T5337] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1280.162263][ T5337] pwc: recv_control_msg error -32 req 04 val 1000
[ 1280.164651][ T5337] pwc: recv_control_msg error -32 req 04 val 1300
[ 1280.201186][ T5337] pwc: recv_control_msg error -32 req 04 val 1400
[ 1280.204055][ T5337] pwc: recv_control_msg error -32 req 02 val 2000
[ 1280.217625][ T5337] pwc: recv_control_msg error -32 req 02 val 2100
[ 1280.222318][ T5337] pwc: recv_control_msg error -32 req 04 val 1500
[ 1280.224618][ T5337] pwc: recv_control_msg error -32 req 02 val 2500
[ 1280.239073][ T5337] pwc: recv_control_msg error -32 req 02 val 2400
[ 1280.252184][ T5337] pwc: recv_control_msg error -32 req 02 val 2600
[ 1280.259608][ T5337] pwc: recv_control_msg error -32 req 02 val 2900
[ 1280.265993][ T5337] pwc: recv_control_msg error -32 req 02 val 2800
[ 1280.389508][T16844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1280.459763][   T30] audit: type=1400 audit(1791230121.359:500): avc:  denied  { read } for  pid=16951 comm="syz.7.2778" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1280.460100][   T30] audit: type=1400 audit(1791230121.359:501): avc:  denied  { open } for  pid=16951 comm="syz.7.2778" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1280.461389][   T30] audit: type=1400 audit(1791230121.359:502): avc:  denied  { ioctl } for  pid=16951 comm="syz.7.2778" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1280.461958][   T30] audit: type=1400 audit(1791230121.359:503): avc:  denied  { map } for  pid=16951 comm="syz.7.2778" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1280.472522][ T5337] pwc: recv_control_msg error -71 req 04 val 1200
[ 1280.505533][T16844] 8021q: adding VLAN 0 to HW filter on device team0
[ 1280.509536][ T5337] pwc: Registered as video103.
[ 1280.511202][ T5337] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48
[ 1280.636924][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1280.637006][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1280.675666][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1280.675744][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1280.728043][ T5337] usb 7-1: USB disconnect, device number 23
[ 1281.082602][T16942] lo speed is unknown, defaulting to 1000
[ 1281.386760][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'.
[ 1281.386935][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'.
[ 1281.893637][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1282.194553][T14603] Bluetooth: hci3: command tx timeout
[ 1282.321487][T16844] veth0_vlan: entered promiscuous mode
[ 1282.393125][T16844] veth1_vlan: entered promiscuous mode
[ 1282.494025][ T5337] usb 9-1: USB disconnect, device number 18
[ 1282.744676][T16991] md: could not open device unknown-block(1,0).
[ 1282.746126][T16844] veth0_macvtap: entered promiscuous mode
[ 1282.783023][T16844] veth1_macvtap: entered promiscuous mode
[ 1282.830980][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1282.883719][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1282.984488][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1283.022084][T17001] binder: 17000:17001 ioctl 4018620d 0 returned -22
[ 1283.049321][T16991] md: personality for level rai is not loaded!
[ 1283.331038][T16942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1283.331251][T16942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.331411][T16942] bridge_slave_0: entered allmulticast mode
[ 1283.360422][T16942] bridge_slave_0: entered promiscuous mode
[ 1283.362814][T16942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1283.362886][T16942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.363059][T16942] bridge_slave_1: entered allmulticast mode
[ 1283.391629][T16942] bridge_slave_1: entered promiscuous mode
[ 1283.523637][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1283.523648][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1283.525282][ T7971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1283.534508][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1283.534546][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1283.554502][ T5337] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[ 1283.585430][T16942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1283.588313][T16942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1283.696714][T16942] team0: Port device team_slave_0 added
[ 1283.699133][T16942] team0: Port device team_slave_1 added
[ 1283.737018][ T5337] usb 9-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[ 1283.755200][ T5337] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1283.755254][ T5337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.794267][ T5337] usb 9-1: config 0 descriptor??
