last executing test programs:

18m55.269349662s ago: executing program 2 (id=324):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r9 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r9, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58)
close(r9)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

18m52.048827318s ago: executing program 2 (id=330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c0002800a0001006c696d69740000000800024000000000240003"], 0xf0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e00000007002000010005000500"], 0x58)
close(r10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

18m42.842108499s ago: executing program 2 (id=352):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x102)
write(r0, &(0x7f0000000100)="ade430cdee6c5a4aa9c8c09d3d", 0xd)
mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000e00)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000e40)='./gadget/dummy_udc\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
write(r1, &(0x7f0000000f40)="010000000705810240000007058102000200", 0x12)

18m35.936073951s ago: executing program 2 (id=362):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c0002800a0001006c696d69740000000800024000000000240003"], 0xf0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e00000007002000010005000500"], 0x58)
close(r10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

18m34.217237921s ago: executing program 2 (id=366):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000)
getpgrp(0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8)
socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18m30.785439324s ago: executing program 2 (id=375):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x61, 0x5})

18m15.354044842s ago: executing program 32 (id=375):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x61, 0x5})

16.3559815s ago: executing program 3 (id=2512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec/tomoyo/domain_policy\x00', 0x202, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="88", 0x1}], 0x1}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c)
r3 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read$FUSE(r0, 0x0, 0x0)

14.118098076s ago: executing program 4 (id=2519):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0xa019, 0x1, 0x3}, 0x18, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x35)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x4a102)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002400)={0x1, &(0x7f0000002440)=[{0x6, 0xff, 0xfc, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000002480)={0x20004, r4})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0)
close(r5)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002540)={0x0, @in6={{0xa, 0x4e24, 0xc, @loopback, 0x4}}}, &(0x7f0000002600)=0x84)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800), &(0x7f0000002840), 0xacb, r3}, 0x38)

12.951462665s ago: executing program 1 (id=2521):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x800, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracefs_dir\x00', 0x1ff)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000006c0)={0xc, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
mount(0x0, &(0x7f0000000700)='./tracefs_dir\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r4, &(0x7f00000007c0)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000880)={0x18, r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000008c0)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000900)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8", r7})
close(r5)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x1a)

12.887171087s ago: executing program 0 (id=2522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x20004040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={r5, <r6=>0xffffffffffffffff}, 0x4)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000020c0)={r4, r3})
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000002100)={r4})
syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)

12.615612929s ago: executing program 4 (id=2523):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.164024678s ago: executing program 3 (id=2525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x20004040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={r5, <r6=>0xffffffffffffffff}, 0x4)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_capability(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40), 0x0, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002000)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r4, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000020c0)={r4, r3})
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000002100)={r4})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.279912838s ago: executing program 0 (id=2526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x20004040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={r5, <r6=>0xffffffffffffffff}, 0x4)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000020c0)={r4, r3})
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000002100)={r4})
syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)

9.097332716s ago: executing program 4 (id=2527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r5, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000020c0)={r5, r4})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000002100)={r5})
r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.100547447s ago: executing program 1 (id=2528):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5b}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x98)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x2840802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r4, &(0x7f0000000780)='6', 0x1)
fsopen(&(0x7f00000007c0)='overlay\x00', 0x1)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x40000000, 0x4c001)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084149, &(0x7f00000000c0))
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x303100, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000800), 0x2000000f5, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000a00)={0x9, {"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", 0x1000}}, 0x1062)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000840)={0xf0f02a, 0x2})
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @any, 0x89}, 0xa)
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000008c0)={'vcan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@bridge_getvlan={0x48, 0x72, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x240000d0)
close(r0)
ioctl$NBD_SET_SOCK(r8, 0xab00, r8)

7.024869216s ago: executing program 3 (id=2529):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r2=>0x0})
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async)
r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f00001e5000/0x1000)=nil, 0x1000}})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x2, r4, r1, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000380)})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d7000/0x13000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
ioctl$sock_ifreq(r7, 0x8931, &(0x7f0000000140)={'macsec0\x00', @ifru_hwaddr=@broadcast})

6.504945609s ago: executing program 1 (id=2530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c000280"], 0xf0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58)
close(r10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

5.585315748s ago: executing program 5 (id=2532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c000280"], 0xf0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58)
close(r10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

4.786582803s ago: executing program 1 (id=2533):
openat$dsp(0xffffff9c, &(0x7f0000000140), 0x480000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x5)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0xfff, 0x4)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x5, 0x80, 0xa64c, 0x0, 0x8, 0x8d], 0x50000, 0x240042})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = syz_open_dev$vim2m(0x0, 0x801, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000480)={0xf0f042, 0x2000})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042", @ANYRES32=r5], 0x18}}, 0x0)

4.668324199s ago: executing program 5 (id=2534):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000100)={0x18, r2, 0x1, 0x0, &(0x7f0000000140)=[{0xfffffffffffdfffe, 0xffffffffffffffff}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/fs/afs/rootcell\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='syz0:127.0.0.1+7003\n\x00', 0x14)
close(r5)
ioctl$MEMERASE(r5, 0x40084d02, &(0x7f00000005c0)={0x6, 0x3})
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000600)={0x8001, 0x50313134, 0x1, @stepwise={0x4, 0x800, 0x8e, 0x2db8, 0xf, 0x8}})
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e21, 0x20, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0xff}, {0x7, 0xfffffffffffffffb, 0x6, 0x800, 0x1ff, 0x100, 0x9, 0xff}, {0x6, 0x9, 0x6, 0x1000}, 0x1ff, 0x0, 0x1, 0xd64d5661df2588af, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0xa, @in=@rand_addr=0x6, 0x3502, 0x4, 0x2, 0x6, 0x1, 0xffffffff, 0x1}}, 0xe4)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x2710}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x2, 0x2, 0x3f, 0x7, 0x40000, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x8, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x9, 0x4b7, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0, 0x2, 0x4000, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x4000000, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x802, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x1)
r8 = socket$inet6(0xa, 0x805, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000e80)=""/4076, &(0x7f0000001e80)=0xfec)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x6, 0xc, &(0x7f0000001f80)=ANY=[], &(0x7f0000001fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002000)={r10, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000002040)=ANY=[], 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='new default trusted:syz'], 0x2d, 0xfffffffffffffff9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={0xffffffffffffffff, 0x2f00020b, 0x1b, 0x0, &(0x7f0000002140)="63eced8e46dc3f0adf33c9f7b98630f46fbb925a6ea93d34df1f17", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = syz_open_dev$vcsn(&(0x7f0000002180), 0x7, 0xc4d02)
recvfrom$inet_nvme(r11, &(0x7f00000021c0)=""/4096, 0x1000, 0x20000141, 0x0, 0x0)

4.49774448s ago: executing program 0 (id=2535):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101e01, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7e)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x6)
fchmodat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0xffffff69) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x606840, 0x4)
bind$inet6(r3, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x10) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) (async)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e23, 0xff8, @local, 0xb}, 0xfffffffffffffed0) (async)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
mount(0x0, &(0x7f0000000240)='./proc\x00', 0x0, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x102)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r6, &(0x7f0000000400)='e:my_read_msr2 m', 0x10) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7d) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x1) (async)
socket$netlink(0x10, 0x3, 0x0)

4.385610747s ago: executing program 4 (id=2536):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0c091f1ccf147fc2e5cce4a24c4ad480"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
lseek(r1, 0x6, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000400), 0x0, &(0x7f0000000440), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000480)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xdddd1000, 0x10000, 0xb, 0x3, 0x1, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x8}, {0xd000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0xc1}, {0xffe, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x39, 0x9, 0x2}, {0xeeee8000, 0x70000, 0xf, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x1, 0x1, 0xe, 0x9, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0x9, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x5, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeee8000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x3, 0xa800, 0x2, 0x0, [0x6257, 0x2, 0x8000000000000003, 0xc]})
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x158)
setxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v3={0x3000000, [{0x50000000, 0x1}, {0x7b00bb87, 0xad12}]}, 0x18, 0x1)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000008c0)={0x1, @in6={{0xa, 0x4e23, 0x0, @empty}}}, 0x84)
lgetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=ANY=[], 0x0, 0xf6ff)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', 0x1ff)
mount(&(0x7f00000007c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='cifs\x00', 0x0, &(0x7f0000000880)='rdma,vers=3.0,ip=127.0.0.1,port=5445\x00')
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

3.529489825s ago: executing program 3 (id=2537):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) (fail_nth: 2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.528457881s ago: executing program 1 (id=2538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000080)='GPL\x00', 0x20a, 0x85, &(0x7f0000000740)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f00000009c0)='md0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/md0\x00', 0x2, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000a40)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r3, 0x40140921, 0x0)
ioctl(r3, 0x40140921, &(0x7f0000000ac0)="010000000100000001000000010000")
ioctl(r3, 0x40140921, &(0x7f0000000b00))
ioctl(r3, 0x400c0930, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}})
socket$netlink(0x10, 0x3, 0x0)

3.500511217s ago: executing program 0 (id=2539):
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000080)='GPL\x00', 0x20a, 0x85, &(0x7f0000000740)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f00000009c0)='md0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/md0\x00', 0x2, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000a40)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r3, 0x40140921, 0x0)
ioctl(r3, 0x40140921, &(0x7f0000000ac0)="010000000100000001000000010000")
ioctl(r3, 0x40140921, &(0x7f0000000b00))
ioctl(r3, 0x400c0930, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}})
socket$netlink(0x10, 0x3, 0x0)

3.307659604s ago: executing program 5 (id=2540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$sg(&(0x7f0000000500), 0x9, 0x10000)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

2.993506749s ago: executing program 3 (id=2541):
timer_create(0x2, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x3032, 0xffffffffffffffff, 0xd27e4000)
pipe(&(0x7f00000002c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
lsm_set_self_attr(0x65, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x290a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb9bf}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8090)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000440), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB='-cpu '], 0xb)

1.956177271s ago: executing program 3 (id=2542):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.641385829s ago: executing program 5 (id=2543):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005840)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2834d, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x10, 0x6, 0x7}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8840)

1.569719859s ago: executing program 5 (id=2544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c000280"], 0xf0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8)
write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58)
close(r10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

1.549786793s ago: executing program 4 (id=2545):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x800, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracefs_dir\x00', 0x1ff)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000006c0)={0xc, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
mount(0x0, &(0x7f0000000700)='./tracefs_dir\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r4, &(0x7f00000007c0)='10', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000880)={0x18, r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000008c0)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000900)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8", r7})
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000080)='binder\x00', 0x8, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x1a)

1.442470915s ago: executing program 0 (id=2546):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xe800)

293.251732ms ago: executing program 5 (id=2547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={r6}, 0x4)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_capability(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40), 0x0, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
sendmsg$inet(r5, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000020c0)={r5, r4})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000002100)={r5})
r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

238.117106ms ago: executing program 1 (id=2548):
openat$dsp(0xffffff9c, &(0x7f0000000140), 0x480000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x5)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0xfff, 0x4)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x5, 0x80, 0xa64c, 0x0, 0x8, 0x8d], 0x50000, 0x240042})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = syz_open_dev$vim2m(0x0, 0x801, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000480)={0xf0f042, 0x2000})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042", @ANYRES32=r5], 0x18}}, 0x0)

14.326592ms ago: executing program 0 (id=2549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={r6}, 0x4)
symlinkat(&(0x7f0000001b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00')
mkdir(&(0x7f0000001bc0)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8, &(0x7f0000001cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_capability(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40), 0x0, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file2\x00', 0x1000)
sendmsg$inet(r5, &(0x7f0000002040)={&(0x7f0000002080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000020c0)={r5, r4})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000002100)={r5})
r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=2550):
timer_create(0x2, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x3032, 0xffffffffffffffff, 0xd27e4000)
pipe(&(0x7f00000002c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
lsm_set_self_attr(0x65, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x290a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb9bf}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8090)
fsmount(r3, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB='-cpu '], 0xb)

kernel console output (not intermixed with test programs):

