last executing test programs:

9.545879096s ago: executing program 1 (id=641):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5b", 0x76}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8", 0x65}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)}, {0x0}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.957426277s ago: executing program 1 (id=646):
syz_io_uring_setup(0x4b6, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="660f382a018fc978d1ecb9800000c00f3235010000000f3066470f3a42910068000057b9280b00000f3266b80e008ec8360f01c9c4a17c2b6000c481bddbb900000100b8010000000f01c1", 0x4b}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@delqdisc={0x24, 0x25, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0x8, 0x10}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@delqdisc={0x24, 0x25, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0x8, 0x10}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210026bd7060a12a00"/18, @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x80) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210026bd7060a12a00"/18, @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x80)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async)
r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="494d495820274d617374657220436170747572652c651fab30303030303030303030303030"], 0x2b)
close(r9)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r9, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000c0a010100000000000000000a000900010073797a31e1000000200003800c00008008000340000000020c000080080003400000000004000080140000001100010000000000000000000100000a00"/116], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r8, r8, 0x0)

8.890941521s ago: executing program 2 (id=647):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000012000000000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

8.735890026s ago: executing program 2 (id=648):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000060000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

8.69220693s ago: executing program 1 (id=649):
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)=0x9, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080"], 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@dev, 0x0, 0x1000, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x7)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f0000000040))

8.626843992s ago: executing program 2 (id=650):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)
sendto(r0, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae", 0xb, 0x4044094, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @random="a732812b02f9", {0x4, 0x7}}, 0x840, 0x1b, @default, @void, @void, [{0xdd, 0x84, "77617830709175db21317efa77b142475fa79bb4a51c11eb0e3dd8ac787225cfb3db87b976520c2efd64436d70e627e85ee52b6d986d51012e573467f9f07aea21ce0946ab2d06c06c8bb5d4d03d977206ef900cf2fbd43d61810e4fe63c12646619ae598da13029ce4cd711d2bbced7b9a4579250f42ae9d7393a6ec4b8a2cd82ebbb0f"}]}, 0xa4)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20)

7.458267593s ago: executing program 1 (id=653):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xe68}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_open_dev$loop(0x0, 0x10, 0x202a80)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x97ffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}})

7.45743302s ago: executing program 4 (id=654):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@metacopy_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x200, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)

6.652241219s ago: executing program 2 (id=658):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x60a03, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x46a840)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x800, 0x1070bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0x6}, {0x6be46d9451070b01, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48808)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x6a856000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$xdp(0x2c, 0x3, 0x0)
fsopen(0x0, 0x0)
open(0x0, 0x143142, 0x80)
openat(0xffffffffffffffff, 0x0, 0x1c1840, 0x140)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000440)=0x10)

6.620788549s ago: executing program 0 (id=659):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x14, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x4000000}, 0x8080)

6.48259679s ago: executing program 1 (id=660):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xf, 0x1, @thr={0x0, 0x0}})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500240335a084c0595006aa50102030109021b00010102d00d0904"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="370700a200b078d74d00"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x7, 0x1ff, 0x6, 0xffe0, 0xfffd, 0x100, 0x4, 0x6, 0x3, 0x6, 0x3, 0x5}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x57e5}, 0x0, 0x0, 0x0})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

6.359300296s ago: executing program 4 (id=661):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0xfffffffffffffffd, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
close(0x3)
r1 = socket(0x28, 0x5, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040), 0x4)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
close(r2)
socket$l2tp(0x2, 0x2, 0x73)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480), 0x248100, 0x0)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

6.339731203s ago: executing program 0 (id=662):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgid(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x380a, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000)
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x8840}, 0x20004880)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r7=>0x0, 0x0, &(0x7f0000000000))
syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x22}, @ioring_restriction_sqe_op={0x1, 0xe}], 0x2)
r8 = socket(0xa, 0x2, 0x100)
setsockopt$inet_int(r8, 0x0, 0xb, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)

6.014437484s ago: executing program 4 (id=663):
pipe(0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012001, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$kcm(0x2, 0x4, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x24000045, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @empty, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000100)="3f476e3825e2714b2f5789bd793801d1efccb9009508c6f68c33147f809f858f1c69ceae1e8b660785c9528730d01599cf20594440a1db340406f1127e0e87aee3d2a0e8ed6ac65a3e12229971e46b28029c1b31e702981ac673ff46851766b1affe7f059e2b58d1f9", 0x69}, {&(0x7f0000000200)="6d102f2e1c5f5723793b2d90bba41793c43401369c6e18602714f7226e5700887b60b5dac6c8dc8f75def03850ac0a056c87434aca7591bcbea3e9c289d3d92ea871b8111224fe6112657280c8848f50cd63491b5435d9b854b28f24a0cb77ad06d839fff9d44a8469562b8d4083d98d1448d0ecd43c5933d748d9034e5b0295bbf0e783e9cf5430aab27ac794a66bbe119a792282b7e510201c1fea70f56acd63cd70971f22", 0xa6}, {&(0x7f00000002c0)="f37cea86f884cb88d9065ecca005c9d6969668b0c0526285b173e244e5bb", 0x1e}, {&(0x7f00000003c0)="c8cf30c7b8b10bb757b6d5c1aa523f896e219adceeea804242be847c5f399e572d8dbf76b25c2cb8c8b1c7b2ab79ac6c56ac9a54eead474cdaf9586821002b7302ab7196720daa528bad406af5bfe440295767bf0305", 0x56}, {&(0x7f0000000540)="63d8da3580b346cac89cf503982ba1be2453f9d0ba1c1d5004eb09d2a102abf2c92150e11f1847c722e5d49d0d36a419993c84b44ca2ac7755c5a27b88bfce83a218cc09a190b20569dae113b2a0fb375cc6759c6abd3e194d0b3b4febba48448b3e38c9f5cc3371a8f41dc14aeb3659058c0337ae33e0db4a07bb853b24ae29a3fd21a913a96c6112c728348943e3d2a9b9e776ac95d8e6c7efa2aa8d94e1fe35436c12c8a3e6f1828fb4114cd7992bbce498f18f3c4d71752ea1662744a34a6a7b0eab92af799e00b0630694f88bac8105f2b5841b0fa25ce44834", 0xdc}, {&(0x7f0000000640)="8ab77d81b240817263e3e0aed46e4dccdbf66227163f8c927b8875c31da3ddc0eb5bcd99af3561bf742d5e58d182", 0x2e}, {&(0x7f0000000680)="c0", 0x1}, {&(0x7f00000006c0)="23eb7aa109dbbe8e747c96cac1c06f2ab7bcb5381777eb4f57b9685ca1c7a1567f4b7018c105e97b0b1d65d235f994a82e87cf3c33f9dc3640bdc0041f11302c31b588d574c1da698f1356d5fe24a2051148ae7769fa1641bb72fe930f01cff48798b6f5fa7bcd4b6abca3486b298a644913a560a4ce960c539f6eca7dd8d7d9fec6399101dd3fd63b627de2cc7d036ce002c065264ac930bed564cdd3719c9fea117ce93fde924acc3cbe1d148b38c99b42b714061b9a5f77c2bec6cd21601ecbafcf", 0xc3}, {&(0x7f00000007c0)="1a316a626822cca3f281d37897fa29556913bc059c8d5658834b89d717db14a332105920c1af20db1e3b50965562ab4f2e75285a3576c01c78ecefbfcfe00f0a4c4352c55647863c95b2617a1808607f8e1bba2d444891746ce8d7241361d26c669897a39361b40ae9a282f34d1c8a5778f6255da813129fee538c6eb027a4f2fde237939a24ddfa46b1df7780507169c4729430d17b29f7f55d222f99b26273ccb8446665c7b55fe3ef0dce60d9dbcf19da820fd53d85efded707f58bfa2547491ecb212310e24ae27869b1cba36be2f1f1763699d9a941196d2a1e1c0e71629ab4eb071af00b0b3b916c1e8325dd5da0dc350296", 0xf5}, {&(0x7f00000008c0)="c3e7fc7c1e011bc1a1d58426eb61c4eecb73c83810e12b37", 0x18}], 0xa, &(0x7f00000009c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x8, 0x0, [@private2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0xc8}}, {{&(0x7f0000000ac0)={0xa, 0x4e20, 0x1, @private0, 0x7}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="4e751bd4e54903e1ac4f23b44ce2de85fdc480f6c0945a5a56be699c5a19892c30f739ef2bfa933c9922ac1ad768b02a4dc32471acc2068f56b6623a7ee721dec44a25f8e8e10a3619980c5fd732bef4027d89dc8c2642211376132ef1863f64464b8104cd0c97fe4c472bb6d896860888a45527e99b29f2db00c22a22137da1aba90b99d94b01ed347d0cfba2dcc3d0b1ce", 0x92}], 0x1, &(0x7f0000000c00)=[@flowinfo={{0x14, 0x29, 0xb, 0xba}}], 0x18}}, {{&(0x7f0000000c40)={0xa, 0x4e22, 0x2, @private2, 0x898}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000c80)="0879fd1381bba6116109cc8168f030b10ee62bad2e18779273c151ed93ba6bcd6cc5aba37a43a4013e7b3ffac592656b47ca56bc70bf4c760d54485eb08582249c9a74929af5a7139f64e31871bf83771a25c0c39e76095c0a", 0x59}, {&(0x7f0000000d00)="3ee3842cf1e8d24016454c071b97f00820e4b4627a08ba4bb26634738c07a882f9d12d393a1c90e65ac8040e771078f83856889b727857bb7082a0fbf4aa256c247b10fed6b1f2e4b51c76b0043d68c4568bae42f7a829b8dfb1d648368ff3aa695b4f8bf8f9d540e8bb8db15089d5ca0d918bfbef4cba862b1a6e17d0f1cb0c8402869d020a19d099169802d4b31c14317b05a535f4b15c", 0x98}, {&(0x7f0000000dc0)="cbda43a94d4b19bde684e74369e8c6e6fd77e27effce73e08f376519da4884516abb79ccb37ee40f32cdd08701315403d956618cc5b5ccca4df8a3ef5018c878b6ddf296de1172f1c45614c94c650ec31e47d0bf944c204e1d90654ff37a8e4125a7583091900ec74e0867dc167d6a1ca84ed9e86435a74154be64f8b37cf5b7245494890ad69102294e23bc74fc9b1d30389f2e56ec4359237cbc5d65cdbe47", 0xa0}, {&(0x7f0000000e80)="31a1274dc55e2ec0ee738f56cca4dca1fa4921705eee84d37572da75b1d10b5afbd161b0a5376e28a062a80bab6a85cfb19fc441c300b546bdf9b2947e9341a63f38058c78acdab496df7e14fc794ee989d86b", 0x53}, {&(0x7f0000000f00)="910488a3ac253ddb24e82a30432201450a7b40326151a937c9278ad40323af44ef0c8c9990d2610ff053e2412af1875e30e20f247322cf5357eff6d8ae20c1d2027f9e7c76", 0x45}, {&(0x7f0000000f80)="13f22955ffb796dc0d63b055560af97945bd13917fea84766e0a11881871799a62b43215f2b77956968d78d0ae209fa22e74da9981c1c0d63433150a2ef5fd8f699fc67b1ea074ad196a0773f620f6f5a0938e4f9c3bfd49f3a5e02c3449122b8581fedfdb6e67f6bef04ef85a", 0x6d}, {&(0x7f0000001000)="f2b66ba360abc4e084ef848ce998b2d6c4353a382ca69d50d657148cb7277ccc68fb621bb615121f40297353c9dc7e37722e51aa71f27bfe1d452c17c1b6a3f6a4ba9f788f8d27eb25316f07621f0ff1247356ad547b5a0bf684e93dbf23d641188cac80bcf165f9ee34331fe4379adfc6bcd1f43053afa83ec54d74551e83b199c51df0d2b5ec77aaeb683a3fe1399f4423fc7bdb35bec3dc1c4f38920f261a2030075ad1055ccbd1bec035f2f6d5d3bcee0a5eab3dd0085eb273f94eff6ff17de0b40189d347b0bcb067c054008b5b1cfb28597d91f48da6bc34465f32ce54f1f5657b48e9ee", 0xe7}, {&(0x7f0000001100)="ba1f3b6ed7d4e83671", 0x9}, {&(0x7f0000001140)="00535ebdf1453bf7685afc45164bff298bf75b0de4c8879c9a7a3f2347fcb128facd48600502f6064100afac996fe06dfa5bb4cf0a90816f4bd060f20638adb83f6142fc9e70efe70db7d7a1843eedcb15f8ba7babfad60944764ad65bc7c554eb55ac13a4ff5d2ec3ec921ebc771eb26adfdf6bf6c3b271f4e29b135e0e306128d4218e96dc2a8fa21faf785c", 0x8d}], 0x9, &(0x7f00000012c0)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x32, 0x6, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0x1, [0x6]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}], 0x80}}], 0x3, 0x20000010)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x96)
syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "a844"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @local=@item_4={0x3, 0x2, 0x8, "0a52528d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x100102, 0x50)
sendfile(r6, r6, 0x0, 0x6)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)

4.453434292s ago: executing program 3 (id=664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.368417928s ago: executing program 3 (id=665):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
socket(0xa, 0x5, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x7f6, &(0x7f0000000200)={0x0, 0x0, 0x20000, 0x0, 0x20e}, &(0x7f00000001c0), 0x0, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x1, 0x4})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x400, 0x0, 0x592})
getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, &(0x7f0000002240))
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e21, 0x38, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
dup2(r4, r4)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x0, 0xfffffe06}, 0x0)
ioprio_get$pid(0x1, r6)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r8, 0x0, 0x1, 0x0, 0x1000000000000})
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

3.422607888s ago: executing program 2 (id=666):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5b", 0x76}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8", 0x65}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)}, {0x0}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.185219878s ago: executing program 3 (id=667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ']'}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x2000000}, 0x0)

3.109198248s ago: executing program 0 (id=668):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)
sendto(r0, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae", 0xb, 0x4044094, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @random="a732812b02f9", {0x4, 0x7}}, 0x840, 0x1b, @default, @void, @void, [{0xdd, 0x84, "77617830709175db21317efa77b142475fa79bb4a51c11eb0e3dd8ac787225cfb3db87b976520c2efd64436d70e627e85ee52b6d986d51012e573467f9f07aea21ce0946ab2d06c06c8bb5d4d03d977206ef900cf2fbd43d61810e4fe63c12646619ae598da13029ce4cd711d2bbced7b9a4579250f42ae9d7393a6ec4b8a2cd82ebbb0f"}]}, 0xa4)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20)

3.002858056s ago: executing program 4 (id=669):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, 0x0})
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}, 0x1, 0x7000000}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x25dfdbfd, {0xa, 0x68, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.002547636s ago: executing program 3 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x7ff, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0xf0, 0x4008080}, 0x0)

2.052294097s ago: executing program 2 (id=671):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e00030500000000002000008008000406000000000800000048a78f992561b307286717a9038d22eea7d4f1a7003e984e56c03d41a8ae3ccf333260a0065a99ac37a5903c3b2d4635d658ecb1589959cf427b83756d86c73a710acb3eeb7f9df9b1f1080bf14f9eb6e902da48a8738dc1351b1d", @ANYRESDEC=r0, @ANYRES64=r0], 0x30}], 0x1, 0x0, 0xfffffffffffffdd7}, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf08"], 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x8)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000010000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000100)="240dcd3c8c9a509211e649ecd48eb3cedc5bc27c1b4baad248a01b0ba8ae8fc2d6b4a1d546c5e8b9987bfaca3777a1c80b58d284d31d9dc72e0a5aa343dc73031969ab96ed55eec140611c1888dce87950610bfbccfc03c5ff58334322029d66c2597b75fac882adc1ba801743f62ed6535737455c6dc1cfb7a770be096f5ff8dad379b168598986f24723afdf02a69870", 0x91) (async)
setsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000100)="240dcd3c8c9a509211e649ecd48eb3cedc5bc27c1b4baad248a01b0ba8ae8fc2d6b4a1d546c5e8b9987bfaca3777a1c80b58d284d31d9dc72e0a5aa343dc73031969ab96ed55eec140611c1888dce87950610bfbccfc03c5ff58334322029d66c2597b75fac882adc1ba801743f62ed6535737455c6dc1cfb7a770be096f5ff8dad379b168598986f24723afdf02a69870", 0x91)

1.964477732s ago: executing program 4 (id=672):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
openat(0xffffffffffffff9c, 0x0, 0x43, 0xb9)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10044050)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0xfea0a1, 0x2000402)

1.65362785s ago: executing program 0 (id=673):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x84000, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
r2 = socket(0x10, 0x803, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000180)=0x18)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010001fff080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00400000180c000008001c00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="6c3c01512577c9b7d5ff60f7d59d9bbfd069f8a0340efef9595e4331092af7e19243b777b6eeb717c4d92bcbc31f9a7832104091cafacf9a08909c11656e2d8ec80c596ea8e0ca5bbe2284cd4dc1ee3281572afea43ccd056968efcfa3696e0faa0597bbccb6242c0a1bd00424e0551e1f55ae9552d1281440ca02b561b96adc6a6ac433cbfeb0916bb7698b5b4ac4b66d8e7545c8764ab8440e7f8bd62c0750925ed6a5179766106e7cb6bce4b06ef099fe0a3c829d332b465a377117722b8fd108"], 0x30}, 0x1, 0x0, 0x0, 0x20040084}, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1.442388531s ago: executing program 0 (id=674):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48)

