last executing test programs:

23m18.621139717s ago: executing program 1 (id=73):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)) (fail_nth: 8)

23m17.863221566s ago: executing program 1 (id=74):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2) (fail_nth: 4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'gre0\x00', 0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$igmp(0x2, 0x3, 0x2)

23m15.394773516s ago: executing program 1 (id=80):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002340)='hfs\x00', 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000019080)=0x7)
keyctl$setperm(0x5, 0x0, 0x1000000)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0xfffffffffffffedc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400), 0x1, 0x20000014)
recvmmsg(r4, &(0x7f0000002200)=[{{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000940)=""/53, 0x35}], 0x4, &(0x7f0000000a00)=""/36, 0x24}}, {{&(0x7f0000000a40)=@in6, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/220, 0xdc}], 0x1, &(0x7f0000000c00)}, 0x70}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/115, 0x73}, {&(0x7f0000000d40)=""/27, 0x1b}], 0x2}, 0x5}, {{&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/120, 0x78}], 0x2, &(0x7f0000001f00)=""/72, 0x48}, 0x7}, {{&(0x7f0000001f80)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/192, 0xc0}], 0x1, &(0x7f0000002100)=""/224, 0xe0}, 0x2d}], 0x5, 0x2000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1251, &(0x7f00000190c0)={0x0, 0x100577, 0x20000, 0x2, 0x4a}, &(0x7f0000000340), &(0x7f0000011000))

23m11.373212245s ago: executing program 1 (id=87):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x206280, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x260480, 0x0)

23m11.079777067s ago: executing program 1 (id=92):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

23m10.365164934s ago: executing program 1 (id=99):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x81, 0x0)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080))
write$cgroup_int(r2, &(0x7f00000000c0)=0xffffffffffffffff, 0x12)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0xfffffffffffffffd, 0x1)
write$uinput_user_dev(r2, &(0x7f0000000140)={'syz0\x00', {0x7, 0x8, 0x9, 0x2}, 0x5, [0x283, 0x5, 0x1, 0x5, 0x9, 0x7f, 0x3, 0xf09, 0x7, 0x7f, 0x8, 0x7, 0x0, 0x4, 0x8, 0x2, 0x200, 0x2, 0x80000001, 0x2, 0x1, 0x6, 0x8, 0xfffffffe, 0x2, 0x9, 0x9, 0x7, 0x4c76, 0x800, 0xffff, 0x5, 0x2, 0x6, 0x1, 0x2, 0x3, 0x1, 0x0, 0x6, 0x400, 0xe, 0x171f1c52, 0xffff, 0x1, 0x7, 0x2, 0x6, 0x7, 0x5, 0x3, 0x5, 0x3, 0x619, 0x0, 0x2, 0x5, 0x2, 0x9, 0x43, 0xfffff000, 0x2, 0x3, 0x400], [0x8, 0x9, 0x7, 0xc, 0x6, 0x2, 0x0, 0xfffffff9, 0x2, 0x8000, 0x9, 0x3, 0x45, 0x6b, 0xd0, 0xeac, 0x2, 0x9, 0xfffff801, 0x3f, 0x1, 0x477d, 0x27, 0x8, 0xdcc, 0xa22, 0xf, 0x6, 0x8, 0x6, 0x3, 0xeb, 0x10001, 0x9, 0x17c, 0x3, 0x44f, 0x4, 0x6, 0x7, 0x3, 0x6, 0x8, 0xfffffff9, 0x8, 0x80, 0x2, 0x0, 0x9, 0x2, 0x199b, 0xb, 0x8, 0x9, 0x9, 0x7fffffff, 0xd, 0x9, 0x3e4, 0x3, 0x7fffffff, 0xb9, 0x2, 0x9], [0x3, 0x844, 0x3, 0x8, 0x0, 0x0, 0x8, 0x7ff, 0x81, 0xfffffffe, 0x9, 0x4, 0xb87, 0x3ff, 0x101, 0x0, 0xf2c1b5e, 0x2, 0x9, 0xff, 0xc5e1, 0x66, 0x5, 0x6, 0x8, 0x9, 0x6, 0x3, 0x8, 0xc08bd3d0, 0x43d, 0x51, 0x81, 0x8, 0x2, 0x6, 0xd, 0x7, 0x7, 0x3, 0x4, 0xb, 0x1, 0x7f, 0x1, 0x3, 0x101, 0xd8, 0x0, 0x57, 0x100, 0x81, 0x8, 0x0, 0x2, 0x4, 0x1000, 0x7, 0x6, 0x3cd, 0x9, 0xc98, 0x5, 0x3], [0x0, 0x6, 0x4, 0x6, 0x400, 0x3, 0x1, 0x5, 0x1, 0x10000, 0x6, 0x80, 0x238, 0x7ff, 0x6746, 0x7, 0x2, 0x2, 0x401, 0x80000000, 0x3ff, 0x7fff, 0x5, 0x649a669a, 0x5, 0xffffffff, 0xffffffff, 0xd, 0x1, 0x2, 0x0, 0x3e, 0x1, 0x4, 0x7, 0x9, 0x401, 0xb, 0x1, 0x3, 0xffff0f2c, 0x81, 0x1, 0xe000, 0x8, 0x6600, 0x4, 0x101, 0x0, 0x8000, 0x7f, 0xfffffff9, 0xfffffffd, 0x5, 0x0, 0xfffffff5, 0x9, 0x7, 0x7, 0x6, 0x0, 0x7, 0x6, 0x6]}, 0x45c)
getpid()
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x80, 0x5, 0x3, 0x2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x1, 0x9}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=<r5=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private2, @in6=@mcast2, 0x4e22, 0x0, 0x4e22, 0x29de, 0xa, 0x20, 0x20, 0x33, r4, r5}, {0x1, 0x66, 0x57a2, 0x0, 0xff, 0x8, 0xfff, 0x7}, {0x3, 0x2, 0x1, 0x5c2}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x3, 0x0, 0x2, 0x7, 0x4, 0x81}}, 0xe8)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000007c0)={{0x0, 0x3, 0x1ff, 0x2, 0x4}, 0x8, 0x10001, 0x2})
io_setup(0x0, &(0x7f0000000840)=<r6=>0x0)
clock_gettime(0x0, &(0x7f0000000940)={<r7=>0x0, <r8=>0x0})
io_getevents(r6, 0x9e, 0x5, &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000980)={r7, r8+10000000})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000a40)={0x2, 0x0, [{0x2, 0x5, 0x1, 0x0, @sint={0x5, 0x7}}, {0x9, 0x7, 0x1, 0x0, @msi={0x0, 0x3, 0x4, 0x339}}]})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000ac0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
socket$inet(0x2, 0x1, 0x7)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000b80)=0xffffffff)
recvmsg$unix(r2, &(0x7f0000003100)={&(0x7f0000000bc0), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f0000000dc0)=""/116, 0x74}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/101, 0x65}, {&(0x7f0000001f00)=""/190, 0xbe}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000003040)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r11=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r12=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x40010142)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000003140)={{0x1, 0x1, 0x18, <r13=>r3}, './file0\x00'})
ioctl$FIONCLEX(r13, 0x5450)
ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000003180)={0x6, "6f7e15be7797cdef348b00fbdc03877e7a099a6edec7c2558bb1e8507f712e9e"})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r12, 0x80286722, &(0x7f00000041c0)={&(0x7f00000031c0)=""/4096, 0x1000, 0x1, 0x79})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000004240)={0x0, 0x0, 0xa, 0x1000, r11})

23m8.731027109s ago: executing program 32 (id=99):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x81, 0x0)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080))
write$cgroup_int(r2, &(0x7f00000000c0)=0xffffffffffffffff, 0x12)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0xfffffffffffffffd, 0x1)
write$uinput_user_dev(r2, &(0x7f0000000140)={'syz0\x00', {0x7, 0x8, 0x9, 0x2}, 0x5, [0x283, 0x5, 0x1, 0x5, 0x9, 0x7f, 0x3, 0xf09, 0x7, 0x7f, 0x8, 0x7, 0x0, 0x4, 0x8, 0x2, 0x200, 0x2, 0x80000001, 0x2, 0x1, 0x6, 0x8, 0xfffffffe, 0x2, 0x9, 0x9, 0x7, 0x4c76, 0x800, 0xffff, 0x5, 0x2, 0x6, 0x1, 0x2, 0x3, 0x1, 0x0, 0x6, 0x400, 0xe, 0x171f1c52, 0xffff, 0x1, 0x7, 0x2, 0x6, 0x7, 0x5, 0x3, 0x5, 0x3, 0x619, 0x0, 0x2, 0x5, 0x2, 0x9, 0x43, 0xfffff000, 0x2, 0x3, 0x400], [0x8, 0x9, 0x7, 0xc, 0x6, 0x2, 0x0, 0xfffffff9, 0x2, 0x8000, 0x9, 0x3, 0x45, 0x6b, 0xd0, 0xeac, 0x2, 0x9, 0xfffff801, 0x3f, 0x1, 0x477d, 0x27, 0x8, 0xdcc, 0xa22, 0xf, 0x6, 0x8, 0x6, 0x3, 0xeb, 0x10001, 0x9, 0x17c, 0x3, 0x44f, 0x4, 0x6, 0x7, 0x3, 0x6, 0x8, 0xfffffff9, 0x8, 0x80, 0x2, 0x0, 0x9, 0x2, 0x199b, 0xb, 0x8, 0x9, 0x9, 0x7fffffff, 0xd, 0x9, 0x3e4, 0x3, 0x7fffffff, 0xb9, 0x2, 0x9], [0x3, 0x844, 0x3, 0x8, 0x0, 0x0, 0x8, 0x7ff, 0x81, 0xfffffffe, 0x9, 0x4, 0xb87, 0x3ff, 0x101, 0x0, 0xf2c1b5e, 0x2, 0x9, 0xff, 0xc5e1, 0x66, 0x5, 0x6, 0x8, 0x9, 0x6, 0x3, 0x8, 0xc08bd3d0, 0x43d, 0x51, 0x81, 0x8, 0x2, 0x6, 0xd, 0x7, 0x7, 0x3, 0x4, 0xb, 0x1, 0x7f, 0x1, 0x3, 0x101, 0xd8, 0x0, 0x57, 0x100, 0x81, 0x8, 0x0, 0x2, 0x4, 0x1000, 0x7, 0x6, 0x3cd, 0x9, 0xc98, 0x5, 0x3], [0x0, 0x6, 0x4, 0x6, 0x400, 0x3, 0x1, 0x5, 0x1, 0x10000, 0x6, 0x80, 0x238, 0x7ff, 0x6746, 0x7, 0x2, 0x2, 0x401, 0x80000000, 0x3ff, 0x7fff, 0x5, 0x649a669a, 0x5, 0xffffffff, 0xffffffff, 0xd, 0x1, 0x2, 0x0, 0x3e, 0x1, 0x4, 0x7, 0x9, 0x401, 0xb, 0x1, 0x3, 0xffff0f2c, 0x81, 0x1, 0xe000, 0x8, 0x6600, 0x4, 0x101, 0x0, 0x8000, 0x7f, 0xfffffff9, 0xfffffffd, 0x5, 0x0, 0xfffffff5, 0x9, 0x7, 0x7, 0x6, 0x0, 0x7, 0x6, 0x6]}, 0x45c)
getpid()
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x80, 0x5, 0x3, 0x2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x1, 0x9}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=<r5=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private2, @in6=@mcast2, 0x4e22, 0x0, 0x4e22, 0x29de, 0xa, 0x20, 0x20, 0x33, r4, r5}, {0x1, 0x66, 0x57a2, 0x0, 0xff, 0x8, 0xfff, 0x7}, {0x3, 0x2, 0x1, 0x5c2}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x3, 0x0, 0x2, 0x7, 0x4, 0x81}}, 0xe8)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000007c0)={{0x0, 0x3, 0x1ff, 0x2, 0x4}, 0x8, 0x10001, 0x2})
io_setup(0x0, &(0x7f0000000840)=<r6=>0x0)
clock_gettime(0x0, &(0x7f0000000940)={<r7=>0x0, <r8=>0x0})
io_getevents(r6, 0x9e, 0x5, &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000980)={r7, r8+10000000})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000a40)={0x2, 0x0, [{0x2, 0x5, 0x1, 0x0, @sint={0x5, 0x7}}, {0x9, 0x7, 0x1, 0x0, @msi={0x0, 0x3, 0x4, 0x339}}]})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000ac0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
socket$inet(0x2, 0x1, 0x7)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000b80)=0xffffffff)
recvmsg$unix(r2, &(0x7f0000003100)={&(0x7f0000000bc0), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f0000000dc0)=""/116, 0x74}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/101, 0x65}, {&(0x7f0000001f00)=""/190, 0xbe}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000003040)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r11=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r12=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x40010142)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000003140)={{0x1, 0x1, 0x18, <r13=>r3}, './file0\x00'})
ioctl$FIONCLEX(r13, 0x5450)
ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000003180)={0x6, "6f7e15be7797cdef348b00fbdc03877e7a099a6edec7c2558bb1e8507f712e9e"})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r12, 0x80286722, &(0x7f00000041c0)={&(0x7f00000031c0)=""/4096, 0x1000, 0x1, 0x79})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000004240)={0x0, 0x0, 0xa, 0x1000, r11})

11.549573715s ago: executing program 4 (id=5101):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendfile(r0, r1, 0x0, 0xf0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgrp(0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0) (async)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) (async)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffdba)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"})
r5 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r6})
mmap$IORING_OFF_SQ_RING(&(0x7f0000abf000/0x4000)=nil, 0x4000, 0x1, 0x110, r2, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8916, &(0x7f0000000000)) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8916, &(0x7f0000000000))
socket$alg(0x26, 0x5, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, 0x0, 0x0) (async)
bind$alg(r7, 0x0, 0x0)

10.470955685s ago: executing program 4 (id=5104):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18030000000000000000000000000040851000000600000095000000000000002326e70b9be8ef9478bc5f7c7e6b1e3e5ab0f813b196c906f24d887fd66327cdccba43ae7eb557acf8a81e600a1aa4b532c963dede9bb1ce52958ba4bf8e4a8740e668f1b3fcabea22fb15632f0ede5393c528ae4a56d459dc036ef770a8da65544cd423c38ffd4bdf50977a202572588b57516aca4f67175e6bab9a5858b2124dc92de9ee5379497594930dd0fb9af95ff549a6604977e9bcdc92c0ad170810545a0a8b651dc6f3c40313ec57691257d6c866abe13d102425c12203006de7e81a0ac5f5acbb51f3f13cb0964f0a6d30242556384d0cde"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
syz_open_dev$vcsn(&(0x7f0000000000), 0x47bc, 0x4000)
socket(0x2b, 0x80801, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x406, 0x4)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000015)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d60000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r3=>0x0})
r4 = gettid()
r5 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

8.626225283s ago: executing program 2 (id=5111):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x395}}], 0x18})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0xeeef0000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x2, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]})

8.481941819s ago: executing program 2 (id=5113):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

7.046784314s ago: executing program 2 (id=5116):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

7.043276188s ago: executing program 4 (id=5117):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x62, {"670fad1f41cf0f01bf00000000660f38829c2f46dc5dbe66b879008ee0c7442400ce000000c744240200500000ff1c244e0f38f92b0f5f3cfa66baf80cb819ea4282ef66bafc0cecc4c1ffe6bd00000000"}}], 0x62})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

6.877692572s ago: executing program 4 (id=5118):
mlockall(0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, 0x0)
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x20, 0x9, 0xd, "9c0705c7faacfbdc0707fd3600"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x9, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x6, 0xd398, 0x0, 0x8, 0xc}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x4, "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"})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

6.853512133s ago: executing program 0 (id=5119):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x8, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x1fc, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x2, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x200, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x6, 0xc, 0x0, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x2, 0xfffffff6, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000003, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x5, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x21000, 0x3b, 0x6, 0x5, 0x800, 0xa80c, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xffff7ff8, 0x405, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x1ff, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0)
r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
fsmount(r3, 0x1, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)

