last executing test programs:

9m38.643826719s ago: executing program 3 (id=988):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

9m38.212053176s ago: executing program 3 (id=993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x3, {0x0, 0xf0, 0x4}}, 0x18)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x100000000000000, {0x0, 0x0, 0x2}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x2c)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x101, 0x0, 0x0, 0x5}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0x0, 0xffffffff}, 0x10)
sendmmsg(r5, 0x0, 0x0, 0x9200000000000000)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x12, 0x4}, {0x3, 0x7}}}}, 0x11)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x12}, 0x0)
getpid()
openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x5, 0x0)

9m37.468181876s ago: executing program 3 (id=995):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x1300)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)
setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x81)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt(r8, 0x84, 0x7f, &(0x7f0000000240), 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0)
userfaultfd(0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100"], 0x0)

9m34.344341156s ago: executing program 3 (id=1000):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m32.129907942s ago: executing program 3 (id=1004):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x300000000}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2404c004)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000003c0)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x6}, {0x0, 0x8, 0xfffffffd}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x1, 0x1, 0x8})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0xf0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

9m31.887572496s ago: executing program 3 (id=1006):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0xff19)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={@remote, @rand_addr=' \x01\x00', @mcast1, 0x1, 0xffff, 0x9, 0x500, 0x9, 0xc10000, r4})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$TIOCGPTLCK(r7, 0x80045439, &(0x7f0000000180))
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getcwd(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r8)
keyctl$get_security(0x11, r8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10)

9m15.833707922s ago: executing program 32 (id=1006):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0xff19)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={@remote, @rand_addr=' \x01\x00', @mcast1, 0x1, 0xffff, 0x9, 0x500, 0x9, 0xc10000, r4})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$TIOCGPTLCK(r7, 0x80045439, &(0x7f0000000180))
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getcwd(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r8)
keyctl$get_security(0x11, r8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10)

4m9.18785738s ago: executing program 4 (id=1987):
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040))

4m8.689824888s ago: executing program 4 (id=1988):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2, 0x6c}, 0x3, @in=@empty, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0x2000}}, 0xe8)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x6}, 0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x3, @local}}, 0x5e49, 0x1, 0x10001, 0x230, 0x41, 0xfffffffa, 0x7}, &(0x7f0000000140)=0x9c)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x0, 0xffff2936, 0x55}, 0x2c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40881}, 0x10)

4m7.695430749s ago: executing program 4 (id=1991):
setpriority(0x1, 0xffffffffffffffff, 0x4af)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_mreqn(r5, 0x84, 0x20, 0x0, 0x0)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x801)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d000511"], 0x30}}, 0x0)
close(r1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001800000127bd7000fbdbdf251d01040008000500f8fef50415000300030000200403000013f90700000000000400000002ac5732bcf41ab288481af5c8534396940035fa4b30fa68b767e3840941144c263672e649f13252dfd0133cc26a2286f04064d6d553231f2b2d27d2973daeeaaa2c29e09c26f441f1a61ab56518d3477e43043939855d73e3c90eb53ecb6afc3040606e66c56877de71cedd42b698c5e0cc21ca9e4be720ccc1a88dbcbf8b1957e5ff883b264a3d5e4591835846e1cdbae7572019141a55fd286861d291b6"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

4m5.508443764s ago: executing program 4 (id=1996):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000004c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c9071200f4c20102030109022d0001000000000904000003cb8e2f0009050f00000000000027050d000000000000090509000000000000"], 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="898dc83f5760af98000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x74, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffffffffffff}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\r\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r3, &(0x7f0000000280)="826e8000a7f8a52b", 0x8, 0x804, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xad145e, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)

4m2.633063295s ago: executing program 4 (id=2005):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c00223055a1fa00800a00008fd8c3ca8304e78d952591552f2084e82b1b30d172d6d8a78b741febdeeaa957158eeb6db3b17434d88069c3f7f70b48ad1e531a40f801ecfabc947a9d53daf8d1de939bf4051678cc2ac8552a015de4d572"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r4, r4, 0x0, 0x40000f63c)

4m2.378702359s ago: executing program 4 (id=2008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000310000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaa"], 0x48}}, 0x0)

3m59.167297579s ago: executing program 33 (id=2008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000310000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaa"], 0x48}}, 0x0)

16.292448701s ago: executing program 1 (id=2684):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x18)
getdents(0xffffffffffffffff, &(0x7f0000000300)=""/184, 0x10c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
r6 = dup2(r5, r5)
syz_fuse_handle_req(r6, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000844)

15.525156719s ago: executing program 0 (id=2686):
getpid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
io_setup(0x32, &(0x7f0000000040)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x7}, 0x50)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

15.251432327s ago: executing program 1 (id=2687):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))
pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d10, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r7 = socket(0x10, 0x80002, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000180)={0xec12}, 0x4)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r8, &(0x7f00000000c0)=0x10008e, 0x180000504)
recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000540)=<r9=>0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r10, 0x0}])
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000)
syz_open_procfs(0x0, 0x0)

14.329172042s ago: executing program 2 (id=2690):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = memfd_secret(0x0)
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x33, 0x1})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b000100746172676574000058000280400003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a619b2ffcd000000000000000000000001000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x8801)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000480)={0x80000002})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300))
read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020)
socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e80)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000ac0)=0xe8)
getpgrp(0x0)
getresuid(&(0x7f0000003cc0), &(0x7f0000003d00), &(0x7f0000003d40))
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_HYPERV_EVENTFD(r6, 0xc048aec8, &(0x7f00000005c0)={0x20000085})

14.264301418s ago: executing program 2 (id=2691):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x52, 0x0, &(0x7f0000000140)="bfd3421c16f97715365b34fa8a4231f264c6f42039ad0642f625b0d4252b44c47b09bdfdbb5df9e6cdc6ca6d83462ec6fac76fb2a2071775ee2895a9a3abec3be88128aee1aed3a2d317b3b2d69536d5c52f", 0x0, 0xff7ff35a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000008}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan1\x00', 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9)
tee(r6, r3, 0x6, 0x1)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r8 = fcntl$dupfd(r7, 0x0, r7)
read$FUSE(r8, 0x0, 0x0)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x3, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0})
write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2)
r9 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000100)={0x0, 0xa7c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0906, 0x1ff, '\x00', @p_u32=0x0}})
r10 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
write$binfmt_script(r10, &(0x7f0000005e80)={'#! ', './file0'}, 0xb)
write$binfmt_script(r9, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
write$P9_RUNLINKAT(r8, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00', 0x3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)

13.668857936s ago: executing program 1 (id=2694):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62747266732e2e2f3115ff8bddd3ca62696e64657266732f62"], &(0x7f0000000080)=""/25, 0x19)
dup3(r1, r0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'netdevsim0\x00', @multicast})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, 0x0, 0x0)
r5 = socket(0x1, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYRES8=r4, @ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000380)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000400))
close_range(0xffffffffffffffff, r7, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000200)={@mcast1}, 0x14)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3e00000010e443ca388fad000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a000070000000000c1b0100000004000500"/36], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x40040810)

12.151688192s ago: executing program 0 (id=2696):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c00223055a1fa00800a00008fd8c3ca8304e78d952591552f2084e82b1b30d172d6d8a78b741febdeeaa957158eeb6db3b17434d88069c3f7f70b48ad1e531a40f801ecfabc947a9d53daf8d1de939bf4051678cc2ac8552a015de4d572"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r5, r5, 0x0, 0x40000f63c)

11.827979672s ago: executing program 2 (id=2697):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c00223055a1fa00800a00008fd8c3ca8304e78d952591552f2084e82b1b30d172d6d8a78b741febdeeaa957158eeb6db3b17434d88069c3f7f70b48ad1e531a40f801ecfabc947a9d53daf8d1de939bf4051678cc2ac8552a015de4d572"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r4, r4, 0x0, 0x40000f63c)

11.352771408s ago: executing program 1 (id=2701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000000000000ed81340c3f3ceb9421d89c536229f4f92f3164d0410a893c98070ea4628ce1c93d04174f42eec4d315cf13c2f1cd9c2bf038570547b86bc605ca6bb49356f09e2fdc7420757939d4aa6aa34334ba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095000000000000006e79f58f56f73ad3bf1c5e135709d2ade36bb86e9fa79aadddec117aa1875c616f8bd1ab90f2462b3bc843b5eec4ff97933e88e02e64204abfd4ab73946c1c4fe6ef7722689e4de270327a18e2d47040e79063e3a349972f646ff01e3da3f7948c4f787df10d8f443c14302e1a80892b1a4d92da50d4e1211d966de19be48593752accb624d50049686d9c653a3589a4a57f6d55d268daf58d791fa3b7"], &(0x7f00000001c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0)
r2 = socket$inet6(0xa, 0x1, 0x7fffffff)
setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000040)=0x5e25, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e24, 0x78a2, @mcast2}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = syz_open_procfs(0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @local, 0x2}}}, 0x30)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8)
io_uring_enter(0xffffffffffffffff, 0x2219, 0xcae9, 0x36, 0x0, 0x0)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)}, 0xb00}], 0x1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_usbip_server_init(0x4)

10.190848589s ago: executing program 6 (id=2703):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)

8.847198736s ago: executing program 6 (id=2704):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103c43, 0x1ce)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x20000080ffff, 0x1, 0x1}}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150100000000000020001280080001006772650014000280080007007f00000108000100", @ANYRES32=r7, @ANYBLOB="d1cda05cfe615d1cb622fe52cb1cf4be178ad88de96629f7150f99d17469993879edd57acb25af002cfa"], 0x40}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000580), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
dup(r0)
getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f00000004c0)=""/139, &(0x7f0000000400)=0x8b)
socket(0x10, 0xe, 0x1b6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4)

8.706850155s ago: executing program 1 (id=2705):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0xffffffffffffff14, 0x0}, 0x30004001)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'})
recvmsg(r5, &(0x7f00000002c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5}, 0x12081)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240))

7.81273851s ago: executing program 2 (id=2706):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async)
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) (async)

6.596000917s ago: executing program 1 (id=2707):
getpid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
io_setup(0x32, &(0x7f0000000040)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x7}, 0x50)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

6.574611871s ago: executing program 0 (id=2708):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c00000100000000040000000300060000000000020000000000000000000000000000000200010000000000000009fd00000000030005000000000002000000ac1414aa000000000000000002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0)
chdir(0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0xc0ed0000, 0x0)

6.497774506s ago: executing program 6 (id=2709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
dup(0xffffffffffffffff)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x104, 0x4}, 0x50)
gettid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r6, 0x11, 0x0, 0x4)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x4000}, {{&(0x7f0000000180), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f00000006c0)=""/186, 0xba}], 0x4, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x48, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000c40)=""/243, 0xf3}], 0x3, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x10323, 0x0)

6.311593741s ago: executing program 2 (id=2710):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x6000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)

4.705648581s ago: executing program 0 (id=2711):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2c020400)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
pwritev(r2, 0x0, 0x0, 0x5, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6})
r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042)
write$dsp(r4, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c6}, 0x984e45ff733bc95)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x3c, 0x2, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x1ff, 0xa, 0x1, {0x22, 0xff3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x6, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="050f0f000123"], 0x1, [{0x0, 0x0}]})

4.668879396s ago: executing program 5 (id=2712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x10000000, &(0x7f0000000280)="c78a9df649d84bc85e2a729497fb9d601952299bbfb770e18aa95867a576e73f62", 0x21, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="17c328a11e4d287efc968f14f77d5d616892e276db266427d0061fa5fa05dbdec735f63c01bc751c9edb01628e010d2775c17fac5a00aa7f8c2c68c2508942455b0d5b88f8a4e636afa9ed6ac23ee4f8e7c563639c08bde886ba382a7937b23aa3ec415c715e1e2612f629c12d127419613bb1dcb6")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x44)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblc\x00', 0x0, 0x10001, 0x6f}, 0x2c)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000019880)=""/102380, 0x18fec}, {0x0}, {0x0}], 0x3, 0x7, 0xffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="ec6f9df2efd96febb53ba78815f9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000000180))
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}})

4.627378938s ago: executing program 6 (id=2713):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mincore(&(0x7f0000845000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/37)

4.546450894s ago: executing program 6 (id=2714):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)

3.756627155s ago: executing program 5 (id=2715):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
get_robust_list(0x0, 0x0, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r7, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)

3.582393853s ago: executing program 6 (id=2716):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000036000701fcffffff00008100017c00000c00223055a1fa00800a00008fd8c3ca8304e78d952591552f2084e82b1b30d172d6d8a78b741febdeeaa957158eeb6db3b17434d88069c3f7f70b48ad1e531a40f801ecfabc947a9d53daf8d1de939bf4051678cc2ac8552a015de4d572"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r4, r4, 0x0, 0x40000f63c)

2.711518767s ago: executing program 5 (id=2717):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x10}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0xfdc3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @none}, 0x8)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

643.545037ms ago: executing program 5 (id=2718):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0})

549.580346ms ago: executing program 2 (id=2719):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) (fail_nth: 6)

426.021017ms ago: executing program 0 (id=2720):
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r0=>0x0, 0xa4}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0x10)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @bcast, @remote, @rose, @default, @bcast, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x800)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={<r2=>0x0, 0x3, 0x1, [0x59c, 0x5, 0x0, 0x8, 0xff], [0x8, 0x1, 0x101, 0x7, 0x9, 0xfffffffffffffbff, 0x0, 0x2, 0x100000000, 0x100000000, 0x2, 0x3, 0x6, 0x10001, 0x3ff, 0x9, 0xbae, 0x1, 0x9, 0x9, 0x208, 0xfa49, 0x5c0, 0x3c, 0x8, 0xd, 0xc, 0x1, 0xe1, 0x8, 0x8, 0x7, 0x7, 0x9b5, 0x8, 0x100000000, 0x6, 0xffffffffffffffff, 0x554, 0xd8, 0x9, 0x0, 0x1, 0x6, 0x1000, 0x8, 0xb9ea, 0xf8f8, 0x0, 0x9, 0x7, 0x3, 0x8, 0x7, 0x8, 0x28, 0x5, 0xfffffffffffffffe, 0x5, 0x63, 0x8, 0xd8, 0x60c93f52, 0x1, 0x10001, 0x1ff, 0x101, 0xfd, 0x4, 0x0, 0x0, 0x100000000, 0x3, 0x3, 0x9, 0x6b48, 0x5, 0x4, 0x101, 0x8, 0x8, 0xaa, 0x4, 0x8, 0x8, 0x5, 0x9, 0x4, 0x3, 0x7, 0x6, 0xfff, 0xff, 0x81, 0x2, 0x80, 0xc0, 0x8, 0x7, 0x98c, 0x9, 0x8, 0x2, 0x9, 0x0, 0x1, 0x9, 0x8, 0x4, 0x401, 0xde3, 0x10f2, 0x9, 0x5, 0x0, 0x100, 0x599, 0xfe, 0x76e, 0x0, 0x10001]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x3, 0x0, [0xc, 0xffffffffffffffff, 0xfffffffffffffffa, 0x333f, 0x3], [0x6, 0x1, 0x0, 0xa, 0x70, 0x5, 0xc36, 0xd69a000, 0x200, 0x2, 0x80, 0x8, 0x8, 0x9, 0x0, 0x8, 0xfff, 0xffffffffffffffff, 0x6, 0x140, 0x2, 0x0, 0x2, 0x0, 0x6, 0xb3, 0x8, 0x47ec5aec, 0x7, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x5, 0xffffffffffff0607, 0x3, 0x647, 0x9, 0x7, 0xfbd, 0x10, 0x681a, 0x401, 0x0, 0x3ff, 0x7, 0x6, 0x2, 0x2, 0x7fff, 0xffffffffffffa69c, 0x100000000, 0x1000, 0x10000, 0x93, 0x100000000, 0x0, 0x80, 0x5d8, 0x2, 0x3, 0x4424, 0x4, 0x0, 0x2, 0x95, 0x9a3, 0xfffffffffffff800, 0x7, 0xeccf, 0x5, 0x5, 0x0, 0x8000, 0x2, 0x4, 0x9, 0x8, 0x963, 0x8, 0x2, 0x8, 0x3, 0x3, 0x1480, 0x5, 0x6b, 0x6, 0xfffffffffffffff7, 0x0, 0x7, 0x1, 0x3, 0x5, 0x3, 0x9, 0x80000000, 0x1ff, 0x3, 0x9, 0x7fff, 0xe7, 0x5, 0x8, 0x1, 0x80, 0xffffffffffffffaa, 0x62f2, 0x81, 0x2, 0x3, 0x4, 0x10, 0x4, 0x3, 0x9, 0x82ad, 0x6, 0x4, 0x4b0, 0x2, 0x81]})
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000ac0)={0xc33a, "cd92c3fdee9c87b97c0c396fe5a5b39e8c0d735a6785a92a3e2cf5e416fe6b49", 0x2, 0x20, 0x1000, 0x4, 0x4, 0x0, 0x34ac, 0x2})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000b40)={0xa, [0x4, 0x101, 0x400, 0x2, 0x59b6, 0xfff9, 0x8, 0x0, 0x7, 0x1]}, 0x18)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000b80)={0x2, [0x1ff, 0x8]}, &(0x7f0000000bc0)=0x8)
r6 = memfd_secret(0x80000)
connect$tipc(r6, &(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x4}}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x1, &(0x7f0000000c80)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000cc0)='GPL\x00', 0x5, 0x78, &(0x7f0000000d00)=""/120, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0x0, 0x36, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000dc0)=[r6, r6, r6, r6, r6, r6, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0x9}, {0x4, 0x1, 0x0, 0x3}, {0x4, 0x4, 0xa, 0x9}], 0x10, 0xfffeffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f0000000c40)='dlm_unlock_start\x00', r7, 0x0, 0xec}, 0x18)
setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000f40)={0x200, 0x40ae, 0xfffe, 0x7}, 0x8)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x9c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xeb}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40800)
syz_open_dev$swradio(&(0x7f0000001100), 0x0, 0x2)
sendfile(r3, r1, 0x0, 0x3)
r8 = socket$inet_sctp(0x2, 0x6, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000001140)={<r9=>r0, 0x6}, &(0x7f0000001180)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000011c0)={r9, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x2, 0x7}, &(0x7f0000001280)=0x90)
read$msr(r6, &(0x7f00000012c0)=""/104, 0x68)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1674}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xd6fbd85e59bdb2f9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'syztnl0\x00', <r10=>0x0, 0x29, 0x40, 0x4, 0x10000, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x700, 0x10, 0x2, 0x8}})
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f00000025c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0xc, [@volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @fwd={0xe}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x10000, 0x5}, @fwd={0x6}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0xf, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}, @typedef={0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7}, {0xf, 0x2}, {0x4, 0x2}, {0xf, 0x1}]}, @typedef={0x9}]}, {0x0, [0x2e, 0x6f, 0x10, 0x30, 0x61, 0x30, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000026c0)=""/221, 0xd0, 0xdd, 0x0, 0x2}, 0x28)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x4, '\x00', 0x0, r6, 0x4, 0x3, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r6, <r13=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x11, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001500)=""/4096, 0x41000, 0xe, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000002800)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002840)={0x1, 0x4, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000029c0)=[r6, r6, r12, r6, r13], &(0x7f0000002a00)=[{0x3, 0x4, 0x5, 0x5}], 0x10, 0x1}, 0x94)
getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000002b00), &(0x7f0000002b40)=0xe)

