last executing test programs:

12.76611415s ago: executing program 0 (id=406):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="116346", 0x3}], 0x1)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000480))
semget$private(0x0, 0x4000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
prctl$PR_GET_KEEPCAPS(0x7)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900})
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9})
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a12010325bd7000fcffffff06000004"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
r8 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b44030", 0x7a, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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")
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_generic(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)={0x2210, 0x1e, 0x400, 0x70bd28, 0x25dfdbfb, {0xf}, [@nested={0x4, 0x12e}, @generic="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", @nested={0x10bc, 0xff, 0x0, 0x1, [@nested={0x10b6, 0x7c, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="7ea3d1176e69255c850e90cc4dd097d5106bf2111c8f8b2c9334f6fb2b2503f9f4cf9281823fcc9621b3f6c67e3a7a1682295979720904ae03d9ed6c0fbe77f2f1c970720402468a62bb88949556149f711532e3379ac435b21056e83c7535938aea8d35a8b8c1478acefad2f0f3b0655e1eae361652814ee74747cd2308c08dff537b2e9e0e5f7edc3d7238b8e533fc9d546f5be5ee316089a61af44f713dc2a065689a5653e54c2194", @nested={0x4, 0xb3}, @generic="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"]}]}, @nested={0xbf, 0x3b, 0x0, 0x1, [@typed={0x6, 0x9a, 0x0, 0x0, @str=')\x00'}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r8}, @generic="f40b72021ed77df534e8dff6feac10c4957969f86be3a92cafdfa6250f100e94888aa9651d46ec604b426be3fd9fb64253280b63d35f97769355debd718bf5d2a9757c997459baa7b53a209b7358dd140715f5a3c4f977383eb33c6c66b1d6f36217978c5a1fe4aa3efde30f06034aeed1f2781c442f57c7bceae30a164813a627f7ea2443234e75e326b264aa763fe0b85c578d6b1243268b9334ff41fc14eeed61d621ffc5f002e5e132"]}, @nested={0x81, 0x6e, 0x0, 0x1, [@generic="d07dd1d7c6c789ab39d31da1dd0586b2c3fc7617425394fc658a3b91d0fcbe262adb3a8cee6ac47c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfb63a7a050f9935e5563285451eacec7ed39a84a5298e70f37285255ebdba3b140b589bec086db6e691e4", @nested={0x4, 0xc4}, @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x2}, @generic, @typed={0x8, 0x10e, 0x0, 0x0, @uid=r9}]}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x32}]}, @generic="d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf30", @generic="ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff"]}, 0x2210}, 0x1, 0x0, 0x0, 0x4810}, 0x4)

11.200760354s ago: executing program 0 (id=413):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)={0x7bb, 0x4a, 0x0, 0x2, 0xc892, 0xfffffffd})
mq_notify(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4001b, 0x0, @thr={0x0, 0x0}})
syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e040128000000000001090224000100000000090401000103000000092100000001220700090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0)
unshare(0x6020480)
mq_notify(r1, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022170000003bf500000a0000000000"], 0x0}, 0x0)

10.192748972s ago: executing program 2 (id=416):
socket$l2tp6(0xa, 0x2, 0x73)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r4, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x8d4, 0x0, 0xbf7d}, {0x923, 0x0, 0x17b}, {0xa1c, 0x0, 0x101}]})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="0b65df84f884", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

7.283007608s ago: executing program 1 (id=422):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

7.258461472s ago: executing program 0 (id=423):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000080)=':])#%\x00')
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x301100, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x30c, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2c00}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @loopback, 0x1200}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @remote, 0x49}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf34c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x11}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x525}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0xfffffff8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfb40}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x800}, 0x66559b8360ec1c7f)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r2, 0x54a6)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000580)={&(0x7f0000000540)})
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0xa0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = semget(0x1, 0x1, 0x289)
clock_gettime(0x0, &(0x7f0000000640)={<r6=>0x0, <r7=>0x0})
semtimedop(r5, &(0x7f0000000600)=[{0x3, 0x2, 0x1400}, {0x3, 0x3, 0x800}, {0x2, 0x4, 0x1800}], 0x3, &(0x7f0000000680)={r6, r7+10000000})
close_range(r1, r0, 0x0)
syz_io_uring_setup(0x7d58, &(0x7f00000006c0)={0x0, 0xa0eb, 0x4000, 0x2, 0x199, 0x0, r2}, &(0x7f0000000740)=<r8=>0x0, &(0x7f0000000780))
syz_io_uring_setup(0xce9, &(0x7f00000007c0)={0x0, 0xd164, 0x20000, 0x1, 0x266}, &(0x7f0000000840), &(0x7f0000000880)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000002fc0)=@IORING_OP_RECVMSG={0xa, 0x24, 0x14, r1, 0x0, &(0x7f0000002f80)={&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000940)=""/85, 0x55}, {&(0x7f00000009c0)=""/149, 0x95}, {&(0x7f0000000a80)=""/148, 0x94}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/146, 0x92}, {&(0x7f0000001c80)=""/76, 0x4c}, {&(0x7f0000001d00)=""/16, 0x10}, {&(0x7f0000001d40)=""/154, 0x9a}, {&(0x7f0000001e00)=""/186, 0xba}], 0xa, &(0x7f0000001f80)=""/4096, 0x1000}, 0x0, 0x100, 0x0, {0x1, r10}})
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r4, 0x9aa4c000)
semctl$IPC_RMID(r5, 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000003000))
semctl$SETVAL(r5, 0x1, 0x10, &(0x7f0000003040)=0xd7)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000003080)=0x3, 0x4)
clock_gettime(0x0, &(0x7f0000003100)={<r11=>0x0, <r12=>0x0})
utimensat(r2, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003140)={{0x77359400}, {r11, r12/1000+10000}}, 0x0)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000031c0), r2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003200)={'vcan0\x00', <r14=>0x0})
getpeername$packet(r2, &(0x7f0000003240)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003280)=0x14)
sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000003580)={&(0x7f0000003180), 0xc, &(0x7f0000003540)={&(0x7f0000003400)={0x110, r13, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)

7.210370883s ago: executing program 2 (id=424):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece)
preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x1, 0x7fff)

7.090641943s ago: executing program 1 (id=425):
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x1)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x14c}}, 0xc000)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r6, 0x0, &(0x7f000004d000/0x2000)=nil, 0x2000, 0x3})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x7, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4})
r7 = syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0)
read$msr(r7, &(0x7f0000000100)=""/165, 0xa5)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}}, 0x108)

6.435863409s ago: executing program 0 (id=427):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000080)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "669e7e", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$getenv(0x4201, r4, 0x2, &(0x7f0000000040))
ftruncate(0xffffffffffffffff, 0x8800000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8080)
bind$inet(r5, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x8010, r1, 0xdc868000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private1, 0x9}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=ANY=[@ANYRES16], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

5.996684306s ago: executing program 1 (id=428):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51a}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000600000005000000", @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
listen(r5, 0x4)

5.975071692s ago: executing program 0 (id=429):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYBLOB="86"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.923755287s ago: executing program 3 (id=430):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5)

5.223249967s ago: executing program 2 (id=431):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x1800, 0x4)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0x8)
recvmmsg(r0, &(0x7f0000000200), 0x0, 0x100, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)

5.220338599s ago: executing program 4 (id=432):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setrlimit(0xa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c0001800600e74c5a2c00007c130280781314800f5945b2931c8c08cb731306800c000100"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000011b0000005f539fd52e230190564a1bfaa7c4091ce60615a586f383139f1e0c1afafa77805d3e828b4238267cdb28ac6a384395ecc1a15a186fbf140d184c4be66da66f526ac7544bbf46f72916eed5ee39544919626f9e732d1e5fa7a5acc914f72da2e1828445cf06171e01", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018370000010000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x11, 0x6d, &(0x7f0000000800)=""/109, 0x41000, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x8, 0x6, 0x2}, 0x10, 0x0, r3, 0x4, &(0x7f0000000880)=[r3, r3, r3], &(0x7f00000008c0)=[{0x0, 0x5, 0x8, 0x6}, {0x5, 0x5, 0x3, 0x2}, {0x4, 0x2, 0x4, 0x9}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0x652}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={0xffffffffffffffff, r3, 0x4, r4}, 0x10)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181882, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0)
preadv(r6, 0x0, 0x0, 0x202, 0x0)
flock(r3, 0x8)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x97)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6)

4.961553499s ago: executing program 1 (id=433):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00003b7000/0x2000)=nil, 0x2000, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0xb}}, 0x1c}}, 0x20024090)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = userfaultfd(0x80000)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00003c2000/0x2000)=nil, &(0x7f000072a000/0x3000)=nil, 0x2000})
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200)={0x1})
memfd_create(&(0x7f0000000900)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0)
ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0)

4.676429461s ago: executing program 2 (id=434):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffdd110f4e, 0x809, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0xd)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0x8, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x4, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0)
write$sequencer(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481060e0801fb"], 0x21)
r6 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x6, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.675974211s ago: executing program 3 (id=435):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

4.589518397s ago: executing program 3 (id=436):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0)

4.505633072s ago: executing program 4 (id=437):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33b, 0x0, 0x2, 0xd, 0x329, 0xfffe}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
fsetxattr(r1, &(0x7f0000000080)=@random={'security.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000140)=')#@){\x00', 0x6, 0x3)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0), r4, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a000400aaaaaa000000000000000000aaaaaaaa98aa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

3.52900878s ago: executing program 3 (id=438):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1, 0xfffc})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3.2805267s ago: executing program 2 (id=439):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x8, 0x77, 0x10})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0xf, 0x6, {0x8ae, 0x8, 0xffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x78}}, 0x40844)
sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x40, 0x48, 0x200, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r4, 0x7f}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009044}, 0x20004005)
connect$qrtr(r0, &(0x7f0000000140)={0x2a, 0x2, 0x4001}, 0x9)

3.280121446s ago: executing program 4 (id=440):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x70, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000280)="3e2ce8f5dd0d8e978fcacc858c999078b0f891336fd6b813bdea3f1ea7a3404ca1be2429edce270e239128", 0x2b, 0x20000801, 0x0, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

3.136726071s ago: executing program 1 (id=441):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000080)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "669e7e", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$getenv(0x4201, r4, 0x2, &(0x7f0000000040))
ftruncate(0xffffffffffffffff, 0x8800000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8080)
bind$inet(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private1, 0x9}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=ANY=[@ANYRES16], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3.102882877s ago: executing program 2 (id=442):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000712a924010080200000000000001090224841334e3677f7a6f8c524a270e00010000400f090400000103000000092100000801220700090581030000e90000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022070000000049a72e1f4fb1"], 0x0}, 0x0)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}]}})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="14005080050009000200000005000200010000000a0006000802110000010000d5c6b008a8cbbf9e"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a000008001c00", @ANYRES32=r6, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r8=>0x0, 0x1, 0x40, 0x7, 0x3, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x5, [{@local, 0x400}]}, @end]}}}}})
r9 = timerfd_create(0x0, 0x0)
r10 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = fcntl$dupfd(r11, 0x0, r12)
getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000001680)={{{@in6=@private2, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000001400)=0xe8)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r14, 0x0, 0x0}, 0x10)
r15 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r18=>0x0})
sendmsg$nl_route_sched(r17, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r18, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x54}}]}, 0x30}}, 0x4000010)
r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r20=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000540)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x365, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @exit, @generic={0x0, 0x1, 0x2, 0x5, 0x2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x38, &(0x7f0000000240)=""/56, 0x41000, 0x52, '\x00', r8, @fallback=0x22, r10, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x9}, 0x10, 0x0, r14, 0x0, &(0x7f00000005c0)=[r15, r16, r19, 0xffffffffffffffff, r20]}, 0x94)

1.643237279s ago: executing program 0 (id=443):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102380, 0x18fec)
socket(0x18, 0x0, 0x1)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (fail_nth: 1)
chdir(0x0)
r5 = gettid()
ioprio_get$pid(0x2, r5)
r6 = open(0x0, 0x80242, 0x1df2a23c5997fa7b)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
close_range(r0, 0xffffffffffffffff, 0x0)

1.636230058s ago: executing program 4 (id=444):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0xc, 0x2}, {0x1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x40044)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xd, &(0x7f0000000580)={0x3, 0xfffffffffffffffb}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)})
syz_pidfd_open(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
gettid()
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r3, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)

1.625998325s ago: executing program 1 (id=445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x104, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000780)={0x1}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000006c0)={0x9, 0x40, {}, {0xffffffffffffffff}, 0xd237496, 0x1008c}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508000100"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[], 0x20) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[], 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x88) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
close(r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f03f, 0x2}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffe7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

1.277485308s ago: executing program 4 (id=446):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

1.174795828s ago: executing program 4 (id=447):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x0, 0x2000, 0x0})
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket(0x1e, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8)
mknodat$loop(r9, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)

167.93272ms ago: executing program 3 (id=448):
syz_open_dev$MSR(&(0x7f0000000340), 0x405, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0xfffffffffffffff7)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[])