0x8A has invalid maxpacket 121
[ 1090.269998][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.270027][ T5801] usb 6-1: Product: syz
[ 1090.270042][ T5801] usb 6-1: Manufacturer: syz
[ 1090.270057][ T5801] usb 6-1: SerialNumber: syz
[ 1090.313568][ T5801] usb 6-1: config 0 descriptor??
[ 1090.317178][T14079] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1090.317312][T14079] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1090.321969][ T5801] usb 6-1: ucan: probing device on interface #0
[ 1090.789019][ T5703] usb 4-1: USB disconnect, device number 71
[ 1091.058382][ T5801] ucan 6-1:0.0 can0: registered device
[ 1092.091183][ T5801] ucan 6-1:0.0 can0: firmware string: unknown
[ 1092.106812][ T5801] usb 6-1: USB disconnect, device number 79
[ 1092.330084][T11572] Bluetooth: hci1: unexpected event for opcode 0x200f
[ 1094.722676][T10433] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1095.014890][T10433] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1095.015803][T10433] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1095.015829][T10433] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1095.015855][T10433] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1095.017550][T10433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.017572][T10433] usb 6-1: Product: syz
[ 1095.017586][T10433] usb 6-1: Manufacturer: syz
[ 1095.017601][T10433] usb 6-1: SerialNumber: syz
[ 1095.076432][T10433] usb 6-1: config 0 descriptor??
[ 1095.078346][T14112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1095.078466][T14112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1095.079558][T10433] usb 6-1: ucan: probing device on interface #0
[ 1095.442153][T10433] usb 6-1: ucan: could not read protocol version, ret=0
[ 1095.442179][T10433] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1095.722147][T14138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'.
[ 1096.116351][T10433] usb 6-1: USB disconnect, device number 80
[ 1096.873177][T14141] tipc: New replicast peer: 172.20.20.187
[ 1096.903958][T14141] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1098.205424][T13251] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1099.498318][   T31] audit: type=1400 audit(1792226912.975:1003): avc:  denied  { search } for  pid=14154 comm="syz.3.2047" name="/" dev="configfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1099.498439][   T31] audit: type=1400 audit(1792226912.975:1004): avc:  denied  { search } for  pid=14154 comm="syz.3.2047" name="usb_gadget" dev="configfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1099.498606][   T31] audit: type=1400 audit(1792226912.975:1005): avc:  denied  { search } for  pid=14154 comm="syz.3.2047" name="g1" dev="configfs" ino=12792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1099.498703][   T31] audit: type=1400 audit(1792226912.975:1006): avc:  denied  { search } for  pid=14154 comm="syz.3.2047" name="functions" dev="configfs" ino=12793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1099.702951][ T5710] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1099.759214][T14162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14162 comm=syz.3.2047
[ 1099.863227][ T5710] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1099.864099][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.864137][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1099.864160][ T5710] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1099.864181][ T5710] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1099.864261][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.872915][ T5703] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1100.022342][T14164] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1100.033380][ T5703] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1100.034248][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1100.034277][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1100.034300][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1100.035977][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.035998][ T5703] usb 2-1: Product: syz
[ 1100.036013][ T5703] usb 2-1: Manufacturer: syz
[ 1100.036028][ T5703] usb 2-1: SerialNumber: syz
[ 1100.038368][ T5703] usb 2-1: config 0 descriptor??
[ 1100.038989][T14159] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1100.039075][T14159] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1100.062467][ T5703] usb 2-1: ucan: probing device on interface #0
[ 1100.122842][T14165] md: could not open device unknown-block(1,1).
[ 1100.122886][T14165] md: error, md_import_device() returned -16
[ 1100.239003][T14164] md: could not open device unknown-block(0,0).
[ 1100.239078][T14164] md: error, md_import_device() returned -6
[ 1100.273004][ T5703] usb 2-1: ucan: could not read protocol version, ret=0
[ 1100.273028][ T5703] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1100.312719][ T5710] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1100.357016][ T5710] usb 1-1: USB disconnect, device number 100
[ 1100.394459][T14165] md/raid:md0: not enough operational devices (3/3 failed)
[ 1100.492455][ T5703] usb 2-1: USB disconnect, device number 89
[ 1101.105646][T14165] md/raid:md0: failed to run raid set.
[ 1101.105658][T14165] md: pers->run() failed ...
[ 1101.212904][T10433] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1101.218426][T14177] batman_adv: batadv0: Adding interface: syzkaller0
[ 1101.218438][T14177] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.218460][T14177] batman_adv: batadv0: Interface activated: syzkaller0
[ 1102.172847][T14181] program syz.1.2053 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1102.565569][   T31] audit: type=1400 audit(1792226915.595:1007): avc:  denied  { create } for  pid=14179 comm="syz.1.2053" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1102.595205][T10433] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1102.597423][T10433] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1102.597450][T10433] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1102.597473][T10433] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1102.600641][T10433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.600664][T10433] usb 6-1: Product: syz
[ 1102.600679][T10433] usb 6-1: Manufacturer: syz
[ 1102.600694][T10433] usb 6-1: SerialNumber: syz
[ 1102.623873][T10433] usb 6-1: config 0 descriptor??
[ 1102.634374][T14172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1102.634464][T14172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1102.636552][T10433] usb 6-1: ucan: probing device on interface #0
[ 1102.695652][ T5710] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1102.973418][ T5710] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1102.974679][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.977323][ T5710] usb 5-1: config 0 descriptor??
[ 1103.123256][ T5692] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1103.296497][ T5692] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1103.316596][ T5692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1103.316745][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1103.316801][ T5692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1103.362356][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.362381][ T5692] usb 1-1: Product: syz
[ 1103.362389][ T5692] usb 1-1: Manufacturer: syz
[ 1103.362397][ T5692] usb 1-1: SerialNumber: syz
[ 1103.388283][ T5692] usb 1-1: config 0 descriptor??
[ 1103.390223][T14185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1103.390357][T14185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1103.398900][ T5692] usb 1-1: ucan: probing device on interface #0
[ 1103.447272][ T5710] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1103.467520][T10433] ucan 6-1:0.0 can0: registered device
[ 1103.598328][ T5692] usb 1-1: ucan: could not read protocol version, ret=0
[ 1103.598379][ T5692] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1103.661109][T10433] ucan 6-1:0.0 can0: firmware string: unknown
[ 1103.672328][T10433] usb 6-1: USB disconnect, device number 81
[ 1103.752744][ T5728] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1103.770731][T11572] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1104.799911][ T5703] usb 1-1: USB disconnect, device number 101
[ 1104.873309][ T5728] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1104.875723][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1104.875751][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1104.875773][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1104.878552][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.878575][ T5728] usb 2-1: Product: syz
[ 1104.878589][ T5728] usb 2-1: Manufacturer: syz
[ 1104.878622][ T5728] usb 2-1: SerialNumber: syz
[ 1104.884888][ T5728] usb 2-1: config 0 descriptor??
[ 1104.887033][T14192] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1104.887113][T14192] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1104.890171][ T5728] usb 2-1: ucan: probing device on interface #0
[ 1104.959267][T14200] FAULT_INJECTION: forcing a failure.
[ 1104.959267][T14200] name failslab, interval 1, probability 0, space 0, times 0
[ 1104.959297][T14200] CPU: 0 UID: 0 PID: 14200 Comm: syz.5.2058 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1104.959321][T14200] Tainted: [L]=SOFTLOCKUP
[ 1104.959328][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1104.959340][T14200] Call Trace:
[ 1104.959346][T14200]  <TASK>
[ 1104.959354][T14200]  dump_stack_lvl+0x100/0x190
[ 1104.959383][T14200]  should_fail_ex.cold+0x5/0xa
[ 1104.959408][T14200]  should_failslab+0xc2/0x120
[ 1104.959433][T14200]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1104.959457][T14200]  ? inet_bind2_bucket_create+0x36/0x5f0
[ 1104.959490][T14200]  inet_bind2_bucket_create+0x36/0x5f0
[ 1104.959518][T14200]  inet_csk_get_port+0x2687/0x28e0
[ 1104.959543][T14200]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1104.959573][T14200]  ? __local_bh_enable_ip+0xa5/0x120
[ 1104.959596][T14200]  __inet_bind+0x598/0xc60
[ 1104.959625][T14200]  inet_bind+0xdb/0x120
[ 1104.959652][T14200]  __sys_bind+0x1a9/0x260
[ 1104.959677][T14200]  ? __pfx___sys_bind+0x10/0x10
[ 1104.959717][T14200]  __x64_sys_bind+0x72/0xb0
[ 1104.959739][T14200]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1104.959764][T14200]  do_syscall_64+0x123/0x790
[ 1104.959790][T14200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.959808][T14200] RIP: 0033:0x7faca2d9e559
[ 1104.959823][T14200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.959841][T14200] RSP: 002b:00007faca3b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1104.959865][T14200] RAX: ffffffffffffffda RBX: 00007faca3026090 RCX: 00007faca2d9e559
[ 1104.959877][T14200] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006
[ 1104.959888][T14200] RBP: 00007faca2e35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1104.959900][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1104.959910][T14200] R13: 00007faca3026128 R14: 00007faca3026090 R15: 00007ffee0f12548
[ 1104.959935][T14200]  </TASK>
[ 1105.102304][   T31] audit: type=1400 audit(1792226918.575:1008): avc:  denied  { sys_module } for  pid=14197 comm="syz.5.2058" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1105.515259][ T5728] ucan 2-1:0.0: probe with driver ucan failed with error -71
[ 1105.541241][ T5728] usb 2-1: USB disconnect, device number 90
[ 1105.602349][T14208] netlink: 'syz.0.2060': attribute type 2 has an invalid length.
[ 1105.604250][T14208] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2060'.
[ 1105.664832][T14208] netlink: 'syz.0.2060': attribute type 10 has an invalid length.
[ 1106.667000][ T5710] [drm:udl_init] *ERROR* Selecting channel failed
[ 1106.691249][T14177] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1106.692961][ T5710] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[ 1106.692981][ T5710] [drm] Initialized udl on minor 1
[ 1106.703516][ T5710] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1106.703800][ T5710] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1106.712175][T10433] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1106.712763][T10433] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1106.712911][T10433] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1106.713008][ T5710] usb 5-1: USB disconnect, device number 78
[ 1106.805373][T14177] batman_adv: batadv0: Removing interface: syzkaller0
[ 1107.666454][T14219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1107.742763][T14219] md: could not open device unknown-block(1,1).
[ 1107.742796][T14219] md: error, md_import_device() returned -16
[ 1107.868203][ T5612] Bluetooth: hci2: unexpected event for opcode 0x200f
[ 1109.380464][T14221] md/raid:md0: couldn't allocate thread.
[ 1110.284308][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1110.284382][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1111.429285][T14221] md: pers->run() failed ...
[ 1116.976738][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'.
[ 1117.002149][ T5703] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1117.173640][ T5703] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1117.174552][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.174593][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1117.174615][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1117.174637][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1117.174699][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.372656][ T5710] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1117.580045][ T5710] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1117.602246][ T5703] gud 4-1:1.0: probe with driver gud failed with error -71
[ 1117.622069][ T5710] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1117.622090][ T5710] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1117.622104][ T5710] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1117.712218][ T5703] usb 4-1: USB disconnect, device number 73
[ 1117.776347][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.776372][ T5710] usb 6-1: Product: syz
[ 1117.776385][ T5710] usb 6-1: Manufacturer: syz
[ 1117.776398][ T5710] usb 6-1: SerialNumber: syz
[ 1118.117145][ T5710] usb 6-1: config 0 descriptor??
[ 1118.125691][T14271] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1118.125772][T14271] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1118.440318][ T5710] usb 6-1: ucan: probing device on interface #0
[ 1118.701387][ T5710] usb 6-1: ucan: could not read protocol version, ret=0
[ 1118.701412][ T5710] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1119.400693][ T5710] usb 6-1: USB disconnect, device number 82
[ 1119.487317][T14290] gadgetfs: bound to dummy_udc driver
[ 1119.724660][T10433] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[ 1119.724876][    C0] gadgetfs: connected
[ 1119.746272][T10433] gadgetfs: disconnected
[ 1119.823888][ T5710] usb 6-1: new full-speed USB device number 83 using dummy_hcd
[ 1119.903653][    C0] gadgetfs: connected
[ 1119.909950][T10433] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 1119.912282][T10433] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1119.939364][T10433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.040676][ T5710] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[ 1120.066259][    C0] gadgetfs: configuration #1
[ 1120.082431][ T5710] usb 6-1: config 127 has an invalid interface number: 57 but max is 0
[ 1120.082465][ T5710] usb 6-1: config 127 has no interface number 0
[ 1120.136946][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.137236][ T5710] usb 6-1: Product: syz
[ 1120.137277][ T5710] usb 6-1: Manufacturer: syz
[ 1120.137347][ T5710] usb 6-1: SerialNumber: syz
[ 1120.725758][ T5710] asix 6-1:127.57: probe with driver asix failed with error -22
[ 1120.790560][T14289] gadgetfs: suspended from state 3
[ 1120.792405][T14289] gadgetfs: disconnected
[ 1120.840205][T10433] usb 1-1: USB disconnect, device number 102
[ 1120.841167][ T5710] usb 6-1: USB disconnect, device number 83
[ 1121.276053][   T31] audit: type=1400 audit(1792226934.755:1009): avc:  denied  { read } for  pid=14298 comm="syz.1.2083" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1123.147700][ T5801] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1123.713244][ T5801] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1123.714132][ T5801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1123.714161][ T5801] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1123.714187][ T5801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1123.715822][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.715837][ T5801] usb 4-1: Product: syz
[ 1123.715846][ T5801] usb 4-1: Manufacturer: syz
[ 1123.715855][ T5801] usb 4-1: SerialNumber: syz
[ 1123.723110][ T5801] usb 4-1: config 0 descriptor??
[ 1123.724288][T14321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1123.724377][T14321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1123.734214][ T5801] usb 4-1: ucan: probing device on interface #0
[ 1124.053837][ T5801] usb 4-1: ucan: could not read protocol version, ret=0
[ 1124.053862][ T5801] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1124.337430][ T5710] usb 4-1: USB disconnect, device number 74
[ 1124.683219][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[ 1125.313146][ T5703] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1125.463824][ T5703] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1125.466260][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1125.466385][ T5703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1125.466427][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1125.466455][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1125.466522][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.284241][T11572] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1126.284299][T11572] CPU: 1 UID: 0 PID: 11572 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1126.284331][T11572] Tainted: [L]=SOFTLOCKUP
[ 1126.284340][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1126.284357][T11572] Workqueue: hci3 hci_rx_work
[ 1126.284384][T11572] Call Trace:
[ 1126.284393][T11572]  <TASK>
[ 1126.284403][T11572]  dump_stack_lvl+0x100/0x190
