last executing test programs:

9.671993948s ago: executing program 2 (id=1785):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
read(r0, &(0x7f0000000300)=""/212, 0xd4)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
clock_gettime(0x2, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

8.696341962s ago: executing program 2 (id=1790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfeff, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

7.705779654s ago: executing program 0 (id=1795):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005511b308d8130100dfda000000010902120001000000000904cf"], 0x0)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r2 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000))
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x1)
r3 = socket(0x10, 0x3, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$rose(r3, 0x104, 0x6, &(0x7f0000000040)=0x4, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
fremovexattr(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00"/15, @ANYRES16=r1])
write$binfmt_misc(r4, &(0x7f0000000280)="ab4c6559f50bab1335944de0e7ed0a598fddb45d3fa45f6b10292ad3aed39ab722ba9512537d8a775eeb77f8d28fc0baada5e35abf36e1cf7114937d85d20cb57a8b78e605fc499443fa2d84ff7f6d97bfd45ed24fe6c5383f86ef859f144c56e80439f2a513b8d588eebb53528eafa004cfda05603b35d2cf8a3f04c4dca5ab4a89c394987a77b6958b4d8df76a82143ad3b22bb311061a24e81bb11250fb5d26f9146707c7e9c85025e8b08c0a2edcfc61941837d3f6ca70bf2efd925711f1f62b187e79412d098da8476c580258e76d31404b4462caec5c67219e1134b0957986756a67742b7cb36f4b6788", 0xff7f)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r5, 0x0, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000000)={0x1, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000500)={0x0, @win={{0x100, 0x6, 0xc0, 0xffffff12}, 0x6, 0x1, &(0x7f0000000440)={{0x8, 0x80000001, 0x2}, &(0x7f0000000400)={{0x3, 0x800, 0x2, 0x53}, &(0x7f00000003c0)={{0x4, 0x4, 0x10000044, 0x10f31}}}}, 0x571, &(0x7f0000000480)="01c6f787029c87eec1b74621d0c9fa62a8f64886dd3fbbb3f96e617297aad3ee01bd059e465ef317ddb721272a7aebc928b032a3f6a9615aa477ddc2b4112adf38724b388a5f70393e69f37e9d9c0b30c0e6d6b676760d09e3da0eafd7524fee5ac6906ee7cd4b71b6eeb25f", 0x2}})

7.503253126s ago: executing program 2 (id=1798):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
r2 = memfd_create(&(0x7f0000000b40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14Qo$\x8e\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xea\x87\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t\x86\xbf\xe5<#q\xfdr\xef\x05\x1e\xf91CK}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\xdfn\x84\xd5\xb0\xee\xb3\x06m\xaa\xbba \fN\xef\x18\x0e\xa9\xd6=\xe7\xec\x19\xfe\x1ad\xd5b\xb5\x15Bv^\x1a\a\xbfs\x93\x1c\x90\x96)\x01\x02T\x03\xa6J\xfc\xfbm\x85\x80\x8dk\x85\x82\x97\xeaX\xc2\xcc\x96\x02x5Q\xf0\x83\xa2p\x96\x1a\xee\xb7\xb2\x8cNc\xd7\xb6\xd8E`o;d\xc7A\xee,\x11\xc3#\xf7\xa7\x93\xc0/\x199#\x13\x05\\G&\xe0\xd4M#\"\xb9\x85\xee?\xe4\xcf\x98\xe7\x14\x12\xbf\x8f\x0e6l\xfc\xc4|\xc4\x89\xfa\xad!\x1c\x1aC\x8f\x9b\xcd\xfa\xe7F\xdc\xe4\x12\n\xe75\xdf\xf1\x94\xe9j%+\xcdF\xb8\x1d\xcd$&pK\xf4\x1fiP\xd4\xaf8\xa0\xc1D\x1a)o', 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0xb, 0x2, "b0a5167f285112518746b024bf91f21d15e3c01efb90710e68bda82ec4a856bd", 0x32315258})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6c21, 0x80, 0x0, 0x82}, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000840)=<r7=>0x0)
r8 = syz_clone(0x0, &(0x7f0000000440)="98791faa7b9c49e7308717028742b270cd7e5ee9dbb499a69de2b65b1d8a8ef42ef10159184104147d6b2e53e700990ad021a88f40e7f5e01d88e8415dfc7a9f8f9fb729f99efc43f1edf4ec7ad3d4aa04792e91b00cf851b843e33826", 0x5d, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f00000004c0)="4bcc268e65e8d2faf60bfbf6534d2f982c374bee13db3e168b67fc39c394a0074d66c8d2f69378b27d071203e0aee3876cf8b8edfb621b095c568520816e985616ab6e8f1bfbbdd0a3e5d824ac91bd682893f362bcafd76ff5d8bfcb754a78")
fcntl$setown(r0, 0x8, r8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7c9, 0x10, &(0x7f0000000400))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r9)
sendmsg$NFC_CMD_ENABLE_SE(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004)
readlink(0x0, 0x0, 0x0)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xd, 0x0, 0xffffffffffffffff, 0x1f5e0305, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x331240)

7.405753042s ago: executing program 4 (id=1801):
socket$rxrpc(0x21, 0x2, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=<r2=>0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000400)=""/26, 0x1a}], 0x4}}, {{&(0x7f00000007c0)=@caif=@rfm, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/123, 0x7b}, 0x5}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/5, 0x5}, {&(0x7f0000000b00)=""/73, 0x49}, {&(0x7f0000000b80)=""/97, 0x61}], 0x5, &(0x7f0000000c80)=""/135, 0x87}, 0x1}, {{&(0x7f00000013c0)=@can, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)=""/146, 0x92}], 0x1}, 0x7ff}, {{&(0x7f0000001540)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001940)=[{&(0x7f00000015c0)=""/219, 0xdb}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/211, 0xd3}, {&(0x7f00000017c0)=""/156, 0x9c}, {&(0x7f0000001880)=""/58, 0x3a}, {&(0x7f00000018c0)=""/65, 0x41}], 0x6, &(0x7f00000019c0)=""/158, 0x9e}, 0x8}, {{&(0x7f0000001a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001b00)}, 0x7}], 0x6, 0x80010060, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff2, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x42f2a6166aa24f20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0)
fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', r2, 0x0, 0x1000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa4", 0x3f}], 0x1}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10)
sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
poll(&(0x7f0000000040), 0x200000000000028d, 0xfffffff9)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340))
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
r8 = dup(r7)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8})

7.1564556s ago: executing program 2 (id=1802):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1e, 0x82, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557", &(0x7f0000000500)=""/130, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8000, 0x1}, 0x50)
getpid()
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0xd76f)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009)
fallocate(r5, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)

5.96824836s ago: executing program 4 (id=1805):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000125900))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000125b00)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000128dc0)={0x7, [], 0x0, "84c8e7293114ab"})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.604568642s ago: executing program 4 (id=1807):
socket(0x1d, 0x2, 0x6)
syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
close(0x3)
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffff9)
userfaultfd(0x801)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000003, 0x0, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000045590c1e31503e44577085b35e066bca53dd9a399430c1ef5b8b9b3b34e9bb3b8da9c02bc0ee630ace7973bdc32f9da7711ebb44897dba122d5e619395f6d77db8acbd468e2124a7cb07f0e5ffd969f8b488f572b7bdc98331a91a62d7a6a6912d9ae3bd865bbf820e361f49a5113b3a5a17051bb9b2e3fbef2bfefe9fb2664f335f762892868d679feef2e23a06c10b0eeca64b9022206f2fe01ba19a78053064d9fd42431979a7907915b1d0c7f5fbf681381ac161248e58497281b47517c7a42e6a58b617a9114a9a5f60d81b6b5e83bc3fc1bbf8b276e75fcdf3a0e8ee309458b9923e", @ANYRES16=r5, @ANYBLOB="05002bbd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000001c00e7004551df1ed02fde356dca143bb74202e4a6798329958fde5a"], 0x40}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x60, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
waitid$P_PIDFD(0x3, r3, 0x0, 0x4, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020)

5.336492888s ago: executing program 3 (id=1808):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="d50000000000000000000000000d00006119940000000000950000000000000033266df350ceb4e0855168"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0)
r2 = dup3(r0, r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0))
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0600dd0000ec0000000003175cccc88c38c126562387df23b8022528f74987fa4da4ea598df0b70f780b2915c516e80b5463b972196a843e7bad2e976ea4ab7badc4531cbc147ef92c1a6160389c2ef1b111cc92947954b63ab209c977e3f18cc132450ad997849c10baff6c8a8dd04c937937ce4b20e7546b69943f0e6912124240c8220dfe10d0abf0fdd272ffecf42dd70a6b3237847f16b73258a39615795fa967ae70d95e4aefc144"], 0x14}}, 0x4084)

5.284956678s ago: executing program 0 (id=1809):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x1f4, 0x0, 0x0, 0x0, 0x300}, 0x9c)

5.248439234s ago: executing program 0 (id=1810):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async, rerun: 64)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) (rerun: 64)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x9, 0x200, 0x1832}) (async)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r2, 0x100000000) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xa826, 0x100, 0x4000000, 0x1a}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000600)=<r7=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (rerun: 32)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x6f, 0x6, "a04e94ba046c3f88aa09298cf13845be50adccecd9c0a236008c0eacd927b58ca8d1df3408f901291a21a2eb77ed455d953924889be91ef4895c83d83cb2233ab2fe30e0bf7f11082495a7927a869b774ef3124eced6103f9bb8960d43cdd7170595f79dd7bd8994165cc8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0xc, 0x6, "b875ad3613d7af08"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0xbc, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "5ccb4647232c8574b5d22bcb2b5382b4465e487f346d19c32f0d20d1514d4a3631101c89ac44b4d0cf04"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x48, 0x6, "a64b17c0f27a773955a7269e6b76dbf67f46f355e986db258bf72bded4f579c52cdedc6e37a1891decabf6dfdc3339a6101003bf6e18d931752969ba2eeb9c77e121d5ce"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x2c, 0xc, "307c51a681d1be93c735b77f7074b46a34bf673e0960aef461b69308071cebaa9aa220e4c2890901"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x4010}, 0x8010)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14000000000000000000110000000000000000000a00ff7f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@mcast1, 0x0, 0xa}}, @migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xcc}}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x32263, 0x1, {0x1}}) (async)
io_uring_enter(r5, 0x3516, 0xf400, 0x0, 0x0, 0x0)

5.196450047s ago: executing program 1 (id=1811):
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000001000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

5.175192557s ago: executing program 0 (id=1812):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x40007, 0x1, 0x1, 0x2}, 0x20)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
sysinfo(&(0x7f0000000340)=""/193)
r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
sendto$inet6(r4, &(0x7f0000000240)=':', 0xfffffdfe, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x2, 0x0)
connect$802154_dgram(r5, &(0x7f0000000200)={0x2, @long}, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
shutdown(r4, 0x1)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4d})

4.769943512s ago: executing program 1 (id=1813):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
read(r0, &(0x7f0000000300)=""/212, 0xd4)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
clock_gettime(0x2, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

4.480174882s ago: executing program 4 (id=1814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000088c}, 0x640088c0)
close(r1)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0, 0xfffffffffffffc88}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0xdddd0000, 0x391000, 0x8})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x17c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x42}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "0b70300c40f378db21493b8adde7fba7d4222bff4ab7d8b8468f1e939d1007000000047d773aa413421527cb498b861a2e22a678db82270dbed8d4df060000000b"}}]}, 0x17c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x6}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x80000000}, {0x7}, {0xfffffffc}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000, 0x100, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x1, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe, 0x2}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x0, 0x2}, {0x0, 0xcb1, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd28d}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x200002}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x70}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x391a04c0a5f5edad}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'wlan0\x00', 0x8000})

4.479761569s ago: executing program 3 (id=1815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4, <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"ca7692adb4080f7bc6500ec1af0b23d9612a76787c60992c5e9057e7ebce5cc3", r5})
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)

4.40323752s ago: executing program 1 (id=1816):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
close(0xffffffffffffffff)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close(r7)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c)
ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000400))
msgget$private(0x0, 0x4a0)

4.275522462s ago: executing program 0 (id=1817):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xcc, &(0x7f00000004c0)=ANY=[], 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4.208276609s ago: executing program 4 (id=1818):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, 0x0)
ioctl$SIOCNRDECOBS(r3, 0x89e2)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e24, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0xfff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_open_dev$vim2m(&(0x7f0000000580), 0x200, 0x2)
syz_usb_connect(0x3, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)

3.2256129s ago: executing program 0 (id=1819):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000011009500000400000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, &(0x7f0000000040)=""/74, 0x4a)
writev(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)="31b69e", 0x3}], 0x1)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)

3.223315924s ago: executing program 2 (id=1820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1)
socket(0x10, 0x3, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4900537e895cad28ed75a78180d9628a3688f6bd92baa119e8b96109ac8324ae96e0a44b9690415af9355caba6188240d451389ad66b81296622a21c01c49da552b8679f1921875324df80e92fa160f0f39baac44082d32bfd56af4ca2802d7b5a1d3e1f96325f4b8eed7da952738a7c2d34544fa70c570aa", @ANYRES32=r9, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb0500040080000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