1.068785945s ago: executing program 3 (id=675):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r1, <r2=>0x0})
listen(0xffffffffffffffff, 0x8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000040)={0x4, 0x20, [0x1, 0x668, 0x2, 0x3, 0x9, 0x2, 0x9, 0x4]})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000009c0)=[r7], 0x1)
r8 = dup2(r6, r7)
io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f00000003c0)=""/4096, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
alarm(0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "327a4b65d42cfd9cde415b25a16c8f717f0b127a0f8a0c555e9e162f212e77f8072a935a160d45f65fbb08353f8b404680b4d80d58a37af674adc27a64c14c05be78c49086607ac5fce196b24f40d9210b2bdc787adf8fd13cc3ee40cace10ddc15dfd6f198df05d87b7f53e4e603884f95cfbc4a727ea4178f95a8930f33e054fdbbbd849819b3ba6348d86c26192da81364b010209aab93b8ec31c19a74b836759b1577ce948c6fdec3302048d840dfa7863b915cfb73f07a8beacf76ba5975204802bf6c5a5255b609989202ff110041572115e0b9afc168ac246a51268ef7e037711c3731d5bc10aca80e3d234f2bea47f6273c6c9f2b7e2e589a8790b4a", "f6c552f7182ce3e848490d9764662c8076c0f7e18cc4b4954f28da9f9266e56b94c07b3671bb5c05263e1ca37724b45b943344690bfc987041e53686661867022d0fb2ffe9f422c0a1ead72ebddefedd3f86534c1a476d835c6af0be6175ff7b5ac25a3296911f895f19fbb157b0666d56655ac8cf39470adb6ebdb73229a129f38a08b1e16865436784428c9aecb67583a2cd3472a599ed8a5dd58acc09790e42007768c8845e4fb0556fbf844f806bef61d09e38206d9dfa540a40c852b5871fd7a4adaed6980faa2c09840b9d105e81530f4f6d99c62fd2086b9428970239367616bd221d12f20c11d4bd98226f6572c01bf6a6050d7b8febf4130038ce664a6a91b18b971c85ce294e1ce8904c6ccfd1026dfa7e54da417a9c1ea5eb132fc2ce11e29be78e860d816aff40e137bb7c91428ee57c6b674808ef105dfdbf2994b9ce9db967fb305cfc323f8ddc1ee3336a3fff5b3869ccbca0b9d761372964b16c83ef2b5ca29325c8f9623e6d887a8be4cfaf9135a84eaa8d90f4b98144c18463aa50278b427d4967af0337e601ae819604ff258e2bdfa729d1484a12b147fbe31c9331533b4b3dcb37f795f7e6f288219048a58c739f1a7e664d80e24cf0857c522e26f016abec5a8d8f39244e792e46c2e525a830213f9d6b0ed3e659e8a802ef4af5a2264df1349a46155fe2033c4021cff9b1e02f0bb35c5825f1d3c7e25b08e2f492390f7f1d70020d799c877b1a21d0b83456c97c3acfe66eed107862947728c95a18ddfb706cac23ba5e258ecd680ef825a9d52c1fea597d4359497ff0ae9d4ff047ec4a1a3ce1cf017c219d5a82c1549c4c85d9d5087c5f321d14a88562582b3f20b116c9381d3e8eb89f24a84d0fb4e0f1f2bcff688cc824d91c3a061b406aee3ace8dc63008186dddd9f4c8cdb64cbffb836380ed161c9fe82fbe3395eef4484ecdca7e588e2649f0f1cd4e2f37da9fd698b62e8a986c947341b4e25326dac415d2b91630bdfee74fa255df4521676efaf11aa911bfb8db4d410337f8a34d8aeb97a6822906fb8a5cdc8b753761ef8e8fb1abc7bf67508f6d2404b4a9ea54580191847b72e1a8a55dc328b2fa4102613033648a5d3855c300bb5f1fc7d0a6514400f685bfdb837f4b92cc71e4e4c18f8aeae66705944325f4959ba48b8b2b0b18b5e601dd827ceda9cb0a9be754a35c6cd6d83f2d3d1a9d67c78c2e0b0d5971211bae28f1f10dac9eece5abf35cd67f1a612cb2e7dd0951be7b6e358be9f64266ff7326ffa86d00df55ae7c9501bcd65582d67dd78d05d7967192c365861e48f0578095bf7bf33a821b9afd33f1275d150a6d8356b9c650aea25d513e5a937d32fc61b090c906f40eff268392e45b8213c05f490ae93f42a8d40600306caca9ec4459caad48a6ba89cfd808371d32786a93c177ca7419acd158bfa70968b42adacd7ce2be555f3681f54594fd4e76c7f81b0febc9f3c3f495e23f7be02031180d1c8df11a975da33c2f022104ec78d673839d629392c2dc68f395bbbbd986e7dd7c1f81ad1af4262931d5bc74853c0c3a2469435902734fb48b26127ddbe6dc6cecf348413bb6b625e2e1adffc442af3a9d567d0e60de1d2501805cd3bcb7ee5d15d2985e0b9868764c48d744830fa018931e5d807decc6495f465c1ae4f104c29f9d135ea68e82f933cb1485ba226bcdc92d88121fad104f2ba1fc565f31470f2bd3a5a194487ff0d24bab61f23a856feffbc93c59eddf11490542c3fcd39651a1868f5223561c1c9d9cd3b67d2ca72d4fc546e0c9e78ee948036df72b66804535121905f1be099e9fa7efdfe3078bc391fc077b2be9d37836d899bbd7128c9ab13140a9c7db1397ebc2849c488f2c0a27c69eb1d272abe54067fac55277636e1a06c7688e1c1eb9f369cc1cab6816998844dee8fdaa614a2ee67fa6c9de3d9dbfa0db2401a8d012dd3d20547f3d1710d077518196feb6728502a87ea51686af3123155892df2ab0f1726541944c41d9447cd82da2308dfd12f1d4626f8e2855ff94fce0fd6a959153fa2db0be415eda9bdecb507944f64a8561d722df2b43867bf11f7a1fcc4cfc34d694592ddf4ba93bdebb83abe607fa5e08d6955835a184e216fb71aa59cd34bfc69a4380d32819281e5e1d58fbec8eae610259d4c51cffade485c1d3046aaa8346375f1e897b8bb3b968d3cc426cacfcf1e54a73613a8724418dd0811ff8d29eb96b7e175a264cf9fb3b29e80983e79debf3f149f27b7163f173e7578cfc7abd499f18f7cbe2f72f91d13c813bee76789a7235d1d643e4166b033347332c5790c3e3cd1d91d658adaa69cfe8f63eb352591e4185984a339ec291e8de3a3be675a60695f77c89094d93b7a81a6e471d45ad2e3fc77c29bdf9c52af321c85abfd3cf655a9f7cc84cbe42edfe534c1f20b8667708979bae4acee32007063069d82c33619b648e66e1dcf80080583df14d7d91a951101b3d607cd43dc71c135d5342354d5aa4f84e34a34096785d70a32c7b1be07f358496c8b73b7d04acdbf4205ac3e6bd7c3f92e62d36f7a46fe353954c809c96906699a75f585afd1b4b323ff8a852d884f9d02983ee7de6bd603141d7e07d6751aeabc7d3894d5f7f0525208470a2701ef120cb36aad23dcfe676447e2b41cb7f781017094897c2fb8bda8e1d687a563c5d99d4e01de72e1d1aac62302a7ebbe0a92b878aed5330aafb8e2976d7f667d0b2a271fa3c74645b8a1f7c4e6f6c590c5beba31015fc46c439283a8712cad9a7de16b201d8ae279d831388a552752e38dd1988ed9a67efa6245ffd5ed9baf745afab7ec12064b706bda2eedad5b206b1ea3e9805f251925f82ede2bfe2d23e9d51f581dd5401dff8a9116f441798bde8cc4e4dc8a02093e2f302f626a8cc9ec1935f31a7828bf648a2257a8231e5c5e8c0c60dd84cb01670bce0886be1d9c976dc10d4851bdc06e423459148ce3daa0d267eb33f7e5f27408b95f0077224fd3b7ac7d4e531a6a65a6b94d48287ca77353af1ceb0bb6ca5423a90fa8ab58b6054fa03c4d0711b63056837d77f03b2edb776e4bd156dee684e16ec4a1b9ba8961606f62483c5163c3a2ee32b1469c93f594c2306636e24cbf15704ddc6ed886424ee521b35e1527d82b3afa0d5fa479bb0eac22c1e050bf65bc9daa44b882092bf0e36c733566a4fe6e4d8b2567d1a408f90e34941530843f141a41795e16aa9833bf48c2bbd9a6c01a7a03390ee219abac70fee47074723a85268e53eaa713739b1190d90b69e74e00213bb5d9db164396fde2e14c7899226b27b51aee3cd4a544fa1a306d8cc095361095d1a1532eae5b33c8ca9c2e2f819417688c79528e1a35b5b22f3d6f7bd98e3b7100ce8f25a81d1427e0f623653814e8bee97684446b7c7211e04a760db8996cfdc7a264c1cc6eda2631c2b6f37ae38a72f7fd1db37e6879f68ab9354acc97f58c42b9803fa44c2cdc9add0249542604f679cb7d9e7317a175ab035abf4b1679b830807b807dc35065b64cda44d085d41cd08505083f849bfa24a05332911072b0acfca44003cea96c0b48787154b740d4f8a4ce4ebf33201dd86b5b863cd11bef287023a77046fdf05a227035fa529e227455ac8c978d07a11c7f52ee4a6bcdb0d37b4d9a915523a06a8f7a64499400072941794f613e5eea04e787e8f4fc9a1562660ea7f3493e7a796586b2c8c4144c940ec53d03cda3519e0aaa2daa22bb1bb9f605211aef1a923c2146adab09bd9ddb9d887b3ede102e9019b587ff6a6c90e207c2e2d067dd5f96bb5bdd1976a1e3bbd54f0c2f8d6c2277ef931535af4caeffebd7ce95d653adfe70bba94375e7060374f963e740c96b3fb54777f01d734d1ee662e0f222248c7161cdbee2e4262263893680d02e0f9d6cd8030a9b54034c0d0ba3e08fadd07d410386d823ffe5247a577615a07320f1986cbc4c1432ea022b8538c3e371638654bab81a9bbd2ee85e010665f66568a15e6f4a5861255cab8218cf678b43afd9816d2ec89ae80612796584799b84b1a6d5d12478d2971f256f0ae582486f62f30f456bc6fd1f3e1363791096dbb2920136430c46dd42c74d4b762870e974cc97c2128ce4b2c0a10f06611988bc3c7fe39da60894adcc456377b6a3dc123cc0f17b08b2d7f3172f878f1edc6837ca821dbd137be1133a1c83851f03fd57534636bea60f14b95d17c9185279f1f44b8872eb5dec95377ee6f7c4829a91810b78ba51631a8f8ce8dc5cb3a33ade5d643404c6f76f86584fe1fdc4c85b02ffba44316013cb8dfe15d70b392abf225909a46b36764e4370197c27de0a872a51cd5fcbceaaa61072293963dda923abdb84f71e89af79f33115655f78d991742946cb1efe28a42aee35422d3087210eec173dd479d4afcfd91d98b30f1da5983844e0ccef4e528930137c17da3d49a4b5688d3b5e5acba898190e6683872080edd9a2ec23b68906996b754b92f7f2cffdf125d90724f0c7408081848a43fbaaddefdcea63081a5228bdc37ea4f106050a6126d5d902f1b7d48d2c81fd8db6dfb16634fb7343d644a53786b0825a4c07bb0aa4e43168d3a9376478d1cf1d7394d10eedc49431fb87aee51cc2855d0dd97f912a18c416fb09e9f979be5486860b463ac3cab022c4890cfa339dc313c47a806beccc20f339013d4ab4d6f710e944f8acb792ebf22f91b9572f8f9cd76e7e7b2b288f711612a62de566485a308a25ddf0017870576e5ce75737c8e8bf5a61a238e437e6f1333f7ef1714f28e467a0accc848ed7f0bcc3cfbe32130a8523460b593689299b8a76cc1a2597ad02f13d2628eed1f606655755b6f15c6799ed26e6467af15b7e0eea2be6170764625f7e039dcaa74635fd9bbf5692faea0ecd972f9f86a2bb9780ece947e332799a734e747d64261b44c9fed71290900b0e24828253677b4e8f8aa3977c74c226bacb358c879276f6ce5d9679e8737f42d8963fc150f27b6a9cc6a953f4588479292910064092952186feee211980f8cd30fecdc5c85870ee3c13e7b3197dc8acd7012bcdd6929b622017e25e5503dd297102dd90811f92e0c8875700905ee4023778ef79e3d589f29b95af8f0a3229fb851ee79a0204d86fefedb69cc9450c9133b24a1be67a545bb27f315555fcba79e806b0ba4127caf526342ced4be6001d91af85036b250523dfbbfc9ff58df330c0bedcc21d3778816009967ccb166a25f91e166db1657929ff98ed2f7e13478e85614b954172348be605c6b9580992189fa6f5dc105c75e10e10b100555fbd7fc34f38a701a8b270d6fd5207d58924273b9f026c354f9b21c786241f0cb817ca297ac926a260a9abf7859e16fb6cfdc34e73741f9e3b658374feff572772fd757"})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={&(0x7f0000000580), 0x0, r1, r2, 0x14bc, 0x4, 0xa8b5, 0xb, {0x0, 0x4a, 0x5, 0x8c, 0x8000, 0xa49, 0xe964, 0x7ff, 0x4, 0x5, 0x9, 0xffff, 0xd, 0x8, "d95a0fd2d5834d7eb2fe58d003501c2633a1b1c76ceb8ae57aef35aa08c611a5"}})

192.324179ms ago: executing program 4 (id=676):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5309, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x203}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c099547ed3b9718c51111acfc28d", 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x2, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780904d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e371932d0905070b"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})

69.911542ms ago: executing program 0 (id=677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xf, 0x1, @thr={0x0, 0x0}})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500240335a084c0595006aa50102030109021b00010102d00d0904"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="370700a200b078d74d00"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x7, 0x1ff, 0x6, 0xffe0, 0xfffd, 0x100, 0x4, 0x6, 0x3, 0x6, 0x3, 0x5}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x57e5}, 0x0, 0x0, 0x0})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)

67.17268ms ago: executing program 1 (id=678):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0xa)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x482)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0)
keyctl$clear(0x7, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r6])

0s ago: executing program 3 (id=679):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603a059e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb7d2270bb75c8a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616feb8ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b55", 0x13c}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x62c4936903874dee}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x64, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)

kernel console output (not intermixed with test programs):