328.391897ms ago: executing program 5 (id=2721):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, 0x0, 0xc8)
dup3(r1, r0, 0x0)

318.366496ms ago: executing program 5 (id=2722):
fsopen(&(0x7f0000002e40)='pvfs2\x00', 0x0)
r0 = dup(0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
socket$key(0xf, 0x3, 0x2)
r5 = fcntl$getown(r3, 0x9)
sched_setaffinity(r5, 0x8, &(0x7f0000000540)=0x6)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
keyctl$dh_compute(0x17, 0x0, &(0x7f0000000080)=""/34, 0x22, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0xffff, 0x1, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0xc373, 0x4, 0x0, 0x4, 0x0})

0s ago: executing program 0 (id=2723):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
dup(0xffffffffffffffff)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x104, 0x4}, 0x50)
gettid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r5 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r5, 0x11, 0x0, 0x4)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x4000}, {{&(0x7f0000000180), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f00000006c0)=""/186, 0xba}], 0x4, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x48, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000c40)=""/243, 0xf3}], 0x3, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x10323, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0)

kernel console output (not intermixed with test programs):

20 2-1:0.0: probe with driver gm12u320 failed with error -5
[  757.919492][ T5881] usb-storage 2-1:0.0: USB Mass Storage device detected
[  757.958144][ T5881] usb-storage 2-1:0.0: device ignored
[  758.308368][   T30] audit: type=1326 audit(1768743837.782:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.546783][   T30] audit: type=1326 audit(1768743837.782:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.631502][   T30] audit: type=1326 audit(1768743837.782:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.681685][   T30] audit: type=1326 audit(1768743837.782:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.795181][   T30] audit: type=1326 audit(1768743837.782:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.855858][   T30] audit: type=1326 audit(1768743837.782:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.887743][   T30] audit: type=1326 audit(1768743837.782:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  758.915149][   T30] audit: type=1326 audit(1768743837.792:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c7ed8f749 code=0x7ffc0000
[  759.098859][ T5894] usb 2-1: USB disconnect, device number 54
[  759.752008][  T118] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  759.839713][T14735] loop8: detected capacity change from 0 to 7
[  759.865993][T14735]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  759.876588][T14735] loop8: partition table partially beyond EOD, truncated
[  759.883834][T14735] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  759.898872][T14735] loop8: p2 start 956478 is beyond EOD, truncated
[  760.522872][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  760.522889][   T30] audit: type=1400 audit(1768743839.962:1466): avc:  denied  { firmware_load } for  pid=14737 comm="syz.2.2147" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  760.888389][T14745] syz.2.2147 (14745) used greatest stack depth: 18616 bytes left
[  761.263617][T14761] No control pipe specified
[  761.513975][ T5881] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  761.671974][ T5881] usb 3-1: Using ep0 maxpacket: 8
[  761.689536][ T5881] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  761.751862][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.851603][ T5881] usb 3-1: config 0 descriptor??
[  761.858928][T14764] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  761.865459][T14764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  761.873730][T14764] vhci_hcd vhci_hcd.0: Device attached
[  761.878339][ T5881] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  761.942949][ T5881] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  761.992200][ T5881] usb-storage 3-1:0.0: USB Mass Storage device detected
[  762.092638][   T24] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  762.189413][ T5881] usb-storage 3-1:0.0: device ignored
[  762.196945][   T24] usb 33-1: new full-speed USB device number 7 using vhci_hcd
[  763.826927][T14765] vhci_hcd: connection reset by peer
[  763.833410][ T4213] vhci_hcd vhci_hcd.0: stop threads
[  763.842611][ T4213] vhci_hcd vhci_hcd.0: release socket
[  763.851417][ T4213] vhci_hcd vhci_hcd.0: disconnect device
[  763.974664][ T5917] usb 3-1: USB disconnect, device number 45
[  763.985998][   T30] audit: type=1326 audit(1768743843.562:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  764.119111][   T30] audit: type=1326 audit(1768743843.562:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  764.142798][   T30] audit: type=1326 audit(1768743843.592:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  764.581437][   T30] audit: type=1326 audit(1768743843.592:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  764.605148][   T30] audit: type=1326 audit(1768743843.592:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  765.394431][   T30] audit: type=1326 audit(1768743844.922:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  765.805145][   T30] audit: type=1326 audit(1768743844.922:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  765.829644][   T30] audit: type=1326 audit(1768743844.942:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  765.868401][   T30] audit: type=1326 audit(1768743844.942:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  766.398623][T14806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  766.405138][T14806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  766.412777][T14806] vhci_hcd vhci_hcd.0: Device attached
[  766.448720][   T30] audit: type=1326 audit(1768743844.942:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  766.473549][   T30] audit: type=1326 audit(1768743844.942:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  766.497956][   T30] audit: type=1326 audit(1768743844.942:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  766.587843][T14825] vhci_hcd: connection closed
[  766.588084][ T1128] vhci_hcd vhci_hcd.1: stop threads
[  766.603157][  T118] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  766.635793][ T1128] vhci_hcd vhci_hcd.1: release socket
[  766.653107][   T30] audit: type=1326 audit(1768743844.952:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdafb8df90 code=0x7ffc0000
[  766.694212][ T1128] vhci_hcd vhci_hcd.1: disconnect device
[  766.710706][  T118] usb 35-1: new full-speed USB device number 11 using vhci_hcd
[  766.734207][  T118] usb 35-1: enqueue for inactive port 0
[  766.758581][   T30] audit: type=1326 audit(1768743844.952:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbdafb90f77 code=0x7ffc0000
[  766.812704][  T118] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  766.821490][   T30] audit: type=1326 audit(1768743844.952:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdafb8f749 code=0x7ffc0000
[  766.891746][   T30] audit: type=1326 audit(1768743844.952:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.5.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbdafb90f77 code=0x7ffc0000
[  767.362296][   T24] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  767.852422][T10029] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  769.098122][T14840] No control pipe specified
[  769.351979][   T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  769.359677][ T5894] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  769.602108][ T5894] usb 1-1: Using ep0 maxpacket: 8
[  769.607491][   T24] usb 2-1: Using ep0 maxpacket: 8
[  769.653200][ T5894] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  769.696013][   T24] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  769.854555][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.862804][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.872921][ T5894] usb 1-1: config 0 descriptor??
[  769.881700][   T24] usb 2-1: config 0 descriptor??
[  769.892810][ T5894] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  769.902910][ T5894] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  769.932898][   T24] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  769.955783][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected
[  769.962884][   T24] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  770.049836][   T24] usb-storage 2-1:0.0: USB Mass Storage device detected
[  770.190370][ T5894] usb-storage 1-1:0.0: device ignored
[  770.228215][   T24] usb-storage 2-1:0.0: device ignored
[  770.891731][T14877] No control pipe specified
[  771.233778][ T5894] usb 1-1: USB disconnect, device number 62
[  771.243857][  T118] usb 2-1: USB disconnect, device number 55
[  771.836709][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  771.836726][   T30] audit: type=1400 audit(1768743851.092:1494): avc:  denied  { setopt } for  pid=14878 comm="syz.0.2177" lport=42958 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  771.875834][   T30] audit: type=1400 audit(1768743851.092:1495): avc:  denied  { getattr } for  pid=14878 comm="syz.0.2177" lport=42958 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  772.762008][T14883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  772.768517][T14883] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  772.776002][T14883] vhci_hcd vhci_hcd.0: Device attached
[  772.948507][T14902] vhci_hcd: connection closed
[  772.948620][   T60] vhci_hcd vhci_hcd.1: stop threads
[  772.990191][   T60] vhci_hcd vhci_hcd.1: release socket
[  773.002021][  T118] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  773.011387][   T60] vhci_hcd vhci_hcd.1: disconnect device
[  773.062019][  T118] usb 35-1: new full-speed USB device number 12 using vhci_hcd
[  773.070184][  T118] usb 35-1: enqueue for inactive port 0
[  773.142458][  T118] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  773.974954][T14918] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2187'.
[  773.984545][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2187'.
[  773.994301][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2187'.
[  774.225821][T14920] kvm: kvm [14915]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  774.238598][T14920] kvm: kvm [14915]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  776.110135][   T30] audit: type=1400 audit(1768743855.682:1496): avc:  denied  { create } for  pid=14949 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1
[  776.240399][ T5894] usb 3-1: new low-speed USB device number 46 using dummy_hcd
[  776.248116][   T30] audit: type=1400 audit(1768743855.812:1497): avc:  denied  { create } for  pid=14949 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  776.433152][ T5894] usb 3-1: No LPM exit latency info found, disabling LPM.
[  776.441075][ T5894] usb 3-1: config 8 has an invalid interface number: 233 but max is 0
[  776.451928][ T5894] usb 3-1: config 8 has no interface number 0
[  776.458011][ T5894] usb 3-1: config 8 interface 233 has no altsetting 0
[  776.638404][ T5894] usb 3-1: string descriptor 0 read error: -22
[  776.656969][ T5894] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  776.673437][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.694841][ T5894] cp210x 3-1:8.233: cp210x converter detected
[  777.343461][ T5894] cp210x 3-1:8.233: failed to get vendor val 0x370b size 1: -71
[  777.351222][ T5894] cp210x 3-1:8.233: querying part number failed
[  777.363958][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0
[  777.382816][ T5894] usb 3-1: USB disconnect, device number 46
[  777.391052][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  777.400093][ T5894] cp210x 3-1:8.233: device disconnected
[  778.673968][T14964] gre2: entered promiscuous mode
[  779.614347][ T5926] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  779.744231][ T5918] IPVS: starting estimator thread 0...
[  779.801961][ T5926] usb 2-1: Using ep0 maxpacket: 8
[  779.827498][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  779.858613][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  779.869593][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  779.887214][T14983] IPVS: using max 43 ests per chain, 103200 per kthread
[  779.891952][ T5926] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  779.916517][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.952903][ T5926] usb 2-1: config 0 descriptor??
[  779.958582][T14975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  780.183861][T14975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.192616][T14975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.227090][ T5926] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  780.249401][ T5926] usb 2-1: USB disconnect, device number 56
[  782.485960][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2208'.
[  782.534548][T15015] netlink: 'syz.6.2207': attribute type 4 has an invalid length.
[  785.332730][T15034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2212'.
[  785.872101][T15031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  785.878602][T15031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  785.886155][T15031] vhci_hcd vhci_hcd.0: Device attached
[  785.906150][T15044] mkiss: ax0: crc mode is auto.
[  786.050344][T15045] vhci_hcd: connection closed
[  786.051291][T14674] vhci_hcd vhci_hcd.2: stop threads
[  786.539221][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  787.291957][ T5894] usb 37-1: new full-speed USB device number 6 using vhci_hcd
[  788.839653][T14674] vhci_hcd vhci_hcd.2: release socket
[  788.882034][T14674] vhci_hcd vhci_hcd.2: disconnect device
[  789.023077][T15059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15059 comm=syz.0.2219
[  789.394550][   T30] audit: type=1400 audit(1768743868.972:1498): avc:  denied  { ioctl } for  pid=15054 comm="syz.6.2217" path="socket:[64552]" dev="sockfs" ino=64552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  789.476404][ T5917] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  790.053751][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0
[  790.101999][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  790.117652][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'.
[  790.200514][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.256472][ T5917] usb 2-1: config 0 descriptor??
[  790.637908][ T5917]  (null): keene_cmd_main failed (-71)
[  791.814224][ T5917] video4linux radio48: keene_cmd_main failed (-71)
[  791.821998][ T5917] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  791.840141][ T5917] usb 2-1: USB disconnect, device number 57
[  792.425692][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  793.977079][T15104] No control pipe specified
[  794.492106][T15092] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  794.498619][T15092] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  794.506160][T15092] vhci_hcd vhci_hcd.0: Device attached
[  794.919552][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  794.985199][T15112] vhci_hcd: connection closed
[  794.992288][T14674] vhci_hcd vhci_hcd.2: stop threads
[  795.027647][T14674] vhci_hcd vhci_hcd.2: release socket
[  795.172815][ T5894] usb 37-1: new full-speed USB device number 7 using vhci_hcd
[  795.336441][T14674] vhci_hcd vhci_hcd.2: disconnect device
[  795.425861][T15121] ieee802154 phy1 wpan1: encryption failed: -22
[  795.438961][T15121] ieee802154 phy1 wpan1: encryption failed: -22
[  795.621983][ T6423] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  796.229922][ T6423] usb 2-1: unable to get BOS descriptor or descriptor too short
[  796.251543][ T6423] usb 2-1: not running at top speed; connect to a high speed hub
[  796.263070][ T6423] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  796.271916][ T6423] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  796.280466][ T6423] usb 2-1: config 2 has no interface number 0
[  796.286940][ T6423] usb 2-1: config 2 has no interface number 1
[  796.294065][ T6423] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  796.305086][ T6423] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  796.339211][ T6423] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  796.351485][ T6423] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  796.363364][ T6423] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  796.376686][ T6423] usb 2-1: config 2 interface 212 has no altsetting 0
[  796.492296][ T6423] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  796.501648][ T6423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.509949][ T6423] usb 2-1: Product: syz
[  796.514796][ T6423] usb 2-1: Manufacturer: syz
[  796.520001][ T6423] usb 2-1: SerialNumber: syz
[  797.899317][T15124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2233'.
[  797.909988][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'.
[  797.919803][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'.
[  798.061633][ T6423] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input60
[  798.106034][ T6423] usb 2-1: USB disconnect, device number 58
[  798.306707][   T30] audit: type=1400 audit(1768743877.882:1499): avc:  denied  { ioctl } for  pid=15140 comm="syz.0.2239" path="socket:[60398]" dev="sockfs" ino=60398 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  799.674412][T15157] No control pipe specified
[  799.936008][T15161] netlink: 'syz.6.2240': attribute type 4 has an invalid length.
[  800.028612][   T30] audit: type=1326 audit(1768743879.602:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.0.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c7ed8f749 code=0x0
[  800.418897][ T6423] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  800.503511][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  800.600800][ T6423] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  800.624141][   T30] audit: type=1326 audit(1768743880.202:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  800.641915][ T6423] usb 1-1: config 1 has no interface number 0
[  800.685153][   T30] audit: type=1326 audit(1768743880.202:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  800.709878][ T6423] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  800.800847][ T6423] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  800.902712][   T30] audit: type=1326 audit(1768743880.202:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  800.969579][ T6423] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  801.019093][ T6423] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  801.021995][   T30] audit: type=1326 audit(1768743880.442:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  801.028679][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.149850][ T6423] usb 1-1: Product: syz
[  801.170053][ T6423] usb 1-1: Manufacturer: syz
[  801.354227][ T6423] usb 1-1: SerialNumber: syz
[  801.421929][   T30] audit: type=1326 audit(1768743880.442:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  801.423800][T15169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  801.517139][   T30] audit: type=1326 audit(1768743880.572:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  801.596274][   T30] audit: type=1326 audit(1768743880.572:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  801.636222][   T30] audit: type=1326 audit(1768743880.572:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7ffc0000
[  801.697683][T15169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  802.938624][ T6423] usb 1-1: Incompatible driver and firmware versions