2.145860244s ago: executing program 1 (id=1821):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x101001)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20)
finit_module(r1, 0x0, 0x3)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000680)={0x9, @capture={0x0, 0x0, {0x8001, 0x8}, 0x35fa529a, 0x7fff}})
fsopen(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = gettid()
socket$packet(0x11, 0x2, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000906010200000000000000000000000009000200000100000000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

2.07303624s ago: executing program 3 (id=1822):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/4, &(0x7f0000000340)=0x4)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0xd)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x1, 0x9, 0x8, 0x3, 0x8000000000002, 0x2, 0xb, 0x4b75, 0x10000, 0x1, 0x9, 0x2})
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000200)=0xb6)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8009, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x10, 0x1, 0x3, "7e0efeac3d4fd6e0c46a2ca55aab2500b482b200f475a8f64100", 0x47425247})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000000)={0xf00001, 0x8})

1.968308114s ago: executing program 3 (id=1823):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xcc, &(0x7f00000004c0)=ANY=[], 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.841795194s ago: executing program 2 (id=1824):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x38, {0x38, 0xb, "f46d0322dec6d05d2e418c0ad7a89e192ec574143fe4499fa8a980dd94093752ed544560a0fe3d894bae65b63c53b3756e8adc54b170"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x60, 0xd, 0xab, "a6fc17ad21fe24619dedee72e0761b8c07bceda682b54ed576dc14a351d2e6b8ce9387531f64d53b93c30b6754bfa5f39abc54c19514cc6a8f699968710514c7e54abbca206378e1f3f2ddf795a6ac2a71628fa859b9c2db8374a1e676acb3d34521c984efdd5517d9cf910ba0aa9fddc1c5ab275d3c1359babb4442c899a3ea2f10e70dbd0c5c4a23aa69f3cf10b807ac092631bd6b248ad893f2f1f2eed6d27de93294976c03d2be3205"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "df96250c79602645bc18c514946a75b9f4c1e155a5ae518f989e95fafde9e29310d8c8dfb48b5262a43eb2455c043d"}})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x10, 0x68, 0xa}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0xc851}, 0x800)

1.282822329s ago: executing program 1 (id=1825):
r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, &(0x7f0000000000)=0xf15c, 0x7, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x6, 0x2000006})

1.212290613s ago: executing program 1 (id=1826):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
read(r0, &(0x7f0000000300)=""/212, 0xd4)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
clock_gettime(0x2, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1.068399303s ago: executing program 3 (id=1827):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
getpgrp(r0)
setrlimit(0xa, &(0x7f0000000000)={0xfff, 0x3ab})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000080)={0x10000, 0x0, 0x1, 0x10001, 0x2, 0x700, "c46519af4b2e657e8e659f0da5a552b7", 0x6, 0x6, 0xb, 0xc, 0x0, 0x9, 0x8})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='block_rq_requeue\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdab, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x79}, @ldst={0x1, 0x0, 0x6, 0x4, 0x5, 0x40, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @ldst={0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @generic={0x4, 0x6, 0xa, 0x8, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xcc0c}, 0x94)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xfffe}, 0xe)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

1.023352047s ago: executing program 4 (id=1828):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r6 = dup(r5)
shutdown(r6, 0x1)
fchdir(r4)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f00000000c0))
r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
dup(r8)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)=@x86={0x3, 0xd6, 0x0, 0x0, 0x3, 0x5, 0x4, 0x5, 0x9, 0x81, 0x8, 0x7, 0x0, 0x80000001, 0x5, 0x5, 0x33, 0x6c, 0x3, '\x00', 0xd})

0s ago: executing program 3 (id=1829):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000180)={0x2, 0x6, "d6bc00", 0x2, 0x4})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
socket$kcm(0x11, 0x200000000000003, 0x300)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, r5}, 0xc)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0)
r6 = mq_open(&(0x7f0000000240)='/dev/vcsa\x00', 0xbd9f0a887115195f, 0x0, &(0x7f0000000280)={0x7c, 0x2, 0x8, 0x9})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)=0x2aa, 0x4)
fchmod(r6, 0x11)
migrate_pages(0x0, 0x9, &(0x7f0000000480)=0x98, &(0x7f00000004c0)=0x10000000)
setpriority(0x1, 0x0, 0x8)
mknodat$loop(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0xcfdd3d56b02a2b7, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'netdevsim0\x00'})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r7 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