0s ago: executing program 3 (id=449):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYBLOB="86"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 device strings: Mfr=1, Product=2, SerialNumber=3
[   98.190561][    T9] usb 3-1: Product: syz
[   98.194736][    T9] usb 3-1: Manufacturer: syz
[   98.210038][    T9] usb 3-1: SerialNumber: syz
[   98.229973][    T9] usb 3-1: config 0 descriptor??
[   98.245697][    T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   98.247671][   T30] kauditd_printk_skb: 26 callbacks suppressed
[   98.247685][   T30] audit: type=1400 audit(1770239221.074:320): avc:  denied  { remove_name } for  pid=6371 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.265875][    T9] usb 3-1: Detected FT232R
[   98.869537][   T30] audit: type=1400 audit(1770239221.124:321): avc:  denied  { unlink } for  pid=6371 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   98.916233][   T30] audit: type=1400 audit(1770239221.734:322): avc:  denied  { create } for  pid=6373 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[   99.382222][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   99.389374][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   99.423586][   T30] audit: type=1400 audit(1770239221.904:323): avc:  denied  { mounton } for  pid=6369 comm="syz.3.110" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   99.447686][   T30] audit: type=1400 audit(1770239221.984:324): avc:  denied  { remount } for  pid=6369 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   99.531887][    T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[   99.561353][    T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   99.587340][    T9] usb 3-1: USB disconnect, device number 5
[   99.694386][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   99.828826][    T9] ftdi_sio 3-1:0.0: device disconnected
[   99.982180][   T30] audit: type=1400 audit(1770239222.804:325): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  100.137612][   T30] audit: type=1400 audit(1770239222.884:326): avc:  denied  { watch watch_reads } for  pid=6402 comm="syz.2.114" path="/24" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  100.221665][   T30] audit: type=1400 audit(1770239222.894:327): avc:  denied  { write } for  pid=6402 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  100.293467][ T6410] binder: 6409:6410 ioctl 4018620d 0 returned -22
[  100.910554][  T793] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  101.060564][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.060827][  T793] usb 3-1: Using ep0 maxpacket: 32
[  101.089884][  T793] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  101.098503][  T793] usb 3-1: config 0 has no interface number 0
[  101.104827][  T793] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.127571][  T793] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.129764][ T6437] warning: `syz.3.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  101.139340][   T30] audit: type=1400 audit(1770239223.954:328): avc:  denied  { listen } for  pid=6436 comm="syz.3.123" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  101.213547][  T793] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  101.230688][    T9] usb 2-1: Using ep0 maxpacket: 8
[  101.256054][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.347072][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  101.355328][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  101.367455][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  101.380254][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  101.402550][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  101.403056][  T793] usb 3-1: config 0 descriptor??
[  101.420137][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.436161][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.472855][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.575972][   T30] audit: type=1400 audit(1770239224.404:329): avc:  denied  { append } for  pid=6438 comm="syz.0.124" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  101.639453][ T6444] netlink: 'syz.0.124': attribute type 1 has an invalid length.
[  101.647967][ T6444] netlink: 'syz.0.124': attribute type 4 has an invalid length.
[  101.655889][ T6444] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.124'.
[  101.760734][    T9] usb 2-1: usb_control_msg returned -32
[  101.766836][    T9] usbtmc 2-1:16.0: can't read capabilities
[  102.136946][  T793] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0002/input/input6
[  102.202090][  T793] uclogic 0003:28BD:0094.0002: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1
[  102.294741][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.346864][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.355612][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  102.364912][ T6456] usbtmc 2-1:16.0: Unable to send data, error -71
[  102.455411][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.474241][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.755093][    T9] usb 3-1: USB disconnect, device number 6
[  102.857206][ T6455] fido_id[6455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  102.945580][  T793] IPVS: starting estimator thread 0...
[  103.150424][ T6469] IPVS: using max 76 ests per chain, 182400 per kthread
[  103.468849][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  103.468865][   T30] audit: type=1400 audit(1770239226.294:334): avc:  denied  { write } for  pid=6474 comm="syz.3.133" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.570043][   T30] audit: type=1400 audit(1770239226.394:335): avc:  denied  { ioctl } for  pid=6477 comm="syz.0.134" path="socket:[10854]" dev="sockfs" ino=10854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  103.596225][   T30] audit: type=1400 audit(1770239226.404:336): avc:  denied  { setopt } for  pid=6477 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  103.640115][   T30] audit: type=1400 audit(1770239226.464:337): avc:  denied  { create } for  pid=6463 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  103.731201][  T894] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  104.197412][  T793] usb 2-1: USB disconnect, device number 4
[  104.204492][  T894] usb 4-1: No LPM exit latency info found, disabling LPM.
[  104.218106][   T30] audit: type=1400 audit(1770239227.044:338): avc:  denied  { getopt } for  pid=6481 comm="syz.0.135" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  104.238924][  T894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8
[  104.260553][  T894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.278167][  T894] usb 4-1: string descriptor 0 read error: -22
[  104.295361][  T894] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  104.304505][  T894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.319494][ T6475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  104.451629][ T6487] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.481248][ T6490] bond_slave_0: entered promiscuous mode
[  104.487049][ T6490] bond_slave_1: entered promiscuous mode
[  104.499351][ T6490] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  104.525923][ T6490] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  104.538472][  T894] usbhid 4-1:1.0: can't add hid device: -71
[  104.547747][  T894] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  104.579308][  T894] usb 4-1: USB disconnect, device number 3
[  104.968283][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[  104.977185][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[  104.986773][ T6498] netlink: 'syz.2.138': attribute type 13 has an invalid length.
[  104.994656][ T6498] netlink: 'syz.2.138': attribute type 12 has an invalid length.
[  105.508074][ T5853] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.630057][   T30] audit: type=1326 audit(1770239228.364:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  105.768756][   T30] audit: type=1326 audit(1770239228.364:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  105.794796][ T5853] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[  106.270751][   T30] audit: type=1326 audit(1770239228.364:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  106.497071][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.504717][   T30] audit: type=1326 audit(1770239228.364:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  106.640714][ T5853] usb 1-1: config 0 descriptor??
[  106.666013][   T30] audit: type=1326 audit(1770239228.364:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  107.135212][ T5853] usb 1-1: string descriptor 0 read error: -71
[  107.150748][ T5853] ldusb 1-1:0.0: Interrupt in endpoint not found
[  107.181766][ T5853] usb 1-1: USB disconnect, device number 6
[  107.554759][ T6532] vxfs: WRONG superblock magic 00000000 at 1
[  107.561044][ T6532] vxfs: WRONG superblock magic 00000000 at 8
[  107.567019][ T6532] vxfs: can't find superblock.
[  107.956779][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[  108.572042][  T793] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.701873][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  108.701914][   T30] audit: type=1400 audit(1770239231.534:361): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  108.750592][  T793] usb 1-1: Using ep0 maxpacket: 16
[  108.870289][  T793] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[  108.890946][  T793] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  108.910768][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.910985][  T793] usb 1-1: config 8 has no interface number 0
[  109.336279][  T793] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  109.348231][  T793] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  109.369935][ T6553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'.
[  109.387834][   T30] audit: type=1400 audit(1770239232.194:362): avc:  denied  { create } for  pid=6544 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  109.494584][  T793] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.507782][   T30] audit: type=1400 audit(1770239232.194:363): avc:  denied  { write } for  pid=6544 comm="syz.2.152" path="socket:[11656]" dev="sockfs" ino=11656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  109.532142][  T793] usb 1-1: config 8 interface 206 has no altsetting 0
[  109.680546][ T5915] usb 2-1: Using ep0 maxpacket: 8
[  109.689748][  T793] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  109.719136][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.745242][ T5915] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  109.747471][  T793] usb 1-1: Product: syz
[  109.758908][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.783113][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  109.800620][  T793] usb 1-1: Manufacturer: syz
[  109.819140][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  109.822191][  T793] usb 1-1: SerialNumber: syz
[  109.865000][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.906571][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  109.937833][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.232818][ T5915] usb 2-1: GET_CAPABILITIES returned 0
[  110.238382][ T5915] usbtmc 2-1:16.0: can't read capabilities
[  110.567118][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.591139][ T5915] usb 2-1: USB disconnect, device number 5
[  110.954141][ T6569] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003'
[  111.000914][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.170982][  T793] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[  111.192261][  T793] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  111.202943][  T793] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  111.231013][  T793] usb 1-1: USB disconnect, device number 7
[  111.247230][  T793] garmin_gps 1-1:8.206: device disconnected
[  111.500739][ T5853] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  111.710640][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  111.759836][ T5853] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  111.936933][ T5853] usb 4-1: config 0 has no interface number 0
[  111.943398][ T5853] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  111.957357][ T5853] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  111.969948][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.986396][ T5853] usb 4-1: Product: syz
[  111.997071][ T5853] usb 4-1: Manufacturer: syz
[  112.007170][ T5853] usb 4-1: SerialNumber: syz
[  112.018241][ T5853] usb 4-1: config 0 descriptor??
[  112.025822][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.206569][   T30] audit: type=1400 audit(1770239235.344:364): avc:  denied  { shutdown } for  pid=6589 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.220894][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.227078][   T30] audit: type=1400 audit(1770239235.344:365): avc:  denied  { read } for  pid=6589 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.569303][ T6605] binder: 6596:6605 ioctl c0306201 0 returned -14
[  113.580697][   T30] audit: type=1400 audit(1770239236.394:366): avc:  denied  { set_context_mgr } for  pid=6596 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  113.590824][ T6605] binder: BINDER_SET_CONTEXT_MGR already set
[  113.615780][ T6605] binder: 6596:6605 ioctl 4018620d 200000000040 returned -16
[  113.734847][ T5853] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  113.752844][ T5853] asix 4-1:0.188: probe with driver asix failed with error -61
[  113.763048][   T30] audit: type=1400 audit(1770239236.414:367): avc:  denied  { map } for  pid=6596 comm="syz.2.165" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  114.166458][ T6611] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  114.524021][ T5853] IPVS: starting estimator thread 0...
[  114.642105][ T6612] IPVS: using max 51 ests per chain, 122400 per kthread
[  115.040898][ T5853] usb 4-1: USB disconnect, device number 4
[  115.531362][ T6624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  115.541082][ T6624] block device autoloading is deprecated and will be removed.
[  115.646114][   T30] audit: type=1400 audit(1770239238.384:368): avc:  denied  { setopt } for  pid=6623 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  116.480548][   T30] audit: type=1400 audit(1770239239.304:369): avc:  denied  { connect } for  pid=6634 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  116.610224][ T6642] netlink: 'syz.4.173': attribute type 4 has an invalid length.
[  117.174967][   T30] audit: type=1400 audit(1770239240.004:370): avc:  denied  { ioctl } for  pid=6634 comm="syz.0.172" path="socket:[11745]" dev="sockfs" ino=11745 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.682743][   T30] audit: type=1400 audit(1770239242.514:371): avc:  denied  { create } for  pid=6666 comm="syz.1.182" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  119.707108][ T6670] affs: No valid root block on device nullb0
[  119.720964][ T6672] binder: 6663:6672 ioctl c0306201 0 returned -14
[  119.729032][ T6672] binder: BINDER_SET_CONTEXT_MGR already set
[  119.743671][ T6672] binder: 6663:6672 ioctl 4018620d 200000000040 returned -16
[  119.779856][   T30] audit: type=1400 audit(1770239242.534:372): avc:  denied  { mounton } for  pid=6666 comm="syz.1.182" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  119.887970][   T30] audit: type=1400 audit(1770239242.704:373): avc:  denied  { unlink } for  pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  120.455329][   T30] audit: type=1400 audit(1770239242.814:374): avc:  denied  { write } for  pid=6674 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  121.078242][ T6707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.188'.
[  121.276367][ T6708] loop9: detected capacity change from 0 to 7
[  121.283705][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.291633][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.299696][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.307642][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.315553][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.323533][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.331536][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.339397][ T6708] ldm_validate_partition_table(): Disk read failed.
[  121.346927][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.355636][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.363574][ T6708] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.371517][ T6708] Dev loop9: unable to read RDB block 0
[  121.380822][ T6708]  loop9: unable to read partition table
[  121.386738][ T6708] loop9: partition table beyond EOD, truncated
[  121.392966][ T6708] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  121.392966][ T6708] 