[  804.328432][ T5894] usb 1-1: USB disconnect, device number 63
[  804.498197][T15207] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2253'.
[  804.526031][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2253'.
[  804.582194][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'.
[  805.288865][ T5894] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  805.583604][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short
[  805.684001][ T5894] usb 2-1: not running at top speed; connect to a high speed hub
[  805.707004][ T5894] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  805.722026][ T5894] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  805.761971][ T5894] usb 2-1: config 2 has no interface number 0
[  805.768100][ T5894] usb 2-1: config 2 has no interface number 1
[  805.782187][ T5894] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  805.840095][ T5894] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  805.878562][T15226] netlink: 'syz.0.2258': attribute type 4 has an invalid length.
[  805.968689][ T5894] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  806.004215][ T5894] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  806.047967][ T5894] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  806.085090][ T5894] usb 2-1: config 2 interface 212 has no altsetting 0
[  806.130708][ T5894] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  806.183480][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.210315][ T5894] usb 2-1: Product: syz
[  806.224866][ T5894] usb 2-1: Manufacturer: syz
[  806.239232][ T5894] usb 2-1: SerialNumber: syz
[  806.560518][T15213] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2255'.
[  806.634447][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  806.634550][   T30] audit: type=1400 audit(1768743886.202:1539): avc:  denied  { getopt } for  pid=15230 comm="syz.6.2259" laddr=172.20.20.170 lport=59066 faddr=172.20.20.187 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  806.683499][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2255'.
[  806.805982][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2255'.
[  806.916455][ T5894] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input61
[  806.947150][    C0] xpad 2-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1
[  806.971262][ T5894] usb 2-1: USB disconnect, device number 59
[  806.977458][    C1] xpad 2-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  807.269847][T15241] input: syz0 as /devices/virtual/input/input62
[  807.419020][T15243] No control pipe specified
[  808.040214][ T5917] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  808.231879][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  808.437197][T15253] binder: 15244:15253 ioctl c0306201 2000000001c0 returned -14
[  808.461323][T15255] netem: incorrect gi model size
[  808.466830][T15255] netem: change failed
[  808.502000][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  808.511062][ T5917] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  808.528610][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.562507][ T5917] usb 6-1: config 0 descriptor??
[  808.583399][ T5917] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  808.604588][ T5917] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[  808.695988][ T5917] usb-storage 6-1:0.0: USB Mass Storage device detected
[  808.744375][ T5917] usb-storage 6-1:0.0: device ignored
[  810.297378][ T5917] usb 6-1: USB disconnect, device number 10
[  810.960191][   T30] audit: type=1400 audit(1768743890.532:1540): avc:  denied  { connect } for  pid=15280 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  811.193569][T15291] FAULT_INJECTION: forcing a failure.
[  811.193569][T15291] name failslab, interval 1, probability 0, space 0, times 0
[  811.277765][T15291] CPU: 0 UID: 0 PID: 15291 Comm: syz.5.2273 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  811.277785][T15291] Tainted: [L]=SOFTLOCKUP
[  811.277789][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  811.277796][T15291] Call Trace:
[  811.277800][T15291]  <TASK>
[  811.277804][T15291]  dump_stack_lvl+0x16c/0x1f0
[  811.277824][T15291]  should_fail_ex+0x512/0x640
[  811.277841][T15291]  ? fs_reclaim_acquire+0xae/0x150
[  811.277858][T15291]  should_failslab+0xc2/0x120
[  811.277872][T15291]  __kmalloc_noprof+0xeb/0x910
[  811.277889][T15291]  ? look_up_lock_class+0x6b/0x130
[  811.277903][T15291]  ? __lock_acquire+0x436/0x2890
[  811.277915][T15291]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  811.277933][T15291]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  811.277948][T15291]  tomoyo_realpath_from_path+0xc2/0x6e0
[  811.277965][T15291]  ? tomoyo_profile+0x47/0x60
[  811.277976][T15291]  tomoyo_path_perm+0x274/0x460
[  811.277988][T15291]  ? tomoyo_path_perm+0x260/0x460
[  811.278002][T15291]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  811.278016][T15291]  ? find_held_lock+0x2b/0x80
[  811.278034][T15291]  ? do_raw_spin_unlock+0x172/0x230
[  811.278056][T15291]  ? __pfx_current_check_access_path+0x10/0x10
[  811.278068][T15291]  ? simple_lookup+0x105/0x1d0
[  811.278084][T15291]  ? lookup_one_qstr_excl+0xb3/0x250
[  811.278097][T15291]  tomoyo_path_symlink+0x97/0xe0
[  811.278113][T15291]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[  811.278133][T15291]  security_path_symlink+0x152/0x2e0
[  811.278148][T15291]  do_symlinkat+0x126/0x4b0
[  811.278166][T15291]  ? __pfx_do_symlinkat+0x10/0x10
[  811.278183][T15291]  ? getname_flags.part.0+0x1c5/0x550
[  811.278196][T15291]  __x64_sys_symlinkat+0x93/0xc0
[  811.278213][T15291]  do_syscall_64+0xcd/0xf80
[  811.278229][T15291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.278239][T15291] RIP: 0033:0x7fbdafb8f749
[  811.278248][T15291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  811.278258][T15291] RSP: 002b:00007fbdb0a4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  811.278269][T15291] RAX: ffffffffffffffda RBX: 00007fbdafde5fa0 RCX: 00007fbdafb8f749
[  811.278276][T15291] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000001040
[  811.278282][T15291] RBP: 00007fbdb0a4d090 R08: 0000000000000000 R09: 0000000000000000
[  811.278288][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.278294][T15291] R13: 00007fbdafde6038 R14: 00007fbdafde5fa0 R15: 00007fffc9248718
[  811.278309][T15291]  </TASK>
[  811.278313][T15291] ERROR: Out of memory at tomoyo_realpath_from_path.
[  811.517308][ T5894] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  811.806800][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  811.815089][ T5894] usb 3-1: not running at top speed; connect to a high speed hub
[  811.827362][ T5894] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  811.863924][ T5894] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  811.892023][ T5894] usb 3-1: config 2 has no interface number 0
[  811.898162][ T5894] usb 3-1: config 2 has no interface number 1
[  811.904548][ T5894] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  811.915733][ T5894] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  811.926613][ T5894] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  811.939402][ T5894] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  811.951573][ T5894] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  811.974956][ T5894] usb 3-1: config 2 interface 212 has no altsetting 0
[  811.992008][ T6843] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  812.001280][ T5894] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  812.012891][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.020953][ T5894] usb 3-1: Product: syz
[  812.025159][ T5894] usb 3-1: Manufacturer: syz
[  812.029791][ T5894] usb 3-1: SerialNumber: syz
[  812.141918][ T6843] usb 6-1: Using ep0 maxpacket: 32
[  812.148418][ T6843] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  812.226499][ T6843] usb 6-1: config 0 has no interface number 0
[  812.443740][T15293] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2274'.
[  812.462053][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2274'.
[  812.491239][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2274'.
[  812.637443][ T5894] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input63
[  812.648934][ T6843] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  812.660997][ T6843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.922151][ T5894] usb 3-1: USB disconnect, device number 47
[  812.933187][ T6843] usb 6-1: Product: syz
[  812.937386][ T6843] usb 6-1: Manufacturer: syz
[  812.983761][ T6843] usb 6-1: SerialNumber: syz
[  812.993640][ T6843] usb 6-1: config 0 descriptor??
[  813.001850][ T6843] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  813.010743][ T6843] usb 6-1: selecting invalid altsetting 1
[  813.017571][ T6843] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  813.092385][ T6843] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  813.106031][ T6843] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  813.115464][ T6843] usb 6-1: media controller created
[  813.178944][ T6843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  813.295457][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'.
[  813.334640][ T6843] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  813.345840][ T6843] zl10353_read_register: readreg error (reg=127, ret==-71)
[  813.498437][ T6843] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  813.560763][ T6843] usb 6-1: USB disconnect, device number 11
[  814.826986][T15318] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬(�	IrÝ\•žu}ibˆŒ�ÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh<yÞ¯ðÕMÈv÷«^7 !JÐ>–O„h'®ÈûrK1‚\kU{!�e½úó¬Üš7»ßß
[  814.826986][T15318] ÄUúeâ[¦ÓÎ%#s'
[  815.697662][T15328] No control pipe specified
[  815.962047][ T6843] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  816.131950][ T6843] usb 6-1: Using ep0 maxpacket: 8
[  816.367643][ T6843] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  816.425447][ T6843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.464740][ T6843] usb 6-1: config 0 descriptor??
[  816.501202][ T6843] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  816.531459][ T6843] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[  816.566843][ T6843] usb-storage 6-1:0.0: USB Mass Storage device detected
[  816.604172][ T6843] usb-storage 6-1:0.0: device ignored
[  816.683912][T15253] Set syz1 is full, maxelem 65536 reached
[  817.912176][ T6843] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  818.182170][ T6843] usb 2-1: unable to get BOS descriptor or descriptor too short
[  818.208556][ T6843] usb 2-1: not running at top speed; connect to a high speed hub
[  818.243414][ T6843] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  818.269758][ T6843] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  818.292666][T15352] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  818.295762][ T6843] usb 2-1: config 2 has no interface number 0
[  818.299184][T15352] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  818.361700][T11540] usb 6-1: USB disconnect, device number 12
[  818.393591][ T6843] usb 2-1: config 2 has no interface number 1
[  818.399724][T15352] vhci_hcd vhci_hcd.0: Device attached
[  818.411674][ T6843] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  818.450509][ T6843] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  818.513449][ T6843] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  818.552900][ T6843] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  818.564525][ T5881] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  818.642334][ T5881] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  818.726846][ T6843] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  818.792113][T15353] vhci_hcd: connection reset by peer
[  818.809832][   T37] vhci_hcd vhci_hcd.6: stop threads
[  818.829253][ T6843] usb 2-1: config 2 interface 212 has no altsetting 0
[  818.837038][   T37] vhci_hcd vhci_hcd.6: release socket
[  818.845616][T15359] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  818.852138][T15359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  818.857760][   T37] vhci_hcd vhci_hcd.6: disconnect device
[  818.873951][ T6843] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  818.883169][ T6843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.891166][ T6843] usb 2-1: Product: syz
[  818.895598][ T6843] usb 2-1: Manufacturer: syz
[  818.900180][ T6843] usb 2-1: SerialNumber: syz
[  818.924553][T15359] vhci_hcd vhci_hcd.0: Device attached
[  819.267167][T11540] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  819.681527][T11540] usb 43-1: new full-speed USB device number 7 using vhci_hcd
[  819.698932][T15360] vhci_hcd: connection closed
[  819.699216][ T3523] vhci_hcd vhci_hcd.5: stop threads
[  819.712921][ T3523] vhci_hcd vhci_hcd.5: release socket
[  819.720192][ T3523] vhci_hcd vhci_hcd.5: disconnect device
[  819.738111][T15344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2287'.
[  819.747196][T15344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'.
[  819.756899][T15344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'.
[  819.997025][ T6843] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input64
[  820.206674][ T6843] usb 2-1: USB disconnect, device number 60
[  820.219630][T15371] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  820.226156][T15371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  820.242296][T15371] vhci_hcd vhci_hcd.0: Device attached
[  820.842355][T15373] vhci_hcd: connection closed
[  820.843251][T14671] vhci_hcd vhci_hcd.6: stop threads
[  820.856289][T14671] vhci_hcd vhci_hcd.6: release socket
[  820.872162][T14671] vhci_hcd vhci_hcd.6: disconnect device
[  821.091988][ T6843] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  821.645109][ T6843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  821.657268][ T6843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  821.667201][ T6843] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  821.689358][ T6843] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  821.730056][ T6843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.754987][ T6843] usb 1-1: config 0 descriptor??
[  822.373861][T15377] CIFS mount error: No usable UNC path provided in device string!
[  822.373861][T15377] 
[  822.383954][T15377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  822.762034][ T6843] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  822.821643][T15394] nvme_fabrics: missing parameter 'transport=%s'
[  822.829030][T15394] nvme_fabrics: missing parameter 'nqn=%s'
[  823.463094][ T6423] usb 1-1: USB disconnect, device number 64
[  823.665643][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  823.871947][ T5917] usb 6-1: Using ep0 maxpacket: 16
[  824.002303][ T5881] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  824.458435][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.469507][ T5917] usb 6-1: New USB device found, idVendor=bcd8, idProduct=00dd, bcdDevice= 0.00
[  824.479175][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.489589][ T5917] usb 6-1: config 0 descriptor??
[  824.680590][   T37] Bluetooth: hci5: Frame reassembly failed (-84)
[  824.698841][ T5917] usbhid 6-1:0.0: can't add hid device: -71
[  824.707339][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  824.811498][T11540] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  824.872650][ T5917] usb 6-1: USB disconnect, device number 13
[  825.058859][T15431] No control pipe specified
[  826.600706][ T6423] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  826.732103][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  826.995102][ T6423] usb 3-1: Using ep0 maxpacket: 8
[  827.088911][ T6423] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  827.118231][ T6423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.556804][ T6423] usb 3-1: config 0 descriptor??
[  827.578703][ T6423] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  827.596364][ T6423] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  827.617353][ T6423] usb-storage 3-1:0.0: USB Mass Storage device detected
[  827.648295][ T6423] usb-storage 3-1:0.0: device ignored
[  827.667885][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2308'.
[  827.767220][ T5881] usb 3-1: USB disconnect, device number 48
[  828.161767][T15452] tmpfs: Unknown parameter '°pow�mooÀ½'
[  828.821703][T15460] netlink: 'syz.5.2310': attribute type 4 has an invalid length.
[  829.344464][T15475] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  829.351007][T15475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  829.395649][T15474] ieee802154 phy1 wpan1: encryption failed: -22
[  829.404702][T15474] ieee802154 phy1 wpan1: encryption failed: -22
[  829.450802][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'.
[  829.471234][T15475] vhci_hcd vhci_hcd.0: Device attached
[  829.651999][ T5881] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  829.711983][ T5881] usb 33-1: new full-speed USB device number 8 using vhci_hcd
[  829.731938][ T6423] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  829.813570][T15476] vhci_hcd: connection reset by peer
[  829.819688][ T1103] vhci_hcd vhci_hcd.0: stop threads
[  829.825408][ T1103] vhci_hcd vhci_hcd.0: release socket
[  829.835515][ T1103] vhci_hcd vhci_hcd.0: disconnect device
[  829.884803][ T6423] usb 7-1: config 0 interface 0 has no altsetting 0
[  829.891503][ T6423] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  829.921164][ T6423] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.937851][T15486] tmpfs: Bad value for 'mpol'
[  829.955461][ T6423] usb 7-1: config 0 descriptor??
[  830.185239][ T6423]  (null): keene_cmd_main failed (-71)
[  830.390478][ T6423] video4linux radio48: keene_cmd_main failed (-71)
[  830.397624][ T6423] radio-keene 7-1:0.0: V4L2 device registered as radio48
[  830.406490][ T6423] usb 7-1: USB disconnect, device number 3
[  830.878326][T15505] FAULT_INJECTION: forcing a failure.
[  830.878326][T15505] name failslab, interval 1, probability 0, space 0, times 0
[  830.891258][T15505] CPU: 1 UID: 0 PID: 15505 Comm: syz.0.2325 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  830.891292][T15505] Tainted: [L]=SOFTLOCKUP
[  830.891298][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  830.891308][T15505] Call Trace:
[  830.891314][T15505]  <TASK>
[  830.891321][T15505]  dump_stack_lvl+0x16c/0x1f0
[  830.891348][T15505]  should_fail_ex+0x512/0x640
[  830.891377][T15505]  should_failslab+0xc2/0x120
[  830.891401][T15505]  kmem_cache_alloc_node_noprof+0x86/0x800
[  830.891420][T15505]  ? __alloc_skb+0x156/0x410
[  830.891443][T15505]  ? __alloc_skb+0x156/0x410
[  830.891457][T15505]  __alloc_skb+0x156/0x410
[  830.891471][T15505]  ? __alloc_skb+0x35d/0x410
[  830.891486][T15505]  ? __pfx___alloc_skb+0x10/0x10
[  830.891502][T15505]  ? fib6_ifdown+0x8e0/0x8f0
[  830.891526][T15505]  ? find_held_lock+0x2b/0x80
[  830.891557][T15505]  inet6_rt_notify+0x1e0/0x4b0
[  830.891583][T15505]  fib6_del+0xf8e/0x17a0
[  830.891615][T15505]  ? __pfx_fib6_del+0x10/0x10
[  830.891637][T15505]  ? do_raw_spin_lock+0x12c/0x2b0
[  830.891670][T15505]  ip6_route_del+0x17d8/0x1d70
[  830.891692][T15505]  ? __pfx_ip6_route_del+0x10/0x10
[  830.891711][T15505]  ? avc_has_perm_noaudit+0x117/0x3b0
[  830.891739][T15505]  inet6_rtm_delroute+0x27c/0x3b0
[  830.891755][T15505]  ? __pfx_inet6_rtm_delroute+0x10/0x10
[  830.891772][T15505]  ? __lock_acquire+0x436/0x2890
[  830.891804][T15505]  ? find_held_lock+0x2b/0x80
[  830.891828][T15505]  ? __pfx_inet6_rtm_delroute+0x10/0x10