[ 1126.284437][T11572]  sysfs_warn_dup.cold+0x1c/0x28
[ 1126.284469][T11572]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1126.284492][T11572]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1126.284517][T11572]  ? find_held_lock+0x2b/0x80
[ 1126.284549][T11572]  ? kobject_add_internal+0x25f/0x930
[ 1126.284572][T11572]  ? kobject_add_internal+0x25f/0x930
[ 1126.284599][T11572]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1126.284629][T11572]  kobject_add_internal+0x2c8/0x930
[ 1126.284658][T11572]  kobject_add+0x16a/0x1e0
[ 1126.284683][T11572]  ? __pfx_kobject_add+0x10/0x10
[ 1126.284705][T11572]  ? preempt_schedule_thunk+0x16/0x40
[ 1126.284737][T11572]  ? kobject_put+0xb9/0x640
[ 1126.284768][T11572]  ? _raw_spin_unlock+0x3e/0x50
[ 1126.284802][T11572]  device_add+0x294/0x1970
[ 1126.284826][T11572]  ? __pfx_dev_set_name+0x10/0x10
[ 1126.284852][T11572]  ? __pfx_device_add+0x10/0x10
[ 1126.284876][T11572]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1126.284910][T11572]  hci_conn_add_sysfs+0x1a3/0x260
[ 1126.284940][T11572]  le_conn_complete_evt+0x122f/0x2130
[ 1126.284973][T11572]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1126.284995][T11572]  ? hci_event_packet+0x186/0xcd0
[ 1126.285016][T11572]  ? hci_event_packet+0x186/0xcd0
[ 1126.285046][T11572]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[ 1126.285076][T11572]  ? skb_pull_data+0x15f/0x1e0
[ 1126.285105][T11572]  hci_le_meta_evt+0x34a/0x5f0
[ 1126.285132][T11572]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[ 1126.285163][T11572]  hci_event_packet+0x51c/0xcd0
[ 1126.285189][T11572]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1126.285217][T11572]  ? __pfx_hci_event_packet+0x10/0x10
[ 1126.285249][T11572]  ? kcov_remote_start+0x3cf/0x6d0
[ 1126.285283][T11572]  hci_rx_work+0x451/0xfc0
[ 1126.285313][T11572]  process_one_work+0xac7/0x1b10
[ 1126.285359][T11572]  ? __pfx_process_one_work+0x10/0x10
[ 1126.285392][T11572]  ? lock_acquire+0x1d1/0x380
[ 1126.285425][T11572]  ? __pfx_hci_rx_work+0x10/0x10
[ 1126.285451][T11572]  worker_thread+0x5ef/0xe50
[ 1126.285479][T11572]  ? __pfx_worker_thread+0x10/0x10
[ 1126.285500][T11572]  ? kthread+0x13a/0x450
[ 1126.285533][T11572]  ? __pfx_worker_thread+0x10/0x10
[ 1126.285552][T11572]  kthread+0x373/0x450
[ 1126.285580][T11572]  ? __pfx_kthread+0x10/0x10
[ 1126.285605][T11572]  ret_from_fork+0x730/0xd60
[ 1126.285627][T11572]  ? __pfx_ret_from_fork+0x10/0x10
[ 1126.285653][T11572]  ? __switch_to+0x800/0x10f0
[ 1126.285683][T11572]  ? __pfx_kthread+0x10/0x10
[ 1126.285713][T11572]  ret_from_fork_asm+0x1a/0x30
[ 1126.285753][T11572]  </TASK>
[ 1126.285836][T11572] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1126.285927][T11572] Bluetooth: hci3: failed to register connection device
[ 1126.607835][T14355] tipc: New replicast peer: 172.20.20.187
[ 1126.608613][T14355] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1126.762815][T11572] Bluetooth: hci3: command 0x0406 tx timeout
[ 1128.679580][ T5703] gud 2-1:1.0: probe with driver gud failed with error -71
[ 1128.707687][ T5703] usb 2-1: USB disconnect, device number 91
[ 1128.842969][T11572] Bluetooth: hci3: command 0x0406 tx timeout
[ 1130.450288][ T5703] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1130.866315][ T5703] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1130.883194][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1130.883299][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1130.883326][ T5703] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1130.883353][ T5703] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1130.883425][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.934523][T11572] Bluetooth: hci3: command 0x0406 tx timeout
[ 1132.843564][ T5703] gud 5-1:1.0: probe with driver gud failed with error -71
[ 1132.867192][ T5703] usb 5-1: USB disconnect, device number 79
[ 1134.208967][T14399] gadgetfs: bound to dummy_udc driver
[ 1134.893802][ T5703] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[ 1134.893981][    C1] gadgetfs: connected
[ 1134.894063][ T5703] gadgetfs: disconnected
[ 1134.952720][ T5801] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[ 1135.042858][    C1] gadgetfs: connected
[ 1135.043694][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 1135.045332][ T5703] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1135.045369][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.143368][ T5801] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[ 1135.148809][ T5801] usb 5-1: config 127 has an invalid interface number: 57 but max is 0
[ 1135.148835][ T5801] usb 5-1: config 127 has no interface number 0
[ 1135.196747][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.196775][ T5801] usb 5-1: Product: syz
[ 1135.196791][ T5801] usb 5-1: Manufacturer: syz
[ 1135.196806][ T5801] usb 5-1: SerialNumber: syz
[ 1135.475149][    C1] gadgetfs: configuration #1
[ 1136.027817][T14397] gadgetfs: suspended from state 3
[ 1136.027858][T14397] gadgetfs: disconnected
[ 1136.029823][ T5801] asix 5-1:127.57: probe with driver asix failed with error -22
[ 1136.032381][ T5801] usb 5-1: USB disconnect, device number 80
[ 1136.060825][T10433] usb 1-1: USB disconnect, device number 103
[ 1137.112962][T14413] batman_adv: batadv0: Adding interface: syzkaller0
[ 1137.112987][T14413] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1137.113016][T14413] batman_adv: batadv0: Interface activated: syzkaller0
[ 1137.760949][T14418] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2111'.
[ 1137.763303][T14416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1137.823872][T10433] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1137.855626][T14416] md: could not open device unknown-block(1,1).
[ 1137.855696][T14416] md: error, md_import_device() returned -16
[ 1137.983449][T10433] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1137.984333][T10433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.987061][T10433] usb 6-1: config 0 descriptor??
[ 1138.030834][T14416] md: could not open device unknown-block(0,0).
[ 1138.030885][T14416] md: error, md_import_device() returned -6
[ 1138.074140][   T31] audit: type=1400 audit(1792226951.555:1010): avc:  denied  { write } for  pid=14432 comm="syz.0.2117" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1138.074468][   T31] audit: type=1400 audit(1792226951.555:1011): avc:  denied  { open } for  pid=14432 comm="syz.0.2117" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1138.132054][T14422] md/raid:md0: not enough operational devices (3/3 failed)
[ 1138.246061][T14437] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1138.253048][T10433] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1138.274750][T14422] md/raid:md0: failed to run raid set.
[ 1138.274769][T14422] md: pers->run() failed ...
[ 1138.343054][T14439] tipc: New replicast peer: 172.20.20.187
[ 1138.343932][T14439] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1138.427522][T14442] vlan0: entered promiscuous mode
[ 1138.438470][T14442] team0: Port device vlan0 added
[ 1138.543703][ T5612] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1139.841022][T14455] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1139.865229][T14444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2126'.
[ 1140.147282][T10433] [drm:udl_init] *ERROR* Selecting channel failed
[ 1140.169580][T14413] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1140.180418][T10433] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[ 1140.180433][T10433] [drm] Initialized udl on minor 1
[ 1140.182414][T10433] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1140.183187][T10433] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1140.193812][ T5692] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1140.194407][ T5692] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1140.194554][ T5692] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1140.194654][T10433] usb 6-1: USB disconnect, device number 84
[ 1140.314228][T14413] batman_adv: batadv0: Removing interface: syzkaller0
[ 1140.389653][T14460] ioapic: wrong length 6
[ 1141.884850][ T4931] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1142.156643][ T4931] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1142.189013][ T4931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.189279][ T4931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1142.189294][ T4931] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1142.189307][ T4931] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1142.189329][ T4931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.395457][   T31] audit: type=1400 audit(1792226955.875:1012): avc:  denied  { bind } for  pid=14474 comm="syz.1.2136" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1142.395502][   T31] audit: type=1400 audit(1792226955.875:1013): avc:  denied  { name_bind } for  pid=14474 comm="syz.1.2136" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1142.395536][   T31] audit: type=1400 audit(1792226955.875:1014): avc:  denied  { node_bind } for  pid=14474 comm="syz.1.2136" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1143.839278][T14487] overlayfs: failed to resolve './bus': -2
[ 1143.863591][ T4931] usb 1-1: USB disconnect, device number 104
[ 1144.255184][ T5801] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1144.485138][ T5801] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1144.518529][ T5801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.518698][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1144.518725][ T5801] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1144.518755][ T5801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1144.518887][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.110643][ T5801] gud 4-1:1.0: probe with driver gud failed with error -71
[ 1145.134919][ T5801] usb 4-1: USB disconnect, device number 75
[ 1145.168779][T14490] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1145.203686][T14491] program syz.5.2143 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1145.403206][   T31] audit: type=1400 audit(1792226958.885:1015): avc:  denied  { read } for  pid=14494 comm="syz.0.2144" path="socket:[44451]" dev="sockfs" ino=44451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1145.772667][ T5801] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1145.923356][ T5801] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1145.924421][ T5801] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1145.924449][ T5801] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1145.924476][ T5801] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1145.926341][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.926364][ T5801] usb 6-1: Product: syz
[ 1145.926378][ T5801] usb 6-1: Manufacturer: syz
[ 1145.926394][ T5801] usb 6-1: SerialNumber: syz
[ 1145.929711][ T5801] usb 6-1: config 0 descriptor??
[ 1145.931884][T14500] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1145.932022][T14500] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1146.564850][ T5801] usb 6-1: ucan: probing device on interface #0
[ 1146.781609][ T5801] usb 6-1: ucan: device protocol version 0 is not supported
[ 1146.781635][ T5801] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1147.700692][T10433] usb 6-1: USB disconnect, device number 85
[ 1148.031290][   T31] audit: type=1400 audit(1792226961.505:1016): avc:  denied  { watch watch_reads } for  pid=14514 comm="syz.4.2149" path="/proc/1663/task" dev="proc" ino=44563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1148.922243][T14513] capability: warning: `syz.1.2150' uses 32-bit capabilities (legacy support in use)
[ 1149.188932][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2154'.
[ 1149.572688][T10433] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1149.740095][T10433] usb 5-1: Using ep0 maxpacket: 16
[ 1149.740632][T10433] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1149.741503][T10433] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1149.741522][T10433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1149.743605][T10433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.743626][T10433] usb 5-1: Product: syz
[ 1149.743639][T10433] usb 5-1: Manufacturer: syz
[ 1149.743653][T10433] usb 5-1: SerialNumber: syz
[ 1149.745764][T10433] usb 5-1: config 0 descriptor??
[ 1149.773553][T10433] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1149.773584][T10433] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1151.279678][T10433] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1151.280363][T10433] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1152.202396][T11572] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 255
[ 1153.500961][T10433] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[ 1153.752543][T10433] em28xx 5-1:0.0: couldn't setup AC97 register 2
[ 1153.756535][T14563] FAULT_INJECTION: forcing a failure.
[ 1153.756535][T14563] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1153.756571][T14563] CPU: 0 UID: 0 PID: 14563 Comm: syz.5.2166 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1153.756596][T14563] Tainted: [L]=SOFTLOCKUP
[ 1153.756603][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1153.756615][T14563] Call Trace:
[ 1153.756623][T14563]  <TASK>
[ 1153.756632][T14563]  dump_stack_lvl+0x100/0x190
[ 1153.756665][T14563]  should_fail_ex.cold+0x5/0xa
[ 1153.756692][T14563]  _copy_to_user+0x32/0xd0
[ 1153.756723][T14563]  bpf_prog_test_run_raw_tp+0x3f0/0x7d0
[ 1153.756755][T14563]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[ 1153.756786][T14563]  ? fput+0x7c/0x100
[ 1153.756813][T14563]  ? __bpf_prog_get+0x97/0x290
[ 1153.756843][T14563]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[ 1153.756871][T14563]  __sys_bpf+0x2265/0x4a30
[ 1153.756899][T14563]  ? __pfx___sys_bpf+0x10/0x10
[ 1153.756919][T14563]  ? find_held_lock+0x2b/0x80
[ 1153.756947][T14563]  ? get_pid_task+0xfc/0x250
[ 1153.756972][T14563]  ? get_pid_task+0xfc/0x250
[ 1153.757005][T14563]  ? find_held_lock+0x2b/0x80
[ 1153.757038][T14563]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1153.757055][T14563]  ? find_held_lock+0x2b/0x80
[ 1153.757082][T14563]  ? ksys_write+0x190/0x250
[ 1153.757104][T14563]  ? ksys_write+0x190/0x250
[ 1153.757126][T14563]  ? lock_acquire+0x1d1/0x380
[ 1153.757166][T14563]  ? fput+0x7c/0x100
[ 1153.757199][T14563]  ? ksys_write+0x1ac/0x250
[ 1153.757225][T14563]  ? __x64_sys_bpf+0xce/0x140
[ 1153.757246][T14563]  __x64_sys_bpf+0xce/0x140
[ 1153.757269][T14563]  ? do_syscall_64+0xae/0x790
[ 1153.757298][T14563]  do_syscall_64+0x123/0x790
[ 1153.757327][T14563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1153.757347][T14563] RIP: 0033:0x7faca2d9e559
[ 1153.757363][T14563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1153.757380][T14563] RSP: 002b:00007faca3ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1153.757399][T14563] RAX: ffffffffffffffda RBX: 00007faca3025fa0 RCX: 00007faca2d9e559
[ 1153.757412][T14563] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1153.757422][T14563] RBP: 00007faca3ba2090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.757432][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1153.757442][T14563] R13: 00007faca3026038 R14: 00007faca3025fa0 R15: 00007ffee0f12548
[ 1153.757468][T14563]  </TASK>
[ 1153.759102][T10433] em28xx 5-1:0.0: couldn't setup AC97 register 4
[ 1153.761939][T10433] em28xx 5-1:0.0: couldn't setup AC97 register 6
[ 1153.782929][T10433] em28xx 5-1:0.0: couldn't setup AC97 register 54
[ 1153.794179][T10433] em28xx 5-1:0.0: couldn't setup AC97 register 56
[ 1153.992690][T10433] usb 5-1: USB disconnect, device number 81
[ 1154.818635][T11572] Bluetooth: hci3: unexpected event for opcode 0x200f
[ 1156.762034][   T31] audit: type=1400 audit(1792226970.235:1017): avc:  denied  { name_bind } for  pid=14583 comm="syz.3.2171" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1156.802426][   T31] audit: type=1400 audit(1792226970.275:1018): avc:  denied  { map } for  pid=14583 comm="syz.3.2171" path="socket:[45183]" dev="sockfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1156.803158][   T31] audit: type=1400 audit(1792226970.275:1019): avc:  denied  { accept } for  pid=14583 comm="syz.3.2171" path="socket:[45183]" dev="sockfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1157.372830][T10433] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1157.535532][T10433] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1157.621111][T10433] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1157.621451][T10433] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1157.621503][T10433] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1157.621555][T10433] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1157.621804][T10433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.204409][T10433] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1160.362321][T10433] usb 1-1: USB disconnect, device number 105
[ 1160.962674][ T5710] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1161.114916][ T5710] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1161.118644][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1161.118948][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1161.118981][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1161.119009][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1161.119358][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.073594][   T50] rpcbind: server 127.0.0.1 not responding, timed out
[ 1163.204654][ T5710] gud 2-1:1.0: probe with driver gud failed with error -71
[ 1164.370039][ T5710] usb 2-1: USB disconnect, device number 92
[ 1166.649607][T14637] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1166.673004][ T5710] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1166.780541][T14640] tipc: New replicast peer: 172.20.20.187
[ 1166.782268][T14640] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1166.824424][ T5710] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1166.825580][ T5710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1166.825602][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1166.825619][ T5710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1166.827328][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.827348][ T5710] usb 1-1: Product: syz
