last executing test programs:

7m27.391923894s ago: executing program 3 (id=124):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
syz_usb_connect(0x3, 0x5ad, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x37, 0x63, 0xd2, 0x8, 0x58f, 0x6610, 0x70d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59b, 0x3, 0x6, 0xcf, 0x0, 0x8, "", [{{0x9, 0x4, 0xde, 0xe, 0x5, 0x89, 0x10, 0xd0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x4a}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x1, 0xe, "d16a3e85cd"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x1, "618dabacc5bf"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x1, 0x5, [0x1, 0xe, 0x2, 0x6, 0x4], 0xd}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x81, 'r'}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x9, 0x1, 0xa], 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x6, 0x68}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x81, 0x7f, 0x81}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0xff, 0x3}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x2, 0x2, [@generic={0x85, 0x7, "750aff7ae239164a66ea73aa7482ddbef4d73e7b716ad9771fd029eab7bd92ac27247dda60ba297d81e20b33b3cc114215941961b423b124793eaa942add56584425c84d2db829ef188e0b957290a414f2528c74234ac05f013e1a54f8a56f4586d147a34096cba8ff86c18c03430b36c0b434da8da68543ba8289af87d408093bdeac"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x4, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x6}]}}]}}, {{0x9, 0x4, 0x30, 0x3d, 0xf, 0xe1, 0x99, 0x0, 0x7, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x9, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x30de}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x8, 0xe, [@generic={0x92, 0x24, "67c12f1b333b82bbfacb91c09841809edc582645f674597600f0d6f6952fbf92385e3d2c27e0740c06af17a2eb10b78939d73139103a955a8489c06749dfb46a724a7fb1aa5028630292f24fc618cbae2f18d1c5b29e6cde70237471e9c15cd71995362689070b079712d91f3e2d7c39473d469289343b651520d62b2b3b8107b757cd5c52e326bfd81f2f0983a3544d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xb1, 0x7f, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x1, 0x1, 0x8, [@generic={0xc, 0xa, "8308c4221ab129187021"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x0, 0x4, [@generic={0xa8, 0x21, "eadc1225d19aa63b03656d72b75d3ee8bdbe5afe9681a3c7d9808d29cc02190c294921475c1061a6668b0937e3056fe710d905b7f10021529e452acd152ed4599c6b298dbc0bdeb2e86b7c5ca70237d6985f6eeec6e479c4395ff9e2b32eab319ef63764c01b79e10b91ba8f6c1be25b1cda34c979a3c2f25e0f806dd34f9d7083d89be2f3ea121dea65453f949edc028108fe876912c34891ff0243c91c71ef534e211a70ca"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xeb, 0x9}, @generic={0x16, 0x7, "4857ee22dcc2351b1108ed9f0c64e1b9cba03d09"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0x0, 0x7, [@generic={0x22, 0x11, "04ba302a3c9ee4a4fa96af429794127e5b9d0944adde07cbc49c6e2d76e9ce6a"}, @generic={0x88, 0x21, "98b03c428cf2fd2524dd6b1946c38cbcfaf1fef14173f150d3eabdd83e1a35a46547ee679a7956363cc7150cdbee1eaf5fe9b8a9c3daf0312e95a1ed425a55179769a70e06f313a6130bfbb3b3fd88b8930a2d3b997c25ed4ae661a49563464e67d831e365f5ce2f3817592fc462b56f6f25b83a06334b2a67b650975394c262059c2f6ad772"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6ebd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xed}, @generic={0x46, 0xc, "294d0f6509441e1a6f3d090163622b5e5e071f3ce5ebcace065e58cdab9b60da03eaa7d3d9a8f7161c768e1da8cc69a877d9714f3095eec12b500375a58464144180a316"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x8f, 0xff}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7ff}, @generic={0x66, 0xf, "e9d14873379af86532297893b64f2eb99879c5b6baa60535d051375d32030ef4d3a3411d9aa45c823456ca9abc7ccae4466440c2ed12339a8bec9a9215f8f73eeba0eebd5896f4e70458bcf767fadca5591b0a510138c33fc1eadc23f4026dff121dc110"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0xf8, 0x4}}, {{0x9, 0x5, 0x3, 0x1d, 0x8, 0x6, 0xb, 0xc, [@generic={0xa3, 0x22, "9a7a758685bb3838df2f5b8d22340a987775e310339103330bd7c012ad21980acc173e5dd6581830151425cf76bde69980bd05d89a61902677a349d1bbdb33bbc9804439672d217e45109031728d4034b0256caa4141012a7737995068d557e1b39ae99a58214fca5d0a4e69683b6c81a134a453713f212c97c2d34c7c3ccb806e90c81c0491d77e0dfcae35f7d2ab86742115e3401d4c144025bec6d9967b9d1c"}]}}]}}, {{0x9, 0x4, 0xd, 0xc, 0x1, 0xae, 0x3, 0x18, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ce7c15b3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x101, 0x400, 0xc}, {0x6, 0x24, 0x1a, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x57c}, @country_functional={0xe, 0x24, 0x7, 0x1, 0xa, [0xa, 0x80, 0x5, 0x0]}]}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x80, 0x5}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x5, 0x1, 0x8, 0x0, 0x2}, 0x27, &(0x7f0000000f00)=ANY=[@ANYBLOB="0507000000000000df45000205f9f780030a3b6d66e5c5b86506cbba7c7a6a36d6010058c1f71e"], 0x4, [{0xb4, &(0x7f0000000f40)=@string={0xb4, 0x3, "da1e0ff379779d0dba9922174e0c1dff872e235ac8e4810bf1db280022b66ea2287778e83216e065de0872fd9792457b6cb0eac06c301df4a85fefc8735c4713cab97b70472712301fba5a52479b43988ac92d68e0a77c1bccdda22de3e82342614e6230e19222b5a1a6ebb66b2ad5a83c151fa28f4259787e9346215fbbdee58b2b4f3ea8329782d80ea411cc1411e57de981c34d05c91b1d20a2da5c1435c0051cda36aee5a3b7f7f7e349c20033638282"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x2801}}, {0xdb, &(0x7f0000001040)=@string={0xdb, 0x3, "c32f6a80ebfe6c3440b3f8e4e14eae20fcea1837e0a933e27fe7c659bfcb3b59fa39e99a1695da3b7a804518933949d06a7f761bb7c67b7ff168939ee4570247d733a81c702f4792b7590f81a27f7198164235e6a8b85eed3832b2ce7948250beff5b5825d165d8ccf3ef14867f9e146e591e187df2dcd6d4bda49aa7b306a1649d46783037bfd273100587c37f698b62b2271b3f4412d2674be3e1296cf4152790e3c02a9337d0de1b0f6fc5fb31f9f03970ef82745e4f7933efea3e65c79b6d6e5e6068e0b6446a498281905a95c5bd9ae1a1a8001702b0f"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1007}}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7m25.366204363s ago: executing program 3 (id=127):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

7m23.119152617s ago: executing program 3 (id=137):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000100005ff0000000800000000ed00004a00", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x400)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x3, 0x40400)
ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000180)={0xa, {0x6, 0x4, 0x8}}, 0xa)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x1, @pix={0xa8d8, 0xa34a, 0x42474752, 0xa, 0x1, 0x3, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x6}})
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x34002, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000100)=0x8001)

7m21.864476869s ago: executing program 3 (id=140):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x0, 0x0, 0x2, 0x0}, {0x1, 0x8, 0x1, &(0x7f0000000440)="ef"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x18, 0x0, &(0x7f0000000000)="53aaae"}, {0x3, 0x0, 0xec3, 0x0}, {0x3, 0x0, 0xc18476c, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x1, 0x0, 0x804, 0x0}]})
dup2(r1, r2)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local})
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
r5 = getpgid(r4)
setpgid(0x0, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

7m21.694579025s ago: executing program 3 (id=142):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af83, 0x0)