: 16
[  110.310541][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  110.337272][ T5915] usb 4-1: too many configurations: 94, using maximum allowed: 8
[  110.346019][   T29] audit: type=1400 audit(1775996946.644:299): avc:  denied  { read } for  pid=6581 comm="syz.1.172" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  110.379926][ T6582] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[  110.442335][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  110.457640][ T5915] usb 4-1: can't read configurations, error -61
[  110.458982][ T6582] bond1: entered promiscuous mode
[  110.468030][ T5915] usb usb4-port1: attempt power cycle
[  110.468987][ T6582] bond1: entered allmulticast mode
[  110.479628][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.492964][ T6583] erspan1: entered allmulticast mode
[  110.500999][ T6583] bond1: (slave erspan1): making interface the new active one
[  110.508533][ T6583] erspan1: entered promiscuous mode
[  110.515216][ T6583] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  110.944254][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.952178][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.966066][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  111.008043][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  111.015094][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  111.040424][ T5915] usb 4-1: too many configurations: 94, using maximum allowed: 8
[  111.091600][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  111.123254][ T5915] usb 4-1: can't read configurations, error -61
[  111.319024][ T5915] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  111.377671][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  111.397018][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.403488][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  111.440110][ T5915] usb 4-1: too many configurations: 94, using maximum allowed: 8
[  111.460756][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  111.472429][ T5915] usb 4-1: can't read configurations, error -61
[  111.491759][ T5915] usb usb4-port1: unable to enumerate USB device
[  111.566744][ T5866] usb 1-1: Using ep0 maxpacket: 32
[  111.582394][ T5866] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  111.606046][ T5887] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  111.678278][ T6620] futex_wake_op: syz.2.180 tries to shift op by 144; fix this program
[  111.686042][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.826110][ T5887] usb 2-1: device descriptor read/64, error -71
[  111.919561][ T5866] usb 1-1: config 0 descriptor??
[  111.932666][ T6617] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  111.989633][ T5866] as10x_usb: device has been detected
[  111.999941][ T5866] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  112.060890][ T5866] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  112.069364][ T5887] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  112.124803][ T5866] as10x_usb: error during firmware upload part1
[  112.135312][ T5866] Registered device nBox DVB-T Dongle
[  112.283516][ T5915] usb 1-1: USB disconnect, device number 9
[  112.315593][ T6626] ieee802154 phy0 wpan0: encryption failed: -22
[  112.322117][ T5859] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  112.331014][ T5887] usb 2-1: device descriptor read/64, error -71
[  112.338862][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.389373][ T5915] Unregistered device nBox DVB-T Dongle
[  112.391920][ T5915] as10x_usb: device has been disconnected
[  112.457485][ T5887] usb usb2-port1: attempt power cycle
[  112.470221][ T6629] futex_wake_op: syz.4.184 tries to shift op by 144; fix this program
[  112.500403][ T6629] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  112.733382][ T5859] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.746903][ T5859] usb 3-1: not running at top speed; connect to a high speed hub
[  112.755534][ T5859] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  112.770346][ T5859] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  112.788538][ T5859] usb 3-1: config 2 has no interface number 0
[  112.800249][ T5859] usb 3-1: config 2 has no interface number 1
[  112.809988][ T5859] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  112.821929][ T5859] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  112.845289][ T5859] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  112.876000][ T5859] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  112.899415][ T5859] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  112.927445][ T5859] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  112.970064][ T5859] usb 3-1: config 2 interface 212 has no altsetting 0
[  112.985330][ T5859] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  112.995317][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.003613][ T5859] usb 3-1: Product: syz
[  113.008128][ T5859] usb 3-1: Manufacturer: syz
[  113.012726][ T5859] usb 3-1: SerialNumber: syz
[  113.069514][ T6633] loop2: detected capacity change from 0 to 7
[  113.077655][ T5887] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  113.088896][ T6633] Dev loop2: unable to read RDB block 7
[  113.096897][ T6633]  loop2: AHDI p1 p2 p3
[  113.101081][ T6633] loop2: partition table partially beyond EOD, truncated
[  113.108847][ T5887] usb 2-1: device descriptor read/8, error -71
[  113.116736][ T6633] loop2: p1 start 1818582900 is beyond EOD, truncated
[  113.124935][ T6633] loop2: p3 start 335544320 is beyond EOD, truncated
[  113.215450][ T6636] futex_wake_op: syz.4.187 tries to shift op by 144; fix this program
[  113.234115][ T6636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  113.567778][ T5859] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input10
[  113.742046][ T5887] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  113.766642][ T5887] usb 2-1: device descriptor read/8, error -71
[  113.770378][ T5859] usb 3-1: USB disconnect, device number 8
[  113.876868][ T5887] usb usb2-port1: unable to enumerate USB device
[  114.611171][ T6658] futex_wake_op: syz.2.194 tries to shift op by 144; fix this program
[  114.643236][ T6658] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  115.099734][ T5915] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  115.286775][ T6667] ieee802154 phy0 wpan0: encryption failed: -22
[  115.295550][ T6667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.329286][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.341465][ T5915] usb 3-1: not running at top speed; connect to a high speed hub
[  115.353245][ T5915] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  115.362085][ T5915] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  115.371669][ T5915] usb 3-1: config 2 has no interface number 0
[  115.383015][ T5915] usb 3-1: config 2 has no interface number 1
[  115.389213][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  115.406266][ T5915] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  115.423563][ T5915] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  115.462235][ T5915] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  115.514611][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'.
[  115.523778][ T5915] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  115.523809][ T5915] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  115.523832][ T5915] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  115.523857][ T5915] usb 3-1: config 2 interface 212 has no altsetting 0
[  115.569308][ T5915] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  115.580120][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.591383][    T9] usb 2-1: Using ep0 maxpacket: 32
[  115.602989][ T5915] usb 3-1: Product: syz
[  115.615678][    T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  115.628090][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.642393][ T5915] usb 3-1: Manufacturer: syz
[  115.643900][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'.
[  115.667992][ T5915] usb 3-1: SerialNumber: syz
[  115.680189][    T9] usb 2-1: config 0 descriptor??
[  115.730819][    T9] as10x_usb: device has been detected
[  115.749596][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  115.778901][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  115.778918][   T29] audit: type=1400 audit(1775996952.154:303): avc:  denied  { mounton } for  pid=6659 comm="syz.3.195" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  115.820728][ T6672] block device autoloading is deprecated and will be removed.
[  115.837249][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'.
[  115.874452][    T9] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  115.888706][    T9] as10x_usb: error during firmware upload part1
[  115.895702][    T9] Registered device nBox DVB-T Dongle
[  115.929486][   T10] usb 2-1: USB disconnect, device number 9
[  115.992334][   T10] Unregistered device nBox DVB-T Dongle
[  116.005754][   T10] as10x_usb: device has been disconnected
[  116.145952][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  116.192802][ T5915] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input11
[  116.216815][ T5915] usb 3-1: USB disconnect, device number 9
[  116.937165][   T29] audit: type=1400 audit(1775996953.304:304): avc:  denied  { write } for  pid=6689 comm="syz.0.204" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  117.086207][ T6683] capability: warning: `syz.1.201' uses deprecated v2 capabilities in a way that may be insecure
[  117.103280][ T6698] syz.4.206 (6698): /proc/6693/oom_adj is deprecated, please use /proc/6693/oom_score_adj instead.
[  117.158319][ T6695] vxfs: WRONG superblock magic 00000000 at 1
[  117.164699][ T6695] vxfs: WRONG superblock magic 00000000 at 8
[  117.170764][ T6695] vxfs: can't find superblock.
[  117.265809][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'.
[  117.276486][   T29] audit: type=1400 audit(1775996953.524:305): avc:  denied  { create } for  pid=6682 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  117.317624][   T29] audit: type=1400 audit(1775996953.554:306): avc:  denied  { setopt } for  pid=6682 comm="syz.1.201" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  117.372806][   T29] audit: type=1400 audit(1775996953.554:307): avc:  denied  { getopt } for  pid=6682 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  117.416717][   T29] audit: type=1400 audit(1775996953.724:308): avc:  denied  { create } for  pid=6701 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.416759][   T29] audit: type=1400 audit(1775996953.724:309): avc:  denied  { map } for  pid=6701 comm="syz.2.208" path="socket:[11218]" dev="sockfs" ino=11218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.416793][   T29] audit: type=1400 audit(1775996953.724:310): avc:  denied  { read } for  pid=6701 comm="syz.2.208" path="socket:[11218]" dev="sockfs" ino=11218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.416826][   T29] audit: type=1400 audit(1775996953.724:311): avc:  denied  { ioctl } for  pid=6701 comm="syz.2.208" path="socket:[11218]" dev="sockfs" ino=11218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.527883][   T29] audit: type=1400 audit(1775996953.884:312): avc:  denied  { write } for  pid=6701 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.957277][ T6714] ieee802154 phy0 wpan0: encryption failed: -22
[  117.971279][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.984642][ T6717] xt_l2tp: invalid flags combination: 0
[  118.333388][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[  119.008288][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[  120.006078][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  120.196230][ T5859] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  120.227664][ T5859] usb 5-1: config 0 has no interface number 0
[  120.242759][ T5859] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  120.255579][ T5859] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.272215][ T5859] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  120.284393][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.292874][ T5859] usb 5-1: Product: syz
[  120.336361][ T5859] usb 5-1: Manufacturer: syz
[  120.341094][ T5859] usb 5-1: SerialNumber: syz
[  120.381928][ T5859] usb 5-1: config 0 descriptor??
[  120.388737][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'.
[  120.401165][ T6760] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.420460][ T5859] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  120.452690][ T5859] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  120.496059][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  121.236465][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  121.283033][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  121.283050][   T29] audit: type=1400 audit(1775996957.654:327): avc:  denied  { connect } for  pid=6777 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  121.358742][   T10] usb 2-1: Using ep0 maxpacket: 16
[  121.370436][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.384277][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  121.404948][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  121.414242][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.446576][   T10] usb 2-1: config 0 descriptor??
[  121.465191][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  121.478572][ T5931] usb 5-1: USB disconnect, device number 8
[  121.500155][ T5931] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  121.525516][ T5931] cyberjack 5-1:0.69: device disconnected
[  121.799164][ T5859] usb 2-1: USB disconnect, device number 10
[  121.954824][ T6789] netlink: 148 bytes leftover after parsing attributes in process `syz.0.236'.
[  121.966121][ T6789] netlink: 116 bytes leftover after parsing attributes in process `syz.0.236'.
[  121.976311][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'.
[  122.727413][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'.
[  123.174506][ T6809] futex_wake_op: syz.1.241 tries to shift op by 144; fix this program
[  123.192852][ T6809] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  123.406699][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  123.551847][ T6811] netlink: 'syz.0.243': attribute type 10 has an invalid length.
[  123.570691][   T29] audit: type=1400 audit(1775996959.924:328): avc:  denied  { bind } for  pid=6810 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  123.720611][ T5887] usb 3-1: device descriptor read/64, error -71
[  123.893249][ T6817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.244'.
[  124.027055][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  124.035890][ T6819] xt_ecn: cannot match TCP bits for non-tcp packets
[  124.083466][ T6821] netlink: 136 bytes leftover after parsing attributes in process `syz.4.247'.
[  124.176986][ T5887] usb 3-1: device descriptor read/64, error -71
[  124.301055][ T5887] usb usb3-port1: attempt power cycle
[  124.445779][ T6830] ieee802154 phy0 wpan0: encryption failed: -22
[  124.455556][ T6830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.520669][   T29] audit: type=1400 audit(1775996960.864:329): avc:  denied  { append } for  pid=6829 comm="syz.1.250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  124.800465][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  124.847322][  T793] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  124.869014][ T5887] usb 3-1: device descriptor read/8, error -71
[  125.016017][  T793] usb 2-1: Using ep0 maxpacket: 8
[  125.059612][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[  125.126199][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  125.167985][  T793] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  125.433965][  T793] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  125.520683][  T793] usb 2-1: config 4 has no interface number 0
[  125.550556][ T5887] usb 3-1: device descriptor read/8, error -71
[  125.636289][  T793] usb 2-1: language id specifier not provided by device, defaulting to English
[  125.714790][  T793] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  125.775303][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.786306][ T5887] usb usb3-port1: unable to enumerate USB device
[  126.028231][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'.
[  126.071404][ T6846] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  126.121662][  T793] uvcvideo 2-1:4.147: Found multiple Units with ID 6
[  126.147334][  T793] uvcvideo 2-1:4.147: Found UVC 0.02 device <unnamed> (04f2:b746)
[  126.176087][  T793] uvcvideo 2-1:4.147: No streaming interface found for terminal 32774.
[  126.178338][   T29] audit: type=1400 audit(1775996962.554:330): avc:  denied  { map } for  pid=6839 comm="syz.3.252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  126.232471][  T793] usb 2-1: USB disconnect, device number 11
[  126.274127][ T6848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6848 comm=syz.4.254
[  126.297829][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  126.303637][   T29] audit: type=1400 audit(1775996962.594:331): avc:  denied  { read write } for  pid=6839 comm="syz.3.252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  126.351907][ T6843] x_tables: duplicate underflow at hook 2
[  126.392860][ T6848] block nbd0: server does not support multiple connections per device.
[  126.434448][ T6848] block nbd0: shutting down sockets
[  126.458803][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  126.480452][ T5866] usb 3-1: config 0 has no interfaces?
[  126.488034][ T5866] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  126.506004][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.536008][ T5866] usb 3-1: Product: syz
[  126.540214][ T5866] usb 3-1: Manufacturer: syz
[  126.558705][ T5866] usb 3-1: SerialNumber: syz
[  126.580669][ T5866] usb 3-1: config 0 descriptor??
[  126.702187][ T6864] futex_wake_op: syz.3.255 tries to shift op by 144; fix this program
[  126.726798][ T6864] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  126.822969][ T6865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3792214343 (30337714744 ns) > initial count (9154992248 ns). Using initial count to start timer.
[  126.920115][ T6871] FAULT_INJECTION: forcing a failure.
[  126.920115][ T6871] name failslab, interval 1, probability 0, space 0, times 0
[  126.990254][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.1.257 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.990282][ T6871] Tainted: [L]=SOFTLOCKUP
[  126.990286][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  126.990293][ T6871] Call Trace:
[  126.990297][ T6871]  <TASK>
[  126.990301][ T6871]  dump_stack_lvl+0x100/0x190
[  126.990324][ T6871]  should_fail_ex.cold+0x5/0xa
[  126.990339][ T6871]  ? tomoyo_encode2+0xfb/0x3c0
[  126.990356][ T6871]  should_failslab+0xc2/0x120
[  126.990367][ T6871]  __kmalloc_noprof+0xe0/0x850
[  126.990386][ T6871]  tomoyo_encode2+0xfb/0x3c0
[  126.990405][ T6871]  tomoyo_encode+0x29/0x50
[  126.990421][ T6871]  tomoyo_realpath_from_path+0x18c/0x690
[  126.990442][ T6871]  tomoyo_path_number_perm+0x23c/0x580
[  126.990456][ T6871]  ? tomoyo_path_number_perm+0x22e/0x580
[  126.990472][ T6871]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  126.990501][ T6871]  ? find_held_lock+0x2b/0x80
[  126.990515][ T6871]  ? __fget_files+0x215/0x3d0
[  126.990526][ T6871]  ? hook_file_ioctl_common+0x146/0x410
[  126.990542][ T6871]  ? __fget_files+0x21f/0x3d0
[  126.990555][ T6871]  security_file_ioctl+0xd3/0x230
[  126.990572][ T6871]  __x64_sys_ioctl+0xb7/0x210
[  126.990590][ T6871]  do_syscall_64+0x106/0xf80
[  126.990601][ T6871]  ? clear_bhb_loop+0x40/0x90
[  126.990614][ T6871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.990625][ T6871] RIP: 0033:0x7fbcf7f9c819
[  126.990634][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.990644][ T6871] RSP: 002b:00007fbcf8e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.990654][ T6871] RAX: ffffffffffffffda RBX: 00007fbcf8216090 RCX: 00007fbcf7f9c819
[  126.990661][ T6871] RDX: 0000200000000280 RSI: 000000004400ae8f RDI: 0000000000000007
[  126.990667][ T6871] RBP: 00007fbcf8e70090 R08: 0000000000000000 R09: 0000000000000000