[ 1166.827357][ T5710] usb 1-1: Manufacturer: syz
[ 1166.827366][ T5710] usb 1-1: SerialNumber: syz
[ 1166.828794][ T5710] usb 1-1: config 0 descriptor??
[ 1166.829205][T14635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1166.829261][T14635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1166.830345][ T5710] usb 1-1: ucan: probing device on interface #0
[ 1167.821168][ T5710] ucan 1-1:0.0 can0: registered device
[ 1167.922075][ T5710] ucan 1-1:0.0 can0: firmware string: unknown
[ 1168.273179][ T5710] usb 1-1: USB disconnect, device number 106
[ 1170.961297][T11572] Bluetooth: hci1: unexpected event for opcode 0x200f
[ 1171.027660][   T31] audit: type=1400 audit(1792226984.505:1020): avc:  denied  { prog_run } for  pid=14658 comm="syz.0.2192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1
[ 1171.028105][T14659] FAULT_INJECTION: forcing a failure.
[ 1171.028105][T14659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1171.028133][T14659] CPU: 0 UID: 0 PID: 14659 Comm: syz.0.2192 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1171.028158][T14659] Tainted: [L]=SOFTLOCKUP
[ 1171.028165][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1171.028176][T14659] Call Trace:
[ 1171.028184][T14659]  <TASK>
[ 1171.028192][T14659]  dump_stack_lvl+0x100/0x190
[ 1171.028224][T14659]  should_fail_ex.cold+0x5/0xa
[ 1171.028252][T14659]  _copy_to_user+0x32/0xd0
[ 1171.028281][T14659]  simple_read_from_buffer+0xcb/0x170
[ 1171.028311][T14659]  proc_fail_nth_read+0x1af/0x230
[ 1171.028340][T14659]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1171.028370][T14659]  ? rw_verify_area+0xce/0x6d0
[ 1171.028391][T14659]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1171.028418][T14659]  vfs_read+0x1e4/0xb40
[ 1171.028441][T14659]  ? lock_acquire+0x1d1/0x380
[ 1171.028463][T14659]  ? __fget_files+0x34/0x3d0
[ 1171.028495][T14659]  ? __pfx_vfs_read+0x10/0x10
[ 1171.028515][T14659]  ? find_held_lock+0x2b/0x80
[ 1171.028544][T14659]  ? __fget_files+0x215/0x3d0
[ 1171.028575][T14659]  ? __fget_files+0x21f/0x3d0
[ 1171.028608][T14659]  ksys_read+0x12a/0x250
[ 1171.028631][T14659]  ? __pfx_ksys_read+0x10/0x10
[ 1171.028664][T14659]  do_syscall_64+0x123/0x790
[ 1171.028695][T14659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1171.028715][T14659] RIP: 0033:0x7ff10595ed8e
[ 1171.028731][T14659] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1171.028749][T14659] RSP: 002b:00007ff106812fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1171.028768][T14659] RAX: ffffffffffffffda RBX: 00007ff1068136c0 RCX: 00007ff10595ed8e
[ 1171.028780][T14659] RDX: 000000000000000f RSI: 00007ff1068130a0 RDI: 0000000000000004
[ 1171.028792][T14659] RBP: 00007ff106813090 R08: 0000000000000000 R09: 0000000000000000
[ 1171.028804][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1171.028816][T14659] R13: 00007ff105c26038 R14: 00007ff105c25fa0 R15: 00007ffcd1f51808
[ 1171.028843][T14659]  </TASK>
[ 1171.056581][T14662] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[ 1171.359133][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2193'.
[ 1172.013344][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1172.013393][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1172.190874][T14671] overlayfs: failed to resolve './bus': -2
[ 1173.747836][ T5801] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1174.073217][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1174.073769][ T5801] usb 6-1: device descriptor read/all, error -71
[ 1174.425140][T14695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2199'.
[ 1174.740445][   T31] audit: type=1800 audit(1792226988.215:1021): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2200" name=08 dev="sda1" ino=2049 res=0 errno=0
[ 1175.423207][ T5710] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1175.573824][ T5710] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1175.577354][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1175.577586][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1175.577873][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1175.647778][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.648051][ T5710] usb 5-1: Product: syz
[ 1175.648363][ T5710] usb 5-1: Manufacturer: syz
[ 1175.648379][ T5710] usb 5-1: SerialNumber: syz
[ 1175.710799][ T5710] usb 5-1: config 0 descriptor??
[ 1175.728320][T14717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1175.729082][T14717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1175.764490][ T5710] usb 5-1: ucan: probing device on interface #0
[ 1175.874579][T14725] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1175.929037][   T31] audit: type=1400 audit(1792226989.405:1022): avc:  denied  { getopt } for  pid=14726 comm="syz.5.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1175.932222][T14727] overlayfs: failed to resolve './bus': -2
[ 1175.971320][ T5710] usb 5-1: ucan: device protocol version 0 is not supported
[ 1175.971343][ T5710] usb 5-1: ucan: probe failed; try to update the device firmware
[ 1176.656923][ T5710] usb 5-1: USB disconnect, device number 82
[ 1177.286115][T14738] program syz.3.2210 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1177.960237][T14750] overlayfs: failed to resolve './bus': -2
[ 1180.622304][T14767] batman_adv: batadv0: Adding interface: syzkaller0
[ 1180.622324][T14767] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1180.622353][T14767] batman_adv: batadv0: Interface activated: syzkaller0
[ 1181.872663][ T5801] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1182.023072][ T5801] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1182.023827][ T5801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1182.025423][ T5801] usb 6-1: config 0 descriptor??
[ 1182.320965][ T5801] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1182.476097][T14789] ip6t_rt: too many addresses specified
[ 1182.630430][T11572] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1182.940610][ T5612] Bluetooth: hci1: unexpected event for opcode 0x200f
[ 1184.356014][ T5801] [drm:udl_init] *ERROR* Selecting channel failed
[ 1184.381664][T14767] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1184.385264][ T5801] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[ 1184.385287][ T5801] [drm] Initialized udl on minor 1
[ 1184.387749][ T5801] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1184.388059][ T5801] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1184.389800][ T5703] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1184.390497][ T5703] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1184.390633][ T5703] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1184.396928][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2226'.
[ 1184.397549][ T5801] usb 6-1: USB disconnect, device number 88
[ 1184.545538][T14767] batman_adv: batadv0: Removing interface: syzkaller0
[ 1184.625534][   T31] audit: type=1400 audit(1792226998.075:1023): avc:  denied  { bind } for  pid=14803 comm="syz.0.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1184.753978][   T31] audit: type=1400 audit(1792226998.235:1024): avc:  denied  { write } for  pid=14803 comm="syz.0.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1184.971543][T14802] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[ 1184.971608][T14802] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[ 1185.086100][T14802] bond1: entered allmulticast mode
[ 1185.105003][T14802] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1186.154548][T14816] netlink: 'syz.5.2230': attribute type 1 has an invalid length.
[ 1186.279456][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2230'.
[ 1186.583202][   T31] audit: type=1400 audit(1792227000.065:1025): avc:  denied  { connect } for  pid=14814 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1187.140351][T14817] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1187.209590][T14837] FAULT_INJECTION: forcing a failure.
[ 1187.209590][T14837] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1187.209624][T14837] CPU: 0 UID: 0 PID: 14837 Comm: syz.4.2234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1187.209651][T14837] Tainted: [L]=SOFTLOCKUP
[ 1187.209659][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1187.209672][T14837] Call Trace:
[ 1187.209679][T14837]  <TASK>
[ 1187.209688][T14837]  dump_stack_lvl+0x100/0x190
[ 1187.209725][T14837]  should_fail_ex.cold+0x5/0xa
[ 1187.209754][T14837]  get_futex_key+0x1d0/0x14f0
[ 1187.209786][T14837]  ? __pfx_get_futex_key+0x10/0x10
[ 1187.209821][T14837]  ? __lock_acquire+0x5c0/0x1f40
[ 1187.209846][T14837]  ? look_up_lock_class+0x64/0x120
[ 1187.209882][T14837]  futex_wake+0xf4/0x5e0
[ 1187.209911][T14837]  ? __pfx_futex_wake+0x10/0x10
[ 1187.209936][T14837]  ? __pfx_perf_event_namespaces+0x10/0x10
[ 1187.209975][T14837]  do_futex+0x2b2/0x440
[ 1187.210005][T14837]  ? __pfx_do_futex+0x10/0x10
[ 1187.210036][T14837]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1187.210069][T14837]  __x64_sys_futex+0x34f/0x4d0
[ 1187.210104][T14837]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1187.210146][T14837]  do_syscall_64+0x123/0x790
[ 1187.210177][T14837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1187.210198][T14837] RIP: 0033:0x7f0b1e99e559
[ 1187.210215][T14837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1187.210234][T14837] RSP: 002b:00007f0b1f8dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1187.210255][T14837] RAX: ffffffffffffffda RBX: 00007f0b1ec25fa8 RCX: 00007f0b1e99e559
[ 1187.210268][T14837] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b1ec25fac
[ 1187.210281][T14837] RBP: 00007f0b1ec25fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1187.210293][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1187.210304][T14837] R13: 00007f0b1ec26038 R14: 00007ffeeb487610 R15: 00007ffeeb4876f8
[ 1187.210332][T14837]  </TASK>
[ 1187.584555][T14829] syzkaller0: entered promiscuous mode
[ 1187.584581][T14829] syzkaller0: entered allmulticast mode
[ 1187.972743][ T5728] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1188.124354][ T5728] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1188.127614][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.127964][ T5728] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1188.127994][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1188.128075][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1188.128219][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.208399][   T31] audit: type=1400 audit(1792227003.685:1026): avc:  denied  { ioctl } for  pid=14856 comm="syz.0.2238" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1190.566474][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0403
[ 1190.572092][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0c22
[ 1190.827365][ T5728] usb 2-1: USB disconnect, device number 93
[ 1191.130517][ T5612] Bluetooth: hci3: unexpected event for opcode 0x200f
[ 1191.382661][ T5728] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1191.732653][ T5728] usb 2-1: Using ep0 maxpacket: 16
[ 1191.733481][ T5728] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1191.737477][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.737504][ T5728] usb 2-1: Product: syz
[ 1191.737519][ T5728] usb 2-1: Manufacturer: syz
[ 1191.737534][ T5728] usb 2-1: SerialNumber: syz
[ 1191.984554][ T5728] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1192.017725][ T5728] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1192.018115][ T5728] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1192.018156][ T5728] usb 2-1: media controller created
[ 1192.113663][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1192.254134][   T31] audit: type=1400 audit(1792227005.675:1027): avc:  denied  { listen } for  pid=14880 comm="syz.3.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1192.345091][ T5728] zl10353_read_register: readreg error (reg=127, ret==-32)
[ 1193.492903][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[ 1193.754716][T14906] FAULT_INJECTION: forcing a failure.
[ 1193.754716][T14906] name failslab, interval 1, probability 0, space 0, times 0
[ 1193.754748][T14906] CPU: 1 UID: 0 PID: 14906 Comm: syz.3.2251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1193.754772][T14906] Tainted: [L]=SOFTLOCKUP
[ 1193.754780][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1193.754791][T14906] Call Trace:
[ 1193.754798][T14906]  <TASK>
[ 1193.754806][T14906]  dump_stack_lvl+0x100/0x190
[ 1193.754838][T14906]  should_fail_ex.cold+0x5/0xa
[ 1193.754866][T14906]  should_failslab+0xc2/0x120
[ 1193.754893][T14906]  __kmalloc_noprof+0xfc/0x840
[ 1193.754918][T14906]  ? tomoyo_encode2+0xfb/0x3c0
[ 1193.754952][T14906]  tomoyo_encode2+0xfb/0x3c0
[ 1193.754984][T14906]  tomoyo_encode+0x29/0x50
[ 1193.755011][T14906]  tomoyo_realpath_from_path+0x18c/0x690
[ 1193.755047][T14906]  tomoyo_path_number_perm+0x23c/0x580
[ 1193.755071][T14906]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1193.755098][T14906]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1193.755135][T14906]  ? __lock_acquire+0x5c0/0x1f40
[ 1193.755170][T14906]  ? __fget_files+0x34/0x3d0
[ 1193.755196][T14906]  ? find_held_lock+0x2b/0x80
[ 1193.755222][T14906]  ? hook_file_ioctl_common+0x140/0x440
[ 1193.755248][T14906]  ? __fget_files+0x21f/0x3d0
[ 1193.755278][T14906]  security_file_ioctl+0xd3/0x230
[ 1193.755306][T14906]  __x64_sys_ioctl+0xb7/0x210
[ 1193.755331][T14906]  do_syscall_64+0x123/0x790
[ 1193.755361][T14906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1193.755380][T14906] RIP: 0033:0x7f216499e559
[ 1193.755395][T14906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1193.755414][T14906] RSP: 002b:00007f216584d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1193.755432][T14906] RAX: ffffffffffffffda RBX: 00007f2164c25fa0 RCX: 00007f216499e559
[ 1193.755445][T14906] RDX: 00002000000002c0 RSI: 0000000000005412 RDI: 0000000000000003
[ 1193.755456][T14906] RBP: 00007f216584d090 R08: 0000000000000000 R09: 0000000000000000
[ 1193.755468][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1193.755479][T14906] R13: 00007f2164c26038 R14: 00007f2164c25fa0 R15: 00007ffc1d3ae398
[ 1193.755505][T14906]  </TASK>
[ 1193.755530][T14906] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1193.763204][T11572] Bluetooth: hci3: unexpected event for opcode 0x200f
[ 1194.254412][T14926] md: array md0 already has disks!
[ 1194.282947][ T5710] usb 6-1: new low-speed USB device number 89 using dummy_hcd
[ 1194.353562][T14926] md: could not open device unknown-block(1,1).
[ 1194.353748][T14926] md: error, md_import_device() returned -16
[ 1194.652661][ T5710] usb 6-1: device descriptor read/64, error -71
[ 1194.892673][ T5710] usb 6-1: new low-speed USB device number 90 using dummy_hcd
[ 1194.895347][T14926] md: could not open device unknown-block(0,0).
[ 1194.895532][T14926] md: error, md_import_device() returned -6
[ 1195.102623][ T5710] usb 6-1: device descriptor read/64, error -71
[ 1195.109625][T14934] md/raid:md0: not enough operational devices (3/3 failed)
[ 1195.213145][ T5710] usb usb6-port1: attempt power cycle
[ 1195.407877][T11572] Bluetooth: hci0: unexpected event for opcode 0x200f
[ 1195.445041][T14947] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1195.446592][T14934] md/raid:md0: failed to run raid set.
[ 1195.446605][T14934] md: pers->run() failed ...
[ 1195.652707][ T5710] usb 6-1: new low-speed USB device number 91 using dummy_hcd
[ 1196.120854][ T5710] usb 6-1: device descriptor read/8, error -71
[ 1196.197874][   T31] audit: type=1400 audit(1792227009.675:1028): avc:  denied  { append } for  pid=14960 comm="syz.0.2269" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1196.199454][   T31] audit: type=1400 audit(1792227009.675:1029): avc:  denied  { append } for  pid=14960 comm="syz.0.2269" path="/dev/random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1196.204758][T14962] 9pnet_fd: Insufficient options for proto=fd
[ 1197.175111][ T5710] usb 6-1: new low-speed USB device number 92 using dummy_hcd
[ 1197.382641][ T5710] usb 6-1: device not accepting address 92, error -71
[ 1197.382887][ T5710] usb usb6-port1: unable to enumerate USB device
[ 1197.439736][T14974] netlink: 'syz.3.2272': attribute type 10 has an invalid length.
[ 1198.196999][ T5801] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1199.218568][ T5801] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1199.219771][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.219865][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1199.219915][ T5801] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1199.219965][ T5801] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1199.220030][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1199.477631][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'.
[ 1200.002805][ T5703] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1200.172314][ T5703] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1200.202396][ T5703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1200.202764][T11572] Bluetooth: hci5: command 0x2016 tx timeout
[ 1200.230131][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1200.230255][ T5703] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1200.230410][ T5703] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1200.230964][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1201.441179][ T5801] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1201.484955][ T5801] usb 1-1: USB disconnect, device number 107
[ 1201.540310][T14997] FAULT_INJECTION: forcing a failure.
[ 1201.540310][T14997] name failslab, interval 1, probability 0, space 0, times 0
[ 1201.540343][T14997] CPU: 0 UID: 0 PID: 14997 Comm: syz.3.2280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1201.540369][T14997] Tainted: [L]=SOFTLOCKUP
[ 1201.540376][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1201.540387][T14997] Call Trace:
[ 1201.540393][T14997]  <TASK>
[ 1201.540398][T14997]  dump_stack_lvl+0x100/0x190
[ 1201.540420][T14997]  should_fail_ex.cold+0x5/0xa
[ 1201.540441][T14997]  should_failslab+0xc2/0x120
[ 1201.540469][T14997]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1201.540494][T14997]  ? do_getname+0x35/0x390
[ 1201.540518][T14997]  do_getname+0x35/0x390
