last executing test programs:

1m18.957102137s ago: executing program 1 (id=1252):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
fanotify_mark(0xffffffffffffffff, 0x80, 0x40001002, 0xffffffffffffffff, 0x0)

1m15.315378816s ago: executing program 1 (id=1259):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670000000290787f000001ad1e010122009078000000001a22e472c3d31171065b69ca700229e05049fe7303a8a093797d8d54e61e4b97d9ebee2b788573abe3d817f97cc4a035435569af62fb7770fecda4b6914bb4ba141c4f9434b165ca0c9de522e2e1ab632aa1d8e42e682c96004eb45b68cf24881ef499ba60de0b060645127af13858ab146285fff81bfba00430ca2d510b0509000000875acd6ef0ab27b9422b9e48a0528c64b3b19b5652e992d695be2e31ba80b5947859b15942f765036e46459870e51a85809e199fa6ce4b"], 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x800000, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10469, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@uuid_off}]})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227ad7000fbdbdf2514000008000e0008000000080004000200000005001c00ff00000008001100090000ecb1df520100000000"], 0x3c}}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getpid()
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)

1m13.999934862s ago: executing program 1 (id=1262):
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0)
poll(&(0x7f0000000000)=[{r2, 0x6}], 0x1, 0x403ff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x5100, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan1\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"})
r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{{<r8=>0x80000000}}, {{0x80000000, <r9=>0x0}, {<r10=>0x80000000, <r11=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000001c0)={{r10, r9, 0x1, [0x0, 0xf7df]}, {r8, r11, 0x7, [0x5]}, 0x1, [0x4008, 0x3df]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
connect$unix(r12, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0)
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400))
recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

1m11.70218295s ago: executing program 1 (id=1273):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
r3 = getpgid(r2)
setpgid(0x0, r3)
sendmmsg$unix(r0, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x3ec0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0)

1m10.735896358s ago: executing program 1 (id=1275):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001200)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80), 0x0, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x40, 0x4001}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', 0x0]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000002c0)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})
migrate_pages(r2, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5)
preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/125, 0x7d}], 0x5, 0xe, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m9.255956399s ago: executing program 1 (id=1278):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
userfaultfd(0x801)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m9.162445223s ago: executing program 32 (id=1278):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
userfaultfd(0x801)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13.826957455s ago: executing program 0 (id=1466):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
syz_io_uring_setup(0xca6, &(0x7f0000000480)={0x0, 0xb601, 0x200, 0x5, 0x9c3}, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa, 0x58}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="7b03000000000000500012800b00010067656e6576650000400002800800010002000000050003000f00000005000a0001000000040006"], 0x70}}, 0x40880)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x3}]}, 0x28}, 0x1, 0x40030000000000}, 0x0)

13.536213559s ago: executing program 3 (id=1467):
syz_open_pts(0xffffffffffffffff, 0x101)
r0 = socket(0x2c, 0x80003, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28980)
r1 = syz_io_uring_setup(0xbd8, &(0x7f0000000640)={0x0, 0xe827, 0x400, 0x1, 0x34f}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002080)=""/102392, 0x18ff8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000300)={@generic={0x22, "80341a5a795724d361274b1aa1247bedb348e7e209736864a56812298afa27f81b8cfb6ff062ccab2d2becc258c7debc14f704093edb16b218656bf3658a25b228e0f461460bef3409ae94a504c0cd934502968c3d990c2bad54720b88d39d34ed0f184979a3d887dae7482dadd36fe29b6c6741b45da35752876662636b"}, {&(0x7f0000000040)=""/32, 0x20}, &(0x7f00000000c0), 0x21}, 0xa0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244)
write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12)

12.721760096s ago: executing program 3 (id=1469):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r1, 0x0, 0x0, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
read(r4, &(0x7f0000000080)=""/94, 0x5e)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0xb, @raw_data="9f4a96c5fe384616f1a9e9661829ad2f00d4f42b69f5352c110a8f9da8f8e51391fd07549b270a667430288b6eb25436a35c1749b5a2ea0e58d9d9cd467fc130b3234488546f00f60d34e302195d565a8f14c0ded549e28766cb1caaef9e2499b43f59e95392f654fcbe2cf59714f89e28fd4036bc62200da3cfadf1b5e24cd5de1d45ff67ace9ce3752812de38e2eccc5680ad93af92a66556ec63abe6abaab291e60c965a3488c2b58478d627414ca29c8bb79d56ae10cdce90dc9116d27adf8ff3b05b0c0d374"})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0)
r6 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
fcntl$dupfd(r6, 0x2, r6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

11.527098637s ago: executing program 2 (id=1471):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_sent_data\x00', r2}, 0x16)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0x8000000000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x104)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

10.020217424s ago: executing program 2 (id=1472):
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r0 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x3ff, 0x40000)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000500)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x8000, 0x400, 0x8000, 0x5, 0x0, 0x5, 0x0, 0x4, 0x7, 0x4, 0x200, 0x0, 0xd5b, 0x9, 0x0, 0xfffff656, 0x9, 0x3, 0x1ff, 0xf, 0x8, 0x1, 0x800, 0x2, 0x16, 0xfff, 0x2b99, 0xd, 0xff, 0x2, 0x8]})

9.930766265s ago: executing program 2 (id=1474):
r0 = socket(0x10, 0x3, 0x202000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000015)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x20}, &(0x7f0000000300), &(0x7f0000000080))
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES8=r1, @ANYBLOB="010027bd60000400000005000000140008007663616eeeec7cd8d37ad05afc307e2b1930000000000000000000000008000c00a80a000008000b000000000006000100070000000500140007000000"], 0x48}}, 0x20)
madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
socket$igmp6(0xa, 0x3, 0x2)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.935362788s ago: executing program 2 (id=1476):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000540)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0xffffff1e}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) (async)
getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) (async)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3) (async)
ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000180)={0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r4, 0x400, 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x129) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async)
fcntl$setlease(r4, 0x400, 0x1) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x3c}, {0x7, 0x9, 0x100000003, 0x2, 0x0, 0x2, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0x102}}, 0xe8) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) (async)
ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x5, 0x0, 0x0, @adapter={0x4, 0xffffffffffffffff, 0xb, 0x8, 0x920}}]})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/4066, 0xfe2}], 0x1, 0xf1, 0x6)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c)

8.645227824s ago: executing program 0 (id=1477):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
close(r5)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
eventfd(0x80000001)
ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0)

8.492002773s ago: executing program 5 (id=1478):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x93ce, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0xfffffed1, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x6, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000810)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00'})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x10, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x40, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r6, 0x1)

7.820473954s ago: executing program 2 (id=1479):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4, 0x200a7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0)
pipe(&(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000f0d7e707010000030900010073797a30000000002c000000030a01010000000000000000010000040900010073797a30000000000900030073007a320000000074000000060a010400000000000000000100000008000b40000000004c000480140001800b000100657874686472000004000280340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000030900010073797a3000000000140000001100010000000000000000000700000a"], 0xe8}}, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
syz_open_dev$video(&(0x7f0000000180), 0x7, 0x402000)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r4 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
ioctl$EVIOCGBITSW(r5, 0x40044591, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2a8, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x19c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x332}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67d3baa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400040}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x605}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3dd00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb08b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x439a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9df5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3592beaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x64000880}, 0x4005)
syz_open_procfs(0x0, &(0x7f0000000340)='net/arp\x00')

7.775429519s ago: executing program 5 (id=1480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005740)={0x1fa8, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @nested={0x1f74, 0x8, 0x0, 0x1, [@nested={0x1008, 0x48, 0x0, 0x1, [@typed={0x1001, 0x7e, 0x0, 0x0, @binary="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"}]}, @nested={0xf68, 0x105, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid}, @nested={0xf59, 0xea, 0x0, 0x1, [@generic="0a7d59fc86e2b6fb8d7b15ab4f181c466787aba129ad568649b468280a1754513f10768df67d301bb2d6d4ea8a178d04e60e65779fe36d955d40ca17935bb0ca91bfbddef182fb403a26c6d4dbf0e17d482c50fdeaa6446765ef1041e9d1fcc19cfa7146ec293ce5d723f10dc3d04a04e6fb9661932e9fd15e174b3dfd4e1798d660ffe1de5106955e62a3e99d872f7c86a32e9fffb470cd26", @nested={0x2b6, 0x3a, 0x0, 0x1, [@generic, @nested={0x151, 0x116, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @u32=0x3}, @generic="8e13755f0ca23bca626657ebd91addd5dfcf49143057b2d9bef3a035031806dda066fbbee07ae4a1b3a58f092d5a6b2fb50063", @generic="ad7fd6ebebe32d2501bca78d0588d78f4e656d13e53c2c4ab15d58f2a62deb8d91365115cbedb1c9ddfdb46ce0fb1975470b4e8c8b0936c6b793571571555222fb73eaf397b30203a574d4b1ab5120c37d516208b454336e6b303d1ddf2d8f79e61aeba0e1dd90f57378f033116271bb555a839baada4b56e3d386be8df7a11674f2a41f5c88800ceed175eac60e5d02ca7878c5d966cfc9d91f98c3a3c7165dd21cb8e55e35dd4007760bdcd8e1a052b8902595c20686ec39a7ba46793e8bf12a8dce3b0173c298da98cd9cf925d457b5061daa034f5ab5946d6c4779fc92af84a3f30c006169321763b795cbd68f450202f1", @generic="bdafb9308bf6ed", @typed={0x8, 0x104, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x71}, @typed={0x8, 0xc9, 0x0, 0x0, @pid}, @nested={0x4, 0xe2}]}, @generic="29b630dd4a4e2704a80ca3bd93fb4979432fbe4334f77eaf996439a374830a686c017aa079a18bb53250498243b33e8f326283a21b1d6881be95732d6100372b930ad615da9c67501128d29601b10b7420c19be68b4c2821b392d1ba25e15de6a7a7b9a68c96d4e7aa8c1e3bd844d0e3f1d966276316096f198b4557a328b535bb397b28c910e869f1ef0eca39910274e253d985d6ecf7964c480eea7b9261ad684d680df58d44482dfab9c2f15a1cf793bf49d59eda6c190c76c956cd9ecdf2e3061be2c9c95cd52ddad6df0b63c044bf56b135725801f77dc3dd065f82926c3d68b4de1db51b6d55c62b", @generic="3005046c0947180ab792d8bf087229686238068a2060c769962c20e0672d9fb7b5c0d0ca6ad66d537c8170d7c2a321803b3c26c206aa2f1825a3b0550cc6a8fc5a9ab6d26e8d85b6cdd66790a93c29719ecb2168b4996d09cf325ebb49e00d5d19ad729e5863a0e4d22e07a580e70757032d70"]}, @nested={0xc01, 0x133, 0x0, 0x1, [@generic="09c15be1c94253dbca3b1b05d34aca0cc5070940a6fee2917b7869069a718a16bd16d2a35b3e4cc476cc58313219e9d4f7f9e15f6d04851dbef8b089ef6378e0c52ee65c5c0e214d937d66b87179c9af782f34d4b7ad218382a62eaf3e1faa732cb0a5d050490fd5951c594aeeb16f4c24ec36e51a9ad216907aff8557ea2244855fe16c0fd002c333722c1106df89a86015487a73eaa93c779e3dfff7a73b087cfc99cf2745e6516b5d1ae42afe63bf8472cd3c6e216ad285a8bf38444f1a5e596a9a020ab84150f521ea0bc5fc4198938c6bfdb2b7ff0a70fd6f0ac4502d8e8ee82d8124d1f9255f42b453484264a37ba3b2c7e97b3aaa63", @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@remote}, @generic="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"]}]}]}]}]}, 0x1fa8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

7.682016609s ago: executing program 5 (id=1481):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg0\x00'})
socket$inet6(0xa, 0x2, 0x0)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x5}], 0x2, 0x40000000, 0x0)

7.602201057s ago: executing program 3 (id=1482):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

7.16047496s ago: executing program 5 (id=1483):
r0 = syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x180}, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
unshare(0x6a040000)
syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000200), 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, 0x0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe00000000ee398d162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0)

6.839490045s ago: executing program 0 (id=1484):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet(0x2, 0x1, 0x100)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r6 = gettid()
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xa)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

6.819560615s ago: executing program 4 (id=1485):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000180)={0xed, 0x0, 0x7fffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r2 = socket(0xa, 0x80000, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
socket(0x10, 0x803, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000040a000/0x800000)=nil, 0x800000}})
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0x200000d6f, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x2, <r7=>r5, 'id0\x00'})
sendto$llc(r7, &(0x7f0000000480)="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", 0x114, 0x0, &(0x7f0000000200)={0x1a, 0x301, 0x7, 0x2, 0x21, 0x4b, @remote}, 0x10)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x0, 0x7d, {}, {0x4, 0x8, 0x8, 0x7, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1})
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400078008000640000000000900010073797a30"], 0x10c}}, 0x10)
r8 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x20000000000081, 0x41341)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

5.676212818s ago: executing program 0 (id=1486):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
close(r5)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
eventfd(0x80000001)
ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0)