[  830.891843][T15505]  ? __pfx_inet6_rtm_delroute+0x10/0x10
[  830.891861][T15505]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  830.891881][T15505]  ? __pfx_inet6_rtm_delroute+0x10/0x10
[  830.891897][T15505]  rtnetlink_rcv_msg+0x95e/0xe90
[  830.891918][T15505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  830.891937][T15505]  ? __lock_acquire+0x436/0x2890
[  830.891962][T15505]  ? ref_tracker_free+0x37c/0x830
[  830.891982][T15505]  netlink_rcv_skb+0x158/0x420
[  830.892004][T15505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  830.892026][T15505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  830.892067][T15505]  netlink_unicast+0x5aa/0x870
[  830.892093][T15505]  ? __pfx_netlink_unicast+0x10/0x10
[  830.892125][T15505]  netlink_sendmsg+0x8c8/0xdd0
[  830.892152][T15505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  830.892184][T15505]  ____sys_sendmsg+0xa5d/0xc30
[  830.892209][T15505]  ? copy_msghdr_from_user+0x10a/0x160
[  830.892227][T15505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  830.892264][T15505]  ___sys_sendmsg+0x134/0x1d0
[  830.892290][T15505]  ? __pfx____sys_sendmsg+0x10/0x10
[  830.892342][T15505]  __sys_sendmsg+0x16d/0x220
[  830.892360][T15505]  ? __pfx___sys_sendmsg+0x10/0x10
[  830.892397][T15505]  do_syscall_64+0xcd/0xf80
[  830.892422][T15505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.892439][T15505] RIP: 0033:0x7f1c7ed8f749
[  830.892453][T15505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  830.892468][T15505] RSP: 002b:00007f1c7fc86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  830.892485][T15505] RAX: ffffffffffffffda RBX: 00007f1c7efe5fa0 RCX: 00007f1c7ed8f749
[  830.892495][T15505] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  830.892505][T15505] RBP: 00007f1c7fc86090 R08: 0000000000000000 R09: 0000000000000000
[  830.892515][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.892524][T15505] R13: 00007f1c7efe6038 R14: 00007f1c7efe5fa0 R15: 00007ffee7220f88
[  830.892549][T15505]  </TASK>
[  831.302849][T15506] netlink: 'syz.5.2324': attribute type 10 has an invalid length.
[  831.310723][T15506] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2324'.
[  831.326546][T15506] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check.
[  831.700923][   T30] audit: type=1400 audit(1768743910.862:1541): avc:  denied  { watch watch_reads } for  pid=15501 comm="syz.5.2324" path="pipe:[42096]" dev="pipefs" ino=42096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  831.739790][   T30] audit: type=1400 audit(1768743910.862:1542): avc:  denied  { relabelfrom } for  pid=15501 comm="syz.5.2324" name="" dev="pipefs" ino=66236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  832.483340][   T30] audit: type=1400 audit(1768743910.872:1543): avc:  denied  { shutdown } for  pid=15501 comm="syz.5.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  832.531282][   T30] audit: type=1400 audit(1768743910.872:1544): avc:  denied  { bind } for  pid=15501 comm="syz.5.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  832.771588][T15510] netlink: 1544 bytes leftover after parsing attributes in process `syz.6.2326'.
[  833.679183][T15528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  833.685724][T15528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  834.012474][T15528] vhci_hcd vhci_hcd.0: Device attached
[  834.177673][T15529] vhci_hcd: connection closed
[  834.177822][   T76] vhci_hcd vhci_hcd.1: stop threads
[  834.205548][   T76] vhci_hcd vhci_hcd.1: release socket
[  834.232195][ T5933] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  834.616074][ T5933] usb 35-1: new full-speed USB device number 13 using vhci_hcd
[  834.651513][   T76] vhci_hcd vhci_hcd.1: disconnect device
[  834.662321][ T5933] usb 35-1: enqueue for inactive port 0
[  834.707056][T15546] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2336'.
[  834.718386][T15546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2336'.
[  834.728487][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2336'.
[  834.745337][ T5933] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  834.802642][ T5881] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  835.494821][T15559] input: syz0 as /devices/virtual/input/input65
[  835.583487][T15561] FAULT_INJECTION: forcing a failure.
[  835.583487][T15561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  835.597372][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.6.2341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  835.597397][T15561] Tainted: [L]=SOFTLOCKUP
[  835.597403][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  835.597412][T15561] Call Trace:
[  835.597418][T15561]  <TASK>
[  835.597425][T15561]  dump_stack_lvl+0x16c/0x1f0
[  835.597459][T15561]  should_fail_ex+0x512/0x640
[  835.597487][T15561]  _copy_from_user+0x2e/0xd0
[  835.597512][T15561]  memdup_user+0x6b/0xe0
[  835.597526][T15561]  sctp_getsockopt+0x2706/0x70d0
[  835.597538][T15561]  ? find_held_lock+0x2b/0x80
[  835.597554][T15561]  ? avc_has_perm_noaudit+0x117/0x3b0
[  835.597566][T15561]  ? __pfx_sctp_getsockopt+0x10/0x10
[  835.597580][T15561]  ? avc_has_perm+0x144/0x1f0
[  835.597590][T15561]  ? __pfx_avc_has_perm+0x10/0x10
[  835.597602][T15561]  ? __lock_acquire+0x436/0x2890
[  835.597616][T15561]  ? sock_has_perm+0x258/0x2f0
[  835.597632][T15561]  ? find_held_lock+0x2b/0x80
[  835.597646][T15561]  ? __might_fault+0xe3/0x190
[  835.597656][T15561]  ? __might_fault+0xe3/0x190
[  835.597665][T15561]  ? __might_fault+0x13b/0x190
[  835.597679][T15561]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  835.597693][T15561]  do_sock_getsockopt+0x324/0x410
[  835.597708][T15561]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  835.597721][T15561]  ? __fget_files+0x204/0x3c0
[  835.597743][T15561]  __sys_getsockopt+0x12f/0x260
[  835.597756][T15561]  __x64_sys_getsockopt+0xbd/0x160
[  835.597767][T15561]  ? do_syscall_64+0x91/0xf80
[  835.597781][T15561]  ? lockdep_hardirqs_on+0x7c/0x110
[  835.597795][T15561]  do_syscall_64+0xcd/0xf80
[  835.597810][T15561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.597821][T15561] RIP: 0033:0x7f021df8f749
[  835.597830][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  835.597840][T15561] RSP: 002b:00007f021ee8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  835.597851][T15561] RAX: ffffffffffffffda RBX: 00007f021e1e5fa0 RCX: 00007f021df8f749
[  835.597857][T15561] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  835.597863][T15561] RBP: 00007f021ee8b090 R08: 0000200000000140 R09: 0000000000000000
[  835.597869][T15561] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  835.597875][T15561] R13: 00007f021e1e6038 R14: 00007f021e1e5fa0 R15: 00007fff115974f8
[  835.597889][T15561]  </TASK>
[  835.944407][ T6423] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  836.103456][ T6423] usb 3-1: config 0 interface 0 has no altsetting 0
[  836.110293][ T6423] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  836.119592][ T6423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.129786][ T6423] usb 3-1: config 0 descriptor??
[  836.595501][ T6423]  (null): keene_cmd_main failed (-71)
[  836.607507][ T6423] video4linux radio48: keene_cmd_main failed (-71)
[  836.625686][ T6423] radio-keene 3-1:0.0: V4L2 device registered as radio48
[  836.671998][ T6423] usb 3-1: USB disconnect, device number 49
[  836.896647][   T30] audit: type=1400 audit(1768743916.472:1545): avc:  denied  { create } for  pid=15574 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  836.936030][   T30] audit: type=1400 audit(1768743916.492:1546): avc:  denied  { write } for  pid=15574 comm="syz.0.2346" path="socket:[66362]" dev="sockfs" ino=66362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  838.407275][T10029] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  838.544504][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2348'.
[  839.054078][T15602] netlink: 'syz.2.2351': attribute type 4 has an invalid length.
[  839.202022][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  839.353720][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  839.370791][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  839.394300][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  839.414278][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.433240][   T10] usb 7-1: config 0 descriptor??
[  839.450615][   T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  840.191570][   T30] audit: type=1326 audit(1768743919.762:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.1.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x7fc00000
[  840.674482][T15621] kAFS: unable to lookup cell 'syz1'
[  840.680099][   T30] audit: type=1400 audit(1768743920.252:1548): avc:  denied  { setopt } for  pid=15612 comm="syz.2.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  840.912461][ T6423] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  840.971983][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  841.462517][T15630] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2361'.
[  841.493593][ T6423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.532042][ T5933] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  841.541252][ T6423] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  841.551397][ T6423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.560739][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.571365][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  841.580954][ T6423] usb 1-1: config 0 descriptor??
[  841.586109][   T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  841.595245][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.606509][   T10] usb 2-1: config 0 descriptor??
[  841.702459][ T5933] usb 3-1: Using ep0 maxpacket: 32
[  841.740304][ T5933] usb 3-1: unable to get BOS descriptor or descriptor too short
[  841.755179][ T5933] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  841.768653][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.788284][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  841.800623][ T5933] usb 3-1: string descriptor 0 read error: -22
[  841.811227][ T5933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  841.826620][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.852307][ T5933] usb 3-1: 0:2 : does not exist
[  842.178009][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.189902][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.253953][ T6423] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor
[  842.285572][ T6423] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input66
[  842.305330][ T5917] usb 7-1: USB disconnect, device number 4
[  842.452160][ T6423] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  842.473062][   T10] Bluetooth: Can't get state to change to load ram patch err
[  842.482056][   T10] Bluetooth: Loading patch file failed
[  842.487628][   T10] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[  842.498412][   T10] usb 2-1: USB disconnect, device number 61
[  843.502168][   T30] audit: type=1400 audit(1768743923.072:1549): avc:  denied  { nlmsg_read } for  pid=15620 comm="syz.0.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  843.526643][ T5918] usb 1-1: USB disconnect, device number 65
[  843.581819][   T24] usb 3-1: USB disconnect, device number 50
[  844.133189][T15659] netlink: 'syz.6.2368': attribute type 4 has an invalid length.
[  844.390901][T15662] netlink: zone id is out of range
[  844.396138][T15662] netlink: zone id is out of range
[  844.401219][T15662] netlink: zone id is out of range
[  844.406321][T15662] netlink: zone id is out of range
[  844.411396][T15662] netlink: zone id is out of range
[  844.416633][T15662] netlink: zone id is out of range
[  844.421726][T15662] netlink: zone id is out of range
[  844.580697][T15669] No control pipe specified
[  844.871987][T15662] netlink: zone id is out of range
[  844.890592][T15671] CUSE: info not properly terminated
[  844.901981][T15662] netlink: zone id is out of range
[  844.928077][T15662] netlink: zone id is out of range
[  845.092025][   T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  845.251917][   T10] usb 1-1: Using ep0 maxpacket: 8
[  845.268855][   T10] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  845.292380][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.403970][   T10] usb 1-1: config 0 descriptor??
[  845.456060][ T6423] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  845.493222][   T10] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  845.504280][   T10] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  845.526460][   T10] usb-storage 1-1:0.0: USB Mass Storage device detected
[  845.567441][   T10] usb-storage 1-1:0.0: device ignored
[  845.653594][ T6423] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.668698][ T6423] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  845.684725][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.702638][ T6423] usb 3-1: Product: syz
[  845.711411][ T6423] usb 3-1: Manufacturer: syz
[  845.729428][ T6423] usb 3-1: SerialNumber: syz
[  845.752104][ T6423] usb 3-1: config 0 descriptor??
[  845.921052][ T6423] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5
[  846.088109][T15685] No control pipe specified
[  846.460538][T15687] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2377'.
[  847.370557][ T6423] usb 1-1: USB disconnect, device number 66
[  847.701101][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'.
[  847.702731][ T6423] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  847.721396][T15712] netlink: 'syz.0.2384': attribute type 4 has an invalid length.
[  847.916219][ T6423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.936352][ T6423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.957784][ T6423] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  847.977161][ T6423] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  847.992466][ T6423] usb 7-1: Manufacturer: syz
[  848.004463][ T6423] usb 7-1: config 0 descriptor??
[  848.093624][ T5917] usb 3-1: USB disconnect, device number 51
[  848.398635][T15719] No control pipe specified
[  849.041971][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  849.170488][ T6423] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.001A/input/input67
[  849.192211][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  849.200079][ T5917] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  849.211111][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.223735][ T5917] usb 3-1: config 0 descriptor??
[  849.230960][ T5917] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  849.241496][ T5917] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  849.252396][ T6423] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  849.264756][ T5917] usb-storage 3-1:0.0: USB Mass Storage device detected
[  849.275571][ T5917] usb-storage 3-1:0.0: device ignored
[  849.400398][   T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  849.474213][   T24] usb 7-1: USB disconnect, device number 5
[  849.682245][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  849.691978][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  849.706641][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.722862][   T10] usb 1-1: config 0 descriptor??
[  849.934322][   T10]  (null): keene_cmd_main failed (-71)
[  849.940898][   T10] video4linux radio48: keene_cmd_main failed (-71)
[  849.947579][   T10] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  849.960609][   T10] usb 1-1: USB disconnect, device number 67
[  850.161956][   T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  850.314192][   T24] usb 2-1: config index 0 descriptor too short (expected 215, got 45)
[  850.324885][   T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  850.334696][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.348468][   T24] usb 2-1: Product: syz
[  850.353396][   T24] usb 2-1: Manufacturer: syz
[  850.357970][   T24] usb 2-1: SerialNumber: syz
[  850.728323][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  850.775967][T15753] FAULT_INJECTION: forcing a failure.
[  850.775967][T15753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  850.789978][T15753] CPU: 0 UID: 0 PID: 15753 Comm: syz.1.2392 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  850.790008][T15753] Tainted: [L]=SOFTLOCKUP
[  850.790014][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  850.790024][T15753] Call Trace:
[  850.790030][T15753]  <TASK>
[  850.790038][T15753]  dump_stack_lvl+0x16c/0x1f0
[  850.790066][T15753]  should_fail_ex+0x512/0x640
[  850.790096][T15753]  _copy_to_user+0x32/0xd0
[  850.790124][T15753]  simple_read_from_buffer+0xcb/0x170
[  850.790148][T15753]  proc_fail_nth_read+0x197/0x240
[  850.790169][T15753]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.790189][T15753]  ? rw_verify_area+0xcf/0x6c0
[  850.790208][T15753]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.790226][T15753]  vfs_read+0x1e4/0xcf0
[  850.790248][T15753]  ? __pfx___mutex_lock+0x10/0x10
[  850.790273][T15753]  ? __pfx_vfs_read+0x10/0x10
[  850.790300][T15753]  ? __fget_files+0x20e/0x3c0
[  850.790337][T15753]  ksys_read+0x12a/0x250
[  850.790357][T15753]  ? __pfx_ksys_read+0x10/0x10
[  850.790385][T15753]  do_syscall_64+0xcd/0xf80
[  850.790410][T15753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.790426][T15753] RIP: 0033:0x7fbe7e38e15c
[  850.790441][T15753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  850.790457][T15753] RSP: 002b:00007fbe7f178030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  850.790475][T15753] RAX: ffffffffffffffda RBX: 00007fbe7e5e6090 RCX: 00007fbe7e38e15c
[  850.790486][T15753] RDX: 000000000000000f RSI: 00007fbe7f1780a0 RDI: 0000000000000008
[  850.790497][T15753] RBP: 00007fbe7f178090 R08: 0000000000000000 R09: 0000000000000000
[  850.790507][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.790517][T15753] R13: 00007fbe7e5e6128 R14: 00007fbe7e5e6090 R15: 00007ffcc1d2b288
[  850.790542][T15753]  </TASK>
[  851.134357][   T24] net_ratelimit: 44 callbacks suppressed
[  851.135310][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  851.163824][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  851.174374][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  851.184828][   T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  851.208007][   T24] usb 2-1: USB disconnect, device number 62
[  851.222201][ T6423] usb 3-1: USB disconnect, device number 52
[  851.244233][   T10] usb 7-1: config index 0 descriptor too short (expected 215, got 45)
[  851.258084][   T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  851.269901][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.282452][   T10] usb 7-1: Product: syz
[  851.286644][   T10] usb 7-1: Manufacturer: syz
[  851.291245][   T10] usb 7-1: SerialNumber: syz
[  851.457853][T15763] netlink: 'syz.2.2400': attribute type 4 has an invalid length.
[  852.001444][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2396'.
[  853.385550][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  853.428311][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  853.449899][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  853.464491][   T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  853.478828][   T10] usb 7-1: USB disconnect, device number 6
[  853.590324][   T30] audit: type=1400 audit(1768743933.162:1550): avc:  denied  { read write } for  pid=15773 comm="syz.2.2403" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  853.634177][   T30] audit: type=1400 audit(1768743933.192:1551): avc:  denied  { open } for  pid=15773 comm="syz.2.2403" path="/520/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  853.765800][T15786] No control pipe specified