: Manufacturer: syz
[  462.938308][   T43] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  463.243621][T15181] netlink: del zone limit has 4 unknown bytes
[  464.074275][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'.
[  467.926387][ T5911] IPVS: starting estimator thread 0...
[  467.940080][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  467.940115][   T30] audit: type=1326 audit(467.876:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.238823][   T30] audit: type=1326 audit(467.876:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.279680][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  468.310236][T15220] IPVS: using max 74 ests per chain, 177600 per kthread
[  468.470228][   T30] audit: type=1326 audit(467.876:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.533510][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  468.560195][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.589800][    T9] usb 5-1: Product: syz
[  468.600226][    T9] usb 5-1: Manufacturer: syz
[  468.608183][   T30] audit: type=1326 audit(467.876:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.639762][    T9] usb 5-1: SerialNumber: syz
[  468.664928][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  468.693477][   T30] audit: type=1326 audit(467.876:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.739028][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  468.763622][   T30] audit: type=1326 audit(467.876:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  468.807046][   T30] audit: type=1326 audit(467.876:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  469.169282][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.191203][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.259957][   T30] audit: type=1326 audit(467.876:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  469.356131][   T30] audit: type=1326 audit(467.876:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  469.518326][   T30] audit: type=1326 audit(467.876:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  469.927252][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  469.944396][    T9] ath9k_htc: Failed to initialize the device
[  469.977995][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  470.883498][ T5911] usb 1-1: USB disconnect, device number 39
[  471.099984][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  471.412891][T15229] comedi comedi3: reset error (fatal)
[  471.432220][ T5959] usb 5-1: USB disconnect, device number 40
[  471.616848][   T10] usb 2-1: device descriptor read/64, error -71
[  472.394109][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  473.080149][   T10] usb 2-1: device descriptor read/64, error -71
[  473.191297][   T10] usb usb2-port1: attempt power cycle
[  473.238932][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  473.238949][   T30] audit: type=1400 audit(473.216:758): avc:  denied  { bind } for  pid=15297 comm="syz.4.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  473.428559][   T30] audit: type=1400 audit(473.216:759): avc:  denied  { listen } for  pid=15297 comm="syz.4.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  473.771780][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  474.381934][   T10] usb 2-1: device descriptor read/8, error -71
[  474.406896][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  474.908365][   T30] audit: type=1400 audit(474.486:760): avc:  denied  { append } for  pid=15310 comm="syz.4.1347" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  474.932868][T15308] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1345'.
[  475.432048][   T10] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  475.521507][   T10] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[  475.631437][   T10] usb 2-1: config 0 has no interface number 0
[  475.653801][   T10] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  476.120272][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.133602][   T10] usb 2-1: config 0 descriptor??
[  476.158760][   T10] usb 2-1: selecting invalid altsetting 3
[  476.186834][   T10] comedi comedi5: could not set alternate setting 3 in high speed
[  476.224145][   T10] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device.
[  476.245970][   T10] usbdux 2-1:0.207: probe with driver usbdux failed with error -22
[  476.315336][   T30] audit: type=1400 audit(476.296:761): avc:  denied  { create } for  pid=15337 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  476.442986][   T30] audit: type=1400 audit(476.296:762): avc:  denied  { setopt } for  pid=15337 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  476.468805][   T30] audit: type=1400 audit(476.306:763): avc:  denied  { ioctl } for  pid=15337 comm="syz.0.1351" path="socket:[33085]" dev="sockfs" ino=33085 ioctlcmd=0x61e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  476.988727][   T30] audit: type=1400 audit(476.966:764): avc:  denied  { listen } for  pid=15357 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  477.012926][   T30] audit: type=1400 audit(476.996:765): avc:  denied  { accept } for  pid=15357 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  477.263249][   T30] audit: type=1400 audit(477.226:766): avc:  denied  { execute } for  pid=15356 comm="syz.3.1355" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  477.600271][   T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  477.729619][ T5965] usb 2-1: USB disconnect, device number 28
[  477.749843][   T10] usb 1-1: Using ep0 maxpacket: 8
[  477.756310][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  477.768067][   T10] usb 1-1: config 179 has no interface number 0
[  477.777861][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  477.849910][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  477.882274][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  477.965415][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  478.203744][   T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  478.373449][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  478.382827][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.485269][T15368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  479.080317][ T5959] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26
[  479.202066][T15410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27
[  479.220341][T15410] overlayfs: failed to resolve './file0': -2
[  479.227078][T15410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1362'.
[  479.286628][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.304121][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.403069][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.415875][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.457756][ T5959] usb 1-1: USB disconnect, device number 40
[  480.463843][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  480.463887][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  481.393739][T15451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  482.011754][T15451] kvm: pic: non byte read
[  482.041944][T15451] kvm: pic: level sensitive irq not supported
[  482.042033][T15451] kvm: pic: non byte read
[  482.056681][T15451] kvm: pic: level sensitive irq not supported
[  482.058476][T15451] kvm: pic: non byte read
[  482.071323][T15451] kvm: pic: level sensitive irq not supported
[  482.071451][T15451] kvm: pic: non byte read
[  482.083303][T15451] kvm: pic: level sensitive irq not supported
[  482.083402][T15451] kvm: pic: non byte read
[  482.094716][T15451] kvm: pic: level sensitive irq not supported
[  482.094865][T15451] kvm: pic: non byte read
[  482.253879][T15470] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.261887][T15470] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.270120][T15470] bridge0: entered allmulticast mode
[  482.890588][   T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  483.039788][T15488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1378'.
[  483.076932][T15488] netlink: 'syz.1.1378': attribute type 11 has an invalid length.
[  483.181438][T15487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15487 comm=syz.2.1376
[  483.192569][   T43] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  483.203637][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.242326][   T43] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  483.255613][   T43] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  483.278303][   T43] usb 4-1: Manufacturer: syz
[  483.315263][   T43] usb 4-1: config 0 descriptor??
[  483.430241][   T43] rc_core: IR keymap rc-hauppauge not found
[  483.436207][   T43] Registered IR keymap rc-empty
[  483.445451][   T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  483.457295][T15498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.470213][T15501] random: crng reseeded on system resumption
[  483.569679][   T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28
[  483.975383][T15512] mkiss: ax0: crc mode is auto.
[  486.595366][ T5898] usb 4-1: USB disconnect, device number 33
[  487.109865][ T5898] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  487.221788][   T30] audit: type=1400 audit(487.206:767): avc:  denied  { read } for  pid=15558 comm="syz.1.1386" dev="sockfs" ino=33367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  487.336628][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.369840][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  487.392450][ T5898] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  487.432909][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.471417][ T5898] usb 4-1: config 0 descriptor??
[  487.477020][   T30] audit: type=1400 audit(487.456:768): avc:  denied  { setopt } for  pid=15562 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  487.496739][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.515110][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  487.523092][ T5898] dvb-usb: bulk message failed: -22 (3/0)
[  487.543697][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  487.600797][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  487.618036][ T5898] usb 4-1: media controller created
[  487.626495][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  487.654477][ T5898] dvb-usb: bulk message failed: -22 (6/0)
[  487.669960][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  487.684315][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[  487.783209][ T5898] dvb-usb: schedule remote query interval to 150 msecs.
[  487.799865][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  488.104416][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  488.111428][   T10] dvb-usb: error while querying for an remote control event.
[  488.285512][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  488.302468][   T10] dvb-usb: error while querying for an remote control event.
[  488.501046][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  488.508161][   T10] dvb-usb: error while querying for an remote control event.
[  488.570751][T15595] serio: Serial port ptm1
[  488.679801][ T5898] dvb-usb: bulk message failed: -22 (1/0)
[  489.448062][ T5898] dvb-usb: error while querying for an remote control event.
[  489.609824][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  489.622292][   T10] dvb-usb: error while querying for an remote control event.
[  489.631726][   T30] audit: type=1400 audit(489.596:769): avc:  denied  { bind } for  pid=15611 comm="syz.0.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  489.825709][ T5911] usb 4-1: USB disconnect, device number 34
[  490.205932][ T5911] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  490.358805][T15630] netlink: del zone limit has 4 unknown bytes
[  490.876940][T15640] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present
[  491.148606][T15654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  491.204333][T15658] Bluetooth: MGMT ver 1.23
[  491.205225][T15654] kvm: pic: non byte read
[  491.213299][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  491.231055][T15654] kvm: pic: level sensitive irq not supported
[  491.231115][T15654] kvm: pic: non byte read
[  491.235571][T15658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1402'.
[  491.237497][T15654] kvm: pic: level sensitive irq not supported
[  491.250887][T15654] kvm: pic: non byte read
[  491.262294][T15654] kvm: pic: level sensitive irq not supported
[  491.262432][T15654] kvm: pic: non byte read
[  491.263001][T15658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1402'.
[  491.268774][T15654] kvm: pic: level sensitive irq not supported
[  491.282298][T15654] kvm: pic: non byte read
[  491.294509][T15654] kvm: pic: level sensitive irq not supported
[  491.294639][T15654] kvm: pic: non byte read
[  491.312294][   T30] audit: type=1400 audit(491.296:770): avc:  denied  { write } for  pid=15660 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  491.313247][T15661] veth0_to_bridge: entered promiscuous mode
[  491.366422][   T30] audit: type=1400 audit(491.346:771): avc:  denied  { getopt } for  pid=15660 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  491.366527][T15660] veth0_to_bridge: left promiscuous mode
[  491.405938][   T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  491.415854][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.432864][   T10] usb 1-1: config 0 has no interface number 0
[  491.443450][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  491.455017][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.463158][   T10] usb 1-1: Product: syz
[  491.467431][   T10] usb 1-1: Manufacturer: syz
[  491.472237][   T10] usb 1-1: SerialNumber: syz
[  491.504161][   T10] usb 1-1: config 0 descriptor??
[  491.514045][   T10] ims_pcu 1-1:0.41: Missing CDC union descriptor
[  491.565696][   T10] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22
[  492.539805][   T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  492.760244][   T10] usb 5-1: Using ep0 maxpacket: 8
[  492.819793][ T5959] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  493.203744][ T5898] usb 1-1: USB disconnect, device number 41
[  493.213605][   T10] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  493.227288][ T5959] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  493.244040][   T10] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  493.254830][ T5959] usb 3-1: config 0 has no interface number 0
[  493.261709][   T10] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2
[  493.272315][   T10] usb 5-1: config 127 has no interface number 0
[  493.280533][   T10] usb 5-1: config 127 interface 171 has no altsetting 0
[  493.289002][ T5959] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  493.299196][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.307544][ T5959] usb 3-1: Product: syz
[  493.312365][ T5959] usb 3-1: Manufacturer: syz
[  493.317669][ T5959] usb 3-1: SerialNumber: syz
[  493.325646][   T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  493.341741][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.353469][ T5959] usb 3-1: config 0 descriptor??
[  493.358470][   T10] usb 5-1: Product: syz
[  493.363523][   T10] usb 5-1: Manufacturer: syz
[  493.368311][   T10] usb 5-1: SerialNumber: syz
[  493.522458][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'.
[  493.580532][T15704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.687663][ T5959] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  493.698762][ T5959] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  493.709208][ T5959] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  493.738179][   T10] usb 5-1: USB disconnect, device number 41
[  493.764151][ T5959] usb 3-1: media controller created
[  493.772610][T15704] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.375523][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  494.436475][ T5959] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  494.533962][ T5959] usb 3-1: USB disconnect, device number 28
[  495.274983][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'.
[  495.815223][   T30] audit: type=1400 audit(495.256:772): avc:  denied  { name_bind } for  pid=15751 comm="syz.3.1416" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  495.864768][   T30] audit: type=1400 audit(495.796:773): avc:  denied  { getopt } for  pid=15751 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  496.122315][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'.
[  496.763279][T15753] team0 (unregistering): Port device C removed
[  496.774155][T15753] team0 (unregistering): Port device team_slave_1 removed
[  497.738262][   T30] audit: type=1400 audit(497.716:774): avc:  denied  { write } for  pid=15809 comm="syz.3.1423" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  499.701793][ T5959] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  500.161881][ T5959] usb 5-1: Using ep0 maxpacket: 8
[  500.174801][ T5959] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  500.193269][ T5959] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  500.234516][ T5959] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2
[  500.257578][ T5959] usb 5-1: config 127 has no interface number 0
[  500.270645][ T5959] usb 5-1: config 127 interface 171 has no altsetting 0
[  500.305851][ T5959] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  500.409172][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.422766][ T5959] usb 5-1: Product: syz
[  500.435795][ T5959] usb 5-1: Manufacturer: syz
[  500.450620][ T5959] usb 5-1: SerialNumber: syz
[  500.791504][ T5959] usb 5-1: USB disconnect, device number 42
[  503.679938][   T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  503.819350][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'.
[  503.859954][   T10] usb 5-1: Using ep0 maxpacket: 16