7m21.019332041s ago: executing program 3 (id=143):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab", 0xed}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)
unshare(0x6a040000)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8000)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)

7m20.934150586s ago: executing program 32 (id=143):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab", 0xed}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)
unshare(0x6a040000)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8000)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)

7m19.531952105s ago: executing program 2 (id=151):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {0x7, 0x9}, {0xfff1, 0xb}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x41)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x9}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)

7m19.148186454s ago: executing program 2 (id=154):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
io_uring_setup(0xa91, &(0x7f00000000c0)={0x0, 0x8161, 0x2, 0x3, 0x25c})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
write$6lowpan_control(r2, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{0x3ff, 0x0, 0x2, 0x9}, {0xe7, 0x1, 0x7}, {0x3ff, 0x3, 0x6, 0x6}, {0x0, 0x5, 0x9, 0x6}, {0x8, 0x0, 0x2, 0x5}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000001c0)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000300)=r8)
ioctl$TCSETS(r0, 0x40384708, &(0x7f00000000c0)={0x7, 0x1, 0xcc25, 0x3f, 0x19, "3e2a7ac84775d72417cc0200"})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80)

7m17.672061187s ago: executing program 2 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)='10 ', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0xc02063a1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1)
getpid()
sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000008050000000000000000000800000505"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x28000600)
connect$inet(r4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r5, &(0x7f00000001c0)='10\x00', 0x3)
fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x1)

7m17.151880916s ago: executing program 2 (id=162):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x0, 0x0, 0x2, 0x0}, {0x1, 0x8, 0x1, &(0x7f0000000440)="ef"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x18, 0x0, &(0x7f0000000000)="53aaae"}, {0x3, 0x0, 0xec3, 0x0}, {0x3, 0x0, 0xc18476c, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x1, 0x0, 0x804, 0x0}]})
dup2(r1, r2)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
r5 = getpgid(r4)
setpgid(0x0, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

7m16.909884703s ago: executing program 2 (id=164):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)=' 294967 95 2\\00000000 0\n', 0x18)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008811)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

7m13.49522282s ago: executing program 2 (id=173):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x0, 0x0, 0x2, 0x0}, {0x1, 0x8, 0x1, &(0x7f0000000440)="ef"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x18, 0x0, &(0x7f0000000000)="53aaae"}, {0x3, 0x0, 0xec3, 0x0}, {0x3, 0x0, 0xc18476c, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x1, 0x0, 0x804, 0x0}]})
dup2(r1, r2)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80))
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
r5 = getpgid(r4)
setpgid(0x0, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

7m13.35307749s ago: executing program 33 (id=173):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x0, 0x0, 0x2, 0x0}, {0x1, 0x8, 0x1, &(0x7f0000000440)="ef"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x18, 0x0, &(0x7f0000000000)="53aaae"}, {0x3, 0x0, 0xec3, 0x0}, {0x3, 0x0, 0xc18476c, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x1, 0x0, 0x804, 0x0}]})
dup2(r1, r2)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80))
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
r5 = getpgid(r4)
setpgid(0x0, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

14.921722691s ago: executing program 6 (id=2190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xf, 0x6, 0xf03, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44c10)

14.795924688s ago: executing program 6 (id=2191):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0)
recvfrom(r1, 0x0, 0xfffffffffffffc43, 0x20000041, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})

11.130360025s ago: executing program 6 (id=2208):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (fail_nth: 3)

10.740835463s ago: executing program 6 (id=2211):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710})

8.362671211s ago: executing program 4 (id=2216):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r6, 0x2007ffb)
sendfile(r6, r6, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)