[ 1283.804954][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1283.804969][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1283.938601][T16942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1283.938612][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.938634][T16942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1283.954294][ T5337] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1283.968000][T16942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.968009][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.968028][T16942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1283.980243][   T30] audit: type=1400 audit(1791230124.849:504): avc:  denied  { unmount } for  pid=16844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1284.077764][   T30] audit: type=1400 audit(1791230124.979:505): avc:  denied  { mount } for  pid=16844 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1284.288204][T14603] Bluetooth: hci3: command tx timeout
[ 1284.648595][T16942] hsr_slave_0: entered promiscuous mode
[ 1284.649509][T16942] hsr_slave_1: entered promiscuous mode
[ 1284.657875][T16942] debugfs: 'hsr0' already exists in 'hsr'
[ 1284.657888][T16942] Cannot create hsr debugfs directory
[ 1284.904862][   T25] net_ratelimit: 388 callbacks suppressed
[ 1285.427515][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2798'.
[ 1285.615284][   T44] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1285.764535][   T44] usb 8-1: Using ep0 maxpacket: 32
[ 1285.786441][   T44] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1285.808232][   T44] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1285.808288][   T44] usb 8-1: config 0 has no interface number 0
[ 1285.808456][   T44] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1285.808511][   T44] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1285.808562][   T44] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1285.808615][   T44] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1285.910719][T17048] rdma_rxe: rxe_newlink: failed to add lo
[ 1285.955032][   T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1285.978162][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.978213][   T44] usb 8-1: Product: syz
[ 1285.978244][   T44] usb 8-1: Manufacturer: syz
[ 1285.978292][   T44] usb 8-1: SerialNumber: syz
[ 1286.056594][   T44] usb 8-1: config 0 descriptor??
[ 1286.058902][T17040] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1286.104496][   T25] usb 7-1: Using ep0 maxpacket: 16
[ 1286.110316][   T25] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1286.111535][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1286.111561][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1286.111584][   T25] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1286.111609][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1286.111657][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.180123][   T25] usb 7-1: config 0 descriptor??
[ 1286.266624][    C1] raw-gadget.1 gadget.7: ignoring, device is not running
[ 1286.267208][    C1] raw-gadget.1 gadget.7: ignoring, device is not running
[ 1286.291531][   T44] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[ 1286.292390][   T44] ipheth 8-1:0.196: probe with driver ipheth failed with error -71
[ 1286.334663][   T44] usb 8-1: USB disconnect, device number 19
[ 1286.379683][ T5718] usb 9-1: USB disconnect, device number 19
[ 1286.435025][T14603] Bluetooth: hci3: command tx timeout
[ 1286.630333][    C1] raw-gadget.2 gadget.6: ignoring, device is not running
[ 1286.633660][   T25] usbhid 7-1:0.0: can't add hid device: -71
[ 1286.633769][   T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1286.667445][   T25] usb 7-1: USB disconnect, device number 24
[ 1287.472970][   T30] audit: type=1400 audit(1791230128.369:506): avc:  denied  { setopt } for  pid=17068 comm="syz.8.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1287.694948][T16942] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1287.716800][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1287.719063][T16942] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1287.771259][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2812'.
[ 1287.785155][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1287.789471][T16942] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1287.863321][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1287.868687][T16942] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1287.921686][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1288.165553][ T5718] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1288.215427][ T8426] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1288.256347][T16942] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1288.314431][ T5718] usb 8-1: Using ep0 maxpacket: 16
[ 1288.314967][ T5718] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[ 1288.322993][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1288.323018][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1288.323042][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1288.323062][ T5718] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1288.323115][ T5718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.370176][ T5718] usb 8-1: config 0 descriptor??
[ 1288.398991][T16942] 8021q: adding VLAN 0 to HW filter on device team0
[ 1288.414530][ T8426] usb 7-1: Using ep0 maxpacket: 8
[ 1288.415397][ T8426] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1288.417008][ T8426] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.417051][ T8426] usb 7-1: config 0 has no interfaces?