5.239488706s ago: executing program 4 (id=1487):
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x100000000)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c0004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="0100620000000000000000000000007622000000000ec96778470c817194ab05008dc4df92460fe3321fddee78df35dd3ed408561b151705787c3929"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})

5.076189921s ago: executing program 5 (id=1488):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x2}, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)=0x3e)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x200000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x180, 0x1}, 0x48)
ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000))
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
migrate_pages(0x0, 0x3, 0x0, 0x0)

4.599446728s ago: executing program 2 (id=1489):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r7, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0)

4.462739263s ago: executing program 3 (id=1490):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'})
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x802)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
getrlimit(0xc, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

4.066918855s ago: executing program 0 (id=1491):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
socket(0x10, 0x80002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.489091814s ago: executing program 4 (id=1492):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000e58000/0x3000)=nil, &(0x7f0000518000/0x4000)=nil, 0x3000})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x82)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r4, 0x8000000000000001, 0x1)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaac20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b3c012bf14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942804251d7d17b5191584bcd4fbe40a00004dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb3b3472eb9cdcbb2c5a57df67d544af6e8dafe09000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000200)={{&(0x7f000093d000/0x2000)=nil, 0x2000}, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.170224866s ago: executing program 3 (id=1493):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg0\x00'})
socket$inet6(0xa, 0x2, 0x0)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x5}], 0x2, 0x40000000, 0x0)

2.600168595s ago: executing program 4 (id=1494):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r1, 0x0, 0x0)
close(r1)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
syz_clone(0x89205480, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0xff07, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.598680659s ago: executing program 5 (id=1495):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
eventfd(0x80000001)
ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0)

2.252372022s ago: executing program 0 (id=1496):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e1f, 0x2dc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c)
getpeername(r5, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3)
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x2400)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c00)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a2988206d2d17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e2838ffff5722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

2.251648413s ago: executing program 3 (id=1497):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x5}, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0xe)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xffffffffffffffff, 0xfffffffffffffff8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x81442000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0x0, 0x0, 0xee00)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

1.887821407s ago: executing program 4 (id=1498):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$key(0xf, 0x3, 0x2)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c080)
ioctl$KVM_RUN(r3, 0xae80, 0xfe)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000340)="f30fc7b669000f201266b8000000800f23d80f21f86635400000a00f23f80fc76c0c3e360faef40f01c9f30fa6d066b8380000000f23d00f21f86635200000060f23f81e0f01d0", 0x47}], 0x1, 0x22, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x18)

0s ago: executing program 4 (id=1499):
r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x3, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af4b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "9ddf00", "f6380000000000000000a93c"]})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f", 0x92}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffff00000001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
epoll_create1(0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0)
r4 = syz_open_dev$cec(&(0x7f00000016c0), 0x0, 0x109300)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000001700)={"8c5be95d", 0x6, 0x0, 0x0, 0x9, 0x5, "aba4c445ad52b65b568e04b7939ea6", "378fa799", "a4a4fa00", "a738e82e", ["1463e4e4c48f782c79553968", "8d013a966de6f729b3da8e7d", "2166f7c576a8b0c7a2c9b666", "e50e05a9b899df59b13cb293"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0xc, 0x4, 0x10006, 0xfffffffe, 0x0, 0x4061, "571f0000000000005b9c99b64f0b16fd", 0x0, 0x2, 0x7, 0x28, 0x3, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x0, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

kernel console output (not intermixed with test programs):