6.227786358s ago: executing program 4 (id=2218):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="0000880a020100000800faff0700d06d6558b77daaaaaaaaaa148100000088646602be00133e2ffffe8000000000000000000000000000bbfc010000000000000000000000000000080c000000000000c20400000000c204000000010401070104000000000104000000000001000740000000010e40ff010800000000000000000000000000a0000400000000000000040000000000000004000000000000000900000000000000f8ffffffffffffff2e1600000000000008846c327781f3745fc3946cfb5c5b00885cfb0b3aab2a63f88cb96418827eae0cea818a2739f2a221223ab22f24357e0d7318b9844b0dd925e5c69af6a40b7424f5e238c545951f736279ec2305b119f2c3e91a20a60a48b3d949e7c8b4d7e594a26ef23f6655a865be7394d1aad21844447f73d71a8338cbfb0aa1597779a76561a8e860df05020003000100071800000001040902000000000000000080090000000000000005020003c20400000001000000000000002b00f300680000006210000000000000c910fe8000000000000000000000000000aac20400001a4104010704010e804c28ce1f1c95fc090900ba027bee30e6f7ee313dfe53a8b3e6d3ec46627b7a18559f0ee9b444a8ef8fba4efe25cdff3400963506d69dda6303c6e2e15a08d80aa044ae5a696e71b4dae043a323000100000100c20400000f67050230cf0105000000000000000000000c20880b00af00020002fffb82a89a2efb641851ebf494ac738dfea42f8e18b2ad06f117de043e63433baa2533e518a82393aa04d9f3e020c1e5747ab79b2e93fb72ff494a07ad02eaab931055e94589a520165c460ba4a273fb03db49c80cba79d777b5d5b7515142f8aa351117e2614c6dc037231ba33bb3a8424f766d59168ac6b821e34a90f3bcc24f47a8b6aa2d616e5afdead2548bd5caea9fc2572dd62f804a94facb4a54ee2eb7f2ac7af67406ed6de18a0aa8a08825080800080037f4639e6d8c3c38a760b18abccfc3c78d45239dfd5e010086ddf000bcfa6932bf23b6c85d0a08c6dca1094400966a1304cadb6edd53b469f27ef6e8754abc51361747762072a21f8b4782ef3c673e9873a0e7bcea7863582673706ac9048c0b9d7fcd098a0dd3e4ab009521c1e3e16d4459c7fd21ec41a4599ed277ab92ab4818b4e8071823e9e6f36fda080088be000000021291edc20100000000000007080022eb000000022306ea09020000000000ffff618212150800655800000003aee4ed64ebcc83ba0d7a3b91bd720b2f24c55b0853e703cca657185907ecaaa03e4597cb71eaa2a53f71a33696c3fa570188b9f816baa488fc5100b54543cdf857410f73b8acc175e2da759ce5ee143cf571372e43c50982d889f4ee69b345d5c893492f473030b86ca6a05e367308207b12da8d0f606a9fdc9cc59677e5979e680f7faedfa79b58d46bb3a2f15d1014f02d057def3004000969c06b670c66b81804348b326487ed67632ec322c55c677f2e26ba608ca05013cf8496b7cbce6dddd5514800f8104aa6147c1b724a4431f320fb4452051c52ac4f875ee4bd0d8484047c03a2ab4ee6e3fbbe9ee7921def5e3a14fc1c68bbfce9e0a465f429fac6ca07e51fdcafd42ec4b1954efca625a870a558f45259ad0dc4b51ac4b7c61ee09c24ea2eedcddbc1710b09a7d10dcd03b7753afa69de76dfdee6d255c05393bd1e8ecedc961418dce8103eb7c30c0bbaf78aefdda2ca0655dd8750852d9bfa83f8efde6aed677cd1dfe392bbcb0bbd89d65ffe5c33120b9e95c05a0950b469f096c5ce2bc326a8e1c04f3fe422be6887dbcf4e1822808f57424cce0bc864cd7addf4b9101a6efe0d8a163ca41667a1877afbe6a2d08b2c850e54a4d21cc098d41311da6ed31474a86936b96a8926a5c53adead07cb79c93d9a05ca2f065355598e4d7c81457a1ba5f256d01e49e43ae22515c4e141450c0412bb71f0eaf928068b737a8a402770e6de0c9c6c58183ec25c992f6779529f98589d2c355e1c816241688a9cd981ea595970f19682c5ddc9461400dd5bf067468c52304c7d18b55dea512448b97bf502f86e1011b0c5c66dcd0deb331dc90d7f1d49de2deabe02b99fe5eedba9268414cf19180ef739cb1f4854f83252f1332229f73c9aa776acfbcf6d2b6f46d5b84a1038f6f1cc4b0c6b794fbee5e668afa532c1058528efb7bfc9eb4306c5e3f67231b8e9b4fadca0c3f01523fdd624f1d7977f04a6575b3c6a1ac32b2dd20043992bafb2da4524e113e6ed9fe9cf3eb451452fcd315021c50ed4ba8c8daf66d19da94da7bc8d1767458693cb6bb2497a240fb2c1372baf9c52e65aa0f646c8327468417e94b64761a835b22edb17e17884b662a3533727861b97ade12f608a9d45acd5b99e7fa24e75823daddda1f5d497a8e0cfd5538f4962cec317a388a9d74a414bf017df9b071498fe4e40b17478dee39cd4043aab8b9175b32dc8e3f1f7d231b298dad40f66735ef8da4135573449cae9ddcfd4161967443383e5002db3a42e339f0ea8757963700a68954ebdb49630e38eb74460092afa472c54f9fe4498b57178c89133aaaf49b9c8e5d0cc38d3f9823d164ff46099b3cf80116452f5d0ba293bd0b114e513ca191f5e40dd9fd85986b8038faf1477d9b4196310781f74a18414eff0b8a9a1de22d3ae0d3ebe14ea775970205b92443a40a4e6dab156043a4c56d79ecd37174eccfc7082724d41c80d139b544e1b74ba102002f08c89e1ba6fcd2d7addecc1f945b5ada929c7374b7704c0f1d5fbdcc2febff257bd9bc7ed79ff19ba8e716f7792a458e894aeea06b33cdb1108a2928713888e68225b56eb7f082c1d796de72ba41ba71a828950705de8f7f75571a8dce994b3c320b08dbabc7f5f95b1e0607c4511ded667733ff75e801d265dd263b59553211143c0ac0540f43e7c0acdd638e57b491d077e62e2949e638793ed49943895720c55e108ed1290344f1a14a9edac01d20297751fc8f7c4e3465e10b481f5886634f928b0115077844e9b1a8dc7979affcbbf1d5235a70a3cdfa777728c2129999203b0efccd32c534dc11f825a5d3e7a0acb88ed843ff2ae33db3751da79face71c50c78f07be759bf3662016259f9f040a4ddcf1187a01d4e40ecc17c86d364147bc77084f23392d7591a82708e6a713cd1e1aa79afb02ac857e158c91789eb211b08162b8547f22272b0d844b6eea06fe0a611b98fd34054a39405950dd47b31b7c836252afc689945caf4e589c636a997b7586d8992d3efde13ae2393e89988aeb1b58be87660b82d716a6103d504968922a449d9452fe9089c438a66ad5e3b15dab0147a6e7272ed074c416e7acbc9409fabf1cae2654a698258dd719101ffb53ca35267066c58c0c181bfe98ad624e99059939f08bbe558c615d5f4eb93fd1058d3c3ae6f9b6f8956c12b5507fa65cad7aa720aea7c47ae5ad251da6ea2cd009c4317bf10a4c318ef026afad83bac119e65fea87f7708d4ae3bb67bbc0a6860197f54257790d6f8e2cae44f34e0a3d28fb1e8dd6354ee6a9e54c31475442392d61cf7d0874ff7006e3025c5880b5e6e5cd1233f209c413de76be865b8de2cf9c2618186bc4e1d40658e4a4aba7ea5f9ee13ad2aeaee3d95228df3a47c1ef3455ea5d16da24c62614d8