[ 1201.540532][T14997]  do_sys_openat2+0xc7/0x1e0
[ 1201.540544][T14997]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1201.540555][T14997]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1201.540577][T14997]  __x64_sys_openat+0x12d/0x210
[ 1201.540594][T14997]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1201.540612][T14997]  ? ksys_write+0x1ac/0x250
[ 1201.540644][T14997]  do_syscall_64+0x123/0x790
[ 1201.540670][T14997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.540683][T14997] RIP: 0033:0x7f216499e559
[ 1201.540694][T14997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.540706][T14997] RSP: 002b:00007f216584d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1201.540719][T14997] RAX: ffffffffffffffda RBX: 00007f2164c25fa0 RCX: 00007f216499e559
[ 1201.540727][T14997] RDX: 0000000000000080 RSI: 0000200000000880 RDI: ffffffffffffff9c
[ 1201.540739][T14997] RBP: 00007f2164a35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1201.540751][T14997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1201.540762][T14997] R13: 00007f2164c26038 R14: 00007f2164c25fa0 R15: 00007ffc1d3ae398
[ 1201.540788][T14997]  </TASK>
[ 1201.794244][T14999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1201.882822][ T5710] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1201.926798][T14852] Bluetooth: hci3: unexpected event for opcode 0x200f
[ 1202.045299][ T5710] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[ 1202.047602][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1202.047935][ T5710] usb 4-1: config 1 interface 2 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA
[ 1202.047965][ T5710] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0xA has invalid maxpacket 21149, setting to 1024
[ 1202.047994][ T5710] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 1202.048053][ T5710] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1202.048121][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.330878][T14852] Bluetooth: hci5: command 0x2016 tx timeout
[ 1202.354018][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1202.360615][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1202.477182][ T5710] usb 4-1: invalid MIDI in EP 0
[ 1202.492075][   T31] audit: type=1400 audit(1792227015.965:1030): avc:  denied  { setopt } for  pid=14996 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1202.624956][ T5710] snd-ua101 4-1:1.0: probe with driver snd-ua101 failed with error -22
[ 1202.904891][ T5703] gud 6-1:1.0: probe with driver gud failed with error -71
[ 1202.953882][T14997] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1203.735680][ T5710] usb 4-1: USB disconnect, device number 76
[ 1204.852517][ T3496] rpcbind: server 127.0.0.1 not responding, timed out
[ 1205.009687][ T5703] usb 6-1: USB disconnect, device number 93
[ 1206.408969][T15039] overlayfs: failed to resolve './bus': -2
[ 1207.766194][   T31] audit: type=1800 audit(1792227021.245:1031): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2294" name=08 dev="sda1" ino=2049 res=0 errno=0
[ 1207.812925][T11572] Bluetooth: hci2: command 0x0406 tx timeout
[ 1207.875697][T15042] md: array md0 already has disks!
[ 1207.920691][T15047] md: could not open device unknown-block(1,1).
[ 1207.921210][T15047] md: error, md_import_device() returned -16
[ 1208.102656][T10433] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1208.849762][T10433] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1209.055125][T10433] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.055399][T10433] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1209.055422][T10433] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1209.055444][T10433] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1209.055482][T10433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.649457][T15042] md/raid:md0: couldn't allocate thread.
[ 1209.711234][T10433] usb 5-1: can't set config #1, error -71
[ 1209.717748][T10433] usb 5-1: USB disconnect, device number 83
[ 1211.040550][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[ 1211.282930][T15042] md: pers->run() failed ...
[ 1211.642889][T11572] Bluetooth: hci1: command 0x0406 tx timeout
[ 1212.745360][   T30] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1212.959997][T10433] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1213.231391][   T30] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1213.381469][   T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1213.381582][   T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1213.381611][   T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1213.381655][   T30] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1213.381725][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.731041][T11572] Bluetooth: hci1: command 0x0406 tx timeout
[ 1214.700129][T14852] Bluetooth: hci5: unexpected event for opcode 0x200f
[ 1214.941238][T10433] usb 4-1: device descriptor read/all, error -71
[ 1215.942461][   T30] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1216.068438][   T30] usb 1-1: USB disconnect, device number 108
[ 1216.609481][T15096] mmap: syz.0.2304 (15096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1218.239078][T11572] Bluetooth: hci3: unexpected event for opcode 0x200f
[ 1218.290203][T11572] Bluetooth: hci0: command 0x0406 tx timeout
[ 1219.633252][T15121] program syz.3.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1221.060794][T11572] Bluetooth: hci0: command 0x0406 tx timeout
[ 1221.675977][T15139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.678155][T15139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1225.679229][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1225.679436][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1226.042887][T11572] Bluetooth: hci5: command 0x2016 tx timeout
[ 1228.123055][T14852] Bluetooth: hci5: command 0x2016 tx timeout
[ 1228.965707][T15170] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1229.201553][T15178] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1233.163828][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1233.163904][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1233.480754][T15198] netlink: 'syz.3.2331': attribute type 2 has an invalid length.
[ 1233.499292][T15198] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2331'.
[ 1233.551799][T15198] netlink: 'syz.3.2331': attribute type 10 has an invalid length.
[ 1233.597504][   T31] audit: type=1400 audit(1792227047.075:1032): avc:  denied  { unmount } for  pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1233.624717][T13251] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1233.774390][T15204] batman_adv: batadv0: Adding interface: syzkaller0
[ 1233.774403][T15204] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1233.774422][T15204] batman_adv: batadv0: Interface activated: syzkaller0
[ 1233.825888][T13251] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1234.495611][T15205] netlink: 'syz.0.2333': attribute type 2 has an invalid length.
[ 1234.495635][T15205] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2333'.
[ 1235.120598][    T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1235.253583][T15217] netlink: 'syz.1.2329': attribute type 2 has an invalid length.
[ 1235.253597][T15217] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2329'.
[ 1235.280129][    T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1235.281094][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1235.282877][    T9] usb 6-1: config 0 descriptor??
[ 1235.314897][T13251] usb 5-1: unable to read config index 0 descriptor/all
[ 1235.314937][T13251] usb 5-1: can't read configurations, error -71
[ 1235.383062][T15222] netlink: 'syz.1.2329': attribute type 10 has an invalid length.
[ 1235.490507][T15225] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1235.521533][    T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1235.662663][T13251] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1236.742615][T13251] usb 5-1: Using ep0 maxpacket: 16
[ 1236.744607][T13251] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1236.759553][T13251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.759579][T13251] usb 5-1: Product: syz
[ 1236.759592][T13251] usb 5-1: Manufacturer: syz
[ 1236.759606][T13251] usb 5-1: SerialNumber: syz
[ 1236.814716][T14852] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1236.967842][T13251] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1236.983472][T13251] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1236.983668][T13251] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1236.983690][T13251] usb 5-1: media controller created
[ 1237.035666][T13251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1237.171636][T13251] zl10353_read_register: readreg error (reg=127, ret==-32)
[ 1237.316660][T13251] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1237.322241][T13251] usb 5-1: USB disconnect, device number 85
[ 1238.264579][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[ 1238.282770][T15201] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1238.313892][T15201] batman_adv: batadv0: Removing interface: syzkaller0
[ 1238.319830][    T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[ 1238.322568][    T9] [drm] Initialized udl on minor 1
[ 1238.342408][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1238.351381][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1238.361865][    T9] usb 6-1: USB disconnect, device number 94
[ 1238.362427][T10433] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1238.362798][T10433] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1238.362949][T10433] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1238.725757][T15258] FAULT_INJECTION: forcing a failure.
[ 1238.725757][T15258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1238.725790][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.1.2343 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1238.725817][T15258] Tainted: [L]=SOFTLOCKUP
[ 1238.725825][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1238.725836][T15258] Call Trace:
[ 1238.725842][T15258]  <TASK>
[ 1238.725851][T15258]  dump_stack_lvl+0x100/0x190
[ 1238.725888][T15258]  should_fail_ex.cold+0x5/0xa
[ 1238.725915][T15258]  _copy_to_user+0x32/0xd0
[ 1238.725945][T15258]  simple_read_from_buffer+0xcb/0x170
[ 1238.725976][T15258]  proc_fail_nth_read+0x1af/0x230
[ 1238.726005][T15258]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1238.726035][T15258]  ? rw_verify_area+0xce/0x6d0
[ 1238.726058][T15258]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1238.726085][T15258]  vfs_read+0x1e4/0xb40
[ 1238.726107][T15258]  ? lock_acquire+0x1d1/0x380
[ 1238.726128][T15258]  ? __fget_files+0x34/0x3d0
[ 1238.726154][T15258]  ? __pfx_vfs_read+0x10/0x10
[ 1238.726174][T15258]  ? find_held_lock+0x2b/0x80
[ 1238.726202][T15258]  ? __fget_files+0x215/0x3d0
[ 1238.726233][T15258]  ? __fget_files+0x21f/0x3d0
[ 1238.726266][T15258]  ksys_read+0x12a/0x250
[ 1238.726289][T15258]  ? __pfx_ksys_read+0x10/0x10
[ 1238.726319][T15258]  do_syscall_64+0x123/0x790
[ 1238.726350][T15258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.726369][T15258] RIP: 0033:0x7f4d2515ed8e
[ 1238.726384][T15258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1238.726401][T15258] RSP: 002b:00007f4d26053fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1238.726420][T15258] RAX: ffffffffffffffda RBX: 00007f4d260546c0 RCX: 00007f4d2515ed8e
[ 1238.726433][T15258] RDX: 000000000000000f RSI: 00007f4d260540a0 RDI: 0000000000000006
[ 1238.726444][T15258] RBP: 00007f4d26054090 R08: 0000000000000000 R09: 0000000000000000
[ 1238.726456][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1238.726467][T15258] R13: 00007f4d25426308 R14: 00007f4d25426270 R15: 00007ffe024d6c08
[ 1238.726493][T15258]  </TASK>
[ 1239.552722][T13251] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1239.821169][T13251] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1240.000384][T13251] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.000493][T13251] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1240.000515][T13251] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1240.000543][T13251] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1240.000616][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1243.104999][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.105539][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.750714][T15288] program syz.3.2350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1244.341274][T13251] gud 6-1:1.0: probe with driver gud failed with error -71
[ 1244.374055][T13251] usb 6-1: USB disconnect, device number 95
[ 1245.056884][T15295] program syz.5.2353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1247.112672][   T30] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1247.263169][   T30] usb 4-1: Using ep0 maxpacket: 16
[ 1247.277951][   T30] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1247.324971][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.325181][   T30] usb 4-1: Product: syz
[ 1247.325626][   T30] usb 4-1: Manufacturer: syz
[ 1247.325816][   T30] usb 4-1: SerialNumber: syz
[ 1247.572653][T14852] Bluetooth: hci2: command 0x0406 tx timeout
[ 1247.850822][   T31] audit: type=1400 audit(1792227061.325:1033): avc:  denied  { setopt } for  pid=15313 comm="syz.0.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1247.901057][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'.
[ 1247.931069][   T30] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1248.337435][   T30] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1248.342113][   T30] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1248.363813][   T30] usb 4-1: media controller created
[ 1248.760399][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1248.870995][   T30] zl10353_read_register: readreg error (reg=127, ret==-32)
[ 1249.873344][T14852] Bluetooth: hci2: command 0x0406 tx timeout
[ 1250.976055][   T30] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1250.998995][   T30] usb 4-1: USB disconnect, device number 79
[ 1251.079386][T15333] netlink: 'syz.3.2362': attribute type 1 has an invalid length.
[ 1251.341123][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'.
[ 1251.359904][T15333] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1251.397904][T15337] veth0_virt_wifi: entered promiscuous mode
[ 1251.412636][   T30] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 1251.512699][ T5801] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1251.564262][   T30] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1251.564363][   T30] usb 5-1: too many configurations: 248, using maximum allowed: 8
[ 1251.570585][   T30] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1251.570615][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.570678][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.640225][   T30] usb 5-1: config index 1 descriptor too short (expected 28277, got 36)
[ 1251.640286][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.640352][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.675299][T15337] bond0: (slave veth0_virt_wifi): making interface the new active one
[ 1251.708127][ T5801] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1251.709588][   T30] usb 5-1: config index 2 descriptor too short (expected 28277, got 36)
[ 1251.709617][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.709808][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.760527][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.760654][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1251.760850][ T5801] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1251.760880][ T5801] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1251.761007][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.788962][   T30] usb 5-1: config index 3 descriptor too short (expected 28277, got 36)
[ 1251.788996][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.789028][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.877069][   T30] usb 5-1: config index 4 descriptor too short (expected 28277, got 36)
[ 1251.877103][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.877130][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.933588][   T30] usb 5-1: config index 5 descriptor too short (expected 28277, got 36)
[ 1251.933624][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.933652][   T30] usb 5-1: config 0 has no interfaces?
[ 1251.998408][   T30] usb 5-1: config index 6 descriptor too short (expected 28277, got 36)
[ 1251.998467][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.998493][   T30] usb 5-1: config 0 has no interfaces?
[ 1252.000343][T15337] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[ 1252.071242][   T30] usb 5-1: config index 7 descriptor too short (expected 28277, got 36)
[ 1252.071343][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1252.071374][   T30] usb 5-1: config 0 has no interfaces?
[ 1252.071431][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.135953][T15339] bond0: entered promiscuous mode
[ 1252.136594][T15339] bond0: entered allmulticast mode
[ 1252.136634][T15339] veth0_virt_wifi: entered allmulticast mode
[ 1252.197649][T15340] bond0: (slave veth0_virt_wifi): Releasing active interface
[ 1252.220814][T15340] veth0_virt_wifi: left allmulticast mode
[ 1252.313300][   T30] usb 5-1: config 0 descriptor??
[ 1252.550770][   T30] usb 5-1: string descriptor 0 read error: -71
[ 1252.675851][   T30] usb 5-1: USB disconnect, device number 86
[ 1253.481063][T15347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1253.481339][T15347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1253.638061][ T5801] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1255.323624][ T5801] usb 1-1: USB disconnect, device number 109
[ 1256.422853][ T5703] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1256.587733][ T5703] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1256.603845][ T5703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.603981][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1256.604092][ T5703] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1256.604121][ T5703] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1256.604224][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.045580][ T5703] gud 6-1:1.0: probe with driver gud failed with error -71