 symbol tda10046_attach()
[  358.467945][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  358.521380][   T30] audit: type=1400 audit(1755298160.987:626): avc:  denied  { wake_alarm } for  pid=9786 comm="syz.4.1017" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  359.463061][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'.
[  360.324981][   T24] usb 5-1: USB disconnect, device number 37
[  360.609300][ T9850] syz.3.1035: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  360.639741][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.3.1035 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  360.639771][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  360.639781][ T9850] Call Trace:
[  360.639787][ T9850]  <TASK>
[  360.639793][ T9850]  dump_stack_lvl+0x16c/0x1f0
[  360.639810][ T9850]  warn_alloc+0x248/0x3a0
[  360.639825][ T9850]  ? __pfx_warn_alloc+0x10/0x10
[  360.639843][ T9850]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  360.639859][ T9850]  ? __vmalloc_node_noprof+0xad/0xf0
[  360.639887][ T9850]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  360.639922][ T9850]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  360.639953][ T9850]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  360.639977][ T9850]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  360.639991][ T9850]  vmalloc_user_noprof+0x9e/0xe0
[  360.640007][ T9850]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  360.640022][ T9850]  vb2_vmalloc_alloc+0x135/0x3f0
[  360.640038][ T9850]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  360.640052][ T9850]  __vb2_queue_alloc+0x8c6/0x1280
[  360.640073][ T9850]  vb2_core_reqbufs+0xa90/0xfe0
[  360.640090][ T9850]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  360.640105][ T9850]  ? __pfx___might_resched+0x10/0x10
[  360.640122][ T9850]  ? __mutex_lock+0x1c4/0x10b0
[  360.640133][ T9850]  ? avc_has_extended_perms+0x47c/0x1090
[  360.640147][ T9850]  vb2_reqbufs+0x1a3/0x1f0
[  360.640159][ T9850]  ? __pfx_vb2_reqbufs+0x10/0x10
[  360.640170][ T9850]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  360.640182][ T9850]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  360.640196][ T9850]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[  360.640211][ T9850]  v4l_reqbufs+0x14f/0x1e0
[  360.640228][ T9850]  __video_do_ioctl+0xb3d/0xfc0
[  360.640247][ T9850]  ? __might_fault+0xe3/0x190
[  360.640258][ T9850]  ? __pfx___video_do_ioctl+0x10/0x10
[  360.640280][ T9850]  video_usercopy+0x4cd/0x1720
[  360.640293][ T9850]  ? __pfx___video_do_ioctl+0x10/0x10
[  360.640310][ T9850]  ? selinux_kernel_read_file+0x120/0x130
[  360.640326][ T9850]  ? __pfx_video_usercopy+0x10/0x10
[  360.640347][ T9850]  v4l2_ioctl+0x1ba/0x250
[  360.640356][ T9850]  ? __pfx_v4l2_ioctl+0x10/0x10
[  360.640366][ T9850]  __x64_sys_ioctl+0x18b/0x210
[  360.640385][ T9850]  do_syscall_64+0xcd/0x4c0
[  360.640398][ T9850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.640410][ T9850] RIP: 0033:0x7fcb55b8ebe9
[  360.640420][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.640430][ T9850] RSP: 002b:00007fcb5694f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  360.640441][ T9850] RAX: ffffffffffffffda RBX: 00007fcb55db5fa0 RCX: 00007fcb55b8ebe9
[  360.640449][ T9850] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000008
[  360.640455][ T9850] RBP: 00007fcb55c11e19 R08: 0000000000000000 R09: 0000000000000000
[  360.640461][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.640467][ T9850] R13: 00007fcb55db6038 R14: 00007fcb55db5fa0 R15: 00007ffeece6aee8
[  360.640484][ T9850]  </TASK>
[  360.641304][ T9850] Mem-Info:
[  361.348589][ T9850] active_anon:12042 inactive_anon:0 isolated_anon:0
[  361.348589][ T9850]  active_file:13275 inactive_file:40691 isolated_file:0
[  361.348589][ T9850]  unevictable:768 dirty:134 writeback:0
[  361.348589][ T9850]  slab_reclaimable:12321 slab_unreclaimable:101047
[  361.348589][ T9850]  mapped:34813 shmem:7596 pagetables:1215
[  361.348589][ T9850]  sec_pagetables:0 bounce:0
[  361.348589][ T9850]  kernel_misc_reclaimable:0
[  361.348589][ T9850]  free:1287195 free_pcp:17714 free_cma:0
[  361.411406][ T9850] Node 0 active_anon:48768kB inactive_anon:0kB active_file:53100kB inactive_file:162560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139852kB dirty:536kB writeback:0kB shmem:29448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12640kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  361.488940][ T9850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  361.588276][ T9850] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  361.711084][ T9850] lowmem_reserve[]: 0 2479 2481 2481 2481
[  361.745158][ T9850] Node 0 DMA32 free:1255844kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50852kB inactive_anon:0kB active_file:53100kB inactive_file:161240kB unevictable:1536kB writepending:592kB present:3129332kB managed:2539404kB mlocked:0kB bounce:0kB free_pcp:38364kB local_pcp:18768kB free_cma:0kB
[  361.816511][ T9850] lowmem_reserve[]: 0 0 1 1 1
[  361.873963][ T9850] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB
[  361.946081][ T9850] lowmem_reserve[]: 0 0 0 0 0
[  361.970384][ T9850] Node 1 Normal free:3876416kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31200kB local_pcp:6912kB free_cma:0kB
[  362.022191][ T9850] lowmem_reserve[]: 0 0 0 0 0
[  362.040494][ T9850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  362.079622][ T9850] Node 0 DMA32: 3*4kB (UME) 3*8kB (UME) 2*16kB (UE) 407*32kB (UE) 218*64kB (UME) 94*128kB (UME) 53*256kB (UME) 6*512kB (ME) 4*1024kB (ME) 2*2048kB (M) 291*4096kB (UM) = 1255844kB
[  362.107430][   T30] audit: type=1400 audit(1755298164.617:627): avc:  denied  { read } for  pid=9874 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  362.131278][ T9850] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  362.153901][ T9850] Node 1 Normal: 102*4kB (UME) 7*8kB (UME) 11*16kB (UME) 10*32kB (UME) 6*64kB (UME) 6*128kB (UME) 2*256kB (ME) 8*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3876416kB
[  362.239274][ T9850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  362.267930][ T9850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.280300][ T9850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  362.295558][ T9850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.305448][ T9850] 64595 total pagecache pages
[  362.315638][ T9850] 28 pages in swap cache
[  362.322340][ T9850] Free swap  = 124880kB
[  362.326579][ T9850] Total swap = 124996kB
[  362.334038][ T9850] 2097051 pages RAM
[  362.337900][ T9850] 0 pages HighMem/MovableOnly
[  362.343384][ T9850] 430238 pages reserved
[  362.347827][ T9850] 0 pages cma reserved
[  362.465392][ T9885] syz_tun: entered allmulticast mode
[  362.491060][ T9887] FAULT_INJECTION: forcing a failure.
[  362.491060][ T9887] name failslab, interval 1, probability 0, space 0, times 0
[  362.493822][ T9885] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  362.520108][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: syz.0.1045 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  362.520137][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  362.520148][ T9887] Call Trace:
[  362.520154][ T9887]  <TASK>
[  362.520161][ T9887]  dump_stack_lvl+0x16c/0x1f0
[  362.520186][ T9887]  should_fail_ex+0x512/0x640
[  362.520206][ T9887]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  362.520229][ T9887]  should_failslab+0xc2/0x120
[  362.520250][ T9887]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  362.520270][ T9887]  ? __alloc_skb+0x2b2/0x380
[  362.520298][ T9887]  ? avc_has_perm+0x144/0x1f0
[  362.520318][ T9887]  __alloc_skb+0x2b2/0x380
[  362.520345][ T9887]  ? __pfx___alloc_skb+0x10/0x10
[  362.520371][ T9887]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  362.520394][ T9887]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  362.520424][ T9887]  netlink_alloc_large_skb+0x69/0x130
[  362.520446][ T9887]  netlink_sendmsg+0x6a1/0xdd0
[  362.520475][ T9887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.520504][ T9887]  ____sys_sendmsg+0xa95/0xc70
[  362.520528][ T9887]  ? copy_msghdr_from_user+0x10a/0x160
[  362.520547][ T9887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.520581][ T9887]  ___sys_sendmsg+0x134/0x1d0
[  362.520602][ T9887]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.520643][ T9887]  ? __mutex_unlock_slowpath+0x100/0x800
[  362.520671][ T9887]  __sys_sendmsg+0x16d/0x220
[  362.520691][ T9887]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.520725][ T9887]  do_syscall_64+0xcd/0x4c0
[  362.520746][ T9887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.520765][ T9887] RIP: 0033:0x7f3ee878ebe9
[  362.520781][ T9887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.520799][ T9887] RSP: 002b:00007f3ee966c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.520818][ T9887] RAX: ffffffffffffffda RBX: 00007f3ee89b5fa0 RCX: 00007f3ee878ebe9
[  362.520830][ T9887] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004
[  362.520841][ T9887] RBP: 00007f3ee966c090 R08: 0000000000000000 R09: 0000000000000000
[  362.520852][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.520864][ T9887] R13: 00007f3ee89b6038 R14: 00007f3ee89b5fa0 R15: 00007ffcea8bf238
[  362.520888][ T9887]  </TASK>
[  362.553397][ T9884] syz_tun: left allmulticast mode
[  362.554328][   T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  362.921241][   T24] usb 5-1: Using ep0 maxpacket: 16
[  362.927999][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  362.942047][   T24] usb 5-1: config 0 has no interface number 0
[  362.953259][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.002913][ T9905] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  363.024997][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  363.111464][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  363.121868][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  363.129953][   T24] usb 5-1: Product: syz
[  363.227392][   T24] usb 5-1: SerialNumber: syz
[  363.251173][ T5955] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  363.267093][   T24] usb 5-1: config 0 descriptor??
[  363.731050][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  363.850557][ T5955] usb 1-1: Using ep0 maxpacket: 8
[  364.075140][   T24] cm109 5-1:0.8: invalid payload size 0, expected 4
[  364.085798][ T5955] usb 1-1: too many configurations: 164, using maximum allowed: 8
[  364.093199][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input29
[  364.116541][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -61
[  364.127571][ T5955] usb 1-1: can't read configurations, error -61
[  364.241239][    T9] usb 2-1: Using ep0 maxpacket: 32
[  364.315961][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.326973][ T5955] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  364.416063][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.438256][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.445422][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.452607][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.459688][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.466939][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.474192][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.481497][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.488784][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.495988][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.504808][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.521393][   T24] usb 5-1: USB disconnect, device number 38
[  364.521444][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  364.555599][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  364.591192][ T5955] usb 1-1: Using ep0 maxpacket: 8
[  364.614882][   T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  364.849985][ T5955] usb 1-1: too many configurations: 164, using maximum allowed: 8
[  364.896905][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.927300][    T9] usb 2-1: config 0 descriptor??
[  364.955463][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -61
[  364.979511][ T5955] usb 1-1: can't read configurations, error -61
[  365.010563][ T5955] usb usb1-port1: attempt power cycle
[  365.770824][    T9] ft260 0003:0403:6030.0017: unknown main item tag 0x7
[  365.821111][ T5955] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  365.842977][ T5955] usb 1-1: Using ep0 maxpacket: 8
[  365.853327][ T5955] usb 1-1: too many configurations: 164, using maximum allowed: 8
[  366.000771][   T30] audit: type=1400 audit(1755298168.507:628): avc:  denied  { setattr } for  pid=9930 comm="syz.4.1059" name="i2c-0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  366.001202][    T9] ft260 0003:0403:6030.0017: chip code: 6424 8183
[  366.383288][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -71
[  366.392832][    T9] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  366.413336][ T5955] usb 1-1: can't read configurations, error -71
[  366.584703][    T9] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup
[  366.604833][    T9] ft260 0003:0403:6030.0017: failed to retrieve status: -32
[  367.014556][ T9945] netlink: 'syz.1.1052': attribute type 4 has an invalid length.
[  367.056413][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.118340][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.221383][  T977] usb 2-1: reset high-speed USB device number 39 using dummy_hcd
[  367.869364][   T30] audit: type=1400 audit(1755298170.377:629): avc:  denied  { getopt } for  pid=9906 comm="syz.1.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  367.869888][ T9907] netlink: 'syz.1.1052': attribute type 4 has an invalid length.
[  368.492033][   T30] audit: type=1400 audit(1755298170.767:630): avc:  denied  { map } for  pid=9958 comm="syz.4.1066" path="/214/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  368.625542][ T9964] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1067'.
[  368.645904][ T9964] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  368.691146][ T9964] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  369.472442][    T9] usb 2-1: USB disconnect, device number 39
[  370.608129][   T30] audit: type=1400 audit(1755298173.057:631): avc:  denied  { relabelfrom } for  pid=9992 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  370.956937][   T30] audit: type=1400 audit(1755298173.057:632): avc:  denied  { relabelto } for  pid=9992 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  370.993327][   T30] audit: type=1400 audit(1755298173.467:633): avc:  denied  { create } for  pid=10008 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  371.045628][ T5913] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  371.137938][T10012] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  371.242030][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  371.464449][ T5913] usb 2-1: config 2 has an invalid interface number: 157 but max is 0
[  371.483653][ T5913] usb 2-1: config 2 has no interface number 0
[  371.544485][ T5913] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  371.555456][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.567464][ T5913] usb 2-1: Product: syz
[  371.590104][ T5913] usb 2-1: Manufacturer: syz
[  371.600272][ T5913] usb 2-1: SerialNumber: syz
[  371.618276][ T5913] imon 2-1:2.157: unable to register, err -19
[  371.801353][ T5985] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  372.061051][ T5985] usb 3-1: device descriptor read/64, error -71
[  372.302980][ T5985] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  372.441501][ T5985] usb 3-1: device descriptor read/64, error -71
[  372.463527][   T30] audit: type=1400 audit(1755298174.977:634): avc:  denied  { read } for  pid=10033 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  372.511058][   T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  372.561388][ T5985] usb usb3-port1: attempt power cycle
[  372.661052][   T24] usb 5-1: Using ep0 maxpacket: 32
[  372.668052][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.678619][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.700861][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.740474][   T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  372.781214][ T5913] usb 2-1: USB disconnect, device number 40
[  372.797389][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  372.804676][   T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  372.817714][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.852406][   T24] usb 5-1: config 0 descriptor??
[  372.921178][ T5985] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  372.961689][ T5985] usb 3-1: device descriptor read/8, error -71
[  373.201199][ T5985] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  373.233529][ T5985] usb 3-1: device descriptor read/8, error -71
[  373.294329][   T24] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0
[  373.314060][   T24] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0
[  373.351806][ T5985] usb usb3-port1: unable to enumerate USB device
[  373.363762][   T24] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0
[  373.377764][   T24] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0
[  373.385955][   T24] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0
[  373.467787][   T24] hid-thrustmaster 0003:044F:B65D.0018: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  373.485786][   T24] hid-thrustmaster 0003:044F:B65D.0018: Wrong number of endpoints?
[  373.498677][    C1] hid-thrustmaster 0003:044F:B65D.0018: Unknown packet type 0x0, unable to proceed further with wheel init
[  373.776041][T10032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1090'.
[  373.798403][   T24] usb 5-1: USB disconnect, device number 39
[  374.490530][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.047329][T10073] netlink: 'syz.1.1105': attribute type 1 has an invalid length.
[  375.358434][T10073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1105'.
[  375.396646][T10073] netlink: 97 bytes leftover after parsing attributes in process `syz.1.1105'.