6.266343682s ago: executing program 5 (id=5120):
inotify_init()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe2}, 0x94)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r4 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5.988200793s ago: executing program 2 (id=5121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f00000003c0)=0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000003640)=[{{&(0x7f0000000440)=@file={0x0, './file1/file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000540)="0181faf02194c881fef0af1c197aa5a2aa0a983fd94c14b0dc879fa34e0392df269ef576859e981d67069547a628e7b93d146c1e39bf725a8af18806324b1eb2d5fb7c20e7f0ead8e631d276519241e2f97cb276c3d57c8dc60b7e917726319964bedba79b7534f48870b424352a99ffc3d8e9eae7f00e2823820dd1c04fac90b198e8385018c65595f96fb49decad2666", 0x91}, {&(0x7f0000000600)="5e3714caab27c028537248445b6056969dfbaac5274683f92cab55b75278c92e19ea1ea77a9faf8e7a2ec5f6ab2d4bc4933425e21a6847dec5972182aeb7512f72b4f25113ab27785b6b689556e9211e8dc7fd071b6cd7b84ce637c67b5e47bc75c018a099a126c2c1", 0x69}, {&(0x7f0000000680)="38b5e23335e1ce93082ff2326bf64ee1d3c2309f171a6826706e65a0dd31d79044497f3d41739ab5256a152fc6f3c8831958205247ef2eeaa679b491e2c982d648c5a27f55ede10c4313470ddfa13909bcad1647024c130e86ab997d59122b7c14d1645c8784b7abe35e09b4eb42a47bdaa23880f7689be55d215c3237ffaa3e5d8897976ff769bda760ec1e8a8dff6aff76618d69f9372c3262e157d02fb3f96bf3f705dd56b6ca4f37ab752589dfdd729e1b82b8d48a4b4ee330e3ec4ac989dfb3db2e", 0xc4}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000003480)="7d63fd78b5b370380be3d9e7f670e8a11fae9641a035e3adb52d24424bcbb32dcb244e6cd10a5c28137acbdd13a9fc89571a2a8f51923fad736c3bec4c0e9f2ef37ff4e6e86daaf2936f5990e337e8b22d816070813144890b33e6f7a927d35e5fc3ccc65fefb4b7fd46f8556556630e348fded9e5b8bf03c9468fb09c89f8415c2691a7e69951e1442177d41eac81ec1266133c4867a62e0fc5d6c95c1067b83e7317c7d3046ee13d65b30e7281f5bc11ab5bf1b4ed08", 0xb7}, {&(0x7f00000018c0)="582ea2943e5561c98497e0558a799190fdcc58df0a77a303252f584f43851fa6532c163129c9a68fca9e9c46d567b6669aa3aeac002635b8ddd4d88f097545f0755105cc535f4ca366a0260138374ebe4676138515af108210df49e849e10bd68c5f153e36c8795f9b44d4f29393ed1be9899086e57c11c4f1cce5f99bec23b311e59f4d984dc3d6cf3998a0e365b7872051be509312fc2dcfdcdb1ef22a9232d53ae89c7d3f3a3f8fb6e5d64780766bc2258517dd966aff6d129414b9aca784270e5368e66d666e879e4bdd1bd5ced590b7b35b5e20972a171db75afaa621548572c8358a38a0dd0b0bb62ea8a07413a9", 0xf1}], 0x6, &(0x7f0000002080)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00ly'], 0x110, 0x4040001}}, {{&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000001d00)="18a1d6514e6b99d5dd084f4fc3a5e0380c1a65ca9453ffa8b01ad4e4b3a3ac28ad3240297fec59e100a2a002fb680d0183dcf78c2024762a162c1d13221bfa104eac40eca74f52e556dad1ac7b1b0be0aa97e8b6ddd2ee0772b90c92de67df67904092e4ccf3b0b626e40a45aa3c5fad1620139185e9113d13879e60a9a619259930c6c7e5cd8aad6d02c39639c9596f646a97a3b64a003afb7c266194778784c480aeec3d34109486e559267819ee1bc9214bdecec38722814a16cba4930d5fde575700d6ed584f212f69c2e5eedc4793eee5c6241b3254d3d0a258510b40c0fac639e83a35d248042fde5a0ad19a41", 0xf0}], 0x1, &(0x7f0000001e00)=ANY=[@ANYBLOB="38000000000000000600000081000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="3ae0ca207eb6ed96e747ca704496d0a001f6e6129b9bcb5f7285fa28448dd233820735f4dfb502c6237cfd0e62e4b8b64247555d11f46c1bab41b76b1da5ab3b4ee0dc6d0615b19a0e0303bd34d3eff739ebd272025d20aa4be312c7947c62d83dcbe37f367dd3b01915635018c81b8e2d76ab40ab772d6a068bb3153d6c6b64a91abfee3105a9fc6a17366d279281a73c323bed9b4260e53141144bde4e242dd8a60fc0c23afd00dd85d2dea6", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="ea2000000001000067ae919410beb6daeb359248ae00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4}}, {{&(0x7f0000002000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003400)=[{&(0x7f00000030c0)="221cb33601b09e1541f7b0cea17a6c67ef79f91437006472967dababdf6f92896cca8e930d276cfddb68d748d63cb818a029e6e6f98d6e9e28b88d3eb8780440775a5d160ec574262aec1fc0ca219d77eb13c3b9cee1fc27ede1e45410631c63a87f992b85630fe20f019060fa1a67203da24f1704b38ef1ac1d4d900c71aad039bf98c7d505cb222ceddc1104506b954d371e7687418a3e2a323569226713b43c5bc643e07c27b36c5826b05687b8986323707595c726fa63941aa4b2e051cd1f665ef122cfd32c19ed7d581e337681fbc16968d2bdfe9f497426713acf9f10a85303aecd1479d817f6c6f407cdae9bd0020bc87c5b", 0xf6}, {&(0x7f00000031c0)="5e25eac5e08532c83b40c215230b7bc62fedca2b12664ee35f51c4ca8796f73cb9109fe96b9bb746be3d8037b94b7a3e3a10b80abdc7e98a42b8e7e32e57d6bfc057b4906a2b9ddec544183bcd5d10f679c3cefeb23e3d29b28f305e13f4528134beb9015d6bd838a7aab9e1f621b8b889b09ea70a30d869313d", 0x7a}, {&(0x7f0000003240)="7bce191a19aeb831b939bbd729405f8d9bacf68053b3d6fd723932fdd923d17ec07fb3942417ae976ff7f1bff689871a3362f203d0d1803ca942d56da96a03949a0424c4622975a0730c7de25246fc372480a312687f341d507c11e693b2a370170d667fc9209172572eb31867aa4f70e5356c", 0x73}, {&(0x7f00000032c0)="a8f77fdab2760a69a963", 0xa}, {&(0x7f0000003300)="cd3cff005f4529bcf3b27d14a512aeb913305ba5a9490ebecb569cdc35aa19913fe6900019295ac49a7ae8dd5e8b60e14d47c91ee78369d0e24e3e7372709899191d4436dfc6e327c812a67ada127c325116d2cf2a8eaf93a09f6da79032f986392012b39ea9605adce990e0fc28354a320360336dc45b5231bce2b94569b83663348f0e39949da3f8c44a7493715736f063f0ea704a5962a1be23cdcd2bc36484be0b2bda3eea939013e7e846a5eb6cd254ee394c0f5a0ab479c46a83412043d757e1349c9f51c16f992ece1377aa05b4255d43ddc1b0aecdf957f98b29d19df0a274f0", 0xe4}], 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000002000100000006002d38", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="008800000038000000000000000100000001000000", @ANYRES32, @ANYBLOB="0970c21444386aed41af9c773a23c33ec5f33b1bd8ef0ae5c21ed285a2eff56480af9f9c74c0daf8092200cd1b9b1bbba8e1013668795b8e7969bec010152c51aa430f6756d80f93d1a3e1d5f81914b5f76a01ad783baa74c90806e88b903e739d", @ANYBLOB="be73ff354fd9f76328ade94e141606547f294fe87a54c7abaabb7ed008a892925f7478b1d2f435935d2ea8292a50a0dfeb034beecff00f4345f42b81915ba966443e885f57d2960c10a991b88fa8916c44e3e0c8f7830dc3ffbc665cc5c2", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x90}}], 0x3, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000005)
sendto(0xffffffffffffffff, &(0x7f0000001a40)="ed280a0dc25a4549caf555b93c141dec4a811dc8c0e8f275463d5e10eccdaa549be7205e68b7bc1642266229735114537fe71bbeee00f02b5e1a0a71dd7dddda67fb83a56e4501726b7c494a4a953198", 0x50, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r1)
write$UHID_INPUT(r7, &(0x7f0000004740)={0xf, {"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", 0x1000}}, 0x1006)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
dup3(r5, r8, 0x80000)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
r9 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2, @tid=r9}, &(0x7f0000000080))
r10 = syz_open_procfs(r9, &(0x7f0000000100)='setgroups\x00')
pread64(r6, &(0x7f00000000c0)=""/40, 0x5b, 0x8010)
ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000300)={0xc})

5.831733289s ago: executing program 0 (id=5122):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r1 = getpid()
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc)
sched_setscheduler(r1, 0x0, &(0x7f0000000440)=0x40007)
mmap(&(0x7f00007c8000/0x1000)=nil, 0x1000, 0x1, 0x8031, 0xffffffffffffffff, 0x80cd1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
io_uring_setup(0x5b3d, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="2870e96c00160fb4deb8b9d3f31d24ff3e87df25c4a415942b4e4a581a8794107263b94d00f0a1fac0756ffe7ac56c7e97546defe2ccbdd3ca126639b4a50bde347ee9bc1f0810e5ad00e0c99b39fcde4aca10ba6989", 0xffffff08}], 0x1, 0x0, 0x0, 0x4040081}, {0x0, 0x0, 0x0}], 0x2, 0x40800)
fcntl$lock(r5, 0x5, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000058c0)=""/85, 0x55}], 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

5.727750192s ago: executing program 3 (id=5123):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x395}}], 0x18})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0xeeef0000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x2, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]})

5.714322785s ago: executing program 3 (id=5124):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
preadv2(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1, 0xbcf, 0x40, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(r5, 0x0, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2, 0x0, 0x600}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRDESCSIZE(r7, 0x4004480d, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.319480712s ago: executing program 0 (id=5125):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x8d, 0xe, 0x0, 0x0)

5.017992024s ago: executing program 2 (id=5126):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x7, 0x1, @value=0x100c})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x8)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

5.016256184s ago: executing program 5 (id=5127):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

3.965848945s ago: executing program 5 (id=5128):
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={&(0x7f00000004c0)=""/133, 0x85, 0x3, 0x1})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000090000000000080000000000000000000000000a000000e3ffffffffffffff00000000800000ffffffc662d2f2c5ffffffffff000000000000000000000000000000000700000000000000000a00000049111a1eab3c2e5ee4461a8d0000000600000000000000000000000000000800ac5b000000000000"], 0xb8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, r2)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lseek(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x4c)
epoll_create1(0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0)

3.836620198s ago: executing program 2 (id=5129):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150001"], 0x14}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, <r4=>0x0, 0x64, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0xffffffffffffffb8, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0xffffffffffffffb9}, './file0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x21880, 0x58, '\x00', 0x0, @fallback=0x1b, r3, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0xe61}, 0x10, r4, r3}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1f, 0x11, &(0x7f0000001400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000014c0)='GPL\x00', 0x3af9, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0xe, 0xffffffff, 0x671e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001580)=[0x1], 0x0, 0x10, 0xfffff34a}, 0x94) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001680)={0x0, 0x2, 0x18}, 0xc) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async)
writev(r7, &(0x7f00000003c0), 0x100000000000022d) (async)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@generic={&(0x7f00000016c0)='./file0\x00', 0x0, 0x10}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="62ba80005100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000080), 0x0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x1c, 0x80000001, 0xaabf, 0x0, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) (async)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0x7, 0x4, 0x4}, 0x10, r4, r5, 0x0, &(0x7f00000018c0)=[r6, r7, r8, r9, r10, r11, r12, r1]}, 0x94) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

3.606677232s ago: executing program 3 (id=5130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x30000004}, 0x0)

3.604837078s ago: executing program 5 (id=5131):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

3.459751876s ago: executing program 3 (id=5132):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x7, 0x1, @value=0x100c})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x8)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

3.458887325s ago: executing program 0 (id=5133):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000001c0)={0x4, 0x0, [{0x80000001, 0x100, 0x0, 0x7, 0xe, 0x8, 0x6ec9}, {0xc000001f, 0x7fffffff, 0x0, 0x2, 0x9, 0x6, 0x8}, {0x80000007, 0x6, 0x5, 0x4, 0x2, 0x1, 0x1000}, {0x40000009, 0x9, 0x6, 0x400, 0x10001, 0x8, 0x5}]})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, 0x0, 0x0, 0x12c)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000300)={0x40001, 0x0, {[0x3, 0x2, 0x7, 0x61, 0x8, 0x7ff, 0x100000001]}})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x8c}, 0x1, 0x0, 0x0, 0x851}, 0x4004840)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1001)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x33, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "becf3ee3e666fc38aba3656c"}, @ssrr={0x89, 0x13, 0xd2, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @empty]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x7}]}, @timestamp={0x44, 0x4, 0x3a, 0x0, 0x1}]}}}}}}}, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
linkat(r4, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x400)

1.147326922s ago: executing program 0 (id=5134):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x395}}], 0x18})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0xeeef0000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x2, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]})

1.145743435s ago: executing program 3 (id=5135):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x20}, {0x20, 0x0, 0x3, 0xfffff010}, {0x6, 0x0, 0xff, 0x2000003}]}, 0x10)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x58, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

1.14487773s ago: executing program 4 (id=5136):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x8, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x1fc, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x2, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x200, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x6, 0xc, 0x0, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x2, 0xfffffff6, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000003, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x5, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x21000, 0x3b, 0x6, 0x5, 0x800, 0xa80c, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xffff7ff8, 0x405, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x1ff, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
fsmount(r3, 0x1, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)

1.070080025s ago: executing program 5 (id=5137):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
listen(r5, 0x4000)
close(r5)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000340)=[{0x0, 0x6, 0xc, 0x1}, {0x2, 0x5, 0x3, 0x3}]})
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000480))
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0xa4, 0x30, 0x48b, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ctinfo={0x38, 0x2, 0x0, 0x0, {{0xb}, {0xfffffffffffffd2e, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x0, 0x3, {0x1, 0x5, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001400010024050000fddbdf25021f8bc8", @ANYRES32=r8, @ANYBLOB="000000000005000070633792393dce31ee1999abe4f79eab"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.001258472s ago: executing program 0 (id=5138):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x202080, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/98, 0x62)

188.134905ms ago: executing program 3 (id=5139):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x7, 0x1, @value=0x100c})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x8)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

185.872919ms ago: executing program 4 (id=5140):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0))
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0)
bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r10 = socket(0x22, 0x2, 0x24)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x6d)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x7f, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast2}], 0x10)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8)

0s ago: executing program 5 (id=5141):
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={&(0x7f00000004c0)=""/133, 0x85, 0x3, 0x1})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000090000000000080000000000000000000000000a000000e3ffffffffffffff00000000800000ffffffc662d2f2c5ffffffffff000000000000000000000000000000000700000000000000000a00000049111a1eab3c2e5ee4461a8d0000000600000000000000000000000000000800ac5b000000000000"], 0xb8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, r2)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lseek(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x4c)
epoll_create1(0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