a40c8ecd12e3698b868c7c387685ac0f97dea923e27f1e00e23510662a857efc7e7a50dc7e1c4664a0efd7165c8e395e335d6223deb79cd5968712a77162acafe9dee4f686873f53302d2842cca2a247716120b9c1ae596959a88de85c6b32efffb503d099b7c723a676212f62f5cd3eafac0c8134f46d2c4bc033f39975c57487e52ac713a4220643adca35602d3cd70f7f3610d35d5c2afb6762dce13236176d2507b88c986b34f265e6156384e6a6feb0de9c7e453c25c841530b1150decf8b2018e7f0fab805b5bea7eba2b2f5149aa2094fad06ae64c4d0b98dfd3a33e4ac4e155f98209c8d3e822a40b8f0a02e1151daecff96d697206e1bdc2485818921c5d16b9efd5efd85582976ba444b917a2c9b40dec374dc43dafb9e5fa193205b06c8a011ecd039a9df7925a063d5c85d4bc213e7fa9fa8b740a650bab93d87b6dfc0dccd4a3d23be2fa4519562ad8ed918688d7161a28801b78333d5a3b95857aec17a2263d89df6edfb7c88d62f6b965a8af781f752c87b5d6d584e436a81459748b9253eef2c48f9e6889a319b435b91054ac2777e672cc4148fb17c4548c5a82ca85f7c52e564fbe311226da38376abee47999225977fe96fad1df8e0f96c5f3074e92bcfe35676f91785f70e03dd221a35b80abef981b6c8e42d21b31bc43835c410c6ed0e5f5cc83a0b381dff5c581ebbe5a9c891df85fb27a0371d4e6314afe52a2891e52506936ab2ce6addba791a1394cc6f1e7a8ddd28f6b1274dfdd2bd4127b480970035e4cfb22e1841a6b694ab6fbe02e84205946b09b6bcca7cf8f3bc7376dbca8b65ff9a2a1ce21cb1fe91a01113349a3a88546a87aa3b419b67e58b70eafd39147de009b971b3513700d2a3e94074bad31744260207d29de5e7270903d85bf3b85273b9e687919deeb7cb1770c21485a36b9157eb46d1752230978bd1f1caae845516e13263b3b6b9f661ee56a8e5ac9de2d43f8c555d93388a8c87ff50c5cc1da108d292eb3790a578d0657956480ba38a6a828d4b7b85e907f92de9ea0102974bec391159f8b29b0a4919116ce1e865b229b96c415f7b1454109b5440debaf7b5ab6ebc86ee0c0f31a11e2a565e6a368801b4bb819de5fdc3511b1e5cc214dd12797fdbfbd5b1fff7125a57c6295577c9b3e1f9e612b49fcc162cdc0c3b417a6c565d5ba9d4ce1c57e5e3434a1e0c38a732141fbb9603d2836a20ad6010b9f2640f0ebec34bb57e36a8c44ef5b73114101c4fbb5c920e57ffb0e480c97a1e8a4c3ce489e7d02fd9a80b1ef3a37113445ea32e73140f487daf949861ade5c2a557cd36ca88d5ba9d9ace18fd8489dc661788ec84fbbc1b657b6084422f36ec8a896f6d15abc0e3fdc3721e7f422941197af947160d7c8d37fe31f5a4688291059a0304c4289ec716fe52bb9558513dc6abdb9da566a2ce6ac7a2a885645256d458d35c171fd4d62702abaa3d79e85ea45752c9579d804a5b3fb69a39fa39a4e12f9f97abc9857b1808091915dd4653cb95f696a19f17a9fa25bb232144c488a24ff3cf1a17d56f1cae77fbd694ae1ad77593f68468e837e2cc4d000be53f4312dc01e4e28a89407cfca70eed0c8e8b37cf8cf5cfd61139882b77c088df8cc776f8dfce6dc3ae48c4ecab20a293a1cc242ea7469b36a24d28dd547e95df7e0c7933f8dd4b5530b1470f4fa5ab9648204b09c244e0f5da711273163ef3eabd9e5a5621426e484cf31c381f49c4b6da1a03deaf7164e849a6db24cc85e6cb45d1938d34dfdeb7ab5b34f305a2b7b8ee360ca6f1fe5b959db107ae8a24bd6006e592ed9d1e01592d5cc4ccb5f9417b00e039b8985fb164b31d50a38aaafaf345f5ffad39f5a48f2e35b33b952ff081f5ed3f4bb22cd3274f7e731135e30326efedafa7cf17f0aa41b2a4334ecc90132d3a4adbf960007992f9c32d49dc4ca55f95c082d4408d7274e77983da77665a5f65cb1480cd7670707703de07c55bbf215b9db13f58f1959811309a85df96b234f4813adac9b480883e04db19773cede52c287a7c02e06ff4cea50eb0a7b8b3eba6a3bb581888d1691344b13fed15bc503a844a0871182cbb48a7cb475524ab2bd1be6695dcaef056a4e2dd2ca0133ed5645640c339593508234ed633c03967de9a3046bba7f3de0018fac98b7750ad8b938dc9ddbc8731502b4bd5c777b9473c7cfd2bca2209cd6482c82541082888579b79a925ae0b7248a0d0d2b1f9fd24345f60e8f44003210c5623e521498873230b773250764561fe667cd5dccb4b5464a6998b45747e9378bc7a56dbd430e26a01831e28007fd55fb9fc7ec77756250403fd234c3bee0dbcc027202e1461a00f30956abc3c86fbeb887f1cf72d92a212fcf19447e0f8094f8246fbcda7146b3ae73484f9f4d189efa4ec8cc6e01bdaf8bc91cc61006bd8a7e78ae21ecc9ce7f6fe72b5a04a930211e60febb02cf9944797fa014fd857396633742f9bc034b172a2ca8e3503a04d491b918dfdcf33b4faf9830d875e6ffb8220f0a344c9afa76457de3914070d349f47284a7f370d98cdd69d401eceb261a272ae5214bb6276e586c32e7e286a46b080cae77f05cf02925b6a291a8a86451913c5ad6898b53305d7ec95c8c307ae7c41593997e8f276b92fa26930ac1be3230614f6fa8a2b5249f794269946cd9bf03d7920502d4f31c2a3ca1b7dd96532e2a05d7719c27a9c2af3b13728f0cb0c33700bbc501e96578d3e8c57979f53c67a6ea9b4f00a54728fc294c0bc488b39bbe3c585c86dba319575b33de50a7e6483b2c2365913957b70c93f761cee72e0b0116b65597526ec5dc202f37316bb038925c407a11bec1affd549396a317def4aa6ddf9ff227269b5f3dda557e984288b4de6ab053aad28e12363ff1067ce64ba373fa15b0d8d8b4e18033641acd87647d408683794f36dd34220a5c126fb6dba4a3df5b739669e4893fd68fb1d28b0fba35df78782449466f89c2d5263cf9e7867fa097d920093dd361ea84dcca107b7771ae4a0e8868e0a36f97015b7ed7c1e7edbdc7eb3d167cf47235e489304322ec852ca2878b596cd4c5cefc9794bbdd3c3831f7106f6befb9beca5772c11d76267653d05e881c9630470dcddecf1523ce73476704b6eb929294dea352aebf3f6364aa159f94024432893eb3e64efce2e702199bdaf48997f7dec8bb1fafc3fb0d7419979bb25262ce33ccf300a12a69c0832bb3543ce0f07e179911a524abd7181a2ab91039dbd50fa78c79a297373cd77cabd9b1105a5d582ffd4ff7c30764c45195e6de7e57479c0cda370d4befa5c47cfc89521393af5dd43607e185051912e79c9b5fbfad9310312326cab6a71dc8d3"], 0x1386)
listen(r0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
syz_extract_tcp_res(&(0x7f0000000000)={<r4=>0x41424344}, 0x1, 0xfea)
syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r4, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaae8154549787084ec8198dd60038c08001c06ff6138bb26f597b3cf88ed31d3964ebab6fe8000"/58, @ANYRES32=0x41424344, @ANYRES8=r0, @ANYBLOB="70c2fff7907800040506000000060000"], 0x0)
write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="01130403480007"], 0x7)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