[  375.496124][   T30] audit: type=1400 audit(1755298178.007:635): avc:  denied  { nlmsg_read } for  pid=10081 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  375.561452][   T30] audit: type=1400 audit(1755298178.057:636): avc:  denied  { unmount } for  pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  375.667928][   T30] audit: type=1400 audit(1755298178.147:637): avc:  denied  { name_bind } for  pid=10084 comm="syz.0.1109" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  375.941238][   T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  376.121820][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.134212][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  376.212230][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.289679][   T24] usb 2-1: config 0 descriptor??
[  376.941909][ T5899] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  377.131336][ T5899] usb 1-1: Using ep0 maxpacket: 32
[  377.175230][ T5899] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  377.191718][ T5899] usb 1-1: config 0 has no interface number 0
[  377.271602][ T5899] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  377.539092][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.541407][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.557742][ T5899] usb 1-1: Product: syz
[  377.566210][ T5899] usb 1-1: Manufacturer: syz
[  377.576607][ T5899] usb 1-1: SerialNumber: syz
[  377.582938][ T5899] usb 1-1: config 0 descriptor??
[  377.588022][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.607571][ T5899] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  377.687949][ T9709] bond0: (slave bond_slave_0): interface is now down
[  377.693689][T10117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  377.707599][ T9709] bond0: (slave bond_slave_1): interface is now down
[  377.715017][T10115] netlink: 'syz.3.1119': attribute type 10 has an invalid length.
[  377.724674][ T9709] bond0: now running without any active interface!
[  377.755748][T10115] syz_tun: entered promiscuous mode
[  377.770765][   T30] audit: type=1400 audit(1755298180.277:638): avc:  denied  { unmount } for  pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  377.774662][T10115] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  377.804219][   T36] bond0: (slave syz_tun): interface is now down
[  377.837342][ T5899] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  377.855693][   T24] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor
[  377.864617][   T36] bond0: (slave syz_tun): interface is now down
[  377.867448][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input30
[  377.905153][ T5899] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  377.916517][   T36] bond0: now running without any active interface!
[  378.001642][   T24] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  378.196861][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 237
[  378.208314][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.221102][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.354287][   T24] usb 2-1: USB disconnect, device number 41
[  378.575581][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  378.588070][ T5899] usb 1-1: USB disconnect, device number 39
[  378.657280][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  378.742845][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  378.768814][ T5899] quatech2 1-1:0.51: device disconnected
[  378.911205][  T919] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  379.155660][  T919] usb 3-1: Using ep0 maxpacket: 8
[  379.177582][  T919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  379.217545][  T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.243133][  T919] usb 3-1: Product: syz
[  379.261128][  T919] usb 3-1: Manufacturer: syz
[  379.284363][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'.
[  379.293924][  T919] usb 3-1: SerialNumber: syz
[  379.332754][  T919] usb 3-1: config 0 descriptor??
[  379.359743][  T919] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  379.421312][  T919] dvb-usb: bulk message failed: -22 (2/0)
[  379.512069][  T919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  379.617548][  T919] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  379.655539][  T919] usb 3-1: media controller created
[  379.739388][  T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  379.817637][  T919] dvb-usb: bulk message failed: -22 (1/0)
[  379.832629][  T919] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  379.853886][  T919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31
[  379.869392][  T919] dvb-usb: schedule remote query interval to 50 msecs.
[  379.876408][  T919] dvb-usb: bulk message failed: -22 (2/0)
[  379.885414][  T919] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  379.919177][  T919] usb 3-1: USB disconnect, device number 34
[  380.027800][  T919] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  381.501449][  T919] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  381.583459][ T5913] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  381.674423][  T919] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  381.701346][  T919] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.722669][  T919] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  381.781127][ T5913] usb 4-1: Using ep0 maxpacket: 16
[  381.850127][  T919] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  381.880765][  T919] usb 1-1: Product: syz
[  381.909344][  T919] usb 1-1: Manufacturer: syz
[  382.290204][ T5913] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  382.311684][  T919] hub 1-1:4.0: USB hub found
[  382.327718][ T5913] usb 4-1: config 0 has no interface number 0
[  382.365291][ T5913] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  382.376410][ T5913] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  382.394927][ T5913] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  382.420890][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  382.440571][ T5913] usb 4-1: Product: syz
[  382.449884][ T5913] usb 4-1: SerialNumber: syz
[  382.495628][  T919] hub 1-1:4.0: 2 ports detected
[  382.697425][  T919] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  382.721577][ T5899] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  382.833362][  T919] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  382.898762][ T5913] usb 4-1: config 0 descriptor??
[  382.938144][ T5913] cm109 4-1:0.8: invalid payload size 0, expected 4
[  382.961781][  T919] usb 1-1: USB disconnect, device number 40
[  382.970463][ T5913] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input32
[  383.014512][ T5899] usb 5-1: Using ep0 maxpacket: 32
[  383.045885][ T5899] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  383.356705][ T5899] usb 5-1: config 0 has no interface number 0
[  384.035888][ T5899] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  384.081013][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.114554][ T5899] usb 5-1: Product: syz
[  384.129949][ T5899] usb 5-1: Manufacturer: syz
[  384.147371][ T5899] usb 5-1: SerialNumber: syz
[  384.179419][   T30] audit: type=1400 audit(1755298186.677:639): avc:  denied  { ioctl } for  pid=10189 comm="syz.0.1142" path="socket:[28283]" dev="sockfs" ino=28283 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  384.215387][  T919] libceph: connect (1)[c::]:6789 error -101
[  384.224193][ T5899] usb 5-1: config 0 descriptor??
[  384.239930][ T5899] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  384.297937][T10197] netlink: 'syz.1.1143': attribute type 7 has an invalid length.
[  384.310821][  T919] libceph: mon0 (1)[c::]:6789 connect error
[  384.361518][T10197] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1143'.
[  384.476248][ T5899] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  384.534334][    C1] cm109_urb_ctl_callback: 51 callbacks suppressed
[  384.534357][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  384.548847][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  384.557552][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  384.557923][ T5899] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  384.564835][ T5913] usb 4-1: USB disconnect, device number 40
[  384.566957][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  384.587353][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  384.608349][ T5913] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  384.653117][  T919] libceph: connect (1)[c::]:6789 error -101
[  384.659302][  T919] libceph: mon0 (1)[c::]:6789 connect error
[  384.743297][   T30] audit: type=1400 audit(1755298187.257:640): avc:  denied  { read write } for  pid=10198 comm="syz.1.1144" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  384.811496][   T30] audit: type=1400 audit(1755298187.257:641): avc:  denied  { open } for  pid=10198 comm="syz.1.1144" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  384.868279][   T30] audit: type=1400 audit(1755298187.257:642): avc:  denied  { append } for  pid=10198 comm="syz.1.1144" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  384.893103][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 237
[  384.923326][T10203] loop6: detected capacity change from 0 to 63
[  384.978783][T10190] ceph: No mds server is up or the cluster is laggy
[  385.013831][   T30] audit: type=1400 audit(1755298187.527:643): avc:  denied  { map } for  pid=10198 comm="syz.1.1144" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.039246][   T30] audit: type=1400 audit(1755298187.527:644): avc:  denied  { execute } for  pid=10198 comm="syz.1.1144" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.077969][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.086797][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.096686][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.105469][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.113857][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.122954][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.131797][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.146403][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.156354][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  385.157139][ T5913] usb 5-1: USB disconnect, device number 40
[  385.234389][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  385.251984][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.280880][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  385.292983][T10203] Buffer I/O error on dev loop6, logical block 0, async page read
[  385.335643][ T5913] quatech2 5-1:0.51: device disconnected
[  385.507419][T10208] fuse: Unknown parameter 'ƠU0x0000000000000004'
[  385.561619][ T2123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  385.574210][   T30] audit: type=1400 audit(1755298188.037:645): avc:  denied  { bind } for  pid=10206 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  386.761465][ T5913] usb 5-1: new low-speed USB device number 41 using dummy_hcd
[  386.997473][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short
[  387.020192][ T5913] usb 5-1: config 7 has an invalid interface number: 67 but max is 0
[  387.033564][ T5913] usb 5-1: config 7 has no interface number 0
[  387.047780][ T5913] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  387.057042][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.065134][ T5913] usb 5-1: Product: 㯑
[  387.828241][T10237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  389.219248][ T5913] usb 5-1: USB disconnect, device number 41
[  389.487728][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'.
[  390.630718][T10276] openvswitch: netlink: IP tunnel TTL not specified.
[  390.637518][  T977] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  390.812173][  T977] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  390.823408][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.832852][ T5913] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  390.837223][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.858814][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  390.866523][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.875515][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.889452][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  390.900840][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.912871][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.924053][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.242840][ T5899] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  391.244988][   T30] audit: type=1326 audit(1755298193.734:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10277 comm="syz.3.1167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb55b8ebe9 code=0x0
[  391.282431][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  391.301454][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  391.317140][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.332972][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  391.370130][T10281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  391.383816][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  391.411174][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  391.453136][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  391.509592][ T5899] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99
[  391.518903][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  391.519020][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  391.541936][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.544982][ T5913] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  391.549968][ T5899] usb 1-1: Product: syz
[  391.566651][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.577383][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.589781][ T5899] usb 1-1: Manufacturer: syz
[  391.595786][ T5899] usb 1-1: SerialNumber: syz
[  391.595967][ T5913] usb 2-1: Product: syz
[  391.608366][ T5913] usb 2-1: Manufacturer: syz
[  391.609640][ T5899] usb 1-1: config 0 descriptor??
[  391.613680][ T5913] usb 2-1: SerialNumber: syz
[  391.625353][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  391.626798][ T5913] usb 2-1: config 0 descriptor??
[  391.634540][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  391.639972][T10274] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  391.661622][ T5913] usb 2-1: ucan: probing device on interface #0
[  391.667867][ T5913] usb 2-1: ucan: invalid in_ep MaxPacketSize
[  391.711959][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.715623][ T5913] usb 2-1: ucan: probe failed; try to update the device firmware
[  391.733962][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  391.746021][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  391.771368][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.817706][   T30] audit: type=1400 audit(1755298194.334:647): avc:  denied  { bind } for  pid=10286 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  391.840048][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  391.849476][  T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  391.858105][   T30] audit: type=1400 audit(1755298194.334:648): avc:  denied  { listen } for  pid=10286 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  391.866254][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.896902][  T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  391.921511][  T977] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  391.929882][  T977] usb 3-1: Product: syz
[  391.934134][  T977] usb 3-1: Manufacturer: syz
[  391.938783][  T977] usb 3-1: SerialNumber: syz
[  391.961732][  T977] usb 3-1: config 0 descriptor??
[  391.980088][  T977] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  392.211245][ T5913] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  392.415505][ T5913] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  392.461051][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.531135][   T30] audit: type=1400 audit(1755298195.034:649): avc:  denied  { map } for  pid=10273 comm="syz.1.1165" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  392.604723][  T977] usb 1-1: USB disconnect, device number 41
[  392.620596][   T30] audit: type=1400 audit(1755298195.034:650): avc:  denied  { execute } for  pid=10273 comm="syz.1.1165" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  392.656267][ T5913] usb 4-1: config 0 descriptor??
[  392.674074][ T5913] gspca_main: mars-2.14.0 probing 093a:050f
[  392.738849][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'.
[  393.588237][  T977] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  393.647356][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'.
[  393.686185][ T5844] usb 2-1: USB disconnect, device number 42
[  393.847297][  T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.859590][  T977] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  393.868973][  T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.478100][  T977] usb 5-1: config 0 descriptor??
[  394.532629][ T5899] usb 3-1: USB disconnect, device number 35
[  394.646023][ T5899] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  394.696633][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.731782][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.994853][  T977] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor
[  395.010325][ T5913] usb 4-1: USB disconnect, device number 41
[  395.172427][  T977] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input33
[  395.707333][  T977] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  395.861526][  T977] usb 5-1: USB disconnect, device number 42
[  397.533166][T10358] comedi comedi3: multiq3: I/O port conflict (0x3,16)
[  397.745120][T10362] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  397.816747][   T30] audit: type=1400 audit(1755298200.324:651): avc:  denied  { accept } for  pid=10361 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  398.146208][   T30] audit: type=1400 audit(1755298200.324:652): avc:  denied  { setattr } for  pid=10361 comm="syz.2.1186" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  398.245452][T10329] kexec: Could not allocate control_code_buffer
[  398.603486][T10374] netlink: 'syz.4.1190': attribute type 7 has an invalid length.
[  398.704659][T10374] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1190'.