) failed (rc=-5)
[  122.083949][   T30] audit: type=1326 audit(1770239244.904:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  122.149656][   T30] audit: type=1326 audit(1770239244.904:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  122.208232][   T30] audit: type=1326 audit(1770239244.904:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  122.261666][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'.
[  122.271893][   T30] audit: type=1326 audit(1770239244.904:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  122.345929][   T30] audit: type=1326 audit(1770239244.914:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  122.416050][   T30] audit: type=1326 audit(1770239244.914:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  123.136313][  T793] libceph: connect (1)[c::]:6789 error -101
[  123.147796][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  123.279516][ T6731] ceph: No mds server is up or the cluster is laggy
[  123.382236][ T6746] vxfs: WRONG superblock magic 00000000 at 1
[  123.388412][ T6746] vxfs: WRONG superblock magic 00000000 at 8
[  123.417691][ T6741] i2c i2c-0: Invalid block write size 255
[  123.497864][ T6746] vxfs: can't find superblock.
[  123.614959][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'.
[  124.737065][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  124.737081][   T30] audit: type=1400 audit(1770239247.564:394): avc:  denied  { listen } for  pid=6725 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.897205][ T6760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.350579][  T793] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  126.774874][  T793] usb 5-1: device descriptor read/64, error -71
[  127.009772][   T30] audit: type=1400 audit(1770239249.464:395): avc:  denied  { write } for  pid=6769 comm="syz.2.204" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  127.009928][   T30] audit: type=1400 audit(1770239249.464:396): avc:  denied  { open } for  pid=6769 comm="syz.2.204" path="/49/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  127.009968][   T30] audit: type=1400 audit(1770239249.534:397): avc:  denied  { create } for  pid=6769 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.010069][   T30] audit: type=1400 audit(1770239249.534:398): avc:  denied  { write } for  pid=6769 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.879638][  T793] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  129.220313][  T793] usb 5-1: device descriptor read/64, error -71
[  129.228031][   T30] audit: type=1400 audit(1770239250.384:399): avc:  denied  { ioctl } for  pid=6772 comm="syz.3.206" path="socket:[12065]" dev="sockfs" ino=12065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.357435][   T30] audit: type=1400 audit(1770239250.394:400): avc:  denied  { bind } for  pid=6772 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.360751][  T793] usb usb5-port1: attempt power cycle
[  129.436708][ T6780] infiniband syz2: set down
[  129.441309][ T6780] infiniband syz2: added veth1_to_team
[  129.449445][ T6780] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  129.451502][ T6780] infiniband syz2: Couldn't open port 1
[  129.490619][   T30] audit: type=1400 audit(1770239250.394:401): avc:  denied  { setopt } for  pid=6772 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.541442][ T6780] RDS/IB: syz2: added
[  129.545841][ T6780] smc: adding ib device syz2 with port count 1
[  129.554387][ T6780] smc:    ib device syz2 port 1 has no pnetid
[  130.047192][ T6790] trusted_key: encrypted_key: master key parameter 'us' is invalid
[  130.105435][ T6783] loop9: detected capacity change from 0 to 7
[  130.121868][   T30] audit: type=1326 audit(1770239252.954:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  130.147969][ T6783] buffer_io_error: 9 callbacks suppressed
[  130.147984][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.162644][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.170730][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.178969][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.187261][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.195627][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.203914][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.212083][ T6783] ldm_validate_partition_table(): Disk read failed.
[  130.219029][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.290768][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'.
[  130.299814][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'.
[  130.316007][   T30] audit: type=1326 audit(1770239252.954:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  130.344263][   T30] audit: type=1326 audit(1770239252.954:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  130.375899][   T30] audit: type=1326 audit(1770239252.954:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  130.845979][   T30] audit: type=1326 audit(1770239252.954:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  131.067266][   T30] audit: type=1326 audit(1770239252.954:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  131.154494][   T30] audit: type=1326 audit(1770239252.954:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  131.381508][ T6796] wireguard0: entered promiscuous mode
[  131.387051][ T6796] wireguard0: entered allmulticast mode
[  131.400550][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  131.446320][   T30] audit: type=1326 audit(1770239252.954:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  131.470114][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  131.516680][ T6798] netlink: 'syz.2.210': attribute type 12 has an invalid length.
[  131.684566][    T9] usb 5-1: Using ep0 maxpacket: 32
[  131.714114][ T5915] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  131.776019][   T30] audit: type=1326 audit(1770239252.954:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  131.815665][    T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  131.897105][ T5915] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  131.914295][    T9] usb 5-1: config 0 has no interface number 0
[  131.966773][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.992008][    T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  132.049277][ T5915] usb 3-1: Product: syz
[  132.062874][   T30] audit: type=1326 audit(1770239252.954:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085bd9aeb9 code=0x7ffc0000
[  132.119523][ T5915] usb 3-1: Manufacturer: syz
[  132.145799][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  132.174835][ T5915] usb 3-1: SerialNumber: syz
[  132.232507][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.242051][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  132.342309][    T9] usb 5-1: Product: syz
[  132.346893][ T6783] Buffer I/O error on dev loop9, logical block 0, async page read
[  132.387939][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.397996][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.426263][ T5915] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  132.457047][    T9] usb 5-1: Manufacturer: syz
[  132.510591][ T6783] Dev loop9: unable to read RDB block 0
[  132.526841][    T9] usb 5-1: SerialNumber: syz
[  132.552998][ T6783]  loop9: unable to read partition table
[  132.564460][    T9] usb 5-1: config 0 descriptor??
[  132.569998][ T6800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  132.577381][ T6783] loop9: partition table beyond EOD, truncated
[  132.607283][ T6783] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  132.607283][ T6783] 
) failed (rc=-5)
[  132.862414][ T6800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  133.291140][ T5915] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  133.303651][ T5915] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  133.340913][ T5915] usb 3-1: media controller created
[  133.368567][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.572985][    T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  133.657364][ T6813] hub 9-0:1.0: USB hub found
[  133.664089][ T6813] hub 9-0:1.0: 1 port detected
[  134.017039][    T9] asix 5-1:0.188: probe with driver asix failed with error -61
[  134.095403][ T5915] usb 3-1: USB disconnect, device number 7
[  134.467536][ T6823] syzkaller0: entered promiscuous mode
[  134.474359][ T6823] syzkaller0: entered allmulticast mode
[  134.550830][ T5853] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.570578][  T793] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  134.720691][ T5853] usb 1-1: Using ep0 maxpacket: 32
[  134.740583][  T793] usb 4-1: Using ep0 maxpacket: 16
[  134.755119][  T793] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  134.775279][  T793] usb 4-1: config 0 has no interface number 0
[  134.795593][  T793] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  134.810019][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short
[  134.822889][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.838115][  T793] usb 4-1: Product: syz
[  134.841850][ T5915] usb 5-1: USB disconnect, device number 9
[  134.849169][ T5853] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  134.862090][  T793] usb 4-1: Manufacturer: syz
[  134.866742][  T793] usb 4-1: SerialNumber: syz
[  134.890576][ T5853] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  134.899674][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.910733][  T793] usb 4-1: config 0 descriptor??
[  134.910961][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  135.039022][  T793] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  135.059885][ T5853] usb 1-1: Product: syz
[  135.082000][ T5853] usb 1-1: Manufacturer: syz
[  135.086740][ T5853] usb 1-1: SerialNumber: syz
[  135.391851][    T9] usb 3-1: device descriptor read/64, error -71
[  135.448340][ T6831] FAULT_INJECTION: forcing a failure.
[  135.448340][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.497595][ T5853] usb 1-1: Cannot retrieve CPort count: 0
[  135.498157][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.4.220 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.498180][ T6831] Tainted: [L]=SOFTLOCKUP
[  135.498188][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  135.498197][ T6831] Call Trace:
[  135.498202][ T6831]  <TASK>
[  135.498208][ T6831]  dump_stack_lvl+0x100/0x190
[  135.498231][ T6831]  should_fail_ex.cold+0x5/0xa
[  135.498254][ T6831]  _copy_from_user+0x2e/0xd0
[  135.498275][ T6831]  copy_msghdr_from_user+0x9f/0x4f0
[  135.498292][ T6831]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  135.498317][ T6831]  ___sys_sendmsg+0x106/0x1e0
[  135.498333][ T6831]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.498359][ T6831]  ? find_held_lock+0x2b/0x80
[  135.498391][ T6831]  __sys_sendmsg+0x170/0x220
[  135.498411][ T6831]  ? __pfx___sys_sendmsg+0x10/0x10
[  135.498443][ T6831]  do_syscall_64+0xc9/0xf80
[  135.498462][ T6831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.498476][ T6831] RIP: 0033:0x7f085bd9aeb9
[  135.498488][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.498502][ T6831] RSP: 002b:00007f085ccb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.498517][ T6831] RAX: ffffffffffffffda RBX: 00007f085c015fa0 RCX: 00007f085bd9aeb9
[  135.498526][ T6831] RDX: 0000000004041080 RSI: 0000200000000000 RDI: 0000000000000004
[  135.498535][ T6831] RBP: 00007f085ccb4090 R08: 0000000000000000 R09: 0000000000000000
[  135.498544][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.498552][ T6831] R13: 00007f085c016038 R14: 00007f085c015fa0 R15: 00007ffcc97cfbb8
[  135.498572][ T6831]  </TASK>
[  135.650606][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  135.679746][  T793] gspca_spca1528: reg_w err -110
[  135.694503][ T5853] usb 1-1: Cannot retrieve CPort count: -5
[  135.700354][ T5853] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5
[  135.710413][  T793] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  135.781840][ T6821] FAULT_INJECTION: forcing a failure.
[  135.781840][ T6821] name failslab, interval 1, probability 0, space 0, times 0
[  135.821117][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.829988][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.850089][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.3.216 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.850116][ T6821] Tainted: [L]=SOFTLOCKUP
[  135.850122][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  135.850131][ T6821] Call Trace:
[  135.850136][ T6821]  <TASK>
[  135.850142][ T6821]  dump_stack_lvl+0x100/0x190
[  135.850167][ T6821]  should_fail_ex.cold+0x5/0xa
[  135.850181][ T6821]  should_failslab+0xc2/0x120
[  135.850196][ T6821]  ? tomoyo_encode2+0xfb/0x3c0
[  135.850207][ T6821]  __kmalloc_noprof+0xf6/0x9c0
[  135.850221][ T6821]  ? tomoyo_encode2+0xfb/0x3c0
[  135.850234][ T6821]  tomoyo_encode2+0xfb/0x3c0
[  135.850254][ T6821]  tomoyo_encode+0x29/0x50
[  135.850270][ T6821]  tomoyo_realpath_from_path+0x18c/0x690
[  135.850293][ T6821]  tomoyo_path_number_perm+0x23c/0x580
[  135.850319][ T6821]  ? tomoyo_path_number_perm+0x22e/0x580
[  135.850346][ T6821]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  135.850395][ T6821]  ? find_held_lock+0x2b/0x80
[  135.850418][ T6821]  ? hook_file_ioctl_common+0x146/0x410
[  135.850439][ T6821]  ? __fget_files+0x215/0x3d0
[  135.850466][ T6821]  ? __fget_files+0x21f/0x3d0
[  135.850493][ T6821]  security_file_ioctl+0xd3/0x230
[  135.850513][ T6821]  __x64_sys_ioctl+0xb7/0x210
[  135.850531][ T6821]  do_syscall_64+0xc9/0xf80
[  135.850552][ T6821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.850569][ T6821] RIP: 0033:0x7fcc6459aeb9
[  135.850583][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.850598][ T6821] RSP: 002b:00007fcc6541c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  135.850613][ T6821] RAX: ffffffffffffffda RBX: 00007fcc64815fa0 RCX: 00007fcc6459aeb9
[  135.850624][ T6821] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000009
[  135.850634][ T6821] RBP: 00007fcc6541c090 R08: 0000000000000000 R09: 0000000000000000
[  135.850643][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.850652][ T6821] R13: 00007fcc64816038 R14: 00007fcc64815fa0 R15: 00007fff7da2e7d8
[  135.850676][ T6821]  </TASK>
[  136.085589][ T6821] ERROR: Out of memory at tomoyo_realpath_from_path.
[  136.130556][    T9] usb 3-1: device descriptor read/64, error -71
[  136.137408][ T6837] capability: warning: `syz.4.222' uses deprecated v2 capabilities in a way that may be insecure
[  136.152727][ T5915] usb 4-1: USB disconnect, device number 5
[  136.240737][    T9] usb usb3-port1: attempt power cycle
[  136.400571][  T793] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  136.525301][ T6843] wireguard0: entered promiscuous mode
[  136.530878][ T6843] wireguard0: entered allmulticast mode
[  136.562522][  T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  136.581257][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  136.593571][ T6845] netlink: 'syz.1.224': attribute type 12 has an invalid length.
[  136.640866][    T9] usb 3-1: device descriptor read/8, error -71
[  136.880635][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.900813][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  136.943184][    T9] usb 3-1: device descriptor read/8, error -71
[  137.063517][ T5915] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  137.085055][    T9] usb usb3-port1: unable to enumerate USB device
[  137.125577][ T5915] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  137.157691][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.226984][ T5915] usb 2-1: Product: syz
[  137.252968][    T9] usb 1-1: USB disconnect, device number 8
[  137.259074][ T5915] usb 2-1: Manufacturer: syz
[  137.329660][ T5915] usb 2-1: SerialNumber: syz
[  137.556414][ T5915] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  138.041653][  T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.052592][  T793] usb 5-1: config 0 has no interface number 0
[  138.058752][  T793] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.076511][  T793] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  138.085682][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.098741][  T793] usb 5-1: config 0 descriptor??
[  138.113155][  T793] usbhid 5-1:0.1: couldn't find an input interrupt endpoint
[  138.357423][ T6849] hub 9-0:1.0: USB hub found
[  138.362902][ T6849] hub 9-0:1.0: 1 port detected
[  138.793540][ T6851] FAULT_INJECTION: forcing a failure.
[  138.793540][ T6851] name failslab, interval 1, probability 0, space 0, times 0