0.633:8551): avc:  denied  { unmount } for  pid=18222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1354.795891][T16986] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[ 1354.901701][T23237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4675'.
[ 1354.932265][T23237] bond0: entered promiscuous mode
[ 1354.937696][T23237] bond_slave_0: entered promiscuous mode
[ 1354.944573][T23237] bond_slave_1: entered promiscuous mode
[ 1354.962342][T23237] team0: entered promiscuous mode
[ 1354.967463][T23237] team_slave_0: entered promiscuous mode
[ 1354.973969][T23237] team_slave_1: entered promiscuous mode
[ 1354.985262][T23237] debugfs: 'hsr1' already exists in 'hsr'
[ 1354.991067][T23237] Cannot create hsr debugfs directory
[ 1354.996555][T23237] hsr1: entered promiscuous mode
[ 1355.172283][T16986] usb 6-1: Invalid ep0 maxpacket: 64
[ 1355.327152][T16986] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[ 1355.352835][T16986] usb 6-1: Invalid ep0 maxpacket: 64
[ 1355.362682][T16986] usb usb6-port1: unable to enumerate USB device
[ 1355.453437][T23249] FAULT_INJECTION: forcing a failure.
[ 1355.453437][T23249] name failslab, interval 1, probability 0, space 0, times 0
[ 1355.482224][T23249] CPU: 1 UID: 0 PID: 23249 Comm: syz.4.4680 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1355.482254][T23249] Tainted: [L]=SOFTLOCKUP
[ 1355.482261][T23249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1355.482271][T23249] Call Trace:
[ 1355.482277][T23249]  <TASK>
[ 1355.482285][T23249]  dump_stack_lvl+0x16c/0x1f0
[ 1355.482315][T23249]  should_fail_ex+0x512/0x640
[ 1355.482331][T23249]  ? __kvmalloc_node_noprof+0x129/0xa40
[ 1355.482361][T23249]  should_failslab+0xc2/0x120
[ 1355.482385][T23249]  __kvmalloc_node_noprof+0x14a/0xa40
[ 1355.482406][T23249]  ? __pfx___debug_object_init+0x10/0x10
[ 1355.482429][T23249]  ? bucket_table_alloc.isra.0+0x88/0x460
[ 1355.482459][T23249]  ? bucket_table_alloc.isra.0+0x88/0x460
[ 1355.482481][T23249]  bucket_table_alloc.isra.0+0x88/0x460
[ 1355.482507][T23249]  rhashtable_init_noprof+0x41a/0x7e0
[ 1355.482530][T23249]  ? __init_waitqueue_head+0xca/0x150
[ 1355.482557][T23249]  rhltable_init_noprof+0x20/0x60
[ 1355.482581][T23249]  sta_info_init+0x27/0x160
[ 1355.482606][T23249]  ieee80211_alloc_hw_nm+0x87b/0x22b0
[ 1355.482631][T23249]  ? __local_bh_enable_ip+0xa4/0x120
[ 1355.482660][T23249]  mac80211_hwsim_new_radio+0x1d3/0x5150
[ 1355.482688][T23249]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1355.482711][T23249]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1355.482736][T23249]  hwsim_new_radio_nl+0xba2/0x1330
[ 1355.482757][T23249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1355.482782][T23249]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1355.482809][T23249]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1355.482841][T23249]  genl_family_rcv_msg_doit+0x209/0x2f0
[ 1355.482869][T23249]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1355.482903][T23249]  ? bpf_lsm_capable+0x9/0x10
[ 1355.482924][T23249]  ? security_capable+0x7e/0x260
[ 1355.482945][T23249]  ? ns_capable+0xd7/0x110
[ 1355.482971][T23249]  genl_rcv_msg+0x55c/0x800
[ 1355.483000][T23249]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1355.483026][T23249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1355.483052][T23249]  netlink_rcv_skb+0x158/0x420
[ 1355.483075][T23249]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1355.483114][T23249]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1355.483144][T23249]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1355.483169][T23249]  genl_rcv+0x28/0x40
[ 1355.483191][T23249]  netlink_unicast+0x5aa/0x870
[ 1355.483218][T23249]  ? __pfx_netlink_unicast+0x10/0x10
[ 1355.483251][T23249]  netlink_sendmsg+0x8c8/0xdd0
[ 1355.483278][T23249]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1355.483311][T23249]  ____sys_sendmsg+0xa5d/0xc30
[ 1355.483336][T23249]  ? copy_msghdr_from_user+0x10a/0x160
[ 1355.483362][T23249]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1355.483398][T23249]  ___sys_sendmsg+0x134/0x1d0
[ 1355.483419][T23249]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1355.483471][T23249]  __sys_sendmsg+0x16d/0x220
[ 1355.483492][T23249]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1355.483528][T23249]  do_syscall_64+0xcd/0xf80
[ 1355.483554][T23249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.483573][T23249] RIP: 0033:0x7f23e1d8f749
[ 1355.483587][T23249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1355.483604][T23249] RSP: 002b:00007f23e2d08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1355.483620][T23249] RAX: ffffffffffffffda RBX: 00007f23e1fe5fa0 RCX: 00007f23e1d8f749
[ 1355.483632][T23249] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[ 1355.483642][T23249] RBP: 00007f23e2d08090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.483652][T23249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1355.483662][T23249] R13: 00007f23e1fe6038 R14: 00007f23e1fe5fa0 R15: 00007ffdf2bc5fe8
[ 1355.483687][T23249]  </TASK>
[ 1355.716730][T23251] input: syz1 as /devices/virtual/input/input69
[ 1356.275705][T23246] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4678'.
[ 1358.003379][T23283] macvlan3: entered promiscuous mode
[ 1358.222435][ T5937] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1358.518547][ T5937] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1358.534169][ T5937] usb 5-1: config 0 has no interface number 0
[ 1358.556441][ T5937] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1358.571907][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.589465][ T5937] usb 5-1: Product: syz
[ 1358.647044][ T5937] usb 5-1: Manufacturer: syz
[ 1358.655263][ T5937] usb 5-1: SerialNumber: syz
[ 1358.664171][ T5937] usb 5-1: config 0 descriptor??
[ 1358.743848][T23294] lo speed is unknown, defaulting to 1000
[ 1359.088419][ T5937] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1359.108423][ T5937] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[ 1359.132541][T23282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.155517][ T5937] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[ 1359.220984][T11838] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1359.234087][T23282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.245818][   T30] audit: type=1400 audit(1768558925.123:8552): avc:  denied  { firmware_load } for  pid=5937 comm="kworker/1:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1359.400959][T23305] netlink: 'syz.0.4693': attribute type 2 has an invalid length.
[ 1359.432031][T11838] usb 6-1: Using ep0 maxpacket: 16
[ 1359.496398][T11838] usb 6-1: config 0 has no interfaces?
[ 1359.508565][T11838] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1359.537480][T11838] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1359.576300][T11838] usb 6-1: Manufacturer: syz
[ 1359.616616][T11838] usb 6-1: config 0 descriptor??
[ 1360.066876][T23294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1360.076280][T23294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1360.097041][   T30] audit: type=1400 audit(1768558926.033:8553): avc:  denied  { accept } for  pid=23289 comm="syz.5.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1360.365853][T23316] bond3: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1360.392218][T23316] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1361.147003][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.002881][T23338] FAULT_INJECTION: forcing a failure.
[ 1362.002881][T23338] name failslab, interval 1, probability 0, space 0, times 0
[ 1362.022657][T23338] CPU: 0 UID: 0 PID: 23338 Comm: syz.2.4702 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1362.022685][T23338] Tainted: [L]=SOFTLOCKUP
[ 1362.022692][T23338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1362.022702][T23338] Call Trace:
[ 1362.022708][T23338]  <TASK>
[ 1362.022715][T23338]  dump_stack_lvl+0x16c/0x1f0
[ 1362.022743][T23338]  should_fail_ex+0x512/0x640
[ 1362.022759][T23338]  ? __kmalloc_cache_node_noprof+0x62/0x830
[ 1362.022781][T23338]  should_failslab+0xc2/0x120
[ 1362.022802][T23338]  __kmalloc_cache_node_noprof+0x83/0x830
[ 1362.022820][T23338]  ? __alloc_workqueue+0x670/0x1810
[ 1362.022836][T23338]  ? lockdep_init_map_type+0x5c/0x270
[ 1362.022851][T23338]  ? __alloc_workqueue+0x670/0x1810
[ 1362.022861][T23338]  __alloc_workqueue+0x670/0x1810
[ 1362.022876][T23338]  alloc_workqueue_noprof+0xd2/0x200
[ 1362.022887][T23338]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1362.022905][T23338]  hci_register_dev+0x1cf/0xce0
[ 1362.022919][T23338]  hci_uart_tty_ioctl+0x89e/0xc80
[ 1362.022936][T23338]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[ 1362.022950][T23338]  tty_ioctl+0x700/0x1650
[ 1362.022964][T23338]  ? __pfx_tty_ioctl+0x10/0x10
[ 1362.022976][T23338]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1362.022996][T23338]  ? hook_file_ioctl_common+0x144/0x410
[ 1362.023010][T23338]  ? selinux_file_ioctl+0x180/0x270
[ 1362.023023][T23338]  ? selinux_file_ioctl+0xb4/0x270
[ 1362.023038][T23338]  ? __pfx_tty_ioctl+0x10/0x10
[ 1362.023050][T23338]  __x64_sys_ioctl+0x18e/0x210
[ 1362.023064][T23338]  do_syscall_64+0xcd/0xf80
[ 1362.023090][T23338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.023101][T23338] RIP: 0033:0x7f3914b8f749
[ 1362.023112][T23338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1362.023122][T23338] RSP: 002b:00007f391595f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1362.023133][T23338] RAX: ffffffffffffffda RBX: 00007f3914de5fa0 RCX: 00007f3914b8f749
[ 1362.023140][T23338] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003
[ 1362.023146][T23338] RBP: 00007f391595f090 R08: 0000000000000000 R09: 0000000000000000
[ 1362.023152][T23338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1362.023158][T23338] R13: 00007f3914de6038 R14: 00007f3914de5fa0 R15: 00007ffd04f8e6c8
[ 1362.023171][T23338]  </TASK>
[ 1362.023192][T23338] Bluetooth: Can't register HCI device
[ 1362.343145][T11838] usb 6-1: USB disconnect, device number 52
[ 1362.789689][T23332] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4700'.
[ 1363.383930][T23330] lec:lec_atm_close: lec0: Shut down!
[ 1363.792509][T23380] netlink: 'syz.2.4708': attribute type 2 has an invalid length.
[ 1364.436273][   T30] audit: type=1400 audit(1768558930.303:8554): avc:  denied  { ioctl } for  pid=23392 comm="syz.3.4714" path="socket:[81399]" dev="sockfs" ino=81399 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1364.622265][T11838] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1364.905107][ T5836] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1365.269708][T11838] usb 1-1: Using ep0 maxpacket: 32
[ 1365.285024][T11838] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1365.294823][T11838] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1365.296916][   T30] audit: type=1400 audit(1768558930.863:8555): avc:  denied  { create } for  pid=23401 comm="syz.5.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1365.324084][   T30] audit: type=1400 audit(1768558930.873:8556): avc:  denied  { connect } for  pid=23401 comm="syz.5.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1365.344043][T11838] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1365.361379][T11838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1365.372564][T11838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1365.386697][T11838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1365.397096][ T5836] usb 4-1: device descriptor read/64, error -71
[ 1365.405681][T11838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1365.415764][T11838] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1365.429198][T11838] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1365.438617][   T30] audit: type=1400 audit(1768558931.403:8557): avc:  denied  { mounton } for  pid=23405 comm="syz.2.4717" path="/422/file0" dev="tmpfs" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1365.440391][T11838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.576361][   T30] audit: type=1400 audit(1768558931.443:8558): avc:  denied  { remount } for  pid=23405 comm="syz.2.4717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1365.576866][T11838] usb 1-1: config 0 descriptor??
[ 1365.697333][   T30] audit: type=1400 audit(1768558931.643:8559): avc:  denied  { setopt } for  pid=23405 comm="syz.2.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1365.718822][ T5836] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1366.131113][ T5836] usb 4-1: device descriptor read/64, error -71
[ 1366.313288][ T5836] usb usb4-port1: attempt power cycle
[ 1366.326556][T23412] random: crng reseeded on system resumption
[ 1366.339593][   T30] audit: type=1400 audit(1768558932.293:8560): avc:  denied  { append } for  pid=23410 comm="syz.5.4718" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1366.394903][T23414] loop6: detected capacity change from 0 to 2640
[ 1366.401497][T23414] buffer_io_error: 22 callbacks suppressed
[ 1366.401505][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.415474][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.423303][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.431102][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.438975][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.446807][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.454650][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.462527][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.470326][T23414] ldm_validate_partition_table(): Disk read failed.
[ 1366.476981][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.484804][T23414] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1366.492649][T23414] Dev loop6: unable to read RDB block 0
[ 1366.498266][T23414]  loop6: unable to read partition table
[ 1366.503998][T23414] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1366.547130][   T30] audit: type=1400 audit(1768558932.293:8561): avc:  denied  { open } for  pid=23410 comm="syz.5.4718" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1366.741521][   T30] audit: type=1400 audit(1768558932.703:8562): avc:  denied  { connect } for  pid=23410 comm="syz.5.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1366.790801][T23416] 9pnet_fd: p9_fd_create_tcp (23416): problem connecting socket to 127.0.0.1
[ 1366.806416][ T5836] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1366.863849][ T5836] usb 4-1: device descriptor read/8, error -71
[ 1367.102275][ T5836] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1367.174939][ T5836] usb 4-1: device descriptor read/8, error -71
[ 1367.305701][ T5836] usb usb4-port1: unable to enumerate USB device
[ 1368.836430][T11838] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1368.851535][T11838] usb 1-1: USB disconnect, device number 15
[ 1368.860054][T11838] usblp0: removed
[ 1369.306116][T23435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4725'.
[ 1369.832597][   T30] audit: type=1326 audit(1768558935.803:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.042035][   T30] audit: type=1326 audit(1768558935.843:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.095839][   T30] audit: type=1326 audit(1768558935.843:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.255237][   T30] audit: type=1326 audit(1768558935.843:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.350247][T23456] loop6: detected capacity change from 0 to 2640
[ 1370.357150][T23456] ldm_validate_partition_table(): Disk read failed.
[ 1370.363848][T23456] Dev loop6: unable to read RDB block 0
[ 1370.369465][T23456]  loop6: unable to read partition table
[ 1370.375279][T23456] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1370.492553][   T30] audit: type=1326 audit(1768558935.903:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.804572][   T30] audit: type=1326 audit(1768558935.913:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1370.832125][   T30] audit: type=1326 audit(1768558935.913:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f894c18df90 code=0x7ffc0000
[ 1370.924000][   T30] audit: type=1326 audit(1768558935.913:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1371.024471][   T30] audit: type=1326 audit(1768558935.943:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1371.136464][   T30] audit: type=1326 audit(1768558935.943:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.5.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1371.573781][T23467] macvlan8: entered promiscuous mode
[ 1371.937337][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'.
[ 1372.069205][T23471] vcan1: entered promiscuous mode
[ 1372.075608][T23471] team0: Device vcan1 is up. Set it down before adding it as a team port
[ 1372.118179][T23472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=23472 comm=syz.3.4733
[ 1372.399042][T23476] overlayfs: missing 'workdir'
[ 1372.592344][ T5925] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1372.710756][T23491] netlink: 'syz.3.4739': attribute type 2 has an invalid length.
[ 1372.772009][ T5925] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[ 1372.792169][ T5925] usb 3-1: config 160 has no interface number 0
[ 1372.810084][ T5925] usb 3-1: config 160 interface 200 has no altsetting 0
[ 1372.969646][ T5925] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1373.014562][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.112190][ T5925] usb 3-1: Product: syz
[ 1373.116384][ T5925] usb 3-1: Manufacturer: syz
[ 1373.120975][ T5925] usb 3-1: SerialNumber: syz
[ 1373.366403][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1373.392188][ T5925] usb 3-1: MIDIStreaming interface descriptor not found
[ 1373.461473][ T5925] usb 3-1: USB disconnect, device number 74
[ 1373.904671][T23512] loop6: detected capacity change from 0 to 2640
[ 1373.911355][T23512] buffer_io_error: 22 callbacks suppressed
[ 1373.911370][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.925191][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.933199][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.941046][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.948940][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.956826][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.964980][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.972863][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.980662][T23512] ldm_validate_partition_table(): Disk read failed.
[ 1373.987871][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1373.995768][T23512] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1374.003685][T23512] Dev loop6: unable to read RDB block 0
[ 1374.009358][T23512]  loop6: unable to read partition table
[ 1374.015216][T23512] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1375.467922][T23539] netlink: 'syz.4.4753': attribute type 39 has an invalid length.
[ 1376.473086][T17168] kworker/0:2 (17168) used greatest stack depth: 16536 bytes left
[ 1376.657671][T23558] netlink: 'syz.4.4758': attribute type 3 has an invalid length.
[ 1376.694873][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'.
[ 1376.873899][T23559] ieee802154 phy1 wpan1: encryption failed: -22
[ 1377.222651][T23561] netlink: 'syz.2.4759': attribute type 2 has an invalid length.
[ 1377.564148][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1377.564159][   T30] audit: type=1400 audit(1768558943.533:8583): avc:  denied  { bind } for  pid=23566 comm="syz.4.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1377.824148][   T30] audit: type=1400 audit(1768558943.593:8584): avc:  denied  { listen } for  pid=23566 comm="syz.4.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1377.862398][   T30] audit: type=1400 audit(1768558943.773:8585): avc:  denied  { map } for  pid=23564 comm="syz.3.4760" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1377.940855][   T30] audit: type=1400 audit(1768558943.893:8586): avc:  denied  { execute } for  pid=23564 comm="syz.3.4760" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1378.094297][T23576] loop6: detected capacity change from 0 to 2640