[  126.990672][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.990678][ T6871] R13: 00007fbcf8216128 R14: 00007fbcf8216090 R15: 00007ffdd53d49a8
[  126.990692][ T6871]  </TASK>
[  126.992063][ T6871] ERROR: Out of memory at tomoyo_realpath_from_path.
[  127.096055][ T5887] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  127.350816][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  127.357349][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  127.373477][ T5931] usb 3-1: USB disconnect, device number 14
[  127.457592][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short
[  127.486108][ T6878] futex_wake_op: syz.4.258 tries to shift op by 144; fix this program
[  127.504578][ T5887] usb 4-1: not running at top speed; connect to a high speed hub
[  127.589329][ T5887] usb 4-1: config 2 has an invalid interface number: 212 but max is 1
[  127.603846][ T6878] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  128.739314][   T29] audit: type=1400 audit(1775996964.774:332): avc:  denied  { create } for  pid=6882 comm="syz.1.259" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  128.770454][ T5887] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  128.822679][ T5887] usb 4-1: config 2 has no interface number 0
[  128.832188][ T5887] usb 4-1: config 2 has no interface number 1
[  128.840770][ T5887] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  128.852942][ T5887] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  128.865217][ T5887] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  128.877572][ T5887] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  128.891212][ T5887] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  128.901526][ T5887] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  128.914941][ T5887] usb 4-1: config 2 interface 212 has no altsetting 0
[  128.925377][ T5887] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  128.941780][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.951039][ T5887] usb 4-1: Product: syz
[  128.955308][ T5887] usb 4-1: Manufacturer: syz
[  128.960498][ T5887] usb 4-1: SerialNumber: syz
[  129.094405][   T29] audit: type=1400 audit(1775996965.444:333): avc:  denied  { unlink } for  pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  129.498202][   T29] audit: type=1400 audit(1775996965.874:334): avc:  denied  { create } for  pid=6894 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  129.501125][ T5887] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input12
[  129.583822][   T29] audit: type=1400 audit(1775996965.874:335): avc:  denied  { bind } for  pid=6894 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  129.625086][ T5887] usb 4-1: USB disconnect, device number 12
[  129.625109][    C0] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  129.936428][ T6902] netlink: 148 bytes leftover after parsing attributes in process `syz.0.266'.
[  131.172467][ T6920] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[  131.896867][  T793] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  131.963101][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.272'.
[  132.066040][  T793] usb 4-1: Using ep0 maxpacket: 32
[  132.157222][  T793] usb 4-1: config index 0 descriptor too short (expected 114, got 109)
[  132.868831][   T29] audit: type=1400 audit(1775996968.334:336): avc:  denied  { getopt } for  pid=6923 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  132.972116][  T793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.002586][  T793] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  133.013590][  T793] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  133.060243][  T793] usb 4-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  133.082000][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.107508][  T793] usb 4-1: Product: syz
[  133.111700][  T793] usb 4-1: Manufacturer: syz
[  133.121579][  T793] usb 4-1: SerialNumber: syz
[  133.340935][  T793] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[  133.352271][  T793] usb 4-1: 1:1 : format type 238 is not supported yet
[  133.363826][  T793] usb 4-1: 0:2 : does not exist
[  133.407831][   T29] audit: type=1400 audit(1775996969.784:337): avc:  denied  { mount } for  pid=6945 comm="syz.2.278" name="/" dev="ramfs" ino=13171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  133.452916][  T793] usb 4-1: USB disconnect, device number 13
[  133.495715][ T5821] Bluetooth: hci4: unexpected event for opcode 0x1005
[  133.502728][   T29] audit: type=1400 audit(1775996969.864:338): avc:  denied  { getopt } for  pid=6945 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  133.543960][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.623011][ T6950] futex_wake_op: syz.1.277 tries to shift op by 144; fix this program
[  133.641930][ T6950] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  133.849306][   T29] audit: type=1400 audit(1775996970.214:339): avc:  denied  { create } for  pid=6948 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  133.966022][ T5931] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  134.069476][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'.
[  134.441382][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short
[  134.531235][ T5931] usb 2-1: not running at top speed; connect to a high speed hub
[  134.541125][ T5931] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  134.551367][ T5931] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  134.579166][ T5931] usb 2-1: config 2 has no interface number 0
[  134.587754][ T5931] usb 2-1: config 2 has no interface number 1
[  134.594158][ T5931] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  134.611386][ T5931] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  134.623144][ T5931] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  134.640447][ T5931] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  134.655054][ T5931] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  134.665407][ T5931] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  134.681797][ T5931] usb 2-1: config 2 interface 212 has no altsetting 0
[  135.037190][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[  135.122662][ T5931] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  135.132077][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.141847][ T5931] usb 2-1: Product: syz
[  135.175237][ T5931] usb 2-1: Manufacturer: syz
[  135.286590][ T5931] usb 2-1: SerialNumber: syz
[  135.597124][ T5931] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input13
[  135.736118][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  135.830682][ T5931] usb 2-1: USB disconnect, device number 12
[  135.954309][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  135.972461][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.008098][ T5915] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  136.038062][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.133761][ T6987] netlink: 'syz.2.289': attribute type 10 has an invalid length.
[  136.155404][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.170999][ T6987] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  136.197377][ T6987] loop5: detected capacity change from 0 to 7
[  136.248456][ T6988] netlink: 'syz.2.289': attribute type 10 has an invalid length.
[  136.256356][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.289'.
[  136.265460][ T6988] batadv0: entered promiscuous mode
[  136.270749][ T6988] batadv0: entered allmulticast mode
[  136.587581][ T6988] bond0: (slave batadv0): Releasing backup interface
[  136.595628][ T6988] bridge0: port 3(batadv0) entered blocking state
[  136.602765][ T6988] bridge0: port 3(batadv0) entered disabled state
[  136.611349][ T5915] usb 5-1: config 0 descriptor??
[  136.620093][ T6987] Dev loop5: unable to read RDB block 7
[  136.625707][ T6987]  loop5: AHDI p1
[  136.629443][ T6987] loop5: partition table partially beyond EOD, truncated
[  136.660527][  T793] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  136.664280][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  136.677597][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  136.946026][  T793] usb 4-1: Using ep0 maxpacket: 8
[  136.983443][  T793] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.016981][  T793] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.484725][ T5915] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  137.486197][  T793] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  137.506853][  T793] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.536433][ T6996] netlink: 76 bytes leftover after parsing attributes in process `syz.2.291'.
[  137.730704][  T793] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  137.787265][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.861407][ T5866] hid_parser_main: 48 callbacks suppressed
[  137.861444][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.878124][   T29] audit: type=1400 audit(1775996974.224:340): avc:  denied  { read write } for  pid=6976 comm="syz.4.286" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  137.901745][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.921099][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.930784][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.938486][   T29] audit: type=1400 audit(1775996974.224:341): avc:  denied  { open } for  pid=6976 comm="syz.4.286" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  137.966215][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.973670][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.983971][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  137.998088][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  138.005732][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  138.013533][ T5866] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  138.037052][  T793] usb 4-1: GET_CAPABILITIES returned 0
[  138.042565][  T793] usbtmc 4-1:16.0: can't read capabilities
[  138.078976][ T5866] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  138.284599][   T29] audit: type=1400 audit(1775996974.654:342): avc:  denied  { write } for  pid=6982 comm="syz.3.288" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  138.309725][   T29] audit: type=1400 audit(1775996974.684:343): avc:  denied  { transfer } for  pid=6982 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  138.363266][   T29] audit: type=1400 audit(1775996974.714:344): avc:  denied  { write } for  pid=7007 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.387923][ T7010] hub 8-0:1.0: USB hub found
[  138.394261][ T7010] hub 8-0:1.0: 1 port detected
[  138.453396][ T7006] fido_id[7006]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  139.107130][ T7023] =======================================================
[  139.107130][ T7023] WARNING: The mand mount option has been deprecated and
[  139.107130][ T7023]          and is ignored by this kernel. Remove the mand
[  139.107130][ T7023]          option from the mount to silence this warning.
[  139.107130][ T7023] =======================================================
[  139.142239][   T29] audit: type=1400 audit(1775996975.484:345): avc:  denied  { mounton } for  pid=7021 comm="syz.1.297" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  139.461952][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'.
[  139.488176][   T29] audit: type=1400 audit(1775996975.834:346): avc:  denied  { write } for  pid=7025 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  139.534874][ T5859] usb 4-1: USB disconnect, device number 14
[  139.562205][ T7023] FAT-fs (nullb0): bogus number of reserved sectors
[  139.607996][ T7023] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  139.746675][ T5866] usb 5-1: USB disconnect, device number 9
[  139.900873][ T7037] futex_wake_op: syz.3.300 tries to shift op by 144; fix this program
[  139.916592][ T7037] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  140.284397][ T7040] futex_wake_op: syz.4.301 tries to shift op by 144; fix this program
[  140.388024][ T5915] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  140.750368][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  140.795202][ T5915] usb 4-1: not running at top speed; connect to a high speed hub
[  141.175436][ T5915] usb 4-1: config 2 has an invalid interface number: 212 but max is 1
[  141.204841][ T5915] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  141.241685][ T5915] usb 4-1: config 2 has no interface number 0
[  141.264687][ T5915] usb 4-1: config 2 has no interface number 1
[  141.302321][ T5915] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  141.356497][ T5915] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  141.382138][ T5915] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  141.405996][ T5915] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  141.436958][ T5915] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  141.466103][ T5915] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  141.487893][ T5915] usb 4-1: config 2 interface 212 has no altsetting 0
[  141.512901][ T5915] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  141.532209][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.551474][ T5915] usb 4-1: Product: syz
[  141.555676][ T5915] usb 4-1: Manufacturer: syz
[  141.578736][ T5915] usb 4-1: SerialNumber: syz
[  141.661227][ T5866] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  141.931040][ T5866] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  141.939220][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.950837][ T5866] usb 5-1: config 0 has no interface number 0
[  141.956999][ T5866] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  141.970653][ T5866] usb 5-1: config 0 interface 52 has no altsetting 0
[  141.970918][ T5915] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input14
[  141.977447][ T5866] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  141.977473][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.008862][ T5866] usb 5-1: config 0 descriptor??
[  142.069594][ T5915] usb 4-1: USB disconnect, device number 15
[  142.087182][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[  142.098690][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[  142.218600][ T7068] futex_wake_op: syz.0.312 tries to shift op by 144; fix this program
[  142.387389][ T5859] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  142.414685][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.423912][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.440146][ T5866] usb 5-1: Can not set alternate setting to 1, error: -71
[  142.451830][ T5866] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  142.591422][ T5866] usb 5-1: USB disconnect, device number 10
[  142.600863][ T5859] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  142.870384][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.882520][ T7070] futex_wake_op: syz.2.313 tries to shift op by 144; fix this program
[  142.951395][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.961871][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  142.978432][ T5859] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  142.988768][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.008075][ T5859] usb 2-1: config 0 descriptor??
[  143.368418][ T7079] tipc: Started in network mode
[  143.393840][ T7079] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  143.417137][ T7079] tipc: Enabled bearer <eth:ipvlan1>, priority 11
[  143.638638][ T5859] usbhid 2-1:0.0: can't add hid device: -71
[  143.644680][ T5859] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  143.655082][ T5859] usb 2-1: USB disconnect, device number 13
[  143.750206][ T7088] No such timeout policy "syz0"
[  144.147510][   T29] audit: type=1400 audit(1775996980.524:347): avc:  denied  { append } for  pid=7093 comm="syz.0.320" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.259170][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'.
[  144.364005][ T7096] futex_wake_op: syz.4.321 tries to shift op by 144; fix this program
[  144.428470][ T5859] tipc: Node number set to 10136234
[  145.344636][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.2.323'.
[  146.028995][ T7112] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  146.443212][ T7117] futex_wake_op: syz.3.327 tries to shift op by 144; fix this program
[  146.462789][ T7117] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  147.040434][ T5915] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  147.208856][ T7129] netlink: 'syz.0.331': attribute type 8 has an invalid length.
[  147.226047][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  147.246613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  147.278692][ T7124] fuse: Unknown parameter 'acerPid:	0
[  147.278692][ T7124] Uid:	0	0	0	0
[  147.278692][ T7124] Gid:	0	0	0	0
[  147.278692][ T7124] FDSize:	256
[  147.278692][ T7124] Groups:	0 10 
[  147.278692][ T7124] NStgid:	191
[  147.278692][ T7124] NSpid:	192
[  147.278692][ T7124] NSpgid:	191
[  147.278692][ T7124] NSsid:	0
[  147.278692][ T7124] Kthread:	0
[  147.278692][ T7124] VmPeak:	  104408 kB
[  147.278692][ T7124] VmSize:	  104408 kB
[  147.278692][ T7124] VmLck:	       0 kB
[  147.278692][ T7124] VmPin:	       0 kB
[  147.278692][ T7124] VmHWM:	   24448 kB
[  147.278692][ T7124] VmRSS:	   24448 kB
[  147.278692][ T7124] RssAnon:	    1524 kB
[  147.278692][ T7124] RssFile:	   22924 kB
[  147.278692][ T7124] RssShmem:	       0 kB
[  147.278692][ T7124] VmData:	   36712 kB
[  147.278692][ T7124] VmStk:	     132 kB
[  147.278692][ T7124] VmExe:	    1772 kB
[  147.278692][ T7124] VmLib:	       8 kB
[  147.278692][ T7124] VmPTE:	     136 kB
[  147.278692][ T7124] VmSwap:	       0 kB
[  147.278692][ T7124] HugetlbPages:	       0 kB
[  147.278692][ T7124] CoreDumping:	0
[  147.278692][ T7124] THP_enabled:	1
[  147.278692][ T7124] untag_mask:	0xffffffffffffffff
[  147.278692][ T7124] Threads:	3
[  147.278692][ T7124] SigQ:	0/12960
[  147.278692][ T7124] SigPnd:	0000000000000000
[  147.278692][ T7124] ShdPnd:	0000000000000000
[  147.278692][ T7124] SigBlk:	0000000000000000
[  147.278692][ T7124] SigIgn:	fffffffefffaba35
[  147.278692][ T7124] SigCgt:	0000000100010440
[  147.278692][ T7124] CapInh:	0000000000000000
[  147.278692][ T7124] CapPrm:	000001ffff77ffff
[  147.278692][ T7124] CapEff:	000001ffff77ffff
[  147.278692][ T7124] CapBnd:	000001ffffffffff
[  147.278692][ T7124] CapAmb:	0000000000000000
[  147.278692][ T7124] NoNewPrivs:	0
[  147.278692][ T7124] Seccomp:	0
[  147.278692][ T7124] Seccomp_filters:	0
[  147.278692][ T7124] Speculation_Store_Bypass:	thread vulnerable
[  147.278692][ T7124] SpeculationIndirectBranch:	conditional enabled
[  147.278692][ T7124] Cpus_allowed:	2
[  147.463311][   T29] audit: type=1400 audit(1775996983.654:348): avc:  denied  { mounton } for  pid=7123 comm="syz.3.330" path="/57/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  147.501083][ T5915] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  147.524062][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.580900][ T5915] usb 2-1: config 0 descriptor??
[  147.595371][   T29] audit: type=1400 audit(1775996983.964:349): avc:  denied  { setopt } for  pid=7133 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  147.652480][ T5915] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  147.653090][ T7129] bond0: entered promiscuous mode
[  147.691861][ T7129] bond_slave_0: entered promiscuous mode
[  147.713184][ T7129] bond_slave_1: entered promiscuous mode
[  147.760818][ T7129] gretap0: entered promiscuous mode
[  147.787122][ T7129] debugfs: 'hsr1' already exists in 'hsr'
[  147.797947][ T7129] Cannot create hsr debugfs directory
[  147.803351][ T7129] hsr1: entered promiscuous mode
[  147.937582][ T7137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  147.944405][ T7137] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.003869][ T7137] vhci_hcd vhci_hcd.0: Device attached
[  148.191298][ T7147] vhci_hcd: connection closed
[  148.206837][ T7154] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[  148.459902][ T7154] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.900100][ T5915] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  148.923392][ T1100] vhci_hcd vhci_hcd.4: stop threads