[  138.812235][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  138.812249][   T30] audit: type=1326 audit(1770239261.644:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  138.852407][ T5915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  138.873421][ T6853] FAULT_INJECTION: forcing a failure.
[  138.873421][ T6853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.894481][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.3.227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.894510][ T6851] Tainted: [L]=SOFTLOCKUP
[  138.894516][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.894530][ T6851] Call Trace:
[  138.894537][ T6851]  <TASK>
[  138.894544][ T6851]  dump_stack_lvl+0x100/0x190
[  138.894572][ T6851]  should_fail_ex.cold+0x5/0xa
[  138.894593][ T6851]  should_failslab+0xc2/0x120
[  138.894617][ T6851]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  138.894642][ T6851]  ? __alloc_skb+0x156/0x410
[  138.894662][ T6851]  ? __alloc_skb+0x35d/0x410
[  138.894685][ T6851]  ? __alloc_skb+0x156/0x410
[  138.894704][ T6851]  __alloc_skb+0x156/0x410
[  138.894722][ T6851]  ? __alloc_skb+0x35d/0x410
[  138.894741][ T6851]  ? __pfx___alloc_skb+0x10/0x10
[  138.894763][ T6851]  ? lockdep_hardirqs_on+0x78/0x100
[  138.894783][ T6851]  ? __pfx_nf_tables_abort+0x10/0x10
[  138.894811][ T6851]  netlink_ack+0x117/0xb80
[  138.894838][ T6851]  ? nfnetlink_rcv_batch+0x632/0x2880
[  138.894861][ T6851]  nfnetlink_rcv_batch+0x1d5c/0x2880
[  138.894894][ T6851]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  138.894918][ T6851]  ? lockdep_hardirqs_on+0x78/0x100
[  138.894936][ T6851]  ? irqentry_exit+0x180/0x670
[  138.894963][ T6851]  ? __nla_validate_parse+0xe9/0x28b0
[  138.895003][ T6851]  ? __nla_parse+0x40/0x60
[  138.895022][ T6851]  nfnetlink_rcv+0x3bd/0x440
[  138.895041][ T6851]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  138.895066][ T6851]  netlink_unicast+0x5aa/0x870
[  138.895095][ T6851]  ? __pfx_netlink_unicast+0x10/0x10
[  138.895128][ T6851]  netlink_sendmsg+0x8b0/0xda0
[  138.895157][ T6851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.895186][ T6851]  ? ____sys_sendmsg+0x86b/0xc30
[  138.895211][ T6851]  ____sys_sendmsg+0xa54/0xc30
[  138.895230][ T6851]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.895251][ T6851]  ? ____sys_sendmsg+0x1d/0xc30
[  138.895271][ T6851]  ___sys_sendmsg+0x190/0x1e0
[  138.895290][ T6851]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.895308][ T6851]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[  138.895359][ T6851]  __sys_sendmsg+0x170/0x220
[  138.895383][ T6851]  ? __pfx___sys_sendmsg+0x10/0x10
[  138.895414][ T6851]  ? rcu_is_watching+0x12/0xc0
[  138.895442][ T6851]  do_syscall_64+0xc9/0xf80
[  138.895462][ T6851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.895480][ T6851] RIP: 0033:0x7fcc6459aeb9
[  138.895493][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.895510][ T6851] RSP: 002b:00007fcc6541c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.895526][ T6851] RAX: ffffffffffffffda RBX: 00007fcc64815fa0 RCX: 00007fcc6459aeb9
[  138.895537][ T6851] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  138.895547][ T6851] RBP: 00007fcc6541c090 R08: 0000000000000000 R09: 0000000000000000
[  138.895556][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.895566][ T6851] R13: 00007fcc64816038 R14: 00007fcc64815fa0 R15: 00007fff7da2e7d8
[  138.895590][ T6851]  </TASK>
[  138.897083][ T5915] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  138.933303][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.2.226 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.933332][ T6853] Tainted: [L]=SOFTLOCKUP
[  138.933338][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.933347][ T6853] Call Trace:
[  138.933353][ T6853]  <TASK>
[  138.933359][ T6853]  dump_stack_lvl+0x100/0x190
[  138.933384][ T6853]  should_fail_ex.cold+0x5/0xa
[  138.933401][ T6853]  _copy_to_user+0x32/0xd0
[  138.933423][ T6853]  simple_read_from_buffer+0xcb/0x170
[  138.933442][ T6853]  proc_fail_nth_read+0x1af/0x230
[  138.933463][ T6853]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.933485][ T6853]  ? rw_verify_area+0xce/0x6d0
[  138.933499][ T6853]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.933518][ T6853]  vfs_read+0x1e4/0xb30
[  138.933537][ T6853]  ? __pfx_vfs_read+0x10/0x10
[  138.933551][ T6853]  ? find_held_lock+0x2b/0x80
[  138.933571][ T6853]  ? __fget_files+0x215/0x3d0
[  138.933592][ T6853]  ? __fget_files+0x21f/0x3d0
[  138.933615][ T6853]  ksys_read+0x12a/0x250
[  138.933631][ T6853]  ? __pfx_ksys_read+0x10/0x10
[  138.933646][ T6853]  ? __secure_computing+0x201/0x2e0
[  138.933669][ T6853]  do_syscall_64+0xc9/0xf80
[  138.933688][ T6853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.933703][ T6853] RIP: 0033:0x7f0c5c35b78e
[  138.933716][ T6853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  138.933729][ T6853] RSP: 002b:00007f0c5d337fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.933744][ T6853] RAX: ffffffffffffffda RBX: 00007f0c5d3386c0 RCX: 00007f0c5c35b78e
[  138.933754][ T6853] RDX: 000000000000000f RSI: 00007f0c5d3380a0 RDI: 0000000000000003
[  138.933763][ T6853] RBP: 00007f0c5d338090 R08: 0000000000000000 R09: 0000000000000000
[  138.933771][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.933780][ T6853] R13: 00007f0c5c616038 R14: 00007f0c5c615fa0 R15: 00007fff60afed98
[  138.933800][ T6853]  </TASK>
[  139.020623][   T30] audit: type=1326 audit(1770239261.674:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  139.467519][   T30] audit: type=1326 audit(1770239261.694:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  139.495691][ T6859] fuse: Bad value for 'fd'
[  139.502417][ T6859] tmpfs: Bad value for 'nr_blocks'
[  139.767245][ T6865] capability: warning: `syz.0.230' uses 32-bit capabilities (legacy support in use)
[  139.815461][ T5915] usb 2-1: media controller created
[  139.854288][   T30] audit: type=1326 audit(1770239261.694:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  139.860115][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.896140][   T30] audit: type=1326 audit(1770239261.704:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c5c35b78e code=0x7ffc0000
[  139.924232][ T6076] usb 5-1: USB disconnect, device number 10
[  140.023704][   T30] audit: type=1326 audit(1770239261.704:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c5c35b78e code=0x7ffc0000
[  140.060745][  T894] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  140.060761][   T30] audit: type=1326 audit(1770239261.704:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  140.241528][  T894] usb 1-1: Using ep0 maxpacket: 32
[  140.484219][   T30] audit: type=1326 audit(1770239261.704:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0c5c35b78e code=0x7ffc0000
[  140.509217][   T30] audit: type=1326 audit(1770239261.744:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c39aeb9 code=0x7ffc0000
[  140.536706][   T30] audit: type=1326 audit(1770239261.754:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c5c35b78e code=0x7ffc0000
[  140.547259][  T894] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  140.599905][  T894] usb 1-1: config 0 has no interface number 0
[  140.625317][  T894] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  140.634817][  T894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.653429][  T894] usb 1-1: Product: syz
[  140.682929][  T894] usb 1-1: Manufacturer: syz
[  140.851580][  T894] usb 1-1: SerialNumber: syz
[  140.880791][ T5860] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  140.915319][ T6076] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  140.941959][ T5915] usb 2-1: USB disconnect, device number 6
[  140.962214][  T894] usb 1-1: config 0 descriptor??
[  140.978817][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[  140.993039][  T894] smsc95xx v2.0.0
[  141.093597][ T5860] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  141.102995][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.113562][ T5860] usb 5-1: config 0 descriptor??
[  141.120740][ T6076] usb 4-1: Using ep0 maxpacket: 16
[  141.121499][ T5860] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  141.133487][ T6076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.146220][ T6076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.157133][ T6076] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  141.170392][ T6076] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  141.179507][ T6076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.190396][ T6076] usb 4-1: config 0 descriptor??
[  141.405369][  T894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  141.420797][ T5915] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  141.428814][  T894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  141.450576][ T6076] usbhid 4-1:0.0: can't add hid device: -71
[  141.457727][ T6076] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  141.473298][ T6076] usb 4-1: USB disconnect, device number 6
[  141.593721][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short
[  141.611841][ T5915] usb 2-1: not running at top speed; connect to a high speed hub
[  141.635935][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.640811][ T5860] gspca_sn9c2028: read1 error -110
[  141.657678][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.658981][ T5860] gspca_sn9c2028: read1 error -32
[  141.679822][ T5860] gspca_sn9c2028: read1 error -32
[  141.680434][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.695982][ T5860] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32
[  141.848277][ T5915] usb 2-1: New USB device strings: Mfr=248, Product=1, SerialNumber=3
[  141.856733][  T894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  141.870853][ T5915] usb 2-1: Product: syz
[  141.875310][  T894] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  141.884233][ T5915] usb 2-1: Manufacturer: syz
[  141.888893][ T5915] usb 2-1: SerialNumber: syz
[  141.987825][ T6892] hub 9-0:1.0: USB hub found
[  141.993757][ T6892] hub 9-0:1.0: 1 port detected
[  142.330674][  T894] usb 1-1: USB disconnect, device number 9
[  143.032008][ T5915] usb 2-1: cannot find UAC_HEADER
[  143.127269][ T5915] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  143.396278][ T5915] usb 2-1: USB disconnect, device number 7
[  143.438037][  T793] usb 5-1: USB disconnect, device number 11
[  143.459898][ T6905] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  143.500421][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.905379][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  143.905395][   T30] audit: type=1400 audit(1770239266.734:442): avc:  denied  { map } for  pid=6906 comm="syz.0.242" path="socket:[13426]" dev="sockfs" ino=13426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  143.936643][ T6922] FAULT_INJECTION: forcing a failure.
[  143.936643][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.949859][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.245 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.949886][ T6922] Tainted: [L]=SOFTLOCKUP
[  143.949892][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  143.949902][ T6922] Call Trace:
[  143.949908][ T6922]  <TASK>
[  143.949915][ T6922]  dump_stack_lvl+0x100/0x190
[  143.949942][ T6922]  should_fail_ex.cold+0x5/0xa
[  143.949961][ T6922]  _copy_from_user+0x2e/0xd0
[  143.949986][ T6922]  move_addr_to_kernel+0x65/0x170
[  143.950006][ T6922]  __sys_connect+0xb5/0x170
[  143.950026][ T6922]  ? __pfx___sys_connect+0x10/0x10
[  143.950044][ T6922]  ? __fget_files+0x21f/0x3d0
[  143.950073][ T6922]  ? __pfx_ksys_write+0x10/0x10
[  143.950097][ T6922]  __x64_sys_connect+0x72/0xb0
[  143.950116][ T6922]  ? lockdep_hardirqs_on+0x78/0x100
[  143.950135][ T6922]  do_syscall_64+0xc9/0xf80
[  143.950157][ T6922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.950175][ T6922] RIP: 0033:0x7fcc6459aeb9
[  143.950189][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.950211][ T6922] RSP: 002b:00007fcc653da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  143.950228][ T6922] RAX: ffffffffffffffda RBX: 00007fcc64816180 RCX: 00007fcc6459aeb9
[  143.950239][ T6922] RDX: 0000000000000060 RSI: 0000200000000180 RDI: 0000000000000009
[  143.950249][ T6922] RBP: 00007fcc653da090 R08: 0000000000000000 R09: 0000000000000000
[  143.950259][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.950269][ T6922] R13: 00007fcc64816218 R14: 00007fcc64816180 R15: 00007fff7da2e7d8
[  143.950293][ T6922]  </TASK>
[  144.157066][   T30] audit: type=1400 audit(1770239266.734:443): avc:  denied  { read accept } for  pid=6906 comm="syz.0.242" path="socket:[13426]" dev="sockfs" ino=13426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.307870][ T6927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.249'.
[  144.443166][   T30] audit: type=1400 audit(1770239267.014:444): avc:  denied  { execute } for  pid=6923 comm="syz.4.248" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  145.118490][   T30] audit: type=1400 audit(1770239267.944:445): avc:  denied  { bind } for  pid=6929 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.200540][   T30] audit: type=1400 audit(1770239267.954:446): avc:  denied  { listen } for  pid=6929 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.384176][ T6942] /dev/nullb0: Can't open blockdev
[  145.446578][   T30] audit: type=1400 audit(1770239267.954:447): avc:  denied  { connect } for  pid=6929 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.850569][   T30] audit: type=1400 audit(1770239267.964:448): avc:  denied  { accept } for  pid=6929 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.879794][   T30] audit: type=1400 audit(1770239267.964:449): avc:  denied  { read } for  pid=6929 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  147.068295][   T30] audit: type=1400 audit(1770239269.154:450): avc:  denied  { ioctl } for  pid=6923 comm="syz.4.248" path="socket:[13460]" dev="sockfs" ino=13460 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  147.100128][ T6963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.256'.
[  147.672958][ T5860] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  148.111739][ T5860] usb 3-1: Using ep0 maxpacket: 32
[  148.183902][ T5860] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 92, changing to 10
[  148.451630][ T5860] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  148.481688][ T5860] usb 3-1: config 1 interface 0 has no altsetting 0
[  148.512325][ T5860] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  148.522822][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.539937][ T5860] usb 3-1: Product: syz
[  148.555474][ T5860] usb 3-1: Manufacturer: syz
[  148.562590][ T5860] usb 3-1: SerialNumber: syz
[  148.778449][ T6960] binder: 6959:6960 ioctl 8004af80 2000000000c0 returned -22
[  148.794399][ T6960] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000
[  148.825345][ T6960] binder: 6959:6960 ioctl 8018457f 200000000440 returned -22
[  148.899825][   T30] audit: type=1400 audit(1770239271.724:451): avc:  denied  { unmount } for  pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  148.910566][  T793] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  149.227107][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[  149.236024][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'.
[  149.244950][ T6986] netlink: 'syz.4.263': attribute type 13 has an invalid length.
[  149.252759][ T6986] netlink: 'syz.4.263': attribute type 12 has an invalid length.
[  149.468489][  T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  149.480406][  T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  149.572004][  T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  149.629467][  T793] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  149.646172][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.655147][  T793] usb 2-1: Product: syz
[  149.659421][  T793] usb 2-1: Manufacturer: syz
[  149.666331][  T793] usb 2-1: SerialNumber: syz
[  149.674648][  T793] usb 2-1: config 0 descriptor??
[  149.680667][ T6981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  149.701619][ T6981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  149.712753][  T793] usb 2-1: ucan: probing device on interface #0
[  149.781099][ T6990] loop9: detected capacity change from 0 to 7
[  149.788254][ T6990] buffer_io_error: 9 callbacks suppressed
[  149.788268][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  149.918299][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  149.927350][  T793] usb 2-1: ucan: could not read protocol version, ret=0
[  149.991269][ T5860] usbhid 3-1:1.0: can't add hid device: -71
[  150.002945][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.011452][ T5860] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  150.030521][  T793] usb 2-1: ucan: probe failed; try to update the device firmware