[  854.559150][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2410'.
[  854.718591][   T30] audit: type=1400 audit(1768743934.262:1552): avc:  denied  { read } for  pid=15784 comm="syz.0.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  854.803582][T15793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  854.810108][T15793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  854.817707][T15793] vhci_hcd vhci_hcd.0: Device attached
[  855.091951][   T24] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  855.098465][T15808] vhci_hcd: connection closed
[  855.111301][   T60] vhci_hcd vhci_hcd.2: stop threads
[  855.133383][   T60] vhci_hcd vhci_hcd.2: release socket
[  855.144498][   T60] vhci_hcd vhci_hcd.2: disconnect device
[  855.226757][   T24] usb 37-1: new full-speed USB device number 8 using vhci_hcd
[  855.238279][   T24] usb 37-1: enqueue for inactive port 0
[  855.278296][T15820] netlink: 'syz.1.2413': attribute type 4 has an invalid length.
[  855.839427][   T24] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  855.876055][T15818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2415'.
[  856.309649][T15824] openvswitch: netlink: Missing key (keys=2020040, expected=100)
[  856.985103][T15847] SET target dimension over the limit!
[  857.030281][T15851] FAULT_INJECTION: forcing a failure.
[  857.030281][T15851] name failslab, interval 1, probability 0, space 0, times 0
[  857.044913][T15851] CPU: 1 UID: 0 PID: 15851 Comm: syz.1.2425 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  857.044939][T15851] Tainted: [L]=SOFTLOCKUP
[  857.044945][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  857.044953][T15851] Call Trace:
[  857.044959][T15851]  <TASK>
[  857.044966][T15851]  dump_stack_lvl+0x16c/0x1f0
[  857.044994][T15851]  should_fail_ex+0x512/0x640
[  857.045018][T15851]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  857.045038][T15851]  should_failslab+0xc2/0x120
[  857.045060][T15851]  kmem_cache_alloc_node_noprof+0x86/0x800
[  857.045076][T15851]  ? __alloc_skb+0x156/0x410
[  857.045090][T15851]  ? __alloc_skb+0x35d/0x410
[  857.045108][T15851]  ? __alloc_skb+0x156/0x410
[  857.045119][T15851]  __alloc_skb+0x156/0x410
[  857.045133][T15851]  ? __alloc_skb+0x35d/0x410
[  857.045146][T15851]  ? __pfx___alloc_skb+0x10/0x10
[  857.045166][T15851]  netlink_ack+0x15d/0xb80
[  857.045188][T15851]  ? avc_has_perm_noaudit+0x149/0x3b0
[  857.045210][T15851]  netlink_rcv_skb+0x332/0x420
[  857.045232][T15851]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  857.045252][T15851]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  857.045296][T15851]  ? ns_capable+0xd7/0x110
[  857.045323][T15851]  nfnetlink_rcv+0x1b3/0x430
[  857.045341][T15851]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  857.045356][T15851]  ? netlink_deliver_tap+0x1ae/0xd30
[  857.045382][T15851]  netlink_unicast+0x5aa/0x870
[  857.045407][T15851]  ? __pfx_netlink_unicast+0x10/0x10
[  857.045438][T15851]  netlink_sendmsg+0x8c8/0xdd0
[  857.045464][T15851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  857.045496][T15851]  ____sys_sendmsg+0xa5d/0xc30
[  857.045521][T15851]  ? copy_msghdr_from_user+0x10a/0x160
[  857.045540][T15851]  ? __pfx_____sys_sendmsg+0x10/0x10
[  857.045575][T15851]  ___sys_sendmsg+0x134/0x1d0
[  857.045595][T15851]  ? __pfx____sys_sendmsg+0x10/0x10
[  857.045644][T15851]  __sys_sendmsg+0x16d/0x220
[  857.045664][T15851]  ? __pfx___sys_sendmsg+0x10/0x10
[  857.045698][T15851]  do_syscall_64+0xcd/0xf80
[  857.045724][T15851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.045742][T15851] RIP: 0033:0x7fbe7e38f749
[  857.045757][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  857.045774][T15851] RSP: 002b:00007fbe7f199038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  857.045790][T15851] RAX: ffffffffffffffda RBX: 00007fbe7e5e5fa0 RCX: 00007fbe7e38f749
[  857.045800][T15851] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  857.045810][T15851] RBP: 00007fbe7f199090 R08: 0000000000000000 R09: 0000000000000000
[  857.045819][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  857.045829][T15851] R13: 00007fbe7e5e6038 R14: 00007fbe7e5e5fa0 R15: 00007ffcc1d2b288
[  857.045851][T15851]  </TASK>
[  857.755708][T15850] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000
[  857.772713][T15856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  857.779244][T15856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  857.800654][T15856] vhci_hcd vhci_hcd.0: Device attached
[  857.971992][ T6423] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  858.031918][ T6423] usb 35-1: new full-speed USB device number 14 using vhci_hcd
[  858.210408][T15870] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2429'.
[  858.369399][T15858] vhci_hcd: connection reset by peer
[  858.378387][ T1103] vhci_hcd vhci_hcd.1: stop threads
[  858.399259][ T1103] vhci_hcd vhci_hcd.1: release socket
[  858.408559][ T1103] vhci_hcd vhci_hcd.1: disconnect device
[  858.774496][T15879] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2430'.
[  860.005154][T15890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15890 comm=syz.6.2434
[  860.557856][T15897] netlink: 'syz.0.2435': attribute type 4 has an invalid length.
[  863.053808][T15921] netlink: 774 bytes leftover after parsing attributes in process `syz.6.2443'.
[  863.116899][T15921] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2443'.
[  863.282028][ T6423] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  863.865412][T15937] FAULT_INJECTION: forcing a failure.
[  863.865412][T15937] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  863.881649][T15937] CPU: 0 UID: 0 PID: 15937 Comm: syz.1.2448 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.881676][T15937] Tainted: [L]=SOFTLOCKUP
[  863.881681][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  863.881691][T15937] Call Trace:
[  863.881697][T15937]  <TASK>
[  863.881703][T15937]  dump_stack_lvl+0x16c/0x1f0
[  863.881728][T15937]  should_fail_ex+0x512/0x640
[  863.881757][T15937]  should_fail_alloc_page+0xe7/0x130
[  863.881782][T15937]  prepare_alloc_pages+0x401/0x670
[  863.881808][T15937]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  863.881825][T15937]  ? __alloc_frozen_pages_noprof+0x292/0x2430
[  863.881852][T15937]  ? __lock_acquire+0x436/0x2890
[  863.881876][T15937]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  863.881891][T15937]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  863.881917][T15937]  ? is_bpf_text_address+0x8a/0x1a0
[  863.881935][T15937]  ? bpf_ksym_find+0x127/0x1c0
[  863.881959][T15937]  ? __lock_acquire+0x436/0x2890
[  863.881976][T15937]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  863.881997][T15937]  ? policy_nodemask+0xea/0x4e0
[  863.882021][T15937]  alloc_pages_mpol+0x1fb/0x550
[  863.882042][T15937]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  863.882060][T15937]  ? do_raw_spin_lock+0x12c/0x2b0
[  863.882079][T15937]  ? find_held_lock+0x2b/0x80
[  863.882106][T15937]  alloc_pages_noprof+0x131/0x390
[  863.882128][T15937]  __pmd_alloc+0x3b/0x9c0
[  863.882149][T15937]  ? __pud_alloc+0x57a/0x760
[  863.882171][T15937]  __handle_mm_fault+0xbeb/0x2bb0
[  863.882200][T15937]  ? __pfx___handle_mm_fault+0x10/0x10
[  863.882237][T15937]  ? find_vma+0xbf/0x140
[  863.882255][T15937]  ? __pfx_find_vma+0x10/0x10
[  863.882276][T15937]  handle_mm_fault+0x3fe/0xad0
[  863.882304][T15937]  do_user_addr_fault+0x7a6/0x1370
[  863.882335][T15937]  ? rcu_is_watching+0x12/0xc0
[  863.882354][T15937]  exc_page_fault+0x64/0xc0
[  863.882378][T15937]  asm_exc_page_fault+0x26/0x30
[  863.882393][T15937] RIP: 0010:strncpy_from_user+0x147/0x2e0
[  863.882417][T15937] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 e7 c0 dd fc 48 83 fd 07 76 22 e8 0c c6 dd fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 98 c0 dd fc 45 85 ff 0f 84
[  863.882434][T15937] RSP: 0018:ffffc9001a0d7e10 EFLAGS: 00050246
[  863.882448][T15937] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84e135a6
[  863.882459][T15937] RDX: ffff8880343224c0 RSI: ffffffff84e13644 RDI: 0000000000000007
[  863.882468][T15937] RBP: 0000000000000020 R08: 0000000000000007 R09: 0000000000000007
[  863.882477][T15937] R10: 0000000000000020 R11: ffff888034322ff0 R12: 00002000000001c0
[  863.882486][T15937] R13: ffffc9001a0d7e80 R14: 0000000000000020 R15: 0000000000000000
[  863.882502][T15937]  ? strncpy_from_user+0xa6/0x2e0
[  863.882524][T15937]  ? strncpy_from_user+0x144/0x2e0
[  863.882552][T15937]  __do_sys_request_key+0xa8/0x3d0
[  863.882569][T15937]  ? fput+0x70/0xf0
[  863.882582][T15937]  ? __pfx___do_sys_request_key+0x10/0x10
[  863.882597][T15937]  ? ksys_write+0x1ac/0x250
[  863.882625][T15937]  do_syscall_64+0xcd/0xf80
[  863.882647][T15937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.882661][T15937] RIP: 0033:0x7fbe7e38f749
[  863.882673][T15937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.882687][T15937] RSP: 002b:00007fbe7f199038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  863.882701][T15937] RAX: ffffffffffffffda RBX: 00007fbe7e5e5fa0 RCX: 00007fbe7e38f749
[  863.882711][T15937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  863.882721][T15937] RBP: 00007fbe7f199090 R08: 0000000000000000 R09: 0000000000000000
[  863.882730][T15937] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001
[  863.882741][T15937] R13: 00007fbe7e5e6038 R14: 00007fbe7e5e5fa0 R15: 00007ffcc1d2b288
[  863.882765][T15937]  </TASK>
[  864.927093][T15953] ieee802154 phy1 wpan1: encryption failed: -22
[  864.935878][T15953] ieee802154 phy1 wpan1: encryption failed: -22
[  865.160659][T15957] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  865.451936][T10029] Bluetooth: hci5: command 0x1003 tx timeout
[  865.459449][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  865.804482][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'.
[  866.163732][T15971] netlink: 'syz.2.2454': attribute type 4 has an invalid length.
[  866.384362][   T30] audit: type=1400 audit(1768743945.962:1553): avc:  denied  { read write } for  pid=15968 comm="syz.1.2456" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  866.478638][   T30] audit: type=1400 audit(1768743945.962:1554): avc:  denied  { open } for  pid=15968 comm="syz.1.2456" path="/dev/input/mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  866.837392][T15979] ptrace attach of ""[15980] was attempted by "./syz-executor exec"[15979]
[  867.580755][   T30] audit: type=1400 audit(1768743946.402:1555): avc:  denied  { ioctl } for  pid=15976 comm="syz.6.2459" path="socket:[67389]" dev="sockfs" ino=67389 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  868.572098][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'.
[  869.608138][T16010] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2460'.
[  869.632483][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  870.157632][T16010] FAULT_INJECTION: forcing a failure.
[  870.157632][T16010] name failslab, interval 1, probability 0, space 0, times 0
[  870.189482][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.6.2460 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.189512][T16010] Tainted: [L]=SOFTLOCKUP
[  870.189518][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  870.189528][T16010] Call Trace:
[  870.189534][T16010]  <TASK>
[  870.189542][T16010]  dump_stack_lvl+0x16c/0x1f0
[  870.189570][T16010]  should_fail_ex+0x512/0x640
[  870.189596][T16010]  ? __kmalloc_cache_noprof+0x5f/0x800
[  870.189616][T16010]  should_failslab+0xc2/0x120
[  870.189639][T16010]  __kmalloc_cache_noprof+0x80/0x800
[  870.189656][T16010]  ? lockdep_init_map_type+0x5c/0x270
[  870.189676][T16010]  ? tcf_block_get_ext+0x15c/0x1860
[  870.189699][T16010]  ? lockdep_init_map_type+0x5c/0x270
[  870.189722][T16010]  ? tcf_block_get_ext+0x15c/0x1860
[  870.189742][T16010]  tcf_block_get_ext+0x15c/0x1860
[  870.189767][T16010]  ? do_raw_spin_lock+0x12c/0x2b0
[  870.189792][T16010]  tcf_block_get+0xa8/0x100
[  870.189813][T16010]  ? __pfx_tcf_block_get+0x10/0x10
[  870.189834][T16010]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  870.189862][T16010]  ? lockdep_init_map_type+0x5c/0x270
[  870.189883][T16010]  ? do_init_timer+0xc9/0x110
[  870.189904][T16010]  sfq_init+0xef/0x24d0
[  870.189919][T16010]  ? qdisc_alloc+0x763/0xa50
[  870.189936][T16010]  ? qdisc_create+0x71/0xfa0
[  870.189958][T16010]  ? tc_modify_qdisc+0x122f/0x2230
[  870.189981][T16010]  ? netlink_unicast+0x5aa/0x870
[  870.190002][T16010]  ? netlink_sendmsg+0x8c8/0xdd0
[  870.190021][T16010]  ? ____sys_sendmsg+0xa5d/0xc30
[  870.190043][T16010]  ? ___sys_sendmsg+0x134/0x1d0
[  870.190059][T16010]  ? __sys_sendmsg+0x16d/0x220
[  870.190077][T16010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.190098][T16010]  ? lockdep_init_map_type+0x5c/0x270
[  870.190120][T16010]  ? __pfx_sfq_init+0x10/0x10
[  870.190136][T16010]  ? qdisc_alloc+0x7b0/0xa50
[  870.190155][T16010]  ? __pfx_sfq_init+0x10/0x10
[  870.190172][T16010]  qdisc_create+0x457/0xfa0
[  870.190200][T16010]  tc_modify_qdisc+0x122f/0x2230
[  870.190232][T16010]  ? __mutex_lock+0x27b/0x1ca0
[  870.190260][T16010]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  870.190284][T16010]  ? __lock_acquire+0x436/0x2890
[  870.190324][T16010]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  870.190349][T16010]  rtnetlink_rcv_msg+0x3c9/0xe90
[  870.190374][T16010]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  870.190402][T16010]  ? ref_tracker_free+0x37c/0x830
[  870.190423][T16010]  netlink_rcv_skb+0x158/0x420
[  870.190445][T16010]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  870.190467][T16010]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  870.190499][T16010]  ? netlink_deliver_tap+0x1ae/0xd30
[  870.190526][T16010]  netlink_unicast+0x5aa/0x870
[  870.190552][T16010]  ? __pfx_netlink_unicast+0x10/0x10
[  870.190584][T16010]  netlink_sendmsg+0x8c8/0xdd0
[  870.190611][T16010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  870.190643][T16010]  ____sys_sendmsg+0xa5d/0xc30
[  870.190667][T16010]  ? copy_msghdr_from_user+0x10a/0x160
[  870.190686][T16010]  ? __pfx_____sys_sendmsg+0x10/0x10
[  870.190722][T16010]  ___sys_sendmsg+0x134/0x1d0
[  870.190742][T16010]  ? __pfx____sys_sendmsg+0x10/0x10
[  870.190794][T16010]  __sys_sendmsg+0x16d/0x220
[  870.190814][T16010]  ? __pfx___sys_sendmsg+0x10/0x10
[  870.190850][T16010]  do_syscall_64+0xcd/0xf80
[  870.190875][T16010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.190892][T16010] RIP: 0033:0x7f021df8f749
[  870.190907][T16010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  870.190922][T16010] RSP: 002b:00007f021ee8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  870.190939][T16010] RAX: ffffffffffffffda RBX: 00007f021e1e5fa0 RCX: 00007f021df8f749
[  870.190950][T16010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  870.190960][T16010] RBP: 00007f021ee8b090 R08: 0000000000000000 R09: 0000000000000000
[  870.190970][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  870.190978][T16010] R13: 00007f021e1e6038 R14: 00007f021e1e5fa0 R15: 00007fff115974f8
[  870.191004][T16010]  </TASK>
[  871.002635][T16022] No control pipe specified
[  871.262135][ T5881] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  871.423007][ T5881] usb 2-1: Using ep0 maxpacket: 8
[  871.429743][ T5881] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  871.452475][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.462956][ T5881] usb 2-1: config 0 descriptor??
[  871.470716][ T5881] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  871.482462][ T5881] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  871.530431][ T5881] usb-storage 2-1:0.0: USB Mass Storage device detected
[  871.565404][ T5881] usb-storage 2-1:0.0: device ignored
[  874.066156][ T5881] usb 2-1: USB disconnect, device number 63
[  874.352077][ T6423] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  874.389544][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  874.397238][T14824] Bluetooth: hci5: command 0x1003 tx timeout
[  874.467678][T16064] No control pipe specified
[  874.680215][ T6423] usb 1-1: Using ep0 maxpacket: 8
[  874.694947][ T6423] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  874.704642][ T6423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.714491][ T6423] usb 1-1: config 0 descriptor??
[  874.722811][ T6423] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  874.734995][ T6423] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  874.746049][ T6423] usb-storage 1-1:0.0: USB Mass Storage device detected
[  874.756116][ T6423] usb-storage 1-1:0.0: device ignored
[  875.031917][ T5918] usb 2-1: new low-speed USB device number 64 using dummy_hcd
[  875.212334][T14824] Bluetooth: hci3: command 0x0419 tx timeout
[  875.639332][ T5918] usb 2-1: No LPM exit latency info found, disabling LPM.
[  875.742069][ T5918] usb 2-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  875.914088][ T5918] usb 2-1: config 1 interface 0 has no altsetting 0
[  875.968365][ T5918] usb 2-1: string descriptor 0 read error: -22
[  876.010214][ T5918] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  876.056512][T16081] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  876.080758][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.543321][ T6423] usb 1-1: USB disconnect, device number 68
[  877.347182][T16097] No control pipe specified
[  877.810808][ T5918] usbhid 2-1:1.0: can't add hid device: -71
[  877.822523][ T5918] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  878.313242][ T5918] usb 2-1: USB disconnect, device number 64
[  878.361991][ T6423] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  878.521999][ T6423] usb 1-1: Using ep0 maxpacket: 8
[  878.614228][ T6423] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  878.623584][ T6423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.635322][ T6423] usb 1-1: config 0 descriptor??
[  878.648428][ T6423] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  878.661534][ T6423] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  878.678720][ T6423] usb-storage 1-1:0.0: USB Mass Storage device detected
[  878.688121][ T6423] usb-storage 1-1:0.0: device ignored
[  878.841942][ T5933] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  879.094269][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short
[  879.102836][ T5933] usb 7-1: not running at top speed; connect to a high speed hub
[  879.112318][ T5933] usb 7-1: config 2 has an invalid interface number: 212 but max is 1
[  879.515806][ T5933] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[  879.533616][ T5933] usb 7-1: config 2 has no interface number 0
[  879.547882][ T5933] usb 7-1: config 2 has no interface number 1
[  879.558586][ T5933] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  879.569807][ T5933] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  879.590113][ T5933] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  879.601393][ T5933] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  879.612966][ T5933] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  879.626183][ T5933] usb 7-1: config 2 interface 212 has no altsetting 0
[  879.635225][ T5933] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  879.644457][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.652801][ T5933] usb 7-1: Product: syz
[  879.657433][ T5933] usb 7-1: Manufacturer: syz
[  879.662358][ T5933] usb 7-1: SerialNumber: syz
[  879.785858][T16121] overlayfs: failed to resolve './file1': -2