[  148.929826][ T5915] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  148.945175][ T1100] vhci_hcd vhci_hcd.4: release socket
[  148.966174][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  148.975710][ T5915] usb 2-1: USB disconnect, device number 14
[  148.981768][ T1100] vhci_hcd vhci_hcd.4: disconnect device
[  149.047630][    T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  149.077113][    T9] usb 41-1: enqueue for inactive port 0
[  149.176978][ T7157] bond1: (slave veth3): Enslaving as an active interface with a down link
[  149.212188][ T7168] vlan2: entered allmulticast mode
[  149.496087][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  149.520297][   T29] audit: type=1400 audit(1775996985.894:350): avc:  denied  { connect } for  pid=7152 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  149.569669][   T29] audit: type=1400 audit(1775996985.894:351): avc:  denied  { write } for  pid=7152 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  149.902186][ T7191] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  150.300583][   T29] audit: type=1400 audit(1775996986.674:352): avc:  denied  { setopt } for  pid=7179 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  151.487147][   T29] audit: type=1400 audit(1775996986.674:353): avc:  denied  { getopt } for  pid=7179 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  151.694659][ T7203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3792214343 (30337714744 ns) > initial count (9154992248 ns). Using initial count to start timer.
[  151.788912][ T7209] FAULT_INJECTION: forcing a failure.
[  151.788912][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  151.875391][ T7209] CPU: 1 UID: 0 PID: 7209 Comm: syz.1.341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.875420][ T7209] Tainted: [L]=SOFTLOCKUP
[  151.875426][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  151.875435][ T7209] Call Trace:
[  151.875442][ T7209]  <TASK>
[  151.875448][ T7209]  dump_stack_lvl+0x100/0x190
[  151.875479][ T7209]  should_fail_ex.cold+0x5/0xa
[  151.875503][ T7209]  _copy_from_user+0x2e/0xd0
[  151.875524][ T7209]  memdup_user+0x6b/0xe0
[  151.875542][ T7209]  kvm_arch_vcpu_ioctl+0x30f/0x5740
[  151.875569][ T7209]  ? mark_held_locks+0x40/0x70
[  151.875588][ T7209]  ? finish_task_switch.isra.0+0x205/0xb80
[  151.875613][ T7209]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  151.875635][ T7209]  ? finish_task_switch.isra.0+0x205/0xb80
[  151.875657][ T7209]  ? rcu_is_watching+0x12/0xc0
[  151.875678][ T7209]  ? trace_sched_exit_tp+0x13a/0x180
[  151.875704][ T7209]  ? __lock_acquire+0x4a5/0x2630
[  151.875728][ T7209]  ? do_raw_spin_lock+0x128/0x260
[  151.875752][ T7209]  ? mark_held_locks+0x40/0x70
[  151.875768][ T7209]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  151.875797][ T7209]  ? __mutex_lock+0x7ca/0x1b90
[  151.875811][ T7209]  ? lockdep_hardirqs_on+0x78/0x100
[  151.875828][ T7209]  ? __mutex_lock+0x7ca/0x1b90
[  151.875845][ T7209]  ? __mutex_lock+0x26a/0x1b90
[  151.875862][ T7209]  ? kvm_vcpu_ioctl+0x322/0x1730
[  151.875891][ T7209]  ? __pfx___mutex_lock+0x10/0x10
[  151.875906][ T7209]  ? kasan_quarantine_put+0x104/0x240
[  151.875932][ T7209]  ? lockdep_hardirqs_on+0x78/0x100
[  151.875949][ T7209]  ? tomoyo_path_number_perm+0x28f/0x580
[  151.875976][ T7209]  ? tomoyo_path_number_perm+0x188/0x580
[  151.876001][ T7209]  ? kvm_vcpu_ioctl+0x8a0/0x1730
[  151.876024][ T7209]  kvm_vcpu_ioctl+0x8a0/0x1730
[  151.876053][ T7209]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  151.876080][ T7209]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  151.876104][ T7209]  ? do_vfs_ioctl+0x226/0x13e0
[  151.876130][ T7209]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  151.876157][ T7209]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  151.876192][ T7209]  ? __fget_files+0x215/0x3d0
[  151.876211][ T7209]  ? hook_file_ioctl_common+0x146/0x410
[  151.876237][ T7209]  ? selinux_file_ioctl+0x139/0x290
[  151.876262][ T7209]  ? selinux_file_ioctl+0xb4/0x290
[  151.876290][ T7209]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  151.876317][ T7209]  __x64_sys_ioctl+0x18e/0x210
[  151.876346][ T7209]  do_syscall_64+0x106/0xf80
[  151.876361][ T7209]  ? clear_bhb_loop+0x40/0x90
[  151.876382][ T7209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.876398][ T7209] RIP: 0033:0x7fbcf7f9c819
[  151.876413][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.876429][ T7209] RSP: 002b:00007fbcf8e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  151.876446][ T7209] RAX: ffffffffffffffda RBX: 00007fbcf8216090 RCX: 00007fbcf7f9c819
[  151.876457][ T7209] RDX: 0000200000000280 RSI: 000000004400ae8f RDI: 0000000000000007
[  151.876467][ T7209] RBP: 00007fbcf8e70090 R08: 0000000000000000 R09: 0000000000000000
[  151.876477][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.876486][ T7209] R13: 00007fbcf8216128 R14: 00007fbcf8216090 R15: 00007ffdd53d49a8
[  151.876510][ T7209]  </TASK>
[  152.619399][ T7216] /dev/nullb0: Can't open blockdev
[  153.404838][   T29] audit: type=1400 audit(1775996989.774:354): avc:  denied  { append } for  pid=7219 comm="syz.2.345" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  153.428799][ T7221] netlink: 72 bytes leftover after parsing attributes in process `syz.2.345'.
[  153.446034][   T29] audit: type=1400 audit(1775996989.814:355): avc:  denied  { mounton } for  pid=7219 comm="syz.2.345" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  153.524386][   T29] audit: type=1400 audit(1775996989.814:356): avc:  denied  { mount } for  pid=7219 comm="syz.2.345" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  153.604748][ T7231] netlink: 148 bytes leftover after parsing attributes in process `syz.3.350'.
[  153.665011][ T7231] netlink: 116 bytes leftover after parsing attributes in process `syz.3.350'.
[  153.724203][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'.
[  153.834766][   T29] audit: type=1400 audit(1775996990.204:357): avc:  denied  { create } for  pid=7239 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  153.925373][ T7244] FAULT_INJECTION: forcing a failure.
[  153.925373][ T7244] name fail_iommufd, interval 1, probability 0, space 0, times 1
[  153.985781][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.3.354 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.985811][ T7244] Tainted: [L]=SOFTLOCKUP
[  153.985816][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  153.985826][ T7244] Call Trace:
[  153.985832][ T7244]  <TASK>
[  153.985839][ T7244]  dump_stack_lvl+0x100/0x190
[  153.985874][ T7244]  should_fail_ex.cold+0x5/0xa
[  153.985898][ T7244]  pfn_reader_user_pin+0x1fc/0x10f0
[  153.985932][ T7244]  ? __pfx_pfn_reader_user_pin+0x10/0x10
[  153.985953][ T7244]  ? __pfx_stack_trace_save+0x10/0x10
[  153.985977][ T7244]  ? interval_tree_span_iter_first+0x329/0x610
[  153.986004][ T7244]  iopt_pages_fill_xarray+0x494/0xdd0
[  153.986021][ T7244]  ? kasan_save_stack+0x3f/0x50
[  153.986050][ T7244]  ? do_syscall_64+0x106/0xf80
[  153.986066][ T7244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.986086][ T7244]  ? __pfx_iopt_pages_fill_xarray+0x10/0x10
[  153.986127][ T7244]  ? kasan_save_track+0x14/0x30
[  153.986154][ T7244]  iopt_area_add_access+0x22a/0x410
[  153.986173][ T7244]  iommufd_access_pin_pages+0x649/0xa10
[  153.986206][ T7244]  ? __pfx_iommufd_access_pin_pages+0x10/0x10
[  153.986230][ T7244]  ? __kvmalloc_node_noprof+0x37b/0xa00
[  153.986255][ T7244]  ? iommufd_test+0x45cb/0x6610
[  153.986281][ T7244]  iommufd_test+0x4631/0x6610
[  153.986305][ T7244]  ? __pfx_iommufd_test+0x10/0x10
[  153.986325][ T7244]  ? tomoyo_path_number_perm+0x188/0x580
[  153.986357][ T7244]  ? find_held_lock+0x2b/0x80
[  153.986380][ T7244]  ? __might_fault+0xc5/0x140
[  153.986402][ T7244]  ? __might_fault+0xc5/0x140
[  153.986436][ T7244]  iommufd_fops_ioctl+0x358/0x520
[  153.986460][ T7244]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  153.986487][ T7244]  ? __fget_files+0x215/0x3d0
[  153.986505][ T7244]  ? hook_file_ioctl_common+0x146/0x410
[  153.986539][ T7244]  ? selinux_file_ioctl+0x139/0x290
[  153.986565][ T7244]  ? selinux_file_ioctl+0xb4/0x290
[  153.986593][ T7244]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  153.986618][ T7244]  __x64_sys_ioctl+0x18e/0x210
[  153.986647][ T7244]  do_syscall_64+0x106/0xf80
[  153.986662][ T7244]  ? clear_bhb_loop+0x40/0x90
[  153.986684][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.986700][ T7244] RIP: 0033:0x7f80bb79c819
[  153.986716][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.986732][ T7244] RSP: 002b:00007f80bc5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  153.986750][ T7244] RAX: ffffffffffffffda RBX: 00007f80bba15fa0 RCX: 00007f80bb79c819
[  153.986761][ T7244] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003
[  153.986771][ T7244] RBP: 00007f80bc5bf090 R08: 0000000000000000 R09: 0000000000000000
[  153.986780][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.986790][ T7244] R13: 00007f80bba16038 R14: 00007f80bba15fa0 R15: 00007ffed999e628
[  153.986816][ T7244]  </TASK>
[  154.321828][ T7247] ieee802154 phy0 wpan0: encryption failed: -22
[  154.340416][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.799989][   T29] audit: type=1400 audit(1775996991.074:358): avc:  denied  { read write } for  pid=7239 comm="syz.1.353" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  154.829609][   T29] audit: type=1400 audit(1775996991.084:359): avc:  denied  { open } for  pid=7239 comm="syz.1.353" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  155.070795][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[  155.268437][   T29] audit: type=1400 audit(1775996991.094:360): avc:  denied  { name_bind } for  pid=7239 comm="syz.1.353" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  155.302596][   T29] audit: type=1400 audit(1775996991.464:361): avc:  denied  { read write } for  pid=7250 comm="syz.2.356" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  155.326749][   T29] audit: type=1400 audit(1775996991.464:362): avc:  denied  { open } for  pid=7250 comm="syz.2.356" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  155.362444][ T7259] netlink: 260 bytes leftover after parsing attributes in process `syz.0.359'.
[  155.376101][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.0.359'.
[  155.386226][   T29] audit: type=1400 audit(1775996991.464:363): avc:  denied  { ioctl } for  pid=7250 comm="syz.2.356" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  155.469317][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'.
[  155.483915][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'.
[  156.108127][   T29] audit: type=1400 audit(1775996992.484:364): avc:  denied  { ioctl } for  pid=7261 comm="syz.0.360" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  157.149256][   T29] audit: type=1400 audit(1775996993.524:365): avc:  denied  { ioctl } for  pid=7271 comm="syz.0.364" path="socket:[15957]" dev="sockfs" ino=15957 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.465048][   T29] audit: type=1400 audit(1775996993.524:366): avc:  denied  { listen } for  pid=7271 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.747070][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'.
[  159.147521][ T7318] loop2: detected capacity change from 0 to 7
[  159.163278][ T5798] Dev loop2: unable to read RDB block 7
[  159.170397][ T5798]  loop2: AHDI p1 p2 p3
[  159.174971][ T5798] loop2: partition table partially beyond EOD, truncated
[  159.191908][ T5798] loop2: p1 start 1818582900 is beyond EOD, truncated
[  159.201154][ T5798] loop2: p3 start 335544320 is beyond EOD, truncated
[  159.216292][ T7318] Dev loop2: unable to read RDB block 7
[  159.223068][ T7318]  loop2: AHDI p1 p2 p3
[  159.234400][ T7318] loop2: partition table partially beyond EOD, truncated
[  159.244086][ T7318] loop2: p1 start 1818582900 is beyond EOD, truncated
[  159.252594][ T7318] loop2: p3 start 335544320 is beyond EOD, truncated
[  159.569531][   T29] audit: type=1400 audit(1775996995.944:367): avc:  denied  { getopt } for  pid=7319 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  159.669753][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'.
[  159.712633][ T7322] netlink: 'syz.2.381': attribute type 30 has an invalid length.
[  160.052336][ T7338] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  160.125774][ T7337] futex_wake_op: syz.4.385 tries to shift op by 144; fix this program
[  160.228851][ T7336] netlink: 'syz.1.387': attribute type 1 has an invalid length.
[  160.257568][ T7332] syzkaller0: entered promiscuous mode
[  160.263084][ T7332] syzkaller0: entered allmulticast mode
[  160.321049][ T7336] bond2: entered promiscuous mode
[  160.385554][ T7336] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.409743][ T7342] ipvlan2: entered allmulticast mode
[  160.415177][ T7342] bond2: entered allmulticast mode
[  160.575012][   T29] audit: type=1400 audit(1775996996.954:368): avc:  denied  { read append } for  pid=7348 comm="syz.3.390" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  160.605602][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.631107][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.658831][   T29] audit: type=1400 audit(1775996996.954:369): avc:  denied  { open } for  pid=7348 comm="syz.3.390" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  160.765394][   T29] audit: type=1400 audit(1775996997.134:370): avc:  denied  { read } for  pid=7352 comm="syz.4.391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.798730][   T29] audit: type=1400 audit(1775996997.134:371): avc:  denied  { open } for  pid=7352 comm="syz.4.391" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.822115][   T29] audit: type=1400 audit(1775996997.164:372): avc:  denied  { ioctl } for  pid=7352 comm="syz.4.391" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.857744][   T29] audit: type=1400 audit(1775996997.234:373): avc:  denied  { write } for  pid=7352 comm="syz.4.391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.881291][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  161.058610][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.069010][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.082162][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  161.096556][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  161.114366][ T5915] usb 4-1: SerialNumber: syz
[  161.347916][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'.
[  161.363100][ T7349] binder: BINDER_SET_CONTEXT_MGR already set
[  161.368855][ T7350] binder_alloc: binder_alloc_mmap_handler: 7348 200000ffe000-200001000000 already mapped failed -16
[  161.372285][ T7349] binder: 7348:7349 ioctl 4018620d 200000004a80 returned -16
[  161.461210][ T5915] usb 4-1: 0:2 : does not exist
[  161.466205][ T5915] usb 4-1: unit 5: unexpected type 0x0a
[  161.514451][ T5915] usb 4-1: USB disconnect, device number 16
[  161.520744][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  161.693803][   T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  161.705766][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  161.712462][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  161.721626][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.732192][   T10] usb 5-1: config 0 descriptor??
[  161.746692][ T7368] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  161.872247][ T7345] bond2: (slave bridge1): making interface the new active one
[  161.880839][ T7345] bridge1: entered promiscuous mode
[  161.886301][ T7345] bridge1: entered allmulticast mode
[  161.894351][ T7345] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  161.965571][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.977649][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.397'.
[  162.006338][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.114853][ T7382] xt_l2tp: invalid flags combination: 0
[  162.121214][   T29] audit: type=1400 audit(1775996998.484:374): avc:  denied  { shutdown } for  pid=7378 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  162.151545][ T5859] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.166754][   T29] audit: type=1400 audit(1775996998.484:375): avc:  denied  { read } for  pid=7378 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  162.426692][   T10] hid_parser_main: 7 callbacks suppressed
[  162.426707][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.465521][ T7387] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  162.482644][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.487233][ T5859] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  162.511184][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.513401][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.530249][ T5859] usb 1-1: config 0 descriptor??
[  162.545349][ T5859] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  162.635866][ T7383] tmpfs: Bad value for 'mpol'
[  162.642778][ T7383] bridge0: entered promiscuous mode
[  162.648061][ T7383] bridge0: entered allmulticast mode
[  162.674471][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.681831][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.746346][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.753582][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.918724][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.975064][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  162.994700][   T10] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0
[  163.005564][   T10] mcp2200 0003:04D8:00DF.0004: unexpected long global item
[  163.036844][   T10] mcp2200 0003:04D8:00DF.0004: can't parse reports
[  163.074062][   T10] mcp2200 0003:04D8:00DF.0004: probe with driver mcp2200 failed with error -22
[  163.092664][   T10] usb 5-1: USB disconnect, device number 11
[  163.472832][ T5859] usb 1-1: USB disconnect, device number 10
[  163.783962][   T29] audit: type=1400 audit(1775997000.154:376): avc:  denied  { create } for  pid=7395 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  163.842022][   T29] audit: type=1400 audit(1775997000.154:377): avc:  denied  { setopt } for  pid=7395 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  163.872573][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  164.036135][   T10] usb 4-1: Using ep0 maxpacket: 32
[  164.053550][   T10] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  164.072864][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.126764][   T10] usb 4-1: config 0 descriptor??
[  164.156233][   T10] as10x_usb: device has been detected
[  164.175309][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  164.208600][   T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  164.231371][ T7407] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[  164.259382][   T10] as10x_usb: error during firmware upload part1
[  164.277387][   T10] Registered device nBox DVB-T Dongle
[  164.319788][ T7407] 8021q: adding VLAN 0 to HW filter on device bond3
[  164.371039][   T10] usb 4-1: USB disconnect, device number 17
[  164.399700][ T7409] bond3: (slave veth3): Enslaving as an active interface with a down link
[  164.415820][   T10] Unregistered device nBox DVB-T Dongle
[  164.427725][   T10] as10x_usb: device has been disconnected
[  164.450761][ T7412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.407'.
[  164.487732][ T7409] tmpfs: Unknown parameter 'fowner>18446744073709551615'
[  164.697941][ T7416] syzkaller0: entered promiscuous mode
[  164.703456][ T7416] syzkaller0: entered allmulticast mode
[  164.920205][ T7427] openvswitch: netlink: Invalid VLAN frame
[  166.600438][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'.
[  167.399853][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.446288][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.777370][ T7433] syzkaller0: entered promiscuous mode
[  167.782925][ T7433] syzkaller0: entered allmulticast mode
[  167.806511][ T7443] tipc: Started in network mode
[  167.811467][ T7443] tipc: Node identity e68899528ae7, cluster identity 4711