[  150.255625][ T6981] overlayfs: unescaped trailing colons in lowerdir mount option.
[  150.273032][ T5860] usb 3-1: USB disconnect, device number 12
[  150.281594][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.293567][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.371180][   T30] audit: type=1400 audit(1770239273.134:452): avc:  denied  { append } for  pid=6997 comm="syz.0.267" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  150.446911][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.455234][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.463375][ T6990] ldm_validate_partition_table(): Disk read failed.
[  150.470236][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.478313][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.521790][ T6990] Buffer I/O error on dev loop9, logical block 0, async page read
[  150.530546][ T6990] Dev loop9: unable to read RDB block 0
[  150.536699][ T6990]  loop9: unable to read partition table
[  150.542554][ T6990] loop9: partition table beyond EOD, truncated
[  150.548799][ T6990] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  150.548799][ T6990] 
) failed (rc=-5)
[  151.822334][ T6076] usb 2-1: USB disconnect, device number 8
[  152.083926][   T30] audit: type=1400 audit(1770239274.764:453): avc:  denied  { unlink } for  pid=7011 comm="syz.2.271" name="#1" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  152.306203][   T30] audit: type=1400 audit(1770239274.774:454): avc:  denied  { mount } for  pid=7011 comm="syz.2.271" name="/" dev="overlay" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  152.472000][   T30] audit: type=1400 audit(1770239274.874:455): avc:  denied  { write } for  pid=7011 comm="syz.2.271" name="rt_cache" dev="proc" ino=4026532853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  152.548160][   T30] audit: type=1400 audit(1770239275.364:456): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  153.030665][ T5860] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  153.237958][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  153.266932][ T5860] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[  153.281175][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.298614][ T5860] usb 4-1: Product: syz
[  153.318092][ T5860] usb 4-1: Manufacturer: syz
[  153.740024][ T5860] usb 4-1: SerialNumber: syz
[  153.757748][ T5860] usb 4-1: config 0 descriptor??
[  154.403681][ T7046] ubi31: attaching mtd0
[  154.418623][ T7046] ubi31: scanning is finished
[  154.423809][ T7046] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  154.942574][ T7046] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  155.621120][ T7060] loop9: detected capacity change from 0 to 7
[  155.629053][ T7060] buffer_io_error: 9 callbacks suppressed
[  155.629069][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.654398][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.682295][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.701331][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.719833][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.736371][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.744812][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.755807][ T7060] ldm_validate_partition_table(): Disk read failed.
[  155.763740][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.778082][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.787302][ T7060] Buffer I/O error on dev loop9, logical block 0, async page read
[  155.815483][ T7060] Dev loop9: unable to read RDB block 0
[  155.858246][ T7060]  loop9: unable to read partition table
[  155.864733][ T7060] loop9: partition table beyond EOD, truncated
[  155.879323][ T7060] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  155.879323][ T7060] 
) failed (rc=-5)
[  156.019503][ T5860] usb 4-1: USB disconnect, device number 7
[  156.060111][   T30] audit: type=1400 audit(1770239278.784:457): avc:  denied  { watch watch_reads } for  pid=7066 comm="syz.4.285" path="/59/file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  156.115375][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.464429][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  157.105395][ T5915] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  157.115439][ T5915] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  157.125534][ T5915] usb 5-1: config 1 interface 0 has no altsetting 0
[  157.364442][   T30] audit: type=1400 audit(1770239280.124:458): avc:  denied  { shutdown } for  pid=7075 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.399043][ T5915] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  157.408469][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.416947][ T5915] usb 5-1: Product: syz
[  157.476038][ T5915] usb 5-1: Manufacturer: syz
[  157.510535][ T5915] usb 5-1: SerialNumber: syz
[  157.538796][ T7067] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  157.567982][ T7067] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  157.909191][ T7089] hub 9-0:1.0: USB hub found
[  157.915732][ T7089] hub 9-0:1.0: 1 port detected
[  158.565562][ T7094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.234620][ T5915] rtl8150 5-1:1.0: couldn't reset the device
[  159.241212][ T5915] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  159.256748][ T5915] usb 5-1: USB disconnect, device number 12
[  161.254265][ T5860] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  161.376615][ T7119] netlink: 56 bytes leftover after parsing attributes in process `syz.4.297'.
[  161.437822][ T5860] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  161.456434][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.486971][ T5860] usb 2-1: config 0 has no interface number 0
[  161.505728][ T5860] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  161.553393][ T5860] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  161.570696][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.638731][ T5860] usb 2-1: config 0 descriptor??
[  161.656685][ T5860] usbhid 2-1:0.1: couldn't find an input interrupt endpoint
[  162.317347][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[  162.780491][ T5914] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  162.837804][   T30] audit: type=1400 audit(1770239285.664:459): avc:  denied  { open } for  pid=7136 comm="syz.0.298" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  162.886416][   T30] audit: type=1400 audit(1770239285.694:460): avc:  denied  { ioctl } for  pid=7136 comm="syz.0.298" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  163.017283][ T5914] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  163.036016][ T5914] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=76.2a
[  163.040564][   T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  163.052968][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.106858][ T5914] usb 3-1: Product: syz
[  163.112725][ T5914] usb 3-1: Manufacturer: syz
[  163.153503][ T5914] usb 3-1: SerialNumber: syz
[  163.749007][   T24] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  163.770548][   T24] usb 5-1: config 0 has no interface number 0
[  163.776746][   T24] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.849853][ T5860] usb 2-1: USB disconnect, device number 9
[  163.984439][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  164.002571][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.022116][   T24] usb 5-1: Product: syz
[  164.296919][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'.
[  164.307209][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'.
[  164.331954][   T24] usb 5-1: Manufacturer: syz
[  164.736116][   T24] usb 5-1: SerialNumber: syz
[  164.847974][   T24] usb 5-1: config 0 descriptor??
[  164.980810][   T24] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  165.211140][ T7176] FAULT_INJECTION: forcing a failure.
[  165.211140][ T7176] name failslab, interval 1, probability 0, space 0, times 0
[  165.223805][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.1.312 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.223829][ T7176] Tainted: [L]=SOFTLOCKUP
[  165.223835][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  165.223842][ T7176] Call Trace:
[  165.223845][ T7176]  <TASK>
[  165.223850][ T7176]  dump_stack_lvl+0x100/0x190
[  165.223867][ T7176]  should_fail_ex.cold+0x5/0xa
[  165.223879][ T7176]  should_failslab+0xc2/0x120
[  165.223894][ T7176]  __kmalloc_cache_noprof+0x80/0x810
[  165.223907][ T7176]  ? ptrace_attach+0x28f/0x6a0
[  165.223933][ T7176]  ? kstrdup_quotable_cmdline+0x52/0x210
[  165.223962][ T7176]  ? kstrdup_quotable_cmdline+0x52/0x210
[  165.223984][ T7176]  kstrdup_quotable_cmdline+0x52/0x210
[  165.224003][ T7176]  __report_access+0x4b/0x230
[  165.224018][ T7176]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.224029][ T7176]  task_work_run+0x150/0x240
[  165.224049][ T7176]  ? __pfx_task_work_run+0x10/0x10
[  165.224075][ T7176]  exit_to_user_mode_loop+0x100/0x4b0
[  165.224091][ T7176]  ? rcu_is_watching+0x12/0xc0
[  165.224114][ T7176]  do_syscall_64+0x4fe/0xf80
[  165.224130][ T7176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.224141][ T7176] RIP: 0033:0x7f50ce79aeb9
[  165.224150][ T7176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.224160][ T7176] RSP: 002b:00007f50cc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  165.224170][ T7176] RAX: ffffffffffffffff RBX: 00007f50cea16090 RCX: 00007f50ce79aeb9
[  165.224177][ T7176] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[  165.224183][ T7176] RBP: 00007f50cc9f6090 R08: 0000000000000000 R09: 0000000000000000
[  165.224192][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.224201][ T7176] R13: 00007f50cea16128 R14: 00007f50cea16090 R15: 00007fffc6328778
[  165.224224][ T7176]  </TASK>
[  165.224634][ T7176] ptrace attach of "(null)"[5815] was attempted by "3       �\x07            �
            ���������                     �       
       �      ��������
                             B<                                                     /dev/dri/card#                                                                                                                                                                                                                                                  �   
�F��   f�! �g�f�  � �ml/�  �2f�� 0f� ��f8�o ��                                                                      /dev/kvm                                                                                                                                                                                                                                                        /dev/cpu/#/msr                                                          �
      :                                                       
[  165.458568][ T5914] ttusbir 3-1:7.0: cannot find expected altsetting
[  165.628532][ T7178] openvswitch: netlink: Key type 3303 is out of range max 32
[  165.640141][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'.
[  165.807487][ T7135] loop9: detected capacity change from 0 to 7
[  165.843820][ T7135] buffer_io_error: 9 callbacks suppressed
[  165.843856][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  165.857949][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  165.950629][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  165.961602][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  165.985681][ T7179] netlink: 56 bytes leftover after parsing attributes in process `syz.3.311'.
[  166.046475][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.059714][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.127187][   T30] audit: type=1400 audit(1770239288.874:461): avc:  denied  { write } for  pid=7182 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  166.152867][ T7186] FAULT_INJECTION: forcing a failure.
[  166.152867][ T7186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.176571][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.185749][ T7135] ldm_validate_partition_table(): Disk read failed.
[  166.196565][ T5914] usb 3-1: USB disconnect, device number 13
[  166.258149][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.266324][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.275497][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.2.315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.275515][ T7186] Tainted: [L]=SOFTLOCKUP
[  166.275519][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  166.275525][ T7186] Call Trace:
[  166.275529][ T7186]  <TASK>
[  166.275533][ T7186]  dump_stack_lvl+0x100/0x190
[  166.275555][ T7186]  should_fail_ex.cold+0x5/0xa
[  166.275567][ T7186]  _copy_from_iter+0x1f4/0x1690
[  166.275583][ T7186]  ? __alloc_skb+0x220/0x410
[  166.275597][ T7186]  ? __alloc_skb+0x35d/0x410
[  166.275609][ T7186]  ? __pfx__copy_from_iter+0x10/0x10
[  166.275623][ T7186]  ? netlink_autobind.isra.0+0x70/0x370
[  166.275644][ T7186]  netlink_sendmsg+0x808/0xda0
[  166.275662][ T7186]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.275677][ T7186]  ? __might_fault+0x10/0x140
[  166.275693][ T7186]  ____sys_sendmsg+0xa54/0xc30
[  166.275705][ T7186]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.275722][ T7186]  ___sys_sendmsg+0x190/0x1e0
[  166.275733][ T7186]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.275750][ T7186]  ? find_held_lock+0x2b/0x80
[  166.275773][ T7186]  __sys_sendmsg+0x170/0x220
[  166.275787][ T7186]  ? __pfx___sys_sendmsg+0x10/0x10
[  166.275810][ T7186]  do_syscall_64+0xc9/0xf80
[  166.275823][ T7186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.275834][ T7186] RIP: 0033:0x7f0c5c39aeb9
[  166.275843][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.275853][ T7186] RSP: 002b:00007f0c5d338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.275864][ T7186] RAX: ffffffffffffffda RBX: 00007f0c5c615fa0 RCX: 00007f0c5c39aeb9
[  166.275872][ T7186] RDX: 0000000000008010 RSI: 0000200000002640 RDI: 0000000000000003
[  166.275882][ T7186] RBP: 00007f0c5d338090 R08: 0000000000000000 R09: 0000000000000000
[  166.275891][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.275900][ T7186] R13: 00007f0c5c616038 R14: 00007f0c5c615fa0 R15: 00007fff60afed98
[  166.275922][ T7186]  </TASK>
[  166.276037][ T7135] Buffer I/O error on dev loop9, logical block 0, async page read
[  166.506889][ T7135] Dev loop9: unable to read RDB block 0
[  166.512868][ T7135]  loop9: unable to read partition table
[  166.518900][ T7135] loop9: partition table beyond EOD, truncated
[  166.525133][ T7135] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  166.525133][ T7135] 
) failed (rc=-5)
[  166.762141][ T7188] gfs2: error -5 reading superblock
[  167.097221][ T7196] hub 9-0:1.0: USB hub found
[  167.103087][ T7196] hub 9-0:1.0: 1 port detected
[  167.644902][ T7199] hub 9-0:1.0: USB hub found
[  167.650713][ T7199] hub 9-0:1.0: 1 port detected
[  168.189097][ T7198] ptrace attach of "./syz-executor exec"[5815] was attempted by "3       �\x07            �
            ���������                     �       
       �      ��������
                             B<                                                     /dev/dri/card#                                                                                                                                                                                                                                                  �   
�F��   f�! �g�f�  � �ml/�  �2f�� 0f� ��f8�o ��                                                                      /dev/kvm                                                                                                                                                                                                                                                        /dev/cpu/#/msr                                                          �
      :                                          
[  168.221583][   T24] libceph: connect (1)[c::]:6789 error -101
[  168.578388][ T7201] ceph: No mds server is up or the cluster is laggy
[  168.593256][ T5853] usb 5-1: USB disconnect, device number 13
[  168.604855][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  168.642315][ T5853] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  168.757092][  T894] IPVS: starting estimator thread 0...
[  168.940617][ T7215] IPVS: using max 42 ests per chain, 100800 per kthread
[  169.441233][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'.
[  169.450266][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'.
[  169.878047][   T30] audit: type=1400 audit(1770239292.564:462): avc:  denied  { ioctl } for  pid=7216 comm="syz.1.325" path="socket:[14279]" dev="sockfs" ino=14279 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.175268][ T7237] FAULT_INJECTION: forcing a failure.