[ 1260.040609][ T5703] usb 6-1: USB disconnect, device number 96
[ 1260.736352][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.745658][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.574856][   T31] audit: type=1400 audit(1792227075.055:1034): avc:  denied  { mounton } for  pid=15384 comm="syz.3.2374" path="/proc/1715/task" dev="proc" ino=48136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1261.780404][   T31] audit: type=1400 audit(1792227075.235:1035): avc:  denied  { associate } for  pid=15387 comm="syz.3.2374" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1262.002693][ T5710] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1262.163554][ T5710] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1262.166108][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.166279][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1262.166307][ T5710] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1262.166353][ T5710] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1262.166478][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.746595][T15392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1262.749352][T15392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1265.252435][ T5710] usb 6-1: USB disconnect, device number 97
[ 1265.522663][    T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1265.673505][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1265.676740][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.676778][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1265.676797][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1265.676817][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1265.676889][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.317379][ T4931] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1268.464560][ T4931] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1268.471045][ T4931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1268.471177][ T4931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1268.471204][ T4931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1268.471240][ T4931] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1268.471694][ T4931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1269.235703][T15410] netlink: 'syz.4.2382': attribute type 2 has an invalid length.
[ 1269.238517][T15410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2382'.
[ 1269.241108][    T9] gud 1-1:1.0: probe with driver gud failed with error -71
[ 1269.438841][    T9] usb 1-1: USB disconnect, device number 110
[ 1269.526704][T15412] netlink: 'syz.4.2382': attribute type 10 has an invalid length.
[ 1269.687722][ T4931] gud 6-1:1.0: probe with driver gud failed with error -71
[ 1270.051042][ T4931] usb 6-1: USB disconnect, device number 98
[ 1270.095323][   T31] audit: type=1400 audit(1792227083.575:1036): avc:  denied  { audit_write } for  pid=15414 comm="syz.3.2384" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1271.135452][T15430] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1273.742685][   T30] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1273.893277][T11572] Bluetooth: hci0: command 0x0406 tx timeout
[ 1274.192559][   T30] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1274.374547][   T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1274.374687][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1274.374720][   T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1274.374748][   T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1274.374864][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.837608][T15452] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1275.792390][T15460] fuse: Bad value for 'fd'
[ 1275.962794][T14852] Bluetooth: hci0: command 0x0406 tx timeout
[ 1275.988726][T15462] netlink: 'syz.0.2394': attribute type 2 has an invalid length.
[ 1275.988748][T15462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2394'.
[ 1276.055774][T15462] netlink: 'syz.0.2394': attribute type 10 has an invalid length.
[ 1276.080135][   T30] gud 5-1:1.0: probe with driver gud failed with error -71
[ 1276.108439][   T30] usb 5-1: USB disconnect, device number 87
[ 1278.054835][T14852] Bluetooth: hci0: command 0x0406 tx timeout
[ 1278.572933][    T9] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1279.131140][   T30] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1279.938866][   T30] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1279.940733][   T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.940838][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1279.940866][   T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1279.940910][   T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1279.940979][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1280.148690][T14852] Bluetooth: hci0: command 0x0406 tx timeout
[ 1281.291328][   T30] usb 5-1: USB disconnect, device number 88
[ 1281.332799][    T9] usb 6-1: device descriptor read/all, error -71
[ 1281.420262][T15476] FAULT_INJECTION: forcing a failure.
[ 1281.420262][T15476] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1281.420292][T15476] CPU: 0 UID: 0 PID: 15476 Comm: syz.4.2398 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1281.420318][T15476] Tainted: [L]=SOFTLOCKUP
[ 1281.420325][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1281.420336][T15476] Call Trace:
[ 1281.420343][T15476]  <TASK>
[ 1281.420352][T15476]  dump_stack_lvl+0x100/0x190
[ 1281.420383][T15476]  should_fail_ex.cold+0x5/0xa
[ 1281.420410][T15476]  _copy_to_user+0x32/0xd0
[ 1281.420440][T15476]  simple_read_from_buffer+0xcb/0x170
[ 1281.420470][T15476]  proc_fail_nth_read+0x1af/0x230
[ 1281.420500][T15476]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1281.420529][T15476]  ? rw_verify_area+0xce/0x6d0
[ 1281.420549][T15476]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1281.420578][T15476]  vfs_read+0x1e4/0xb40
[ 1281.420601][T15476]  ? lock_acquire+0x1d1/0x380
[ 1281.420622][T15476]  ? __fget_files+0x34/0x3d0
[ 1281.420648][T15476]  ? __pfx_vfs_read+0x10/0x10
[ 1281.420668][T15476]  ? find_held_lock+0x2b/0x80
[ 1281.420696][T15476]  ? __fget_files+0x215/0x3d0
[ 1281.420733][T15476]  ? __fget_files+0x21f/0x3d0
[ 1281.420767][T15476]  ksys_read+0x12a/0x250
[ 1281.420789][T15476]  ? __pfx_ksys_read+0x10/0x10
[ 1281.420820][T15476]  do_syscall_64+0x123/0x790
[ 1281.420850][T15476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.420870][T15476] RIP: 0033:0x7f0b1e95ed8e
[ 1281.420886][T15476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1281.420904][T15476] RSP: 002b:00007f0b1f8dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1281.420922][T15476] RAX: ffffffffffffffda RBX: 00007f0b1f8dd6c0 RCX: 00007f0b1e95ed8e
[ 1281.420934][T15476] RDX: 000000000000000f RSI: 00007f0b1f8dd0a0 RDI: 0000000000000005
[ 1281.420945][T15476] RBP: 00007f0b1f8dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1281.420957][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1281.420968][T15476] R13: 00007f0b1ec26038 R14: 00007f0b1ec25fa0 R15: 00007ffeeb4876f8
[ 1281.420995][T15476]  </TASK>
[ 1281.721887][T15488] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1281.960343][   T31] audit: type=1326 audit(1792227095.435:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.4.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b1e99e559 code=0x0
[ 1281.963957][    T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1282.142803][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1282.288842][    T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00
[ 1282.407585][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1282.915906][    T9] usb 6-1: config 0 descriptor??
[ 1283.312352][    T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1283.313407][    T9] usb 6-1: Detected FT2232HP
[ 1284.552306][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -121
[ 1284.657849][    T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1284.702682][T15506] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1284.861106][    T9] usb 6-1: USB disconnect, device number 100
[ 1284.862904][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1284.863255][    T9] ftdi_sio 6-1:0.0: device disconnected
[ 1288.464922][ T4968] udevd[4968]: worker [14776] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time
[ 1288.482773][T11572] Bluetooth: hci0: unexpected event for opcode 0x200f
[ 1289.311860][   T31] audit: type=1400 audit(1792227102.785:1038): avc:  denied  { mounton } for  pid=15523 comm="syz.4.2413" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1289.312643][T15524] binder: Bad value for 'max'
[ 1289.337876][T15524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2413'.
[ 1289.347762][   T31] audit: type=1400 audit(1792227102.825:1039): avc:  denied  { create } for  pid=15523 comm="syz.4.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1289.444750][   T31] audit: type=1400 audit(1792227102.925:1040): avc:  denied  { setopt } for  pid=15523 comm="syz.4.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1289.731116][T15529] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1289.802352][T15531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=15531 comm=syz.1.2415
[ 1289.820615][T15531] trusted_key: encrypted_key: insufficient parameters specified
[ 1292.795552][T15554] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1293.213655][ T5692] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1293.363765][ T5692] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1293.366421][ T5692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1293.366501][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1293.366530][ T5692] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1293.366574][ T5692] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1293.366645][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.006148][T15566] overlayfs: failed to resolve './bus': -2
[ 1294.604132][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1294.604220][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1295.670062][    T9] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1296.268509][T11572] Bluetooth: hci5: unexpected event for opcode 0x200f
[ 1296.391222][ T4931] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1296.517266][ T5692] gud 4-1:1.0: probe with driver gud failed with error -71
[ 1296.544012][ T4931] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1296.545665][ T4931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.581746][ T4931] usb 5-1: config 0 descriptor??
[ 1296.834057][ T5692] usb 4-1: USB disconnect, device number 80
[ 1296.852964][    T9] usb 1-1: device descriptor read/all, error -71
[ 1296.887717][ T4931] usb 5-1: can't set config #0, error -71
[ 1296.888808][ T4931] usb 5-1: USB disconnect, device number 89
[ 1297.090236][T15581] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1297.561864][T15597] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1297.582642][   T31] audit: type=1800 audit(1792227110.995:1041): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2432" name=08 dev="sda1" ino=2049 res=0 errno=0
[ 1298.038684][T15604] netlink: 'syz.5.2436': attribute type 2 has an invalid length.
[ 1298.038733][T15604] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2436'.
[ 1298.125338][T15605] netlink: 'syz.5.2436': attribute type 10 has an invalid length.
[ 1298.353006][T13251] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1298.860375][T13251] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1299.091090][T13251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.091315][T13251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1299.091348][T13251] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1299.091381][T13251] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1299.091557][T13251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.529399][T13251] usb 5-1: USB disconnect, device number 90
[ 1301.532297][T15627] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1303.238396][T15632] program syz.1.2445 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1303.830132][T11572] Bluetooth: hci5: unexpected event for opcode 0x200f
[ 1305.232998][T15651] FAULT_INJECTION: forcing a failure.
[ 1305.232998][T15651] name failslab, interval 1, probability 0, space 0, times 0
[ 1305.233177][T15651] CPU: 1 UID: 0 PID: 15651 Comm: syz.4.2451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1305.233205][T15651] Tainted: [L]=SOFTLOCKUP
[ 1305.233212][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1305.233224][T15651] Call Trace:
[ 1305.233230][T15651]  <TASK>
[ 1305.233239][T15651]  dump_stack_lvl+0x100/0x190
[ 1305.233271][T15651]  should_fail_ex.cold+0x5/0xa
[ 1305.233297][T15651]  should_failslab+0xc2/0x120
[ 1305.233326][T15651]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1305.233351][T15651]  ? io_submit_one+0x124/0x1fb0
[ 1305.233376][T15651]  io_submit_one+0x124/0x1fb0
[ 1305.233396][T15651]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[ 1305.233419][T15651]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1305.233450][T15651]  ? __pfx_io_submit_one+0x10/0x10
[ 1305.233470][T15651]  ? irqentry_exit+0x24d/0xa10
[ 1305.233513][T15651]  ? __x64_sys_io_submit+0x1b1/0x3a0
[ 1305.233535][T15651]  __x64_sys_io_submit+0x1b1/0x3a0
[ 1305.233560][T15651]  ? __pfx___x64_sys_io_submit+0x10/0x10
[ 1305.233588][T15651]  ? trace_irq_enable.constprop.0+0x2f/0x160
[ 1305.233624][T15651]  do_syscall_64+0x123/0x790
[ 1305.233655][T15651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.233675][T15651] RIP: 0033:0x7f0b1e99e559
[ 1305.233692][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1305.233711][T15651] RSP: 002b:00007f0b1f8dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1305.233731][T15651] RAX: ffffffffffffffda RBX: 00007f0b1ec25fa0 RCX: 00007f0b1e99e559
[ 1305.233744][T15651] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007f0b1f8bc000
[ 1305.233756][T15651] RBP: 00007f0b1f8dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1305.233768][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1305.233780][T15651] R13: 00007f0b1ec26038 R14: 00007f0b1ec25fa0 R15: 00007ffeeb4876f8
[ 1305.233808][T15651]  </TASK>
[ 1305.772723][ T5692] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1305.945569][ T5692] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1305.990924][ T5692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1305.990970][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1305.990991][ T5692] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1305.991014][ T5692] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1305.991073][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.522916][ T9227] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1306.926962][ T9227] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1306.931648][ T9227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1306.931779][ T9227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1306.931809][ T9227] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1306.931884][ T9227] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1306.931988][ T9227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.635161][ T5692] usb 4-1: USB disconnect, device number 81
[ 1307.707660][T15661] batman_adv: batadv0: Adding interface: syzkaller0
[ 1307.707680][T15661] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1307.707709][T15661] batman_adv: batadv0: Interface activated: syzkaller0
[ 1308.323613][T15673] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1310.028880][T15679] program syz.5.2457 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1310.534965][ T5692] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1310.660472][T15684] program syz.3.2458 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1310.735748][ T5692] usb 1-1: device descriptor read/all, error -71
[ 1310.754667][T15661] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1310.845182][T15661] batman_adv: batadv0: Removing interface: syzkaller0
[ 1311.182346][ T9227] gud 5-1:1.0: probe with driver gud failed with error -71
[ 1311.325508][ T9227] usb 5-1: USB disconnect, device number 91
[ 1312.235913][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'.
[ 1312.775916][T15714] netlink: 'syz.0.2466': attribute type 2 has an invalid length.
[ 1312.775938][T15714] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2466'.
[ 1312.891182][T15714] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[ 1313.474811][ T9227] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1314.173844][ T9227] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1314.175566][ T9227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.175591][ T9227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1314.175604][ T9227] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1314.175617][ T9227] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1314.175639][ T9227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1315.855906][T13251] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1316.505060][T13251] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1316.515858][T13251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1316.515983][T13251] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1316.516013][T13251] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1316.516040][T13251] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1316.516135][T13251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.145885][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'.
[ 1317.509493][ T9227] usb 5-1: USB disconnect, device number 92
[ 1317.901532][T15738] hsr_slave_1 (unregistering): left promiscuous mode
[ 1318.020536][T13251] usb 4-1: USB disconnect, device number 82
[ 1318.821687][T15755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1318.833337][T15758] md: array md0 already has disks!
[ 1318.885286][T15760] batman_adv: batadv0: Adding interface: syzkaller0
[ 1318.885304][T15760] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.885332][T15760] batman_adv: batadv0: Interface activated: syzkaller0
[ 1318.962680][T15762] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1319.075441][T15768] md/raid:md0: not enough operational devices (3/3 failed)