[  167.819440][ T7443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.833575][ T1156] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.845953][ T1156] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.880930][ T7431] tipc: Resetting bearer <eth:syzkaller0>
[  167.951504][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  167.951587][   T29] audit: type=1400 audit(1775997004.314:379): avc:  denied  { getopt } for  pid=7472 comm="syz.1.417" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  167.979453][ T7475] netlink: 108 bytes leftover after parsing attributes in process `syz.1.417'.
[  168.137208][ T7431] tipc: Disabling bearer <eth:syzkaller0>
[  168.156792][   T29] audit: type=1400 audit(1775997004.354:380): avc:  denied  { bind } for  pid=7472 comm="syz.1.417" lport=40381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  168.249241][ T1156] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.272913][ T1156] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.289823][   T29] audit: type=1400 audit(1775997004.354:381): avc:  denied  { node_bind } for  pid=7472 comm="syz.1.417" saddr=172.20.20.57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  168.621559][ T7497] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  168.993893][ T7499] syzkaller0: entered promiscuous mode
[  168.999545][ T7499] syzkaller0: entered allmulticast mode
[  169.211995][   T29] audit: type=1400 audit(1775997005.554:382): avc:  denied  { write } for  pid=7484 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  169.269167][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'.
[  171.138032][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'.
[  171.231089][   T29] audit: type=1400 audit(1775997007.604:383): avc:  denied  { append } for  pid=7522 comm="syz.0.431" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  171.432976][   T29] audit: type=1400 audit(1775997007.804:384): avc:  denied  { bind } for  pid=7522 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  171.452601][   T29] audit: type=1400 audit(1775997007.804:385): avc:  denied  { setopt } for  pid=7522 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  171.550622][   T29] audit: type=1400 audit(1775997007.804:386): avc:  denied  { connect } for  pid=7522 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  172.012933][ T7540] team0: Device gtp0 is up. Set it down before adding it as a team port
[  172.062788][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.433'.
[  172.814681][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[  173.044206][ T7567] loop7: detected capacity change from 0 to 7
[  173.205690][ T5798] Dev loop7: unable to read RDB block 7
[  173.212379][ T5798]  loop7: unable to read partition table
[  173.219761][ T5798] loop7: partition table beyond EOD, truncated
[  173.247049][ T7459] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  173.516693][ T7462] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  173.553828][ T7459] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  173.602404][ T7459] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  173.615836][ T7459] usb 1-1: Product: syz
[  173.628147][ T7459] usb 1-1: Manufacturer: syz
[  173.632912][ T7459] usb 1-1: SerialNumber: syz
[  173.693363][ T7459] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  173.737270][ T7462] usb 5-1: config index 0 descriptor too short (expected 259, got 111)
[  173.861218][ T7557] ipip0: entered promiscuous mode
[  173.867418][ T7462] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  173.909750][ T7462] usb 5-1: can't read configurations, error -22
[  173.916795][ T7557] ipip0: entered allmulticast mode
[  173.942253][ T7567] Dev loop7: unable to read RDB block 7
[  173.978127][ T7567]  loop7: unable to read partition table
[  173.983945][ T7567] loop7: partition table beyond EOD, truncated
[  174.006459][ T7567] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  174.412670][ T7579] NILFS (nullb0): couldn't find nilfs on the device
[  174.493304][ T7459] vp7045: USB control message 'out' went wrong.
[  174.502621][ T7459] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  174.513116][ T7459] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  174.536389][ T7459] usb 1-1: USB disconnect, device number 11
[  174.623435][ T7581] input: syz1 as /devices/virtual/input/input15
[  174.716144][ T7462] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  174.837809][ T7586] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  174.883089][ T7586] SELinux:  Context system_u:object_r:devpts_t:s0 is not valid (left unmapped).
[  174.898543][   T29] audit: type=1400 audit(1775997011.254:387): avc:  denied  { relabelfrom } for  pid=7582 comm="syz.3.448" name="ALG" dev="sockfs" ino=16771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  175.182155][   T29] audit: type=1400 audit(1775997011.264:388): avc:  denied  { relabelto } for  pid=7582 comm="syz.3.448" name="ALG" dev="sockfs" ino=16771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=alg_socket permissive=1 trawcon="system_u:object_r:devpts_t:s0"
[  175.239011][ T7588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7588 comm=syz.0.449
[  175.256803][ T7462] usb 5-1: config index 0 descriptor too short (expected 259, got 111)
[  175.265132][ T7462] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  175.287748][ T7462] usb 5-1: can't read configurations, error -22
[  175.296567][ T7462] usb usb5-port1: attempt power cycle
[  175.426086][ T7594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.569602][ T7596] ufs: You didn't specify the type of your ufs filesystem
[  175.569602][ T7596] 
[  175.569602][ T7596] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  175.569602][ T7596] 
[  175.569602][ T7596] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  175.601605][ T7596] ufs: ufstype=old is supported read-only
[  175.611121][ T7596] ufs: ufs_fill_super(): bad magic number
[  175.687761][ T7462] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  175.823619][ T7594] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  175.833799][ T7594] 8021q: adding VLAN 0 to HW filter on device team0
[  175.843637][ T7594] team0: entered promiscuous mode
[  175.848802][ T7594] team_slave_0: entered promiscuous mode
[  175.854646][ T7594] team_slave_1: entered promiscuous mode
[  175.861426][ T7594] bond0: (slave team0): Enslaving as an active interface with an up link
[  175.887338][ T7462] usb 5-1: config index 0 descriptor too short (expected 259, got 111)
[  175.999926][ T7462] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  176.027801][ T7462] usb 5-1: can't read configurations, error -22
[  176.038492][ T7601] netlink: 76 bytes leftover after parsing attributes in process `syz.3.453'.
[  176.118496][ T7609] hub 9-0:1.0: USB hub found
[  176.124624][ T7609] hub 9-0:1.0: 1 port detected
[  176.503099][ T7614] futex_wake_op: syz.0.455 tries to shift op by 144; fix this program
[  176.528334][ T7614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  177.026096][   T92] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  177.107720][ T7618] syz.4.456 uses old SIOCAX25GETINFO
[  177.240892][ T7620] netlink: 'syz.4.456': attribute type 10 has an invalid length.
[  177.325969][   T29] audit: type=1400 audit(1775997013.514:389): avc:  denied  { module_request } for  pid=7616 comm="syz.4.456" kmod="crypto-xts(camellia)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  177.406978][ T7620] veth0_vlan: left promiscuous mode
[  177.454539][ T7620] veth0_vlan: entered promiscuous mode
[  177.547923][   T92] usb 1-1: unable to get BOS descriptor or descriptor too short
[  177.562666][   T92] usb 1-1: not running at top speed; connect to a high speed hub
[  177.593676][   T92] usb 1-1: config 2 has an invalid interface number: 212 but max is 1
[  177.609669][ T7620] team0: Device veth0_vlan failed to register rx_handler
[  177.634362][   T92] usb 1-1: config 2 has an invalid interface number: 226 but max is 1
[  177.665962][   T92] usb 1-1: config 2 has no interface number 0
[  177.685379][   T92] usb 1-1: config 2 has no interface number 1
[  177.700227][   T92] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  177.712946][ T7620] tipc: Resetting bearer <eth:ipvlan1>
[  177.746170][   T92] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  177.799539][   T92] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  177.829955][   T92] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  177.885054][   T92] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  177.919001][   T92] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  178.021954][   T92] usb 1-1: config 2 interface 212 has no altsetting 0
[  178.052486][   T92] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  178.062845][   T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.089798][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.157243][ T7634] netlink: 'syz.4.457': attribute type 1 has an invalid length.
[  178.164937][ T7634] netlink: 'syz.4.457': attribute type 4 has an invalid length.
[  178.172901][ T7634] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.457'.
[  178.185868][ T7634] netlink: 'syz.4.457': attribute type 1 has an invalid length.
[  178.193626][ T7634] netlink: 'syz.4.457': attribute type 4 has an invalid length.
[  178.201418][ T7634] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.457'.
[  178.451284][   T92] usb 1-1: Product: syz
[  178.455503][   T92] usb 1-1: Manufacturer: syz
[  178.459169][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.460149][   T92] usb 1-1: SerialNumber: syz
[  178.566003][ T7453] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  178.756085][ T7462] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  179.181611][ T7643] netlink: 260 bytes leftover after parsing attributes in process `syz.1.462'.
[  179.196735][ T7453] usb 3-1: Using ep0 maxpacket: 8
[  179.210575][ T7643] netlink: 104 bytes leftover after parsing attributes in process `syz.1.462'.
[  179.216376][ T7462] usb 5-1: Invalid ep0 maxpacket: 32
[  179.233838][ T7453] usb 3-1: device descriptor read/all, error -71
[  179.249805][   T92] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input16
[  179.256032][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'.
[  179.279019][   T92] usb 1-1: USB disconnect, device number 12
[  179.279281][    C1] xpad 1-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  179.396440][ T7462] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  179.403967][ T7646] futex_wake_op: syz.2.463 tries to shift op by 144; fix this program
[  179.413152][ T7646] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  179.816004][ T7462] usb 5-1: Invalid ep0 maxpacket: 32
[  179.821717][ T7462] usb usb5-port1: attempt power cycle
[  180.803483][ T7654] input: syz1 as /devices/virtual/input/input17
[  181.045121][ T7658] xt_cgroup: invalid path, errno=-2
[  181.091340][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.466'.
[  181.133252][ T7663] futex_wake_op: syz.1.468 tries to shift op by 144; fix this program
[  181.143116][ T7663] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  181.994119][ T7680] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  182.011230][ T7681] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  182.096872][ T7685] loop2: detected capacity change from 0 to 7
[  182.117636][ T7685] Dev loop2: unable to read RDB block 7
[  182.123353][ T7685]  loop2: AHDI p1 p2 p3
[  182.129721][ T7685] loop2: partition table partially beyond EOD, truncated
[  182.139878][ T7685] loop2: p1 start 1818582900 is beyond EOD, truncated
[  182.146967][ T7685] loop2: p3 start 335544320 is beyond EOD, truncated
[  182.246897][   T29] audit: type=1400 audit(1775997018.624:390): avc:  denied  { append } for  pid=7689 comm="syz.1.477" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  182.536358][ T7460] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  182.559827][ T7700] netlink: 'syz.3.479': attribute type 10 has an invalid length.
[  182.622062][ T7701] loop5: detected capacity change from 0 to 7
[  182.676462][ T7702] netlink: 'syz.3.479': attribute type 10 has an invalid length.
[  182.684309][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.479'.
[  182.996026][ T7701] Dev loop5: unable to read RDB block 7
[  183.001645][ T7701]  loop5: AHDI p1
[  183.005287][ T7701] loop5: partition table partially beyond EOD, truncated
[  183.262392][ T7702] batadv0: entered allmulticast mode
[  183.268893][ T7702] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  183.385762][ T7709] futex_wake_op: syz.3.481 tries to shift op by 144; fix this program
[  183.395757][ T7709] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  183.467290][ T7460] usb 3-1: config 0 has an invalid interface number: 221 but max is 0
[  183.476023][ T7460] usb 3-1: config 0 has no interface number 0
[  183.483892][ T7460] usb 3-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.496733][ T7460] usb 3-1: config 0 interface 221 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.581211][ T7460] usb 3-1: config 0 interface 221 has no altsetting 0
[  183.589805][ T7460] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00
[  183.603414][ T7460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.613589][ T7460] usb 3-1: config 0 descriptor??
[  183.891987][ T7717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.530907][ T7460] usbhid 3-1:0.221: can't add hid device: -71
[  184.537502][ T7460] usbhid 3-1:0.221: probe with driver usbhid failed with error -71
[  184.567098][ T7460] usb 3-1: USB disconnect, device number 17
[  184.646890][ T7453] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  184.829462][   T29] audit: type=1400 audit(1775997021.174:391): avc:  denied  { read } for  pid=7730 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.882244][ T7453] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  184.890681][ T7453] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  184.901025][ T7453] usb 2-1: config 0 has no interface number 0
[  185.115131][ T7453] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  185.135598][ T7453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.165281][ T7453] usb 2-1: Product: syz
[  185.187391][ T7453] usb 2-1: Manufacturer: syz
[  185.292228][ T7453] usb 2-1: SerialNumber: syz
[  185.323091][ T7453] usb 2-1: config 0 descriptor??
[  185.764442][ T5807] Bluetooth: hci4: command 0x0405 tx timeout
[  185.764480][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[  185.770707][ T5807] Bluetooth: hci0: command 0x0406 tx timeout
[  185.787761][ T5807] Bluetooth: hci3: command 0x0406 tx timeout
[  185.793735][ T5812] Bluetooth: hci2: command 0x0406 tx timeout
[  185.816270][   T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  185.987491][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  185.998692][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  186.366042][   T29] audit: type=1400 audit(1775997022.704:392): avc:  denied  { read } for  pid=7719 comm="syz.1.484" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  186.396196][   T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  186.410972][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.534589][ T7453] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  186.545227][ T7453] uvcvideo 2-1:0.64: No valid video chain found.
[  186.566029][   T29] audit: type=1400 audit(1775997022.704:393): avc:  denied  { open } for  pid=7719 comm="syz.1.484" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  186.571573][ T7453] usb 2-1: USB disconnect, device number 15
[  186.597497][   T42] usb 4-1: config 0 descriptor??
[  186.850838][   T29] audit: type=1400 audit(1775997023.194:394): avc:  denied  { create } for  pid=7753 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  186.967942][   T29] audit: type=1400 audit(1775997023.194:395): avc:  denied  { setopt } for  pid=7753 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  187.045497][   T29] audit: type=1400 audit(1775997023.194:396): avc:  denied  { getopt } for  pid=7753 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  187.116131][ T7462] libceph: connect (1)[c::]:6789 error -101
[  187.122946][ T7460] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  187.131358][ T7462] libceph: mon0 (1)[c::]:6789 connect error
[  187.175128][ T7462] libceph: connect (1)[c::]:6789 error -101
[  187.194363][   T29] audit: type=1400 audit(1775997023.564:397): avc:  denied  { create } for  pid=7762 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  187.218776][ T7462] libceph: mon0 (1)[c::]:6789 connect error
[  187.276312][   T29] audit: type=1400 audit(1775997023.564:398): avc:  denied  { write } for  pid=7762 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  187.296366][ T7460] usb 5-1: Using ep0 maxpacket: 16
[  187.318367][ T7460] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  187.420235][ T7772] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[  187.471299][ T7460] usb 5-1: config 0 has no interface number 0
[  187.500901][ T7462] libceph: connect (1)[c::]:6789 error -101
[  187.584144][ T7763] ceph: No mds server is up or the cluster is laggy
[  187.651644][ T7462] libceph: mon0 (1)[c::]:6789 connect error
[  187.658925][   T42] ath6kl: Failed to submit usb control message: -110
[  187.665992][   T29] audit: type=1400 audit(1775997023.614:399): avc:  denied  { read } for  pid=7762 comm="syz.0.495" path="socket:[18170]" dev="sockfs" ino=18170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  187.689549][ T7460] usb 5-1: too many endpoints for config 0 interface 1 altsetting 240: 255, using maximum allowed: 30
[  187.701307][   T42] ath6kl: unable to send the bmi data to the device: -110
[  187.708635][ T7460] usb 5-1: config 0 interface 1 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  187.721997][   T42] ath6kl: Unable to send get target info: -110
[  187.729909][ T7460] usb 5-1: config 0 interface 1 has no altsetting 0
[  187.739581][ T7460] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  187.790924][   T42] ath6kl: Failed to init ath6kl core: -110
[  187.793713][   T29] audit: type=1400 audit(1775997024.164:400): avc:  denied  { mount } for  pid=7762 comm="syz.0.495" name="/" dev="overlay" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  187.798388][   T42] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110
[  187.828150][ T7460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.837170][ T7460] usb 5-1: Product: syz
[  187.841333][ T7460] usb 5-1: Manufacturer: syz
[  187.846066][ T7460] usb 5-1: SerialNumber: syz
[  187.852420][ T7460] usb 5-1: config 0 descriptor??
[  188.075672][ T7460] usb 5-1: selecting invalid altsetting 1
[  188.082840][   T29] audit: type=1400 audit(1775997024.444:401): avc:  denied  { setopt } for  pid=7755 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  188.102573][ T7460] speedtch 5-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  188.147148][ T7460] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22!
[  188.212450][   T42] usb 4-1: USB disconnect, device number 18
[  188.227935][ T7460] speedtch 5-1:0.1: probe with driver speedtch failed with error -22
[  188.279974][ T7460] usb 5-1: USB disconnect, device number 19
[  188.785877][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  188.792235][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  189.206127][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  189.556047][   T10] usb 5-1: Using ep0 maxpacket: 32
[  189.565334][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  189.575352][   T10] usb 5-1: config 0 has no interface number 0
[  189.582045][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.593814][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  189.603215][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.612931][   T10] usb 5-1: Product: syz
[  189.617622][   T10] usb 5-1: Manufacturer: syz
[  189.622344][   T10] usb 5-1: SerialNumber: syz
[  189.634816][   T10] usb 5-1: config 0 descriptor??
[  189.648405][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  189.670046][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  189.812021][ T7796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.504'.