[  170.175268][ T7237] name failslab, interval 1, probability 0, space 0, times 0
[  170.198058][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.1.329 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.198087][ T7237] Tainted: [L]=SOFTLOCKUP
[  170.198093][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  170.198103][ T7237] Call Trace:
[  170.198109][ T7237]  <TASK>
[  170.198115][ T7237]  dump_stack_lvl+0x100/0x190
[  170.198142][ T7237]  should_fail_ex.cold+0x5/0xa
[  170.198162][ T7237]  should_failslab+0xc2/0x120
[  170.198186][ T7237]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  170.198207][ T7237]  ? find_held_lock+0x2b/0x80
[  170.198234][ T7237]  ? copy_process+0x48b/0x7890
[  170.198265][ T7237]  ? copy_process+0x48b/0x7890
[  170.198287][ T7237]  copy_process+0x48b/0x7890
[  170.198323][ T7237]  ? __pfx_copy_process+0x10/0x10
[  170.198349][ T7237]  ? lockdep_init_map_type+0x5c/0x250
[  170.198366][ T7237]  ? lockdep_init_map_type+0x5c/0x250
[  170.198384][ T7237]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  170.198404][ T7237]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  170.198430][ T7237]  vhost_task_create+0x1db/0x370
[  170.198451][ T7237]  ? __pfx_vhost_task_create+0x10/0x10
[  170.198469][ T7237]  ? register_lock_class+0x40/0x560
[  170.198492][ T7237]  ? __pfx_vhost_task_fn+0x10/0x10
[  170.198513][ T7237]  ? __pfx___mutex_lock+0x10/0x10
[  170.198537][ T7237]  kvm_mmu_post_init_vm+0x1b3/0x370
[  170.198560][ T7237]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[  170.198581][ T7237]  ? kvm_vcpu_ioctl+0x150f/0x16d0
[  170.198604][ T7237]  kvm_vcpu_ioctl+0x730/0x16d0
[  170.198624][ T7237]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  170.198642][ T7237]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  170.198670][ T7237]  ? do_vfs_ioctl+0x226/0x13e0
[  170.198687][ T7237]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  170.198700][ T7237]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  170.198722][ T7237]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  170.198755][ T7237]  ? selinux_file_ioctl+0x139/0x290
[  170.198771][ T7237]  ? selinux_file_ioctl+0xb4/0x290
[  170.198791][ T7237]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  170.198810][ T7237]  __x64_sys_ioctl+0x18e/0x210
[  170.198829][ T7237]  do_syscall_64+0xc9/0xf80
[  170.198851][ T7237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.198868][ T7237] RIP: 0033:0x7f50ce79aeb9
[  170.198882][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.198898][ T7237] RSP: 002b:00007f50cf576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.198915][ T7237] RAX: ffffffffffffffda RBX: 00007f50cea15fa0 RCX: 00007f50ce79aeb9
[  170.198926][ T7237] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  170.198936][ T7237] RBP: 00007f50cf576090 R08: 0000000000000000 R09: 0000000000000000
[  170.198946][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.198956][ T7237] R13: 00007f50cea16038 R14: 00007f50cea15fa0 R15: 00007fffc6328778
[  170.198979][ T7237]  </TASK>
[  170.491916][ T5853] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  170.533319][   T30] audit: type=1400 audit(1770239293.344:463): avc:  denied  { ioctl } for  pid=7239 comm="syz.0.330" path="socket:[14545]" dev="sockfs" ino=14545 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  170.794512][ T7247] hub 9-0:1.0: USB hub found
[  170.800075][ T7247] hub 9-0:1.0: 1 port detected
[  171.024026][ T5853] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  171.051789][ T5853] usb 4-1: config 0 has no interface number 0
[  171.301891][ T5853] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.328615][ T5853] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.350717][  T894] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  171.360194][ T5853] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  171.378936][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.403972][ T5853] usb 4-1: config 0 descriptor??
[  171.533047][  T894] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  171.544708][  T894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.557118][  T894] usb 1-1: config 0 has no interface number 0
[  171.564040][  T894] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  171.574383][  T894] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.593284][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  171.618402][  T894] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  171.629469][  T894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.637740][  T894] usb 1-1: Product: syz
[  171.642609][  T894] usb 1-1: Manufacturer: syz
[  171.647201][  T894] usb 1-1: SerialNumber: syz
[  171.661058][  T894] usb 1-1: config 0 descriptor??
[  171.762105][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  171.780664][ T5914] usb 2-1: config 0 has no interface number 0
[  171.800748][ T5914] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  171.814284][ T5914] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  171.823757][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.855961][ T5914] usb 2-1: config 0 descriptor??
[  171.871258][ T5914] usbhid 2-1:0.1: couldn't find an input interrupt endpoint
[  171.899622][ T5853] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  171.917084][ T5853] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  171.946798][ T5853] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  172.003887][ T5853] hid_prodikeys: hid-prodikeys: failed to find output report
[  172.003887][ T5853] 
[  172.103612][ T5853] usb 4-1: USB disconnect, device number 8
[  172.374750][ T7270] hub 9-0:1.0: USB hub found
[  172.380046][ T7270] hub 9-0:1.0: 1 port detected
[  172.863563][ T7275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.337'.
[  173.138400][   T30] audit: type=1400 audit(1770239295.954:464): avc:  denied  { ioctl } for  pid=7276 comm="syz.4.338" path="socket:[15374]" dev="sockfs" ino=15374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  173.208705][  T894] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71
[  173.248418][  T894] usb 1-1: USB disconnect, device number 10
[  173.336793][   T30] audit: type=1326 audit(1770239296.144:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.742558][   T30] audit: type=1326 audit(1770239296.144:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.767763][   T30] audit: type=1326 audit(1770239296.154:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.793290][   T30] audit: type=1326 audit(1770239296.154:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.801252][ T7286] netlink: 'syz.0.340': attribute type 4 has an invalid length.
[  173.816957][   T30] audit: type=1326 audit(1770239296.154:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.851145][   T30] audit: type=1326 audit(1770239296.154:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.909368][   T30] audit: type=1326 audit(1770239296.154:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6459aeb9 code=0x7ffc0000
[  173.988519][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[  174.426863][ T5915] usb 2-1: USB disconnect, device number 10
[  174.640515][ T7302] hub 9-0:1.0: USB hub found
[  174.646065][ T7302] hub 9-0:1.0: 1 port detected
[  176.221529][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  176.221566][   T30] audit: type=1400 audit(1770239299.034:479): avc:  denied  { setopt } for  pid=7315 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.467697][   T30] audit: type=1400 audit(1770239299.294:480): avc:  denied  { ioctl } for  pid=7320 comm="syz.4.350" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  177.145937][   T30] audit: type=1400 audit(1770239299.974:481): avc:  denied  { block_suspend } for  pid=7323 comm="syz.1.351" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  177.395935][   T30] audit: type=1400 audit(1770239300.224:482): avc:  denied  { setopt } for  pid=7330 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  177.415548][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  177.656479][ T7338] lo speed is unknown, defaulting to 1000
[  177.666161][ T7338] lo speed is unknown, defaulting to 1000
[  177.677064][ T7338] lo speed is unknown, defaulting to 1000
[  177.698467][ T7338] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  177.740987][ T7338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  177.869697][ T7338] lo speed is unknown, defaulting to 1000
[  177.884176][ T7338] lo speed is unknown, defaulting to 1000
[  177.898192][ T7338] lo speed is unknown, defaulting to 1000
[  177.911390][ T7338] lo speed is unknown, defaulting to 1000
[  177.924085][ T7338] lo speed is unknown, defaulting to 1000
[  178.014328][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.042870][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  178.093011][ T5914] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  178.145724][ T5914] usb 2-1: Manufacturer: syz
[  178.156223][ T5914] usb 2-1: config 0 descriptor??
[  180.517468][   T30] audit: type=1400 audit(1770239303.294:483): avc:  denied  { append } for  pid=7349 comm="syz.4.356" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  180.691544][ T7359] openvswitch: netlink: Key type 3303 is out of range max 32
[  180.733492][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'.
[  180.904340][   T30] audit: type=1400 audit(1770239303.294:484): avc:  denied  { map } for  pid=7349 comm="syz.4.356" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  180.938516][ T5860] usb 2-1: USB disconnect, device number 11
[  181.197063][ T7365] hub 9-0:1.0: USB hub found
[  181.203092][ T7365] hub 9-0:1.0: 1 port detected
[  181.571069][ T7367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  181.577748][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  181.593864][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  181.638939][ T7367] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13)
[  181.645533][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  181.654136][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  181.691656][ T7367] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15)
[  181.698289][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  181.856424][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  181.896280][   T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  181.934899][ T7380] fuse: Bad value for 'fd'
[  181.941905][ T7380] tmpfs: Bad value for 'nr_blocks'
[  181.966213][ T7379] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18)
[  181.972813][ T7379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.002647][ T7379] vhci_hcd vhci_hcd.0: Device attached
[  182.008411][ T7382] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21)
[  182.015016][ T7382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.121812][ T7393] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.142428][   T30] audit: type=1400 audit(1770239304.964:485): avc:  denied  { write } for  pid=7364 comm="syz.2.360" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  182.143607][ T7382] vhci_hcd vhci_hcd.0: Device attached
[  182.163972][ T7367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24)
[  182.175186][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  182.637962][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  182.641895][ T7379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.660041][ T7367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.670751][ T7367] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29)
[  182.677360][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.687518][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  182.696261][ T7367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.710645][ T7384] vhci_hcd: connection closed
[  182.712568][ T7394] vhci_hcd: connection closed
[  182.714527][ T7383] vhci_hcd: connection closed
[  182.723610][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  182.733598][ T7397] vhci_hcd: connection closed
[  182.735564][ T7375] vhci_hcd: connection closed
[  182.736014][ T7368] vhci_hcd: connection reset by peer
[  182.750804][ T7372] vhci_hcd: connection closed
[  182.756832][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.129081][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  183.230513][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  183.235741][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.283288][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  183.299330][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  183.314816][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.378689][ T7406] openvswitch: netlink: Key type 3303 is out of range max 32
[  183.404441][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'.
[  183.486198][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  183.574409][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  183.611477][   T30] audit: type=1400 audit(1770239306.334:486): avc:  denied  { ioctl } for  pid=7404 comm="syz.0.367" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  183.642086][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.647641][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  183.668849][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  183.678270][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.724347][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  183.735544][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  183.762217][ T5913] vhci_hcd vhci_hcd.2: release socket
[  183.775363][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  184.193909][   T30] audit: type=1400 audit(1770239307.024:487): avc:  denied  { map } for  pid=7409 comm="syz.0.368" path="socket:[15699]" dev="sockfs" ino=15699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  184.400700][ T5913] vhci_hcd vhci_hcd.2: stop threads
[  184.638752][ T5913] vhci_hcd vhci_hcd.2: release socket
[  184.664753][ T5913] vhci_hcd vhci_hcd.2: disconnect device
[  185.034090][   T30] audit: type=1326 audit(1770239307.864:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.0.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5aef99aeb9 code=0x0
[  185.133074][ T5860] IPVS: starting estimator thread 0...
[  185.282343][ T7426] IPVS: using max 47 ests per chain, 112800 per kthread
[  185.871799][ T7435] hub 9-0:1.0: USB hub found
[  185.970703][ T7435] hub 9-0:1.0: 1 port detected
[  186.053743][   T30] audit: type=1400 audit(1770239308.884:489): avc:  denied  { getopt } for  pid=7429 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  186.379410][ T7442] batman_adv: batadv0: Adding interface: dummy0
[  186.403487][ T7442] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.491118][   T30] audit: type=1400 audit(1770239309.324:490): avc:  denied  { ioctl } for  pid=7441 comm="syz.0.376" path="socket:[15754]" dev="sockfs" ino=15754 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  186.529466][ T7442] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  186.840551][  T894] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  186.865184][ T7456] overlayfs: conflicting options: nfs_export=on,index=off
[  186.951361][   T30] audit: type=1400 audit(1770239309.784:491): avc:  denied  { write } for  pid=7457 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  187.054492][  T894] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  187.080509][  T894] usb 3-1: config 0 has no interface number 0
[  187.123101][   T30] audit: type=1400 audit(1770239309.784:492): avc:  denied  { nlmsg_write } for  pid=7457 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  187.150979][  T894] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.173110][  T894] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.210725][   T24] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  187.232359][  T894] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  187.251227][  T894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.275837][  T894] usb 3-1: config 0 descriptor??
[  187.744925][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.760100][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.773167][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.780913][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.788775][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.796654][ T7469] netlink: 'syz.0.383': attribute type 12 has an invalid length.
[  187.805035][ T7469] netlink: 'syz.0.383': attribute type 29 has an invalid length.
[  187.813269][ T7469] netlink: 148 bytes leftover after parsing attributes in process `syz.0.383'.