[ 1288.419774][ T8426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1288.419794][ T8426] usb 7-1: Product: syz
[ 1288.419809][ T8426] usb 7-1: Manufacturer: syz
[ 1288.419825][ T8426] usb 7-1: SerialNumber: syz
[ 1288.443902][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1288.443975][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1288.504045][ T8426] usb 7-1: config 0 descriptor??
[ 1288.514951][T14603] Bluetooth: hci3: command tx timeout
[ 1288.576038][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1288.576123][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1288.826972][ T5718] nintendo 0003:057E:2019.000A: unknown main item tag 0x0
[ 1288.827000][ T5718] nintendo 0003:057E:2019.000A: unknown main item tag 0x0
[ 1288.827020][ T5718] nintendo 0003:057E:2019.000A: unknown main item tag 0x0
[ 1288.827041][ T5718] nintendo 0003:057E:2019.000A: unknown main item tag 0x0
[ 1288.827062][ T5718] nintendo 0003:057E:2019.000A: unknown main item tag 0x0
[ 1288.920739][ T5718] nintendo 0003:057E:2019.000A: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0
[ 1288.977146][ T5718] nintendo 0003:057E:2019.000A: Failed to get joycon info; ret=-90
[ 1288.977162][ T5718] nintendo 0003:057E:2019.000A: Failed to retrieve controller info; ret=-90
[ 1288.977198][ T5718] nintendo 0003:057E:2019.000A: Failed to initialize controller; ret=-90
[ 1289.041819][ T5718] nintendo 0003:057E:2019.000A: probe - fail = -90
[ 1289.041934][ T5718] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -90
[ 1289.290872][   T10] usb 8-1: USB disconnect, device number 20
[ 1290.034399][    C0] net_ratelimit: 181 callbacks suppressed
[ 1290.179997][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1290.392693][   T30] audit: type=1400 audit(1791230131.289:507): avc:  denied  { mount } for  pid=17152 comm="syz.8.2825" name="/" dev="overlay" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1290.590336][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2827'.
[ 1290.747564][T17163] kobject: 'syzkaller0' (ffff88801f3d07c0): kobject_cleanup, parent 0000000000000000
[ 1290.747585][T17163] kobject: 'syzkaller0' (ffff88801f3d07c0): calling ktype release
[ 1290.747625][T17163] kobject: 'syzkaller0': free name
[ 1290.749041][T16942] veth1_vlan: bond_netdev_event received NETDEV_UP
[ 1290.749106][T16942] net veth1_vlan: siw: event 1
[ 1290.749315][T16942] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 1290.749418][  T167] veth1_vlan: bond_netdev_event received NETDEV_CHANGE
[ 1290.749439][  T167] net veth1_vlan: siw: event 4
[ 1290.749456][  T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1290.751698][T17164] kcov: kcov_task_exit: t = ffff8880573b8000, kcov->t = ffff8880573b8000
[ 1290.753162][  T167] veth0_vlan: bond_netdev_event received NETDEV_CHANGE
[ 1290.753239][  T167] net veth0_vlan: siw: event 4
[ 1290.753260][  T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1290.754366][    C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10)
[ 1290.754822][   T31] INFO: task syz.5.1829:14304 blocked for more than 143 seconds.