[ 1378.101086][T23576] ldm_validate_partition_table(): Disk read failed.
[ 1378.107776][T23576] Dev loop6: unable to read RDB block 0
[ 1378.113650][T23576]  loop6: unable to read partition table
[ 1378.119350][T23576] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1378.616224][T23581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4764'.
[ 1378.768588][   T30] audit: type=1400 audit(1768558944.733:8587): avc:  denied  { mount } for  pid=23583 comm="syz.3.4765" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1379.102811][T23588] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 1379.855522][   T30] audit: type=1400 audit(1768558945.823:8588): avc:  denied  { unmount } for  pid=18065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1380.153509][T23596] FAULT_INJECTION: forcing a failure.
[ 1380.153509][T23596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1380.166773][T23596] CPU: 1 UID: 0 PID: 23596 Comm: syz.0.4768 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1380.166796][T23596] Tainted: [L]=SOFTLOCKUP
[ 1380.166802][T23596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1380.166811][T23596] Call Trace:
[ 1380.166817][T23596]  <TASK>
[ 1380.166823][T23596]  dump_stack_lvl+0x16c/0x1f0
[ 1380.166849][T23596]  should_fail_ex+0x512/0x640
[ 1380.166866][T23596]  _copy_from_user+0x2e/0xd0
[ 1380.166889][T23596]  copy_msghdr_from_user+0x98/0x160
[ 1380.166907][T23596]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1380.166929][T23596]  ? __lock_acquire+0x436/0x2890
[ 1380.166951][T23596]  ___sys_recvmsg+0xdb/0x1a0
[ 1380.166968][T23596]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1380.166997][T23596]  ? __pfx___might_resched+0x10/0x10
[ 1380.167017][T23596]  do_recvmmsg+0x2fe/0x750
[ 1380.167037][T23596]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1380.167058][T23596]  ? __mutex_unlock_slowpath+0x161/0x790
[ 1380.167086][T23596]  ? __fget_files+0x20e/0x3c0
[ 1380.167112][T23596]  __x64_sys_recvmmsg+0x22a/0x280
[ 1380.167131][T23596]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1380.167155][T23596]  do_syscall_64+0xcd/0xf80
[ 1380.167178][T23596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.167193][T23596] RIP: 0033:0x7fd0e5b8f749
[ 1380.167207][T23596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1380.167222][T23596] RSP: 002b:00007fd0e6aa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1380.167238][T23596] RAX: ffffffffffffffda RBX: 00007fd0e5de6090 RCX: 00007fd0e5b8f749
[ 1380.167247][T23596] RDX: 000000000000072a RSI: 0000200000000080 RDI: 0000000000000005
[ 1380.167257][T23596] RBP: 00007fd0e6aa5090 R08: 0000000000000000 R09: 0000000000000000
[ 1380.167266][T23596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.167275][T23596] R13: 00007fd0e5de6128 R14: 00007fd0e5de6090 R15: 00007ffec347f138
[ 1380.167296][T23596]  </TASK>
[ 1380.182014][   T30] audit: type=1400 audit(1768558946.123:8589): avc:  denied  { shutdown } for  pid=23593 comm="syz.0.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1380.462483][T16986] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1380.613844][T16986] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.636741][T16986] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1380.669164][T16986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1380.682206][T16986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.705864][T16986] usb 4-1: Product: syz
[ 1380.710035][T16986] usb 4-1: Manufacturer: syz
[ 1380.732127][T16986] usb 4-1: SerialNumber: syz
[ 1380.742372][T16986] cdc_mbim 4-1:1.0: skipping garbage
[ 1380.933570][   T30] audit: type=1400 audit(1768558946.903:8590): avc:  denied  { create } for  pid=23600 comm="syz.2.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1381.093098][T23595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1382.024475][T23595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.035280][T23595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.082597][T23610] input: syz1 as /devices/virtual/input/input70
[ 1382.105504][T23595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1382.204599][T16986] cdc_mbim 4-1:1.0: setting tx_max = 184
[ 1382.211077][T16986] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[ 1382.334010][   T30] audit: type=1400 audit(1768558948.303:8591): avc:  denied  { write } for  pid=23606 comm="syz.2.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1382.391804][T23615] vxfs: WRONG superblock magic 00000000 at 1
[ 1382.398380][T23615] vxfs: WRONG superblock magic 00000000 at 8
[ 1382.404446][T23615] vxfs: can't find superblock.
[ 1382.647467][    C1] wdm_int_callback: 1195 callbacks suppressed
[ 1382.647488][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.660224][    C1] wdm_int_callback: 1195 callbacks suppressed
[ 1382.660235][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.672938][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.679605][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.685911][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.692567][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.699010][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.705658][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.712513][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.719181][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.725483][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.732158][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.738501][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.745175][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.751560][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.758234][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.765489][T16986] wwan wwan0: port wwan0mbim0 attached
[ 1382.772060][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.778731][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1382.792038][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[ 1382.798711][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[ 1383.027001][T23607] bond1: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1383.044029][T23607] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1383.053412][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.060145][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.066568][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.140344][T23614] infiniband syz2: set active
[ 1383.145053][T23614] infiniband syz2: added vxcan1
[ 1383.150723][T23614] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1383.153775][T23614] infiniband syz2: Couldn't open port 1
[ 1383.169922][T18493] vxcan1 speed is unknown, defaulting to 1000
[ 1383.181689][T23614] RDS/IB: syz2: added
[ 1383.185772][T23614] smc: adding ib device syz2 with port count 1
[ 1383.191897][T23614] smc:    ib device syz2 port 1 has no pnetid
[ 1383.199001][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.278239][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.359034][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.440623][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.521320][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.600930][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.680941][T23614] vxcan1 speed is unknown, defaulting to 1000
[ 1383.806347][T18493] vxcan1 speed is unknown, defaulting to 1000
[ 1383.835152][T16986] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 96:34:9c:7f:d4:2a
[ 1383.865509][T16986] usb 4-1: USB disconnect, device number 126
[ 1383.874309][T16986] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[ 1384.850194][   T30] audit: type=1400 audit(1768558950.463:8592): avc:  denied  { mount } for  pid=23620 comm="syz.2.4775" name="/" dev="rpc_pipefs" ino=82438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1384.913990][T16986] wwan wwan0: port wwan0mbim0 disconnected
[ 1385.094882][   T30] audit: type=1400 audit(1768558951.053:8593): avc:  denied  { map } for  pid=23624 comm="syz.4.4777" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1385.125107][T23633] overlayfs: failed to resolve './file0/file0': -2
[ 1385.947747][T23646] FAULT_INJECTION: forcing a failure.
[ 1385.947747][T23646] name failslab, interval 1, probability 0, space 0, times 0
[ 1385.961055][T23646] CPU: 0 UID: 0 PID: 23646 Comm: syz.0.4781 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1385.961081][T23646] Tainted: [L]=SOFTLOCKUP
[ 1385.961088][T23646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1385.961097][T23646] Call Trace:
[ 1385.961104][T23646]  <TASK>
[ 1385.961111][T23646]  dump_stack_lvl+0x16c/0x1f0
[ 1385.961137][T23646]  should_fail_ex+0x512/0x640
[ 1385.961157][T23646]  should_failslab+0xc2/0x120
[ 1385.961180][T23646]  kmem_cache_alloc_noprof+0x83/0x770
[ 1385.961196][T23646]  ? __pfx___alloc_skb+0x10/0x10
[ 1385.961212][T23646]  ? sctp_chunkify+0x51/0x300
[ 1385.961235][T23646]  ? sctp_chunkify+0x51/0x300
[ 1385.961252][T23646]  sctp_chunkify+0x51/0x300
[ 1385.961272][T23646]  _sctp_make_chunk+0x148/0x270
[ 1385.961293][T23646]  sctp_make_control+0x2f/0x2d0
[ 1385.961314][T23646]  sctp_make_init+0x6f0/0xdc0
[ 1385.961341][T23646]  ? __pfx_sctp_make_init+0x10/0x10
[ 1385.961432][T23646]  ? irqentry_exit+0x1dd/0x8c0
[ 1385.961455][T23646]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1385.961484][T23646]  ? sctp_sm_lookup_event+0x15b/0x570
[ 1385.961516][T23646]  ? __pfx_sctp_sm_lookup_event+0x10/0x10
[ 1385.961540][T23646]  sctp_sf_do_prm_asoc+0xbf/0x360
[ 1385.961567][T23646]  ? __pfx_sctp_pname+0x10/0x10
[ 1385.961586][T23646]  sctp_do_sm+0x181/0x5e00
[ 1385.961610][T23646]  ? kasan_save_stack+0x42/0x60
[ 1385.961627][T23646]  ? kasan_save_stack+0x33/0x60
[ 1385.961645][T23646]  ? kasan_save_track+0x14/0x30
[ 1385.961664][T23646]  ? __pfx_sctp_do_sm+0x10/0x10
[ 1385.961680][T23646]  ? sctp_sendmsg+0xe99/0x1e20
[ 1385.961695][T23646]  ? __sys_sendto+0x43c/0x520
[ 1385.961710][T23646]  ? __x64_sys_sendto+0xe0/0x1c0
[ 1385.961725][T23646]  ? do_syscall_64+0xcd/0xf80
[ 1385.961746][T23646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1385.961790][T23646]  ? __sk_mem_raise_allocated+0x77d/0x14e0
[ 1385.961816][T23646]  sctp_primitive_ASSOCIATE+0x9c/0xd0
[ 1385.961837][T23646]  sctp_sendmsg_to_asoc+0xa4a/0x1c50
[ 1385.961862][T23646]  ? sctp_assoc_set_primary+0x177/0x300
[ 1385.961887][T23646]  ? sctp_assoc_add_peer+0x252/0x1540
[ 1385.961917][T23646]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[ 1385.961940][T23646]  ? sctp_connect_new_asoc+0x41e/0x770
[ 1385.961961][T23646]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1385.961978][T23646]  ? selinux_sctp_bind_connect+0x112/0x2c0
[ 1385.962008][T23646]  sctp_sendmsg+0xe99/0x1e20
[ 1385.962032][T23646]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1385.962054][T23646]  ? __pfx_sock_has_perm+0x10/0x10
[ 1385.962087][T23646]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1385.962105][T23646]  inet_sendmsg+0x11c/0x140
[ 1385.962125][T23646]  __sys_sendto+0x43c/0x520
[ 1385.962141][T23646]  ? __pfx___sys_sendto+0x10/0x10
[ 1385.962156][T23646]  ? __schedule+0x114c/0x6150
[ 1385.962200][T23646]  ? rcu_is_watching+0x12/0xc0
[ 1385.962220][T23646]  __x64_sys_sendto+0xe0/0x1c0
[ 1385.962235][T23646]  ? do_syscall_64+0x91/0xf80
[ 1385.962256][T23646]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1385.962279][T23646]  do_syscall_64+0xcd/0xf80
[ 1385.962303][T23646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1385.962319][T23646] RIP: 0033:0x7fd0e5b8f749
[ 1385.962334][T23646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1385.962349][T23646] RSP: 002b:00007fd0e6a84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1385.962366][T23646] RAX: ffffffffffffffda RBX: 00007fd0e5de6180 RCX: 00007fd0e5b8f749
[ 1385.962377][T23646] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[ 1385.962393][T23646] RBP: 00007fd0e6a84090 R08: 000020000005ffe4 R09: 000000000000001c
[ 1385.962403][T23646] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[ 1385.962413][T23646] R13: 00007fd0e5de6218 R14: 00007fd0e5de6180 R15: 00007ffec347f138
[ 1385.962437][T23646]  </TASK>
[ 1386.325098][ T5836] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1386.502447][ T5836] usb 3-1: Using ep0 maxpacket: 8
[ 1386.508766][ T5836] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1386.517157][ T5836] usb 3-1: config 179 has no interface number 0
[ 1386.523635][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1386.534754][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1386.546982][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1386.558214][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1386.624905][ T5836] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1386.638299][ T5836] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1386.651812][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.674470][T23642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1387.047123][T23673] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4789'.
[ 1387.319639][T23642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.329677][T23642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.354409][T18493] usb 3-1: USB disconnect, device number 75
[ 1387.354522][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1387.368982][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 1387.411132][T23676] input: syz1 as /devices/virtual/input/input71
[ 1387.972749][T23681] macvlan8: entered promiscuous mode
[ 1388.574573][T23684] fuse: Bad value for 'fd'
[ 1388.898911][T23693] bond4: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1388.965065][T23695] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1388.992842][   T30] audit: type=1400 audit(1768558954.933:8594): avc:  denied  { write } for  pid=23690 comm="syz.5.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1389.295697][T23693] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1389.443852][T23700] input: syz1 as /devices/virtual/input/input72
[ 1390.147967][T23708] bond6: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1390.159317][T23708] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1390.231136][T23711] loop6: detected capacity change from 0 to 2640
[ 1390.251864][T23711] buffer_io_error: 22 callbacks suppressed
[ 1390.251874][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.292292][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.553324][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.561184][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.590975][T18493] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1390.737365][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.745810][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.757178][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.792424][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.803406][T23711] ldm_validate_partition_table(): Disk read failed.
[ 1390.812333][T18493] usb 6-1: Using ep0 maxpacket: 32
[ 1390.812334][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.812364][T23711] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.818842][T18493] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1390.879216][T23711] Dev loop6: unable to read RDB block 0
[ 1390.884862][T18493] usb 6-1: config 0 has no interfaces?
[ 1390.903173][T18493] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1390.944684][T18493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.954421][T23711]  loop6: unable to read partition table
[ 1390.978288][T23711] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1391.009282][T18493] usb 6-1: config 0 descriptor??
[ 1391.195151][T23722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4803'.
[ 1391.208578][T23722] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4803'.
[ 1391.281229][T23722] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4803'.
[ 1391.419558][T23725] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 1391.863046][T23728] binder: 23712:23728 ioctl c0306201 200000000600 returned -22
[ 1392.016441][T23734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4805'.
[ 1392.100040][T23734] netlink: 604 bytes leftover after parsing attributes in process `syz.3.4805'.
[ 1392.136238][T23734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4805'.
[ 1392.169630][T23740] xt_hashlimit: overflow, try lower: 17592186044416/11
[ 1392.430268][   T30] audit: type=1400 audit(1768558958.393:8595): avc:  denied  { map } for  pid=23749 comm="syz.2.4809" path="/439/file1" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1392.643565][T23754] fuse: Bad value for 'fd'
[ 1393.102248][T16986] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1393.163069][   T30] audit: type=1400 audit(1768558959.133:8596): avc:  denied  { read } for  pid=23762 comm="syz.2.4815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1393.211373][T23766] kvm: kvm [23765]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6
[ 1393.249763][   T30] audit: type=1400 audit(1768558959.213:8597): avc:  denied  { execute } for  pid=23767 comm="syz.2.4817" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1393.298565][T16986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.309117][T16986] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49
[ 1393.319214][T16516] usb 6-1: USB disconnect, device number 53
[ 1393.325774][T16986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.337503][T16986] usb 4-1: config 0 descriptor??
[ 1393.450081][T23774] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1393.457241][T23774] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1393.624788][T16986] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[ 1393.828654][T16986] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[ 1393.842248][T16986] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[ 1393.888754][T16516] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1393.967518][T16986] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[ 1394.067518][T16986] usb 4-1: USB disconnect, device number 127
[ 1394.096402][T16516] usb 6-1: Using ep0 maxpacket: 32
[ 1394.354582][T16516] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1394.364760][T16516] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1394.382351][T16516] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1394.443831][T23787] netlink: zone id is out of range
[ 1394.449138][T23787] netlink: zone id is out of range
[ 1394.454892][T23787] netlink: zone id is out of range
[ 1394.460655][T23787] netlink: zone id is out of range
[ 1394.466633][T23787] netlink: zone id is out of range
[ 1394.473012][T16516] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1394.482552][T23787] netlink: zone id is out of range
[ 1394.492154][T23787] netlink: zone id is out of range
[ 1394.497114][T16516] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1394.504486][T23787] netlink: zone id is out of range
[ 1394.512471][T23787] netlink: zone id is out of range
[ 1394.516642][T16516] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1394.530257][T16516] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1394.540710][T16516] usb 6-1: Product: syz
[ 1394.545235][T16516] usb 6-1: Manufacturer: syz
[ 1394.550064][T23787] netlink: zone id is out of range
[ 1394.682356][T16516] usb 6-1: SerialNumber: syz
[ 1394.684532][T23791] input: syz1 as /devices/virtual/input/input73
[ 1394.701172][T16516] usb 6-1: config 0 descriptor??
[ 1394.714364][T16516] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1394.726528][T16516] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1395.265882][T16516] usb 6-1: USB disconnect, device number 54
[ 1395.277044][T16516] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1395.332598][   T30] audit: type=1400 audit(1768558961.293:8598): avc:  denied  { setattr } for  pid=23801 comm="syz.0.4828" name="NETLINK" dev="sockfs" ino=83521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1395.864053][T23815] fuse: Bad value for 'fd'