[ 1319.242609][ T4931] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1319.397360][ T4931] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1319.401151][ T4931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.459956][ T4931] usb 4-1: config 0 descriptor??
[ 1319.554065][T15768] md/raid:md0: failed to run raid set.
[ 1319.554080][T15768] md: pers->run() failed ...
[ 1319.747846][T15777] netlink: 'syz.4.2481': attribute type 2 has an invalid length.
[ 1319.747884][T15777] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2481'.
[ 1319.808660][T15777] netlink: 'syz.4.2481': attribute type 10 has an invalid length.
[ 1319.925282][T15782] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1320.005912][T15782] md: array md0 already has disks!
[ 1320.068598][T11572] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1320.105909][T15782] md: could not open device unknown-block(1,1).
[ 1320.106096][T15782] md: error, md_import_device() returned -16
[ 1320.176439][T15788] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1321.205501][T15782] md: could not open device unknown-block(0,0).
[ 1321.205951][T15782] md: error, md_import_device() returned -6
[ 1321.866903][T15795] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[ 1321.866935][T15795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1321.868674][T15795] vhci_hcd vhci_hcd.0: Device attached
[ 1321.903338][T15799] vhci_hcd: connection closed
[ 1322.159128][ T5829] vhci_hcd vhci_hcd.1: stop threads
[ 1322.160735][ T5829] vhci_hcd vhci_hcd.1: release socket
[ 1322.212218][   T31] audit: type=1400 audit(1792227135.685:1042): avc:  denied  { read } for  pid=15797 comm="syz.4.2486" lport=13297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1322.212396][   T31] audit: type=1400 audit(1792227135.685:1043): avc:  denied  { ioctl } for  pid=15797 comm="syz.4.2486" path="socket:[49479]" dev="sockfs" ino=49479 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1322.596352][ T5829] vhci_hcd vhci_hcd.1: disconnect device
[ 1322.944750][ T4931] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1322.949342][ T4931] [drm:udl_init] *ERROR* Selecting channel failed
[ 1323.025523][T15760] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1323.099531][ T4931] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[ 1323.099561][ T4931] [drm] Initialized udl on minor 1
[ 1323.188989][T15760] batman_adv: batadv0: Removing interface: syzkaller0
[ 1323.248888][ T4931] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1323.301470][ T4931] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1323.321580][ T4931] usb 4-1: USB disconnect, device number 83
[ 1323.322025][T15820] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1323.345923][ T5801] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1324.576022][T15833] FAULT_INJECTION: forcing a failure.
[ 1324.576022][T15833] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1324.576071][T15833] CPU: 0 UID: 0 PID: 15833 Comm: syz.1.2494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1324.576097][T15833] Tainted: [L]=SOFTLOCKUP
[ 1324.576104][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1324.576115][T15833] Call Trace:
[ 1324.576122][T15833]  <TASK>
[ 1324.576129][T15833]  dump_stack_lvl+0x100/0x190
[ 1324.576153][T15833]  should_fail_ex.cold+0x5/0xa
[ 1324.576168][T15833]  ? prepare_alloc_pages+0x16d/0x5b0
[ 1324.576187][T15833]  should_fail_alloc_page+0xeb/0x140
[ 1324.576206][T15833]  prepare_alloc_pages+0x1f0/0x5b0
[ 1324.576223][T15833]  ? kvm_sched_clock_read+0x11/0x20
[ 1324.576239][T15833]  ? sched_clock+0x3a/0x60
[ 1324.576251][T15833]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[ 1324.576268][T15833]  ? __lock_acquire+0x5c0/0x1f40
[ 1324.576283][T15833]  ? find_held_lock+0x2b/0x80
[ 1324.576300][T15833]  ? __schedule+0x315b/0x6920
[ 1324.576316][T15833]  ? kvm_sched_clock_read+0x11/0x20
[ 1324.576331][T15833]  ? sched_clock+0x3a/0x60
[ 1324.576344][T15833]  ? sched_clock_cpu+0x6c/0x570
[ 1324.576357][T15833]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1324.576375][T15833]  ? find_held_lock+0x2b/0x80
[ 1324.576394][T15833]  ? rcu_is_watching+0x13/0xc0
[ 1324.576410][T15833]  ? trace_sched_exit_tp+0x120/0x160
[ 1324.576433][T15833]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1324.576449][T15833]  ? policy_nodemask+0xed/0x4f0
[ 1324.576467][T15833]  alloc_pages_mpol+0x201/0x550
[ 1324.576488][T15833]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1324.576511][T15833]  ? irqentry_exit+0x24d/0xa10
[ 1324.576536][T15833]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1324.576565][T15833]  folio_alloc_mpol_noprof+0x36/0x260
[ 1324.576586][T15833]  vma_alloc_folio_noprof+0xed/0x1d0
[ 1324.576607][T15833]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1324.576631][T15833]  ? do_anonymous_page+0x475/0x2050
[ 1324.576654][T15833]  do_anonymous_page+0xac9/0x2050
[ 1324.576682][T15833]  ? __pfx_do_anonymous_page+0x10/0x10
[ 1324.576701][T15833]  ? rcu_read_unlock+0x2d/0xb0
[ 1324.576720][T15833]  ? rcu_read_unlock+0x2d/0xb0
[ 1324.576740][T15833]  ? __pte_offset_map+0x179/0x310
[ 1324.576768][T15833]  __handle_mm_fault+0x1ff3/0x2f60
[ 1324.576792][T15833]  ? lock_vma_under_rcu+0x11d/0x590
[ 1324.576823][T15833]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1324.576854][T15833]  ? lock_vma_under_rcu+0x17c/0x590
[ 1324.576902][T15833]  handle_mm_fault+0x363/0xa20
[ 1324.576926][T15833]  do_user_addr_fault+0x59c/0x12f0
[ 1324.576959][T15833]  exc_page_fault+0x6f/0xd0
[ 1324.576986][T15833]  asm_exc_page_fault+0x26/0x30
[ 1324.577004][T15833] RIP: 0033:0x7f4d2505f82b
[ 1324.577022][T15833] Code: 00 00 00 48 8d 3d 3d b0 1a 00 48 89 c1 31 c0 e8 8b 2d ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 b0 1a 00 48 89 34 24 48 8b 14 24 48 8b
[ 1324.577041][T15833] RSP: 002b:00007f4d26094fa0 EFLAGS: 00010206
[ 1324.577060][T15833] RAX: 0000000000000000 RBX: 00007f4d25426090 RCX: 0000000000000000
[ 1324.577074][T15833] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000001c0
[ 1324.577086][T15833] RBP: 00007f4d25235ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1324.577098][T15833] R10: 00002000000001c0 R11: 0000000000000000 R12: 0000000000000000
[ 1324.577111][T15833] R13: 00007f4d25426128 R14: 00007f4d25426090 R15: 00007ffe024d6c08
[ 1324.577137][T15833]  </TASK>
[ 1324.578230][T15833] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1325.714058][T15839] netlink: 'syz.3.2496': attribute type 2 has an invalid length.
[ 1325.714102][T15839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2496'.
[ 1325.762149][T15839] netlink: 'syz.3.2496': attribute type 10 has an invalid length.
[ 1326.261540][T15844] program syz.5.2498 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1326.613509][T14852] Bluetooth: hci5: command 0x2016 tx timeout
[ 1327.182707][ T9227] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1327.333428][ T9227] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1327.336449][ T9227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1327.336718][ T9227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1327.336807][ T9227] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1327.336881][ T9227] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1327.337020][ T9227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.682592][T14852] Bluetooth: hci5: command 0x2016 tx timeout
[ 1328.732826][ T5692] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1328.811530][ T9227] usb 5-1: USB disconnect, device number 93
[ 1328.897543][ T5692] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1328.898855][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.901383][ T5692] usb 1-1: config 0 descriptor??
[ 1328.929204][ T5692] cp210x 1-1:0.0: cp210x converter detected
[ 1328.965474][T15856] loop7: detected capacity change from 0 to 255852544
[ 1329.858156][T15864] program syz.5.2500 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1330.326451][ T5692] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1330.973708][T15852] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1331.473525][ T5692] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1331.508630][ T4931] usb 1-1: USB disconnect, device number 115
[ 1331.541365][ T4931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1331.541803][ T4931] cp210x 1-1:0.0: device disconnected
[ 1333.207121][T15887] program syz.3.2511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1334.322824][T15891] netlink: NAT attribute has 8 unknown bytes
[ 1334.322859][T15891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1334.478261][T15897] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1334.555282][T15899] netlink: 'syz.4.2514': attribute type 2 has an invalid length.
[ 1334.555655][T15899] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2514'.
[ 1334.713156][T15899] netlink: 'syz.4.2514': attribute type 10 has an invalid length.
[ 1335.034461][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1335.039546][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.061478][T15693] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1335.215268][T15693] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1335.217382][T15693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.217481][T15693] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1335.217532][T15693] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1335.217555][T15693] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1335.217621][T15693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.982877][T15914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2518'.
[ 1336.607573][T15693] gud 6-1:1.0: probe with driver gud failed with error -71
[ 1336.637660][T15922] FAULT_INJECTION: forcing a failure.
[ 1336.637660][T15922] name failslab, interval 1, probability 0, space 0, times 0
[ 1336.637696][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.1.2520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1336.637723][T15922] Tainted: [L]=SOFTLOCKUP
[ 1336.637731][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1336.637742][T15922] Call Trace:
[ 1336.637749][T15922]  <TASK>
[ 1336.637758][T15922]  dump_stack_lvl+0x100/0x190
[ 1336.637791][T15922]  should_fail_ex.cold+0x5/0xa
[ 1336.637818][T15922]  should_failslab+0xc2/0x120
[ 1336.637847][T15922]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[ 1336.637872][T15922]  ? __alloc_skb+0x5b7/0x710
[ 1336.637891][T15922]  ? __alloc_skb+0x140/0x710
[ 1336.637913][T15922]  __alloc_skb+0x140/0x710
[ 1336.637930][T15922]  ? __alloc_skb+0x5b7/0x710
[ 1336.637948][T15922]  ? __pfx___alloc_skb+0x10/0x10
[ 1336.637974][T15922]  netlink_alloc_large_skb+0x69/0x150
[ 1336.638007][T15922]  netlink_sendmsg+0x680/0xda0
[ 1336.638030][T15922]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1336.638058][T15922]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1336.638091][T15922]  ____sys_sendmsg+0xa4d/0xbe0
[ 1336.638114][T15922]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1336.638135][T15922]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1336.638166][T15922]  ? lock_acquire+0x1d1/0x380
[ 1336.638188][T15922]  ? get_pid_task+0x2a/0x250
[ 1336.638217][T15922]  ___sys_sendmsg+0x190/0x1e0
[ 1336.638245][T15922]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1336.638271][T15922]  ? get_pid_task+0x106/0x250
[ 1336.638307][T15922]  ? find_held_lock+0x2b/0x80
[ 1336.638352][T15922]  __sys_sendmsg+0x160/0x210
[ 1336.638374][T15922]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1336.638409][T15922]  do_syscall_64+0x123/0x790
[ 1336.638441][T15922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1336.638463][T15922] RIP: 0033:0x7f4d2519e559
[ 1336.638480][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1336.638498][T15922] RSP: 002b:00007f4d260b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1336.638517][T15922] RAX: ffffffffffffffda RBX: 00007f4d25425fa0 RCX: 00007f4d2519e559
[ 1336.638530][T15922] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1336.638542][T15922] RBP: 00007f4d260b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1336.638553][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1336.638564][T15922] R13: 00007f4d25426038 R14: 00007f4d25425fa0 R15: 00007ffe024d6c08
[ 1336.638591][T15922]  </TASK>
[ 1336.822805][T15693] usb 6-1: USB disconnect, device number 101
[ 1341.902650][ T5801] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1342.053772][ T5801] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1342.060623][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1342.060725][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1342.060753][ T5801] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1342.060798][ T5801] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1342.060866][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.172812][T13251] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1343.262434][T15957] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1343.334232][T13251] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1343.335492][T13251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1343.335614][T13251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1343.335646][T13251] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1343.335716][T13251] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1343.335790][T13251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.460385][T15958] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1343.551854][ T5801] usb 1-1: USB disconnect, device number 117
[ 1343.896805][T15967] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2530'.
[ 1344.672093][T15972] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2532'.
[ 1345.819682][T13251] gud 5-1:1.0: probe with driver gud failed with error -71
[ 1345.984850][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'.
[ 1346.065042][T15982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1346.573086][T13251] usb 5-1: USB disconnect, device number 94
[ 1346.654818][T16001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1346.662220][T15996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1346.691546][T16000] FAULT_INJECTION: forcing a failure.
[ 1346.691546][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1346.691582][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.3.2537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1346.691606][T16000] Tainted: [L]=SOFTLOCKUP
[ 1346.691614][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1346.691625][T16000] Call Trace:
[ 1346.691632][T16000]  <TASK>
[ 1346.691639][T16000]  dump_stack_lvl+0x100/0x190
[ 1346.691672][T16000]  should_fail_ex.cold+0x5/0xa
[ 1346.691697][T16000]  _copy_to_user+0x32/0xd0
[ 1346.691727][T16000]  copy_siginfo_to_user+0x27/0xc0
[ 1346.691753][T16000]  x64_setup_rt_frame+0xa03/0xce0
[ 1346.691788][T16000]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 1346.691824][T16000]  arch_do_signal_or_restart+0x5ee/0x7e0
[ 1346.691853][T16000]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1346.691889][T16000]  ? do_readv+0x234/0x340
[ 1346.691916][T16000]  exit_to_user_mode_loop+0x139/0x700
[ 1346.691942][T16000]  ? rcu_is_watching+0x13/0xc0
[ 1346.691971][T16000]  do_syscall_64+0x661/0x790
[ 1346.692001][T16000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1346.692021][T16000] RIP: 0033:0x7f216499e557
[ 1346.692036][T16000] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[ 1346.692054][T16000] RSP: 002b:00007f216584d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 1346.692072][T16000] RAX: 0000000000000013 RBX: 00007f2164c25fa0 RCX: 00007f216499e559
[ 1346.692085][T16000] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1346.692096][T16000] RBP: 00007f216584d090 R08: 0000000000000000 R09: 0000000000000000
[ 1346.692108][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1346.692120][T16000] R13: 00007f2164c26038 R14: 00007f2164c25fa0 R15: 00007ffc1d3ae398
[ 1346.692146][T16000]  </TASK>
[ 1346.773687][T15996] md: array md0 already has disks!
[ 1346.790240][T16001] md: array md0 already has disks!
[ 1346.792374][T15989] CIFS: Attempting to mount //127.0.0.1/share
[ 1346.810963][   T13] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[ 1346.810984][   T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[ 1346.818859][T15989] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV
[ 1346.980182][   T13] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[ 1346.980210][   T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[ 1347.013093][T15989] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV
[ 1347.013283][T15989] CIFS: VFS: cifs_mount failed w/return code = -2
[ 1347.976817][T15997] md/raid:md0: not enough operational devices (3/3 failed)
[ 1348.396794][T16022] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 1348.581839][T15997] md/raid:md0: failed to run raid set.
[ 1348.581856][T15997] md: pers->run() failed ...
[ 1348.693686][T16027] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2544'.
[ 1351.582775][   T32] INFO: task kworker/0:6:5728 blocked for more than 144 seconds.
[ 1351.582800][   T32]       Tainted: G             L      syzkaller #0
[ 1351.582812][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1351.582819][   T32] task:kworker/0:6     state:D stack:21464 pid:5728  tgid:5728  ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1351.582868][   T32] Workqueue: usb_hub_wq hub_event
[ 1351.583174][   T32] Call Trace:
[ 1351.583209][   T32]  <TASK>
[ 1351.583275][   T32]  __schedule+0x1259/0x6920
[ 1351.583307][   T32]  ? __lock_acquire+0x5c0/0x1f40
[ 1351.583378][   T32]  ? __pfx___schedule+0x10/0x10
[ 1351.583409][   T32]  ? find_held_lock+0x2b/0x80
[ 1351.583442][   T32]  ? schedule+0x225/0x2c0
[ 1351.583501][   T32]  schedule+0xdd/0x2c0
[ 1351.583532][   T32]  schedule_timeout+0x1b2/0x280
[ 1351.583560][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1351.583656][   T32]  __wait_for_common+0x2e7/0x4c0
[ 1351.583689][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1351.583745][   T32]  ? __pfx___wait_for_common+0x10/0x10
[ 1351.583774][   T32]  ? __pfx_device_del+0x10/0x10
[ 1351.583843][   T32]  ? kobject_put+0xb9/0x640
[ 1351.583876][   T32]  i2c_del_adapter+0x1e3/0x2e0