[ 1290.754839][   T31]       Not tainted syzkaller #0
[ 1290.754849][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1290.754857][   T31] task:syz.5.1829      state:D stack:27928 pid:14304 tgid:14303 ppid:6505   task_flags:0x400140 flags:0x00080002
[ 1290.754913][   T31] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1290.754920][   T31]  <TASK>
[ 1290.754931][   T31]  __schedule+0x1259/0x6920
[ 1290.754954][   T31]  ? __lock_acquire+0x5c0/0x1f40
[ 1290.754988][   T31]  ? do_raw_spin_lock+0x128/0x260
[ 1290.755018][   T31]  ? lock_acquire+0x1d1/0x380
[ 1290.755039][   T31]  ? __pfx___schedule+0x10/0x10
[ 1290.755054][   T31]  ? find_held_lock+0x2b/0x80
[ 1290.755083][   T31]  ? schedule+0x225/0x2c0
[ 1290.755104][   T31]  schedule+0xdd/0x2c0
[ 1290.755121][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1290.755138][   T31]  __mutex_lock+0xccb/0x1bd0
[ 1290.755158][   T31]  ? write_ports+0xa5/0xcc0
[ 1290.755183][   T31]  ? nfsctl_transaction_write+0xcd/0x1a0
[ 1290.755206][   T31]  ? ksys_write+0x12a/0x250
[ 1290.755226][   T31]  ? do_syscall_64+0x123/0x790
[ 1290.755246][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1290.755274][   T31]  ? __lock_acquire+0x5c0/0x1f40
[ 1290.755295][   T31]  ? write_ports+0xa5/0xcc0
[ 1290.755318][   T31]  write_ports+0xa5/0xcc0
[ 1290.755343][   T31]  ? __pfx_write_ports+0x10/0x10
[ 1290.755368][   T31]  ? lock_acquire+0x1d1/0x380
[ 1290.755387][   T31]  ? __might_fault+0xc5/0x140
[ 1290.755403][   T31]  ? find_held_lock+0x2b/0x80
[ 1290.755428][   T31]  ? __might_fault+0xc5/0x140
[ 1290.755445][   T31]  ? __might_fault+0xc5/0x140
[ 1290.755465][   T31]  ? __pfx_write_ports+0x10/0x10
[ 1290.755492][   T31]  ? _copy_from_user+0x59/0xd0
[ 1290.755518][   T31]  ? __pfx_write_ports+0x10/0x10
[ 1290.755542][   T31]  nfsctl_transaction_write+0x106/0x1a0
[ 1290.755570][   T31]  vfs_write+0x2aa/0x1050
[ 1290.755592][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1290.755618][   T31]  ? lock_acquire+0x1d1/0x380
[ 1290.755639][   T31]  ? __fget_files+0x34/0x3d0
[ 1290.755665][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1290.755685][   T31]  ? find_held_lock+0x2b/0x80
[ 1290.755713][   T31]  ? __fget_files+0x215/0x3d0
[ 1290.755743][   T31]  ? __fget_files+0x21f/0x3d0
[ 1290.755776][   T31]  ksys_write+0x12a/0x250
[ 1290.755798][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1290.755828][   T31]  do_syscall_64+0x123/0x790
[ 1290.755852][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1290.755871][   T31] RIP: 0033:0x7f6d23d9e199
[ 1290.755886][   T31] RSP: 002b:00007f6d24cfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1290.755900][   T31] RAX: ffffffffffffffda RBX: 00007f6d24025fa0 RCX: 00007f6d23d9e199
[ 1290.755911][   T31] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1290.755922][   T31] RBP: 00007f6d23e350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1290.755933][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1290.755943][   T31] R13: 00007f6d24026038 R14: 00007f6d24025fa0 R15: 00007ffd5cad49c8
[ 1290.755972][   T31]  </TASK>
[ 1290.755981][   T31] INFO: task syz.5.1829:14305 blocked for more than 143 seconds.