6.118939156s ago: executing program 0 (id=2220):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4080, 0x22)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0xc2)
io_setup(0x7f, &(0x7f0000000100)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2, r5}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffff7f, 0x0, {0x0, 0x0, 0x74, 0x0, {0x4, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x804)
r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d000609058202", @ANYRES8], 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r7, 0x0, 0x0)

6.113758479s ago: executing program 1 (id=2221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000200)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x20, 0x3, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x401, 0x3}}], 0x1, 0x0, 0x0)

5.077261765s ago: executing program 1 (id=2223):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])
kexec_load(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a198", 0x3e, 0x5, 0xffffffff}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=ANY=[@ANYRES32=r1], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={r3, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x3, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000db454c0000000000003f5d03dbaa0000000000000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf250500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900010000005d000000"], 0x28}}, 0x4041)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.575985161s ago: executing program 1 (id=2224):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0x2, 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x5, 0x0, 0x0, 0x9, 0x1e, 0x0, 0x8, 0xe})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x20, 0x11}, {0x7, 0x9, 0x1fb, 0x2, 0xc, 0x40000000081, 0xfc, 0x1}, {0x800, 0x49, 0x2cb, 0x1}, 0x85, 0xfffffffc, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x2b}, 0x5, @in6=@mcast1, 0x3500, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
write$tcp_mem(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
ioctl(r4, 0x4010744d, &(0x7f0000000180))
syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)

4.101072018s ago: executing program 4 (id=2227):
openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80941, 0x0)
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/208)
openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xf, 0x31, 0xffffffffffffffff, 0xfbffc000)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000b09000/0x4000)=nil, 0x4000, 0x15)

4.01818118s ago: executing program 5 (id=2228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0) (async)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000100)=""/172})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x840)
writev(0xffffffffffffffff, &(0x7f0000000380), 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)

3.512592634s ago: executing program 5 (id=2229):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000040)=0x100000001, 0x4)

3.43210307s ago: executing program 5 (id=2230):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x24008051, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) (fail_nth: 3)

3.326983968s ago: executing program 1 (id=2231):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "e8a293cfe800b760d8b4534fa6edeeb2"})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdee2f000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280), 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e64, 0xa, @private1, 0x106}, 0x1c)

2.935645567s ago: executing program 6 (id=2232):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')

2.850926579s ago: executing program 4 (id=2233):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x100000000, 0x200)
socket$inet_tcp(0x2, 0x1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x0, 0x428, 0x428, 0xd0, 0x2e0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'pim6reg0\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@ipv6header={{0x28}, {0x2, 0x8, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0)

2.526708727s ago: executing program 5 (id=2234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) (fail_nth: 3)

2.092091298s ago: executing program 6 (id=2235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x63, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000400404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200"], 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x42040)