[ 1396.107659][T23821] FAULT_INJECTION: forcing a failure.
[ 1396.107659][T23821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1396.121391][T23821] CPU: 0 UID: 0 PID: 23821 Comm: syz.2.4832 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1396.121418][T23821] Tainted: [L]=SOFTLOCKUP
[ 1396.121424][T23821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1396.121434][T23821] Call Trace:
[ 1396.121440][T23821]  <TASK>
[ 1396.121446][T23821]  dump_stack_lvl+0x16c/0x1f0
[ 1396.121474][T23821]  should_fail_ex+0x512/0x640
[ 1396.121494][T23821]  _copy_to_iter+0x463/0x1710
[ 1396.121524][T23821]  ? __pfx__copy_to_iter+0x10/0x10
[ 1396.121554][T23821]  ? seq_read_iter+0x94b/0x12d0
[ 1396.121581][T23821]  seq_read_iter+0x71e/0x12d0
[ 1396.121613][T23821]  seq_read+0x3a3/0x570
[ 1396.121632][T23821]  ? __pfx_seq_read+0x10/0x10
[ 1396.121650][T23821]  ? irqentry_exit+0x1dd/0x8c0
[ 1396.121688][T23821]  ? __pfx_seq_read+0x10/0x10
[ 1396.121706][T23821]  proc_reg_read+0x240/0x330
[ 1396.121727][T23821]  ? __pfx_proc_reg_read+0x10/0x10
[ 1396.121746][T23821]  vfs_readv+0x5c1/0x8b0
[ 1396.121767][T23821]  ? __pfx_vfs_readv+0x10/0x10
[ 1396.121799][T23821]  ? __fget_files+0x20e/0x3c0
[ 1396.121819][T23821]  ? irqentry_exit+0xe0/0x8c0
[ 1396.121845][T23821]  ? do_preadv+0x1a6/0x270
[ 1396.121861][T23821]  do_preadv+0x1a6/0x270
[ 1396.121880][T23821]  ? __pfx_do_preadv+0x10/0x10
[ 1396.121899][T23821]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 1396.121923][T23821]  do_syscall_64+0xcd/0xf80
[ 1396.121950][T23821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.121966][T23821] RIP: 0033:0x7f3914b8f749
[ 1396.121980][T23821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1396.121995][T23821] RSP: 002b:00007f391593e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1396.122010][T23821] RAX: ffffffffffffffda RBX: 00007f3914de6090 RCX: 00007f3914b8f749
[ 1396.122019][T23821] RDX: 0000000000000006 RSI: 00002000000008c0 RDI: 0000000000000005
[ 1396.122029][T23821] RBP: 00007f391593e090 R08: 0000000020000000 R09: 0000000000000000
[ 1396.122039][T23821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1396.122047][T23821] R13: 00007f3914de6128 R14: 00007f3914de6090 R15: 00007ffd04f8e6c8
[ 1396.122070][T23821]  </TASK>
[ 1397.152398][T11838] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1397.179451][   T30] audit: type=1400 audit(1768558963.143:8599): avc:  denied  { create } for  pid=23840 comm="syz.2.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1397.292919][T11838] usb 1-1: device descriptor read/64, error -71
[ 1397.663619][T11838] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1398.252539][T11838] usb 1-1: device descriptor read/64, error -71
[ 1398.255259][   T30] audit: type=1400 audit(1768558964.193:8600): avc:  denied  { read write } for  pid=23849 comm="syz.3.4842" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1398.312021][T16516] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1398.312618][   T30] audit: type=1400 audit(1768558964.193:8601): avc:  denied  { open } for  pid=23849 comm="syz.3.4842" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1398.403875][T11838] usb usb1-port1: attempt power cycle
[ 1398.482308][T16516] usb 3-1: Using ep0 maxpacket: 32
[ 1398.499009][T16516] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1398.538638][T16516] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1398.563055][T16516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1398.821712][T16516] usb 3-1: config 1 has no interface number 0
[ 1398.843448][T16516] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1398.853316][T23862] bond2: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1398.875940][T23862] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1398.882036][T11838] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1398.961736][T16516] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1398.987598][T11838] usb 1-1: device descriptor read/8, error -71
[ 1399.010627][T16516] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1399.029155][T16516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.050036][T16516] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[ 1399.232369][T11838] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1399.249184][T23852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23852 comm=syz.2.4843
[ 1399.316235][T11838] usb 1-1: device descriptor read/8, error -71
[ 1399.367132][T16516] snd_usb_pod 3-1:1.1: invalid control EP
[ 1399.401475][T16516] snd_usb_pod 3-1:1.1: cannot start listening: -22
[ 1399.561080][T16516] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[ 1399.568574][T11838] usb usb1-port1: unable to enumerate USB device
[ 1399.580231][T16516] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1399.604838][T16516] usb 3-1: USB disconnect, device number 76
[ 1400.703826][T23878] netlink: 'syz.5.4850': attribute type 2 has an invalid length.
[ 1400.710907][T23892] input: syz1 as /devices/virtual/input/input76
[ 1400.750655][   T30] audit: type=1400 audit(1768558966.713:8602): avc:  denied  { mounton } for  pid=23895 comm="syz.2.4855" path="/454/file0" dev="tmpfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1400.755616][T23896] !
: renamed from dummy0 (while UP)
[ 1401.092172][T16516] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1401.201616][   T30] audit: type=1400 audit(1768558967.163:8603): avc:  denied  { getopt } for  pid=23902 comm="syz.5.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1401.282030][T16516] usb 3-1: Using ep0 maxpacket: 32
[ 1401.290210][T16516] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[ 1401.302464][T16516] usb 3-1: config 0 has no interface number 0
[ 1401.320427][T16516] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1401.333393][T16516] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1401.346806][T16516] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1401.365054][T16516] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1401.376470][T16516] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1401.642816][T16516] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1401.659746][T16516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1401.672740][T16516] usb 3-1: Product: syz
[ 1401.678308][T16516] usb 3-1: Manufacturer: syz
[ 1401.684458][T16516] usb 3-1: SerialNumber: syz
[ 1401.699131][T16516] usb 3-1: config 0 descriptor??
[ 1401.707658][T23899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1401.717505][T16516] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input77
[ 1401.728073][ T5171] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 1403.114196][   T30] audit: type=1400 audit(1768558969.083:8604): avc:  denied  { mounton } for  pid=23921 comm="syz.0.4863" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1403.403895][   T30] audit: type=1400 audit(1768558969.083:8605): avc:  denied  { mount } for  pid=23921 comm="syz.0.4863" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1403.545004][   T30] audit: type=1400 audit(1768558969.403:8606): avc:  denied  { read } for  pid=23921 comm="syz.0.4863" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1404.301019][T16516] usb 3-1: USB disconnect, device number 77
[ 1405.414804][T23941] 9pnet_virtio: no channels available for device 
[ 1407.371360][T23969] nfs4: Bad value for 'source'
[ 1407.380318][T23971] FAULT_INJECTION: forcing a failure.
[ 1407.380318][T23971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1407.384224][   T30] audit: type=1400 audit(1768558973.353:8607): avc:  denied  { create } for  pid=23968 comm="syz.3.4875" name="#f8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1407.437751][   T30] audit: type=1400 audit(1768558973.383:8608): avc:  denied  { link } for  pid=23968 comm="syz.3.4875" name="#f8" dev="tmpfs" ino=1791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1407.442207][T23971] CPU: 0 UID: 0 PID: 23971 Comm: syz.5.4876 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1407.442230][T23971] Tainted: [L]=SOFTLOCKUP
[ 1407.442235][T23971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1407.442244][T23971] Call Trace:
[ 1407.442249][T23971]  <TASK>
[ 1407.442255][T23971]  dump_stack_lvl+0x16c/0x1f0
[ 1407.442280][T23971]  should_fail_ex+0x512/0x640
[ 1407.442298][T23971]  _copy_from_user+0x2e/0xd0
[ 1407.442320][T23971]  kstrtouint_from_user+0xd6/0x1d0
[ 1407.442337][T23971]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1407.442353][T23971]  ? __lock_acquire+0x436/0x2890
[ 1407.442374][T23971]  ? lock_acquire+0x179/0x330
[ 1407.442394][T23971]  proc_fail_nth_write+0x83/0x220
[ 1407.442412][T23971]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1407.442432][T23971]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1407.442446][T23971]  vfs_write+0x2a0/0x11d0
[ 1407.442466][T23971]  ? __pfx___mutex_lock+0x10/0x10
[ 1407.442488][T23971]  ? __pfx_vfs_write+0x10/0x10
[ 1407.442511][T23971]  ? __fget_files+0x20e/0x3c0
[ 1407.442537][T23971]  ksys_write+0x12a/0x250
[ 1407.442554][T23971]  ? __pfx_ksys_write+0x10/0x10
[ 1407.442570][T23971]  ? rcu_is_watching+0x12/0xc0
[ 1407.442591][T23971]  do_syscall_64+0xcd/0xf80
[ 1407.442612][T23971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.442627][T23971] RIP: 0033:0x7f894c18e1ff
[ 1407.442639][T23971] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1407.442652][T23971] RSP: 002b:00007f894d0ed030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1407.442667][T23971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f894c18e1ff
[ 1407.442676][T23971] RDX: 0000000000000001 RSI: 00007f894d0ed0a0 RDI: 0000000000000003
[ 1407.442684][T23971] RBP: 00007f894d0ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1407.442693][T23971] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[ 1407.442701][T23971] R13: 00007f894c3e6038 R14: 00007f894c3e5fa0 R15: 00007ffe5b356538
[ 1407.442722][T23971]  </TASK>
[ 1407.806043][   T30] audit: type=1400 audit(1768558973.383:8609): avc:  denied  { rename } for  pid=23968 comm="syz.3.4875" name="#f9" dev="tmpfs" ino=1791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1408.001880][T23981] macvlan4: entered promiscuous mode
[ 1408.680489][   T30] audit: type=1804 audit(1768558974.643:8610): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4882" name="/newroot/395/file1" dev="fuse" ino=1 res=1 errno=0
[ 1409.989180][   T30] audit: type=1400 audit(1768558975.943:8611): avc:  denied  { setopt } for  pid=24007 comm="syz.2.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1411.592954][T24033] netlink: 'syz.4.4892': attribute type 12 has an invalid length.
[ 1411.601283][T24033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4892'.
[ 1411.975304][   T30] audit: type=1326 audit(1768558977.873:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.087612][T24033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4892'.
[ 1412.121572][   T30] audit: type=1326 audit(1768558977.873:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.157645][   T30] audit: type=1326 audit(1768558977.873:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.187569][T18346] kernel read not supported for file task/1137/net/netlink (pid: 18346 comm: kworker/0:8)
[ 1412.312463][   T30] audit: type=1326 audit(1768558977.873:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.357836][   T30] audit: type=1326 audit(1768558977.873:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.419882][T24045] input: syz1 as /devices/virtual/input/input78
[ 1412.579497][   T30] audit: type=1326 audit(1768558977.913:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.815403][   T30] audit: type=1326 audit(1768558977.983:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1412.842939][   T30] audit: type=1326 audit(1768558977.983:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24036 comm="syz.5.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f894c18f749 code=0x7ffc0000
[ 1414.353638][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1414.353654][   T30] audit: type=1400 audit(1768558980.323:8629): avc:  denied  { watch } for  pid=24052 comm="syz.3.4899" path="/335/file0" dev="tmpfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1414.406999][   T30] audit: type=1400 audit(1768558980.323:8630): avc:  denied  { watch_sb watch_reads } for  pid=24052 comm="syz.3.4899" path="/335/file0" dev="tmpfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1415.520923][T24069] netlink: 'syz.4.4904': attribute type 21 has an invalid length.
[ 1415.537775][T24069] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4904'.
[ 1415.553895][T24069] netlink: 'syz.4.4904': attribute type 21 has an invalid length.
[ 1415.570029][T24069] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4904'.
[ 1415.675163][   T30] audit: type=1400 audit(1768558981.643:8631): avc:  denied  { shutdown } for  pid=24074 comm="syz.2.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1415.757736][   T30] audit: type=1400 audit(1768558981.643:8632): avc:  denied  { ioctl } for  pid=24074 comm="syz.2.4905" path="socket:[85090]" dev="sockfs" ino=85090 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1416.105870][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'.
[ 1416.507557][T24091] bond2: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1416.532064][T18346] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1416.596395][T24091] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1416.817337][T18346] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1416.856631][T18346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.879209][T18346] usb 6-1: Product: syz
[ 1416.893354][T18346] usb 6-1: Manufacturer: syz
[ 1416.909879][T18346] usb 6-1: SerialNumber: syz
[ 1417.376972][T18346] net_ratelimit: 45 callbacks suppressed
[ 1417.376994][T18346] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1417.439369][T18346] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1417.495019][   T30] audit: type=1400 audit(1768558983.463:8633): avc:  denied  { map } for  pid=24098 comm="syz.4.4912" path="socket:[85149]" dev="sockfs" ino=85149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1417.593722][   T30] audit: type=1400 audit(1768558983.563:8634): avc:  denied  { read accept } for  pid=24098 comm="syz.4.4912" path="socket:[85149]" dev="sockfs" ino=85149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1418.086922][T24120] macvlan8: entered promiscuous mode
[ 1418.361089][T16986] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1418.528727][T16986] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1418.544152][T16986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.559568][T16986] usb 1-1: Product: syz
[ 1418.568993][T16986] usb 1-1: Manufacturer: syz
[ 1418.575677][T16986] usb 1-1: SerialNumber: syz
[ 1418.589302][T16986] usb 1-1: config 0 descriptor??
[ 1418.735543][T16986] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1418.776186][T18346] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1418.788417][T18346] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1418.802418][T18346] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1418.802863][T24116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1418.821314][T24116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1418.822801][T18346] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[ 1419.022073][T18346] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1419.056196][T24129] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4917'.
[ 1419.066355][T16986] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[ 1419.081982][T16986] sq905c 1-1:0.0: Reading version command failed
[ 1419.088339][T16986] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[ 1419.113624][T16986] usb 1-1: USB disconnect, device number 20
[ 1419.192223][T18346] usb 3-1: Using ep0 maxpacket: 32
[ 1419.198991][T18346] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1419.217016][T18346] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1419.236001][T18346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.320192][T18346] usb 3-1: config 0 descriptor??
[ 1419.718729][T24135] tipc: Started in network mode
[ 1419.724435][T24135] tipc: Node identity 84e, cluster identity 4711
[ 1419.730935][T24135] tipc: Node number set to 2126
[ 1419.991861][T24141] binder: 24127:24141 ioctl c0306201 200000000600 returned -22
[ 1420.673449][T24147] kAFS: unable to lookup cell 'ÿ'
[ 1420.854912][T24147] kAFS: unable to lookup cell '(,c¾Ì'
[ 1421.019280][ T5865] usb 6-1: USB disconnect, device number 55
[ 1421.529389][T24154] overlayfs: missing 'workdir'
[ 1421.868877][T16986] usb 3-1: USB disconnect, device number 78
[ 1422.198803][T24161] overlayfs: missing 'workdir'
[ 1422.461204][   T30] audit: type=1400 audit(1768558988.423:8635): avc:  denied  { lock } for  pid=24163 comm="syz.2.4927" path="socket:[84764]" dev="sockfs" ino=84764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[ 1422.519196][T24162] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4926'.
[ 1422.544466][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.572960][ T5937] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1422.689041][ T5937] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[ 1422.769788][T24166] lo speed is unknown, defaulting to 1000
[ 1422.770721][ T5937] usb 5-1: USB disconnect, device number 95
[ 1422.821210][T24166] vxcan1 speed is unknown, defaulting to 1000
[ 1422.922058][ T5865] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1423.072961][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1423.152207][T18493] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1423.312063][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1423.335544][T18493] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1423.350127][T18493] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1423.367417][T18493] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1423.384830][T18493] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1423.402307][T18493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.410370][T18493] usb 6-1: Product: syz
[ 1423.414874][T18493] usb 6-1: Manufacturer: syz
[ 1423.420485][T18493] usb 6-1: SerialNumber: syz
[ 1423.427700][T18493] usb 6-1: config 0 descriptor??
[ 1423.433607][T24176] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1423.440829][T24176] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1423.450845][T18493] usb 6-1: ucan: probing device on interface #0
[ 1423.457172][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1423.607420][   T30] audit: type=1400 audit(1768558989.573:8636): avc:  denied  { map } for  pid=24183 comm="syz.2.4933" path="socket:[84835]" dev="sockfs" ino=84835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1424.343914][ T5865] usb usb1-port1: attempt power cycle
[ 1424.610651][T24192] bond11: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1424.621813][T24192] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1424.722474][ T5865] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1424.782770][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1424.858510][T18493] ucan 6-1:0.0 can0: registered device
[ 1425.042099][ T5865] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1425.054896][T18493] ucan 6-1:0.0 can0: firmware string: Þþ¢gë=Haïâ,>žcî´ÔÉDŠ¿úqÝi8*L¨Ã̾*Â;³<5ðïÈ-ܱªÕïgO·…®W/\BOöÏÌÛ(¹]¥�[¸žÐZ¡hpNû:=ÑVÀw“Ñv©xq£“JN²ØÃÃ…í¾0U"ˆFèe2ˆ•åí†,
[ 1425.102683][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1425.222373][ T5865] usb usb1-port1: unable to enumerate USB device
[ 1425.256887][T18346] usb 6-1: USB disconnect, device number 56
[ 1426.011802][T24203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24203 comm=syz.2.4938
[ 1427.610134][T18346] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1428.142054][T18346] usb 5-1: Using ep0 maxpacket: 8
[ 1428.149239][T18346] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1428.199223][T18346] usb 5-1: config 179 has no interface number 0