[ 1351.583934][   T32]  dvb_usbv2_exit.isra.0+0x4aa/0xb70
[ 1351.583997][   T32]  dvb_usbv2_probe+0x669/0x970
[ 1351.584089][   T32]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 1351.584117][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1351.584147][   T32]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1351.584178][   T32]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1351.584208][   T32]  ? __pm_runtime_set_status+0x13c/0x970
[ 1351.584240][   T32]  usb_probe_interface+0x386/0x9b0
[ 1351.584301][   T32]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1351.584384][   T32]  ? kernfs_put+0x3f/0x60
[ 1351.584416][   T32]  ? sysfs_create_link+0x68/0xc0
[ 1351.584444][   T32]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1351.584475][   T32]  really_probe+0x241/0xa60
[ 1351.584561][   T32]  __driver_probe_device+0x210/0x460
[ 1351.584602][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1351.584634][   T32]  driver_probe_device+0x4a/0x140
[ 1351.837626][   T32]  __device_attach_driver+0x1df/0x320
[ 1351.837683][   T32]  ? __pfx___device_attach_driver+0x10/0x10
[ 1351.837708][   T32]  bus_for_each_drv+0x159/0x1e0
[ 1351.837899][   T32]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1351.837933][   T32]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1351.837966][   T32]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1351.838122][   T32]  __device_attach+0x1e4/0x4d0
[ 1351.838150][   T32]  ? __pfx___device_attach+0x10/0x10
[ 1351.838218][   T32]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1351.838283][   T32]  device_initial_probe+0xaf/0xd0
[ 1351.838310][   T32]  bus_probe_device+0x64/0x160
[ 1351.838343][   T32]  device_add+0x121d/0x1970
[ 1351.838376][   T32]  ? __pfx_device_add+0x10/0x10
[ 1351.838437][   T32]  usb_set_configuration+0xd97/0x1dc0
[ 1351.838643][   T32]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 1351.838677][   T32]  usb_generic_driver_probe+0xa1/0xe0
[ 1351.838734][   T32]  usb_probe_device+0xef/0x400
[ 1351.838761][   T32]  ? __pfx_usb_probe_device+0x10/0x10
[ 1351.838790][   T32]  really_probe+0x241/0xa60
[ 1351.838883][   T32]  __driver_probe_device+0x210/0x460
[ 1351.838991][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1351.839050][   T32]  driver_probe_device+0x4a/0x140
[ 1351.839079][   T32]  __device_attach_driver+0x1df/0x320
[ 1351.839134][   T32]  ? __pfx___device_attach_driver+0x10/0x10
[ 1351.839161][   T32]  bus_for_each_drv+0x159/0x1e0
[ 1351.839194][   T32]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1351.839306][   T32]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1351.848075][   T32]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1351.857490][   T32]  __device_attach+0x1e4/0x4d0
[ 1352.397564][   T32]  ? __pfx___device_attach+0x10/0x10
[ 1352.397585][   T32]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1352.397604][   T32]  device_initial_probe+0xaf/0xd0
[ 1352.397617][   T32]  bus_probe_device+0x64/0x160
[ 1352.397635][   T32]  device_add+0x121d/0x1970
[ 1352.397649][   T32]  ? __pfx_device_add+0x10/0x10
[ 1352.397662][   T32]  ? add_device_randomness+0xc9/0x110
[ 1352.397681][   T32]  usb_new_device.part.0+0xcc2/0x1686
[ 1352.397702][   T32]  ? do_raw_spin_lock+0x128/0x260
[ 1352.397717][   T32]  ? __pfx_usb_new_device.part.0+0x10/0x10
[ 1352.397735][   T32]  ? mark_held_locks+0x40/0x70
[ 1352.397751][   T32]  hub_event.cold+0x1e3/0xe90
[ 1352.397781][   T32]  ? __pfx_hub_event+0x10/0x10
[ 1352.435142][   T32]  ? hlock_class+0x70/0x70
[ 1352.435178][   T32]  ? lock_acquire+0x1d1/0x380
[ 1352.435213][   T32]  ? process_one_work+0xa2c/0x1b10
[ 1352.435241][   T32]  ? process_one_work+0x906/0x1b10
[ 1352.435265][   T32]  ? process_one_work+0x906/0x1b10
[ 1352.435294][   T32]  process_one_work+0xac7/0x1b10
[ 1352.435330][   T32]  ? __pfx_process_one_work+0x10/0x10
[ 1352.435361][   T32]  ? lock_acquire+0x1d1/0x380
[ 1352.435386][   T32]  ? __pfx_hub_event+0x10/0x10
[ 1352.435409][   T32]  worker_thread+0x5ef/0xe50
[ 1352.435432][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1352.435449][   T32]  ? kthread+0x13a/0x450
[ 1352.435470][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1352.435485][   T32]  kthread+0x373/0x450
[ 1352.435507][   T32]  ? __pfx_kthread+0x10/0x10
[ 1352.435531][   T32]  ret_from_fork+0x730/0xd60
[ 1352.435552][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1352.435572][   T32]  ? __switch_to+0x800/0x10f0
[ 1352.435595][   T32]  ? __pfx_kthread+0x10/0x10
[ 1352.435620][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1352.435651][   T32]  </TASK>
[ 1352.436007][   T32] 
[ 1352.436007][   T32] Showing all locks held in the system:
[ 1352.436017][   T32] locks held by kworker/u8:1/13: 4, last CPU#1:
[ 1352.436030][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.436079][   T32]  #1: ffffc90000127d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.436124][   T32]  #2: ffff888045f80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[ 1352.436161][   T32]  #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[ 1352.440083][   T32] locks held by pr/ttyS0/16: 2, last CPU#1:
[ 1352.440096][   T32]  #0: ffffffff8fdd88f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[ 1352.440138][   T32]  #1: ffffffff9cc7e638 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[ 1352.440183][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[ 1352.440195][   T32]  #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1352.440242][   T32] locks held by kworker/u8:3/50: 2, last CPU#1:
[ 1352.440253][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.440298][   T32]  #1: ffffc90000ba7d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.440350][   T32] locks held by kworker/u8:4/59: 4, last CPU#0:
[ 1352.440361][   T32]  #0: ffff888035dbb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.440406][   T32]  #1: ffffc9000202fd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.440452][   T32]  #2: ffff88803a36f1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0
[ 1352.440498][   T32]  #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0
[ 1352.440545][   T32] locks held by kworker/u8:8/183: 3, last CPU#1:
[ 1352.440556][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.440601][   T32]  #1: ffffc9000203fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.440646][   T32]  #2: ffff888056800800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[ 1352.444467][   T32] locks held by kworker/1:3/4931: 2, last CPU#1:
[ 1352.444483][   T32]  #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.444532][   T32]  #1: ffffc90006d97d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.444601][   T32] locks held by kworker/0:3/5692: 3, on CPU#0:
[ 1352.444613][   T32]  #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.444658][   T32]  #1: ffffc900041a7d08 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.444703][   T32]  #2: ffffffff921abfe0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40
[ 1352.444747][   T32] locks held by kworker/0:6/5728: 5, on CPU#0:
[ 1352.444758][   T32]  #0: ffff8880242a4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.444803][   T32]  #1: ffffc900047d7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.444848][   T32]  #2: ffff88802c2c11d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[ 1352.444887][   T32]  #3: ffff88807a81b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1352.444923][   T32]  #4: ffff88807a81d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1352.444963][   T32] locks held by getty/8818: 2, on CPU#1:
[ 1352.444974][   T32]  #0: ffff888039da00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1352.445188][   T32]  #1: ffffc9000ef332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1352.445237][   T32] locks held by kworker/u8:7/10434: 5, last CPU#1:
[ 1352.445250][   T32]  #0: ffff888022a96140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1352.445300][   T32]  #1: ffffc90006e2fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1352.445356][   T32]  #2: ffff8880380540e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0
[ 1352.445408][   T32]  #3: ffff888038064cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600
[ 1352.445451][   T32]  #4: ffff8880782e69d8 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: __rmap_walk_file+0x4a9/0x6c0
[ 1352.445502][   T32] locks held by udevd/14776: 4, on CPU#1:
[ 1352.445514][   T32]  #0: ffff888058ef9e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[ 1352.445559][   T32]  #1: ffff888035f7a480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[ 1352.445610][   T32]  #2: ffff888045a040f8 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[ 1352.445662][   T32]  #3: ffff88807a81b1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1352.445713][   T32] locks held by syz.3.2542/16035: 2, last CPU#1:
[ 1352.445725][   T32]  #0: ffff88801d085900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[ 1352.914891][   T32]  #1: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1352.915046][   T32] locks held by syz.5.2547/16045: 1, on CPU#0:
[ 1352.915075][   T32]  #0: ffffffff90bf1b60 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1353.077473][   T32] locks held by syz.1.2548/16042: 3, last CPU#0:
[ 1353.077526][   T32]  #0: ffffffff90bf1b60 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1353.077608][   T32]  #1: ffff88807db9c140 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3e0
[ 1353.077718][   T32]  #2: ffffffff921abfe0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb30
[ 1353.077832][   T32] locks held by syz.0.2549/16052: 4, last CPU#1:
[ 1353.077873][   T32]  #0: ffff88802e45e0e8 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f70
[ 1353.078042][   T32]  #1: ffff88802c614460 (sb_writers#6){.+.+}-{0:0}, at: ovl_fill_super+0xefb/0x5e90
[ 1353.078182][   T32]  #2: ffff88807d2dc4e0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1353.078355][   T32]  #3: ffff8880b8324568 (psi_seq){-.-.}-{0:0}, at: finish_task_switch.isra.0+0x948/0x10d0
[ 1353.236373][   T32] 
[ 1353.236380][   T32] =============================================
[ 1353.236380][   T32] 
[ 1353.236389][   T32] NMI backtrace for cpu 1
[ 1353.236403][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.236429][   T32] Tainted: [L]=SOFTLOCKUP
[ 1353.236436][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1353.236448][   T32] Call Trace:
[ 1353.236454][   T32]  <TASK>
[ 1353.236462][   T32]  dump_stack_lvl+0x100/0x190
[ 1353.236493][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1353.236524][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1353.236548][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 1353.236575][   T32]  sys_info+0x141/0x190
[ 1353.236595][   T32]  watchdog+0xcb1/0x1030
[ 1353.236625][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1353.236651][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1353.236675][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1353.236702][   T32]  ? kthread+0x13a/0x450
[ 1353.236726][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1353.236748][   T32]  kthread+0x373/0x450
[ 1353.236774][   T32]  ? __pfx_kthread+0x10/0x10
[ 1353.236802][   T32]  ret_from_fork+0x730/0xd60
[ 1353.236825][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.236849][   T32]  ? __switch_to+0x800/0x10f0
[ 1353.236876][   T32]  ? __pfx_kthread+0x10/0x10
[ 1353.236904][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1353.236937][   T32]  </TASK>
[ 1353.236946][   T32] Sending NMI from CPU 1 to CPUs 0:
[ 1353.236967][    C0] NMI backtrace for cpu 0
[ 1353.236979][    C0] CPU: 0 UID: 0 PID: 16049 Comm: syz.0.2549 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.236999][    C0] Tainted: [L]=SOFTLOCKUP
[ 1353.237005][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1353.237013][    C0] RIP: 0010:__lock_acquire+0x93b/0x1f40
[ 1353.237031][    C0] Code: b5 80 46 86 c8 61 4d 0f af c7 49 c1 e8 2d 4a 8b 04 c5 60 ee cf 98 4d 89 c6 4e 8d 2c c5 60 ee cf 98 48 85 c0 74 1f 48 83 e8 08 <48> 85 c0 74 16 48 8b 50 18 49 39 d7 0f 84 07 fe ff ff 48 8b 40 08
[ 1353.237044][    C0] RSP: 0000:ffffc90000007c98 EFLAGS: 00000086
[ 1353.237056][    C0] RAX: ffffffff95a615a0 RBX: ffff888029d98bb0 RCX: 0000000000000000
[ 1353.237066][    C0] RDX: eec8547de7b388fe RSI: 00000000904afb75 RDI: 0000000098408ce8
[ 1353.237076][    C0] RBP: 0000000000000058 R08: 000000000007f9e7 R09: 0000000000000058
[ 1353.237085][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888029d98000
[ 1353.237094][    C0] R13: ffffffff990fbd98 R14: 000000000007f9e7 R15: eec8547de7b388fe
[ 1353.237105][    C0] FS:  00007ff1068136c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000
[ 1353.237120][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1353.237130][    C0] CR2: 0000200000006000 CR3: 0000000059240000 CR4: 00000000003526f0
[ 1353.237139][    C0] Call Trace:
[ 1353.237144][    C0]  <IRQ>
[ 1353.237151][    C0]  ? __lock_acquire+0x5c0/0x1f40
[ 1353.237170][    C0]  lock_acquire+0x1d1/0x380
[ 1353.237186][    C0]  ? hrtimer_cb_get_time+0x8f/0x140
[ 1353.237201][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1353.237220][    C0]  ktime_get+0x7c/0x320
[ 1353.237236][    C0]  ? hrtimer_cb_get_time+0x8f/0x140
[ 1353.237250][    C0]  hrtimer_cb_get_time+0x8f/0x140
[ 1353.237263][    C0]  snd_hrtimer_callback+0x131/0x380
[ 1353.237283][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1353.237301][    C0]  ? __pfx_snd_hrtimer_callback+0x10/0x10
[ 1353.237320][    C0]  __hrtimer_run_queues+0x462/0x9c0
[ 1353.237344][    C0]  hrtimer_interrupt+0x441/0xaa0
[ 1353.237363][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[ 1353.237382][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1353.237402][    C0]  </IRQ>
[ 1353.237407][    C0]  <TASK>
[ 1353.237412][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1353.237427][    C0] RIP: 0010:timer_init_key_on_stack+0xc0/0x120
[ 1353.237445][    C0] Code: 65 8b 05 4b 58 96 13 48 8d 7b 20 48 89 fa 09 c5 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 04 3c 03 7e 3b <89> 6b 20 48 8d 7b 28 4c 89 ea 4c 89 e6 6a 00 45 31 c9 45 31 c0 31
[ 1353.237457][    C0] RSP: 0000:ffffc90010357a00 EFLAGS: 00000246
[ 1353.237468][    C0] RAX: 0000000000000000 RBX: ffffc90010357a50 RCX: ffffc90005801000
[ 1353.237477][    C0] RDX: 1ffff9200206af4e RSI: ffffffff81f747e6 RDI: ffffc90010357a70
[ 1353.237487][    C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1353.237495][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bf32be0
[ 1353.237504][    C0] R13: ffffffff9c9b4e40 R14: 0000000000000000 R15: dffffc0000000000
[ 1353.237517][    C0]  ? timer_init_key_on_stack+0x96/0x120
[ 1353.237537][    C0]  schedule_timeout+0x115/0x280
[ 1353.237552][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1353.237568][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1353.237583][    C0]  ? snd_rawmidi_write+0x488/0xc60
[ 1353.237601][    C0]  ? rcu_is_watching+0x13/0xc0
[ 1353.237622][    C0]  ? snd_rawmidi_write+0x44d/0xc60
[ 1353.237639][    C0]  snd_rawmidi_write+0x492/0xc60
[ 1353.237660][    C0]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1353.237676][    C0]  ? avc_policy_seqno+0x9/0x20
[ 1353.237691][    C0]  ? selinux_file_permission+0x8f/0x6d0
[ 1353.237711][    C0]  ? __pfx_default_wake_function+0x10/0x10
[ 1353.237729][    C0]  ? bpf_lsm_file_permission+0x9/0x10
[ 1353.237750][    C0]  ? security_file_permission+0x76/0x210
[ 1353.237771][    C0]  ? rw_verify_area+0xce/0x6d0
[ 1353.237788][    C0]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1353.237810][    C0]  vfs_writev+0x5ed/0xdd0
[ 1353.237828][    C0]  ? __pfx_vfs_writev+0x10/0x10
[ 1353.237846][    C0]  ? lock_acquire+0x1d1/0x380
[ 1353.237861][    C0]  ? __fget_files+0x34/0x3d0
[ 1353.237884][    C0]  ? __fget_files+0x21f/0x3d0
[ 1353.237906][    C0]  ? do_writev+0x28a/0x340
[ 1353.237919][    C0]  do_writev+0x28a/0x340
[ 1353.237935][    C0]  ? __pfx_do_writev+0x10/0x10
[ 1353.237953][    C0]  do_syscall_64+0x123/0x790
[ 1353.237973][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.237988][    C0] RIP: 0033:0x7ff10599e559
[ 1353.237999][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1353.238013][    C0] RSP: 002b:00007ff106813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1353.238026][    C0] RAX: ffffffffffffffda RBX: 00007ff105c25fa0 RCX: 00007ff10599e559
[ 1353.238035][    C0] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000006
[ 1353.238044][    C0] RBP: 00007ff105a35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1353.238053][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1353.238062][    C0] R13: 00007ff105c26038 R14: 00007ff105c25fa0 R15: 00007ffcd1f51808
[ 1353.238077][    C0]  </TASK>
[ 1353.582597][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1354.249444][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1354.260104][   T32] Tainted: [L]=SOFTLOCKUP
[ 1354.264405][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1354.274439][   T32] Call Trace:
[ 1354.277711][   T32]  <TASK>
[ 1354.280623][   T32]  dump_stack_lvl+0x100/0x190
[ 1354.285295][   T32]  vpanic+0x553/0x970
[ 1354.289259][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1354.293751][   T32]  panic+0xd1/0xe0
[ 1354.297454][   T32]  ? __pfx_panic+0x10/0x10
[ 1354.301851][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 1354.307986][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 1354.314120][   T32]  ? watchdog.cold+0x1ec/0x234
[ 1354.318868][   T32]  watchdog.cold+0x1fd/0x234
[ 1354.323442][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1354.329231][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1354.333893][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1354.338914][   T32]  ? kthread+0x13a/0x450
[ 1354.343140][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1354.347801][   T32]  kthread+0x373/0x450
[ 1354.351854][   T32]  ? __pfx_kthread+0x10/0x10
[ 1354.356429][   T32]  ret_from_fork+0x730/0xd60
[ 1354.361007][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1354.366101][   T32]  ? __switch_to+0x800/0x10f0
[ 1354.370763][   T32]  ? __pfx_kthread+0x10/0x10
[ 1354.375346][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1354.380101][   T32]  </TASK>
[ 1354.383289][   T32] Kernel Offset: disabled
[ 1354.387586][   T32] Rebooting in 86400 seconds..