[  187.822324][ T7469] netlink: 59 bytes leftover after parsing attributes in process `syz.0.383'.
[  187.836518][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.844642][  T894] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0
[  187.865030][ T7471] vxfs: WRONG superblock magic 00000000 at 1
[  187.872366][ T7471] vxfs: WRONG superblock magic 00000000 at 8
[  187.878383][ T7471] vxfs: can't find superblock.
[  187.989319][  T894] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1
[  188.134657][  T894] hid_prodikeys: hid-prodikeys: failed to find output report
[  188.134657][  T894] 
[  188.353203][  T894] usb 3-1: USB disconnect, device number 14
[  188.354651][ T7465] block device autoloading is deprecated and will be removed.
[  188.810570][ T7460] lo speed is unknown, defaulting to 1000
[  188.826585][   T30] audit: type=1400 audit(1770239311.654:493): avc:  denied  { name_bind } for  pid=7482 comm="syz.1.387" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  188.965496][ T5915] usb usb38-port1: attempt power cycle
[  189.574659][ T7492] hub 9-0:1.0: USB hub found
[  189.579526][ T7492] hub 9-0:1.0: 1 port detected
[  189.841261][ T5915] usb usb38-port1: unable to enumerate USB device
[  191.585422][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  191.759991][ T5915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  191.787792][ T5915] usb 2-1: config 0 has no interface number 0
[  191.801523][ T5915] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.818280][ T5915] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  191.844249][ T7517] mmap: syz.4.395 (7517) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  191.914874][   T30] audit: type=1400 audit(1770239314.684:494): avc:  denied  { accept } for  pid=7512 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  191.934588][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.954381][ T5915] usb 2-1: config 0 descriptor??
[  191.960798][  T894] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.981931][ T5915] usbhid 2-1:0.1: couldn't find an input interrupt endpoint
[  192.158840][  T894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.182846][  T894] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  192.226971][  T894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.278432][  T894] usb 1-1: config 0 descriptor??
[  192.295810][  T894] pwc: Askey VC010 type 2 USB webcam detected.
[  192.696674][ T7521] loop9: detected capacity change from 0 to 7
[  192.732351][ T5795] buffer_io_error: 9 callbacks suppressed
[  192.732366][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.746262][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.761072][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.771416][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.794033][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.812956][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.822746][  T894] pwc: recv_control_msg error -32 req 02 val 2b00
[  192.830429][ T7514] netlink: 'syz.0.394': attribute type 10 has an invalid length.
[  192.843208][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.858373][ T7514] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  192.881589][  T894] pwc: recv_control_msg error -32 req 02 val 2700
[  192.881659][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.913596][  T894] pwc: recv_control_msg error -32 req 02 val 2c00
[  192.915722][ T5795] ldm_validate_partition_table(): Disk read failed.
[  192.947708][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.967419][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.988471][ T5795] Buffer I/O error on dev loop9, logical block 0, async page read
[  193.006283][ T5795] Dev loop9: unable to read RDB block 0
[  193.018534][ T5795]  loop9: unable to read partition table
[  193.055225][ T5795] loop9: partition table beyond EOD, truncated
[  193.082112][ T7521] ldm_validate_partition_table(): Disk read failed.
[  193.120650][ T7521] Dev loop9: unable to read RDB block 0
[  193.152234][ T7521]  loop9: unable to read partition table
[  193.181219][ T7521] loop9: partition table beyond EOD, truncated
[  193.200815][ T7521] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  193.200815][ T7521] 
) failed (rc=-5)
[  193.310556][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  193.460514][ T5860] usb 5-1: Using ep0 maxpacket: 8
[  193.469702][ T5860] usb 5-1: config 3 has an invalid interface number: 116 but max is 0
[  193.477970][ T5860] usb 5-1: config 3 has no interface number 0
[  193.485350][ T5860] usb 5-1: config 3 interface 116 has no altsetting 0
[  193.503173][ T5860] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=26.6d
[  193.513378][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.534964][ T5860] usb 5-1: Product: syz
[  193.543806][ T5860] usb 5-1: Manufacturer: syz
[  193.554611][ T5860] usb 5-1: SerialNumber: syz
[  193.827624][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  193.834056][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  193.888116][ T5860] viperboard 5-1:3.116: version 0.00 found at bus 005 address 014
[  193.906081][ T5860] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  193.917767][ T5860] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  193.950592][ T5860] usb 5-1: USB disconnect, device number 14
[  194.006342][ T7534] vxfs: WRONG superblock magic 00000000 at 1
[  194.012862][ T7534] vxfs: WRONG superblock magic 00000000 at 8
[  194.018877][ T7534] vxfs: can't find superblock.
[  194.444969][ T5914] usb 2-1: USB disconnect, device number 12
[  194.679175][  T894] pwc: recv_control_msg error -71 req 04 val 1300
[  194.747293][  T894] pwc: recv_control_msg error -71 req 04 val 1400
[  194.769930][  T894] pwc: recv_control_msg error -71 req 02 val 2000
[  194.797662][  T894] pwc: recv_control_msg error -71 req 02 val 2100
[  194.912841][  T894] pwc: recv_control_msg error -71 req 04 val 1500
[  195.116477][  T894] pwc: recv_control_msg error -71 req 02 val 2500
[  195.136412][  T894] pwc: recv_control_msg error -71 req 02 val 2400
[  195.263649][   T30] audit: type=1400 audit(1770239317.974:495): avc:  denied  { connect } for  pid=7543 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  195.287496][  T894] pwc: recv_control_msg error -71 req 02 val 2600
[  195.344923][  T894] pwc: recv_control_msg error -71 req 02 val 2900
[  195.403514][  T894] pwc: recv_control_msg error -71 req 02 val 2800
[  195.414756][   T30] audit: type=1400 audit(1770239317.974:496): avc:  denied  { write } for  pid=7543 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  195.434670][  T894] pwc: recv_control_msg error -71 req 04 val 1100
[  195.441614][  T894] pwc: recv_control_msg error -71 req 04 val 1200
[  195.620348][ T7560] netlink: 56 bytes leftover after parsing attributes in process `syz.0.406'.
[  195.763888][  T894] pwc: Registered as video103.
[  195.822218][  T894] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  195.952588][   T30] audit: type=1400 audit(1770239318.784:497): avc:  denied  { read } for  pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.977772][  T894] usb 1-1: USB disconnect, device number 11
[  196.027048][   T30] audit: type=1400 audit(1770239318.784:498): avc:  denied  { open } for  pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  196.076611][   T30] audit: type=1400 audit(1770239318.784:499): avc:  denied  { ioctl } for  pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  196.540375][ T7576] FAULT_INJECTION: forcing a failure.
[  196.540375][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.572277][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.2.409 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.572305][ T7576] Tainted: [L]=SOFTLOCKUP
[  196.572311][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  196.572320][ T7576] Call Trace:
[  196.572325][ T7576]  <TASK>
[  196.572331][ T7576]  dump_stack_lvl+0x100/0x190
[  196.572360][ T7576]  should_fail_ex.cold+0x5/0xa
[  196.572378][ T7576]  _copy_to_user+0x32/0xd0
[  196.572404][ T7576]  simple_read_from_buffer+0xcb/0x170
[  196.572427][ T7576]  proc_fail_nth_read+0x1af/0x230
[  196.572453][ T7576]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  196.572477][ T7576]  ? rw_verify_area+0xce/0x6d0
[  196.572495][ T7576]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  196.572517][ T7576]  vfs_read+0x1e4/0xb30
[  196.572540][ T7576]  ? __pfx_vfs_read+0x10/0x10
[  196.572557][ T7576]  ? find_held_lock+0x2b/0x80
[  196.572582][ T7576]  ? __fget_files+0x215/0x3d0
[  196.572607][ T7576]  ? __fget_files+0x21f/0x3d0
[  196.572635][ T7576]  ksys_read+0x12a/0x250
[  196.572655][ T7576]  ? __pfx_ksys_read+0x10/0x10
[  196.572681][ T7576]  do_syscall_64+0xc9/0xf80
[  196.572705][ T7576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.572724][ T7576] RIP: 0033:0x7f0c5c35b78e
[  196.572738][ T7576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  196.572756][ T7576] RSP: 002b:00007f0c5d316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  196.572773][ T7576] RAX: ffffffffffffffda RBX: 00007f0c5d3176c0 RCX: 00007f0c5c35b78e
[  196.572785][ T7576] RDX: 000000000000000f RSI: 00007f0c5d3170a0 RDI: 0000000000000004
[  196.572796][ T7576] RBP: 00007f0c5d317090 R08: 0000000000000000 R09: 0000000000000000
[  196.572807][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.572817][ T7576] R13: 00007f0c5c616128 R14: 00007f0c5c616090 R15: 00007fff60afed98
[  196.572838][ T7576]  </TASK>
[  196.841689][ T7580] FAULT_INJECTION: forcing a failure.
[  196.841689][ T7580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.904417][   T30] audit: type=1400 audit(1770239319.734:500): avc:  denied  { create } for  pid=7586 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  196.930808][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.1.411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.930835][ T7580] Tainted: [L]=SOFTLOCKUP
[  196.930840][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  196.930849][ T7580] Call Trace:
[  196.930855][ T7580]  <TASK>
[  196.930861][ T7580]  dump_stack_lvl+0x100/0x190
[  196.930889][ T7580]  should_fail_ex.cold+0x5/0xa
[  196.930905][ T7580]  _copy_from_user+0x2e/0xd0
[  196.930924][ T7580]  copy_msghdr_from_user+0x9f/0x4f0
[  196.930940][ T7580]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  196.930963][ T7580]  ___sys_sendmsg+0x106/0x1e0
[  196.930978][ T7580]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.931003][ T7580]  ? find_held_lock+0x2b/0x80
[  196.931034][ T7580]  __sys_sendmsg+0x170/0x220
[  196.931052][ T7580]  ? __pfx___sys_sendmsg+0x10/0x10
[  196.931083][ T7580]  do_syscall_64+0xc9/0xf80
[  196.931100][ T7580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.931114][ T7580] RIP: 0033:0x7f50ce79aeb9
[  196.931127][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.931140][ T7580] RSP: 002b:00007f50cc9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.931154][ T7580] RAX: ffffffffffffffda RBX: 00007f50cea16090 RCX: 00007f50ce79aeb9
[  196.931163][ T7580] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  196.931171][ T7580] RBP: 00007f50cc9f6090 R08: 0000000000000000 R09: 0000000000000000
[  196.931179][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.931186][ T7580] R13: 00007f50cea16128 R14: 00007f50cea16090 R15: 00007fffc6328778
[  196.931205][ T7580]  </TASK>
[  197.642643][  T793] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  197.650346][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  197.882705][  T793] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  197.891667][  T793] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.903240][  T793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  197.921418][  T793] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.939383][  T793] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  197.956790][  T793] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  197.977768][ T7597] vxfs: WRONG superblock magic 00000000 at 1
[  197.984680][ T7597] vxfs: WRONG superblock magic 00000000 at 8
[  197.991087][ T7597] vxfs: can't find superblock.
[  198.030929][  T793] usb 5-1: Product: syz
[  198.036602][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  198.047909][   T24] usb 1-1: config 0 has no interface number 0
[  198.056575][  T793] usb 5-1: Manufacturer: syz
[  198.282314][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.293811][   T24] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  198.304219][  T793] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  198.322349][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.359359][   T24] usb 1-1: config 0 descriptor??
[  198.402537][   T24] usbhid 1-1:0.1: couldn't find an input interrupt endpoint
[  198.632301][   T24] usb 5-1: USB disconnect, device number 15
[  198.781560][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.788876][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.335543][   T30] audit: type=1400 audit(1770239322.164:501): avc:  denied  { getopt } for  pid=7608 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  199.371274][ T7609] netlink: 'syz.1.418': attribute type 25 has an invalid length.
[  199.548435][ T7616] binder: 7612:7616 ioctl c0306201 0 returned -14
[  199.567701][ T7616] binder: BINDER_SET_CONTEXT_MGR already set
[  199.573999][ T7616] binder: 7612:7616 ioctl 4018620d 200000000040 returned -16
[  200.640753][  T894] usb 1-1: USB disconnect, device number 12
[  200.882462][ T7629] syz_tun: entered allmulticast mode
[  200.903015][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'.
[  200.934535][   T30] audit: type=1400 audit(1770239323.764:502): avc:  denied  { map } for  pid=7625 comm=":])#%" path="socket:[15171]" dev="sockfs" ino=15171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  201.072933][ T7629] syz_tun (unregistering): left allmulticast mode
[  201.533247][   T30] audit: type=1400 audit(1770239323.764:503): avc:  denied  { accept } for  pid=7625 comm=":])#%" path="socket:[15171]" dev="sockfs" ino=15171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  201.594115][   T30] audit: type=1400 audit(1770239323.984:504): avc:  denied  { shutdown } for  pid=7631 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  202.057314][   T30] audit: type=1400 audit(1770239324.874:505): avc:  denied  { write } for  pid=7640 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  202.086503][ T7616] syz.4.420 (7616): drop_caches: 2
[  202.361210][ T7650] hub 9-0:1.0: USB hub found
[  202.368700][ T7650] hub 9-0:1.0: 1 port detected
[  202.823630][   T30] audit: type=1400 audit(1770239325.654:506): avc:  denied  { connect } for  pid=7652 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  202.920618][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  202.973918][ T7658] xt_l2tp: wrong L2TP version: 0
[  203.191327][ T7657] openvswitch: netlink: Key type 3303 is out of range max 32
[  203.209195][   T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  203.224182][   T30] audit: type=1400 audit(1770239325.674:507): avc:  denied  { setopt } for  pid=7652 comm="syz.2.431" laddr=172.20.20.10 lport=18770 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.258193][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.348357][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  203.375833][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.389394][   T30] audit: type=1400 audit(1770239325.674:508): avc:  denied  { write } for  pid=7652 comm="syz.2.431" path="socket:[15224]" dev="sockfs" ino=15224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.414294][   T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  203.466922][   T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  203.476235][   T24] usb 1-1: Product: syz
[  203.480410][   T24] usb 1-1: Manufacturer: syz
[  203.489264][   T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  204.514404][   T24] usb 1-1: USB disconnect, device number 13
[  204.544222][ T7670] team_slave_0: entered promiscuous mode
[  204.550073][ T7670] team_slave_1: entered promiscuous mode
[  204.596521][ T7670] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  204.651749][ T7674] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  204.771454][   T30] audit: type=1400 audit(1770239327.604:509): avc:  denied  { read } for  pid=7677 comm="syz.2.439" dev="sockfs" ino=16439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  204.797818][ T7678] netem: change failed
[  206.379394][  T793] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  206.551774][  T793] usb 3-1: device descriptor read/64, error -71
[  206.716215][ T7695] smc: removing ib device syz2
[  206.829656][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  206.837664][  T793] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  207.097168][  T793] usb 3-1: device descriptor read/64, error -71