[ 1428.225110][T18346] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1428.274883][T18346] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1428.332022][T18346] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1428.436333][T18346] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1428.458001][T24217] loop6: detected capacity change from 0 to 2640
[ 1428.489102][T24217] buffer_io_error: 6 callbacks suppressed
[ 1428.489115][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.507992][T18346] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1428.593404][T18346] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1428.594538][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.602881][T18346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.634111][T24201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1428.742399][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.750280][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.854588][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.871572][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.911290][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.930075][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.947123][T24217] ldm_validate_partition_table(): Disk read failed.
[ 1428.961517][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1428.976819][T24217] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1429.020011][T24217] Dev loop6: unable to read RDB block 0
[ 1429.053310][T24217]  loop6: unable to read partition table
[ 1429.080231][T24217] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1429.565633][T24201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1429.602339][T24201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1429.691087][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1429.691092][T16516] usb 5-1: USB disconnect, device number 96
[ 1429.691223][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1430.701322][T24242] input: syz1 as /devices/virtual/input/input79
[ 1432.301255][T24261] kvm: pic: single mode not supported
[ 1432.301496][T24261] kvm: pic: single mode not supported
[ 1432.330374][T24261] kvm: pic: single mode not supported
[ 1432.361694][T24261] kvm: pic: single mode not supported
[ 1432.367498][T24261] kvm: pic: level sensitive irq not supported
[ 1432.379429][T24261] kvm: pic: level sensitive irq not supported
[ 1432.398605][T24261] kvm: pic: single mode not supported
[ 1432.404876][T24268] kvm: kvm [24266]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[ 1432.407060][T24268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4229216729 (33833733832 ns) > initial count (20222943160 ns). Using initial count to start timer.
[ 1432.453671][T24261] kvm: pic: single mode not supported
[ 1432.763247][T24283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1432.899958][   T30] audit: type=1400 audit(1768558998.863:8637): avc:  denied  { execute } for  pid=24286 comm="syz.4.4964" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=86470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1433.980025][ T5937] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1434.029143][T24300] overlayfs: missing 'workdir'
[ 1434.132571][ T5937] usb 6-1: Using ep0 maxpacket: 8
[ 1434.303004][ T5937] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1434.311285][ T5937] usb 6-1: config 179 has no interface number 0
[ 1434.475767][ T5937] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1434.504151][ T5937] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1434.522420][ T5937] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1434.711185][ T5937] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1434.724296][ T5937] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1434.741446][ T5937] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1434.746753][T24311] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1434.751023][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1435.075773][T24290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1435.298084][T24318] syzkaller0: entered promiscuous mode
[ 1435.320925][T24318] syzkaller0: entered allmulticast mode
[ 1435.337691][T24320] team_slave_1: entered allmulticast mode
[ 1435.527976][T24320] dvmrp8: entered allmulticast mode
[ 1435.593515][T24319] team_slave_1: left allmulticast mode
[ 1435.600032][T24319] dvmrp8: left allmulticast mode
[ 1435.823985][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4966'.
[ 1435.845642][T24290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.854568][T24290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.927484][T16986] usb 6-1: USB disconnect, device number 57
[ 1435.927528][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1435.941926][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1436.417108][T24334] bond12: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1436.498767][T24334] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1439.458359][T24363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1439.465614][T24363] IPv6: NLM_F_CREATE should be set when creating new route
[ 1439.605745][T24368] FAULT_INJECTION: forcing a failure.
[ 1439.605745][T24368] name failslab, interval 1, probability 0, space 0, times 0
[ 1439.618583][T24368] CPU: 0 UID: 0 PID: 24368 Comm: syz.4.4986 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1439.618610][T24368] Tainted: [L]=SOFTLOCKUP
[ 1439.618616][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1439.618626][T24368] Call Trace:
[ 1439.618632][T24368]  <TASK>
[ 1439.618639][T24368]  dump_stack_lvl+0x16c/0x1f0
[ 1439.618669][T24368]  should_fail_ex+0x512/0x640
[ 1439.618684][T24368]  ? __kvmalloc_node_noprof+0x129/0xa40
[ 1439.618708][T24368]  should_failslab+0xc2/0x120
[ 1439.618731][T24368]  __kvmalloc_node_noprof+0x14a/0xa40
[ 1439.618753][T24368]  ? __do_sys_add_key+0x1fc/0x470
[ 1439.618777][T24368]  ? __do_sys_add_key+0x1fc/0x470
[ 1439.618794][T24368]  __do_sys_add_key+0x1fc/0x470
[ 1439.618813][T24368]  ? __pfx___do_sys_add_key+0x10/0x10
[ 1439.618841][T24368]  do_syscall_64+0xcd/0xf80
[ 1439.618867][T24368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.618883][T24368] RIP: 0033:0x7f23e1d8f749
[ 1439.618898][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1439.618913][T24368] RSP: 002b:00007f23e2ce7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1439.618931][T24368] RAX: ffffffffffffffda RBX: 00007f23e1fe6090 RCX: 00007f23e1d8f749
[ 1439.618942][T24368] RDX: 0000200000000680 RSI: 0000200000000180 RDI: 0000200000000400
[ 1439.618952][T24368] RBP: 00007f23e2ce7090 R08: fffffffffffffffe R09: 0000000000000000
[ 1439.618963][T24368] R10: 00000000000001ad R11: 0000000000000246 R12: 0000000000000001
[ 1439.618973][T24368] R13: 00007f23e1fe6128 R14: 00007f23e1fe6090 R15: 00007ffdf2bc5fe8
[ 1439.618997][T24368]  </TASK>
[ 1442.562094][T16516] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1442.732247][T16516] usb 4-1: Using ep0 maxpacket: 8
[ 1442.738708][T16516] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1442.754410][T16516] usb 4-1: config 179 has no interface number 0
[ 1442.760805][T16516] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1442.775173][T16516] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1442.786707][T16516] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1442.799390][T16516] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1442.816724][T16516] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1442.830387][T16516] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1442.840237][T16516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.842246][T16986] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1442.857570][T24389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1443.052005][T18346] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1443.082259][T16986] usb 1-1: Using ep0 maxpacket: 32
[ 1443.097330][T16986] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1443.107443][T16986] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1443.117425][T16986] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1443.127721][T16986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1443.137426][T16986] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1443.147499][T16986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1443.198130][T16986] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1443.218023][T18346] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1443.237956][T16986] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1443.251368][T18346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.281572][T18346] usb 3-1: Product: syz
[ 1443.292301][T16986] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1443.308158][T18346] usb 3-1: Manufacturer: syz
[ 1443.322400][T18346] usb 3-1: SerialNumber: syz
[ 1443.333479][T16986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.383623][T16986] usb 1-1: config 0 descriptor??
[ 1443.607464][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4992'.
[ 1443.772605][T24389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1443.829013][T24389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1443.963068][T18346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1443.995866][ T5836] usb 4-1: USB disconnect, device number 2
[ 1443.995865][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1443.995904][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1444.217800][T18346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1445.722904][T18346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1445.755497][T18346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1445.786274][T16986] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1445.815040][T18346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1446.238857][T18346] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[ 1446.250311][T16986] usb 1-1: USB disconnect, device number 25
[ 1446.251306][T16516] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1446.279592][T16986] usblp0: removed
[ 1446.459488][T16516] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1446.476899][T16516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.918488][T24420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'.
[ 1446.930212][T16516] usb 4-1: Product: syz
[ 1446.934492][T16516] usb 4-1: Manufacturer: syz
[ 1446.940171][T16516] usb 4-1: SerialNumber: syz
[ 1447.007573][T18346] usb 3-1: USB disconnect, device number 79
[ 1447.057834][T24426] input: syz1 as /devices/virtual/input/input80
[ 1447.747422][T16516] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1447.806980][T16516] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1448.160932][T24436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1448.420918][T24441] tipc: Started in network mode
[ 1448.425957][T24441] tipc: Node identity 84e, cluster identity 4711
[ 1448.434616][T24441] tipc: Node number set to 2126
[ 1448.868297][T16516] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1448.881567][   T30] audit: type=1400 audit(1768559014.843:8638): avc:  denied  { read } for  pid=24427 comm="syz.5.5004" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1448.889780][T16516] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1448.920240][   T30] audit: type=1400 audit(1768559014.873:8639): avc:  denied  { open } for  pid=24427 comm="syz.5.5004" path="/419/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1448.923758][T16516] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1448.975818][T24453] overlayfs: failed to resolve './file0': -2
[ 1449.031725][   T30] audit: type=1400 audit(1768559014.893:8640): avc:  denied  { ioctl } for  pid=24427 comm="syz.5.5004" path="/419/file0/file0" dev="fuse" ino=0 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1449.038034][T16516] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1449.094570][T16986] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1449.947574][   T30] audit: type=1400 audit(1768559015.563:8641): avc:  denied  { connect } for  pid=24456 comm="syz.5.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1450.002246][   T30] audit: type=1400 audit(1768559015.623:8642): avc:  denied  { write } for  pid=24456 comm="syz.5.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1450.428519][T16986] usb 3-1: Using ep0 maxpacket: 8
[ 1450.429593][T16516] usb 4-1: USB disconnect, device number 3
[ 1450.442914][T16986] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1450.812747][T16986] usb 3-1: config 179 has no interface number 0
[ 1450.819129][T16986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1450.840763][T16986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1450.859367][T18493] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[ 1450.861994][T16986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1450.888131][T16986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1450.900106][T18493] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1450.953108][T16986] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1450.972059][T16986] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1451.019913][T16986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.034972][T24451] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1451.424328][   T30] audit: type=1400 audit(1768559017.393:8643): avc:  denied  { read } for  pid=24464 comm="syz.3.5013" path="socket:[88159]" dev="sockfs" ino=88159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1451.677431][T24477] comedi comedi3: bad chanlist[0]=0x25dfb300 chan=45824 range length=1
[ 1451.678436][T24451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5009'.
[ 1451.716085][T24470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1451.774495][T24451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.783575][T24451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1451.794376][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1451.794382][T18493] usb 3-1: USB disconnect, device number 80
[ 1451.808746][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 1452.169041][   T30] audit: type=1400 audit(1768559018.133:8644): avc:  denied  { create } for  pid=24485 comm="syz.3.5020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[ 1453.140766][   T30] audit: type=1400 audit(1768559019.023:8645): avc:  denied  { append } for  pid=24500 comm="syz.2.5022" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1453.272616][   T30] audit: type=1400 audit(1768559019.023:8646): avc:  denied  { ioctl } for  pid=24500 comm="syz.2.5022" path="socket:[88272]" dev="sockfs" ino=88272 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1453.753015][T24505] overlayfs: missing 'workdir'
[ 1459.813669][ T5937] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1460.714685][ T5937] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1460.730358][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.742448][ T5937] usb 3-1: Product: syz
[ 1460.746661][ T5937] usb 3-1: Manufacturer: syz
[ 1460.751489][ T5937] usb 3-1: SerialNumber: syz
[ 1460.759678][ T5937] usb 3-1: config 0 descriptor??
[ 1461.023582][T24543] loop6: detected capacity change from 0 to 2640
[ 1461.033154][T24543] buffer_io_error: 6 callbacks suppressed
[ 1461.033163][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.068243][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.072578][ T5836] usb 3-1: USB disconnect, device number 81
[ 1461.092029][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.099944][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.139997][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.159990][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.188532][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.220035][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.250947][T24571] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[ 1461.259139][T24543] ldm_validate_partition_table(): Disk read failed.
[ 1461.269960][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.279952][T24571] netlink: 'syz.4.5042': attribute type 4 has an invalid length.
[ 1461.288098][T24543] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1461.321783][T24543] Dev loop6: unable to read RDB block 0
[ 1461.332448][T24543]  loop6: unable to read partition table
[ 1461.340102][T24543] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1461.522195][ T5937] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1462.484275][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1462.518965][ T5937] usb 5-1: config 129 has an invalid interface number: 135 but max is 0
[ 1462.530446][ T5937] usb 5-1: config 129 has an invalid interface number: 5 but max is 0
[ 1462.548852][ T5937] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1462.558796][T18493] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1462.567943][ T5937] usb 5-1: config 129 has no interface number 0
[ 1462.577712][ T5937] usb 5-1: config 129 has no interface number 1
[ 1462.587849][ T5937] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1462.674141][   T30] audit: type=1400 audit(1768559028.613:8647): avc:  denied  { setopt } for  pid=24584 comm="syz.2.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1462.702480][ T5937] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1462.722570][ T5937] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1462.744729][ T5937] usb 5-1: config 129 interface 135 has no altsetting 0
[ 1462.761915][ T5937] usb 5-1: config 129 interface 5 has no altsetting 0
[ 1462.773016][T18493] usb 6-1: Using ep0 maxpacket: 16
[ 1462.779940][T18493] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.804592][ T5937] usb 5-1: string descriptor 0 read error: -22
[ 1462.810858][ T5937] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1462.832338][T18493] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1462.841321][T18493] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1462.850591][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.860244][T18493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.873759][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1462.883083][ T5937] usb 5-1: MIDIStreaming interface descriptor not found
[ 1462.896911][T18493] usb 6-1: config 0 descriptor??
[ 1463.505706][T24571] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1463.505706][T24571]    program syz.4.5042 not setting count and/or reply_len properly
[ 1463.528203][   T30] audit: type=1400 audit(1768559029.493:8648): avc:  denied  { create } for  pid=24570 comm="syz.4.5042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[ 1463.599822][ T5925] usb 5-1: USB disconnect, device number 97
[ 1464.012508][T24598] kvm: emulating exchange as write
[ 1464.236400][ T5925] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1464.529242][ T5925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1464.712678][ T5925] usb 1-1: config 0 has no interface number 0
[ 1464.851099][ T5925] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1464.851416][ T5937] usb 6-1: USB disconnect, device number 58
[ 1464.912378][ T5925] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1465.476218][ T5925] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1465.485947][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1465.502967][ T5925] usb 1-1: config 0 descriptor??
[ 1467.918451][ T5925] usbhid 1-1:0.1: can't add hid device: -71
[ 1467.932879][ T5925] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1467.972270][ T5925] usb 1-1: USB disconnect, device number 26
[ 1468.402224][ T5925] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1468.430439][T24641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1468.477461][T24644] loop6: detected capacity change from 0 to 2640
[ 1468.506746][T24644] buffer_io_error: 6 callbacks suppressed
[ 1468.506760][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.532336][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.540546][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.552568][ T5925] usb 1-1: Using ep0 maxpacket: 32