[ 1290.755993][   T31]       Not tainted syzkaller #0
[ 1290.756002][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1290.756009][   T31] task:syz.5.1829      state:D stack:27944 pid:14305 tgid:14303 ppid:6505   task_flags:0x400040 flags:0x00080002
[ 1290.756059][   T31] Call Trace:
[ 1290.756064][   T31]  <TASK>
[ 1290.756074][   T31]  __schedule+0x1259/0x6920
[ 1290.756090][   T31]  ? __lock_acquire+0x5c0/0x1f40
[ 1290.756113][   T31]  ? do_raw_spin_lock+0x128/0x260
[ 1290.756139][   T31]  ? lock_acquire+0x1d1/0x380
[ 1290.756159][   T31]  ? __pfx___schedule+0x10/0x10
[ 1290.756174][   T31]  ? find_held_lock+0x2b/0x80
[ 1290.756198][   T31]  ? schedule+0x225/0x2c0
[ 1290.756217][   T31]  schedule+0xdd/0x2c0
[ 1290.756234][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1290.756250][   T31]  __mutex_lock+0xccb/0x1bd0
[ 1290.756268][   T31]  ? write_threads+0x288/0x600
[ 1290.756297][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1290.756317][   T31]  ? simple_strntoull+0xdf/0x170
[ 1290.756341][   T31]  ? net_generic+0x25/0x2a0
[ 1290.756364][   T31]  ? net_generic+0xea/0x2a0
[ 1290.756385][   T31]  ? net_generic+0xea/0x2a0
[ 1290.756413][   T31]  ? write_threads+0x288/0x600
[ 1290.756435][   T31]  write_threads+0x288/0x600
[ 1290.756460][   T31]  ? __pfx_write_threads+0x10/0x10
[ 1290.756483][   T31]  ? __might_fault+0xc5/0x140
[ 1290.756501][   T31]  ? __might_fault+0xc5/0x140
[ 1290.756525][   T31]  ? _copy_from_user+0x59/0xd0
[ 1290.756547][   T31]  ? __pfx_write_threads+0x10/0x10
[ 1290.756571][   T31]  nfsctl_transaction_write+0x106/0x1a0
[ 1290.756595][   T31]  vfs_write+0x2aa/0x1050
[ 1290.756614][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1290.756636][   T31]  ? lock_acquire+0x1d1/0x380
[ 1290.756790][   T31]  ? __fget_files+0x34/0x3d0
[ 1290.756812][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1290.756830][   T31]  ? find_held_lock+0x2b/0x80
[ 1290.756854][   T31]  ? __fget_files+0x215/0x3d0
[ 1290.756880][   T31]  ? __fget_files+0x21f/0x3d0
[ 1290.756908][   T31]  ksys_write+0x12a/0x250
[ 1290.756927][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1290.756953][   T31]  do_syscall_64+0x123/0x790
[ 1290.756981][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1290.756998][   T31] RIP: 0033:0x7f6d23d9e199
[ 1290.757011][   T31] RSP: 002b:00007f6d24cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1290.757026][   T31] RAX: ffffffffffffffda RBX: 00007f6d24026090 RCX: 00007f6d23d9e199
[ 1290.757038][   T31] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[ 1290.757048][   T31] RBP: 00007f6d23e350b8 R08: 0000000000000000 R09: 0000000000000000
[ 1290.757059][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1290.757069][   T31] R13: 00007f6d24026128 R14: 00007f6d24026090 R15: 00007ffd5cad49c8
[ 1290.757092][   T31]  </TASK>
[ 1290.757126][   T31] 
[ 1290.757126][   T31] Showing all locks held in the system:
[ 1290.757134][   T31] locks held by kworker/u8:0/12: 3, on CPU#1:
[ 1290.757147][   T31]  #0: ffff88801c1d2140 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1290.757195][   T31]  #1: ffffc90000117d08 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1290.757242][   T31]  #2: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: cls_bpf_delete_prog_work+0x20/0x170
[ 1290.757288][   T31] locks held by pr/ttyS0/16: 2, last CPU#1:
[ 1290.757300][   T31]  #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[ 1290.757343][   T31]  #1: ffffffff9bc76f78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[ 1290.757385][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[ 1290.757397][   T31]  #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1290.757447][   T31] locks held by kworker/u8:7/167: 3, last CPU#0:
[ 1290.757459][   T31]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1290.757504][   T31]  #1: ffffc90002e87d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1290.757549][   T31]  #2: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1290.757605][   T31] locks held by klogd/4960: 1, last CPU#1:
[ 1290.757617][   T31]  #0: ffffffff8efcb2a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x63/0x6d0
[ 1290.757656][   T31] locks held by kworker/0:3/5337: 3, last CPU#0:
[ 1290.757668][   T31]  #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1290.757712][   T31]  #1: ffffc90004667d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1290.757758][   T31]  #2: ffff88807d110250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330
[ 1290.757800][   T31] locks held by getty/5359: 2, on CPU#0:
[ 1290.757811][   T31]  #0: ffff8880233f40a0 (&tty->ldisc_sem){++++}-{0:0}
[ 1290.783308][T17167] kcov: kcov_start: t = ffff88807dfd4b00, size = 524288, area = ffffc900287d9000
[ 1290.801663][   T31] , at: tty_ldisc_ref_wait+0x24/0x80
[ 1290.801691][   T31]  #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1290.801736][   T31] locks held by syz-executor/5601: 2, on CPU#1:
[ 1290.801748][   T31]  #0: ffff888043e2c0e8 (&type->s_umount_key#76){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[ 1290.801794][   T31]  #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1290.801845][   T31] locks held by kworker/u8:23/7971: 3, on CPU#0:
[ 1290.801857][   T31]  #0: ffff888034850940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1290.801906][   T31]  #1: ffffc900037efd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1290.801953][   T31]  #2: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[ 1290.802004][   T31] locks held by syz.0.1828/14300: 3, on CPU#1:
[ 1290.802016][   T31]  #0: ffff88802a31bcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1290.802061][   T31]  #1: ffff88808b5d0460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1290.802104][   T31]  #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[ 1290.802148][   T31] locks held by syz.5.1829/14304: 3, on CPU#0:
[ 1290.802160][   T31]  #0: ffff888027602630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1290.802203][   T31]  #1: ffff88806902a460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1290.802245][   T31]  #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[ 1290.802288][   T31] locks held by syz.5.1829/14305: 3, on CPU#0:
[ 1290.802299][   T31]  #0: ffff888027602470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1290.802342][   T31]  #1: ffff88806902a460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1290.802384][   T31]  #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[ 1290.802434][   T31] locks held by syz-executor/16942: 1, last CPU#1:
[ 1290.802445][   T31]  #0: ffffffff90cd4cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[ 1290.802492][   T31] locks held by syz.7.2824/17144: 4, on CPU#1:
[ 1290.802503][   T31]  #0: ffffffff90d843c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1290.802546][   T31]  #1: ffffffff90d84480 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800
[ 1290.802593][   T31]  #2: ffff888024748140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x2f/0x3a0
[ 1290.802635][   T31]  #3: ffff88808584a348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0x9a/0x680
[ 1290.802681][   T31] locks held by syz.8.2828/17164: 2, last CPU#1:
[ 1290.802690][T16942] Insert table=255 ac141432/32
[ 1290.802693][   T31]  #0: 
[ 1290.802824][T16942] In tnode_resize ffff8880353c8520 inflate_threshold=50 threshold=25
[ 1290.802843][T16942] In inflate
[ 1290.802863][T16942] AT ffff888057fdc000 s=40 256
[ 1290.802978][T16942] In tnode_resize ffff88803840c220 inflate_threshold=50 threshold=25
[ 1290.802994][T16942] In tnode_resize ffff88802c9372a0 inflate_threshold=50 threshold=25
[ 1290.803112][T16942] Insert table=254 ac141400/24
[ 1290.803243][T16942] Insert table=255 ac1414ff/32
[ 1290.806556][ T8047] vlan0: bond_netdev_event received NETDEV_CHANGE
[ 1290.806584][ T8047] net vlan0: siw: event 4
[ 1290.806605][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1290.808852][ T8047] vlan1: bond_netdev_event received NETDEV_CHANGE
[ 1290.808871][ T8047] net vlan1: siw: event 4