[  879.799954][T16123] FAULT_INJECTION: forcing a failure.
[  879.799954][T16123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  879.891632][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.2.2496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  879.891663][T16123] Tainted: [L]=SOFTLOCKUP
[  879.891669][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  879.891678][T16123] Call Trace:
[  879.891685][T16123]  <TASK>
[  879.891692][T16123]  dump_stack_lvl+0x16c/0x1f0
[  879.891719][T16123]  should_fail_ex+0x512/0x640
[  879.891750][T16123]  _copy_from_user+0x2e/0xd0
[  879.891777][T16123]  copy_msghdr_from_user+0x98/0x160
[  879.891797][T16123]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  879.891827][T16123]  ___sys_sendmsg+0xfe/0x1d0
[  879.891850][T16123]  ? __pfx____sys_sendmsg+0x10/0x10
[  879.891903][T16123]  __sys_sendmsg+0x16d/0x220
[  879.891924][T16123]  ? __pfx___sys_sendmsg+0x10/0x10
[  879.891960][T16123]  do_syscall_64+0xcd/0xf80
[  879.891985][T16123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.892002][T16123] RIP: 0033:0x7f50ecf8f749
[  879.892015][T16123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  879.892031][T16123] RSP: 002b:00007f50ede19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  879.892048][T16123] RAX: ffffffffffffffda RBX: 00007f50ed1e5fa0 RCX: 00007f50ecf8f749
[  879.892059][T16123] RDX: 0000000000004000 RSI: 00002000000011c0 RDI: 0000000000000004
[  879.892069][T16123] RBP: 00007f50ede19090 R08: 0000000000000000 R09: 0000000000000000
[  879.892079][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.892089][T16123] R13: 00007f50ed1e6038 R14: 00007f50ed1e5fa0 R15: 00007ffd1d6f0ef8
[  879.892113][T16123]  </TASK>
[  880.127216][ T5934] usb 1-1: USB disconnect, device number 69
[  880.467802][T16128] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  880.474345][T16128] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  880.495503][T16110] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2492'.
[  880.845813][T16128] vhci_hcd vhci_hcd.0: Device attached
[  880.893531][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2492'.
[  880.992152][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2492'.
[  881.072600][ T5881] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  881.079403][T16142] vhci_hcd: connection closed
[  881.079649][   T37] vhci_hcd vhci_hcd.1: stop threads
[  881.089885][   T37] vhci_hcd vhci_hcd.1: release socket
[  881.104431][   T37] vhci_hcd vhci_hcd.1: disconnect device
[  881.132044][ T5881] usb 35-1: new full-speed USB device number 15 using vhci_hcd
[  881.139651][ T5881] usb 35-1: enqueue for inactive port 0
[  881.168714][ T5933] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input68
[  881.202606][ T5933] usb 7-1: USB disconnect, device number 7
[  881.202718][    C1] xpad 7-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  881.253421][ T5881] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  881.976431][T16164] overlayfs: failed to resolve './file0': -2
[  882.192439][T16177] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2513'.
[  882.201625][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2513'.
[  882.210838][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2513'.
[  883.289029][   T30] audit: type=1400 audit(1768743962.862:1556): avc:  denied  { map } for  pid=16190 comm="syz.0.2515" path="socket:[68725]" dev="sockfs" ino=68725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  883.481739][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'.
[  883.620140][T16201] overlayfs: failed to resolve './file0': -2
[  884.011952][T14824] Bluetooth: hci5: command 0x1003 tx timeout
[  884.011967][T10029] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  885.270387][T16231] ip6tnl5: entered promiscuous mode
[  885.537934][T16235] overlayfs: failed to resolve './file0': -2
[  888.863071][   T30] audit: type=1400 audit(1768743968.442:1557): avc:  denied  { write } for  pid=16272 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  888.891941][ T5894] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  889.357341][T16281] overlayfs: failed to resolve './file0': -2
[  889.381922][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  889.404251][ T5894] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  889.452526][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.485618][ T5894] usb 3-1: config 0 descriptor??
[  889.524709][ T5894] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  889.574708][ T5894] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  889.603900][ T5894] usb-storage 3-1:0.0: USB Mass Storage device detected
[  889.756207][ T5894] usb-storage 3-1:0.0: device ignored
[  890.090140][T16303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  890.096677][T16303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  890.112768][T16303] vhci_hcd vhci_hcd.0: Device attached
[  890.161024][T16311] binder: 16309:16311 ioctl 400c620e 200000000080 returned -22
[  890.292126][ T5917] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  890.493317][ T6423] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  890.547664][ T5917] usb 35-1: new full-speed USB device number 16 using vhci_hcd
[  890.589502][T16305] vhci_hcd: connection reset by peer
[  890.621960][ T4213] vhci_hcd vhci_hcd.1: stop threads
[  890.627440][ T4213] vhci_hcd vhci_hcd.1: release socket
[  890.653183][ T4213] vhci_hcd vhci_hcd.1: disconnect device
[  891.172386][ T5934] usb 3-1: USB disconnect, device number 53
[  891.181604][ T6423] usb 1-1: unable to get BOS descriptor or descriptor too short
[  891.193536][ T6423] usb 1-1: not running at top speed; connect to a high speed hub
[  891.220692][ T6423] usb 1-1: config 2 has an invalid interface number: 212 but max is 1
[  891.226168][T16319] overlayfs: failed to resolve './file0': -2
[  891.262674][ T6423] usb 1-1: config 2 has an invalid interface number: 226 but max is 1
[  891.289557][ T6423] usb 1-1: config 2 has no interface number 0
[  891.296127][ T6423] usb 1-1: config 2 has no interface number 1
[  891.302706][ T6423] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  891.321894][ T6423] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  891.342024][ T6423] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  891.381545][ T6423] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  891.450776][ T6423] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  891.469348][ T6423] usb 1-1: config 2 interface 212 has no altsetting 0
[  891.524343][ T6423] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  891.541087][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.561927][ T6423] usb 1-1: Product: syz
[  891.566120][ T6423] usb 1-1: Manufacturer: syz
[  891.570707][ T6423] usb 1-1: SerialNumber: syz
[  891.656098][   T30] audit: type=1326 audit(1768743971.232:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16336 comm="syz.1.2565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e38f749 code=0x0
[  891.895363][ T5881] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  891.946104][ T5894] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  891.994116][T16342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2553'.
[  892.091919][ T5881] usb 3-1: Using ep0 maxpacket: 8
[  892.108612][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  892.119876][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2553'.
[  892.159132][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.180042][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  892.233775][ T5894] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  892.264655][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2553'.
[  892.286581][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  892.304508][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.313035][   T30] audit: type=1326 audit(1768743971.872:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16344 comm="syz.5.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdafb8f749 code=0x0
[  892.337052][ T5894] usb 7-1: Product: syz
[  892.344801][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  892.370906][ T5894] usb 7-1: Manufacturer: syz
[  892.386361][ T5894] usb 7-1: SerialNumber: syz
[  892.395331][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  892.428202][ T5894] usb 7-1: config 0 descriptor??
[  892.454201][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  892.493447][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.529852][ T5894] mvusb_mdio 7-1:0.0: probe with driver mvusb_mdio failed with error -5
[  892.540093][ T6423] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input69
[  892.560134][ T6423] usb 1-1: USB disconnect, device number 70
[  892.560217][    C1] xpad 1-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  892.605909][T16350] overlayfs: failed to resolve './file0': -2
[  892.787998][ T5881] usb 3-1: GET_CAPABILITIES returned 0
[  893.263196][ T5881] usbtmc 3-1:16.0: can't read capabilities
[  894.672707][ T5926] usb 3-1: USB disconnect, device number 54
[  894.706706][ T5934] usb 7-1: USB disconnect, device number 8
[  896.055410][ T5917] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  896.118743][   T30] audit: type=1400 audit(1768743975.692:1560): avc:  denied  { bind } for  pid=16377 comm="syz.6.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  896.140778][T16378] netlink: 'syz.6.2578': attribute type 10 has an invalid length.
[  896.153627][T16378] team0: Port device dummy0 added
[  896.782647][ T5934] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  896.811909][T14824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  896.962224][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  896.974907][ T5934] usb 3-1: not running at top speed; connect to a high speed hub
[  896.999547][ T5934] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  897.021281][ T5934] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  897.041042][ T5934] usb 3-1: config 2 has no interface number 0
[  897.068740][ T5934] usb 3-1: config 2 has no interface number 1
[  897.077045][ T5934] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  897.105348][ T5934] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  897.137603][ T5934] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  897.157799][ T5934] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  897.181880][ T5934] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  897.229598][ T5934] usb 3-1: config 2 interface 212 has no altsetting 0
[  897.239246][ T5934] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  897.259996][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.275602][ T5934] usb 3-1: Product: syz
[  897.279781][ T5934] usb 3-1: Manufacturer: syz
[  897.300479][ T5934] usb 3-1: SerialNumber: syz
[  898.860441][T16406] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2581'.
[  898.869620][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2581'.
[  899.353145][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2581'.
[  899.952414][ T5934] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input70
[  900.895442][ T5934] usb 3-1: USB disconnect, device number 55
[  900.901399][    C0] xpad 3-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  902.521923][ T5894] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  902.693925][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  902.718068][ T5894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  902.742434][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  902.763981][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.779538][ T5894] usb 3-1: Product: syz
[  902.783844][ T5894] usb 3-1: Manufacturer: syz
[  902.788802][ T5894] usb 3-1: SerialNumber: syz
[  902.797669][ T5894] cdc_mbim 3-1:1.0: skipping garbage
[  903.040751][T16466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  903.118074][T16475] kvm: kvm [16468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  903.127503][T16475] kvm: kvm [16468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  903.201945][ T5881] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  903.353379][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0
[  903.360013][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  903.372051][ T5918] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  903.384914][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.398602][ T5881] usb 2-1: config 0 descriptor??
[  903.543265][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  903.555128][ T5918] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  903.564196][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.572241][ T5918] usb 7-1: Product: syz
[  903.576405][ T5918] usb 7-1: Manufacturer: syz
[  903.580994][ T5918] usb 7-1: SerialNumber: syz
[  903.587060][ T5918] usb 7-1: config 0 descriptor??
[  903.602471][ T5918] mvusb_mdio 7-1:0.0: probe with driver mvusb_mdio failed with error -5
[  903.611418][ T5881]  (null): keene_cmd_main failed (-71)
[  903.620243][ T5881] video4linux radio48: keene_cmd_main failed (-71)
[  903.627315][ T5881] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  903.636745][ T5881] usb 2-1: USB disconnect, device number 65
[  903.654951][T16466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  903.662528][ T5894] cdc_mbim 3-1:1.0: setting rx_max = 16384
[  903.874465][ T5894] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  903.882464][ T5894] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  903.890367][ T5894] wwan wwan0: port wwan0mbim0 attached
[  903.903747][ T5894] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7a:5d:d7:97:b2:4a
[  903.918724][ T5894] usb 3-1: USB disconnect, device number 56
[  903.927273][ T5894] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  904.464679][ T5894] wwan wwan0: port wwan0mbim0 disconnected
[  904.472625][ T5881] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  907.199643][ T5934] usb 7-1: USB disconnect, device number 9
[  907.293919][ T5881] usb 1-1: device descriptor read/all, error -71
[  908.356689][T16523] FAULT_INJECTION: forcing a failure.
[  908.356689][T16523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  908.376154][T16523] CPU: 1 UID: 0 PID: 16523 Comm: syz.6.2616 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  908.376181][T16523] Tainted: [L]=SOFTLOCKUP
[  908.376186][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  908.376196][T16523] Call Trace:
[  908.376202][T16523]  <TASK>
[  908.376208][T16523]  dump_stack_lvl+0x16c/0x1f0
[  908.376235][T16523]  should_fail_ex+0x512/0x640
[  908.376262][T16523]  _copy_to_iter+0x29f/0x1710
[  908.376288][T16523]  ? __pfx_do_proc_dointvec+0x10/0x10
[  908.376311][T16523]  ? __pfx__copy_to_iter+0x10/0x10
[  908.376332][T16523]  ? rcu_is_watching+0x12/0xc0
[  908.376347][T16523]  ? trace_kmalloc+0x2b/0xb0
[  908.376366][T16523]  ? __kvmalloc_node_noprof+0x3c9/0xa40
[  908.376386][T16523]  ? proc_sys_call_handler+0x2d6/0x5b0
[  908.376407][T16523]  ? ns_capable_noaudit+0xc1/0x110
[  908.376433][T16523]  proc_sys_call_handler+0x392/0x5b0
[  908.376456][T16523]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  908.376480][T16523]  ? rw_verify_area+0xcf/0x6c0
[  908.376511][T16523]  ? __pfx_proc_sys_read+0x10/0x10
[  908.376531][T16523]  __io_read+0x357/0x14b0
[  908.376554][T16523]  io_read+0x8d/0x1f0
[  908.376569][T16523]  ? __pfx_io_read+0x10/0x10
[  908.376591][T16523]  __io_issue_sqe+0xe8/0x7c0
[  908.376616][T16523]  io_issue_sqe+0x85/0x1410
[  908.376636][T16523]  io_submit_sqes+0xb24/0x28e0
[  908.376666][T16523]  __do_sys_io_uring_enter+0xd6b/0x1630
[  908.376687][T16523]  ? __fget_files+0x20e/0x3c0
[  908.376709][T16523]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  908.376730][T16523]  ? fput+0x70/0xf0
[  908.376743][T16523]  ? ksys_write+0x1ac/0x250
[  908.376761][T16523]  ? __pfx_ksys_write+0x10/0x10
[  908.376787][T16523]  do_syscall_64+0xcd/0xf80
[  908.376810][T16523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  908.376826][T16523] RIP: 0033:0x7f021df8f749
[  908.376838][T16523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  908.376853][T16523] RSP: 002b:00007f021ee8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  908.376868][T16523] RAX: ffffffffffffffda RBX: 00007f021e1e5fa0 RCX: 00007f021df8f749
[  908.376878][T16523] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000004
[  908.376887][T16523] RBP: 00007f021ee8b090 R08: 0000000000000000 R09: 0000000000000030
[  908.376902][T16523] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001
[  908.376911][T16523] R13: 00007f021e1e6038 R14: 00007f021e1e5fa0 R15: 00007fff115974f8
[  908.376935][T16523]  </TASK>
[  909.608934][T16541] No control pipe specified
[  910.136750][T16535] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  910.143259][T16535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  910.150689][T16535] vhci_hcd vhci_hcd.0: Device attached
[  910.259163][T16545] vhci_hcd: connection closed
[  910.259275][ T4196] vhci_hcd vhci_hcd.1: stop threads
[  910.393359][ T5881] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  910.400993][ T5894] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  910.410550][ T4196] vhci_hcd vhci_hcd.1: release socket
[  910.418635][ T4196] vhci_hcd vhci_hcd.1: disconnect device
[  910.472312][ T5926] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  910.562073][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  910.572428][ T5894] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  910.584433][ T5881] usb 7-1: unable to get BOS descriptor or descriptor too short
[  910.593458][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.602456][ T5881] usb 7-1: not running at top speed; connect to a high speed hub
[  910.613322][ T5894] usb 3-1: config 0 descriptor??
[  910.625663][ T5894] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  910.712578][ T5881] usb 7-1: config 2 has an invalid interface number: 212 but max is 1
[  910.726234][ T5881] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[  910.734666][ T5894] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  910.753582][ T5881] usb 7-1: config 2 has no interface number 0
[  910.759706][ T5881] usb 7-1: config 2 has no interface number 1
[  910.772292][ T5881] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  910.786260][ T5894] usb-storage 3-1:0.0: USB Mass Storage device detected
[  910.812508][ T5881] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  910.867729][ T5894] usb-storage 3-1:0.0: device ignored
[  910.881905][ T5881] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  910.926031][ T5881] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  910.937878][ T5881] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  910.951198][ T5881] usb 7-1: config 2 interface 212 has no altsetting 0
[  910.964647][ T5881] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  910.983112][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.996781][ T5881] usb 7-1: Product: syz
[  911.001029][ T5881] usb 7-1: Manufacturer: syz
[  911.006134][ T5881] usb 7-1: SerialNumber: syz
[  911.297687][T16539] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2621'.
[  911.308512][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2621'.
[  911.695733][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2621'.
[  911.735520][ T5881] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input71
[  911.762646][ T5881] usb 7-1: USB disconnect, device number 10
[  912.185328][T16575] No control pipe specified
[  912.732342][ T5926] usb 3-1: USB disconnect, device number 57
[  913.417909][T16590] bond0: entered promiscuous mode