[ 1468.557984][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.561457][ T5925] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1468.582239][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.597472][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1468.598522][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.525206][ T5925] usb 1-1: config 0 descriptor??
[ 1469.533334][ T5925] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1469.573216][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1469.622644][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1469.662874][T24644] ldm_validate_partition_table(): Disk read failed.
[ 1469.669515][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1469.752271][T24644] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1469.760161][T24644] Dev loop6: unable to read RDB block 0
[ 1469.822306][T24644]  loop6: unable to read partition table
[ 1469.890756][T24644] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1470.006865][T24654] binder: 24634:24654 ioctl c0306201 200000000600 returned -22
[ 1470.269647][ T5925] gspca_nw80x: reg_r err -110
[ 1470.282060][ T5925] nw80x 1-1:0.0: probe with driver nw80x failed with error -110
[ 1470.605067][T24657] tipc: Started in network mode
[ 1470.610020][T24657] tipc: Node identity 84e, cluster identity 4711
[ 1470.616491][T24657] tipc: Node number set to 2126
[ 1470.953353][T24661] syzkaller0: entered promiscuous mode
[ 1470.962386][T24661] syzkaller0: entered allmulticast mode
[ 1471.072462][T16986] usb 1-1: USB disconnect, device number 27
[ 1471.392205][T16516] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1471.722147][T24674] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5070'.
[ 1471.730001][T16516] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1471.811357][T16516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.867457][T16516] usb 3-1: Product: syz
[ 1471.878156][T16516] usb 3-1: Manufacturer: syz
[ 1471.899355][T16516] usb 3-1: SerialNumber: syz
[ 1472.884408][T16516] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1472.901268][T16516] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1473.652964][T24692] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5073'.
[ 1474.003019][T16516] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1474.015024][T16516] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1474.028629][T16516] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1474.045393][T16516] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[ 1474.727144][T24689] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1474.763781][T24700] loop6: detected capacity change from 0 to 2640
[ 1474.779273][T24700] buffer_io_error: 6 callbacks suppressed
[ 1474.779287][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1474.881326][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1474.890977][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1474.965884][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1474.983038][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.031250][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.065696][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.074185][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.100341][T24700] ldm_validate_partition_table(): Disk read failed.
[ 1475.108746][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.122836][T24700] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1475.131240][T24700] Dev loop6: unable to read RDB block 0
[ 1475.139511][T24700]  loop6: unable to read partition table
[ 1475.147580][T24700] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1475.871480][T16986] usb 3-1: USB disconnect, device number 82
[ 1476.762942][T24730] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5085'.
[ 1481.702384][T24736] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1481.908029][T24736] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1481.920994][T24736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.935565][T24736] usb 4-1: Product: syz
[ 1481.949399][T24736] usb 4-1: Manufacturer: syz
[ 1481.955106][T24736] usb 4-1: SerialNumber: syz
[ 1482.079265][T24756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1482.686167][T24736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1482.722280][T24736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1482.994294][T24768] ieee802154 phy1 wpan1: encryption failed: -22
[ 1483.987778][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.000535][T24736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1484.174846][T24736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1484.188254][T24736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1484.210114][T24736] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1484.292786][T24789] bond3: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1484.330944][T24789] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1484.641096][T24736] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1484.653249][T24799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5107'.
[ 1484.791992][T24736] usb 5-1: Using ep0 maxpacket: 32
[ 1484.799540][T24736] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1484.810100][T24736] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1484.818868][T24736] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1484.828395][T24736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1484.838203][T24736] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1484.847909][T24736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1484.858687][T24736] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1484.868789][T24736] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1484.882219][T24736] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1484.891276][T24736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.904827][T24736] usb 5-1: config 0 descriptor??
[ 1485.038315][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5108'.
[ 1485.052953][   T30] audit: type=1400 audit(1768559051.023:8649): avc:  denied  { nlmsg_read } for  pid=24806 comm="syz.5.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1485.987091][T19195] usb 4-1: USB disconnect, device number 4
[ 1486.962431][T19195] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1487.195762][T19195] usb 4-1: too many configurations: 17, using maximum allowed: 8
[ 1487.647524][T24736] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1487.661201][T19195] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1487.670630][T19195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.678737][T19195] usb 4-1: Product: syz
[ 1487.692767][T24736] usb 5-1: USB disconnect, device number 98
[ 1487.703650][T24736] usblp0: removed
[ 1487.722810][T19195] usb 4-1: Manufacturer: syz
[ 1487.727435][T19195] usb 4-1: SerialNumber: syz
[ 1487.763148][T19195] usb 4-1: config 0 descriptor??
[ 1487.804983][T19195] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1487.871656][T19195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1487.900281][T19195] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1487.923084][T19195] usb 4-1: media controller created
[ 1487.953060][T19195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1487.956644][T24845] input: syz1 as /devices/virtual/input/input81
[ 1488.026595][T24816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.048568][T24816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.087760][T24816] dvb-usb: bulk message failed: -22 (7/0)
[ 1488.117660][T24816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.137776][T24816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.163438][T24736] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1488.165995][T19195] DVB: Unable to find symbol mt352_attach()
[ 1488.484775][T24736] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1488.503831][T24736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.579461][T19195] DVB: Unable to find symbol nxt6000_attach()
[ 1488.595757][T19195] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1488.596940][T24736] usb 5-1: Product: syz
[ 1488.639843][T24736] usb 5-1: Manufacturer: syz
[ 1488.652244][T24736] usb 5-1: SerialNumber: syz
[ 1488.659067][T19195] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82
[ 1488.713783][T19195] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1488.720850][T19195] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1488.741228][T19195] dvb-usb: bulk message failed: -22 (7/0)
[ 1488.791777][T19195] dvb-usb: bulk message failed: -22 (7/0)
[ 1488.810655][T19195] usb 4-1: USB disconnect, device number 5
[ 1488.900888][T19195] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1488.930048][   T30] audit: type=1400 audit(1768559053.891:8650): avc:  denied  { lock } for  pid=24856 comm="syz.0.5122" path="socket:[91704]" dev="sockfs" ino=91704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1489.214205][T24736] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1489.260220][   T30] audit: type=1326 audit(1768559053.971:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1489.269805][T24736] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1489.335956][   T30] audit: type=1326 audit(1768559053.971:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1489.429055][   T30] audit: type=1326 audit(1768559053.971:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1489.505290][   T30] audit: type=1326 audit(1768559053.971:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1489.576297][   T30] audit: type=1326 audit(1768559053.971:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1489.681795][   T30] audit: type=1326 audit(1768559053.971:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1490.675774][   T30] audit: type=1326 audit(1768559053.971:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1490.723398][   T30] audit: type=1326 audit(1768559053.971:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1490.747903][   T30] audit: type=1326 audit(1768559053.971:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1490.796162][   T30] audit: type=1326 audit(1768559053.971:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1490.884232][T24736] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[ 1491.030823][   T30] audit: type=1326 audit(1768559053.971:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1491.055001][T24736] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1491.069395][T24736] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1491.107483][T24736] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[ 1491.129797][   T30] audit: type=1326 audit(1768559053.971:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1491.207400][   T30] audit: type=1326 audit(1768559053.971:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1491.282225][   T30] audit: type=1326 audit(1768559053.971:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1492.651268][T24888] syz.3.5132 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1492.661291][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.3.5132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1492.661307][T24888] Tainted: [L]=SOFTLOCKUP
[ 1492.661311][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1492.661318][T24888] Call Trace:
[ 1492.661322][T24888]  <TASK>
[ 1492.661326][T24888]  dump_stack_lvl+0x16c/0x1f0
[ 1492.661345][T24888]  dump_header+0x101/0x960
[ 1492.661364][T24888]  oom_kill_process+0x176/0x910
[ 1492.661382][T24888]  out_of_memory+0x350/0x1700
[ 1492.661398][T24888]  ? __lock_acquire+0x436/0x2890
[ 1492.661413][T24888]  ? __pfx_out_of_memory+0x10/0x10
[ 1492.661433][T24888]  mem_cgroup_out_of_memory+0x118/0x130
[ 1492.661445][T24888]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1492.661458][T24888]  ? do_raw_spin_unlock+0x172/0x230
[ 1492.661475][T24888]  try_charge_memcg+0x695/0xd30
[ 1492.661491][T24888]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1492.661506][T24888]  ? __print_lock_name+0xb1/0xe0
[ 1492.661522][T24888]  ? rcu_read_unlock+0x17/0x60
[ 1492.661540][T24888]  charge_memcg+0x8a/0x230
[ 1492.661554][T24888]  __mem_cgroup_charge+0x2b/0x1e0
[ 1492.661570][T24888]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1492.661590][T24888]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1492.661608][T24888]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1492.661628][T24888]  shmem_get_folio_gfp+0x67f/0x1610
[ 1492.661648][T24888]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1492.661665][T24888]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1492.661684][T24888]  shmem_write_begin+0x1a4/0x3b0
[ 1492.661695][T24888]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1492.661706][T24888]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1492.661722][T24888]  generic_perform_write+0x3c4/0x900
[ 1492.661742][T24888]  ? __pfx_generic_perform_write+0x10/0x10
[ 1492.661758][T24888]  ? generic_update_time+0xcf/0xf0
[ 1492.661767][T24888]  ? mnt_put_write_access_file+0x45/0xf0
[ 1492.661787][T24888]  ? file_update_time_flags+0x35c/0x520
[ 1492.661800][T24888]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1492.661811][T24888]  shmem_file_write_iter+0x10e/0x140
[ 1492.661824][T24888]  __kernel_write_iter+0x31a/0xb10
[ 1492.661840][T24888]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1492.661852][T24888]  ? __up_read+0x2d1/0x700
[ 1492.661867][T24888]  ? dump_user_range+0x756/0xb70
[ 1492.661886][T24888]  dump_user_range+0x413/0xb70
[ 1492.661913][T24888]  ? __pfx_dump_user_range+0x10/0x10
[ 1492.661938][T24888]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1492.661961][T24888]  ? __pfx_writenote+0x10/0x10
[ 1492.661980][T24888]  elf_core_dump+0x29c3/0x3c10
[ 1492.661997][T24888]  ? __pfx_elf_core_dump+0x10/0x10
[ 1492.662007][T24888]  ? kasan_save_stack+0x33/0x60
[ 1492.662018][T24888]  ? kasan_save_track+0x14/0x30
[ 1492.662030][T24888]  ? __kasan_kmalloc+0xaa/0xb0
[ 1492.662041][T24888]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1492.662053][T24888]  ? vfs_coredump+0x1dd9/0x55e0
[ 1492.662068][T24888]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1492.662082][T24888]  ? irqentry_exit+0x38a/0x8c0
[ 1492.662095][T24888]  ? asm_exc_page_fault+0x26/0x30
[ 1492.662108][T24888]  ? 0xffffffffff600000
[ 1492.662140][T24888]  ? vfs_coredump+0x2b85/0x55e0
[ 1492.662155][T24888]  vfs_coredump+0x2b85/0x55e0
[ 1492.662176][T24888]  ? __pfx_vfs_coredump+0x10/0x10
[ 1492.662191][T24888]  ? __lock_acquire+0x436/0x2890
[ 1492.662205][T24888]  ? __lock_acquire+0x436/0x2890
[ 1492.662219][T24888]  ? lock_acquire+0x179/0x330
[ 1492.662233][T24888]  ? lock_acquire+0x179/0x330
[ 1492.662254][T24888]  ? arch_stack_walk+0xa6/0x100
[ 1492.662273][T24888]  ? stack_trace_save+0x8e/0xc0
[ 1492.662285][T24888]  ? __pfx_stack_trace_save+0x10/0x10
[ 1492.662296][T24888]  ? stack_depot_save_flags+0x29/0x9b0
[ 1492.662313][T24888]  ? __lock_acquire+0x436/0x2890
[ 1492.662326][T24888]  ? kasan_save_stack+0x42/0x60
[ 1492.662360][T24888]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1492.662375][T24888]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1492.662392][T24888]  ? rcu_is_watching+0x12/0xc0
[ 1492.662404][T24888]  get_signal+0x22e1/0x26d0
[ 1492.662425][T24888]  ? __pfx_get_signal+0x10/0x10
[ 1492.662444][T24888]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1492.662459][T24888]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1492.662477][T24888]  ? __bad_area_nosemaphore+0x350/0x690
[ 1492.662494][T24888]  irqentry_exit+0x38a/0x8c0
[ 1492.662509][T24888]  asm_exc_page_fault+0x26/0x30
[ 1492.662519][T24888] RIP: 0033:0x7f0239d8f751
[ 1492.662528][T24888] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1492.662538][T24888] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1492.662547][T24888] RAX: 0000000000000000 RBX: 00007f0239fe6090 RCX: 00007f0239d8f749
[ 1492.662553][T24888] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 1492.662559][T24888] RBP: 00007f0239e13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1492.662565][T24888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1492.662571][T24888] R13: 00007f0239fe6128 R14: 00007f0239fe6090 R15: 00007ffeacf76918
[ 1492.662585][T24888]  </TASK>
[ 1493.140947][T24888] memory: usage 307204kB, limit 307200kB, failcnt 19038
[ 1493.147890][T24888] memory+swap: usage 431980kB, limit 9007199254740988kB, failcnt 0
[ 1493.155760][T24888] kmem: usage 51348kB, limit 9007199254740988kB, failcnt 0
[ 1493.162929][T24888] Memory cgroup stats for /syz3:
[ 1493.163120][T24888] cache 261509120
[ 1493.171611][T24888] rss 327680
[ 1493.174786][T24888] rss_huge 0
[ 1493.178362][T24888] shmem 261492736
[ 1493.181980][T24888] mapped_file 11771904
[ 1493.186015][T24888] dirty 16384
[ 1493.189262][T24888] writeback 0
[ 1493.192529][T24888] workingset_refault_anon 17
[ 1493.197081][T24888] workingset_refault_file 6232
[ 1493.201805][T24888] swap 127770624
[ 1493.206774][T24888] swapcached 4096
[ 1493.210397][T24888] pgpgin 1770081
[ 1493.213952][T24888] pgpgout 1706155
[ 1493.217549][T24888] pgfault 1226920
[ 1493.221143][T24888] pgmajfault 2906
[ 1493.224749][T24888] inactive_anon 75558912
[ 1493.228955][T24888] active_anon 186257408
[ 1493.233088][T24888] inactive_file 16384
[ 1493.237034][T24888] active_file 0
[ 1493.240456][T24888] unevictable 0
[ 1493.243900][T24888] hierarchical_memory_limit 314572800
[ 1493.249237][T24888] hierarchical_memsw_limit 9223372036854771712
[ 1493.255370][T24888] total_cache 261509120
[ 1493.259488][T24888] total_rss 327680
[ 1493.263333][T24888] total_rss_huge 0
[ 1493.267018][T24888] total_shmem 261492736
[ 1493.271137][T24888] total_mapped_file 11771904
[ 1493.275706][T24888] total_dirty 16384
[ 1493.279904][T24888] total_writeback 0
[ 1493.283700][T24888] total_workingset_refault_anon 17
[ 1493.288774][T24888] total_workingset_refault_file 6232
[ 1493.294046][T24888] total_swap 127770624
[ 1493.298077][T24888] total_swapcached 4096
[ 1493.314058][T24888] total_pgpgin 1770081
[ 1493.318111][T24888] total_pgpgout 1706155
[ 1493.322253][T24888] total_pgfault 1226920
[ 1493.326371][T24888] total_pgmajfault 2906
[ 1493.330488][T24888] total_inactive_anon 75558912
[ 1493.335231][T24888] total_active_anon 186257408
[ 1493.339871][T24888] total_inactive_file 16384
[ 1493.344512][T24888] total_active_file 0
[ 1493.348459][T24888] total_unevictable 0
[ 1493.352426][T24888] anon_cost 0
[ 1493.355677][T24888] file_cost 0
[ 1493.358927][T24888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5132,pid=24888,uid=0
[ 1493.373978][T24888] Memory cgroup out of memory: Killed process 24888 (syz.3.5132) total-vm:102164kB, anon-rss:1296kB, file-rss:34148kB, shmem-rss:2944kB, UID:0 pgtables:216kB oom_score_adj:1000
[ 1493.439095][   T30] audit: type=1326 audit(1768559053.971:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1493.470277][   T30] audit: type=1326 audit(1768559053.971:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0239d8f749 code=0x7ffc0000
[ 1493.509616][T24736] usb 5-1: USB disconnect, device number 99
[ 1493.629925][T24892] input: syz1 as /devices/virtual/input/input83
[ 1493.639163][T24894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5135'.
[ 1494.049479][T24906] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5137'.
[ 1494.061085][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5137'.
[ 1494.702397][T24912] syz.3.5139 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1494.712437][T24912] CPU: 1 UID: 0 PID: 24912 Comm: syz.3.5139 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1494.712453][T24912] Tainted: [L]=SOFTLOCKUP
[ 1494.712457][T24912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1494.712463][T24912] Call Trace:
[ 1494.712467][T24912]  <TASK>
[ 1494.712471][T24912]  dump_stack_lvl+0x16c/0x1f0
[ 1494.712490][T24912]  dump_header+0x101/0x960
[ 1494.712508][T24912]  oom_kill_process+0x176/0x910
[ 1494.712526][T24912]  out_of_memory+0x350/0x1700
[ 1494.712542][T24912]  ? __lock_acquire+0x436/0x2890
[ 1494.712556][T24912]  ? __pfx_out_of_memory+0x10/0x10
[ 1494.712576][T24912]  mem_cgroup_out_of_memory+0x118/0x130