[  503.866280][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.877131][   T10] usb 5-1: config 0 has no interfaces?
[  503.883608][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.894360][   T10] usb 5-1: config 0 has no interfaces?
[  503.911933][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.924863][   T10] usb 5-1: config 0 has no interfaces?
[  503.932524][   T30] audit: type=1400 audit(503.916:775): avc:  denied  { execute } for  pid=15969 comm="syz.2.1443" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  503.956176][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  503.989447][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.008204][   T10] usb 5-1: Product: syz
[  504.016467][   T10] usb 5-1: Manufacturer: syz
[  504.026113][   T10] usb 5-1: SerialNumber: syz
[  504.382249][   T10] usb 5-1: config 0 descriptor??
[  504.643662][T15990] netlink: del zone limit has 4 unknown bytes
[  504.820162][ T5898] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  504.850308][ T5961] usb 5-1: USB disconnect, device number 43
[  505.010755][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1448'.
[  505.047787][ T5898] usb 1-1: Using ep0 maxpacket: 16
[  505.071096][ T5898] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  505.112225][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  505.141735][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  505.152705][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.172759][ T5898] usb 1-1: Product: у
[  505.178971][ T5898] usb 1-1: Manufacturer: и
[  505.192446][ T5898] usb 1-1: SerialNumber: 岖滑퀷성槥麸缭ߒ�䦺찀ꓮ繨쥥昗엀ﳟ蒼桯ឌ⯲᜵ꤵ扡̑컱�嵖曰᧦윚⳹僡缇㇧詙쳮콫嫪��ﱥ햆ᡠࢫ왬旱ඨ銯풄꒤絧ﱯ쭠წ姼甅᩽毼妦毅ᷴ�짱䂗뭋ﵒ쭜�숳겎뻟�渧�ᜃ�⮭
[  505.470408][   T30] audit: type=1400 audit(505.446:776): avc:  denied  { ioctl } for  pid=16010 comm="syz.1.1450" path="socket:[34650]" dev="sockfs" ino=34650 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  505.535118][ T5898] usb 1-1: 0:2 : does not exist
[  505.568622][ T5898] usb 1-1: USB disconnect, device number 42
[  505.795019][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  507.336097][T16050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16050 comm=syz.4.1455
[  507.423378][T16059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30
[  507.461195][T16062] capability: warning: `syz.3.1458' uses 32-bit capabilities (legacy support in use)
[  507.464483][T16059] overlayfs: failed to resolve './file0': -2
[  507.516499][   T30] audit: type=1400 audit(507.496:777): avc:  denied  { listen } for  pid=16049 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  507.541014][T16067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1457'.
[  507.553272][   T30] audit: type=1326 audit(507.536:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.3.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7ed8585ba7 code=0x0
[  507.605980][T16073] NILFS (nbd3): device size too small
[  508.150282][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  508.519814][    T9] usb 1-1: device descriptor read/64, error -71
[  509.219768][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  509.989992][   T30] audit: type=1400 audit(508.606:779): avc:  denied  { mount } for  pid=16089 comm="syz.1.1464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  510.176808][T16094] netlink: del zone limit has 4 unknown bytes
[  510.796644][   T30] audit: type=1400 audit(509.006:780): avc:  denied  { unmount } for  pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  510.827661][   T30] audit: type=1400 audit(510.806:781): avc:  denied  { map } for  pid=16103 comm="syz.2.1467" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  510.850248][   T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  511.190827][   T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  511.205742][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.215026][   T43] usb 2-1: Product: syz
[  511.219522][   T43] usb 2-1: Manufacturer: syz
[  511.225129][   T43] usb 2-1: SerialNumber: syz
[  511.369476][   T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  511.391817][ T5961] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  511.466795][T16126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31
[  511.498318][T16126] overlayfs: failed to resolve './file0': -2
[  511.689160][T16099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.034356][T16099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.492111][ T5961] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  512.629959][   T30] audit: type=1400 audit(512.606:782): avc:  denied  { execheap } for  pid=16098 comm="syz.1.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  512.646193][ T5961] ath9k_htc: Failed to initialize the device
[  512.850993][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  512.853750][ T5961] usb 2-1: ath9k_htc: USB layer deinitialized
[  513.224745][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  513.238289][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.246472][    T9] usb 1-1: Product: syz
[  513.257074][    T9] usb 1-1: Manufacturer: syz
[  513.275184][    T9] usb 1-1: SerialNumber: syz
[  513.414633][T16187] 9pnet_fd: Insufficient options for proto=fd
[  513.492454][ T5961] usb 2-1: USB disconnect, device number 29
[  513.540583][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  513.585910][T16190] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  513.599313][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  513.815145][T16134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.862490][T16134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  514.182309][    T9] usb 1-1: USB disconnect, device number 45
[  514.234137][T16209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1477'.
[  514.276397][T16209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'.
[  514.379486][T16215] netlink: 'syz.4.1476': attribute type 10 has an invalid length.
[  514.431558][T16215] batman_adv: batadv0: Adding interface: team0
[  514.437932][T16215] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.949950][   T10] usb 1-1: Service connection timeout for: 256
[  514.956379][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  515.672403][T16221] netlink: 'syz.4.1476': attribute type 10 has an invalid length.
[  515.695011][T16221] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1476'.
[  515.704675][T16215] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  515.717305][T16221] 8021q: adding VLAN 0 to HW filter on device team0
[  515.724945][T16221] batman_adv: batadv0: Interface activated: team0
[  516.070956][   T10] ath9k_htc: Failed to initialize the device
[  516.081808][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[  516.148593][T16221] batman_adv: batadv0: Interface deactivated: team0
[  516.192051][T16221] batman_adv: batadv0: Removing interface: team0
[  516.214347][T16221] bridge0: port 3(team0) entered blocking state
[  516.276606][T16137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  516.430135][T16237] overlay: ./file0 is not a directory
[  516.526279][T16221] bridge0: port 3(team0) entered disabled state
[  516.550418][ T5898] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  516.639177][T16221] team0: entered allmulticast mode
[  516.728683][T16221] team_slave_0: entered allmulticast mode
[  516.766276][T16221] team_slave_1: entered allmulticast mode
[  516.779500][T16245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32
[  516.799336][T16245] overlayfs: failed to resolve './file0': -2
[  516.814174][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  516.824068][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  516.837344][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  516.847030][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.861673][T16221] batadv1: entered allmulticast mode
[  516.907171][T16221] team0: left allmulticast mode
[  516.919210][T16221] team_slave_0: left allmulticast mode
[  516.934447][T16221] team_slave_1: left allmulticast mode
[  516.947415][T16221] batadv1: left allmulticast mode
[  516.990782][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  517.060621][ T5898] usb 3-1: usb_control_msg returned -32
[  517.160438][ T5898] usbtmc 3-1:16.0: can't read capabilities
[  517.742197][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  517.762781][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  517.772271][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.807734][ T5911] usb 4-1: config 0 descriptor??
[  517.831281][ T5911] gspca_main: sq930x-2.14.0 probing 041e:403c
[  518.550797][T16240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16240 comm=syz.3.1482
[  519.040556][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.049889][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.301980][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.600841][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.638807][   T43] usb 3-1: USB disconnect, device number 29
[  519.683165][ T5911] gspca_sq930x: ucbus_write failed -71
[  519.696544][ T5911] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[  519.707516][ T5911] usb 4-1: USB disconnect, device number 35
[  519.950206][ T5961] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  520.929326][T16318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=16318 comm=syz.0.1490
[  521.951651][T16329] overlayfs: missing 'lowerdir'
[  522.110521][ T5961] usb 2-1: device not accepting address 30, error -71
[  522.553387][T16333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33
[  522.622727][T16333] overlayfs: failed to resolve './file0': -2
[  523.605243][   T30] audit: type=1326 audit(523.586:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  523.670920][   T30] audit: type=1326 audit(523.606:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  523.798520][   T30] audit: type=1326 audit(523.616:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  523.922843][   T30] audit: type=1326 audit(523.616:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  523.947167][   T30] audit: type=1326 audit(523.616:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.413137][   T30] audit: type=1326 audit(523.616:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.456669][   T30] audit: type=1326 audit(523.616:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.520283][   T30] audit: type=1326 audit(523.626:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.545276][   T30] audit: type=1326 audit(523.626:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.725242][   T30] audit: type=1326 audit(523.626:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed858ebe9 code=0x7ffc0000
[  524.751356][T16372] syz.1.1505 uses old SIOCAX25GETINFO
[  524.833433][T16374] IPv6: sit1: Disabled Multicast RS
[  524.846592][T16374] sit1: entered allmulticast mode
[  525.161611][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'.
[  525.176394][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'.
[  525.186303][ T2993] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  525.198065][ T2993] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  525.221908][T16386] ksmbd: Unknown IPC event: 3, ignore.
[  525.255830][ T2993] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  525.281197][ T2993] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.738109][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  528.738128][   T30] audit: type=1400 audit(528.686:804): avc:  denied  { setopt } for  pid=16439 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  528.793112][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1519'.
[  528.802474][T16443] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1519'.
[  530.474026][T16452] syz.3.1522: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  530.517169][T16452] CPU: 0 UID: 0 PID: 16452 Comm: syz.3.1522 Not tainted syzkaller #0 PREEMPT(full) 
[  530.517188][T16452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  530.517195][T16452] Call Trace:
[  530.517199][T16452]  <TASK>
[  530.517203][T16452]  dump_stack_lvl+0x16c/0x1f0
[  530.517221][T16452]  warn_alloc+0x248/0x3a0
[  530.517234][T16452]  ? __pfx_warn_alloc+0x10/0x10
[  530.517251][T16452]  ? packet_set_ring+0xb52/0x18d0
[  530.517270][T16452]  ? __vmalloc_node_noprof+0xad/0xf0
[  530.517289][T16452]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  530.517310][T16452]  ? packet_set_ring+0xb52/0x18d0
[  530.517331][T16452]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  530.517352][T16452]  ? alloc_pages_mpol+0x25a/0x550
[  530.517366][T16452]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  530.517381][T16452]  ? packet_set_ring+0xb52/0x18d0
[  530.517398][T16452]  __vmalloc_node_noprof+0xad/0xf0
[  530.517414][T16452]  ? packet_set_ring+0xb52/0x18d0
[  530.517433][T16452]  packet_set_ring+0xb52/0x18d0
[  530.517456][T16452]  packet_setsockopt+0x121b/0x33c0
[  530.517468][T16452]  ? sock_has_perm+0x259/0x2f0
[  530.517484][T16452]  ? __pfx_packet_setsockopt+0x10/0x10
[  530.517495][T16452]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  530.517512][T16452]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  530.517532][T16452]  ? find_held_lock+0x2b/0x80
[  530.517549][T16452]  ? selinux_socket_setsockopt+0x6a/0x80
[  530.517564][T16452]  ? __pfx_packet_setsockopt+0x10/0x10
[  530.517576][T16452]  do_sock_setsockopt+0xf0/0x1d0
[  530.517594][T16452]  __sys_setsockopt+0x1a0/0x230
[  530.517607][T16452]  __x64_sys_setsockopt+0xbd/0x160
[  530.517618][T16452]  ? do_syscall_64+0x91/0x4c0
[  530.517631][T16452]  ? lockdep_hardirqs_on+0x7c/0x110
[  530.517643][T16452]  do_syscall_64+0xcd/0x4c0
[  530.517657][T16452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.517668][T16452] RIP: 0033:0x7f7ed858ebe9
[  530.517678][T16452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.517689][T16452] RSP: 002b:00007f7ed94b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  530.517700][T16452] RAX: ffffffffffffffda RBX: 00007f7ed87c5fa0 RCX: 00007f7ed858ebe9
[  530.517707][T16452] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000b
[  530.517714][T16452] RBP: 00007f7ed8611e19 R08: 000000000000001c R09: 0000000000000000
[  530.517720][T16452] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  530.517727][T16452] R13: 00007f7ed87c6038 R14: 00007f7ed87c5fa0 R15: 00007ffec3a73cf8
[  530.517740][T16452]  </TASK>
[  530.517744][T16452] Mem-Info:
[  530.862072][T16452] active_anon:8924 inactive_anon:0 isolated_anon:0
[  530.862072][T16452]  active_file:20718 inactive_file:40798 isolated_file:0
[  530.862072][T16452]  unevictable:768 dirty:250 writeback:0
[  530.862072][T16452]  slab_reclaimable:8194 slab_unreclaimable:115576
[  530.862072][T16452]  mapped:29664 shmem:5270 pagetables:1056
[  530.862072][T16452]  sec_pagetables:0 bounce:0
[  530.862072][T16452]  kernel_misc_reclaimable:0
[  530.862072][T16452]  free:1267709 free_pcp:15526 free_cma:0
[  530.940372][T16452] Node 0 active_anon:35696kB inactive_anon:0kB active_file:82840kB inactive_file:162992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118636kB dirty:1000kB writeback:0kB shmem:19544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:11876kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  531.003148][T16452] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  531.101651][T16452] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  531.196097][T16452] lowmem_reserve[]: 0 2479 2481 2481 2481
[  531.279743][T16452] Node 0 DMA32 free:1168156kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37696kB inactive_anon:0kB active_file:82840kB inactive_file:161680kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2539364kB mlocked:0kB bounce:0kB free_pcp:45680kB local_pcp:16224kB free_cma:0kB
[  531.365420][T16452] lowmem_reserve[]: 0 0 1 1 1
[  531.393264][T16452] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB
[  531.454270][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  531.580927][T16469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.714829][T16452] lowmem_reserve[]: 0 0 0 0 0
[  531.733652][T16452] Node 1 Normal free:3885036kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17216kB local_pcp:11328kB free_cma:0kB
[  531.770206][T16452] lowmem_reserve[]: 0 0 0 0 0
[  531.774897][T16452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  531.811007][T16452] Node 0 DMA32: 1041*4kB (UME) 700*8kB (UME) 691*16kB (UME) 401*32kB (UME) 274*64kB (UME) 102*128kB (UME) 53*256kB (UME) 26*512kB (ME) 9*1024kB (M) 4*2048kB (M) 260*4096kB (ME) = 1173492kB
[  532.124541][T16452] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  532.151508][T16452] Node 1 Normal: 193*4kB (UME) 51*8kB (UME) 47*16kB (UME) 233*32kB (UE) 81*64kB (UME) 18*128kB (UME) 6*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3885036kB
[  532.366081][T16452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.382655][T16452] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  532.392732][T16452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.427079][T16452] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  532.438910][T16452] 69635 total pagecache pages
[  532.481112][T16452] 0 pages in swap cache
[  532.485297][T16452] Free swap  = 124996kB
[  532.489478][T16452] Total swap = 124996kB
[  532.494886][T16452] 2097051 pages RAM
[  532.501534][T16452] 0 pages HighMem/MovableOnly
[  532.506275][T16452] 430248 pages reserved
[  532.510570][T16452] 0 pages cma reserved
[  532.617828][T16477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  532.715862][T16477] kvm: pic: non byte read
[  532.730769][T16477] kvm: pic: level sensitive irq not supported
[  532.730830][T16477] kvm: pic: non byte read
[  532.756628][T16477] kvm: pic: level sensitive irq not supported
[  532.756755][T16477] kvm: pic: non byte read
[  532.810736][T16477] kvm: pic: level sensitive irq not supported