[  190.030025][   T29] audit: type=1400 audit(1775997026.404:402): avc:  denied  { unmount } for  pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  190.107188][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  190.168253][ T7800] futex_wake_op: syz.3.507 tries to shift op by 144; fix this program
[  190.180364][ T7800] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  190.197004][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  190.317304][ T7808] fuse: Bad value for 'rootmode'
[  190.343117][   T29] audit: type=1400 audit(1775997026.714:403): avc:  denied  { write } for  pid=7807 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  190.350548][   T10] em28xx 5-1:0.132: board has no eeprom
[  190.508726][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  190.521608][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  190.534879][ T7453] em28xx 5-1:0.132: Registering V4L2 extension
[  190.646304][   T10] usb 5-1: USB disconnect, device number 20
[  190.653307][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  190.990904][ T7826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7826 comm=syz.1.513
[  191.051158][ T7453] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  191.068742][ T7453] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  191.092720][ T7453] em28xx 5-1:0.132: No AC97 audio processor
[  191.135658][ T7832] syzkaller0: entered promiscuous mode
[  191.137885][ T7453] usb 5-1: Decoder not found
[  191.153089][ T7832] syzkaller0: entered allmulticast mode
[  191.157923][ T7453] em28xx 5-1:0.132: failed to create media graph
[  191.165158][ T7453] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  191.226044][ T7453] em28xx 5-1:0.132: Remote control support is not available for this card.
[  191.273262][   T10] em28xx 5-1:0.132: Closing input extension
[  191.278783][ T7840] loop5: detected capacity change from 0 to 7
[  191.312600][ T7840]  loop5: [POWERTEC] p1 p2 p3
[  191.322947][   T10] em28xx 5-1:0.132: Freeing device
[  191.338728][ T7840] loop5: p1 size 1835008 extends beyond EOD, truncated
[  191.386425][ T7840] loop5: p2 size 786432 extends beyond EOD, truncated
[  191.426181][ T7840] loop5: p3 start 131072 is beyond EOD, truncated
[  191.453348][ T7847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  191.723942][ T7856] syzkaller0: entered promiscuous mode
[  191.745745][ T7856] syzkaller0: entered allmulticast mode
[  191.780773][ T7856] tipc: Started in network mode
[  191.785687][ T7856] tipc: Node identity 9a54db926fed, cluster identity 4711
[  191.793218][ T7856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.801068][ T7855] tipc: Resetting bearer <eth:syzkaller0>
[  191.866060][ T7855] tipc: Disabling bearer <eth:syzkaller0>
[  193.299335][ T7877] team0: No ports can be present during mode change
[  193.512806][ T7889] futex_wake_op: syz.2.534 tries to shift op by 144; fix this program
[  193.551852][ T7889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  193.753510][   T29] audit: type=1400 audit(1775997030.124:404): avc:  denied  { load_policy } for  pid=7891 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  193.864936][ T7893] SELinux: failed to load policy
[  194.963294][   T29] audit: type=1400 audit(1775997030.534:405): avc:  denied  { ioctl } for  pid=7896 comm="syz.0.537" path="socket:[19751]" dev="sockfs" ino=19751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  195.436002][ T7459] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  195.456530][ T7909] input: syz1 as /devices/virtual/input/input18
[  195.486875][ T7909] FAULT_INJECTION: forcing a failure.
[  195.486875][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.540894][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.0.541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.540925][ T7909] Tainted: [L]=SOFTLOCKUP
[  195.540931][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  195.540941][ T7909] Call Trace:
[  195.540946][ T7909]  <TASK>
[  195.540953][ T7909]  dump_stack_lvl+0x100/0x190
[  195.540987][ T7909]  should_fail_ex.cold+0x5/0xa
[  195.541012][ T7909]  _copy_from_user+0x2e/0xd0
[  195.541034][ T7909]  input_event_from_user+0x123/0x310
[  195.541064][ T7909]  ? __pfx_input_event_from_user+0x10/0x10
[  195.541082][ T7909]  ? __pfx___might_resched+0x10/0x10
[  195.541104][ T7909]  ? read_tsc+0x9/0x20
[  195.541127][ T7909]  ? ktime_get+0x1a7/0x300
[  195.541150][ T7909]  ? input_event+0xbb/0xd0
[  195.541177][ T7909]  uinput_write+0xac8/0x10e0
[  195.541204][ T7909]  ? avc_policy_seqno+0x9/0x20
[  195.541223][ T7909]  ? __pfx_uinput_write+0x10/0x10
[  195.541244][ T7909]  ? bpf_lsm_file_permission+0x9/0x10
[  195.541269][ T7909]  ? security_file_permission+0x76/0x210
[  195.541295][ T7909]  ? rw_verify_area+0xce/0x6d0
[  195.541322][ T7909]  vfs_write+0x2aa/0x1070
[  195.541339][ T7909]  ? __pfx_uinput_write+0x10/0x10
[  195.541361][ T7909]  ? __pfx_vfs_write+0x10/0x10
[  195.541374][ T7909]  ? find_held_lock+0x2b/0x80
[  195.541395][ T7909]  ? __fget_files+0x215/0x3d0
[  195.541413][ T7909]  ? __fget_files+0x215/0x3d0
[  195.541437][ T7909]  ? __fget_files+0x21f/0x3d0
[  195.541463][ T7909]  ksys_write+0x1f8/0x250
[  195.541479][ T7909]  ? __pfx_ksys_write+0x10/0x10
[  195.541502][ T7909]  do_syscall_64+0x106/0xf80
[  195.541518][ T7909]  ? clear_bhb_loop+0x40/0x90
[  195.541539][ T7909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.541557][ T7909] RIP: 0033:0x7fc75499c819
[  195.541572][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.541588][ T7909] RSP: 002b:00007fc7558c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  195.541605][ T7909] RAX: ffffffffffffffda RBX: 00007fc754c15fa0 RCX: 00007fc75499c819
[  195.541617][ T7909] RDX: 000000000000045c RSI: 0000200000000380 RDI: 0000000000000003
[  195.541627][ T7909] RBP: 00007fc7558c6090 R08: 0000000000000000 R09: 0000000000000000
[  195.541636][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  195.541645][ T7909] R13: 00007fc754c16038 R14: 00007fc754c15fa0 R15: 00007ffc66c8e158
[  195.541669][ T7909]  </TASK>
[  195.544961][ T5798] udevd[5798]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory
[  195.554341][ T7915] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  195.561655][ T5798] udevd[5798]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  195.577729][ T7915] syzkaller0: entered promiscuous mode
[  195.609466][ T7459] usb 3-1: unable to get BOS descriptor or descriptor too short
[  195.613293][ T7915] syzkaller0: entered allmulticast mode
[  195.632210][ T7459] usb 3-1: not running at top speed; connect to a high speed hub
[  195.840137][ T7915] tipc: Started in network mode
[  195.841041][ T7459] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  195.853635][ T7459] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  195.856171][ T7915] tipc: Node identity f21a7617b1ee, cluster identity 4711
[  195.861885][ T7459] usb 3-1: config 2 has no interface number 0
[  195.875116][ T7459] usb 3-1: config 2 has no interface number 1
[  195.881707][ T7459] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  195.887629][ T7915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.892975][ T7459] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  195.912423][ T7459] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  195.923798][ T7459] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  195.934923][ T7459] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  195.953789][ T7914] tipc: Resetting bearer <eth:syzkaller0>
[  195.959673][ T7459] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  195.959706][ T7459] usb 3-1: config 2 interface 212 has no altsetting 0
[  195.961596][ T7459] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  195.989071][ T7460] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  196.000815][ T7459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.009481][ T7459] usb 3-1: Product: syz
[  196.009871][ T7914] tipc: Disabling bearer <eth:syzkaller0>
[  196.014114][ T7459] usb 3-1: Manufacturer: syz
[  196.025032][ T7459] usb 3-1: SerialNumber: syz
[  196.120091][ T7922] syzkaller0: entered promiscuous mode
[  196.125584][ T7922] syzkaller0: entered allmulticast mode
[  196.146843][ T7460] usb 4-1: device descriptor read/64, error -71
[  196.188416][   T42] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  196.255536][ T7459] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input19
[  196.322191][ T7459] usb 3-1: USB disconnect, device number 18
[  196.328265][    C1] xpad 3-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  196.368109][   T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  196.383255][   T42] usb 1-1: config 0 has no interface number 0
[  196.401931][ T7460] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  196.434437][   T42] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  196.486882][   T42] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.497256][   T42] usb 1-1: config 0 interface 1 has no altsetting 0
[  196.505130][   T42] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  196.514355][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.519178][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'.
[  196.540205][   T42] usb 1-1: config 0 descriptor??
[  196.615993][ T7460] usb 4-1: device descriptor read/64, error -71
[  196.737988][ T7460] usb usb4-port1: attempt power cycle
[  196.832659][ T7936] futex_wake_op: syz.1.551 tries to shift op by 144; fix this program
[  197.062629][ T7934] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  197.087395][   T42] usbhid 1-1:0.1: can't add hid device: -71
[  197.104573][   T42] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  197.217601][   T42] usb 1-1: USB disconnect, device number 13
[  197.316452][ T7460] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  197.336619][ T7460] usb 4-1: device descriptor read/8, error -71
[  197.432829][   T29] audit: type=1400 audit(1775997033.804:406): avc:  denied  { create } for  pid=7950 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  197.483712][   T29] audit: type=1400 audit(1775997033.804:407): avc:  denied  { ioctl } for  pid=7950 comm="syz.2.556" path="socket:[18736]" dev="sockfs" ino=18736 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  197.787018][ T7460] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  197.826402][ T7460] usb 4-1: device descriptor read/8, error -71
[  197.938629][ T7460] usb usb4-port1: unable to enumerate USB device
[  198.078604][ T7960] syzkaller0: entered promiscuous mode
[  198.084342][ T7960] syzkaller0: entered allmulticast mode
[  198.435408][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.167420][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.566'.
[  203.288825][ T7996] futex_wake_op: syz.3.568 tries to shift op by 144; fix this program
[  203.307209][ T7996] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  203.457047][   T29] audit: type=1400 audit(1775997039.834:408): avc:  denied  { ioctl } for  pid=8000 comm="syz.2.570" path="socket:[19988]" dev="sockfs" ino=19988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  203.711471][   T29] audit: type=1400 audit(1775997040.074:409): avc:  denied  { create } for  pid=7995 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  204.318181][   T29] audit: type=1400 audit(1775997040.684:410): avc:  denied  { ioctl } for  pid=8010 comm="syz.1.574" path="socket:[18889]" dev="sockfs" ino=18889 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.611551][ T8023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.578'.
[  205.027830][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.031342][ T8031] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.578'.
[  205.259984][ T7462] libceph: connect (1)[c::]:6789 error -101
[  205.266108][ T7462] libceph: mon0 (1)[c::]:6789 connect error
[  205.459245][ T8028] ceph: No mds server is up or the cluster is laggy
[  205.921750][ T8047] futex_wake_op: syz.3.580 tries to shift op by 144; fix this program
[  205.963709][ T8047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  206.746627][   T42] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  206.856132][   T92] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  206.908607][ T8068] netlink: 'syz.1.586': attribute type 1 has an invalid length.
[  207.266920][   T92] usb 3-1: Using ep0 maxpacket: 16
[  207.274324][   T92] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  207.283232][   T42] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.283565][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.305980][   T42] usb 4-1: not running at top speed; connect to a high speed hub
[  207.334565][   T42] usb 4-1: config 2 has an invalid interface number: 212 but max is 1
[  207.350878][   T42] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  207.376056][   T42] usb 4-1: config 2 has no interface number 0
[  207.382261][   T42] usb 4-1: config 2 has no interface number 1
[  207.389021][   T92] usb 3-1: config 0 descriptor??
[  207.401931][   T42] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  207.436113][   T42] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  207.454098][ T8064] /dev/nullb0: Can't open blockdev
[  207.563522][   T29] audit: type=1400 audit(1775997043.844:411): avc:  denied  { write } for  pid=8059 comm="syz.1.586" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  207.593879][   T42] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  207.624418][   T42] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  207.625369][   T92] gspca_main: sonixj-2.14.0 probing 0471:0327
[  207.654982][   T42] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  207.680556][   T42] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  207.744294][   T42] usb 4-1: config 2 interface 212 has no altsetting 0
[  207.953545][   T42] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  207.974506][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.390895][ T8089] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  208.535936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  208.556233][ T8089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.685994][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  209.017061][   T92] gspca_sonixj: reg_r err -110
[  209.018589][   T29] audit: type=1400 audit(1775997044.764:412): avc:  denied  { relabelfrom } for  pid=8085 comm="syz.0.592" name="UNIX-STREAM" dev="sockfs" ino=19015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  209.021914][   T92] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  209.084054][   T42] usb 4-1: Product: syz
[  209.110214][   T42] usb 4-1: Manufacturer: syz
[  209.115353][   T42] usb 4-1: SerialNumber: syz
[  209.121489][   T29] audit: type=1400 audit(1775997044.784:413): avc:  denied  { relabelto } for  pid=8085 comm="syz.0.592" name="UNIX-STREAM" dev="sockfs" ino=19015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:net_conf_t:s0"
[  209.177787][   T42] usb 4-1: can't set config #2, error -71
[  209.196234][   T42] usb 4-1: USB disconnect, device number 23
[  209.273215][ T8093] dummy0: entered promiscuous mode
[  209.280317][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'.
[  209.321692][   T92] usb 3-1: USB disconnect, device number 19
[  209.472824][   T29] audit: type=1400 audit(1775997045.834:414): avc:  denied  { getopt } for  pid=8095 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  210.846391][ T8129] netlink: 'syz.3.605': attribute type 3 has an invalid length.
[  210.995386][ T8134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8134 comm=syz.4.608
[  211.245966][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  211.504821][ T8148] syzkaller0: entered promiscuous mode
[  211.510397][ T8148] syzkaller0: entered allmulticast mode
[  211.546429][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  211.691639][   T42] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[  211.951943][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  211.961224][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.973229][   T42] usb 3-1: unable to get BOS descriptor or descriptor too short
[  211.993638][   T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.032051][   T10] usb 2-1: Product: syz
[  212.052256][   T10] usb 2-1: Manufacturer: syz
[  212.099849][   T42] usb 3-1: string descriptor 0 read error: -22
[  212.112999][   T42] usb 3-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a
[  212.153665][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.195965][   T10] usb 2-1: SerialNumber: syz
[  212.231812][   T10] usb 2-1: config 0 descriptor??
[  212.353525][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'.
[  212.360082][   T29] audit: type=1400 audit(1775997048.734:415): avc:  denied  { read write } for  pid=8138 comm="syz.3.610" name="file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  212.528618][   T42] usb 3-1: palm_os_4_probe - error -110 getting connection info
[  212.638897][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  212.645333][   T42] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  212.653010][   T29] audit: type=1400 audit(1775997048.734:416): avc:  denied  { open } for  pid=8138 comm="syz.3.610" path="/109/file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  212.679631][   T42] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  212.735683][   T42] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  213.118077][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'.
[  213.138397][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'.
[  213.156110][ T8140] trusted_key: encrypted_key: insufficient parameters specified
[  213.426223][   T10] gspca_sunplus: reg_w_riv err -110
[  213.431637][   T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  213.446922][   T42] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  213.606010][   T42] usb 5-1: Using ep0 maxpacket: 8
[  213.612356][   T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  213.620810][   T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.630826][   T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  213.641398][   T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.651560][   T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.664759][   T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  213.687563][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.911379][   T42] usb 5-1: usb_control_msg returned -32
[  213.917588][   T42] usbtmc 5-1:16.0: can't read capabilities
[  214.006112][ T7460] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  214.105990][ T7453] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  214.157395][ T7460] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  214.167520][ T7460] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  214.179894][ T7460] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  214.192318][ T7460] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  214.201549][ T7460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.209635][ T7460] usb 1-1: Product: syz
[  214.215298][ T7460] usb 1-1: Manufacturer: syz
[  214.220491][ T7460] usb 1-1: SerialNumber: syz
[  214.227099][ T7460] usb 1-1: config 0 descriptor??
[  214.240132][ T8178] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  214.253142][ T8178] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  214.258232][   T10] usb 2-1: USB disconnect, device number 16
[  214.266896][ T7453] usb 4-1: Using ep0 maxpacket: 32
[  214.280344][ T7453] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.294396][ T7453] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  214.310782][ T7460] usb 1-1: ucan: probing device on interface #0
[  214.311087][ T7453] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  214.331386][ T7453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.339734][ T7453] usb 4-1: Product: syz
[  214.343910][ T7453] usb 4-1: Manufacturer: syz
[  214.358508][ T5931] usb 3-1: USB disconnect, device number 20
[  214.369648][ T5931] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  214.387295][ T7453] usb 4-1: SerialNumber: syz
[  214.408652][ T7453] usb 4-1: config 0 descriptor??