[  399.521022][  T919] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  399.703004][  T919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.848645][  T919] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  400.237578][  T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.346506][  T919] usb 3-1: config 0 descriptor??
[  400.937933][  T919] usb 3-1: USB disconnect, device number 36
[  401.164570][T10410] 9pnet_fd: Insufficient options for proto=fd
[  401.267631][   T30] audit: type=1400 audit(1755298203.724:653): avc:  denied  { setopt } for  pid=10411 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  401.779320][T10424] netlink: 'syz.4.1203': attribute type 3 has an invalid length.
[  401.787753][T10424] netlink: 'syz.4.1203': attribute type 3 has an invalid length.
[  401.815340][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'.
[  401.847797][T10422] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  401.856565][T10422] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  401.958161][T10422] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  401.979659][   T30] audit: type=1400 audit(1755298204.464:654): avc:  denied  { firmware_load } for  pid=10417 comm="syz.3.1202" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  402.326928][T10433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10433 comm=syz.2.1204
[  402.779977][ T5899] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  403.044361][ T5899] usb 3-1: device descriptor read/64, error -71
[  403.671330][ T5899] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  403.953014][ T5899] usb 3-1: device descriptor read/64, error -71
[  404.670027][ T5899] usb usb3-port1: attempt power cycle
[  405.111067][ T5899] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  406.357440][ T5899] usb 3-1: device descriptor read/8, error -71
[  406.454018][   T30] audit: type=1400 audit(1755298208.974:655): avc:  denied  { ioctl } for  pid=10486 comm="syz.2.1218" path="socket:[31047]" dev="sockfs" ino=31047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  406.479478][T10487] FAULT_INJECTION: forcing a failure.
[  406.479478][T10487] name failslab, interval 1, probability 0, space 0, times 0
[  406.493781][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.2.1218 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  406.493804][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  406.493814][T10487] Call Trace:
[  406.493819][T10487]  <TASK>
[  406.493825][T10487]  dump_stack_lvl+0x16c/0x1f0
[  406.493847][T10487]  should_fail_ex+0x512/0x640
[  406.493866][T10487]  ? __kmalloc_noprof+0xbf/0x510
[  406.493885][T10487]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  406.493908][T10487]  should_failslab+0xc2/0x120
[  406.493927][T10487]  __kmalloc_noprof+0xd2/0x510
[  406.493961][T10487]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  406.493990][T10487]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  406.494013][T10487]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  406.494041][T10487]  ? bpf_lsm_capable+0x9/0x10
[  406.494066][T10487]  ? security_capable+0x7e/0x260
[  406.494084][T10487]  ? ns_capable+0xd7/0x110
[  406.494107][T10487]  genl_rcv_msg+0x55c/0x800
[  406.494131][T10487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.494150][T10487]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  406.494174][T10487]  ? __pfx_nl80211_set_rekey_data+0x10/0x10
[  406.494201][T10487]  ? __pfx_nl80211_post_doit+0x10/0x10
[  406.494231][T10487]  netlink_rcv_skb+0x155/0x420
[  406.494250][T10487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.494274][T10487]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  406.494304][T10487]  ? netlink_deliver_tap+0x1ae/0xd30
[  406.494327][T10487]  genl_rcv+0x28/0x40
[  406.494346][T10487]  netlink_unicast+0x5aa/0x870
[  406.494368][T10487]  ? __pfx_netlink_unicast+0x10/0x10
[  406.494387][T10487]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  406.494415][T10487]  netlink_sendmsg+0x8d1/0xdd0
[  406.494438][T10487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.494467][T10487]  ____sys_sendmsg+0xa95/0xc70
[  406.494491][T10487]  ? copy_msghdr_from_user+0x10a/0x160
[  406.494509][T10487]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.494544][T10487]  ___sys_sendmsg+0x134/0x1d0
[  406.494563][T10487]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.494606][T10487]  ? __mutex_unlock_slowpath+0x100/0x800
[  406.494635][T10487]  __sys_sendmsg+0x16d/0x220
[  406.494653][T10487]  ? __pfx___sys_sendmsg+0x10/0x10
[  406.494687][T10487]  do_syscall_64+0xcd/0x4c0
[  406.494709][T10487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.494727][T10487] RIP: 0033:0x7f2a2398ebe9
[  406.494743][T10487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.494759][T10487] RSP: 002b:00007f2a247d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.494776][T10487] RAX: ffffffffffffffda RBX: 00007f2a23bb5fa0 RCX: 00007f2a2398ebe9
[  406.494787][T10487] RDX: 00000000240088c0 RSI: 0000200000002080 RDI: 0000000000000004
[  406.494798][T10487] RBP: 00007f2a247d0090 R08: 0000000000000000 R09: 0000000000000000
[  406.494808][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.494819][T10487] R13: 00007f2a23bb6038 R14: 00007f2a23bb5fa0 R15: 00007ffe59f55898
[  406.494843][T10487]  </TASK>
[  406.931142][ T5985] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  407.202674][ T5985] usb 4-1: Using ep0 maxpacket: 8
[  407.212938][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.326639][ T5985] usb 4-1: config 0 has no interfaces?
[  407.342955][ T5985] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  407.356281][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.370564][ T5985] usb 4-1: Product: syz
[  407.381051][ T5985] usb 4-1: Manufacturer: syz
[  407.386503][ T5985] usb 4-1: SerialNumber: syz
[  407.459730][ T5985] usb 4-1: config 0 descriptor??
[  407.489438][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'.
[  408.189421][ T5985] usb 4-1: USB disconnect, device number 42
[  408.763682][   T30] audit: type=1400 audit(1755298211.104:656): avc:  denied  { read } for  pid=10509 comm="syz.2.1224" path="socket:[31161]" dev="sockfs" ino=31161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  408.826602][ T5899] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  409.082073][ T5899] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  409.090210][ T5899] usb 4-1: config 0 has no interface number 0
[  409.193820][ T5899] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  409.298810][ T5899] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  409.359203][ T5899] usb 4-1: config 0 interface 48 has no altsetting 0
[  409.369326][ T5899] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  409.379744][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.387878][ T5899] usb 4-1: Product: syz
[  409.393867][ T5899] usb 4-1: Manufacturer: syz
[  409.398520][ T5899] usb 4-1: SerialNumber: syz
[  409.423061][ T5899] usb 4-1: config 0 descriptor??
[  409.461657][   T30] audit: type=1400 audit(1755298211.984:657): avc:  denied  { ioctl } for  pid=10515 comm="syz.0.1225" path="socket:[31170]" dev="sockfs" ino=31170 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  409.491327][   T30] audit: type=1400 audit(1755298212.004:658): avc:  denied  { write } for  pid=10515 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  409.689492][ T5899] peak_usb 4-1:0.48: probe with driver peak_usb failed with error 48
[  409.750071][   T30] audit: type=1400 audit(1755298212.084:659): avc:  denied  { getopt } for  pid=10515 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  409.751620][ T5899] usb 4-1: USB disconnect, device number 43
[  410.247881][T10528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  410.254395][T10528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  410.262234][T10528] vhci_hcd vhci_hcd.0: Device attached
[  410.512687][ T5844] usb 35-1: new high-speed USB device number 5 using vhci_hcd
[  411.281634][T10529] vhci_hcd: connection closed
[  411.295250][ T9709] vhci_hcd: stop threads
[  411.323118][ T9709] vhci_hcd: release socket
[  411.337831][ T9709] vhci_hcd: disconnect device
[  412.643459][   T30] audit: type=1400 audit(1755298214.344:660): avc:  denied  { accept } for  pid=10536 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  414.019241][T10563] sctp: [Deprecated]: syz.1.1235 (pid 10563) Use of struct sctp_assoc_value in delayed_ack socket option.
[  414.019241][T10563] Use struct sctp_sack_info instead
[  414.629432][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  415.256040][T10583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  415.262573][T10583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  415.271691][T10583] vhci_hcd vhci_hcd.0: Device attached
[  415.521216][  T977] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  415.742551][  T977] usb 2-1: config 0 has no interfaces?
[  415.751129][ T5899] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  415.772246][  T977] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  415.795825][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.796891][   T30] audit: type=1400 audit(1755298218.314:661): avc:  denied  { write } for  pid=10591 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  415.879849][  T977] usb 2-1: config 0 descriptor??
[  415.937192][ T5899] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  415.946385][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.958583][ T5899] usb 3-1: config 0 descriptor??
[  415.970197][ T5899] gspca_main: mars-2.14.0 probing 093a:050f
[  416.106395][T10585] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4
[  416.564846][T10596] 8021q: adding VLAN 0 to HW filter on device bond4
[  416.687544][ T9708] vhci_hcd: stop threads
[  416.696504][ T9708] vhci_hcd: release socket
[  416.706929][ T9708] vhci_hcd: disconnect device
[  417.178430][ T5844] vhci_hcd: vhci_device speed not set
[  417.186890][ T9708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  418.226905][  T919] usb 2-1: USB disconnect, device number 43
[  418.798529][T10617] FAULT_INJECTION: forcing a failure.
[  418.798529][T10617] name failslab, interval 1, probability 0, space 0, times 0
[  418.811208][T10617] CPU: 0 UID: 0 PID: 10617 Comm: syz.1.1249 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  418.811236][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  418.811246][T10617] Call Trace:
[  418.811254][T10617]  <TASK>
[  418.811262][T10617]  dump_stack_lvl+0x16c/0x1f0
[  418.811285][T10617]  should_fail_ex+0x512/0x640
[  418.811308][T10617]  should_failslab+0xc2/0x120
[  418.811328][T10617]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  418.811347][T10617]  ? dst_alloc+0x99/0x1a0
[  418.811375][T10617]  dst_alloc+0x99/0x1a0
[  418.811397][T10617]  ? fib_validate_source+0x13b/0x730
[  418.811422][T10617]  rt_dst_alloc+0x35/0x3a0
[  418.811444][T10617]  ip_route_input_slow+0x1671/0x3df0
[  418.811474][T10617]  ? __pfx_ip_route_input_slow+0x10/0x10
[  418.811500][T10617]  ? __lock_acquire+0x62e/0x1ce0
[  418.811543][T10617]  ? migrate_enable+0x1ed/0x260
[  418.811566][T10617]  ip_route_input_noref+0x120/0x2e0
[  418.811591][T10617]  ? __pfx_ip_route_input_noref+0x10/0x10
[  418.811628][T10617]  arp_process+0x1155/0x2440
[  418.811659][T10617]  ? __pfx_arp_process+0x10/0x10
[  418.811682][T10617]  ? __pfx_arp_process+0x10/0x10
[  418.811711][T10617]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  418.811747][T10617]  arp_rcv+0x41a/0x510
[  418.811771][T10617]  ? __pfx_arp_rcv+0x10/0x10
[  418.811792][T10617]  __netif_receive_skb_one_core+0x1af/0x1e0
[  418.811817][T10617]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  418.811842][T10617]  ? lock_acquire+0x179/0x350
[  418.811869][T10617]  ? __phys_addr+0xe8/0x180
[  418.811894][T10617]  __netif_receive_skb+0x1d/0x160
[  418.811918][T10617]  netif_receive_skb+0x137/0x7b0
[  418.811941][T10617]  ? __pfx_netif_receive_skb+0x10/0x10
[  418.811973][T10617]  tun_rx_batched.isra.0+0x3ee/0x740
[  418.811997][T10617]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  418.812025][T10617]  ? tun_get_user+0x1d8a/0x3ce0
[  418.812045][T10617]  ? rcu_is_watching+0x12/0xc0
[  418.812071][T10617]  tun_get_user+0x28e4/0x3ce0
[  418.812103][T10617]  ? __pfx_tun_get_user+0x10/0x10
[  418.812127][T10617]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  418.812155][T10617]  ? find_held_lock+0x2b/0x80
[  418.812176][T10617]  ? tun_get+0x191/0x370
[  418.812202][T10617]  tun_chr_write_iter+0xdc/0x210
[  418.812226][T10617]  vfs_write+0x7d3/0x11d0
[  418.812245][T10617]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  418.812269][T10617]  ? __pfx_vfs_write+0x10/0x10
[  418.812282][T10617]  ? find_held_lock+0x2b/0x80
[  418.812318][T10617]  ksys_write+0x12a/0x250
[  418.812335][T10617]  ? __pfx_ksys_write+0x10/0x10
[  418.812359][T10617]  do_syscall_64+0xcd/0x4c0
[  418.812380][T10617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.812397][T10617] RIP: 0033:0x7fc57838d69f
[  418.812412][T10617] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  418.812427][T10617] RSP: 002b:00007fc5792ba000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  418.812442][T10617] RAX: ffffffffffffffda RBX: 00007fc5785b5fa0 RCX: 00007fc57838d69f
[  418.812453][T10617] RDX: 000000000000002a RSI: 0000200000000040 RDI: 00000000000000c8
[  418.812464][T10617] RBP: 00007fc5792ba090 R08: 0000000000000000 R09: 0000000000000000
[  418.812474][T10617] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001
[  418.812483][T10617] R13: 00007fc5785b6038 R14: 00007fc5785b5fa0 R15: 00007ffffaae4b48
[  418.812507][T10617]  </TASK>
[  419.188956][ T5913] usb 3-1: USB disconnect, device number 41
[  419.514311][   T30] audit: type=1400 audit(1755298222.024:662): avc:  denied  { getopt } for  pid=10618 comm="syz.2.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  419.764936][  T919] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  419.881050][ T5899] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  419.991045][  T919] usb 2-1: Using ep0 maxpacket: 32
[  419.998300][  T919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  420.011926][  T919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.034712][  T919] usb 2-1: config 0 has no interface number 0
[  420.051613][  T919] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  420.159877][ T5899] usb 3-1: device descriptor read/64, error -71
[  420.159877][ T5913] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  420.175433][  T919] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  420.234989][  T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.248090][  T919] usb 2-1: config 0 descriptor??
[  420.281885][  T919] usbhid 2-1:0.1: couldn't find an input interrupt endpoint
[  420.391047][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  420.397407][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  420.404976][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.421789][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  420.436984][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.451112][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.498029][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.538533][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  420.548428][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.559914][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.571793][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.581428][ T5899] usb 3-1: device descriptor read/64, error -71
[  420.592567][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.606466][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  420.642041][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.659136][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.673115][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.690358][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.701660][ T5899] usb usb3-port1: attempt power cycle
[  420.717633][ T5913] usb 4-1: string descriptor 0 read error: -22
[  420.724034][ T5913] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  420.733248][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.745550][ T5913] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  420.859806][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  421.061488][ T5899] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  421.887509][ T5899] usb 3-1: device descriptor read/8, error -71
[  422.482636][ T5899] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  422.790002][   T30] audit: type=1400 audit(1755298225.254:663): avc:  denied  { bind } for  pid=10651 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.108982][ T5899] usb 3-1: device not accepting address 45, error -71
[  423.117645][ T5899] usb usb3-port1: unable to enumerate USB device
[  423.163749][ T5844] usb 2-1: USB disconnect, device number 44
[  424.064023][T10665] fuseblk: Unknown parameter '�A+G'
[  424.343600][ T5913] usb 4-1: USB disconnect, device number 44
[  425.312074][   T30] audit: type=1400 audit(1755298227.744:664): avc:  denied  { listen } for  pid=10678 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  427.085034][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  427.094114][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  427.379982][   T30] audit: type=1400 audit(1755298229.624:665): avc:  denied  { write } for  pid=10696 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  427.524822][T10709] 9pnet_fd: Insufficient options for proto=fd
[  427.546737][T10712] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1270'.
[  427.576569][T10698] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1270'.
[  427.680860][   T30] audit: type=1400 audit(1755298230.194:666): avc:  denied  { unmount } for  pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  427.881822][T10716] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  427.888371][T10716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  427.895772][T10716] vhci_hcd vhci_hcd.0: Device attached
[  427.931013][  T977] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  428.081891][ T5844] vhci_hcd: vhci_device speed not set
[  428.134061][  T977] usb 5-1: Using ep0 maxpacket: 16
[  428.141227][ T5899] usb 3-1: new low-speed USB device number 46 using dummy_hcd
[  428.148703][ T5844] usb 37-1: new full-speed USB device number 5 using vhci_hcd