2.003766792s ago: executing program 1 (id=2236):
r0 = syz_ublk_setup_io_uring(0x5870, &(0x7f0000000000)={0x0, 0xefb5, 0x8, 0x3, 0x395}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xffff8001, 0x4, 0x100010, r0, 0x20000000)
mmap$IORING_OFF_SQ_RING(0x0, 0x33f, 0x1, 0x4000010, r0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000140))
r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = getpgrp(0x0)
syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x38, 0x0, <r5=>r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x208, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0xa0}}}, &(0x7f0000000280))
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000002c0)={0x2, 0x10, 0x5, 0x99, 0x9})
mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1000000)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x7}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0xe}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x8}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e23}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x890d}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e24}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0xf9}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x9200}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r7 = socket(0x1e, 0x5, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x7, 0x9, 0x5, 0x400, r6, 0x0, '\x00', r8, r6, 0x4, 0x2}, 0x50)
syz_pidfd_open(r4, 0x0)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
write$cgroup_pressure(r0, &(0x7f0000000840)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x7ff}, 0x2f)
mkdir(&(0x7f0000000880)='./file0\x00', 0x20)
syz_ublk_setup_io_uring(0x5ef0, &(0x7f00000008c0)={0x0, 0x16e9, 0x400, 0x0, 0x97, 0x0, r0}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0))
ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000a00)={{0x7, 0x5, 0x0, 0x80000000, 0x9}, [{0xc, 0x100000, 0x6, 0x3}, {0x7ff, 0x75e6, 0x7, 0x1}, {0x2, 0x16, 0x3, 0x2}, {0x6, 0xa, 0xa, 0xe}, {0xc, 0x1, 0x0, 0x8e}, {0x200, 0x7f, 0x1, 0x4}, {0x3, 0xfffffffffffffff7, 0xfd, 0x6}, {0xffffffff, 0x5453, 0x9, 0x7d}]})
ptrace$peeksig(0x4209, r4, &(0x7f0000000b00)={0x0, 0x0, 0x2}, &(0x7f0000000b40)=[{}, {}])
sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10, 0x3f8, 0x8, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000000d40)={0x8000000000000000, {0x0, 0x7f, 0x9, 0x5, 0x6ca}})
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e)
r10 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
get_robust_list(r4, &(0x7f0000000fc0)=&(0x7f0000000f80)={&(0x7f0000000e80)={&(0x7f0000000e40)={&(0x7f0000000e00)}}, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={&(0x7f0000000ec0)}}}, &(0x7f0000001000)=0x18)
get_robust_list(r4, &(0x7f0000001140)=&(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={&(0x7f0000001040)}}}, &(0x7f0000001180)=0x18)
clock_gettime(0x0, &(0x7f0000002e40)={<r11=>0x0, <r12=>0x0})
recvmmsg$unix(r10, &(0x7f0000002d40)=[{{&(0x7f00000011c0), 0x6e, &(0x7f0000002240)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, &(0x7f0000002280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000022c0)=@abs, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/77, 0x4d}], 0x1, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002500)=""/106, 0x6a}, {&(0x7f0000002580)=""/180, 0xb4}], 0x2, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002840)=""/150, 0x96}, {&(0x7f0000002900)=""/108, 0x6c}, {&(0x7f0000002980)=""/94, 0x5e}, {&(0x7f0000002a00)=""/166, 0xa6}, {&(0x7f0000002ac0)=""/229, 0xe5}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/21, 0x15}, {&(0x7f0000002c80)=""/47, 0x2f}], 0x8}}], 0x4, 0x0, &(0x7f0000002e80)={r11, r12+60000000})

2.003551207s ago: executing program 5 (id=2237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r6, 0x2007ffb)
sendfile(r6, r6, 0x0, 0x1000000201005)

1.015108322s ago: executing program 0 (id=2238):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (fail_nth: 3)

889.977342ms ago: executing program 5 (id=2239):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x9, &(0x7f0000000240)=[{0x1, 0x64, 0x3, 0xf78}, {0x5, 0x6, 0xd, 0x1}, {0x5, 0x7f, 0x2, 0x6}, {0x0, 0x0, 0x9, 0x3}, {0xe20, 0x7, 0x9, 0x3}, {0x6, 0xb7, 0x7, 0x10000}, {0x9, 0x5, 0x6, 0x7fffffff}, {0x2, 0x2, 0x6, 0x3}, {0x8004, 0x57, 0x2, 0x4}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x47)
r1 = syz_open_dev$video4linux(0x0, 0x73, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x6, 0x6, 0x1, 0x5}})
socket$l2tp(0x2, 0x2, 0x73)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_create(0x3)
futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)

881.288898ms ago: executing program 4 (id=2240):
setns(0xc9, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f070f01f3b99b010000b804000000ba000000000f30450f01df48b806000000000000000f23c80f21f835000050000f23f8b996080000b80a2a0000ba000000000f3066b8a3000f00d00f20c035000000200f22c03e67d9eac744240056000000c744240217e60000ff1c24"}], 0x1, 0x41, 0x0, 0x34)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x32}], 0x2)
setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000200)="01000000000000000000e787df0000000000000000dc050000000000000000010000000000000000000100000000040000000000000072c2e4e50000000000000000000000000000000500"/84, 0x54)

627.529393ms ago: executing program 0 (id=2241):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000100)=[@decrefs, @request_death], 0x0, 0x0, 0x0})

627.103979ms ago: executing program 4 (id=2242):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket(0x11, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18)
read$dsp(r8, &(0x7f0000000000)=""/125, 0x7d)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r9=>0x0}, 0x8)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
accept4(r10, 0x0, 0x0, 0x80800)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000900)={r10, &(0x7f0000000000)='\x00', 0x389000, &(0x7f0000000180)={@align=0x3, {0x5, 0x0, 0x9, 0x1}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000800)=0xee35})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x4}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x72, 0x2, 0x2, 0x3, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x3, 0xc7, &(0x7f0000000400)=""/199, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xb, 0x3ff, 0xd}, 0x10, r9, r0, 0x9, &(0x7f0000000640)=[0xffffffffffffffff, r1], &(0x7f0000000680)=[{0x3, 0x5, 0x0, 0xc}, {0x1, 0x3, 0x1, 0x3}, {0x4, 0x3, 0xe, 0x6}, {0x2, 0x5, 0xc, 0x4}, {0x2, 0x1, 0x3, 0xa}, {0x1, 0x5, 0xe, 0xc}, {0x4, 0x1, 0x3, 0x2}, {0x1, 0x2, 0x3, 0x4}, {0x3, 0x3, 0x2, 0x8}], 0x10, 0x9}, 0x94)

568.523301ms ago: executing program 1 (id=2243):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf26}]}, 0x30}}, 0x20000000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='off', 0x3)
write(r3, &(0x7f0000000180)='on', 0x2)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil)

477.109703ms ago: executing program 0 (id=2244):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x9ac79000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x3, 0x3, {0x2, 0xfe, 0x1}, {0x1, 0xf0, 0x4}, 0xff}], 0x20)

328.320618ms ago: executing program 0 (id=2246):
mkdir(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e)
ioctl(r1, 0xc138fd02, &(0x7f0000000000)="0400000000000000")
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6)
sendto$inet6(r1, &(0x7f0000000100)="d6c549c364637ec762fdec27c7ce80e4e7b87f5960bf2ad11a3347e588ca56cbe5fac5482c4a29c256c774fc8e7df96122981acbe9e4b7fe8e43dda41eb46bdbc76de4b8c64cb096f6b152f9569614595c5d464e1743ede5667f9cec76917ded150ae7707f5c4641446baafe5e3cf820e8d4de3b5246293e20e307202bc8955089585178154fdac81fe36cb849e7721f1010adaf305b99b034cfec45b7d99d57c400f72f03bd7a3191239892da3b054e9f41e735e1a56efffd00dc", 0xbb, 0x4080, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @mcast2, 0x4}, 0x1c)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
open(0x0, 0x14927e, 0x68)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000004c0)={0x3, @pix={0x80000000, 0x7fff, 0x32315258, 0x8, 0x120, 0x3, 0x1, 0x0, 0x0, 0xe4516a7c27833f1f, 0x2}})

0s ago: executing program 0 (id=2247):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0xb695, 0x0, 0x3, 0x3}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0)
write(r7, &(0x7f0000000140)='9', 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r5, r0, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
sendmsg$802154_dgram(r7, &(0x7f0000000900)={&(0x7f0000000300)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f00000008c0)={&(0x7f0000000800)="23b2e83fd39f19e515426d3f336a7ef1524345358ae230c1a162d10c341dcd36de051fee2290202989c105ac3091891c2cdb67eb1205fe098c2e246764d4ce6ed66d75aaf67b44f1cd54f07d5645799089231bd3a4666c0c7d88c92571446c9d9f27e029185e9170cc8c5103b62f6ee929631573d0d52443af852477a6969a5444adff890ec83a508739facd1157179d623c341a72f70a07f7cdd947d35714d75cf37204e0874ba6bb844e7107b71014048e2bce066e162b", 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x70, 0x0, &(0x7f0000000600)=[@acquire, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/152, 0x98, 0x1, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/141, 0x8d, 0x2, 0x18}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @release], 0x0, 0x0, 0x0})
msgctl$IPC_SET(0x0, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000100)=[@decrefs, @request_death], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