[  913.423053][T16590] bond_slave_0: entered promiscuous mode
[  913.429889][T16590] bond_slave_1: entered promiscuous mode
[  913.442242][T16590] batadv0: entered promiscuous mode
[  913.449436][T16590] 8021q: adding VLAN 0 to HW filter on device hsr1
[  913.702637][ T5881] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  913.873956][ T5881] usb 7-1: config 0 has an invalid interface number: 244 but max is 0
[  913.892272][ T5881] usb 7-1: config 0 has no interface number 0
[  913.898757][ T5881] usb 7-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  913.918908][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.952236][ T5894] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  914.094787][ T5881] usb 7-1: config 0 descriptor??
[  914.102902][ T5894] usb 3-1: too many configurations: 17, using maximum allowed: 8
[  914.127181][ T5894] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  914.137367][ T5881] flexcop_usb: set interface failed.
[  914.147538][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.157978][ T5881] b2c2_flexcop_usb 7-1:0.244: probe with driver b2c2_flexcop_usb failed with error -22
[  914.177134][ T5894] usb 3-1: Product: syz
[  914.185708][ T5894] usb 3-1: Manufacturer: syz
[  914.195755][ T5894] usb 3-1: SerialNumber: syz
[  914.211286][ T5894] usb 3-1: config 0 descriptor??
[  914.228431][ T5894] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  914.246838][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  914.272530][ T5894] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  914.293597][ T5894] usb 3-1: media controller created
[  914.340316][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  914.431483][ T5894] DVB: Unable to find symbol mt352_attach()
[  914.497889][ T5894] DVB: Unable to find symbol nxt6000_attach()
[  914.504529][ T5894] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  914.516295][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72
[  914.530143][ T5894] dvb-usb: schedule remote query interval to 1000 msecs.
[  914.544747][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  914.556576][ T5894] dvb-usb: bulk message failed: -22 (7/0)
[  914.562857][ T5894] dvb-usb: bulk message failed: -22 (7/0)
[  914.571130][ T5894] usb 3-1: USB disconnect, device number 58
[  914.709137][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  914.886403][T16606] No control pipe specified
[  916.236358][T10029] Bluetooth: hci5: command 0x1003 tx timeout
[  916.315803][T14824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  916.329185][ T5926] usb 7-1: USB disconnect, device number 11
[  916.486811][T16618] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2642'.
[  916.572027][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2642'.
[  916.581069][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2642'.
[  917.542114][T16632] No control pipe specified
[  918.497465][ T5894] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  918.661959][ T5894] usb 1-1: Using ep0 maxpacket: 8
[  918.679802][ T5894] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  919.220627][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.236233][   T30] audit: type=1400 audit(1768743998.812:1561): avc:  denied  { bind } for  pid=16648 comm="syz.2.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  919.268993][ T5894] usb 1-1: config 0 descriptor??
[  919.294284][ T5894] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  919.316618][ T5894] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  919.352486][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected
[  919.402085][ T5894] usb-storage 1-1:0.0: device ignored
[  922.593057][ T5926] usb 1-1: USB disconnect, device number 73
[  922.623452][ T5934] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  922.953216][ T5926] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  923.142534][ T5926] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  923.171877][ T5926] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  923.198743][ T5926] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  923.221886][ T5926] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  923.230933][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.356773][T16672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  923.851911][ T5934] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  923.935837][   T30] audit: type=1400 audit(1768744003.512:1562): avc:  denied  { bind } for  pid=16671 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  924.014522][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  924.027088][ T5934] usb 3-1: not running at top speed; connect to a high speed hub
[  924.089484][ T5934] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  924.108065][ T5934] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  924.131952][ T5934] usb 3-1: config 2 has no interface number 0
[  924.138047][ T5934] usb 3-1: config 2 has no interface number 1
[  924.151907][ T5934] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  924.173068][ T5934] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  924.202198][ T5934] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  924.221974][ T5934] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64
[  924.244292][ T5934] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  924.261674][T14508] Bluetooth: hci5: Frame reassembly failed (-84)
[  924.278002][ T5934] usb 3-1: config 2 interface 212 has no altsetting 0
[  924.295063][ T5934] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  924.305425][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.313796][ T5934] usb 3-1: Product: syz
[  924.318009][ T5934] usb 3-1: Manufacturer: syz
[  924.324669][ T5934] usb 3-1: SerialNumber: syz
[  925.283819][T16704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2658'.
[  925.297300][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'.
[  925.322036][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'.
[  925.452926][ T5934] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input74
[  925.483005][ T5934] usb 3-1: USB disconnect, device number 60
[  925.640630][ T5926] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  925.701965][ T5926] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input73
[  925.752186][ T5926] usb 1-1: USB disconnect, device number 74
[  925.758148][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  925.927849][T16717] ieee802154 phy1 wpan1: encryption failed: -22
[  925.940424][T16717] ieee802154 phy1 wpan1: encryption failed: -22
[  926.123435][   T30] audit: type=1400 audit(1768744005.692:1563): avc:  denied  { connect } for  pid=16722 comm="syz.0.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  926.215095][T16726] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  926.335832][T10029] Bluetooth: hci5: command 0x1003 tx timeout
[  926.344745][T14824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  926.419400][   T30] audit: type=1400 audit(1768744005.752:1564): avc:  denied  { shutdown } for  pid=16722 comm="syz.0.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  927.048694][T16736] ieee802154 phy1 wpan1: encryption failed: -22
[  927.067939][T16736] ieee802154 phy1 wpan1: encryption failed: -22
[  928.091084][T16748] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  928.097605][T16748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  928.105651][T16748] vhci_hcd vhci_hcd.0: Device attached
[  928.219576][T16755] vhci_hcd: connection closed
[  928.219720][ T6114] vhci_hcd vhci_hcd.0: stop threads
[  928.238395][ T6114] vhci_hcd vhci_hcd.0: release socket
[  928.260210][ T6114] vhci_hcd vhci_hcd.0: disconnect device
[  928.292471][ T5926] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  931.402164][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  931.745336][T16793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  931.751858][T16793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  931.830845][T16793] vhci_hcd vhci_hcd.0: Device attached
[  931.836430][T16794] vhci_hcd: connection closed
[  931.840891][T12382] vhci_hcd vhci_hcd.2: stop threads
[  931.851693][T12382] vhci_hcd vhci_hcd.2: release socket
[  931.857270][T12382] vhci_hcd vhci_hcd.2: disconnect device
[  933.983787][T10029] Bluetooth: hci5: command 0x1003 tx timeout
[  933.983803][T14824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  934.491223][T16837] No control pipe specified
[  935.742009][ T5894] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  936.321983][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  936.434168][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short
[  936.565697][ T5894] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  936.574437][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  936.584562][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  936.597795][ T5894] usb 1-1: string descriptor 0 read error: -22
[  936.604056][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  936.613179][T16857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  936.619674][T16857] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  936.627413][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.644864][ T5894] usb 1-1: 0:2 : does not exist
[  936.704588][T16857] vhci_hcd vhci_hcd.0: Device attached
[  936.933030][T16866] No control pipe specified
[  937.269233][T16858] vhci_hcd: connection closed
[  937.269493][ T1103] vhci_hcd vhci_hcd.1: stop threads
[  937.288264][ T5894] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  937.400385][ T1103] vhci_hcd vhci_hcd.1: release socket
[  937.406381][ T1103] vhci_hcd vhci_hcd.1: disconnect device
[  937.461882][ T5894] usb 35-1: new full-speed USB device number 18 using vhci_hcd
[  937.469602][ T5894] usb 35-1: enqueue for inactive port 0
[  937.541957][ T5894] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  939.148327][T16873] gre1: entered promiscuous mode
[  940.400161][ T5918] usb 1-1: USB disconnect, device number 75
[  940.830255][T16890] overlayfs: unescaped trailing colons in lowerdir mount option.
[  940.934375][T16892] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  940.947219][T16893] No control pipe specified
[  943.126322][   T30] audit: type=1800 audit(1768744022.702:1565): pid=16903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2712" name="nullb0" dev="tmpfs" ino=1465 res=0 errno=0
[  943.352062][ T5934] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[  943.609320][ T5934] usb 1-1: No LPM exit latency info found, disabling LPM.
[  943.618262][ T5934] usb 1-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  943.637526][ T5934] usb 1-1: config 1 interface 0 has no altsetting 0
[  944.281256][ T5934] usb 1-1: string descriptor 0 read error: -22
[  944.290746][ T5934] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  944.299838][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.881973][ T5918] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  945.061868][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  945.069766][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short
[  945.078988][ T5918] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  945.087764][ T5918] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  945.099898][ T5918] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  945.115375][ T5918] usb 7-1: string descriptor 0 read error: -22
[  945.121703][ T5918] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  945.130935][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.148918][ T5918] usb 7-1: 0:2 : does not exist
[  946.544765][ T5934] usbhid 1-1:1.0: can't add hid device: -71
[  946.550767][ T5934] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  946.590767][ T5934] usb 1-1: USB disconnect, device number 76
[  946.720758][   T30] audit: type=1400 audit(1768744026.292:1566): avc:  denied  { map } for  pid=16942 comm="syz.5.2722" path="socket:[71389]" dev="sockfs" ino=71389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  946.749750][   T30] audit: type=1400 audit(1768744026.322:1567): avc:  denied  { read accept } for  pid=16942 comm="syz.5.2722" path="socket:[71389]" dev="sockfs" ino=71389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  946.984652][T14824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  947.143084][T16946] FAULT_INJECTION: forcing a failure.
[  947.143084][T16946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  947.144640][T16946] 
[  947.144646][T16946] ======================================================
[  947.144650][T16946] WARNING: possible circular locking dependency detected
[  947.144656][T16946] syzkaller #0 Tainted: G             L     
[  947.144662][T16946] ------------------------------------------------------
[  947.144665][T16946] syz.2.2719/16946 is trying to acquire lock:
[  947.144670][T16946] ffffffff8e2d6c40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  947.144702][T16946] 
[  947.144702][T16946] but task is already holding lock:
[  947.144705][T16946] ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  947.144732][T16946] 
[  947.144732][T16946] which lock already depends on the new lock.
[  947.144732][T16946] 
[  947.144735][T16946] 
[  947.144735][T16946] the existing dependency chain (in reverse order) is:
[  947.144738][T16946] 
[  947.144738][T16946] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  947.144751][T16946]        _raw_spin_lock_nested+0x31/0x40
[  947.144763][T16946]        raw_spin_rq_lock_nested+0x29/0x130
[  947.144778][T16946]        task_rq_lock+0xcf/0x490
[  947.144785][T16946]        cgroup_move_task+0x81/0x2a0
[  947.144795][T16946]        css_set_move_task+0x288/0x5f0
[  947.144806][T16946]        cgroup_post_fork+0x201/0x9e0
[  947.144817][T16946]        copy_process+0x56b6/0x7430
[  947.144826][T16946]        kernel_clone+0xfc/0x910
[  947.144833][T16946]        user_mode_thread+0xc8/0x110
[  947.144841][T16946]        rest_init+0x23/0x2b0
[  947.144850][T16946]        start_kernel+0x3ef/0x4d0
[  947.144860][T16946]        x86_64_start_reservations+0x18/0x30
[  947.144870][T16946]        x86_64_start_kernel+0x130/0x190
[  947.144880][T16946]        common_startup_64+0x13e/0x148
[  947.144893][T16946] 
[  947.144893][T16946] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  947.144905][T16946]        _raw_spin_lock_irqsave+0x3a/0x60
[  947.144916][T16946]        try_to_wake_up+0xb7/0x1860
[  947.144930][T16946]        __wake_up_common+0x135/0x1f0
[  947.144941][T16946]        __wake_up+0x31/0x60
[  947.144950][T16946]        tty_port_default_wakeup+0x4d/0x60
[  947.144965][T16946]        serial8250_tx_chars+0x68e/0x860
[  947.144977][T16946]        serial8250_handle_irq+0x761/0xcb0
[  947.144990][T16946]        serial8250_default_handle_irq+0x9e/0x270
[  947.145003][T16946]        serial8250_interrupt+0xf8/0x1d0
[  947.145018][T16946]        __handle_irq_event_percpu+0x236/0x890
[  947.145033][T16946]        handle_irq_event+0xab/0x1e0
[  947.145047][T16946]        handle_edge_irq+0x3ca/0x9e0
[  947.145060][T16946]        __common_interrupt+0xd0/0x2f0
[  947.145075][T16946]        common_interrupt+0xba/0xe0
[  947.145085][T16946]        asm_common_interrupt+0x26/0x40
[  947.145095][T16946]        finish_task_switch.isra.0+0x210/0xbd0
[  947.145110][T16946]        __schedule+0x1141/0x6150
[  947.145121][T16946]        schedule+0xe7/0x3a0
[  947.145132][T16946]        schedule_hrtimeout_range_clock+0x2dc/0x320
[  947.145145][T16946]        poll_schedule_timeout.constprop.0+0xc4/0x1c0
[  947.145164][T16946]        do_sys_poll+0xae7/0xdf0
[  947.145179][T16946]        __x64_sys_ppoll+0x254/0x2d0
[  947.145193][T16946]        do_syscall_64+0xcd/0xf80
[  947.145206][T16946]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.145215][T16946] 
[  947.145215][T16946] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  947.145228][T16946]        _raw_spin_lock_irqsave+0x3a/0x60
[  947.145239][T16946]        __wake_up+0x1c/0x60
[  947.145247][T16946]        tty_port_default_wakeup+0x4d/0x60
[  947.145259][T16946]        serial8250_tx_chars+0x68e/0x860
[  947.145271][T16946]        serial8250_handle_irq+0x761/0xcb0
[  947.145283][T16946]        serial8250_default_handle_irq+0x9e/0x270
[  947.145297][T16946]        serial8250_interrupt+0xf8/0x1d0
[  947.145310][T16946]        __handle_irq_event_percpu+0x236/0x890
[  947.145324][T16946]        handle_irq_event+0xab/0x1e0
[  947.145339][T16946]        handle_edge_irq+0x3ca/0x9e0
[  947.145351][T16946]        __common_interrupt+0xd0/0x2f0
[  947.145365][T16946]        common_interrupt+0xba/0xe0
[  947.145374][T16946]        asm_common_interrupt+0x26/0x40
[  947.145388][T16946]        _raw_spin_unlock_irqrestore+0x31/0x80
[  947.145399][T16946]        uart_write+0x2a4/0xb30
[  947.145410][T16946]        n_tty_write+0x434/0x1280
[  947.145423][T16946]        file_tty_write.constprop.0+0x503/0x9b0
[  947.145435][T16946]        redirected_tty_write+0xd4/0x120
[  947.145446][T16946]        vfs_write+0x7d3/0x11d0
[  947.145457][T16946]        ksys_write+0x12a/0x250
[  947.145469][T16946]        do_syscall_64+0xcd/0xf80
[  947.145481][T16946]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.145490][T16946] 
[  947.145490][T16946] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  947.145502][T16946]        _raw_spin_lock_irqsave+0x3a/0x60
[  947.145513][T16946]        serial8250_console_write+0x181/0x1890
[  947.145527][T16946]        console_flush_one_record+0x796/0xc60
[  947.145541][T16946]        console_unlock+0xef/0x240
[  947.145555][T16946]        vprintk_emit+0x407/0x6b0
[  947.145563][T16946]        _printk+0xc7/0x100
[  947.145573][T16946]        register_console+0x823/0x1210
[  947.145581][T16946]        univ8250_console_init+0x5f/0x90
[  947.145594][T16946]        console_init+0x152/0x600
[  947.145605][T16946]        start_kernel+0x298/0x4d0
[  947.145614][T16946]        x86_64_start_reservations+0x18/0x30
[  947.145624][T16946]        x86_64_start_kernel+0x130/0x190
[  947.145634][T16946]        common_startup_64+0x13e/0x148
[  947.145645][T16946] 
[  947.145645][T16946] -> #0 (console_owner){-.-.}-{0:0}:
[  947.145656][T16946]        __lock_acquire+0x1669/0x2890
[  947.145667][T16946]        lock_acquire+0x179/0x330
[  947.145677][T16946]        console_lock_spinning_enable+0x72/0x80
[  947.145691][T16946]        console_flush_one_record+0x73f/0xc60
[  947.145705][T16946]        console_unlock+0xef/0x240
[  947.145718][T16946]        vprintk_emit+0x407/0x6b0
[  947.145726][T16946]        _printk+0xc7/0x100
[  947.145737][T16946]        should_fail_ex+0x4e7/0x640
[  947.145751][T16946]        strncpy_from_user+0x3b/0x2e0
[  947.145765][T16946]        strncpy_from_user_nofault+0x7f/0x180
[  947.145775][T16946]        bpf_bprintf_prepare+0xe90/0x13f0
[  947.145785][T16946]        bpf_trace_printk+0xda/0x190
[  947.145794][T16946]        bpf_prog_930ede9872f2967c+0x3e/0x44
[  947.145802][T16946]        bpf_trace_run2+0x239/0x5c0
[  947.145812][T16946]        __bpf_trace_contention_begin+0xc9/0x110
[  947.145823][T16946]        trace_contention_begin.constprop.0+0xd6/0x140
[  947.145837][T16946]        __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  947.145850][T16946]        do_raw_spin_lock+0x20e/0x2b0
[  947.145863][T16946]        raw_spin_rq_lock_nested+0x7e/0x130
[  947.145877][T16946]        __schedule+0x331/0x6150
[  947.145888][T16946]        preempt_schedule_notrace+0x62/0xe0
[  947.145900][T16946]        preempt_schedule_notrace_thunk+0x16/0x30
[  947.145910][T16946]        stack_depot_save_flags+0x4b8/0x9b0
[  947.145924][T16946]        save_stack+0x16d/0x1f0
[  947.145935][T16946]        __set_page_owner+0x91/0x560