[  429.152772][ T5899] usb 3-1: config 0 has no interfaces?
[  429.158283][ T5899] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  429.169023][  T977] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  429.188727][  T977] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  429.242551][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.269772][  T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  429.310488][ T5899] usb 3-1: config 0 descriptor??
[  429.490515][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'.
[  429.536927][  T977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  429.554156][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.585532][  T977] usb 5-1: Product: syz
[  429.603652][  T977] usb 5-1: Manufacturer: syz
[  429.608269][  T977] usb 5-1: SerialNumber: syz
[  429.629101][ T9708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.654862][ T9708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.100632][T10717] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4
[  430.265410][  T977] usb 5-1: 0:2 : does not exist
[  430.271953][ T9709] vhci_hcd: stop threads
[  430.273500][  T977] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1)
[  430.285540][ T9709] vhci_hcd: release socket
[  430.310803][ T9709] vhci_hcd: disconnect device
[  430.798328][  T977] usb 5-1: USB disconnect, device number 43
[  430.837360][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  430.847908][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  430.857008][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  430.870662][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  430.887054][ T9708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.898291][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  430.907475][ T9708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.933969][   T30] audit: type=1400 audit(1755298233.454:667): avc:  denied  { mounton } for  pid=10735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  431.092553][ T9708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.155489][    T9] usb 3-1: USB disconnect, device number 46
[  431.169602][ T9708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.525425][T10745] overlayfs: missing 'lowerdir'
[  431.569590][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1286'.
[  431.593348][ T9708] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.604914][   T30] audit: type=1400 audit(1755298234.124:668): avc:  denied  { map } for  pid=10746 comm="syz.4.1287" path="socket:[32824]" dev="sockfs" ino=32824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  431.633524][ T9708] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.647855][T10750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10750 comm=syz.2.1285
[  431.931163][ T5985] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  431.939192][ T9708] bridge_slave_1: left allmulticast mode
[  431.945471][ T9708] bridge_slave_1: left promiscuous mode
[  431.954067][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.966344][ T9708] bridge_slave_0: left allmulticast mode
[  431.972398][ T9708] bridge_slave_0: left promiscuous mode
[  431.978787][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.092663][ T5985] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  432.108021][ T5985] usb 4-1: config 0 has no interface number 0
[  432.120845][ T5985] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  432.135750][ T5985] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  432.155928][ T5985] usb 4-1: config 0 interface 48 has no altsetting 0
[  432.165458][ T5985] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  432.176538][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.184945][ T5985] usb 4-1: Product: syz
[  432.189535][ T5985] usb 4-1: Manufacturer: syz
[  432.196455][ T5985] usb 4-1: SerialNumber: syz
[  432.205110][ T5985] usb 4-1: config 0 descriptor??
[  432.424312][ T5985] peak_usb 4-1:0.48: probe with driver peak_usb failed with error 48
[  432.449871][ T5985] usb 4-1: USB disconnect, device number 45
[  433.001096][ T5856] Bluetooth: hci2: command tx timeout
[  433.425238][ T5844] vhci_hcd: vhci_device speed not set
[  433.498748][   T30] audit: type=1400 audit(1755298235.904:669): avc:  denied  { write } for  pid=10760 comm="syz.4.1289" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  433.592359][ T9708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.619424][T10770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41216 sclass=netlink_route_socket pid=10770 comm=syz.4.1289
[  433.675063][ T9708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.957463][ T9708] bond0 (unregistering): Released all slaves
[  433.973560][ T9708] bond1 (unregistering): Released all slaves
[  434.539578][ T9708] bond2 (unregistering): Released all slaves
[  434.960907][ T9708] bond3 (unregistering): Released all slaves
[  435.081317][ T5856] Bluetooth: hci2: command tx timeout
[  435.152193][ T9708] bond4 (unregistering): Released all slaves
[  435.280233][T10792] tmpfs: Bad value for 'mpol'
[  435.453789][T10797] openvswitch: netlink: Geneve opt len 14 is not a multiple of 4.
[  435.458689][   T30] audit: type=1400 audit(1755298237.974:670): avc:  denied  { append } for  pid=10791 comm="syz.2.1297" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  435.548905][ T9708] : left promiscuous mode
[  436.306534][T10735] chnl_net:caif_netlink_parms(): no params data found
[  436.421318][ T5906] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  436.581537][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  436.661033][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.737280][ T5906] usb 5-1: Product: syz
[  436.783164][ T5906] usb 5-1: Manufacturer: syz
[  436.836697][ T5906] usb 5-1: SerialNumber: syz
[  437.014335][ T5906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  437.161612][ T5856] Bluetooth: hci2: command tx timeout
[  437.394813][   T30] audit: type=1400 audit(1755298239.914:671): avc:  denied  { firmware_load } for  pid=10805 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  437.421400][T10805] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  437.585709][T10735] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.593467][T10735] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.615238][T10735] bridge_slave_0: entered allmulticast mode
[  437.645656][T10735] bridge_slave_0: entered promiscuous mode
[  437.814111][T10735] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.824856][T10735] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.834376][T10735] bridge_slave_1: entered allmulticast mode
[  437.855585][T10735] bridge_slave_1: entered promiscuous mode
[  438.235469][T10735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.277464][T10735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.365128][ T9708] hsr_slave_0: left promiscuous mode
[  438.383071][ T9708] hsr_slave_1: left promiscuous mode
[  438.413727][ T9708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.425842][ T9708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  438.431093][ T5906] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  438.446509][ T9708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.459678][ T9708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  438.506927][ T9708] veth1_macvtap: left promiscuous mode
[  438.522345][T10805] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  438.523270][ T9708] veth0_macvtap: left promiscuous mode
[  438.537698][ T9708] veth1_vlan: left promiscuous mode
[  438.543539][T10805] ath9k_htc: Failed to initialize the device
[  438.546670][ T9708] veth0_vlan: left promiscuous mode
[  438.597598][T10805] usb 5-1: ath9k_htc: USB layer deinitialized
[  438.607072][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.635192][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.658053][ T5906] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  438.667501][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.677185][ T5906] usb 4-1: Product: syz
[  438.681865][ T5906] usb 4-1: Manufacturer: syz
[  438.688320][ T5906] usb 4-1: SerialNumber: syz
[  438.693633][   T30] audit: type=1400 audit(1755298241.214:672): avc:  denied  { setopt } for  pid=10827 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  438.695544][ T5906] usb 4-1: config 0 descriptor??
[  438.722391][ T5906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  438.782302][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  438.814477][ T5906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  438.834701][T10805] usb 5-1: USB disconnect, device number 44
[  438.862337][ T5906] usb 4-1: media controller created
[  438.888088][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  438.984992][ T5906] DVB: Unable to find symbol tda10046_attach()
[  438.993433][ T5906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  439.002874][ T5906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  439.015641][ T5906] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  439.029140][ T5906] usb 4-1: USB disconnect, device number 46
[  439.041299][ T5985] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  439.237053][ T5985] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  439.241087][ T5856] Bluetooth: hci2: command tx timeout
[  439.259500][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.269903][ T5985] usb 1-1: config 0 has no interface number 0
[  439.276573][ T5985] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  439.287807][ T5985] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  439.300607][ T5985] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.313891][ T5985] usb 1-1: config 0 interface 52 has no altsetting 0
[  439.335876][ T5906] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  439.343121][ T5985] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  439.439372][ T5985] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  439.448043][ T5985] usb 1-1: Product: syz
[  439.452534][ T5985] usb 1-1: Manufacturer: syz
[  439.457152][ T5985] usb 1-1: SerialNumber: syz
[  439.462478][ T9708] team0 (unregistering): Port device team_slave_1 removed
[  439.478279][ T5985] usb 1-1: config 0 descriptor??
[  439.514693][ T5906] usb 4-1: Using ep0 maxpacket: 32
[  439.535888][ T5906] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  439.570236][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0
[  439.590818][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  439.614209][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.653790][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  439.671000][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  439.683768][ T5906] usb 4-1: Product: 倉
[  439.687958][ T5906] usb 4-1: Manufacturer: А
[  439.811770][ T9708] team0 (unregistering): Port device team_slave_0 removed
[  439.816161][ T5985] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  439.829021][ T5985] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5
[  439.841250][ T5906] usb 4-1: SerialNumber: 䠊
[  440.070807][ T5906] usb 4-1: USB disconnect, device number 47
[  440.196560][ T3594] smc: removing ib device syz2
[  440.248168][   T30] audit: type=1400 audit(1755298242.764:673): avc:  denied  { write } for  pid=10840 comm="syz.4.1308" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  440.278485][   T30] audit: type=1400 audit(1755298242.764:674): avc:  denied  { getattr } for  pid=10840 comm="syz.4.1308" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  440.726263][T10735] team0: Port device team_slave_0 added
[  440.762381][ T5955] syz2: Port: 1 Link DOWN
[  440.774345][T10735] team0: Port device team_slave_1 added
[  440.861805][T10735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.880662][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.913559][ T5955] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  440.940383][T10735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.970369][    T9] usb 1-1: USB disconnect, device number 42
[  440.984032][T10735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.991488][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.020116][T10735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.074114][T10859] sock: sock_timestamping_bind_phc: sock not bind to device
[  441.101152][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  441.139079][ T5955] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  441.149649][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.178365][ T5955] usb 3-1: Product: syz
[  441.186131][ T5955] usb 3-1: Manufacturer: syz
[  441.191377][ T5955] usb 3-1: SerialNumber: syz
[  441.214124][ T5955] usb 3-1: config 0 descriptor??
[  441.234679][ T5955] gspca_main: se401-2.14.0 probing 047d:5003
[  441.283380][T10735] hsr_slave_0: entered promiscuous mode
[  441.304927][T10735] hsr_slave_1: entered promiscuous mode
[  441.860554][   T30] audit: type=1400 audit(1755298244.374:675): avc:  denied  { mounton } for  pid=10849 comm="syz.2.1309" path="/file0" dev="ramfs" ino=33308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  441.860736][T10853] 9pnet_fd: Insufficient options for proto=fd
[  442.155760][T10850] dummy0: entered allmulticast mode
[  442.177679][T10849] dummy0: left allmulticast mode
[  442.651239][ T5985] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  442.681394][    T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  442.865204][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  442.880754][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  442.898331][    T9] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  442.914475][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  442.923937][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.944630][ T5955] gspca_se401: read req failed req 0x06 error -19
[  442.955819][ T9708] IPVS: stop unused estimator thread 0...
[  442.977725][T10735] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  442.990315][ T5955] usb 3-1: USB disconnect, device number 47
[  442.991020][ T5985] usb 5-1: Using ep0 maxpacket: 32
[  442.999672][T10877] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  443.006671][T10735] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  443.018819][ T5985] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  443.027751][ T5985] usb 5-1: config 0 has no interface number 0
[  443.034086][ T5985] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  443.045132][ T5985] usb 5-1: config 0 interface 85 has no altsetting 0
[  443.069954][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  443.139708][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.219820][ T5985] usb 5-1: Product: syz
[  443.274715][ T5985] usb 5-1: Manufacturer: syz
[  443.296773][ T5985] usb 5-1: SerialNumber: syz
[  443.429209][ T5985] usb 5-1: config 0 descriptor??
[  443.439233][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  443.460097][T10735] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  443.460155][    T9] usb 1-1: invalid MIDI out EP 0
[  443.487993][T10735] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  443.544737][    T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  443.804238][   T30] audit: type=1400 audit(1755298246.314:676): avc:  denied  { getopt } for  pid=10888 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  443.876255][T10735] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.904180][T10735] 8021q: adding VLAN 0 to HW filter on device team0
[  443.921279][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.928413][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.959583][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.966769][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.997451][T10908] Invalid ELF header magic: != ELF
[  444.007267][   T30] audit: type=1400 audit(1755298246.514:677): avc:  denied  { module_load } for  pid=10901 comm="syz.3.1321" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  444.043103][ T5955] usb 1-1: USB disconnect, device number 43
[  444.826453][T10735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.033794][ T5985] appletouch 5-1:0.85: Geyser mode initialized.
[  445.104142][ T5985] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input35
[  446.436592][ T5906] usb 5-1: USB disconnect, device number 45
[  446.506386][ T5906] appletouch 5-1:0.85: input: appletouch disconnected
[  446.670554][T10933] netlink: 'syz.4.1325': attribute type 1 has an invalid length.
[  447.083741][T10933] 8021q: adding VLAN 0 to HW filter on device bond3
[  447.206402][T10933] vlan2: entered allmulticast mode
[  447.213414][T10933] veth1: entered allmulticast mode
[  447.270310][T10933] bond3: (slave vlan2): making interface the new active one
[  447.283983][T10933] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  447.374369][T10735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.587414][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'.
[  449.030032][T10735] veth0_vlan: entered promiscuous mode
[  449.058468][T10974] input: syz0 as /devices/virtual/input/input36
[  449.079291][T10735] veth1_vlan: entered promiscuous mode
[  449.101489][ T5985] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  449.281347][ T5985] usb 4-1: Using ep0 maxpacket: 32
[  449.284316][T10735] veth0_macvtap: entered promiscuous mode
[  449.307607][ T5985] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  449.315730][ T5985] usb 4-1: config 0 has no interface number 0
[  449.330632][ T5985] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  449.335980][T10735] veth1_macvtap: entered promiscuous mode
[  449.351880][ T5985] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  449.362231][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  449.374178][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.461798][ T5985] usb 4-1: config 0 descriptor??