[  532.810809][T16477] kvm: pic: non byte read
[  532.860068][T16477] kvm: pic: level sensitive irq not supported
[  532.860149][T16477] kvm: pic: non byte read
[  532.947071][T16477] kvm: pic: level sensitive irq not supported
[  532.947151][T16477] kvm: pic: non byte read
[  532.965094][T16483] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1528'.
[  533.029075][   T30] audit: type=1326 audit(533.006:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.186393][   T30] audit: type=1326 audit(533.006:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.317150][   T30] audit: type=1326 audit(533.006:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.432730][T16365] Set syz1 is full, maxelem 65536 reached
[  533.530351][   T30] audit: type=1326 audit(533.006:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.624344][   T30] audit: type=1326 audit(533.006:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.661877][   T30] audit: type=1326 audit(533.006:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.757366][   T30] audit: type=1326 audit(533.006:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  533.858364][   T30] audit: type=1326 audit(533.006:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d118ebe9 code=0x7ffc0000
[  534.523251][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'.
[  534.647858][T16530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  534.759792][    T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  534.874270][T16569] kvm: pic: non byte read
[  534.893268][T16569] kvm: pic: level sensitive irq not supported
[  534.893326][T16569] kvm: pic: non byte read
[  534.924663][T16569] kvm: pic: level sensitive irq not supported
[  534.924718][T16569] kvm: pic: non byte read
[  534.938284][T16569] kvm: pic: level sensitive irq not supported
[  534.938356][T16569] kvm: pic: non byte read
[  534.954029][T16569] kvm: pic: level sensitive irq not supported
[  534.954193][T16569] kvm: pic: level sensitive irq not supported
[  535.031599][    T9] usb 3-1: config 0 has an invalid interface number: 207 but max is 0
[  535.068972][    T9] usb 3-1: config 0 has no interface number 0
[  535.084433][    T9] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  535.104005][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.129004][    T9] usb 3-1: config 0 descriptor??
[  535.145637][    T9] usb 3-1: selecting invalid altsetting 3
[  535.161902][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  535.174755][    T9] usbdux 3-1:0.207: driver 'usbdux' failed to auto-configure device.
[  535.486881][    T9] usbdux 3-1:0.207: probe with driver usbdux failed with error -22
[  539.547641][T16617] IPv6: Can't replace route, no match found
[  539.753102][ T5898] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  539.923128][ T5898] usb 5-1: device descriptor read/64, error -71
[  539.952912][  T975] usb 3-1: USB disconnect, device number 30
[  540.170614][ T5898] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  540.229054][   T30] audit: type=1800 audit(540.203:813): pid=16642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1556" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  540.319994][ T5898] usb 5-1: device descriptor read/64, error -71
[  540.460670][ T5898] usb usb5-port1: attempt power cycle
[  540.702837][T16660] bridge_slave_0: left allmulticast mode
[  540.708558][T16660] bridge_slave_0: left promiscuous mode
[  540.714527][T16660] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.724999][T16660] bridge_slave_1: left allmulticast mode
[  540.734887][T16660] bridge_slave_1: left promiscuous mode
[  540.740674][T16660] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.833588][ T5898] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  540.841316][ T5959] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  540.876148][ T5898] usb 5-1: device descriptor read/8, error -71
[  540.887095][T16660] bond0: (slave bond_slave_0): Releasing backup interface
[  540.916435][T16660] bond0: (slave bond_slave_1): Releasing backup interface
[  540.924956][   T30] audit: type=1400 audit(540.903:814): avc:  denied  { ioctl } for  pid=16658 comm="syz.3.1559" path="socket:[36479]" dev="sockfs" ino=36479 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  541.452021][ T5959] usb 1-1: Using ep0 maxpacket: 8
[  541.470787][ T5959] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  541.479303][ T5959] usb 1-1: config 179 has no interface number 0
[  541.508972][ T5959] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  541.540745][ T5959] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  541.564039][ T5959] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  541.579644][ T5959] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  541.585897][ T5898] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  541.611062][T16660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.631687][ T5959] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  541.650622][T16660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.674643][ T5959] usb 1-1: config 179 interface 65 has no altsetting 0
[  541.694117][ T5959] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  541.711782][ T5898] usb 5-1: device descriptor read/8, error -71
[  541.731179][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.758144][ T5959] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34
[  541.799972][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  541.890254][ T5898] usb usb5-port1: unable to enumerate USB device
[  542.490289][    T9] usb 4-1: Using ep0 maxpacket: 32
[  542.515550][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  542.538204][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.549226][    T9] usb 4-1: config 0 descriptor??
[  542.557748][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[  543.552723][ T5925] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[  543.569754][    T9] gspca_sq930x: reg_r 001f failed -110
[  543.575342][    T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  543.753636][ T5925] usb 5-1: config 0 has an invalid interface number: 207 but max is 0
[  543.789897][ T5925] usb 5-1: config 0 has no interface number 0
[  543.808397][ T5925] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  543.834678][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.857581][ T5925] usb 5-1: config 0 descriptor??
[  543.879259][ T5925] usb 5-1: selecting invalid altsetting 3
[  543.887315][ T5925] comedi comedi5: could not set alternate setting 3 in high speed
[  543.898623][ T5925] usbdux 5-1:0.207: driver 'usbdux' failed to auto-configure device.
[  543.919602][ T5925] usbdux 5-1:0.207: probe with driver usbdux failed with error -22
[  544.480424][ T5925] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  544.645926][ T5898] usb 4-1: USB disconnect, device number 36
[  544.696402][ T5925] usb 3-1: Using ep0 maxpacket: 16
[  544.796896][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  544.818705][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  544.908160][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  544.920706][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.939740][ T5925] usb 3-1: Product: syz
[  544.949404][ T5925] usb 3-1: Manufacturer: syz
[  544.962244][ T5925] usb 3-1: SerialNumber: syz
[  544.983904][ T5925] usb 3-1: config 0 descriptor??
[  545.003383][ T5925] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  545.029351][ T5925] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  545.075903][    T9] usb 1-1: USB disconnect, device number 46
[  545.081856][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  545.149823][ T5898] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  547.410066][ T5925] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  547.458189][ T5925] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  547.489314][ T5925] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  547.525415][ T5925] em28xx 3-1:0.0: No AC97 audio processor
[  547.566302][ T5925] usb 3-1: USB disconnect, device number 31
[  547.594667][ T5925] em28xx 3-1:0.0: Disconnecting em28xx
[  547.619060][ T5925] em28xx 3-1:0.0: Freeing device
[  547.975309][ T5911] usb 5-1: USB disconnect, device number 48
[  548.189945][ T5898] usb 4-1: device descriptor read/64, error -71
[  548.703620][T16806] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  548.786257][T16806] audit: out of memory in audit_log_start
[  548.846690][ T5898] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  549.024797][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  549.227982][ T5898] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  549.336680][ T5898] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  549.357301][ T5898] usb 4-1: config 127 has no interface number 1
[  549.365182][ T5898] usb 4-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  549.378536][  T977] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  549.548288][   T30] audit: type=1400 audit(549.523:815): avc:  denied  { validate_trans } for  pid=16815 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  550.369544][ T5898] usb 4-1: config 127 interface 171 has no altsetting 0
[  551.943443][ T5898] usb 4-1: config 127 interface 0 has no altsetting 0
[  551.965591][   T30] audit: type=1400 audit(550.543:816): avc:  denied  { setopt } for  pid=16815 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  552.039390][   T30] audit: type=1400 audit(550.963:817): avc:  denied  { nlmsg_read } for  pid=16815 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  552.079744][  T977] usb 3-1: device descriptor read/64, error -71
[  552.257108][   T30] audit: type=1400 audit(551.363:818): avc:  denied  { read write } for  pid=16815 comm="syz.4.1577" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  552.526558][ T5898] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  552.594209][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.614510][   T30] audit: type=1400 audit(551.363:819): avc:  denied  { open } for  pid=16815 comm="syz.4.1577" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  552.789753][ T5925] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  552.918312][ T5898] usb 4-1: can't set config #127, error -71
[  552.928641][ T5898] usb 4-1: USB disconnect, device number 38
[  553.059843][ T5925] usb 2-1: device descriptor read/64, error -71
[  553.338599][ T5925] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  553.614985][  T977] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  553.630476][ T5925] usb 2-1: device descriptor read/64, error -71
[  553.683932][T16877] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1585'.
[  553.790400][ T5925] usb usb2-port1: attempt power cycle
[  553.879750][  T977] usb 3-1: Using ep0 maxpacket: 32
[  554.053169][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.236937][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.250316][  T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  554.259351][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.310113][ T5925] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  554.340489][ T5925] usb 2-1: device descriptor read/8, error -71
[  554.347188][  T977] usb 3-1: config 0 descriptor??
[  554.453367][  T977] hub 3-1:0.0: USB hub found
[  554.679802][ T5925] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  554.687520][  T977] hub 3-1:0.0: 1 port detected
[  554.721754][ T5925] usb 2-1: device descriptor read/8, error -71
[  554.840611][ T5925] usb usb2-port1: unable to enumerate USB device
[  554.961130][  T977] hub 3-1:0.0: activate --> -90
[  555.019889][   T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  555.131654][  T975] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  555.176667][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  555.185940][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.194083][   T10] usb 5-1: Product: syz
[  555.198255][   T10] usb 5-1: Manufacturer: syz
[  555.202968][   T10] usb 5-1: SerialNumber: syz
[  555.290929][  T975] usb 1-1: Using ep0 maxpacket: 32
[  555.304563][  T975] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  555.320882][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.332583][  T975] usb 1-1: Product: syz
[  555.336830][  T975] usb 1-1: Manufacturer: syz
[  555.344568][  T975] usb 1-1: SerialNumber: syz
[  555.352745][  T975] usb 1-1: config 0 descriptor??
[  555.363755][  T975] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  555.432550][ T5911] usb 3-1: USB disconnect, device number 34
[  555.435655][  T977] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  556.200055][  T977] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  556.339835][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  556.493479][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  556.518604][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  556.550156][  T977] usb 4-1: Using ep0 maxpacket: 8
[  556.565631][  T977] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  556.599596][  T977] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  556.621442][   T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  556.651836][  T977] usb 4-1: config 127 has no interface number 1
[  556.819104][  T975] gspca_ov534_9: reg_w failed -110
[  556.828034][   T10] usb 5-1: USB disconnect, device number 49
[  556.834023][  T977] usb 4-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  556.869338][  T977] usb 4-1: config 127 interface 171 has no altsetting 0
[  556.916748][  T977] usb 4-1: config 127 interface 0 has no altsetting 0
[  556.959025][T16953] netlink: del zone limit has 4 unknown bytes
[  556.971166][  T977] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  556.987437][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.997074][  T977] usb 4-1: Product: syz
[  557.008013][  T977] usb 4-1: Manufacturer: syz
[  557.012930][  T977] usb 4-1: SerialNumber: syz
[  557.111184][T16966] netlink: del zone limit has 4 unknown bytes
[  557.130876][  T975] gspca_ov534_9: Unknown sensor 0000
[  557.130950][  T975] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  557.305399][  T977] xr_serial 4-1:127.171: xr_serial converter detected
[  557.308901][  T975] usb 1-1: USB disconnect, device number 47
[  557.334926][  T977] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  557.359412][  T977] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  557.380188][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  557.423258][  T977] usb 4-1: USB disconnect, device number 39
[  557.441888][  T977] xr_serial 4-1:127.171: device disconnected
[  557.549954][   T10] usb 5-1: Using ep0 maxpacket: 8
[  557.557709][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  557.583699][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  557.612466][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.640482][   T10] usb 5-1: config 0 descriptor??
[  557.746884][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'.
[  557.784771][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1599'.
[  557.872782][   T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  558.319185][ T5911] usb 5-1: USB disconnect, device number 50
[  559.299901][ T5925] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  559.469929][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  560.430293][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.441369][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.451132][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  560.460286][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.495377][ T5925] usb 5-1: config 0 descriptor??
[  560.511766][ T5925] hub 5-1:0.0: USB hub found
[  560.735677][ T5925] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  561.293772][ T5925] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0
[  561.522281][   T30] audit: type=1400 audit(561.503:820): avc:  denied  { listen } for  pid=17025 comm="syz.4.1606" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  561.561047][    C0] vkms_vblank_simulate: vblank timer overrun
[  561.623644][T17026] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  561.760256][T17026] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  561.933848][T17068] netlink: del zone limit has 4 unknown bytes
[  562.113649][   T30] audit: type=1400 audit(561.993:821): avc:  denied  { getopt } for  pid=17064 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  562.316709][   T30] audit: type=1400 audit(562.293:822): avc:  denied  { ioctl } for  pid=17087 comm="syz.2.1617" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  562.346554][   T30] audit: type=1400 audit(562.293:823): avc:  denied  { accept } for  pid=17087 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  562.366893][  T975] usb 5-1: USB disconnect, device number 51
[  563.212563][T17118] FAULT_INJECTION: forcing a failure.
[  563.212563][T17118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.225907][T17118] CPU: 1 UID: 0 PID: 17118 Comm: syz.1.1621 Not tainted syzkaller #0 PREEMPT(full) 
[  563.225930][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  563.225940][T17118] Call Trace:
[  563.225946][T17118]  <TASK>
[  563.225953][T17118]  dump_stack_lvl+0x16c/0x1f0
[  563.225976][T17118]  should_fail_ex+0x512/0x640
[  563.226000][T17118]  _copy_from_user+0x2e/0xd0
[  563.226024][T17118]  copy_msghdr_from_user+0x98/0x160
[  563.226045][T17118]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  563.226070][T17118]  ? __lock_acquire+0x62e/0x1ce0
[  563.226102][T17118]  ___sys_recvmsg+0xdb/0x1a0
[  563.226122][T17118]  ? __pfx____sys_recvmsg+0x10/0x10
[  563.226143][T17118]  ? find_held_lock+0x2b/0x80
[  563.226177][T17118]  do_recvmmsg+0x2fe/0x750
[  563.226196][T17118]  ? __pfx_do_recvmmsg+0x10/0x10