[  947.145946][T16946]        post_alloc_hook+0x1af/0x220
[  947.145960][T16946]        get_page_from_freelist+0xd0b/0x31a0
[  947.145969][T16946]        __alloc_frozen_pages_noprof+0x25f/0x2430
[  947.145979][T16946]        alloc_pages_mpol+0x1fb/0x550
[  947.145992][T16946]        ___kmalloc_large_node+0x10c/0x150
[  947.146005][T16946]        __kmalloc_large_node_noprof+0x1c/0x70
[  947.146018][T16946]        __kmalloc_node_track_caller_noprof.cold+0x5/0x5e
[  947.146033][T16946]        memdup_user+0x2a/0xe0
[  947.146042][T16946]        sctp_getsockopt+0x2706/0x70d0
[  947.146052][T16946]        do_sock_getsockopt+0x324/0x410
[  947.146065][T16946]        __sys_getsockopt+0x12f/0x260
[  947.146074][T16946]        __x64_sys_getsockopt+0xbd/0x160
[  947.146083][T16946]        do_syscall_64+0xcd/0xf80
[  947.146095][T16946]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.146105][T16946] 
[  947.146105][T16946] other info that might help us debug this:
[  947.146105][T16946] 
[  947.146107][T16946] Chain exists of:
[  947.146107][T16946]   console_owner --> &p->pi_lock --> &rq->__lock
[  947.146107][T16946] 
[  947.146121][T16946]  Possible unsafe locking scenario:
[  947.146121][T16946] 
[  947.146123][T16946]        CPU0                    CPU1
[  947.146126][T16946]        ----                    ----
[  947.146129][T16946]   lock(&rq->__lock);
[  947.146134][T16946]                                lock(&p->pi_lock);
[  947.146141][T16946]                                lock(&rq->__lock);
[  947.146147][T16946]   lock(console_owner);
[  947.146152][T16946] 
[  947.146152][T16946]  *** DEADLOCK ***
[  947.146152][T16946] 
[  947.146155][T16946] 5 locks held by syz.2.2719/16946:
[  947.146160][T16946]  #0: ffff88802aaa93e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_getsockopt+0x2d6/0x70d0
[  947.146182][T16946]  #1: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  947.146208][T16946]  #2: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x5c0
[  947.146231][T16946]  #3: ffffffff8e3b7080 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100
[  947.146254][T16946]  #4: ffffffff8e3b70f8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60
[  947.146280][T16946] 
[  947.146280][T16946] stack backtrace:
[  947.146287][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.2.2719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  947.146301][T16946] Tainted: [L]=SOFTLOCKUP
[  947.146305][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  947.146311][T16946] Call Trace:
[  947.146314][T16946]  <TASK>
[  947.146318][T16946]  dump_stack_lvl+0x116/0x1f0
[  947.146333][T16946]  print_circular_bug+0x275/0x340
[  947.146344][T16946]  check_noncircular+0x146/0x160
[  947.146357][T16946]  __lock_acquire+0x1669/0x2890
[  947.146371][T16946]  lock_acquire+0x179/0x330
[  947.146386][T16946]  ? console_lock_spinning_enable+0x61/0x80
[  947.146401][T16946]  ? console_lock_spinning_enable+0x4a/0x80
[  947.146417][T16946]  console_lock_spinning_enable+0x72/0x80
[  947.146432][T16946]  ? console_lock_spinning_enable+0x61/0x80
[  947.146446][T16946]  console_flush_one_record+0x73f/0xc60
[  947.146463][T16946]  ? __pfx_console_flush_one_record+0x10/0x10
[  947.146478][T16946]  ? __lock_acquire+0x436/0x2890
[  947.146491][T16946]  ? is_printk_cpu_sync_owner+0x32/0x40
[  947.146502][T16946]  console_unlock+0xef/0x240
[  947.146516][T16946]  ? __pfx_console_unlock+0x10/0x10
[  947.146531][T16946]  ? do_raw_spin_unlock+0x80/0x230
[  947.146545][T16946]  ? _printk+0xc7/0x100
[  947.146557][T16946]  ? __down_trylock_console_sem+0xb0/0x140
[  947.146571][T16946]  vprintk_emit+0x407/0x6b0
[  947.146580][T16946]  ? __pfx_vprintk_emit+0x10/0x10
[  947.146588][T16946]  ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260
[  947.146601][T16946]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[  947.146614][T16946]  _printk+0xc7/0x100
[  947.146626][T16946]  ? __pfx__printk+0x10/0x10
[  947.146639][T16946]  ? __pfx____ratelimit+0x10/0x10
[  947.146651][T16946]  ? bpf_put_buffers+0x44/0x70
[  947.146660][T16946]  ? bpf_bprintf_cleanup+0x34/0x80
[  947.146670][T16946]  should_fail_ex+0x4e7/0x640
[  947.146686][T16946]  strncpy_from_user+0x3b/0x2e0
[  947.146700][T16946]  strncpy_from_user_nofault+0x7f/0x180
[  947.146711][T16946]  bpf_bprintf_prepare+0xe90/0x13f0
[  947.146721][T16946]  ? __pfx_bpf_trace_run2+0x10/0x10
[  947.146732][T16946]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  947.146742][T16946]  ? bpf_trace_run2+0x2ab/0x5c0
[  947.146755][T16946]  ? bpf_trace_run2+0x3f9/0x5c0
[  947.146766][T16946]  bpf_trace_printk+0xda/0x190
[  947.146775][T16946]  ? __pfx_bpf_trace_printk+0x10/0x10
[  947.146786][T16946]  ? bpf_trace_run2+0x3f9/0x5c0
[  947.146797][T16946]  ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0
[  947.146813][T16946]  bpf_prog_930ede9872f2967c+0x3e/0x44
[  947.146821][T16946]  bpf_trace_run2+0x239/0x5c0
[  947.146832][T16946]  ? __pfx_bpf_trace_run2+0x10/0x10
[  947.146843][T16946]  ? mark_held_locks+0x49/0x80
[  947.146853][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.146867][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.146880][T16946]  ? trace_irq_disable.constprop.0+0xd4/0x110
[  947.146894][T16946]  __bpf_trace_contention_begin+0xc9/0x110
[  947.146907][T16946]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  947.146920][T16946]  ? rcu_is_watching+0x12/0xc0
[  947.146930][T16946]  ? trace_sched_exit_tp+0xd1/0x110
[  947.146941][T16946]  trace_contention_begin.constprop.0+0xd6/0x140
[  947.146955][T16946]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  947.146970][T16946]  ? __lock_acquire+0x436/0x2890
[  947.146982][T16946]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  947.146996][T16946]  ? __lock_acquire+0x436/0x2890
[  947.147009][T16946]  do_raw_spin_lock+0x20e/0x2b0
[  947.147023][T16946]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  947.147036][T16946]  ? rcu_qs+0x2b/0xe0
[  947.147044][T16946]  ? rcu_note_context_switch+0x191/0x1de0
[  947.147061][T16946]  raw_spin_rq_lock_nested+0x7e/0x130
[  947.147077][T16946]  ? preempt_schedule_notrace+0x62/0xe0
[  947.147089][T16946]  __schedule+0x331/0x6150
[  947.147103][T16946]  ? is_bpf_text_address+0x8a/0x1a0
[  947.147118][T16946]  ? bpf_ksym_find+0x127/0x1c0
[  947.147131][T16946]  ? mark_held_locks+0x49/0x80
[  947.147142][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.147156][T16946]  ? __pfx___schedule+0x10/0x10
[  947.147167][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.147182][T16946]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  947.147192][T16946]  preempt_schedule_notrace+0x62/0xe0
[  947.147205][T16946]  preempt_schedule_notrace_thunk+0x16/0x30
[  947.147216][T16946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.147227][T16946]  stack_depot_save_flags+0x4b8/0x9b0
[  947.147242][T16946]  ? __schedule+0x114c/0x6150
[  947.147255][T16946]  save_stack+0x16d/0x1f0
[  947.147266][T16946]  ? __pfx_save_stack+0x10/0x10
[  947.147277][T16946]  ? post_alloc_hook+0x1af/0x220
[  947.147292][T16946]  ? get_page_from_freelist+0xd0b/0x31a0
[  947.147301][T16946]  ? __alloc_frozen_pages_noprof+0x25f/0x2430
[  947.147311][T16946]  ? alloc_pages_mpol+0x1fb/0x550
[  947.147323][T16946]  ? ___kmalloc_large_node+0x10c/0x150
[  947.147337][T16946]  ? __kmalloc_large_node_noprof+0x1c/0x70
[  947.147351][T16946]  ? __kmalloc_node_track_caller_noprof.cold+0x5/0x5e
[  947.147365][T16946]  ? memdup_user+0x2a/0xe0
[  947.147375][T16946]  ? sctp_getsockopt+0x2706/0x70d0
[  947.147387][T16946]  ? do_sock_getsockopt+0x324/0x410
[  947.147400][T16946]  ? __sys_getsockopt+0x12f/0x260
[  947.147410][T16946]  ? __x64_sys_getsockopt+0xbd/0x160
[  947.147419][T16946]  ? do_syscall_64+0xcd/0xf80
[  947.147432][T16946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.147443][T16946]  ? __lock_acquire+0x436/0x2890
[  947.147454][T16946]  __set_page_owner+0x91/0x560
[  947.147467][T16946]  ? __pfx___set_page_owner+0x10/0x10
[  947.147479][T16946]  ? bad_range+0x261/0x4c0
[  947.147492][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  947.147506][T16946]  post_alloc_hook+0x1af/0x220
[  947.147521][T16946]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  947.147534][T16946]  get_page_from_freelist+0xd0b/0x31a0
[  947.147547][T16946]  ? should_fail_alloc_page+0xee/0x130
[  947.147563][T16946]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  947.147573][T16946]  ? rb_commit+0x11f/0x9f0
[  947.147589][T16946]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  947.147600][T16946]  ? trace_buffer_unlock_commit_regs+0xcf/0x540
[  947.147617][T16946]  ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260
[  947.147629][T16946]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  947.147641][T16946]  ? policy_nodemask+0xea/0x4e0
[  947.147654][T16946]  alloc_pages_mpol+0x1fb/0x550
[  947.147667][T16946]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  947.147681][T16946]  ? bpf_bprintf_cleanup+0x34/0x80
[  947.147691][T16946]  ___kmalloc_large_node+0x10c/0x150
[  947.147705][T16946]  __kmalloc_large_node_noprof+0x1c/0x70
[  947.147719][T16946]  ? find_held_lock+0x2b/0x80
[  947.147734][T16946]  __kmalloc_node_track_caller_noprof.cold+0x5/0x5e
[  947.147749][T16946]  ? sctp_getsockopt+0x2706/0x70d0
[  947.147760][T16946]  ? memdup_user+0x2a/0xe0
[  947.147769][T16946]  ? _copy_from_user+0x59/0xd0
[  947.147784][T16946]  memdup_user+0x2a/0xe0
[  947.147793][T16946]  sctp_getsockopt+0x2706/0x70d0
[  947.147803][T16946]  ? find_held_lock+0x2b/0x80
[  947.147818][T16946]  ? avc_has_perm_noaudit+0x117/0x3b0
[  947.147829][T16946]  ? __pfx_sctp_getsockopt+0x10/0x10
[  947.147839][T16946]  ? avc_has_perm+0x144/0x1f0
[  947.147849][T16946]  ? __pfx_avc_has_perm+0x10/0x10
[  947.147859][T16946]  ? __lock_acquire+0x436/0x2890
[  947.147871][T16946]  ? sock_has_perm+0x258/0x2f0
[  947.147884][T16946]  ? find_held_lock+0x2b/0x80
[  947.147898][T16946]  ? __might_fault+0xe3/0x190
[  947.147907][T16946]  ? __might_fault+0xe3/0x190
[  947.147916][T16946]  ? __might_fault+0x13b/0x190
[  947.147927][T16946]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  947.147940][T16946]  do_sock_getsockopt+0x324/0x410
[  947.147953][T16946]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  947.147966][T16946]  ? __fget_files+0x204/0x3c0
[  947.147983][T16946]  __sys_getsockopt+0x12f/0x260
[  947.147994][T16946]  __x64_sys_getsockopt+0xbd/0x160
[  947.148004][T16946]  ? do_syscall_64+0x91/0xf80
[  947.148017][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  947.148030][T16946]  do_syscall_64+0xcd/0xf80
[  947.148044][T16946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.148053][T16946] RIP: 0033:0x7f50ecf8f749
[  947.148061][T16946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  947.148071][T16946] RSP: 002b:00007f50eddf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  947.148080][T16946] RAX: ffffffffffffffda RBX: 00007f50ed1e6090 RCX: 00007f50ecf8f749
[  947.148086][T16946] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004
[  947.148092][T16946] RBP: 00007f50eddf8090 R08: 0000200000000180 R09: 0000000000000000
[  947.148098][T16946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  947.148104][T16946] R13: 00007f50ed1e6128 R14: 00007f50ed1e6090 R15: 00007ffd1d6f0ef8
[  947.148114][T16946]  </TASK>
[  947.347828][T16952] No control pipe specified
[  947.351626][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.2.2719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  947.351649][T16946] Tainted: [L]=SOFTLOCKUP
[  947.351654][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  947.351665][T16946] Call Trace:
[  947.351670][T16946]  <TASK>
[  947.351675][T16946]  dump_stack_lvl+0x116/0x1f0
[  947.351701][T16946]  should_fail_ex+0x512/0x640
[  947.351728][T16946]  strncpy_from_user+0x3b/0x2e0
[  947.351752][T16946]  strncpy_from_user_nofault+0x7f/0x180
[  947.351771][T16946]  bpf_bprintf_prepare+0xe90/0x13f0
[  947.351790][T16946]  ? __pfx_bpf_trace_run2+0x10/0x10
[  947.351809][T16946]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  947.351823][T16946]  ? bpf_trace_run2+0x2ab/0x5c0
[  947.351843][T16946]  ? bpf_trace_run2+0x3f9/0x5c0
[  947.351859][T16946]  bpf_trace_printk+0xda/0x190
[  947.351874][T16946]  ? __pfx_bpf_trace_printk+0x10/0x10
[  947.351890][T16946]  ? bpf_trace_run2+0x3f9/0x5c0
[  947.351906][T16946]  ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0
[  947.351929][T16946]  bpf_prog_930ede9872f2967c+0x3e/0x44
[  947.351942][T16946]  bpf_trace_run2+0x239/0x5c0
[  947.351960][T16946]  ? __pfx_bpf_trace_run2+0x10/0x10
[  947.351977][T16946]  ? mark_held_locks+0x49/0x80
[  947.351996][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.352018][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.352038][T16946]  ? trace_irq_disable.constprop.0+0xd4/0x110
[  947.352061][T16946]  __bpf_trace_contention_begin+0xc9/0x110
[  947.352080][T16946]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  947.352099][T16946]  ? rcu_is_watching+0x12/0xc0
[  947.352112][T16946]  ? trace_sched_exit_tp+0xd1/0x110
[  947.352129][T16946]  trace_contention_begin.constprop.0+0xd6/0x140
[  947.352149][T16946]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  947.352170][T16946]  ? __lock_acquire+0x436/0x2890
[  947.352186][T16946]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  947.352204][T16946]  ? __lock_acquire+0x436/0x2890
[  947.352223][T16946]  do_raw_spin_lock+0x20e/0x2b0
[  947.352241][T16946]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  947.352258][T16946]  ? rcu_qs+0x2b/0xe0
[  947.352269][T16946]  ? rcu_note_context_switch+0x191/0x1de0
[  947.352292][T16946]  raw_spin_rq_lock_nested+0x7e/0x130
[  947.352338][T16946]  ? preempt_schedule_notrace+0x62/0xe0
[  947.352361][T16946]  __schedule+0x331/0x6150
[  947.352385][T16946]  ? is_bpf_text_address+0x8a/0x1a0
[  947.352401][T16946]  ? bpf_ksym_find+0x127/0x1c0
[  947.352419][T16946]  ? mark_held_locks+0x49/0x80
[  947.352433][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.352451][T16946]  ? __pfx___schedule+0x10/0x10
[  947.352467][T16946]  ? irqentry_exit+0x1dd/0x8c0
[  947.352486][T16946]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  947.352501][T16946]  preempt_schedule_notrace+0x62/0xe0
[  947.352520][T16946]  preempt_schedule_notrace_thunk+0x16/0x30
[  947.352535][T16946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.352550][T16946]  stack_depot_save_flags+0x4b8/0x9b0
[  947.352570][T16946]  ? __schedule+0x114c/0x6150
[  947.352588][T16946]  save_stack+0x16d/0x1f0
[  947.352604][T16946]  ? __pfx_save_stack+0x10/0x10
[  947.352620][T16946]  ? post_alloc_hook+0x1af/0x220
[  947.352640][T16946]  ? get_page_from_freelist+0xd0b/0x31a0
[  947.352653][T16946]  ? __alloc_frozen_pages_noprof+0x25f/0x2430
[  947.352667][T16946]  ? alloc_pages_mpol+0x1fb/0x550
[  947.352684][T16946]  ? ___kmalloc_large_node+0x10c/0x150
[  947.352702][T16946]  ? __kmalloc_large_node_noprof+0x1c/0x70
[  947.352721][T16946]  ? __kmalloc_node_track_caller_noprof.cold+0x5/0x5e
[  947.352741][T16946]  ? memdup_user+0x2a/0xe0
[  947.352755][T16946]  ? sctp_getsockopt+0x2706/0x70d0
[  947.352769][T16946]  ? do_sock_getsockopt+0x324/0x410
[  947.352787][T16946]  ? __sys_getsockopt+0x12f/0x260
[  947.352800][T16946]  ? __x64_sys_getsockopt+0xbd/0x160
[  947.352814][T16946]  ? do_syscall_64+0xcd/0xf80
[  947.352831][T16946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.352846][T16946]  ? __lock_acquire+0x436/0x2890
[  947.352863][T16946]  __set_page_owner+0x91/0x560
[  947.352880][T16946]  ? __pfx___set_page_owner+0x10/0x10
[  947.352897][T16946]  ? bad_range+0x261/0x4c0
[  947.352914][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  947.352933][T16946]  post_alloc_hook+0x1af/0x220
[  947.352952][T16946]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  947.352971][T16946]  get_page_from_freelist+0xd0b/0x31a0
[  947.352989][T16946]  ? should_fail_alloc_page+0xee/0x130
[  947.353011][T16946]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  947.353025][T16946]  ? rb_commit+0x11f/0x9f0
[  947.353046][T16946]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  947.353062][T16946]  ? trace_buffer_unlock_commit_regs+0xcf/0x540
[  947.353085][T16946]  ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260
[  947.353101][T16946]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  947.353118][T16946]  ? policy_nodemask+0xea/0x4e0
[  947.353135][T16946]  alloc_pages_mpol+0x1fb/0x550
[  947.353153][T16946]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  947.353171][T16946]  ? bpf_bprintf_cleanup+0x34/0x80
[  947.353185][T16946]  ___kmalloc_large_node+0x10c/0x150
[  947.353205][T16946]  __kmalloc_large_node_noprof+0x1c/0x70
[  947.353223][T16946]  ? find_held_lock+0x2b/0x80
[  947.353243][T16946]  __kmalloc_node_track_caller_noprof.cold+0x5/0x5e
[  947.353264][T16946]  ? sctp_getsockopt+0x2706/0x70d0
[  947.353279][T16946]  ? memdup_user+0x2a/0xe0
[  947.353292][T16946]  ? _copy_from_user+0x59/0xd0
[  947.353311][T16946]  memdup_user+0x2a/0xe0
[  947.353325][T16946]  sctp_getsockopt+0x2706/0x70d0
[  947.353339][T16946]  ? find_held_lock+0x2b/0x80
[  947.353359][T16946]  ? avc_has_perm_noaudit+0x117/0x3b0
[  947.353374][T16946]  ? __pfx_sctp_getsockopt+0x10/0x10
[  947.353393][T16946]  ? avc_has_perm+0x144/0x1f0
[  947.353406][T16946]  ? __pfx_avc_has_perm+0x10/0x10
[  947.353421][T16946]  ? __lock_acquire+0x436/0x2890
[  947.353438][T16946]  ? sock_has_perm+0x258/0x2f0
[  947.353456][T16946]  ? find_held_lock+0x2b/0x80
[  947.353474][T16946]  ? __might_fault+0xe3/0x190
[  947.353488][T16946]  ? __might_fault+0xe3/0x190
[  947.353501][T16946]  ? __might_fault+0x13b/0x190
[  947.353517][T16946]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  947.353534][T16946]  do_sock_getsockopt+0x324/0x410
[  947.353552][T16946]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  947.353570][T16946]  ? __fget_files+0x204/0x3c0
[  947.353593][T16946]  __sys_getsockopt+0x12f/0x260
[  947.353609][T16946]  __x64_sys_getsockopt+0xbd/0x160
[  947.353623][T16946]  ? do_syscall_64+0x91/0xf80
[  947.353640][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  947.353657][T16946]  do_syscall_64+0xcd/0xf80
[  947.353676][T16946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.353689][T16946] RIP: 0033:0x7f50ecf8f749
[  947.353701][T16946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  947.353715][T16946] RSP: 002b:00007f50eddf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  947.353730][T16946] RAX: ffffffffffffffda RBX: 00007f50ed1e6090 RCX: 00007f50ecf8f749
[  947.353739][T16946] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004
[  947.353748][T16946] RBP: 00007f50eddf8090 R08: 0000200000000180 R09: 0000000000000000
[  947.353756][T16946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  947.353765][T16946] R13: 00007f50ed1e6128 R14: 00007f50ed1e6090 R15: 00007ffd1d6f0ef8
[  947.353780][T16946]  </TASK>
[  949.617797][ T5918] usb 7-1: USB disconnect, device number 12
[  949.821888][ T5934] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  949.981874][ T5934] usb 1-1: Using ep0 maxpacket: 8
[  949.988035][ T5934] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  949.997057][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.006059][ T5934] usb 1-1: config 0 descriptor??
[  950.012974][ T5934] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  950.022905][ T5934] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  950.031979][ T5934] usb-storage 1-1:0.0: USB Mass Storage device detected
[  950.039551][ T5934] usb-storage 1-1:0.0: device ignored
[  951.263968][ T5918] usb 1-1: USB disconnect, device number 77