[  449.469555][ T5985] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[  449.472424][T10735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.493766][T10735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.513059][ T7089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.538535][ T7089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.547739][ T7089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.564309][ T7089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.648720][T10918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.679786][T10918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.801442][ T8380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.809282][ T8380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.845646][   T30] audit: type=1400 audit(1755298252.364:678): avc:  denied  { mount } for  pid=10735 comm="syz-executor" name="/" dev="gadgetfs" ino=7221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  450.035331][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'.
[  450.044431][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'.
[  450.285575][   T30] audit: type=1400 audit(1755298252.364:679): avc:  denied  { mounton } for  pid=10735 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  451.371324][ T5913] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  451.374883][T11008] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1341'.
[  451.775076][T11011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1342'.
[  451.845645][ T5913] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  451.941949][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.954800][ T5913] usb 5-1: Product: syz
[  451.959189][ T5913] usb 5-1: Manufacturer: syz
[  451.964306][ T5913] usb 5-1: SerialNumber: syz
[  451.971244][ T5913] usb 5-1: config 0 descriptor??
[  451.979191][ T5906] usb 4-1: USB disconnect, device number 48
[  452.091483][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  452.399414][    T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  452.429959][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.453516][    T9] usb 3-1: Product: syz
[  452.458121][    T9] usb 3-1: Manufacturer: syz
[  452.463422][    T9] usb 3-1: SerialNumber: syz
[  452.469314][    T9] usb 3-1: config 0 descriptor??
[  452.488235][    T9] usb 5-1: USB disconnect, device number 46
[  452.535436][T11026] overlayfs: missing 'lowerdir'
[  452.655879][T11028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11028 comm=syz.3.1347
[  452.782639][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.803462][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.873578][ T5906] usb 3-1: USB disconnect, device number 48
[  453.078028][T11032] delete_channel: no stack
[  453.248929][T11029] kvm: pic: non byte write
[  453.347133][T11035] netlink: 'syz.0.1349': attribute type 4 has an invalid length.
[  453.415067][   T30] audit: type=1400 audit(1755298255.914:680): avc:  denied  { append } for  pid=11004 comm="syz.4.1340" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  453.430286][T11035] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1349'.
[  453.619637][T11035] : renamed from bond0 (while UP)
[  453.967521][T11049] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1354'.
[  453.979811][T11049] 8021q: adding VLAN 0 to HW filter on device 
[  453.989845][T11049] 8021q: adding VLAN 0 to HW filter on device team0
[  454.071265][ T5913] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  454.248346][ T5913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  454.422985][T11049] batman_adv: batadv0: Interface activated: team0
[  454.436012][T11049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.457440][ T5913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  454.498341][ T5913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  454.517756][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.568602][T11040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  454.581162][T11040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  454.610268][   T30] audit: type=1326 audit(1755298257.124:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  454.662213][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  454.673468][   T30] audit: type=1326 audit(1755298257.134:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  454.731375][ T5906] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  454.771582][   T30] audit: type=1326 audit(1755298257.134:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  454.942642][   T30] audit: type=1326 audit(1755298257.134:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  454.973958][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  454.977186][   T30] audit: type=1326 audit(1755298257.134:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  454.983617][ T5906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.114617][   T30] audit: type=1326 audit(1755298257.134:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.152588][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  455.166966][T11070] netlink: 'syz.5.1357': attribute type 8 has an invalid length.
[  455.175159][   T30] audit: type=1326 audit(1755298257.134:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.346519][T11073] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1358'.
[  455.364675][T11073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.584565][   T30] audit: type=1326 audit(1755298257.134:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.621367][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33279, setting to 1024
[  455.643767][   T30] audit: type=1326 audit(1755298257.134:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.669015][   T30] audit: type=1326 audit(1755298257.134:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.762322][T11076] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1357'.
[  455.796257][   T30] audit: type=1326 audit(1755298257.134:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.857985][ T5906] usb 1-1: config 1 interface 1 has no altsetting 0
[  455.869869][   T30] audit: type=1326 audit(1755298257.134:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  455.879917][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  455.994746][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.018657][ T5906] usb 1-1: Product: syz
[  456.024047][ T5906] usb 1-1: Manufacturer: syz
[  456.028672][ T5906] usb 1-1: SerialNumber: syz
[  456.092815][   T30] audit: type=1326 audit(1755298257.134:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb55b8ebe9 code=0x7ffc0000
[  456.267232][ T5906] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  456.276623][ T5906] usb 1-1: 2:1 : unknown format tag 0x1009 is detected.  processed as MPEG.
[  456.298428][ T5906] usb 1-1: found format II with max.bitrate = 2418, frame size=7
[  456.312544][ T5906] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  456.322149][ T5906] usb 1-1: 2:1 : unknown format tag 0x1009 is detected.  processed as MPEG.
[  456.331443][ T5906] usb 1-1: found format II with max.bitrate = 2418, frame size=7
[  456.529340][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'.
[  456.538467][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'.
[  456.698142][ T5906] usb 1-1: USB disconnect, device number 44
[  457.107540][ T5955] usb 3-1: USB disconnect, device number 49
[  457.636584][T11100] tipc: Started in network mode
[  457.649500][T11100] tipc: Node identity 4ad21d0faf6, cluster identity 4711
[  457.674576][T11100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.719840][T11103] syzkaller0: entered promiscuous mode
[  458.023033][T11103] syzkaller0: entered allmulticast mode
[  458.253663][T11100] tipc: Resetting bearer <eth:syzkaller0>
[  458.323805][T11100] fuse: Bad value for 'fd'
[  458.819319][ T5906] tipc: Node number set to 3853655311
[  459.137680][T11096] tipc: Resetting bearer <eth:syzkaller0>
[  459.317394][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  459.377568][T11116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'.
[  459.392489][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  459.609382][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  460.046618][T11116] hsr_slave_1 (unregistering): left promiscuous mode
[  461.039483][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'.
[  461.049532][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'.
[  461.445923][T11139] FAULT_INJECTION: forcing a failure.
[  461.445923][T11139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.492205][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  461.492220][   T30] audit: type=1400 audit(1755298264.014:706): avc:  denied  { accept } for  pid=11132 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  461.536123][T11139] CPU: 1 UID: 0 PID: 11139 Comm: syz.0.1375 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  461.536150][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  461.536160][T11139] Call Trace:
[  461.536166][T11139]  <TASK>
[  461.536174][T11139]  dump_stack_lvl+0x16c/0x1f0
[  461.536196][T11139]  should_fail_ex+0x512/0x640
[  461.536221][T11139]  _copy_from_user+0x2e/0xd0
[  461.536244][T11139]  copy_msghdr_from_user+0x98/0x160
[  461.536264][T11139]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  461.536293][T11139]  ___sys_sendmsg+0xfe/0x1d0
[  461.536313][T11139]  ? __pfx____sys_sendmsg+0x10/0x10
[  461.536354][T11139]  ? __mutex_unlock_slowpath+0x100/0x800
[  461.536381][T11139]  __sys_sendmsg+0x16d/0x220
[  461.536399][T11139]  ? __pfx___sys_sendmsg+0x10/0x10
[  461.536433][T11139]  do_syscall_64+0xcd/0x4c0
[  461.536455][T11139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.536474][T11139] RIP: 0033:0x7f3ee878ebe9
[  461.536489][T11139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.536505][T11139] RSP: 002b:00007f3ee966c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  461.536523][T11139] RAX: ffffffffffffffda RBX: 00007f3ee89b5fa0 RCX: 00007f3ee878ebe9
[  461.536534][T11139] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004
[  461.536545][T11139] RBP: 00007f3ee966c090 R08: 0000000000000000 R09: 0000000000000000
[  461.536556][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.536567][T11139] R13: 00007f3ee89b6038 R14: 00007f3ee89b5fa0 R15: 00007ffcea8bf238
[  461.536591][T11139]  </TASK>
[  461.704349][    C1] vkms_vblank_simulate: vblank timer overrun
[  461.864617][T11144] IPVS: Scheduler module ip_vs_sip not found
[  462.708914][   T30] audit: type=1400 audit(1755298265.224:707): avc:  denied  { append } for  pid=11161 comm="syz.2.1383" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  464.451404][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  464.611186][    T9] usb 4-1: Using ep0 maxpacket: 32
[  464.620116][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  464.634189][    T9] usb 4-1: config 0 has no interface number 0
[  464.663774][    T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  464.701005][ T5906] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  464.729016][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.749154][    T9] usb 4-1: Product: syz
[  464.770961][    T9] usb 4-1: Manufacturer: syz
[  464.775593][    T9] usb 4-1: SerialNumber: syz
[  464.792091][    T9] usb 4-1: config 0 descriptor??
[  464.803810][    T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  464.812936][    T9] usb 4-1: selecting invalid altsetting 1
[  464.819519][    T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  464.844097][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  464.856008][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  464.865261][    T9] usb 4-1: media controller created
[  464.881331][ T5906] usb 3-1: Using ep0 maxpacket: 16
[  464.897466][ T5906] usb 3-1: no configurations
[  464.902334][ T5906] usb 3-1: can't read configurations, error -22
[  464.936071][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  464.966354][   T30] audit: type=1400 audit(1755298267.484:708): avc:  denied  { ioctl } for  pid=11187 comm="syz.5.1390" path="socket:[35158]" dev="sockfs" ino=35158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  465.076058][T10805] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  465.083893][ T5906] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  465.278414][    T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  465.288798][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  465.300808][    T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  465.342770][ T5906] usb 3-1: Using ep0 maxpacket: 16
[  465.350420][T10805] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[  465.364231][    T9] usb 4-1: USB disconnect, device number 49
[  465.371337][T10805] usb 1-1: config 0 has no interface number 0
[  465.377698][ T5906] usb 3-1: no configurations
[  465.382556][T10805] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  465.392693][ T5906] usb 3-1: can't read configurations, error -22
[  465.399959][ T5906] usb usb3-port1: attempt power cycle
[  465.409052][T10805] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  465.445796][T10805] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  465.491467][T10805] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  465.503253][T10805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.504226][T11195] mkiss: ax0: crc mode is auto.
[  465.512063][T10805] usb 1-1: Product: syz
[  465.520731][T10805] usb 1-1: Manufacturer: syz
[  465.525843][T10805] usb 1-1: SerialNumber: syz
[  465.534617][T10805] usb 1-1: config 0 descriptor??
[  465.540063][T11186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  465.547596][T11186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  465.727467][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'.
[  465.756589][T11186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  465.764231][T11186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  465.773101][T10805] usb 1-1: No status endpoint found
[  465.781009][ T5906] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  465.803146][ T5906] usb 3-1: Using ep0 maxpacket: 16
[  465.808777][ T5906] usb 3-1: no configurations
[  465.814097][ T5906] usb 3-1: can't read configurations, error -22
[  465.942211][ T5906] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  465.971750][ T5906] usb 3-1: Using ep0 maxpacket: 16
[  465.977452][ T5906] usb 3-1: no configurations
[  465.982595][ T5906] usb 3-1: can't read configurations, error -22
[  465.989219][ T5906] usb usb3-port1: unable to enumerate USB device
[  465.991192][  T919] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  466.043607][ T5906] usb 1-1: USB disconnect, device number 45
[  466.154308][  T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  466.164142][  T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  466.176553][  T919] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  466.181253][T10805] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  466.185730][  T919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.206262][  T919] usb 6-1: Product: syz
[  466.210412][  T919] usb 6-1: Manufacturer: syz
[  466.215149][  T919] usb 6-1: SerialNumber: syz
[  466.220886][  T919] usb 6-1: config 0 descriptor??
[  466.341041][T10805] usb 4-1: device descriptor read/64, error -71
[  466.419095][   T30] audit: type=1400 audit(1755298268.934:709): avc:  denied  { ioctl } for  pid=11200 comm="syz.4.1395" path="socket:[35265]" dev="sockfs" ino=35265 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  466.479470][   T30] audit: type=1400 audit(1755298268.994:710): avc:  denied  { read } for  pid=11196 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  466.517730][  T919] usb 6-1: USB disconnect, device number 2
[  466.581211][T10805] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  466.751027][T10805] usb 4-1: device descriptor read/64, error -71
[  466.861667][T10805] usb usb4-port1: attempt power cycle
[  466.896986][T11210] tipc: Started in network mode
[  466.904137][T11210] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  466.914727][T11210] tipc: Enabled bearer <eth:team0>, priority 0
[  467.240102][T10805] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  467.783624][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[  467.784105][T10805] usb 4-1: device descriptor read/8, error -71
[  467.940785][T11222] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  468.098022][ T5913] tipc: Node number set to 11578026
[  468.157147][T10805] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  468.183105][T10805] usb 4-1: device descriptor read/8, error -71
[  468.334581][T10805] usb usb4-port1: unable to enumerate USB device
[  470.429230][T11257] C: renamed from lo (while UP)
[  470.439077][T11257] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  471.293368][   T30] audit: type=1400 audit(1755298273.814:711): avc:  denied  { ioctl } for  pid=11265 comm="syz.3.1412" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  472.081889][T11291] netlink: 'syz.3.1417': attribute type 1 has an invalid length.
[  473.043343][   T30] audit: type=1400 audit(1755298275.564:712): avc:  denied  { bind } for  pid=11282 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  473.433487][T11300] orangefs_mount: mount request failed with -4
[  474.301993][T11315] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  474.301993][T11315] The task syz.0.1423 (11315) triggered the difference, watch for misbehavior.
[  474.463391][   T30] audit: type=1400 audit(1755298276.954:713): avc:  denied  { bind } for  pid=11313 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  474.860086][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'.
[  474.870622][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'.
[  475.852110][T10805] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  476.061486][T10805] usb 4-1: Using ep0 maxpacket: 16
[  476.068023][T10805] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  476.468898][T10805] usb 4-1: config 0 has no interface number 0
[  476.478557][T10805] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  476.489554][T10805] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  476.504560][T10805] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  476.531336][T10805] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  476.575348][T10805] usb 4-1: Product: syz
[  476.602394][T10805] usb 4-1: SerialNumber: syz
[  476.639795][T10805] usb 4-1: config 0 descriptor??
[  476.669593][T10805] cm109 4-1:0.8: invalid payload size 0, expected 4
[  476.710744][T10805] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input38
[  476.941037][   T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  477.358747][   T24] usb 1-1: Using ep0 maxpacket: 16