 0 0
[  435.258259][T12621] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  435.271033][T12621] Node 0 DMA32: 289*4kB (UME) 96*8kB (UME) 57*16kB (UME) 175*32kB (UM) 246*64kB (UME) 165*128kB (UME) 50*256kB (UME) 32*512kB (UME) 14*1024kB (UM) 16*2048kB (UME) 226*4096kB (UM) = 1047284kB
[  435.289977][T12621] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  435.301499][T12621] Node 1 Normal: 0*4kB 2*8kB (UM) 6*16kB (UM) 5*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3944336kB
[  435.317885][T12621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  435.327478][T12621] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  435.336872][T12621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  435.346558][T12621] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  435.355879][T12621] 89956 total pagecache pages
[  435.360556][T12621] 1 pages in swap cache
[  435.364709][T12621] Free swap  = 124408kB
[  435.368979][T12621] Total swap = 124996kB
[  435.373137][T12621] 2097051 pages RAM
[  435.376967][T12621] 0 pages HighMem/MovableOnly
[  435.381641][T12621] 432278 pages reserved
[  435.385793][T12621] 0 pages cma reserved
[  435.465978][ T5708] usb 6-1: Using ep0 maxpacket: 32
[  435.506280][ T5708] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  435.533006][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.554697][ T5708] usb 6-1: Product: syz
[  435.561972][ T5708] usb 6-1: Manufacturer: syz
[  435.568640][ T5811] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  435.583649][ T5708] usb 6-1: SerialNumber: syz
[  435.592618][ T5811] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  435.605154][ T5708] usb 6-1: config 0 descriptor??
[  435.616913][ T5811] ti_usb_3410_5052 2-1:2.0: device disconnected
[  435.709187][ T5721] usb 7-1: USB disconnect, device number 37
[  435.712753][T12627] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  436.326830][ T5708] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  436.358884][T12638] overlayfs: failed to clone upperpath
[  436.389999][ T5708] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  436.413882][ T5708] usb 6-1: USB disconnect, device number 46
[  436.419935][T12640] FAULT_INJECTION: forcing a failure.
[  436.419935][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.450243][T12643] netlink: 'syz.4.1758': attribute type 4 has an invalid length.
[  436.461794][T12643] netlink: 'syz.4.1758': attribute type 4 has an invalid length.
[  436.482405][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.0.1757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.482434][T12640] Tainted: [L]=SOFTLOCKUP
[  436.482438][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  436.482445][T12640] Call Trace:
[  436.482449][T12640]  <TASK>
[  436.482454][T12640]  dump_stack_lvl+0x100/0x190
[  436.482472][T12640]  should_fail_ex.cold+0x5/0xa
[  436.482487][T12640]  __kvm_read_guest_page+0x186/0x250
[  436.482502][T12640]  kvm_fetch_guest_virt+0x128/0x1a0
[  436.482516][T12640]  __do_insn_fetch_bytes+0x5e2/0x7b0
[  436.482533][T12640]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  436.482549][T12640]  ? find_held_lock+0x2b/0x80
[  436.482559][T12640]  ? process_measurement+0x4c8/0x2350
[  436.482571][T12640]  ? process_measurement+0x4c8/0x2350
[  436.482582][T12640]  ? down_write+0x146/0x1f0
[  436.482600][T12640]  x86_decode_insn+0x3ca/0x6da0
[  436.482613][T12640]  ? process_measurement+0x1f4/0x2350
[  436.482629][T12640]  ? __pfx_x86_decode_insn+0x10/0x10
[  436.482641][T12640]  ? vmx_get_l2_tsc_offset+0x150/0x280
[  436.482654][T12640]  ? init_decode_cache+0xd/0x2b0
[  436.482665][T12640]  ? init_emulate_ctxt+0x43c/0x700
[  436.482676][T12640]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  436.482690][T12640]  ? vmx_read_guest_seg_ar+0x87/0x1b0
[  436.482708][T12640]  x86_emulate_instruction+0x1052/0x1df0
[  436.482726][T12640]  ? __pfx_emulator_get_segment+0x10/0x10
[  436.482740][T12640]  handle_ud+0x100/0x5b0
[  436.482756][T12640]  ? __pfx_handle_ud+0x10/0x10
[  436.482770][T12640]  ? rcu_qs+0x2a/0xe0
[  436.482785][T12640]  ? rcu_note_context_switch+0x174/0x19c0
[  436.482807][T12640]  ? __lock_acquire+0x49f/0x1a40
[  436.482821][T12640]  ? __vmx_complete_interrupts+0x129/0x570
[  436.482839][T12640]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  436.482855][T12640]  handle_exception_nmi+0xd0c/0x1af0
[  436.482873][T12640]  ? __pfx_handle_exception_nmi+0x10/0x10
[  436.482889][T12640]  vmx_handle_exit+0x4d6/0x1ef0
[  436.482908][T12640]  vcpu_run+0x35ab/0x5de0
[  436.482936][T12640]  ? __pfx_vcpu_run+0x10/0x10
[  436.482958][T12640]  ? complete_emulated_mmio+0x102/0x710
[  436.482977][T12640]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  436.482993][T12640]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  436.483013][T12640]  kvm_vcpu_ioctl+0x730/0x1700
[  436.483027][T12640]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  436.483040][T12640]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  436.483054][T12640]  ? do_vfs_ioctl+0x226/0x13e0
[  436.483071][T12640]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  436.483087][T12640]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  436.483109][T12640]  ? __fget_files+0x215/0x3d0
[  436.483120][T12640]  ? hook_file_ioctl_common+0x140/0x440
[  436.483132][T12640]  ? __fget_files+0x215/0x3d0
[  436.483146][T12640]  ? selinux_file_ioctl+0x13b/0x290
[  436.483162][T12640]  ? selinux_file_ioctl+0xb6/0x290
[  436.483179][T12640]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  436.483192][T12640]  __x64_sys_ioctl+0x18e/0x210
[  436.483210][T12640]  do_syscall_64+0x115/0x870
[  436.483224][T12640]  ? clear_bhb_loop+0x70/0xc0
[  436.483237][T12640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.483248][T12640] RIP: 0033:0x7f434719e0d9
[  436.483258][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.483269][T12640] RSP: 002b:00007f4347fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  436.483280][T12640] RAX: ffffffffffffffda RBX: 00007f4347425fa0 RCX: 00007f434719e0d9
[  436.483287][T12640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  436.483293][T12640] RBP: 00007f4347fb3090 R08: 0000000000000000 R09: 0000000000000000
[  436.483299][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.483307][T12640] R13: 00007f4347426038 R14: 00007f4347425fa0 R15: 00007fffbdf1f788
[  436.483321][T12640]  </TASK>
[  438.407345][T12655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1761'.
[  439.215852][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.647388][T12684] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1771'.
[  440.751227][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'.
[  440.884348][ T5707] usb 7-1: new full-speed USB device number 38 using dummy_hcd
[  440.946048][T12699] tipc: Can't bind to reserved service type 2
[  440.960059][T12699] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  441.055981][ T5707] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  441.064574][ T5707] usb 7-1: config 0 has no interface number 0
[  441.072744][ T5707] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  441.083662][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.092112][ T5707] usb 7-1: Product: syz
[  441.096739][ T5707] usb 7-1: Manufacturer: syz
[  441.101432][ T5707] usb 7-1: SerialNumber: syz
[  441.109651][ T5708] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  441.110640][ T5707] usb 7-1: config 0 descriptor??
[  441.314019][ T5708] usb 1-1: Using ep0 maxpacket: 32
[  441.320432][ T5708] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  441.328788][ T5708] usb 1-1: config 0 has no interface number 0
[  441.335029][ T5708] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  441.341941][T12686] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1772'.
[  441.354743][ T5708] usb 1-1: config 0 interface 184 has no altsetting 0
[  441.364770][ T5708] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  441.373961][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.382995][ T5708] usb 1-1: Product: syz
[  441.387389][ T5708] usb 1-1: Manufacturer: syz
[  441.392065][ T5708] usb 1-1: SerialNumber: syz
[  441.398354][T12686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.410488][ T5708] usb 1-1: config 0 descriptor??
[  441.417229][T12684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  441.426255][T12686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.440647][T12686] bond0 (unregistering): Released all slaves
[  441.505213][ T5707] asix 7-1:0.251: probe with driver asix failed with error -71
[  441.533094][ T5707] usb 7-1: USB disconnect, device number 38
[  441.630790][T12684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  442.597422][ T5708] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  442.608265][ T5708] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  442.618839][ T5708] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  442.632219][ T5708] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[  443.464752][T12735] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1784'.
[  443.885109][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'.
[  443.894297][T12745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.901834][ T5721] usb 1-1: USB disconnect, device number 51
[  443.972218][T12745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.798278][T12750] vlan3: entered promiscuous mode
[  444.814870][T12750] hsr0: entered promiscuous mode
[  444.848053][T12750] vlan3: entered allmulticast mode
[  444.858238][T12750] hsr0: entered allmulticast mode
[  444.863981][T12750] hsr_slave_0: entered allmulticast mode
[  444.940524][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  445.026447][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'.
[  445.048164][T12763] hsr_slave_0: left promiscuous mode
[  445.182332][T12771] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1799'.
[  445.213121][ T5708] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  445.263060][ T5811] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  445.314134][ T5690] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  445.353157][ T5708] usb 2-1: device descriptor read/64, error -71
[  445.424612][ T5811] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  445.436451][ T5811] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  445.449793][ T5811] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  445.459900][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.468986][ T5811] usb 7-1: Product: syz
[  445.473471][ T5811] usb 7-1: Manufacturer: syz
[  445.478573][ T5811] usb 7-1: SerialNumber: syz
[  445.483573][ T5690] usb 6-1: Using ep0 maxpacket: 8
[  445.493815][ T5690] usb 6-1: config 6 has an invalid interface number: 222 but max is 2
[  445.503304][ T5811] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  445.511929][ T5690] usb 6-1: config 6 has an invalid interface number: 48 but max is 2
[  445.522099][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.532691][ T5811] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  445.541758][ T5690] usb 6-1: config 6 has an invalid interface number: 13 but max is 2
[  445.554057][ T5690] usb 6-1: config 6 has no interface number 0
[  445.560652][ T5811] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  445.569652][ T5690] usb 6-1: config 6 has no interface number 1
[  445.582257][ T5690] usb 6-1: config 6 has no interface number 2
[  445.590171][ T5690] usb 6-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  445.604309][ T5708] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  445.626908][ T5690] usb 6-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  445.642882][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  445.654932][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  445.669527][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  445.681126][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  445.715462][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  445.743264][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  445.759247][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.769246][ T5708] usb 2-1: device descriptor read/64, error -71
[  445.777455][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  445.788769][ T5690] usb 6-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  445.799998][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  445.811387][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  445.822159][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  445.834229][ T5690] usb 6-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  445.845392][ T5690] usb 6-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  445.856360][ T5690] usb 6-1: config 6 interface 222 has no altsetting 0
[  445.875277][ T5690] usb 6-1: config 6 interface 48 has no altsetting 0
[  445.883266][ T5708] usb usb2-port1: attempt power cycle
[  445.889114][ T5690] usb 6-1: config 6 interface 13 has no altsetting 0
[  445.908313][ T5690] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  445.919839][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.928330][ T5690] usb 6-1: Product: ⿃聪ﻫ㑬덀仡₮㜘ꧠ姆쮿夻㧺髩锖㯚聺ᡅ㦓큉罪᭶욷罻棱麓埤䜂㏗Შ⽰鉇妷脏羢顱䈖뢨㈸캲䡹ଥ芵ᙝ豝㻏䣱不䛡釥蟡⷟淍ꩉほᙪ푉荧笃⟽1籘뚘∫덱䇴☭빴ሾ쾖剁๹ȼ㎩ൽ냡ﳶ덟鼟霃䔧㺓ꏾ峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  445.967778][ T5690] usb 6-1: Manufacturer: ⠁
[  445.983423][ T5690] usb 6-1: SerialNumber: ဇ
[  446.243545][ T5708] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  446.291579][ T5708] usb 2-1: device descriptor read/8, error -71
[  446.533517][ T5708] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  446.549426][ T5690] usb 6-1: USB disconnect, device number 47
[  446.573539][ T5708] usb 2-1: device descriptor read/8, error -71
[  446.684553][ T5708] usb usb2-port1: unable to enumerate USB device
[  446.800187][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.809539][   T30] audit: type=1400 audit(1786228645.836:1067): avc:  denied  { mounton } for  pid=12785 comm="syz.0.1803" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  446.809581][T12786] binder: Bad value for 'max'
[  447.122948][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'.
[  447.278482][T12797] fuse: fd is not a fuse device
[  447.353537][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.365910][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.377511][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.390108][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.041420][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.370139][T12813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.401805][T12813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.622311][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'.