[  563.226220][T17118]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  563.226244][T17118]  ? __fget_files+0x20e/0x3c0
[  563.226264][T17118]  __x64_sys_recvmmsg+0x22a/0x280
[  563.226281][T17118]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  563.226304][T17118]  do_syscall_64+0xcd/0x4c0
[  563.226323][T17118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.226336][T17118] RIP: 0033:0x7f67d118ebe9
[  563.226348][T17118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.226362][T17118] RSP: 002b:00007f67d209a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  563.226375][T17118] RAX: ffffffffffffffda RBX: 00007f67d13c6180 RCX: 00007f67d118ebe9
[  563.226384][T17118] RDX: 0000000000000007 RSI: 0000200000001b40 RDI: 0000000000000007
[  563.226393][T17118] RBP: 00007f67d209a090 R08: 0000000000000000 R09: 0000000000000000
[  563.226401][T17118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.226409][T17118] R13: 00007f67d13c6218 R14: 00007f67d13c6180 R15: 00007ffea3343a88
[  563.226428][T17118]  </TASK>
[  563.229439][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'.
[  563.801476][T17118] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1621'.
[  563.952065][  T977] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  564.779538][  T977] usb 3-1: device descriptor read/64, error -71
[  565.049773][  T977] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  565.161039][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  565.269725][  T977] usb 3-1: device descriptor read/64, error -71
[  565.329722][   T10] usb 1-1: Using ep0 maxpacket: 8
[  565.379060][   T10] usb 1-1: config 0 has no interfaces?
[  565.386448][   T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  565.399398][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.407543][   T10] usb 1-1: Product: syz
[  565.414812][   T10] usb 1-1: Manufacturer: syz
[  565.419733][   T10] usb 1-1: SerialNumber: syz
[  565.431097][  T977] usb usb3-port1: attempt power cycle
[  565.438993][   T10] usb 1-1: config 0 descriptor??
[  566.449531][  T977] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  566.498073][  T977] usb 3-1: device descriptor read/8, error -71
[  566.895221][ T5925] usb 1-1: USB disconnect, device number 48
[  567.123988][T17147] Bluetooth: hci0: command 0x0405 tx timeout
[  567.291416][   T30] audit: type=1400 audit(567.273:824): avc:  denied  { watch } for  pid=17178 comm="syz.2.1632" path="/335/bus" dev="tmpfs" ino=1822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  567.354253][   T30] audit: type=1400 audit(567.293:825): avc:  denied  { watch_sb watch_reads } for  pid=17178 comm="syz.2.1632" path="/335/bus" dev="tmpfs" ino=1822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  567.515261][   T30] audit: type=1400 audit(567.473:826): avc:  denied  { append } for  pid=17178 comm="syz.2.1632" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  567.701393][T17249] netlink: del zone limit has 4 unknown bytes
[  567.842044][T17254] gfs2: gfs2 mount does not exist
[  567.859690][   T30] audit: type=1400 audit(567.833:827): avc:  denied  { bind } for  pid=17252 comm="syz.4.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  567.861150][T17254] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1635'.
[  567.961271][T17254] xt_policy: neither incoming nor outgoing policy selected
[  568.081105][T17252] delete_channel: no stack
[  568.510988][ T5911] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  568.691506][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.734661][ T5911] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  568.754522][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.778883][ T5911] usb 5-1: config 0 descriptor??
[  569.197858][ T5911] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  569.233071][ T5911] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input35
[  569.436256][T17265] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  569.548608][ T5911] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  571.019883][ T5925] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  571.212003][ T5925] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  571.229999][ T5925] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  571.251002][ T5925] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  571.267532][ T5925] usb 4-1: string descriptor 0 read error: -22
[  571.275706][ T5925] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  571.295316][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.367314][ T5925] adutux 4-1:168.0: interrupt endpoints not found
[  571.989851][ T5925] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  572.095076][   T10] usb 5-1: USB disconnect, device number 52
[  572.279800][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  572.899071][ T5925] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  573.093437][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  573.227352][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  573.238527][ T5925] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  573.253976][ T5925] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  573.740494][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.332894][ T5925] usb 1-1: usb_control_msg returned -32
[  574.352417][ T5925] usbtmc 1-1:16.0: can't read capabilities
[  574.416674][   T43] usb 4-1: USB disconnect, device number 40
[  574.763871][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  574.971119][   T43] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  575.186401][  T975] usb 1-1: USB disconnect, device number 49
[  575.261823][   T43] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[  575.271772][   T43] usb 4-1: config 0 has no interface number 0
[  575.297735][   T43] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  575.308213][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.321406][   T43] usb 4-1: config 0 descriptor??
[  575.334936][   T43] usb 4-1: selecting invalid altsetting 3
[  575.377712][   T43] comedi comedi5: could not set alternate setting 3 in high speed
[  575.386936][   T43] usbdux 4-1:0.207: driver 'usbdux' failed to auto-configure device.
[  575.397448][   T43] usbdux 4-1:0.207: probe with driver usbdux failed with error -22
[  575.890008][ T5898] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  576.009753][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  576.059729][ T5898] usb 5-1: Using ep0 maxpacket: 8
[  576.183159][ T5898] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  576.191749][ T5898] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  576.202447][ T5898] usb 5-1: config 127 has no interface number 1
[  576.208753][ T5898] usb 5-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  576.221955][  T977] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  576.659504][ T5898] usb 5-1: config 127 interface 171 has no altsetting 0
[  576.667339][ T5898] usb 5-1: config 127 interface 0 has no altsetting 0
[  576.674162][ T5925] usb 3-1: Using ep0 maxpacket: 8
[  576.680995][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  576.692090][ T5925] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  576.701334][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.711871][ T5925] usb 3-1: config 0 descriptor??
[  576.717283][ T5898] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  576.727598][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.736025][ T5898] usb 5-1: Product: syz
[  576.740316][ T5898] usb 5-1: Manufacturer: syz
[  576.744913][ T5898] usb 5-1: SerialNumber: syz
[  576.811947][  T977] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  576.821530][  T977] usb 1-1: config 0 has no interface number 0
[  576.827629][  T977] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  576.837398][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.848094][  T977] usb 1-1: config 0 descriptor??
[  576.856963][  T977] usb 1-1: selecting invalid altsetting 3
[  576.862802][  T977] comedi comedi5: could not set alternate setting 3 in high speed
[  576.870656][  T977] usbdux 1-1:0.207: driver 'usbdux' failed to auto-configure device.
[  576.880132][  T977] usbdux 1-1:0.207: probe with driver usbdux failed with error -22
[  576.958112][ T5925] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  577.017674][ T5898] xr_serial 5-1:127.171: xr_serial converter detected
[  577.030881][ T5898] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  577.037352][ T5898] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  577.050792][ T5898] usb 5-1: USB disconnect, device number 53
[  577.064107][ T5898] xr_serial 5-1:127.171: device disconnected
[  577.522444][   T43] usb 3-1: USB disconnect, device number 39
[  577.632521][ T5911] usb 4-1: USB disconnect, device number 41
[  578.054379][   T30] audit: type=1400 audit(578.033:828): avc:  denied  { ioctl } for  pid=17575 comm="syz.4.1666" path="socket:[38939]" dev="sockfs" ino=38939 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  578.136114][   T30] audit: type=1400 audit(578.113:829): avc:  denied  { write } for  pid=17575 comm="syz.4.1666" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  578.380490][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  578.576490][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  578.595488][ T5911] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  578.623384][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.693986][ T5911] usb 4-1: config 0 descriptor??
[  578.769720][ T5925] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  578.826136][   T43] usb 1-1: USB disconnect, device number 50
[  578.939801][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  578.952708][ T5925] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  578.964243][ T5925] usb 5-1: config 0 has no interface number 0
[  578.979450][ T5925] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  579.072559][ T5925] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  579.092164][ T5925] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  579.103079][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.112920][ T5925] usb 5-1: Product: syz
[  579.150878][ T5925] usb 5-1: Manufacturer: syz
[  579.152550][ T5911] hid_mf 0003:0079:1846.000E: reserved main item tag 0xd
[  579.156011][ T5925] usb 5-1: SerialNumber: syz
[  579.174691][ T5925] usb 5-1: config 0 descriptor??
[  579.181935][ T5911] hid_mf 0003:0079:1846.000E: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0
[  579.194593][T17588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.209852][T17588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.247323][ T5911] hid_mf 0003:0079:1846.000E: Invalid report, this should never happen!
[  579.287747][ T5911] hid_mf 0003:0079:1846.000E: Force feedback init failed.
[  579.363098][ T5911] usb 4-1: USB disconnect, device number 42
[  579.420539][T17588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.427789][T17588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  580.880911][ T5911] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  581.794400][ T5925] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  581.804655][ T5925] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  581.853134][ T5925] asix 5-1:0.251: probe with driver asix failed with error -71
[  582.351545][ T5925] usb 5-1: USB disconnect, device number 54
[  582.554572][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[  582.989751][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  583.511252][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  583.621886][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  583.868015][ T5898] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  584.149307][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.221672][ T5898] usb 4-1: config 0 descriptor??
[  584.227730][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'.
[  584.306157][   T30] audit: type=1400 audit(584.283:830): avc:  denied  { write } for  pid=17690 comm="syz.0.1684" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  584.350868][   T30] audit: type=1400 audit(584.283:831): avc:  denied  { getopt } for  pid=17688 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  584.358386][T17692] netlink: 'syz.1.1683': attribute type 5 has an invalid length.
[  584.411908][T17692] netlink: 'syz.1.1683': attribute type 7 has an invalid length.
[  584.444541][T17692] : entered promiscuous mode
[  584.517492][ T5898] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  584.539966][   T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  584.666086][T17724] ªªªªªª: renamed from wg2 (while UP)
[  584.691016][   T43] usb 5-1: Using ep0 maxpacket: 8
[  584.702593][   T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  584.713187][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.875394][   T43] pvrusb2: Hardware description: Terratec Grabster AV400
[  584.884995][   T43] pvrusb2: **********
[  584.901324][   T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  584.915848][   T43] pvrusb2: Important functionality might not be entirely working.
[  584.924602][   T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  585.022292][ T5911] usb 4-1: USB disconnect, device number 44
[  585.035875][T17683] comedi comedi3: reset error (fatal)
[  585.037409][   T43] pvrusb2: **********
[  585.122789][ T2329] pvrusb2: Invalid write control endpoint
[  585.479314][ T2329] pvrusb2: Invalid write control endpoint
[  585.594169][  T977] usb 5-1: USB disconnect, device number 55
[  585.614722][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  585.650884][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  585.674531][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  585.725080][ T2329] pvrusb2: Device being rendered inoperable
[  585.744670][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  585.789389][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  585.822092][ T2329] pvrusb2: Attached sub-driver cx25840
[  585.834155][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  585.876922][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  586.510949][   T43] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  586.660931][   T43] usb 5-1: Using ep0 maxpacket: 32
[  586.667593][   T43] usb 5-1: config 0 has an invalid interface number: 152 but max is 0
[  586.677053][   T43] usb 5-1: config 0 has no interface number 0
[  586.696738][   T43] usb 5-1: config 0 interface 152 has no altsetting 0
[  586.747369][   T43] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=b8.77
[  586.757706][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.793500][   T43] usb 5-1: Product: syz
[  586.818360][   T43] usb 5-1: Manufacturer: syz
[  586.854176][   T43] usb 5-1: SerialNumber: syz
[  586.878344][   T43] usb 5-1: config 0 descriptor??
[  586.897035][   T43] ati_remote 5-1:0.152: ati_remote_probe: Unexpected endpoint_in
[  587.574686][  T977] usb 5-1: USB disconnect, device number 56
[  587.580759][   T30] audit: type=1400 audit(587.553:832): avc:  denied  { append } for  pid=17774 comm="syz.4.1692" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  588.262905][T17801] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  588.311377][T17801] SELinux: failed to load policy
[  589.750535][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'.
[  589.799603][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'.
[  589.808689][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'.
[  590.139813][  T977] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  590.509845][  T977] usb 4-1: not running at top speed; connect to a high speed hub
[  590.527222][  T977] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  590.568710][  T977] usb 4-1: config 1 interface 0 has no altsetting 0
[  590.594975][  T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40
[  590.835711][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.854042][  T977] usb 4-1: Product: syz
[  590.863147][  T977] usb 4-1: SerialNumber: syz
[  591.172765][  T977] usbhid 4-1:1.0: can't add hid device: -71
[  591.188759][  T977] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  591.219838][  T977] usb 4-1: USB disconnect, device number 45
[  591.670977][T17147] Bluetooth: hci5: command 0x1003 tx timeout
[  591.677770][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  592.211373][   T43] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  592.372428][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.388966][   T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  592.452704][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  592.474753][T17884] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  592.486636][T17884] SELinux: failed to load policy
[  592.505243][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  592.538202][T17882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  592.563005][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  592.605372][   T30] audit: type=1400 audit(592.583:833): avc:  denied  { create } for  pid=17880 comm="syz.4.1708" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  592.680340][   T30] audit: type=1400 audit(592.663:834): avc:  denied  { unmount } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  592.714255][   T43] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  592.732800][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  592.740971][T17892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.741714][T17892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.095255][   T43] usb 2-1: Product: syz
[  593.099836][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  593.120392][   T43] usb 2-1: Manufacturer: syz
[  593.125033][   T43] usb 2-1: SerialNumber: syz
[  593.261396][   T43] usb 2-1: config 0 descriptor??