[ 1290.808886][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1290.872227][   T31] ffff88802c584cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[ 1290.872281][   T31]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[ 1290.877125][    C0] virtqueue callback for ffff8880279c5a00 (ffffffff86ec9710)
[ 1290.877155][    C0] No more buffers in queue
[ 1290.877528][    C0] Receiving skb proto 0x0800 len 108 type 0
[ 1290.877552][    C0] No more buffers in queue
[ 1290.877771][    C0] eth0: xmit ffff8880562a63c0 42:01:0a:80:00:01
[ 1290.877795][    C0] Added buffer head 20 to ffff8880279c5800
[ 1290.877817][    C0] virtqueue callback for ffff8880279c5800 (ffffffff86ed24c0)
[ 1290.877837][    C0] Sent skb ffff8880562a63c0
[ 1290.877870][    C0] No more buffers in queue
[ 1290.889581][   T31] 
[ 1290.889590][   T31] =============================================
[ 1290.889590][   T31] 
[ 1290.889598][   T31] NMI backtrace for cpu 0
[ 1290.889609][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1290.889628][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1290.889638][   T31] Call Trace:
[ 1290.889644][   T31]  <TASK>
[ 1290.889651][   T31]  dump_stack_lvl+0x100/0x190
[ 1290.889679][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1290.889705][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1290.889726][   T31]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 1290.889755][   T31]  sys_info+0x141/0x190
[ 1290.889776][   T31]  watchdog+0xcb1/0x1030
[ 1290.889800][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1290.889817][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1290.889837][   T31]  ? __kthread_parkme+0x18f/0x230
[ 1290.889860][   T31]  ? kthread+0x13a/0x450
[ 1290.889891][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1290.889908][   T31]  kthread+0x373/0x450
[ 1290.889929][   T31]  ? __pfx_kthread+0x10/0x10
[ 1290.889953][   T31]  ret_from_fork+0x730/0xd60
[ 1290.889977][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1290.889997][   T31]  ? __switch_to+0x800/0x10f0
[ 1290.890020][   T31]  ? __pfx_kthread+0x10/0x10
[ 1290.890044][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1290.890071][   T31]  </TASK>
[ 1290.890077][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1290.890098][    C1] NMI backtrace for cpu 1
[ 1290.890108][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1290.890125][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1290.890134][    C1] RIP: 0010:wait_for_lsr+0x13c/0x210
[ 1290.890155][    C1] Code: 48 8b 44 24 08 0f b7 9d e8 02 00 00 42 80 3c 38 00 0f 85 c2 00 00 00 48 8b 45 50 be 05 00 00 00 48 89 ef e8 da a3 4e 1a 09 c3 <48> 8b 04 24 48 c1 e8 03 42 0f b6 04 38 38 44 24 23 7c 08 84 c0 0f
[ 1290.890169][    C1] RSP: 0018:ffffc90000157978 EFLAGS: 00000046
[ 1290.890182][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1290.890191][    C1] RDX: 00000000000003fd RSI: ffffffff85b1ca00 RDI: ffffffff9bc76fa0
[ 1290.890201][    C1] RBP: ffffffff9bc76f60 R08: 0000000000000001 R09: 000000000000001f
[ 1290.890211][    C1] R10: 0000000000000000 R11: 205d313354202020 R12: 00000000000007ef
[ 1290.890220][    C1] R13: 0000000000000020 R14: fffffbfff378ee49 R15: dffffc0000000000
[ 1290.890230][    C1] FS:  0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000
[ 1290.890245][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1290.890255][    C1] CR2: 00007fc720a29d58 CR3: 00000000801d7000 CR4: 00000000003526f0
[ 1290.890265][    C1] Call Trace:
[ 1290.890270][    C1]  <TASK>
[ 1290.890278][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[ 1290.890301][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[ 1290.890320][    C1]  ? __pfx_io_serial_out+0x10/0x10
[ 1290.890339][    C1]  serial8250_console_write+0xf46/0x1330
[ 1290.890356][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1290.890370][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[ 1290.890388][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[ 1290.890406][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[ 1290.890423][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 1290.890438][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[ 1290.890452][    C1]  ? do_raw_spin_lock+0xf0/0x260