[ 1494.712587][T24912]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1494.712600][T24912]  ? do_raw_spin_unlock+0x172/0x230
[ 1494.712617][T24912]  try_charge_memcg+0x695/0xd30
[ 1494.712633][T24912]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1494.712647][T24912]  ? __print_lock_name+0xb1/0xe0
[ 1494.712663][T24912]  ? rcu_read_unlock+0x17/0x60
[ 1494.712681][T24912]  charge_memcg+0x8a/0x230
[ 1494.712695][T24912]  __mem_cgroup_charge+0x2b/0x1e0
[ 1494.712712][T24912]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1494.712732][T24912]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1494.712750][T24912]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1494.712769][T24912]  shmem_get_folio_gfp+0x67f/0x1610
[ 1494.712789][T24912]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1494.712809][T24912]  shmem_write_begin+0x1a4/0x3b0
[ 1494.712820][T24912]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1494.712830][T24912]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1494.712844][T24912]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1494.712861][T24912]  generic_perform_write+0x3c4/0x900
[ 1494.712880][T24912]  ? __pfx_generic_perform_write+0x10/0x10
[ 1494.712897][T24912]  ? file_update_time_flags+0x35c/0x520
[ 1494.712909][T24912]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1494.712921][T24912]  shmem_file_write_iter+0x10e/0x140
[ 1494.712934][T24912]  __kernel_write_iter+0x31a/0xb10
[ 1494.712949][T24912]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1494.712962][T24912]  ? __up_read+0x2d1/0x700
[ 1494.712977][T24912]  ? dump_user_range+0x756/0xb70
[ 1494.712996][T24912]  dump_user_range+0x413/0xb70
[ 1494.713015][T24912]  ? __pfx_dump_user_range+0x10/0x10
[ 1494.713036][T24912]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1494.713052][T24912]  ? __pfx_writenote+0x10/0x10
[ 1494.713065][T24912]  elf_core_dump+0x29c3/0x3c10
[ 1494.713083][T24912]  ? __pfx_elf_core_dump+0x10/0x10
[ 1494.713092][T24912]  ? kasan_save_stack+0x33/0x60
[ 1494.713103][T24912]  ? kasan_save_track+0x14/0x30
[ 1494.713114][T24912]  ? __kasan_kmalloc+0xaa/0xb0
[ 1494.713125][T24912]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1494.713137][T24912]  ? vfs_coredump+0x1dd9/0x55e0
[ 1494.713152][T24912]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1494.713167][T24912]  ? irqentry_exit+0x38a/0x8c0
[ 1494.713180][T24912]  ? asm_exc_page_fault+0x26/0x30
[ 1494.713193][T24912]  ? 0xffffffffff600000
[ 1494.713223][T24912]  ? vfs_coredump+0x2b85/0x55e0
[ 1494.713238][T24912]  vfs_coredump+0x2b85/0x55e0
[ 1494.713259][T24912]  ? __pfx_vfs_coredump+0x10/0x10
[ 1494.713274][T24912]  ? __lock_acquire+0x436/0x2890
[ 1494.713289][T24912]  ? __lock_acquire+0x436/0x2890
[ 1494.713302][T24912]  ? lock_acquire+0x179/0x330
[ 1494.713317][T24912]  ? lock_acquire+0x179/0x330
[ 1494.713338][T24912]  ? arch_stack_walk+0xa6/0x100
[ 1494.713356][T24912]  ? stack_trace_save+0x8e/0xc0
[ 1494.713368][T24912]  ? __pfx_stack_trace_save+0x10/0x10
[ 1494.713379][T24912]  ? stack_depot_save_flags+0x29/0x9b0
[ 1494.713397][T24912]  ? __lock_acquire+0x436/0x2890
[ 1494.713410][T24912]  ? kasan_save_stack+0x42/0x60
[ 1494.713443][T24912]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1494.713458][T24912]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1494.713476][T24912]  ? rcu_is_watching+0x12/0xc0
[ 1494.713488][T24912]  get_signal+0x22e1/0x26d0
[ 1494.713508][T24912]  ? __pfx_get_signal+0x10/0x10
[ 1494.713528][T24912]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1494.713543][T24912]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1494.713561][T24912]  ? __bad_area_nosemaphore+0x350/0x690
[ 1494.713578][T24912]  irqentry_exit+0x38a/0x8c0
[ 1494.713594][T24912]  asm_exc_page_fault+0x26/0x30
[ 1494.713604][T24912] RIP: 0033:0x7f0239d8f751
[ 1494.713612][T24912] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1494.713622][T24912] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1494.713631][T24912] RAX: 0000000000000000 RBX: 00007f0239fe5fa0 RCX: 00007f0239d8f749
[ 1494.713637][T24912] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 1494.713643][T24912] RBP: 00007f0239e13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1494.713649][T24912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1494.713655][T24912] R13: 00007f0239fe6038 R14: 00007f0239fe5fa0 R15: 00007ffeacf76918
[ 1494.713669][T24912]  </TASK>
[ 1494.713673][T24912] memory: usage 307200kB, limit 307200kB, failcnt 19088
[ 1495.189855][T24912] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0
[ 1495.197734][T24912] kmem: usage 51040kB, limit 9007199254740988kB, failcnt 0
[ 1495.204917][T24912] Memory cgroup stats for /syz3:
[ 1495.204987][T24912] cache 261844992
[ 1495.213509][T24912] rss 307200
[ 1495.216684][T24912] rss_huge 0
[ 1495.219854][T24912] shmem 261836800
[ 1495.223474][T24912] mapped_file 11763712
[ 1495.227714][T24912] dirty 8192
[ 1495.230879][T24912] writeback 0
[ 1495.234166][T24912] workingset_refault_anon 17
[ 1495.238723][T24912] workingset_refault_file 6232
[ 1495.243477][T24912] swap 127770624
[ 1495.246988][T24912] swapcached 4096
[ 1495.250581][T24912] pgpgin 1773133
[ 1495.254108][T24912] pgpgout 1709130
[ 1495.257705][T24912] pgfault 1230048
[ 1495.261302][T24912] pgmajfault 2906
[ 1495.264917][T24912] inactive_anon 75558912
[ 1495.269133][T24912] active_anon 186478592
[ 1495.273269][T24912] inactive_file 8192
[ 1495.277128][T24912] active_file 0
[ 1495.280549][T24912] unevictable 0
[ 1495.284000][T24912] hierarchical_memory_limit 314572800
[ 1495.289333][T24912] hierarchical_memsw_limit 9223372036854771712
[ 1495.295473][T24912] total_cache 261844992
[ 1495.299591][T24912] total_rss 307200
[ 1495.303290][T24912] total_rss_huge 0
[ 1495.306973][T24912] total_shmem 261836800
[ 1495.311092][T24912] total_mapped_file 11763712
[ 1495.315673][T24912] total_dirty 8192
[ 1495.319357][T24912] total_writeback 0
[ 1495.323144][T24912] total_workingset_refault_anon 17
[ 1495.328416][T24912] total_workingset_refault_file 6232
[ 1495.333692][T24912] total_swap 127770624
[ 1495.337722][T24912] total_swapcached 4096
[ 1495.341838][T24912] total_pgpgin 1773133
[ 1495.345936][T24912] total_pgpgout 1709130
[ 1495.350057][T24912] total_pgfault 1230048
[ 1495.354198][T24912] total_pgmajfault 2906
[ 1495.358317][T24912] total_inactive_anon 75558912
[ 1495.363075][T24912] total_active_anon 186478592
[ 1495.367716][T24912] total_inactive_file 8192
[ 1495.372113][T24912] total_active_file 0
[ 1495.376057][T24912] total_unevictable 0
[ 1495.380010][T24912] anon_cost 0
[ 1495.383292][T24912] file_cost 0
[ 1495.386542][T24912] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5139,pid=24908,uid=0
[ 1495.403066][T24912] Memory cgroup out of memory: Killed process 24908 (syz.3.5139) total-vm:102032kB, anon-rss:1272kB, file-rss:22952kB, shmem-rss:11392kB, UID:0 pgtables:156kB oom_score_adj:1000
[ 1495.782742][T24909] delete_channel: no stack
[ 1496.632301][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1496.632314][   T30] audit: type=1400 audit(1768559060.741:8687): avc:  denied  { bind } for  pid=24909 comm="syz.4.5140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1496.661568][   T30] audit: type=1400 audit(1768559060.751:8688): avc:  denied  { setopt } for  pid=24909 comm="syz.4.5140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1497.720597][   T32] oom_reaper: reaped process 24908 (syz.3.5139), now anon-rss:28kB, file-rss:21832kB, shmem-rss:11392kB
[ 1602.771874][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1602.778824][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5175/1:b..l P24909/1:b..l
[ 1602.788431][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=122901, q=443 ncpus=2)
[ 1602.796200][    C1] task:syz.4.5140      state:R  running task     stack:27656 pid:24909 tgid:24909 ppid:17433  task_flags:0x40004c flags:0x00080000
[ 1602.810481][    C1] Call Trace:
[ 1602.813746][    C1]  <TASK>
[ 1602.816652][    C1]  ? __schedule+0x10b9/0x6150
[ 1602.821301][    C1]  __schedule+0x1139/0x6150
[ 1602.825782][    C1]  ? __pfx___schedule+0x10/0x10
[ 1602.830604][    C1]  ? find_held_lock+0x2b/0x80
[ 1602.835252][    C1]  ? preempt_schedule_thunk+0x16/0x30
[ 1602.840595][    C1]  preempt_schedule_common+0x44/0xc0
[ 1602.845849][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1602.851028][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1602.855676][    C1]  unmap_page_range+0x1047/0x43c0
[ 1602.860682][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1602.866025][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1602.870938][    C1]  ? uprobe_munmap+0x20/0x600
[ 1602.875583][    C1]  unmap_single_vma+0x153/0x240
[ 1602.880406][    C1]  unmap_vmas+0x218/0x470
[ 1602.884706][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1602.889528][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1602.894444][    C1]  exit_mmap+0x1b0/0xb60
[ 1602.898657][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1602.903391][    C1]  ? __lock_acquire+0x436/0x2890
[ 1602.908300][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1602.913824][    C1]  __mmput+0x12a/0x410
[ 1602.917867][    C1]  mmput+0x62/0x70
[ 1602.921561][    C1]  do_exit+0x7d7/0x2bd0
[ 1602.925686][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1602.930242][    C1]  ? preempt_schedule_thunk+0x16/0x30
[ 1602.935581][    C1]  do_group_exit+0xd3/0x2a0
[ 1602.940051][    C1]  __x64_sys_exit_group+0x3e/0x50
[ 1602.945041][    C1]  x64_sys_call+0x151c/0x1740
[ 1602.949688][    C1]  do_syscall_64+0xcd/0xf80
[ 1602.954165][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1602.960034][    C1] RIP: 0033:0x7f23e1d8f749
[ 1602.964414][    C1] RSP: 002b:00007ffdf2bc6348 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1602.972791][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f23e1d8f749
[ 1602.980732][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[ 1602.988668][    C1] RBP: 00007ffdf2bc63ac R08: 0000001ef2bc643f R09: 00000000000927c0
[ 1602.996607][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001a3
[ 1603.004546][    C1] R13: 00000000000927c0 R14: 000000000016cda8 R15: 00007ffdf2bc6400
[ 1603.012491][    C1]  </TASK>
[ 1603.015496][    C1] task:klogd           state:R  running task     stack:24584 pid:5175  tgid:5175  ppid:1      task_flags:0x400100 flags:0x00080000
[ 1603.028940][    C1] Call Trace:
[ 1603.032188][    C1]  <TASK>
[ 1603.035090][    C1]  ? __schedule+0x10b9/0x6150
[ 1603.039735][    C1]  __schedule+0x1139/0x6150
[ 1603.044212][    C1]  ? __pfx___schedule+0x10/0x10
[ 1603.049034][    C1]  preempt_schedule_irq+0x51/0x90
[ 1603.054028][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1603.058591][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1603.064539][    C1] RIP: 0010:lock_acquire+0x62/0x330
[ 1603.069706][    C1] Code: d3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 c1 ee 0e 0f 82 74 02 00 00 8b 35 ea f1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 d3 18 12 0f 85 ad 02 00 00 48 83 c4
[ 1603.089282][    C1] RSP: 0018:ffffc90003887438 EFLAGS: 00000206
[ 1603.095315][    C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000068c1bacb
[ 1603.103256][    C1] RDX: 0000000000000000 RSI: ffffffff8daa961b RDI: ffffffff8bf2b580
[ 1603.111192][    C1] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff
[ 1603.119137][    C1] R10: 0000000000000002 R11: ffff88807ac32ff0 R12: 0000000000000000
[ 1603.127076][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1603.135021][    C1]  ? is_module_text_address+0x148/0x220
[ 1603.140554][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1603.146675][    C1]  is_bpf_text_address+0x36/0x1a0
[ 1603.151668][    C1]  ? is_bpf_text_address+0x25/0x1a0
[ 1603.156835][    C1]  kernel_text_address+0x8d/0x100
[ 1603.161830][    C1]  __kernel_text_address+0xd/0x40
[ 1603.166833][    C1]  unwind_get_return_address+0x59/0xa0
[ 1603.172265][    C1]  arch_stack_walk+0xa6/0x100
[ 1603.176915][    C1]  stack_trace_save+0x8e/0xc0
[ 1603.181558][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1603.186905][    C1]  ? stack_trace_save+0x8e/0xc0
[ 1603.191729][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1603.197067][    C1]  ? stack_depot_save_flags+0x29/0x9b0
[ 1603.202497][    C1]  kasan_save_stack+0x33/0x60
[ 1603.207150][    C1]  ? kasan_save_stack+0x33/0x60
[ 1603.211967][    C1]  ? kasan_save_track+0x14/0x30
[ 1603.216783][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[ 1603.221510][    C1]  ? __kmalloc_node_track_caller_noprof+0x353/0x930
[ 1603.228069][    C1]  ? kmalloc_reserve+0xef/0x2c0
[ 1603.232889][    C1]  ? __alloc_skb+0x186/0x410
[ 1603.237445][    C1]  ? alloc_skb_with_frags+0xe0/0x860
[ 1603.242696][    C1]  ? sock_alloc_send_pskb+0x7f9/0x980
[ 1603.248032][    C1]  ? unix_dgram_sendmsg+0x3bc/0x1830
[ 1603.253290][    C1]  ? __sys_sendto+0x4a3/0x520
[ 1603.257933][    C1]  ? __x64_sys_sendto+0xe0/0x1c0
[ 1603.262835][    C1]  ? do_syscall_64+0xcd/0xf80
[ 1603.267480][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.273529][    C1]  kasan_save_track+0x14/0x30
[ 1603.278175][    C1]  __kasan_kmalloc+0xaa/0xb0
[ 1603.282733][    C1]  __kmalloc_node_track_caller_noprof+0x353/0x930
[ 1603.289126][    C1]  ? __alloc_skb+0x186/0x410
[ 1603.293682][    C1]  ? rcu_watching_snap_stopped_since+0x71/0x110
[ 1603.299893][    C1]  ? kmalloc_reserve+0xef/0x2c0
[ 1603.304712][    C1]  kmalloc_reserve+0xef/0x2c0
[ 1603.309360][    C1]  __alloc_skb+0x186/0x410
[ 1603.313749][    C1]  ? __alloc_skb+0x35d/0x410
[ 1603.318310][    C1]  ? __pfx___alloc_skb+0x10/0x10
[ 1603.323211][    C1]  ? __lock_acquire+0x436/0x2890
[ 1603.328119][    C1]  ? avc_has_perm+0x144/0x1f0
[ 1603.332763][    C1]  alloc_skb_with_frags+0xe0/0x860
[ 1603.337853][    C1]  ? find_held_lock+0x2b/0x80
[ 1603.342500][    C1]  sock_alloc_send_pskb+0x7f9/0x980
[ 1603.347674][    C1]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1603.353357][    C1]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[ 1603.359653][    C1]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 1603.366298][    C1]  ? sock_def_readable+0x1d9/0x5d0
[ 1603.371378][    C1]  unix_dgram_sendmsg+0x3bc/0x1830
[ 1603.376459][    C1]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1603.383191][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1603.388709][    C1]  __sys_sendto+0x4a3/0x520
[ 1603.393177][    C1]  ? __pfx___sys_sendto+0x10/0x10
[ 1603.398170][    C1]  ? do_syslog+0x131/0x6c0
[ 1603.402564][    C1]  ? xfd_validate_state+0x61/0x180
[ 1603.407653][    C1]  __x64_sys_sendto+0xe0/0x1c0
[ 1603.412385][    C1]  ? do_syscall_64+0x91/0xf80
[ 1603.417040][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1603.422207][    C1]  do_syscall_64+0xcd/0xf80
[ 1603.426682][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.432540][    C1] RIP: 0033:0x7fd61afac407
[ 1603.436923][    C1] RSP: 002b:00007ffd88411650 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1603.445299][    C1] RAX: ffffffffffffffda RBX: 00007fd61ae5cc80 RCX: 00007fd61afac407
[ 1603.453247][    C1] RDX: 000000000000004d RSI: 00007ffd88411790 RDI: 0000000000000003
[ 1603.461185][    C1] RBP: 00007ffd88411bc0 R08: 0000000000000000 R09: 0000000000000000
[ 1603.469123][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd88411bd8
[ 1603.477061][    C1] R13: 00007ffd88411790 R14: 0000000000000032 R15: 00007ffd88411790
[ 1603.485005][    C1]  </TASK>
[ 1603.487995][    C1] rcu: rcu_preempt kthread starved for 10572 jiffies! g122901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1603.499244][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1603.509187][    C1] rcu: RCU grace-period kthread stack dump:
[ 1603.515042][    C1] task:rcu_preempt     state:R  running task     stack:27880 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1603.528472][    C1] Call Trace:
[ 1603.531719][    C1]  <TASK>
[ 1603.534630][    C1]  ? __schedule+0x10b9/0x6150
[ 1603.539278][    C1]  __schedule+0x1139/0x6150
[ 1603.543750][    C1]  ? __lock_acquire+0x436/0x2890
[ 1603.548664][    C1]  ? __mod_timer+0x8f2/0xd30
[ 1603.553227][    C1]  ? __pfx___schedule+0x10/0x10
[ 1603.558044][    C1]  ? find_held_lock+0x2b/0x80
[ 1603.562696][    C1]  ? schedule+0x2d7/0x3a0
[ 1603.567014][    C1]  schedule+0xe7/0x3a0
[ 1603.571053][    C1]  schedule_timeout+0x123/0x290
[ 1603.575873][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1603.581211][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1603.586463][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1603.592239][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1603.597668][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1603.602402][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1603.607657][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1603.612825][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1603.617730][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1603.622554][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1603.627200][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1603.632367][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1603.637097][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1603.642275][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1603.647267][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1603.652432][    C1]  kthread+0x3c5/0x780
[ 1603.656471][    C1]  ? __pfx_kthread+0x10/0x10
[ 1603.661029][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1603.665759][    C1]  ? __pfx_kthread+0x10/0x10
[ 1603.670328][    C1]  ret_from_fork+0x983/0xb10
[ 1603.674885][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1603.679964][    C1]  ? __switch_to+0x7af/0x10d0
[ 1603.684610][    C1]  ? __pfx_kthread+0x10/0x10
[ 1603.689169][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1603.693909][    C1]  </TASK>
[ 1603.696896][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1603.703183][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1603.708361][    C0] NMI backtrace for cpu 0
[ 1603.708373][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1603.708390][    C0] Tainted: [L]=SOFTLOCKUP
[ 1603.708395][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1603.708402][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1603.708420][    C0] Code: 46 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 b9 11 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1603.708431][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1603.708443][    C0] RAX: 0000000006f39b85 RBX: 0000000000000000 RCX: ffffffff8b78a6d9
[ 1603.708451][    C0] RDX: 0000000000000000 RSI: ffffffff8dacf6aa RDI: ffffffff8bf2b580
[ 1603.708459][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[ 1603.708467][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[ 1603.708475][    C0] R13: ffffffff8e097b40 R14: ffffffff9088cdd0 R15: 0000000000000000
[ 1603.708483][    C0] FS:  0000000000000000(0000) GS:ffff8881248f2000(0000) knlGS:0000000000000000
[ 1603.708497][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1603.708505][    C0] CR2: 00007f5b250f76a4 CR3: 00000000644ca000 CR4: 00000000003526f0
[ 1603.708513][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000007
[ 1603.708520][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1603.708528][    C0] Call Trace:
[ 1603.708532][    C0]  <TASK>
[ 1603.708537][    C0]  default_idle+0x13/0x20
[ 1603.708547][    C0]  default_idle_call+0x6c/0xb0
[ 1603.708558][    C0]  do_idle+0x38d/0x510
[ 1603.708577][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1603.708596][    C0]  cpu_startup_entry+0x4f/0x60
[ 1603.708614][    C0]  rest_init+0x16b/0x2b0
[ 1603.708625][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1603.708640][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1603.708655][    C0]  start_kernel+0x3ef/0x4d0
[ 1603.708668][    C0]  x86_64_start_reservations+0x18/0x30
[ 1603.708681][    C0]  x86_64_start_kernel+0x130/0x190
[ 1603.708695][    C0]  common_startup_64+0x13e/0x148
[ 1603.708714][    C0]  </TASK>