[  477.384396][   T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  477.395600][   T24] usb 1-1: config 0 has no interface number 0
[  477.428003][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  477.480196][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.487384][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.494680][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.501757][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.508818][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.516358][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.523521][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.530580][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.537710][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.544890][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  477.556342][T10805] usb 4-1: USB disconnect, device number 54
[  477.562273][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  477.644816][T10805] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  477.662960][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  477.793246][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  477.856694][   T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  477.869300][   T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  477.878640][   T24] usb 1-1: Product: syz
[  477.890614][   T24] usb 1-1: SerialNumber: syz
[  477.900116][   T24] usb 1-1: config 0 descriptor??
[  477.932488][   T24] cm109 1-1:0.8: invalid payload size 0, expected 4
[  477.956703][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input39
[  478.416112][T11362] : entered promiscuous mode
[  479.061737][T10805] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  479.491362][T10805] usb 5-1: Using ep0 maxpacket: 32
[  479.516827][T10805] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  479.525910][T10805] usb 5-1: config 0 has no interface number 0
[  479.534153][T10805] usb 5-1: config 0 interface 184 has no altsetting 0
[  479.550356][T10805] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  479.669361][T10805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.680355][T10805] usb 5-1: Product: syz
[  479.687097][T10805] usb 5-1: Manufacturer: syz
[  479.719030][T10805] usb 5-1: SerialNumber: syz
[  479.728025][T10805] usb 5-1: config 0 descriptor??
[  479.736630][T10805] smsc75xx v1.0.0
[  479.743904][ T5844] usb 1-1: USB disconnect, device number 46
[  479.743987][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  479.883347][ T5844] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  480.053535][T11385] pim6reg: entered allmulticast mode
[  480.088651][T11379] pim6reg: left allmulticast mode
[  480.168398][T10805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  480.186121][T10805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  480.294981][T10805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  480.441486][T10805] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  480.479815][   T30] audit: type=1400 audit(1755298282.994:714): avc:  denied  { getopt } for  pid=11390 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  480.660467][T11398] 9pnet_fd: Insufficient options for proto=fd
[  480.734640][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'.
[  480.785707][   T30] audit: type=1400 audit(1755298283.304:715): avc:  denied  { ioctl } for  pid=11401 comm="syz.3.1448" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  480.894079][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  481.011129][  T919] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  481.051063][   T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  481.160990][  T919] usb 6-1: Using ep0 maxpacket: 16
[  481.167450][  T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.178513][  T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.188367][  T919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  481.207028][  T919] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  481.221914][  T919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.230572][   T24] usb 4-1: config 0 has no interfaces?
[  481.238183][   T24] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  481.255761][  T919] usb 6-1: config 0 descriptor??
[  481.260758][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.276947][   T24] usb 4-1: Product: syz
[  481.284009][   T24] usb 4-1: Manufacturer: syz
[  481.293492][   T24] usb 4-1: SerialNumber: syz
[  481.304012][   T24] usb 4-1: config 0 descriptor??
[  481.764765][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.773211][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.781006][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.798890][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.806778][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.815244][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.823128][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.831256][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.851783][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  481.871743][  T919] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x0
[  482.022366][T10805] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  482.148771][  T919] hid-multitouch 0003:0457:07DA.001B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[  482.167663][  T919] usb 6-1: USB disconnect, device number 3
[  482.366368][T10805] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de
[  482.375607][T10805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.383957][T10805] usb 1-1: Product: syz
[  482.388405][T10805] usb 1-1: Manufacturer: syz
[  482.393530][T10805] usb 1-1: SerialNumber: syz
[  482.403177][T10805] usb 1-1: config 0 descriptor??
[  482.410801][T10805] ttusb_dec_send_command: command bulk message failed: error -22
[  482.420015][T10805] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22
[  482.649072][T10805] usb 1-1: USB disconnect, device number 47
[  482.657708][T11408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.806968][   T24] usb 5-1: USB disconnect, device number 47
[  482.986417][T11429] blkio.reset_stats is deprecated
[  483.517095][T11436] binder: BINDER_SET_CONTEXT_MGR already set
[  483.523228][T11436] binder: 11431:11436 ioctl 4018620d 200000000040 returned -16
[  483.911113][    T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  483.931290][  T919] usb 4-1: USB disconnect, device number 55
[  484.209303][    T9] usb 3-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5
[  484.238969][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.254132][    T9] usb 3-1: config 0 descriptor??
[  484.443787][   T30] audit: type=1400 audit(1755298286.954:716): avc:  denied  { mount } for  pid=11448 comm="syz.0.1461" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  484.533032][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  484.533229][    T9] asix 3-1:0.0: probe with driver asix failed with error -71
[  484.546061][    T9] usb 3-1: USB disconnect, device number 54
[  484.691117][T11462] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  484.840435][   T30] audit: type=1400 audit(1755298287.254:717): avc:  denied  { execmem } for  pid=11460 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  484.980746][   T30] audit: type=1400 audit(1755298287.494:718): avc:  denied  { accept } for  pid=11460 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  485.615993][T11471] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1466'.
[  486.091040][T10805] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  488.297809][T10805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.311758][T10805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  488.320774][T10805] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  488.330085][T10805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.340777][T10805] usb 4-1: config 0 descriptor??
[  488.348664][T10805] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  488.361406][T10805] dvb-usb: bulk message failed: -22 (3/0)
[  488.384949][T10805] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  488.428531][T10805] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  488.477921][T10805] usb 4-1: media controller created
[  488.495918][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  488.552600][T10805] dvb-usb: bulk message failed: -22 (6/0)
[  488.581189][T10805] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  488.749588][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40
[  488.773467][T10805] dvb-usb: schedule remote query interval to 150 msecs.
[  488.801174][T10805] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  488.964744][T10805] dvb-usb: bulk message failed: -22 (1/0)
[  489.589743][T10805] dvb-usb: error while querying for an remote control event.
[  489.634045][   T30] audit: type=1400 audit(1755298292.144:719): avc:  denied  { read } for  pid=11498 comm="syz.5.1473" path="socket:[37271]" dev="sockfs" ino=37271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  489.696727][   T30] audit: type=1400 audit(1755298292.154:720): avc:  denied  { create } for  pid=11510 comm="syz.2.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  489.777125][   T30] audit: type=1400 audit(1755298292.154:721): avc:  denied  { bind } for  pid=11510 comm="syz.2.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  489.797931][T10805] dvb-usb: bulk message failed: -22 (1/0)
[  489.804335][T10805] dvb-usb: error while querying for an remote control event.
[  489.981783][T10805] dvb-usb: bulk message failed: -22 (1/0)
[  489.987573][T10805] dvb-usb: error while querying for an remote control event.
[  490.482469][T10805] dvb-usb: bulk message failed: -22 (1/0)
[  490.492966][T10805] dvb-usb: error while querying for an remote control event.
[  490.586839][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1478'.
[  490.595845][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1478'.
[  490.662355][ T5844] dvb-usb: bulk message failed: -22 (1/0)
[  490.673175][ T5844] dvb-usb: error while querying for an remote control event.
[  490.820530][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'.
[  490.871803][T10805] usb 4-1: USB disconnect, device number 56
[  490.978705][T10805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  491.012231][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880568e0c00: rx timeout, send abort
[  491.522023][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880568e0c00: abort rx timeout. Force session deactivation
[  492.153041][   T24] libceph: connect (1)[c::]:6789 error -101
[  492.161701][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  492.436097][   T24] libceph: connect (1)[c::]:6789 error -101
[  492.450561][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  492.633341][T11551] ceph: No mds server is up or the cluster is laggy
[  494.655474][T11581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11581 comm=syz.0.1491
[  495.020521][   T30] audit: type=1326 audit(1755298297.534:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.092938][   T30] audit: type=1326 audit(1755298297.534:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.117906][   T30] audit: type=1326 audit(1755298297.564:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.147911][   T30] audit: type=1326 audit(1755298297.564:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.174014][   T30] audit: type=1326 audit(1755298297.564:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.207552][   T30] audit: type=1326 audit(1755298297.564:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.234531][   T30] audit: type=1326 audit(1755298297.564:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.259962][   T30] audit: type=1326 audit(1755298297.564:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.290992][   T30] audit: type=1326 audit(1755298297.564:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  495.329752][   T30] audit: type=1326 audit(1755298297.564:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8fbf38ebe9 code=0x7ffc0000
[  496.776625][T11619] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  498.609745][T11628] ------------[ cut here ]------------
[  498.615672][T11628] UBSAN: shift-out-of-bounds in net/ipv4/fib_trie.c:1448:11
[  498.623143][T11628] shift exponent 255 is too large for 32-bit type 'unsigned int'
[  498.630873][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.4.1499 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  498.630903][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  498.630913][T11628] Call Trace:
[  498.630920][T11628]  <TASK>
[  498.630927][T11628]  dump_stack_lvl+0x16c/0x1f0
[  498.630951][T11628]  __ubsan_handle_shift_out_of_bounds+0x27f/0x420
[  498.630990][T11628]  fib_table_lookup.cold+0x39/0x7a
[  498.631036][T11628]  fib_lookup.constprop.0+0x13e/0x530
[  498.631067][T11628]  ip_route_output_key_hash_rcu+0xde8/0x28c0
[  498.631103][T11628]  ip_route_output_key_hash+0x137/0x2e0
[  498.631131][T11628]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  498.631156][T11628]  ? __pfx___schedule+0x10/0x10
[  498.631197][T11628]  tcp_v4_connect+0x81c/0x1bb0
[  498.631233][T11628]  ? __pfx_tcp_v4_connect+0x10/0x10
[  498.631267][T11628]  tcp_v6_connect+0x785/0x2170
[  498.631294][T11628]  ? avc_has_perm_noaudit+0x117/0x3b0
[  498.631321][T11628]  ? __pfx_tcp_v6_connect+0x10/0x10
[  498.631354][T11628]  ? __pfx_avc_has_perm+0x10/0x10
[  498.631383][T11628]  ? __lock_acquire+0xb97/0x1ce0
[  498.631417][T11628]  ? __inet_stream_connect+0x914/0xf60
[  498.631442][T11628]  __inet_stream_connect+0x914/0xf60
[  498.631475][T11628]  ? __pfx___inet_stream_connect+0x10/0x10
[  498.631502][T11628]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  498.631527][T11628]  ? __pfx_inet_stream_connect+0x10/0x10
[  498.631554][T11628]  ? __local_bh_enable_ip+0xa4/0x120
[  498.631582][T11628]  ? __pfx_inet_stream_connect+0x10/0x10
[  498.631607][T11628]  inet_stream_connect+0x57/0xa0
[  498.631635][T11628]  __sys_connect_file+0x13e/0x1a0
[  498.631667][T11628]  __sys_connect+0x13b/0x160
[  498.631694][T11628]  ? __pfx___sys_connect+0x10/0x10
[  498.631732][T11628]  ? xfd_validate_state+0x61/0x180
[  498.631760][T11628]  ? __sys_setsockopt+0x1c0/0x230
[  498.631783][T11628]  __x64_sys_connect+0x72/0xb0
[  498.631810][T11628]  ? lockdep_hardirqs_on+0x7c/0x110
[  498.631829][T11628]  do_syscall_64+0xcd/0x4c0
[  498.631853][T11628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.631873][T11628] RIP: 0033:0x7f8fbf38ebe9
[  498.631891][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.631909][T11628] RSP: 002b:00007f8fbd5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  498.631928][T11628] RAX: ffffffffffffffda RBX: 00007f8fbf5b6090 RCX: 00007f8fbf38ebe9
[  498.631941][T11628] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000008
[  498.631954][T11628] RBP: 00007f8fbf411e19 R08: 0000000000000000 R09: 0000000000000000
[  498.631967][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.631979][T11628] R13: 00007f8fbf5b6128 R14: 00007f8fbf5b6090 R15: 00007fff6aa0d458
[  498.632007][T11628]  </TASK>
[  498.937401][T11628] ---[ end trace ]---
[  498.941668][T11628] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  498.948860][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.4.1499 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  498.960917][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  498.970965][T11628] Call Trace:
[  498.974237][T11628]  <TASK>
[  498.977167][T11628]  dump_stack_lvl+0x3d/0x1f0
[  498.981763][T11628]  vpanic+0x6e8/0x7a0
[  498.985751][T11628]  ? __pfx_vpanic+0x10/0x10
[  498.990266][T11628]  ? __pfx_vprintk_emit+0x10/0x10
[  498.995297][T11628]  panic+0xca/0xd0
[  498.999025][T11628]  ? __pfx_panic+0x10/0x10
[  499.003457][T11628]  check_panic_on_warn+0xab/0xb0
[  499.008391][T11628]  __ubsan_handle_shift_out_of_bounds+0x2a6/0x420
[  499.014821][T11628]  fib_table_lookup.cold+0x39/0x7a
[  499.019952][T11628]  fib_lookup.constprop.0+0x13e/0x530
[  499.025335][T11628]  ip_route_output_key_hash_rcu+0xde8/0x28c0
[  499.031331][T11628]  ip_route_output_key_hash+0x137/0x2e0
[  499.036883][T11628]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  499.042954][T11628]  ? __pfx___schedule+0x10/0x10
[  499.047824][T11628]  tcp_v4_connect+0x81c/0x1bb0
[  499.052601][T11628]  ? __pfx_tcp_v4_connect+0x10/0x10
[  499.057816][T11628]  tcp_v6_connect+0x785/0x2170
[  499.062586][T11628]  ? avc_has_perm_noaudit+0x117/0x3b0
[  499.067959][T11628]  ? __pfx_tcp_v6_connect+0x10/0x10
[  499.073156][T11628]  ? __pfx_avc_has_perm+0x10/0x10
[  499.078181][T11628]  ? __lock_acquire+0xb97/0x1ce0
[  499.083114][T11628]  ? __inet_stream_connect+0x914/0xf60
[  499.088561][T11628]  __inet_stream_connect+0x914/0xf60
[  499.093839][T11628]  ? __pfx___inet_stream_connect+0x10/0x10
[  499.099632][T11628]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  499.104997][T11628]  ? __pfx_inet_stream_connect+0x10/0x10
[  499.110622][T11628]  ? __local_bh_enable_ip+0xa4/0x120
[  499.115896][T11628]  ? __pfx_inet_stream_connect+0x10/0x10
[  499.121522][T11628]  inet_stream_connect+0x57/0xa0
[  499.126467][T11628]  __sys_connect_file+0x13e/0x1a0
[  499.131491][T11628]  __sys_connect+0x13b/0x160
[  499.136083][T11628]  ? __pfx___sys_connect+0x10/0x10
[  499.141216][T11628]  ? xfd_validate_state+0x61/0x180
[  499.146322][T11628]  ? __sys_setsockopt+0x1c0/0x230
[  499.151331][T11628]  __x64_sys_connect+0x72/0xb0
[  499.156082][T11628]  ? lockdep_hardirqs_on+0x7c/0x110
[  499.161262][T11628]  do_syscall_64+0xcd/0x4c0
[  499.165752][T11628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.171629][T11628] RIP: 0033:0x7f8fbf38ebe9
[  499.176028][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.195616][T11628] RSP: 002b:00007f8fbd5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  499.204012][T11628] RAX: ffffffffffffffda RBX: 00007f8fbf5b6090 RCX: 00007f8fbf38ebe9
[  499.211968][T11628] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000008
[  499.219919][T11628] RBP: 00007f8fbf411e19 R08: 0000000000000000 R09: 0000000000000000
[  499.227878][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  499.235846][T11628] R13: 00007f8fbf5b6128 R14: 00007f8fbf5b6090 R15: 00007fff6aa0d458
[  499.243821][T11628]  </TASK>
[  499.247034][T11628] Kernel Offset: disabled
[  499.251400][T11628] Rebooting in 86400 seconds..