[  593.504380][   T43] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  593.521762][   T43] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  593.697389][   T43] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  593.711635][   T43] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  593.756144][   T43] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  593.911212][   T43] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  594.361340][T17928] kvm: pic: non byte write
[  594.369814][   T10] usb 4-1: device descriptor read/64, error -71
[  594.725789][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  594.942271][   T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  594.964201][   T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  594.983566][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.008193][   T43] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  595.008833][   T10] usb 4-1: config 0 descriptor??
[  595.018606][   T43] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  595.045620][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  595.051907][   T43] usb 2-1: USB disconnect, device number 36
[  595.526395][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  595.543571][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  595.557841][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  595.574655][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  595.608188][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  595.616690][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  595.627113][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  595.635573][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  595.723099][T17962] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  595.748658][T17962] SELinux: failed to load policy
[  595.912180][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  596.001214][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  596.129367][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  596.166012][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  596.177931][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  596.191242][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  596.212973][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  596.318694][ T5898] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  596.326831][   T10] pwc: Registered as video103.
[  596.334447][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38
[  596.351558][   T10] usb 4-1: USB disconnect, device number 47
[  596.900930][ T5898] usb 3-1: Using ep0 maxpacket: 8
[  596.911272][ T5898] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[  596.924767][ T5898] usb 3-1: config 127 has no interface number 1
[  596.935607][T17997] FAULT_INJECTION: forcing a failure.
[  596.935607][T17997] name failslab, interval 1, probability 0, space 0, times 0
[  596.948250][T17997] CPU: 0 UID: 0 PID: 17997 Comm: syz.0.1725 Not tainted syzkaller #0 PREEMPT(full) 
[  596.948272][T17997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  596.948283][T17997] Call Trace:
[  596.948289][T17997]  <TASK>
[  596.948296][T17997]  dump_stack_lvl+0x16c/0x1f0
[  596.948321][T17997]  should_fail_ex+0x512/0x640
[  596.948340][T17997]  ? fs_reclaim_acquire+0xae/0x150
[  596.948366][T17997]  ? tomoyo_encode2+0x100/0x3e0
[  596.948390][T17997]  should_failslab+0xc2/0x120
[  596.948410][T17997]  __kmalloc_noprof+0xd2/0x510
[  596.948435][T17997]  tomoyo_encode2+0x100/0x3e0
[  596.948467][T17997]  tomoyo_encode+0x29/0x50
[  596.948491][T17997]  tomoyo_realpath_from_path+0x18f/0x6e0
[  596.948519][T17997]  ? tomoyo_profile+0x47/0x60
[  596.948538][T17997]  tomoyo_path_number_perm+0x245/0x580
[  596.948559][T17997]  ? tomoyo_path_number_perm+0x237/0x580
[  596.948583][T17997]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  596.948606][T17997]  ? find_held_lock+0x2b/0x80
[  596.948651][T17997]  ? find_held_lock+0x2b/0x80
[  596.948671][T17997]  ? hook_file_ioctl_common+0x145/0x410
[  596.948694][T17997]  ? __fget_files+0x20e/0x3c0
[  596.948719][T17997]  security_file_ioctl+0x9b/0x240
[  596.948746][T17997]  __x64_sys_ioctl+0xb7/0x210
[  596.948777][T17997]  do_syscall_64+0xcd/0x4c0
[  596.948800][T17997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.948817][T17997] RIP: 0033:0x7f24f718ebe9
[  596.948831][T17997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.948848][T17997] RSP: 002b:00007f24f7fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  596.948869][T17997] RAX: ffffffffffffffda RBX: 00007f24f73c5fa0 RCX: 00007f24f718ebe9
[  596.948881][T17997] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  596.948891][T17997] RBP: 00007f24f7fe5090 R08: 0000000000000000 R09: 0000000000000000
[  596.948901][T17997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.948911][T17997] R13: 00007f24f73c6038 R14: 00007f24f73c5fa0 R15: 00007ffd363f4298
[  596.948935][T17997]  </TASK>
[  596.948967][T17997] ERROR: Out of memory at tomoyo_realpath_from_path.
[  597.242865][ T5898] usb 3-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  597.256517][ T5898] usb 3-1: config 127 interface 171 has no altsetting 0
[  597.265632][ T5898] usb 3-1: config 127 interface 0 has no altsetting 0
[  597.274469][ T5898] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  597.289850][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.297842][ T5898] usb 3-1: Product: syz
[  597.306285][ T5898] usb 3-1: Manufacturer: syz
[  597.315792][ T5898] usb 3-1: SerialNumber: syz
[  598.023874][ T5898] xr_serial 3-1:127.171: xr_serial converter detected
[  598.049917][ T5898] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  598.070540][ T5898] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  598.127726][ T5898] usb 3-1: USB disconnect, device number 40
[  598.243391][   T30] audit: type=1400 audit(598.223:835): avc:  denied  { map } for  pid=18037 comm="syz.4.1732" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  598.266515][    C0] vkms_vblank_simulate: vblank timer overrun
[  598.294189][ T5898] xr_serial 3-1:127.171: device disconnected
[  599.052198][   T30] audit: type=1400 audit(598.733:836): avc:  denied  { listen } for  pid=18049 comm="syz.4.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  599.897668][T18058] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.045024][   T30] audit: type=1326 audit(600.023:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.068619][   T30] audit: type=1326 audit(600.023:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.139167][   T30] audit: type=1326 audit(600.053:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.181619][   T30] audit: type=1326 audit(600.053:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.210071][ T5898] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  600.222213][   T30] audit: type=1326 audit(600.053:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.246588][   T30] audit: type=1326 audit(600.083:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.271865][   T30] audit: type=1326 audit(600.083:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.297065][   T30] audit: type=1326 audit(600.083:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374db8ebe9 code=0x7ffc0000
[  600.371928][ T5898] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  600.450331][ T5898] usb 1-1: config 1 interface 0 has no altsetting 0
[  600.459484][ T5898] usb 1-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.40
[  600.474003][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.482397][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  600.490462][ T5898] usb 1-1: Product: syz
[  600.495104][ T5898] usb 1-1: Manufacturer: syz
[  600.499881][ T5898] usb 1-1: SerialNumber: syz
[  600.651632][   T10] usb 2-1: Using ep0 maxpacket: 32
[  600.951687][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  600.992936][   T10] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  601.005073][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.016722][   T10] usb 2-1: config 0 descriptor??
[  601.756448][T18070] overlayfs: missing 'lowerdir'
[  601.777012][ T5898] usbhid 1-1:1.0: can't add hid device: -71
[  601.787761][ T5898] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  601.808248][ T5898] usb 1-1: USB disconnect, device number 51
[  601.817348][T18094] sp0: Synchronizing with TNC
[  602.029139][   T10] cypress 0003:04B4:ED81.000F: unknown main item tag 0x0
[  602.052487][   T10] cypress 0003:04B4:ED81.000F: item fetching failed at offset 3/5
[  602.336420][T18094] usb usb8: usbfs: process 18094 (syz.2.1737) did not claim interface 0 before use
[  602.485679][   T10] cypress 0003:04B4:ED81.000F: parse failed
[  602.491676][   T10] cypress 0003:04B4:ED81.000F: probe with driver cypress failed with error -22
[  603.525570][T18128] SELinux:  policydb magic number 0x3 does not match expected magic number 0xf97cff8c
[  603.535859][T18128] SELinux: failed to load policy
[  603.551302][T18128] SELinux: failed to load policy
[  603.563421][T18128] SELinux: failed to load policy
[  603.575545][T18128] SELinux: failed to load policy
[  603.588012][T18128] SELinux: failed to load policy
[  603.600842][T18128] SELinux: failed to load policy
[  603.613022][T18128] SELinux: failed to load policy
[  603.625106][T18128] SELinux: failed to load policy
[  603.637330][T18128] SELinux: failed to load policy
[  603.649381][T18128] SELinux: failed to load policy
[  603.749454][T18131] FAULT_INJECTION: forcing a failure.
[  603.749454][T18131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  603.766705][T18131] CPU: 0 UID: 0 PID: 18131 Comm: syz.0.1747 Not tainted syzkaller #0 PREEMPT(full) 
[  603.766730][T18131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  603.766739][T18131] Call Trace:
[  603.766745][T18131]  <TASK>
[  603.766751][T18131]  dump_stack_lvl+0x16c/0x1f0
[  603.766768][T18131]  should_fail_ex+0x512/0x640
[  603.766783][T18131]  _copy_from_user+0x2e/0xd0
[  603.766799][T18131]  kstrtouint_from_user+0xd6/0x1d0
[  603.766815][T18131]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  603.766824][T18131]  ? __lock_acquire+0xb97/0x1ce0
[  603.766848][T18131]  proc_fail_nth_write+0x83/0x220
[  603.766862][T18131]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  603.766878][T18131]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  603.766890][T18131]  vfs_write+0x29d/0x11d0
[  603.766904][T18131]  ? __pfx___mutex_lock+0x10/0x10
[  603.766917][T18131]  ? __pfx_vfs_write+0x10/0x10
[  603.766931][T18131]  ? __fget_files+0x20e/0x3c0
[  603.766947][T18131]  ksys_write+0x12a/0x250
[  603.766958][T18131]  ? __pfx_ksys_write+0x10/0x10
[  603.766968][T18131]  ? xfd_validate_state+0x61/0x180
[  603.766989][T18131]  do_syscall_64+0xcd/0x4c0
[  603.767003][T18131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.767014][T18131] RIP: 0033:0x7f24f718d69f
[  603.767023][T18131] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  603.767034][T18131] RSP: 002b:00007f24f7fc4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  603.767045][T18131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f24f718d69f
[  603.767052][T18131] RDX: 0000000000000001 RSI: 00007f24f7fc40a0 RDI: 0000000000000006
[  603.767058][T18131] RBP: 00007f24f7fc4090 R08: 0000000000000000 R09: 0000000000000000
[  603.767064][T18131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  603.767070][T18131] R13: 00007f24f73c6128 R14: 00007f24f73c6090 R15: 00007ffd363f4298
[  603.767084][T18131]  </TASK>
[  604.007816][ T5961] usb 2-1: USB disconnect, device number 37
[  604.889837][  T977] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  604.929727][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  605.021747][  T977] usb 5-1: device descriptor read/64, error -71
[  605.275601][ T5898] usb 4-1: device descriptor read/64, error -71
[  605.326995][T18170] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  605.335303][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  605.335318][   T30] audit: type=1400 audit(605.303:869): avc:  denied  { ioctl } for  pid=18169 comm="syz.1.1753" path="socket:[39852]" dev="sockfs" ino=39852 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  605.365666][  T977] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  605.431404][T18172] netlink: del zone limit has 4 unknown bytes
[  605.699700][ T5898] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  605.714371][   T30] audit: type=1400 audit(605.693:870): avc:  denied  { bind } for  pid=18169 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  605.719701][  T977] usb 5-1: device descriptor read/64, error -71
[  605.776441][   T30] audit: type=1400 audit(605.733:871): avc:  denied  { connect } for  pid=18169 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  605.837845][   T30] audit: type=1400 audit(605.753:872): avc:  denied  { write } for  pid=18169 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  605.890474][ T5898] usb 4-1: device descriptor read/64, error -71
[  605.897041][  T977] usb usb5-port1: attempt power cycle
[  606.000031][ T5898] usb usb4-port1: attempt power cycle
[  606.249920][  T977] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  606.302517][  T977] usb 5-1: device descriptor read/8, error -71
[  606.419798][ T5898] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  606.452913][ T5898] usb 4-1: device descriptor read/8, error -71
[  606.550106][  T977] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  606.570570][  T977] usb 5-1: device descriptor read/8, error -71
[  606.680037][  T977] usb usb5-port1: unable to enumerate USB device
[  606.719744][ T5898] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  606.740160][ T5898] usb 4-1: device descriptor read/8, error -71
[  606.850053][ T5898] usb usb4-port1: unable to enumerate USB device
[  607.091338][T18187] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  609.132916][   T30] audit: type=1400 audit(609.113:873): avc:  denied  { bind } for  pid=18224 comm="syz.3.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  609.174653][T18230] FAULT_INJECTION: forcing a failure.
[  609.174653][T18230] name failslab, interval 1, probability 0, space 0, times 0
[  609.194807][T18230] CPU: 1 UID: 0 PID: 18230 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) 
[  609.194831][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  609.194842][T18230] Call Trace:
[  609.194848][T18230]  <TASK>
[  609.194855][T18230]  dump_stack_lvl+0x16c/0x1f0
[  609.194880][T18230]  should_fail_ex+0x512/0x640
[  609.194900][T18230]  ? fs_reclaim_acquire+0xae/0x150
[  609.194927][T18230]  should_failslab+0xc2/0x120
[  609.194948][T18230]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  609.194968][T18230]  ? security_inode_alloc+0x3b/0x2b0
[  609.194995][T18230]  security_inode_alloc+0x3b/0x2b0
[  609.195025][T18230]  inode_init_always_gfp+0xce4/0x1030
[  609.195051][T18230]  alloc_inode+0x86/0x240
[  609.195076][T18230]  sock_alloc+0x40/0x280
[  609.195100][T18230]  __sock_create+0xc1/0x8d0
[  609.195130][T18230]  __sys_socket+0x14d/0x260
[  609.195155][T18230]  ? __pfx___sys_socket+0x10/0x10
[  609.195181][T18230]  ? syscall_trace_enter+0x1cb/0x240
[  609.195207][T18230]  __x64_sys_socket+0x72/0xb0
[  609.195233][T18230]  do_syscall_64+0xcd/0x4c0
[  609.195255][T18230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.195273][T18230] RIP: 0033:0x7f67d118ebe9
[  609.195288][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.195305][T18230] RSP: 002b:00007f67d20dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  609.195323][T18230] RAX: ffffffffffffffda RBX: 00007f67d13c5fa0 RCX: 00007f67d118ebe9
[  609.195334][T18230] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010
[  609.195344][T18230] RBP: 00007f67d20dc090 R08: 0000000000000000 R09: 0000000000000000
[  609.195354][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.195365][T18230] R13: 00007f67d13c6038 R14: 00007f67d13c5fa0 R15: 00007ffea3343a88
[  609.195389][T18230]  </TASK>
[  609.195852][T18230] socket: no more sockets
[  609.385812][   T30] audit: type=1400 audit(609.333:874): avc:  denied  { write } for  pid=18224 comm="syz.3.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  609.475447][   T30] audit: type=1800 audit(609.443:875): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1766" name="bus" dev="overlay" ino=1949 res=0 errno=0
[  610.229787][  T977] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  610.499744][  T977] usb 3-1: device descriptor read/64, error -71
[  610.520006][T18248] netlink: zone id is out of range
[  610.556018][T18248] netlink: zone id is out of range
[  610.584650][T18248] netlink: zone id is out of range
[  610.659751][T18248] netlink: zone id is out of range
[  610.684020][T18248] netlink: zone id is out of range
[  610.700891][T18248] netlink: zone id is out of range
[  610.787433][T18248] netlink: zone id is out of range
[  610.949812][  T977] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  611.119711][  T977] usb 3-1: device descriptor read/64, error -71
[  611.166335][T18265] overlayfs: missing 'lowerdir'
[  611.212549][   T30] audit: type=1400 audit(611.173:876): avc:  denied  { create } for  pid=18264 comm="syz.4.1772" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  611.234851][  T977] usb usb3-port1: attempt power cycle
[  611.701409][T18273] cgroup: Unknown subsys name 'cpuset'
[  611.964091][  T977] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  611.992042][  T977] usb 3-1: device descriptor read/8, error -71
[  612.139713][ T5898] usb 1-1: new low-speed USB device number 52 using dummy_hcd
[  612.259913][  T977] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  612.302036][  T977] usb 3-1: device descriptor read/8, error -71
[  612.339912][ T5898] usb 1-1: device descriptor read/64, error -71
[  612.411800][  T977] usb usb3-port1: unable to enumerate USB device