[ 1290.890480][    C1]  ? __pfx___cant_migrate+0x10/0x10
[ 1290.890498][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[ 1290.890519][    C1]  nbcon_emit_one+0x1a8/0x2b0
[ 1290.890533][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[ 1290.890550][    C1]  nbcon_kthread_func+0x613/0x7d0
[ 1290.890567][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1290.890584][    C1]  ? __kthread_parkme+0x18f/0x230
[ 1290.890602][    C1]  ? kthread+0x13a/0x450
[ 1290.890620][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1290.890637][    C1]  kthread+0x373/0x450
[ 1290.890658][    C1]  ? __pfx_kthread+0x10/0x10
[ 1290.890676][    C1]  ret_from_fork+0x730/0xd60
[ 1290.890692][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1290.890710][    C1]  ? __switch_to+0x800/0x10f0
[ 1290.890731][    C1]  ? __pfx_kthread+0x10/0x10
[ 1290.890750][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1290.890769][    C1]  </TASK>
[ 1290.908264][    C0] virtqueue callback for ffff8880279c5a00 (ffffffff86ec9710)
[ 1290.908295][    C0] No more buffers in queue
[ 1290.908623][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1290.908644][    C0] No more buffers in queue
[ 1290.915221][ T5588] eth0: xmit ffff88807e87c5f0 42:01:0a:80:00:01
[ 1290.915250][ T5588] Added buffer head 20 to ffff8880279c5800
[ 1290.915284][    C0] virtqueue callback for ffff8880279c5800 (ffffffff86ed24c0)
[ 1290.915306][    C0] Sent skb ffff88807e87c5f0
[ 1290.915320][    C0] No more buffers in queue
[ 1290.917168][    C1] virtqueue callback for ffff8880279c5600 (ffffffff86ec9710)
[ 1290.917473][    C1] No more buffers in queue
[ 1290.917759][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 1290.917780][    C1] No more buffers in queue
[ 1290.923443][T17142] nfc: nfc_unregister_rfkill: dev_name=nfc2
[ 1290.964455][    C0] eth0: xmit ffff888036a57dc0 42:01:0a:80:00:01
[ 1290.964486][    C0] Added buffer head 20 to ffff8880279c5800
[ 1290.964541][    C0] virtqueue callback for ffff8880279c5800 (ffffffff86ed24c0)
[ 1290.964594][    C0] Sent skb ffff888036a57dc0
[ 1290.964629][    C0] No more buffers in queue
[ 1290.966823][T17093] raw-gadget.1 gadget.6: event fetching interrupted
[ 1290.966843][T17093] kcov: kcov_task_exit: t = ffff888031c3cb00, kcov->t = ffff888031c3cb00
[ 1291.048053][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1292.553989][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1292.563081][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1292.573120][   T31] Call Trace:
[ 1292.576380][   T31]  <TASK>
[ 1292.579308][   T31]  dump_stack_lvl+0x100/0x190
[ 1292.583980][   T31]  vpanic+0x553/0x970
[ 1292.587942][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1292.592432][   T31]  panic+0xd1/0xe0
[ 1292.596133][   T31]  ? __pfx_panic+0x10/0x10
[ 1292.600531][   T31]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 1292.606675][   T31]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 1292.612817][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1292.617567][   T31]  watchdog.cold+0x1fd/0x234
[ 1292.622144][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1292.627934][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1292.632598][   T31]  ? __kthread_parkme+0x18f/0x230
[ 1292.637611][   T31]  ? kthread+0x13a/0x450
[ 1292.641844][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1292.646517][   T31]  kthread+0x373/0x450
[ 1292.650578][   T31]  ? __pfx_kthread+0x10/0x10
[ 1292.655157][   T31]  ret_from_fork+0x730/0xd60
[ 1292.659732][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1292.664825][   T31]  ? __switch_to+0x800/0x10f0
[ 1292.669489][   T31]  ? __pfx_kthread+0x10/0x10
[ 1292.674066][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1292.678822][   T31]  </TASK>
[ 1292.682016][   T31] Kernel Offset: disabled
[ 1292.686315][   T31] Rebooting in 86400 seconds..