[  214.419177][ T5931] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  214.434072][ T5931] visor 3-1:1.0: device disconnected
[  214.621369][ T7460] usb 1-1: ucan: could not read protocol version, ret=-71
[  214.630739][ T7460] usb 1-1: ucan: probe failed; try to update the device firmware
[  214.662595][ T7460] usb 1-1: USB disconnect, device number 14
[  214.708837][ T7453] usb 4-1: USB disconnect, device number 24
[  214.741071][   T29] audit: type=1400 audit(1775997051.114:417): avc:  denied  { listen } for  pid=8182 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  215.195994][ T7460] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  215.358192][ T7460] usb 1-1: unable to get BOS descriptor or descriptor too short
[  215.383348][ T7460] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.414949][ T7460] usb 1-1: string descriptor 0 read error: -22
[  215.423116][ T7460] usb 1-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a
[  215.438138][ T7460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.577270][ T8203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  215.727812][ T7460] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  215.767511][ T7460] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  215.792167][ T7460] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  216.113965][ T5931] usb 1-1: USB disconnect, device number 15
[  216.133444][ T5931] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  216.224710][ T5931] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  216.234747][ T5931] visor 1-1:1.0: device disconnected
[  216.265756][   T92] usb 5-1: USB disconnect, device number 21
[  216.353424][ T8217] syzkaller0: entered promiscuous mode
[  216.496064][ T8217] syzkaller0: entered allmulticast mode
[  216.616680][ T8224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.803914][ T8226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.985486][ T8217] tipc: Started in network mode
[  216.992142][ T8217] tipc: Node identity 32e4c488ccc5, cluster identity 4711
[  216.999717][ T8217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.007482][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[  217.024287][ T8216] tipc: Disabling bearer <eth:syzkaller0>
[  217.340674][ T8213] syz.3.630 (8213) used greatest stack depth: 19296 bytes left
[  217.651803][ T8237] capability: warning: `syz.0.635' uses 32-bit capabilities (legacy support in use)
[  218.033176][ T8238] futex_wake_op: syz.2.636 tries to shift op by 144; fix this program
[  218.161693][ T8238] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  219.022348][ T8255] xt_ecn: cannot match TCP bits for non-tcp packets
[  219.802649][ T8266] fuse: Unknown parameter '000000000000000000060x0000000000000006ÿ00000000000000000000'
[  219.903306][ T8273] netlink: 'syz.2.647': attribute type 8 has an invalid length.
[  219.911487][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[  219.950398][ T8273] bond0: entered promiscuous mode
[  219.955572][ T8273] bond_slave_0: entered promiscuous mode
[  219.961805][ T8273] bond_slave_1: entered promiscuous mode
[  219.969526][ T8273] gretap0: entered promiscuous mode
[  219.977593][ T8273] bond0: left promiscuous mode
[  219.986927][ T8273] bond_slave_0: left promiscuous mode
[  219.994559][ T8273] bond_slave_1: left promiscuous mode
[  220.001070][ T8273] gretap0: left promiscuous mode
[  220.088864][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'.
[  220.922941][ T8288] ieee802154 phy0 wpan0: encryption failed: -22
[  220.941810][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.147951][ T7460] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  223.343595][ T7460] usb 5-1: Using ep0 maxpacket: 16
[  223.494763][ T7460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.527768][   T92] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  223.635948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  223.654471][ T7460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.685978][ T7460] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  223.725982][ T7460] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  223.753320][ T7460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.788199][   T92] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.852689][   T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.941576][   T92] usb 2-1: string descriptor 0 read error: -22
[  223.954901][   T92] usb 2-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a
[  223.975583][   T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.442714][ T7460] usb 5-1: config 0 descriptor??
[  224.798439][   T92] usb 2-1: palm_os_4_probe - error -110 getting connection info
[  224.828843][   T92] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  224.875403][   T92] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  225.009221][   T92] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  225.048984][ T7460] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input20
[  225.216020][ T7460] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  225.313946][ T7460] usb 5-1: USB disconnect, device number 22
[  225.632645][ T8362] fido_id[8362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  226.198020][ T8385] ieee802154 phy0 wpan0: encryption failed: -22
[  226.262259][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.116199][ T7462] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  227.317234][ T7462] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  227.664188][ T7462] usb 3-1: config 0 has no interface number 0
[  227.675162][ T7462] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  227.693824][   T92] usb 2-1: USB disconnect, device number 17
[  227.694250][ T7462] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  227.709758][   T92] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  227.715401][ T7462] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  227.773077][ T7462] usb 3-1: Product: syz
[  227.777547][   T92] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  227.786979][ T7462] usb 3-1: SerialNumber: syz
[  227.788880][ T7462] usb 3-1: config 0 descriptor??
[  227.814492][ T7462] cm109 3-1:0.8: invalid payload size 8, expected 4
[  227.826897][   T92] visor 2-1:1.0: device disconnected
[  227.831664][ T7462] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input21
[  228.549918][   T29] audit: type=1400 audit(1775997064.924:418): avc:  denied  { create } for  pid=8394 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  228.614554][   T29] audit: type=1400 audit(1775997064.924:419): avc:  denied  { write } for  pid=8394 comm="syz.2.671" path="socket:[21841]" dev="sockfs" ino=21841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  229.600056][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  229.600130][ T7453] usb 3-1: USB disconnect, device number 21
[  229.607060][    C1] ------------[ cut here ]------------
[  229.607129][    C1] URB ffff888033616400 submitted while active
[  229.607143][    C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: vhost-8414/8416
[  229.607184][    C1] Modules linked in:
[  229.607230][    C1] CPU: 1 UID: 0 PID: 8416 Comm: vhost-8414 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.649662][    C1] Tainted: [L]=SOFTLOCKUP
[  229.653970][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  229.664007][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  229.669644][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 2b b7 fa 48 8d 3d f6 ca 94 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  229.689250][    C1] RSP: 0018:ffffc90000a08ab0 EFLAGS: 00010083
[  229.695305][    C1] RAX: 0000000000003a4c RBX: ffff888033616400 RCX: ffffc90002342000
[  229.703257][    C1] RDX: 0000000000040000 RSI: ffff888033616400 RDI: ffffffff90e696d0
[  229.711214][    C1] RBP: ffff88801bb04058 R08: 0000000000000001 R09: 0000000000000000
[  229.719170][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  229.727137][    C1] R13: ffff88801bb04057 R14: ffff88807a8cd9a0 R15: 000000000000000f
[  229.735109][    C1] FS:  00007fc7558c66c0(0000) GS:ffff888124438000(0000) knlGS:0000000000000000
[  229.744026][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  229.750596][    C1] CR2: 000020000022a030 CR3: 0000000058b33000 CR4: 00000000003526f0
[  229.758563][    C1] Call Trace:
[  229.761830][    C1]  <IRQ>
[  229.764666][    C1]  cm109_urb_irq_callback+0x479/0xa90
[  229.770052][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  229.775428][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  229.780614][    C1]  dummy_timer+0xda1/0x36c0
[  229.785110][    C1]  ? find_held_lock+0x2b/0x80
[  229.789781][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  229.795582][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  229.801218][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  229.807205][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  229.812127][    C1]  ? mark_held_locks+0x40/0x70
[  229.816872][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  229.822669][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  229.827596][    C1]  __hrtimer_run_queues+0x50e/0xa70
[  229.832784][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  229.838496][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  229.844550][    C1]  hrtimer_run_softirq+0x17d/0x350
[  229.849653][    C1]  handle_softirqs+0x1eb/0x9e0
[  229.854412][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  229.859686][    C1]  __irq_exit_rcu+0xef/0x150
[  229.864270][    C1]  irq_exit_rcu+0x9/0x30
[  229.868497][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  229.874123][    C1]  </IRQ>
[  229.877034][    C1]  <TASK>
[  229.879963][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.885966][    C1] RIP: 0010:lock_acquire+0x5e/0x380
[  229.891172][    C1] Code: 05 7b 7b 29 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 46 d6 f4 0e 0f 82 c2 02 00 00 8b 35 2e 0a f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 7b 29 12 0f 85 02 03 00 00 48 83 c4
[  229.910799][    C1] RSP: 0018:ffffc9001bb8f3b0 EFLAGS: 00000206
[  229.916853][    C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002
[  229.924820][    C1] RDX: 0000000000000000 RSI: ffffffff8de5506b RDI: ffffffff8c1b1ea0
[  229.932777][    C1] RBP: ffffffff8e7e7920 R08: 00000000f12aaf06 R09: 0000000000000007
[  229.940738][    C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[  229.948691][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  229.956665][    C1]  mt_find+0x14a/0x8e0
[  229.960724][    C1]  ? mt_find+0x136/0x8e0
[  229.964953][    C1]  ? __pfx_mt_find+0x10/0x10
[  229.969538][    C1]  find_vma+0xbf/0x140
[  229.973595][    C1]  ? __pfx_find_vma+0x10/0x10
[  229.978270][    C1]  gup_vma_lookup+0x20/0x170
[  229.982850][    C1]  __get_user_pages+0x241/0x34d0
[  229.987799][    C1]  ? down_read_killable+0x30e/0x4c0
[  229.992999][    C1]  ? __pfx___up_read+0x10/0x10
[  229.997750][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  230.003124][    C1]  ? __gup_longterm_locked+0x109c/0x16f0
[  230.008748][    C1]  __gup_longterm_locked+0x87d/0x16f0
[  230.014112][    C1]  ? __pfx___gup_longterm_locked+0x10/0x10
[  230.019918][    C1]  ? sanity_check_pinned_pages+0x5f6/0x1250
[  230.025799][    C1]  gup_fast_fallback+0x18c6/0x2460
[  230.030914][    C1]  ? __pfx_gup_fast_fallback+0x10/0x10
[  230.036371][    C1]  ? lock_acquire+0x1cf/0x380
[  230.041046][    C1]  pin_user_pages_fast+0xa7/0xf0
[  230.045970][    C1]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  230.051589][    C1]  ? vhost_vsock_handle_tx_kick+0xd1/0xdc0
[  230.057382][    C1]  log_write+0x25b/0x320
[  230.061615][    C1]  ? __pfx_log_write+0x10/0x10
[  230.066369][    C1]  ? __might_fault+0xc5/0x140
[  230.071034][    C1]  ? __might_fault+0xc5/0x140
[  230.075701][    C1]  log_used.isra.0+0x175/0x1e0
[  230.080454][    C1]  ? __might_fault+0x111/0x140
[  230.085205][    C1]  vhost_update_used_flags+0x32a/0x400
[  230.090648][    C1]  vhost_disable_notify+0xbe/0x1b0
[  230.095753][    C1]  vhost_vsock_handle_tx_kick+0x18e/0xdc0
[  230.101487][    C1]  ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10
[  230.107712][    C1]  ? find_held_lock+0x2b/0x80
[  230.112376][    C1]  ? find_held_lock+0x2b/0x80
[  230.117037][    C1]  ? kcov_remote_start+0x283/0x660
[  230.122141][    C1]  ? kcov_remote_start+0x374/0x660
[  230.127239][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  230.132436][    C1]  vhost_run_work_list+0x183/0x220
[  230.137549][    C1]  ? __pfx_vhost_run_work_list+0x10/0x10
[  230.143203][    C1]  vhost_task_fn+0x156/0x430
[  230.147804][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.152908][    C1]  ? do_raw_spin_lock+0x128/0x260
[  230.157920][    C1]  ? find_held_lock+0x2b/0x80
[  230.162584][    C1]  ? ret_from_fork+0x79/0xd80
[  230.167259][    C1]  ? rcu_is_watching+0x12/0xc0
[  230.172022][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.177123][    C1]  ret_from_fork+0x754/0xd80
[  230.181711][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  230.186808][    C1]  ? __switch_to+0x7b4/0x1120
[  230.191473][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.196574][    C1]  ret_from_fork_asm+0x1a/0x30
[  230.201336][    C1]  </TASK>
[  230.204337][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.211602][    C1] CPU: 1 UID: 0 PID: 8416 Comm: vhost-8414 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.222438][    C1] Tainted: [L]=SOFTLOCKUP
[  230.226746][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.237230][    C1] Call Trace:
[  230.240494][    C1]  <IRQ>
[  230.243321][    C1]  dump_stack_lvl+0x100/0x190
[  230.247996][    C1]  vpanic+0x552/0x970
[  230.251962][    C1]  ? __pfx_vpanic+0x10/0x10
[  230.256450][    C1]  panic+0xd1/0xe0
[  230.260154][    C1]  ? __pfx_panic+0x10/0x10
[  230.264581][    C1]  check_panic_on_warn.cold+0x19/0x34
[  230.269952][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  230.274964][    C1]  __warn.cold+0x191/0x348
[  230.279367][    C1]  __report_bug+0x296/0x3d0
[  230.283862][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  230.288890][    C1]  ? __pfx___report_bug+0x10/0x10
[  230.293909][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  230.299189][    C1]  ? kasan_save_track+0x14/0x30
[  230.304033][    C1]  report_bug_entry+0xe1/0x290
[  230.308787][    C1]  ? usb_submit_urb+0x15fd/0x1910
[  230.313801][    C1]  handle_bug+0x1cd/0x2a0
[  230.318115][    C1]  exc_invalid_op+0x17/0x50
[  230.322609][    C1]  asm_exc_invalid_op+0x1a/0x20
[  230.327454][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  230.333074][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 2b b7 fa 48 8d 3d f6 ca 94 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  230.352679][    C1] RSP: 0018:ffffc90000a08ab0 EFLAGS: 00010083
[  230.358739][    C1] RAX: 0000000000003a4c RBX: ffff888033616400 RCX: ffffc90002342000
[  230.366695][    C1] RDX: 0000000000040000 RSI: ffff888033616400 RDI: ffffffff90e696d0
[  230.374647][    C1] RBP: ffff88801bb04058 R08: 0000000000000001 R09: 0000000000000000
[  230.382610][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  230.390563][    C1] R13: ffff88801bb04057 R14: ffff88807a8cd9a0 R15: 000000000000000f
[  230.398535][    C1]  cm109_urb_irq_callback+0x479/0xa90
[  230.403905][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  230.409263][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  230.414535][    C1]  dummy_timer+0xda1/0x36c0
[  230.419030][    C1]  ? find_held_lock+0x2b/0x80
[  230.423703][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  230.429512][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  230.435138][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  230.441111][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  230.446032][    C1]  ? mark_held_locks+0x40/0x70
[  230.450778][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  230.456577][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  230.461512][    C1]  __hrtimer_run_queues+0x50e/0xa70
[  230.466703][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  230.472405][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  230.478457][    C1]  hrtimer_run_softirq+0x17d/0x350
[  230.483556][    C1]  handle_softirqs+0x1eb/0x9e0
[  230.488311][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  230.493595][    C1]  __irq_exit_rcu+0xef/0x150
[  230.498178][    C1]  irq_exit_rcu+0x9/0x30
[  230.502406][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  230.508031][    C1]  </IRQ>
[  230.510960][    C1]  <TASK>
[  230.513872][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.519839][    C1] RIP: 0010:lock_acquire+0x5e/0x380
[  230.525033][    C1] Code: 05 7b 7b 29 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 46 d6 f4 0e 0f 82 c2 02 00 00 8b 35 2e 0a f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 7b 29 12 0f 85 02 03 00 00 48 83 c4
[  230.544640][    C1] RSP: 0018:ffffc9001bb8f3b0 EFLAGS: 00000206
[  230.550702][    C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002
[  230.558668][    C1] RDX: 0000000000000000 RSI: ffffffff8de5506b RDI: ffffffff8c1b1ea0
[  230.566629][    C1] RBP: ffffffff8e7e7920 R08: 00000000f12aaf06 R09: 0000000000000007
[  230.574667][    C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[  230.582627][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  230.590598][    C1]  mt_find+0x14a/0x8e0
[  230.594665][    C1]  ? mt_find+0x136/0x8e0
[  230.598901][    C1]  ? __pfx_mt_find+0x10/0x10
[  230.603485][    C1]  find_vma+0xbf/0x140
[  230.607539][    C1]  ? __pfx_find_vma+0x10/0x10
[  230.612289][    C1]  gup_vma_lookup+0x20/0x170
[  230.616872][    C1]  __get_user_pages+0x241/0x34d0
[  230.621798][    C1]  ? down_read_killable+0x30e/0x4c0
[  230.626984][    C1]  ? __pfx___up_read+0x10/0x10
[  230.631821][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  230.637180][    C1]  ? __gup_longterm_locked+0x109c/0x16f0
[  230.642803][    C1]  __gup_longterm_locked+0x87d/0x16f0
[  230.648181][    C1]  ? __pfx___gup_longterm_locked+0x10/0x10
[  230.654008][    C1]  ? sanity_check_pinned_pages+0x5f6/0x1250
[  230.659925][    C1]  gup_fast_fallback+0x18c6/0x2460
[  230.665065][    C1]  ? __pfx_gup_fast_fallback+0x10/0x10
[  230.670535][    C1]  ? lock_acquire+0x1cf/0x380
[  230.675207][    C1]  pin_user_pages_fast+0xa7/0xf0
[  230.680132][    C1]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  230.685767][    C1]  ? vhost_vsock_handle_tx_kick+0xd1/0xdc0
[  230.691561][    C1]  log_write+0x25b/0x320
[  230.695810][    C1]  ? __pfx_log_write+0x10/0x10
[  230.700565][    C1]  ? __might_fault+0xc5/0x140
[  230.705238][    C1]  ? __might_fault+0xc5/0x140
[  230.709909][    C1]  log_used.isra.0+0x175/0x1e0
[  230.714674][    C1]  ? __might_fault+0x111/0x140
[  230.719430][    C1]  vhost_update_used_flags+0x32a/0x400
[  230.724888][    C1]  vhost_disable_notify+0xbe/0x1b0
[  230.730069][    C1]  vhost_vsock_handle_tx_kick+0x18e/0xdc0
[  230.735779][    C1]  ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10
[  230.742002][    C1]  ? find_held_lock+0x2b/0x80
[  230.746670][    C1]  ? find_held_lock+0x2b/0x80
[  230.751344][    C1]  ? kcov_remote_start+0x283/0x660
[  230.756448][    C1]  ? kcov_remote_start+0x374/0x660
[  230.761551][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  230.766739][    C1]  vhost_run_work_list+0x183/0x220
[  230.771839][    C1]  ? __pfx_vhost_run_work_list+0x10/0x10
[  230.777462][    C1]  vhost_task_fn+0x156/0x430
[  230.782060][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.787168][    C1]  ? do_raw_spin_lock+0x128/0x260
[  230.792208][    C1]  ? find_held_lock+0x2b/0x80
[  230.796971][    C1]  ? ret_from_fork+0x79/0xd80
[  230.801631][    C1]  ? rcu_is_watching+0x12/0xc0
[  230.806381][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.811483][    C1]  ret_from_fork+0x754/0xd80
[  230.816071][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  230.821168][    C1]  ? __switch_to+0x7b4/0x1120
[  230.825842][    C1]  ? __pfx_vhost_task_fn+0x10/0x10
[  230.830951][    C1]  ret_from_fork_asm+0x1a/0x30
[  230.835713][    C1]  </TASK>
[  230.839025][    C1] Kernel Offset: disabled
[  230.843370][    C1] Rebooting in 86400 seconds..