[  207.110520][   T24] usb 1-1: Using ep0 maxpacket: 8
[  207.122104][   T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.132139][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  207.142245][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  207.152583][   T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.169327][   T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  207.178799][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.210720][  T793] usb usb3-port1: attempt power cycle
[  207.232801][ T7708] netlink: 'syz.3.438': attribute type 4 has an invalid length.
[  207.879802][   T24] usb 1-1: GET_CAPABILITIES returned 0
[  207.891763][   T24] usbtmc 1-1:16.0: can't read capabilities
[  207.942964][ T7710] program syz.3.448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.030867][  T793] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  208.072938][  T793] usb 3-1: device descriptor read/8, error -71
[  208.082844][ T7691] FAULT_INJECTION: forcing a failure.
[  208.082844][ T7691] name failslab, interval 1, probability 0, space 0, times 0
[  208.095536][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.0.443 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.095556][ T7691] Tainted: [L]=SOFTLOCKUP
[  208.095560][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  208.095566][ T7691] Call Trace:
[  208.095572][ T7691]  <TASK>
[  208.095577][ T7691]  dump_stack_lvl+0x100/0x190
[  208.095595][ T7691]  should_fail_ex.cold+0x5/0xa
[  208.095607][ T7691]  should_failslab+0xc2/0x120
[  208.095622][ T7691]  ? tomoyo_realpath_from_path+0xb6/0x690
[  208.095635][ T7691]  __kmalloc_noprof+0xf6/0x9c0
[  208.095648][ T7691]  ? tomoyo_realpath_from_path+0xb6/0x690
[  208.095660][ T7691]  tomoyo_realpath_from_path+0xb6/0x690
[  208.095678][ T7691]  tomoyo_path_number_perm+0x23c/0x580
[  208.095695][ T7691]  ? tomoyo_path_number_perm+0x22e/0x580
[  208.095718][ T7691]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  208.095748][ T7691]  ? find_held_lock+0x2b/0x80
[  208.095762][ T7691]  ? hook_file_ioctl_common+0x146/0x410
[  208.095776][ T7691]  ? __fget_files+0x215/0x3d0
[  208.095791][ T7691]  ? __fget_files+0x21f/0x3d0
[  208.095805][ T7691]  security_file_ioctl+0xd3/0x230
[  208.095818][ T7691]  __x64_sys_ioctl+0xb7/0x210
[  208.095830][ T7691]  do_syscall_64+0xc9/0xf80
[  208.095843][ T7691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.095854][ T7691] RIP: 0033:0x7f5aef99aeb9
[  208.095864][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.095874][ T7691] RSP: 002b:00007f5af0919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.095885][ T7691] RAX: ffffffffffffffda RBX: 00007f5aefc15fa0 RCX: 00007f5aef99aeb9
[  208.095892][ T7691] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000008
[  208.095898][ T7691] RBP: 00007f5af0919090 R08: 0000000000000000 R09: 0000000000000000
[  208.095904][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.095910][ T7691] R13: 00007f5aefc16038 R14: 00007f5aefc15fa0 R15: 00007ffe4fb99c08
[  208.095924][ T7691]  </TASK>
[  208.095929][ T7691] ERROR: Out of memory at tomoyo_realpath_from_path.
[  208.302197][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.311416][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.320502][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.329543][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.338578][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.347612][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.356908][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.365952][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.374989][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.384026][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.393069][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.402100][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.411134][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.420182][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  208.430708][    C0] ==================================================================
[  208.438779][    C0] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40
[  208.447275][    C0] Write of size 4 at addr ffff88803497b110 by task kworker/u8:0/12
[  208.455143][    C0] 
[  208.457468][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.457489][    C0] Tainted: [L]=SOFTLOCKUP
[  208.457494][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  208.457504][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  208.457524][    C0] Call Trace:
[  208.457531][    C0]  <IRQ>
[  208.457537][    C0]  dump_stack_lvl+0x100/0x190
[  208.457556][    C0]  print_report+0x156/0x4c9
[  208.457575][    C0]  ? __virt_addr_valid+0x81/0x620
[  208.457590][    C0]  ? __phys_addr+0xe8/0x180
[  208.457603][    C0]  ? usb_anchor_suspend_wakeups+0x28/0x40
[  208.457626][    C0]  kasan_report+0xdf/0x1a0
[  208.457646][    C0]  ? usb_anchor_suspend_wakeups+0x28/0x40
[  208.457669][    C0]  kasan_check_range+0x10f/0x1e0
[  208.457691][    C0]  usb_anchor_suspend_wakeups+0x28/0x40
[  208.457712][    C0]  __usb_hcd_giveback_urb+0x223/0x610
[  208.457733][    C0]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  208.457752][    C0]  dummy_timer+0xd85/0x3670
[  208.457776][    C0]  ? find_held_lock+0x2b/0x80
[  208.457798][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[  208.457814][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  208.457830][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  208.457846][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  208.457866][    C0]  ? mark_held_locks+0x40/0x70
[  208.457880][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  208.457895][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  208.457915][    C0]  __hrtimer_run_queues+0x516/0x990
[  208.457939][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  208.457956][    C0]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  208.457974][    C0]  hrtimer_run_softirq+0x17d/0x350
[  208.457991][    C0]  handle_softirqs+0x1ea/0x910
[  208.458013][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  208.458033][    C0]  ? __alloc_skb+0x35d/0x410
[  208.458050][    C0]  do_softirq+0xac/0xe0
[  208.458069][    C0]  </IRQ>
[  208.458073][    C0]  <TASK>
[  208.458078][    C0]  __local_bh_enable_ip+0xf8/0x120
[  208.458098][    C0]  __alloc_skb+0x381/0x410
[  208.458114][    C0]  ? __alloc_skb+0x35d/0x410
[  208.458130][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  208.458146][    C0]  ? do_raw_spin_lock+0x128/0x260
[  208.458163][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  208.458181][    C0]  nsim_dev_trap_report_work+0x2af/0xd10
[  208.458201][    C0]  process_one_work+0x9c2/0x1840
[  208.458221][    C0]  ? __pfx_process_one_work+0x10/0x10
[  208.458240][    C0]  ? assign_work+0x19c/0x250
[  208.458255][    C0]  worker_thread+0x5da/0xe40
[  208.458274][    C0]  ? kthread+0x17d/0x730
[  208.458288][    C0]  ? __pfx_worker_thread+0x10/0x10
[  208.458303][    C0]  kthread+0x3b3/0x730
[  208.458317][    C0]  ? __pfx_kthread+0x10/0x10
[  208.458331][    C0]  ? ret_from_fork+0x79/0xaf0
[  208.458347][    C0]  ? ret_from_fork+0x79/0xaf0
[  208.458362][    C0]  ? rcu_is_watching+0x12/0xc0
[  208.458381][    C0]  ? __pfx_kthread+0x10/0x10
[  208.458396][    C0]  ret_from_fork+0x754/0xaf0
[  208.458411][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  208.458427][    C0]  ? __switch_to+0x7b9/0x10c0
[  208.458446][    C0]  ? __pfx_kthread+0x10/0x10
[  208.458461][    C0]  ret_from_fork_asm+0x1a/0x30
[  208.458478][    C0]  </TASK>
[  208.458483][    C0] 
[  208.764081][    C0] Allocated by task 7691:
[  208.768394][    C0]  kasan_save_stack+0x30/0x50
[  208.773057][    C0]  kasan_save_track+0x14/0x30
[  208.777712][    C0]  __kasan_kmalloc+0xaa/0xb0
[  208.782281][    C0]  usbtmc_open+0xa9/0x950
[  208.786601][    C0]  usb_open+0x189/0x220
[  208.790739][    C0]  chrdev_open+0x234/0x6a0
[  208.795135][    C0]  do_dentry_open+0x73e/0x1570
[  208.799876][    C0]  vfs_open+0x82/0x3f0
[  208.803925][    C0]  path_openat+0x21dc/0x3120
[  208.808506][    C0]  do_filp_open+0x1f7/0x420
[  208.812989][    C0]  do_sys_openat2+0x12e/0x220
[  208.817646][    C0]  __x64_sys_openat+0x12d/0x210
[  208.822476][    C0]  do_syscall_64+0xc9/0xf80
[  208.826956][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.832824][    C0] 
[  208.835131][    C0] Freed by task 7691:
[  208.839082][    C0]  kasan_save_stack+0x30/0x50
[  208.843736][    C0]  kasan_save_track+0x14/0x30
[  208.848394][    C0]  kasan_save_free_info+0x3b/0x70
[  208.853401][    C0]  __kasan_slab_free+0x5f/0x80
[  208.858143][    C0]  kfree+0x1c7/0x690
[  208.862022][    C0]  usbtmc_release+0x271/0x380
[  208.866720][    C0]  __fput+0x3ff/0xb40
[  208.870702][    C0]  task_work_run+0x150/0x240
[  208.875276][    C0]  exit_to_user_mode_loop+0x100/0x4b0
[  208.880624][    C0]  do_syscall_64+0x4fe/0xf80
[  208.885191][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.891076][    C0] 
[  208.893380][    C0] The buggy address belongs to the object at ffff88803497b000
[  208.893380][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  208.907412][    C0] The buggy address is located 272 bytes inside of
[  208.907412][    C0]  freed 1024-byte region [ffff88803497b000, ffff88803497b400)
[  208.921270][    C0] 
[  208.923570][    C0] The buggy address belongs to the physical page:
[  208.929966][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34978
[  208.938714][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  208.947189][    C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  208.955145][    C0] page_type: f5(slab)
[  208.959105][    C0] raw: 00fff00000000040 ffff88813fe26dc0 0000000000000000 dead000000000001
[  208.967663][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  208.976228][    C0] head: 00fff00000000040 ffff88813fe26dc0 0000000000000000 dead000000000001
[  208.984874][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  208.993520][    C0] head: 00fff00000000003 ffffea0000d25e01 00000000ffffffff 00000000ffffffff
[  209.002169][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  209.010811][    C0] page dumped because: kasan: bad access detected
[  209.017193][    C0] page_owner tracks the page as allocated
[  209.022885][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6727, tgid 6721 (syz.1.194), ts 122679143732, free_ts 121753972214
[  209.042066][    C0]  post_alloc_hook+0x1e1/0x250
[  209.046811][    C0]  get_page_from_freelist+0xe3d/0x2e10
[  209.052246][    C0]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  209.058115][    C0]  alloc_pages_mpol+0x1fb/0x550
[  209.062943][    C0]  new_slab+0x2c4/0x440
[  209.067075][    C0]  ___slab_alloc+0xda3/0x1ca0
[  209.071724][    C0]  __slab_alloc.isra.0+0x63/0x110
[  209.076723][    C0]  __kmalloc_noprof+0x618/0x9c0
[  209.081547][    C0]  ieee802_11_parse_elems_full+0x177/0x3720
[  209.087416][    C0]  ieee80211_inform_bss+0x159/0x1150
[  209.092684][    C0]  cfg80211_inform_single_bss_data+0x898/0x1d40
[  209.098904][    C0]  cfg80211_inform_bss_data+0x230/0x39f0
[  209.104519][    C0]  cfg80211_inform_bss_frame_data+0x247/0x730
[  209.110565][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  209.116183][    C0]  ieee80211_scan_rx+0x4e6/0xb60
[  209.121114][    C0]  ieee80211_rx_list+0x1b20/0x2df0
[  209.126216][    C0] page last free pid 6696 tgid 6696 stack trace:
[  209.132521][    C0]  __free_frozen_pages+0x822/0x1130
[  209.137708][    C0]  qlist_free_all+0x47/0xe0
[  209.142190][    C0]  kasan_quarantine_reduce+0x1a0/0x1f0
[  209.147625][    C0]  __kasan_kmalloc+0x8a/0xb0
[  209.152194][    C0]  __kmalloc_node_track_caller_noprof+0x357/0x9d0
[  209.158587][    C0]  kmalloc_reserve+0xef/0x2c0
[  209.163247][    C0]  __alloc_skb+0x186/0x410
[  209.167643][    C0]  nfc_genl_device_removed+0x7e/0x300
[  209.173000][    C0]  nfc_unregister_rfkill+0x22/0x2b0
[  209.178179][    C0]  nci_unregister_device+0x3e/0x330
[  209.183361][    C0]  virtual_ncidev_close+0x4b/0xa0
[  209.188380][    C0]  __fput+0x3ff/0xb40
[  209.192367][    C0]  task_work_run+0x150/0x240
[  209.196953][    C0]  exit_to_user_mode_loop+0x100/0x4b0
[  209.202317][    C0]  do_syscall_64+0x4fe/0xf80
[  209.206897][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.212776][    C0] 
[  209.215082][    C0] Memory state around the buggy address:
[  209.220688][    C0]  ffff88803497b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.228724][    C0]  ffff88803497b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.236776][    C0] >ffff88803497b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.244812][    C0]                          ^
[  209.249376][    C0]  ffff88803497b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.257412][    C0]  ffff88803497b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.265445][    C0] ==================================================================
[  209.273480][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  209.280653][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.291482][    C0] Tainted: [L]=SOFTLOCKUP
[  209.295779][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  209.305812][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  209.312573][    C0] Call Trace:
[  209.315831][    C0]  <IRQ>
[  209.318652][    C0]  dump_stack_lvl+0x100/0x190
[  209.323317][    C0]  vpanic+0x20d/0x630
[  209.327276][    C0]  panic+0xd1/0xd1
[  209.330971][    C0]  ? __pfx_panic+0x10/0x10
[  209.335366][    C0]  ? end_report.part.0+0x23/0x90
[  209.340286][    C0]  ? rcu_is_watching+0x12/0xc0
[  209.345032][    C0]  ? end_report.part.0+0x23/0x90
[  209.349953][    C0]  ? check_panic_on_warn+0x1f/0x90
[  209.355045][    C0]  check_panic_on_warn.cold+0x19/0x34
[  209.360396][    C0]  end_report.part.0+0x3a/0x90
[  209.365141][    C0]  kasan_report.cold+0xe/0x18
[  209.369801][    C0]  ? usb_anchor_suspend_wakeups+0x28/0x40
[  209.375509][    C0]  kasan_check_range+0x10f/0x1e0
[  209.380436][    C0]  usb_anchor_suspend_wakeups+0x28/0x40
[  209.385973][    C0]  __usb_hcd_giveback_urb+0x223/0x610
[  209.391329][    C0]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  209.396522][    C0]  dummy_timer+0xd85/0x3670
[  209.401024][    C0]  ? find_held_lock+0x2b/0x80
[  209.405709][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[  209.411347][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  209.417141][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  209.423102][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  209.428028][    C0]  ? mark_held_locks+0x40/0x70
[  209.432782][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  209.438566][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  209.443488][    C0]  __hrtimer_run_queues+0x516/0x990
[  209.448675][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  209.454377][    C0]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  209.460429][    C0]  hrtimer_run_softirq+0x17d/0x350
[  209.465528][    C0]  handle_softirqs+0x1ea/0x910
[  209.470276][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  209.475544][    C0]  ? __alloc_skb+0x35d/0x410
[  209.480112][    C0]  do_softirq+0xac/0xe0
[  209.484249][    C0]  </IRQ>
[  209.487159][    C0]  <TASK>
[  209.490067][    C0]  __local_bh_enable_ip+0xf8/0x120
[  209.495161][    C0]  __alloc_skb+0x381/0x410
[  209.499558][    C0]  ? __alloc_skb+0x35d/0x410
[  209.504128][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  209.509043][    C0]  ? do_raw_spin_lock+0x128/0x260
[  209.514046][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  209.519399][    C0]  nsim_dev_trap_report_work+0x2af/0xd10
[  209.525015][    C0]  process_one_work+0x9c2/0x1840
[  209.529936][    C0]  ? __pfx_process_one_work+0x10/0x10
[  209.535295][    C0]  ? assign_work+0x19c/0x250
[  209.539862][    C0]  worker_thread+0x5da/0xe40
[  209.544436][    C0]  ? kthread+0x17d/0x730
[  209.548656][    C0]  ? __pfx_worker_thread+0x10/0x10
[  209.553751][    C0]  kthread+0x3b3/0x730
[  209.557799][    C0]  ? __pfx_kthread+0x10/0x10
[  209.562365][    C0]  ? ret_from_fork+0x79/0xaf0
[  209.567024][    C0]  ? ret_from_fork+0x79/0xaf0
[  209.571683][    C0]  ? rcu_is_watching+0x12/0xc0
[  209.576429][    C0]  ? __pfx_kthread+0x10/0x10
[  209.580999][    C0]  ret_from_fork+0x754/0xaf0
[  209.585568][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  209.590671][    C0]  ? __switch_to+0x7b9/0x10c0
[  209.595331][    C0]  ? __pfx_kthread+0x10/0x10
[  209.599899][    C0]  ret_from_fork_asm+0x1a/0x30
[  209.604645][    C0]  </TASK>
[  209.607917][    C0] Kernel Offset: disabled
[  209.612213][    C0] Rebooting in 86400 seconds..