[  612.591335][ T5898] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  612.719095][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'.
[  612.807787][ T5898] usb 1-1: device descriptor read/64, error -71
[  612.990127][ T5898] usb usb1-port1: attempt power cycle
[  613.339754][ T5898] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  613.667186][ T5898] usb 1-1: device descriptor read/8, error -71
[  614.166119][T18319] random: crng reseeded on system resumption
[  614.198121][   T30] audit: type=1400 audit(614.173:877): avc:  denied  { firmware_load } for  pid=9960 comm="kworker/u8:17" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  614.222493][    C0] vkms_vblank_simulate: vblank timer overrun
[  614.289871][ T5898] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  614.612578][ T5898] usb 1-1: device descriptor read/8, error -71
[  615.031626][ T5898] usb usb1-port1: unable to enumerate USB device
[  616.783158][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'.
[  616.998882][T18356] hsr_slave_1 (unregistering): left promiscuous mode
[  617.016693][T18361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  617.664578][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'.
[  617.826939][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'.
[  617.846313][T18386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'.
[  617.950939][ T5911] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  618.122006][ T5911] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  618.304128][ T5911] usb 1-1: config 0 has no interface number 0
[  618.319063][ T5911] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df
[  618.344270][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.375064][ T5911] usb 1-1: config 0 descriptor??
[  618.397370][ T5911] usb 1-1: selecting invalid altsetting 3
[  618.435441][ T5911] comedi comedi5: could not set alternate setting 3 in high speed
[  618.569125][ T5911] usbdux 1-1:0.207: driver 'usbdux' failed to auto-configure device.
[  618.599171][ T5911] usbdux 1-1:0.207: probe with driver usbdux failed with error -22
[  619.462607][ T5911] usb 1-1: USB disconnect, device number 56
[  619.547831][   T30] audit: type=1400 audit(619.528:878): avc:  denied  { read } for  pid=18412 comm="syz.3.1804" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  619.569307][    C0] vkms_vblank_simulate: vblank timer overrun
[  619.578264][   T30] audit: type=1400 audit(619.538:879): avc:  denied  { open } for  pid=18412 comm="syz.3.1804" path="/358/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  619.585533][T18422] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  619.603561][T18425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  619.642572][T18425] block device autoloading is deprecated and will be removed.
[  619.766838][T18435] FAULT_INJECTION: forcing a failure.
[  619.766838][T18435] name failslab, interval 1, probability 0, space 0, times 0
[  619.787151][T18435] CPU: 0 UID: 0 PID: 18435 Comm: syz.3.1806 Not tainted syzkaller #0 PREEMPT(full) 
[  619.787175][T18435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  619.787186][T18435] Call Trace:
[  619.787192][T18435]  <TASK>
[  619.787199][T18435]  dump_stack_lvl+0x16c/0x1f0
[  619.787223][T18435]  should_fail_ex+0x512/0x640
[  619.787242][T18435]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  619.787264][T18435]  should_failslab+0xc2/0x120
[  619.787284][T18435]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  619.787302][T18435]  ? __alloc_skb+0x2b2/0x380
[  619.787325][T18435]  __alloc_skb+0x2b2/0x380
[  619.787342][T18435]  ? __pfx___alloc_skb+0x10/0x10
[  619.787362][T18435]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  619.787388][T18435]  netlink_alloc_large_skb+0x69/0x130
[  619.787410][T18435]  netlink_sendmsg+0x6a1/0xdd0
[  619.787436][T18435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  619.787466][T18435]  ____sys_sendmsg+0xa98/0xc70
[  619.787491][T18435]  ? copy_msghdr_from_user+0x10a/0x160
[  619.787509][T18435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  619.787545][T18435]  ___sys_sendmsg+0x134/0x1d0
[  619.787565][T18435]  ? __pfx____sys_sendmsg+0x10/0x10
[  619.787617][T18435]  __sys_sendmsg+0x16d/0x220
[  619.787637][T18435]  ? __pfx___sys_sendmsg+0x10/0x10
[  619.787674][T18435]  do_syscall_64+0xcd/0x4c0
[  619.787697][T18435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.787716][T18435] RIP: 0033:0x7f7ed858ebe9
[  619.787730][T18435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.787746][T18435] RSP: 002b:00007f7ed94b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.787763][T18435] RAX: ffffffffffffffda RBX: 00007f7ed87c5fa0 RCX: 00007f7ed858ebe9
[  619.787775][T18435] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  619.787786][T18435] RBP: 00007f7ed94b3090 R08: 0000000000000000 R09: 0000000000000000
[  619.787796][T18435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.787807][T18435] R13: 00007f7ed87c6038 R14: 00007f7ed87c5fa0 R15: 00007ffec3a73cf8
[  619.787831][T18435]  </TASK>
[  619.994461][    C0] vkms_vblank_simulate: vblank timer overrun
[  620.208858][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'.
[  620.242257][T18452] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  620.253873][T18452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.369340][T18456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  620.578081][   T30] audit: type=1400 audit(620.398:880): avc:  denied  { connect } for  pid=18453 comm="syz.0.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  622.189308][T18464] syz.3.1815: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  622.223147][T18464] CPU: 0 UID: 0 PID: 18464 Comm: syz.3.1815 Not tainted syzkaller #0 PREEMPT(full) 
[  622.223172][T18464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  622.223184][T18464] Call Trace:
[  622.223190][T18464]  <TASK>
[  622.223197][T18464]  dump_stack_lvl+0x16c/0x1f0
[  622.223224][T18464]  warn_alloc+0x248/0x3a0
[  622.223246][T18464]  ? __pfx_warn_alloc+0x10/0x10
[  622.223267][T18464]  ? __kmalloc_cache_node_noprof+0x272/0x420
[  622.223306][T18464]  ? packet_set_ring+0xb52/0x18d0
[  622.223334][T18464]  ? __vmalloc_node_noprof+0xad/0xf0
[  622.223365][T18464]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  622.223401][T18464]  ? packet_set_ring+0xb52/0x18d0
[  622.223435][T18464]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  622.223461][T18464]  ? alloc_pages_mpol+0x25a/0x550
[  622.223485][T18464]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  622.223510][T18464]  ? packet_set_ring+0xb52/0x18d0
[  622.223536][T18464]  __vmalloc_node_noprof+0xad/0xf0
[  622.223562][T18464]  ? packet_set_ring+0xb52/0x18d0
[  622.223593][T18464]  packet_set_ring+0xb52/0x18d0
[  622.223632][T18464]  packet_setsockopt+0x121b/0x33c0
[  622.223652][T18464]  ? sock_has_perm+0x259/0x2f0
[  622.223676][T18464]  ? __pfx_packet_setsockopt+0x10/0x10
[  622.223695][T18464]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  622.223729][T18464]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  622.223764][T18464]  ? find_held_lock+0x2b/0x80
[  622.223793][T18464]  ? selinux_socket_setsockopt+0x6a/0x80
[  622.223817][T18464]  ? __pfx_packet_setsockopt+0x10/0x10
[  622.223838][T18464]  do_sock_setsockopt+0xf0/0x1d0
[  622.223866][T18464]  __sys_setsockopt+0x1a0/0x230
[  622.223890][T18464]  __x64_sys_setsockopt+0xbd/0x160
[  622.223907][T18464]  ? do_syscall_64+0x91/0x4c0
[  622.223927][T18464]  ? lockdep_hardirqs_on+0x7c/0x110
[  622.223951][T18464]  do_syscall_64+0xcd/0x4c0
[  622.223973][T18464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.223992][T18464] RIP: 0033:0x7f7ed858ebe9
[  622.224007][T18464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  622.224025][T18464] RSP: 002b:00007f7ed94b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  622.224042][T18464] RAX: ffffffffffffffda RBX: 00007f7ed87c5fa0 RCX: 00007f7ed858ebe9
[  622.224054][T18464] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000b
[  622.224064][T18464] RBP: 00007f7ed8611e19 R08: 000000000000001c R09: 0000000000000000
[  622.224075][T18464] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  622.224085][T18464] R13: 00007f7ed87c6038 R14: 00007f7ed87c5fa0 R15: 00007ffec3a73cf8
[  622.224111][T18464]  </TASK>
[  622.224169][T18464] Mem-Info:
[  622.490545][ T5911] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  622.490629][T18464] active_anon:8442 inactive_anon:0 isolated_anon:0
[  622.490629][T18464]  active_file:20790 inactive_file:40835 isolated_file:0
[  622.490629][T18464]  unevictable:785 dirty:397 writeback:0
[  622.490629][T18464]  slab_reclaimable:8350 slab_unreclaimable:115972
[  622.490629][T18464]  mapped:30787 shmem:5259 pagetables:1075
[  622.490629][T18464]  sec_pagetables:0 bounce:0
[  622.490629][T18464]  kernel_misc_reclaimable:0
[  622.490629][T18464]  free:1264126 free_pcp:22955 free_cma:0
[  622.609424][T18464] Node 0 active_anon:33968kB inactive_anon:0kB active_file:83124kB inactive_file:163140kB unevictable:1604kB isolated(anon):0kB isolated(file):0kB mapped:123124kB dirty:1584kB writeback:0kB shmem:19500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12084kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  622.654224][ T5925] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  622.669658][T18464] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  622.720802][ T5911] usb 1-1: Using ep0 maxpacket: 8
[  622.765834][T18464] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  622.766066][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  622.807096][ T5911] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  622.831161][T18464] lowmem_reserve[]: 0 2479 2481 2481 2481
[  622.836811][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.836995][T18464] Node 0 DMA32 free:1154824kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35524kB inactive_anon:0kB active_file:83124kB inactive_file:161828kB unevictable:1604kB writepending:984kB present:3129332kB managed:2539364kB mlocked:68kB bounce:0kB free_pcp:74080kB local_pcp:33144kB free_cma:0kB
[  622.857880][ T5911] usb 1-1: config 0 descriptor??
[  622.879639][T18464] lowmem_reserve[]: 0 0 1 1 1
[  622.889100][T18464] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB
[  622.920484][ T5925] usb 5-1: device descriptor read/64, error -71
[  622.927871][T18464] lowmem_reserve[]: 0 0 0 0 0
[  622.932859][T18464] Node 1 Normal free:3886348kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:10848kB free_cma:0kB
[  622.968814][T18464] lowmem_reserve[]: 0 0 0 0 0
[  622.978940][T18464] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  622.999090][T18464] Node 0 DMA32: 3086*4kB (UME) 920*8kB (UME) 607*16kB (UM) 661*32kB (UME) 238*64kB (UME) 116*128kB (UME) 62*256kB (UME) 35*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 248*4096kB (UM) = 1154824kB
[  623.028840][T18464] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  623.050882][T18464] Node 1 Normal: 193*4kB (UE) 51*8kB (UME) 47*16kB (UME) 250*32kB (UE) 91*64kB (UME) 19*128kB (UME) 6*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3886348kB
[  623.071286][T18464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  623.081743][T18464] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  623.094519][T18464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  623.112226][T18464] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  623.122332][T18464] 66881 total pagecache pages
[  623.132322][T18464] 0 pages in swap cache
[  623.136575][T18464] Free swap  = 124996kB
[  623.144576][T18464] Total swap = 124996kB
[  623.148833][T18464] 2097051 pages RAM
[  623.157924][T18464] 0 pages HighMem/MovableOnly
[  623.164775][T18464] 430248 pages reserved
[  623.168991][T18464] 0 pages cma reserved
[  623.190634][ T5925] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  623.216126][ T5911] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  623.272269][   T30] audit: type=1400 audit(623.258:881): avc:  denied  { module_load } for  pid=18498 comm="syz.1.1821" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  623.306894][T18499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1821'.
[  623.329840][ T5925] usb 5-1: device descriptor read/64, error -71
[  623.341852][   T30] audit: type=1400 audit(623.328:882): avc:  denied  { ioctl } for  pid=18500 comm="syz.3.1822" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  623.516846][ T5925] usb usb5-port1: attempt power cycle
[  624.284686][  T975] usb 1-1: USB disconnect, device number 57
[  624.374738][   T10] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  624.384211][ T5925] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  624.630013][ T5925] usb 5-1: device not accepting address 63, error -71
[  624.645158][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  624.655457][   T30] audit: type=1400 audit(624.628:883): avc:  denied  { add_name } for  pid=18529 comm="syz.4.1828" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  624.660179][T18533] o2cb: This node has not been configured.
[  624.681790][T18533] o2cb: Cluster check failed. Fix errors before retrying.
[  624.689653][T18533] (syz.4.1828,18533,0):user_dlm_register:674 ERROR: status = -22
[  624.693301][   T30] audit: type=1400 audit(624.638:884): avc:  denied  { create } for  pid=18529 comm="syz.4.1828" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  624.718232][T18533] (syz.4.1828,18533,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus"
[  624.843993][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  624.871363][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.297205][   T10] usb 3-1: Product: syz
[  625.303070][   T10] usb 3-1: Manufacturer: syz
[  625.307946][   T10] usb 3-1: SerialNumber: syz
[  625.314053][   T30] audit: type=1400 audit(624.638:885): avc:  denied  { associate } for  pid=18529 comm="syz.4.1828" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  625.393844][T17147]  non-paged memory
[  625.398060][T17147] list_del corruption, ffff888045116d00->next is LIST_POISON1 (dead000000000100)
[  625.408716][T17147] ------------[ cut here ]------------
[  625.414308][T17147] kernel BUG at lib/list_debug.c:56!
[  625.429761][T17147] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  625.436185][T17147] CPU: 0 UID: 0 PID: 17147 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  625.445710][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  625.455745][T17147] Workqueue: hci0 hci_conn_timeout
[  625.460848][T17147] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200
[  625.467857][T17147] Code: 48 c7 c7 40 2d 16 8c e8 2d 78 af fc 90 0f 0b 4c 89 e7 e8 12 b7 13 fd 4c 89 e2 48 89 de 48 c7 c7 a0 2d 16 8c e8 10 78 af fc 90 <0f> 0b 48 89 ef e8 f5 b6 13 fd 48 89 ea 48 89 de 48 c7 c7 00 2e 16
[  625.487447][T17147] RSP: 0018:ffffc9000407fb78 EFLAGS: 00010282
[  625.493500][T17147] RAX: 000000000000004e RBX: ffff888045116d00 RCX: ffffffff819a4e09
[  625.501450][T17147] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005
[  625.509403][T17147] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000
[  625.517349][T17147] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100
[  625.525308][T17147] R13: dffffc0000000000 R14: ffff888035c7c658 R15: ffff888045116d00
[  625.533260][T17147] FS:  0000000000000000(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000
[  625.542173][T17147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  625.548738][T17147] CR2: 000055556ce115c8 CR3: 000000005b93b000 CR4: 00000000003526f0
[  625.556691][T17147] Call Trace:
[  625.559953][T17147]  <TASK>
[  625.562875][T17147]  _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0
[  625.569540][T17147]  hci_cancel_connect_sync+0xfa/0x2b0
[  625.574897][T17147]  hci_abort_conn+0x15a/0x340
[  625.579558][T17147]  hci_conn_timeout+0x1a2/0x210
[  625.584394][T17147]  process_one_work+0x9cf/0x1b70
[  625.589317][T17147]  ? __pfx_process_one_work+0x10/0x10
[  625.594670][T17147]  ? assign_work+0x1a0/0x250
[  625.599239][T17147]  worker_thread+0x6c8/0xf10
[  625.603812][T17147]  ? __kthread_parkme+0x19e/0x250
[  625.608819][T17147]  ? __pfx_worker_thread+0x10/0x10
[  625.613907][T17147]  kthread+0x3c5/0x780
[  625.617959][T17147]  ? __pfx_kthread+0x10/0x10
[  625.622525][T17147]  ? rcu_is_watching+0x12/0xc0
[  625.627282][T17147]  ? __pfx_kthread+0x10/0x10
[  625.631860][T17147]  ret_from_fork+0x5d4/0x6f0
[  625.636432][T17147]  ? __pfx_kthread+0x10/0x10
[  625.641007][T17147]  ret_from_fork_asm+0x1a/0x30
[  625.645763][T17147]  </TASK>
[  625.648759][T17147] Modules linked in:
[  625.653784][T17147] ---[ end trace 0000000000000000 ]---
[  625.710365][T17147] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200
[  625.717778][T17147] Code: 48 c7 c7 40 2d 16 8c e8 2d 78 af fc 90 0f 0b 4c 89 e7 e8 12 b7 13 fd 4c 89 e2 48 89 de 48 c7 c7 a0 2d 16 8c e8 10 78 af fc 90 <0f> 0b 48 89 ef e8 f5 b6 13 fd 48 89 ea 48 89 de 48 c7 c7 00 2e 16
[  625.752717][T17147] RSP: 0018:ffffc9000407fb78 EFLAGS: 00010282
[  625.758803][T17147] RAX: 000000000000004e RBX: ffff888045116d00 RCX: ffffffff819a4e09
[  625.767897][T17147] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005
[  625.776799][T17147] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000
[  625.785671][T17147] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100
[  625.794546][T17147] R13: dffffc0000000000 R14: ffff888035c7c658 R15: ffff888045116d00
[  625.804199][T17147] FS:  0000000000000000(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000
[  625.813168][T17147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  625.819836][T17147] CR2: 00007ffde5106da8 CR3: 00000000746e2000 CR4: 00000000003526f0
[  625.827827][T17147] Kernel panic - not syncing: Fatal exception
[  625.834055][T17147] Kernel Offset: disabled
[  625.838356][T17147] Rebooting in 86400 seconds..