[  448.843206][ T5811] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  449.026097][ T5811] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  449.045649][ T5708] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  449.067321][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.096178][ T5811] usb 6-1: Product: syz
[  449.115716][ T5811] usb 6-1: Manufacturer: syz
[  449.135512][ T5811] usb 6-1: SerialNumber: syz
[  449.233728][ T5708] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  449.264822][ T5708] usb 1-1: config 0 has no interface number 0
[  449.291762][ T5708] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  449.313788][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.340765][ T5708] usb 1-1: Product: syz
[  449.364820][ T5708] usb 1-1: Manufacturer: syz
[  449.381025][ T5708] usb 1-1: SerialNumber: syz
[  449.405483][ T5708] usb 1-1: config 0 descriptor??
[  449.692962][T12825] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1817'.
[  449.719297][ T5708] asix 1-1:0.251: probe with driver asix failed with error -71
[  449.766419][ T5708] usb 1-1: USB disconnect, device number 52
[  449.919002][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  449.952108][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  450.010838][ T5811] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  451.195385][T12779] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110
[  451.224913][ T5811] net_ratelimit: 6 callbacks suppressed
[  451.224941][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.240173][T12779] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[  451.419709][ T5690] usb 7-1: USB disconnect, device number 39
[  451.499119][ T5690] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  451.614409][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.731172][ T5690] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  451.769194][ T5690] ti_usb_3410_5052 7-1:2.0: device disconnected
[  452.005053][ T5707] usb 6-1: USB disconnect, device number 48
[  452.620267][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.484559][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'.
[  453.683973][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.840817][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'.
[  454.613267][T12895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1822'.
[  454.631824][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.728128][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.591541][ T5690] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  455.655883][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1840'.
[  455.751764][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.784665][ T5690] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  455.838422][ T5690] usb 2-1: config 0 has no interface number 0
[  455.879181][ T5690] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  455.932449][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.969784][ T5690] usb 2-1: Product: syz
[  455.995328][ T5690] usb 2-1: Manufacturer: syz
[  456.020310][ T5690] usb 2-1: SerialNumber: syz
[  456.064682][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'.
[  456.089511][ T5690] usb 2-1: config 0 descriptor??
[  456.391542][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.428377][   T30] audit: type=1400 audit(1786228655.448:1068): avc:  denied  { write } for  pid=12915 comm="syz.6.1843" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  456.469300][   T30] audit: type=1400 audit(1786228655.448:1069): avc:  denied  { link } for  pid=12915 comm="syz.6.1843" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  456.534660][T12904] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1839'.
[  456.794776][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.392754][ T5690] asix 2-1:0.251: probe with driver asix failed with error -71
[  457.416716][ T5690] usb 2-1: USB disconnect, device number 53
[  458.148758][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.156911][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.407691][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.541142][ T5690] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  459.580547][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'.
[  459.593318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.603112][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.705714][ T5690] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  459.721519][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.743668][ T5690] usb 6-1: Product: syz
[  459.757713][ T5690] usb 6-1: Manufacturer: syz
[  459.780030][ T5690] usb 6-1: SerialNumber: syz
[  460.181389][ T5732] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  460.381321][ T5732] usb 1-1: Using ep0 maxpacket: 16
[  460.394536][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  460.416916][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  460.434203][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.455055][ T5732] usb 1-1: Product: syz
[  460.465719][ T5732] usb 1-1: Manufacturer: syz
[  460.484734][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.496295][ T5732] usb 1-1: SerialNumber: syz
[  460.510215][ T5732] usb 1-1: config 0 descriptor??
[  460.522672][ T5732] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  460.555650][ T5732] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  460.914798][ T5690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  461.191279][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.503722][ T5732] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  461.509802][ T5690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  461.523303][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.542815][ T5690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  461.571396][ T5690] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  461.601702][ T5732] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  461.616940][ T5732] em28xx 1-1:0.0: board has no eeprom
[  462.085987][T12975] xt_TPROXY: Can be used only with -p tcp or -p udp
[  462.644105][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.653390][ T5732] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  462.677618][ T5732] em28xx 1-1:0.0: dvb set to bulk mode.
[  462.701393][ T5690] em28xx 1-1:0.0: Binding DVB extension
[  462.718082][ T5732] usb 1-1: USB disconnect, device number 53
[  462.787267][ T5732] em28xx 1-1:0.0: Disconnecting em28xx
[  462.829825][ T5708] usb 6-1: USB disconnect, device number 49
[  462.855504][ T5690] em28xx 1-1:0.0: Registering input extension
[  462.882663][ T5732] em28xx 1-1:0.0: Closing input extension
[  462.946943][ T5732] em28xx 1-1:0.0: Freeing device
[  462.989370][T12984] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1863'.
[  463.069370][T12988] netlink: 'syz.4.1852': attribute type 1 has an invalid length.
[  463.094088][T12988] netlink: 'syz.4.1852': attribute type 2 has an invalid length.
[  463.131155][ T5690] usb 7-1: new full-speed USB device number 40 using dummy_hcd
[  463.302501][ T5690] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  463.320888][ T5708] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  463.330688][ T5690] usb 7-1: config 0 has no interface number 0
[  463.359542][ T5690] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  463.396812][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.419692][ T5690] usb 7-1: Product: syz
[  463.426487][ T5690] usb 7-1: Manufacturer: syz
[  463.432522][ T5690] usb 7-1: SerialNumber: syz
[  463.526774][ T5690] usb 7-1: config 0 descriptor??
[  463.534325][ T5708] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  463.547726][ T5708] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  463.563877][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.023608][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.156231][T12983] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1864'.
[  464.230930][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.376059][T13007] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  464.384277][T13007] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  464.394798][T13007] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  464.414515][   T30] audit: type=1400 audit(1786228663.418:1070): avc:  denied  { firmware_load } for  pid=13006 comm="syz.4.1869" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  464.422040][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.436341][ T5690] asix 7-1:0.251: probe with driver asix failed with error -71
[  464.456805][ T5708] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  464.517957][ T5728] IPVS: starting estimator thread 0...
[  464.618822][ T5690] usb 7-1: USB disconnect, device number 40
[  464.650815][T13012] IPVS: using max 77 ests per chain, 184800 per kthread
[  464.681340][ T5708] wwan wwan0: port wwan0qmi0 attached
[  464.711831][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.722203][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.829133][   T30] audit: type=1400 audit(1786228663.848:1071): avc:  denied  { read write } for  pid=12985 comm="syz.5.1865" name="cdc-wdm0" dev="devtmpfs" ino=4151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  464.919651][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.926461][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.933047][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.939730][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.946219][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.952893][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.959262][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.965941][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.972360][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.979036][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.985440][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  464.992114][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  464.998464][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  465.005144][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  465.011577][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  465.020007][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  465.026675][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  465.033379][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  465.041201][    C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  465.047899][    C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  465.157763][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.191567][ T5708] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 12:af:07:75:bf:84
[  465.270630][   T30] audit: type=1400 audit(1786228663.878:1072): avc:  denied  { open } for  pid=12985 comm="syz.5.1865" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  465.347563][ T5708] usb 6-1: USB disconnect, device number 50
[  465.392709][ T5708] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device
[  465.445956][   T30] audit: type=1400 audit(1786228664.338:1073): avc:  denied  { ioctl } for  pid=12985 comm="syz.5.1865" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4151 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  465.474545][T13026] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.520509][T13025] FAULT_INJECTION: forcing a failure.
[  465.520509][T13025] name failslab, interval 1, probability 0, space 0, times 0
[  465.524976][   T30] audit: type=1400 audit(1786228664.368:1074): avc:  denied  { read } for  pid=5258 comm="dhcpcd" name="n68" dev="tmpfs" ino=8793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  465.600137][   T30] audit: type=1400 audit(1786228664.368:1075): avc:  denied  { open } for  pid=5258 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=8793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  465.752718][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.0.1862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.752748][T13025] Tainted: [L]=SOFTLOCKUP
[  465.752754][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  465.752762][T13025] Call Trace:
[  465.752770][T13025]  <TASK>
[  465.752777][T13025]  dump_stack_lvl+0x100/0x190
[  465.752808][T13025]  should_fail_ex.cold+0x5/0xa
[  465.752831][T13025]  should_failslab+0xc2/0x120
[  465.752858][T13025]  __kmalloc_cache_noprof+0x91/0x6c0
[  465.752875][T13025]  ? configfs_write_iter+0x388/0x4e0
[  465.752900][T13025]  configfs_write_iter+0x388/0x4e0
[  465.752924][T13025]  vfs_write+0x6ac/0x1050
[  465.752941][T13025]  ? __pfx_configfs_write_iter+0x10/0x10
[  465.752965][T13025]  ? __pfx_vfs_write+0x10/0x10
[  465.752994][T13025]  ksys_write+0x12a/0x250
[  465.753010][T13025]  ? __pfx_ksys_write+0x10/0x10
[  465.753031][T13025]  do_syscall_64+0x115/0x870
[  465.753053][T13025]  ? clear_bhb_loop+0x70/0xc0
[  465.753074][T13025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.753089][T13025] RIP: 0033:0x7f434719e0d9
[  465.753104][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.753121][T13025] RSP: 002b:00007f4347f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  465.753139][T13025] RAX: ffffffffffffffda RBX: 00007f4347426090 RCX: 00007f434719e0d9
[  465.753150][T13025] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000009
[  465.753160][T13025] RBP: 00007f4347f92090 R08: 0000000000000000 R09: 0000000000000000
[  465.753169][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.753179][T13025] R13: 00007f4347426128 R14: 00007f4347426090 R15: 00007fffbdf1f788
[  465.753199][T13025]  </TASK>
[  465.938101][   T30] audit: type=1400 audit(1786228664.368:1076): avc:  denied  { getattr } for  pid=5258 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=8793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  465.961527][   T30] audit: type=1400 audit(1786228664.398:1077): avc:  denied  { map } for  pid=13019 comm="syz.0.1862" path="socket:[48122]" dev="sockfs" ino=48122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  465.988177][ T5708] wwan wwan0: port wwan0qmi0 disconnected
[  466.013023][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.111211][   T30] audit: type=1400 audit(1786228665.138:1078): avc:  denied  { read write } for  pid=13038 comm="syz.1.1874" name="file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  466.227947][   T30] audit: type=1400 audit(1786228665.138:1079): avc:  denied  { open } for  pid=13038 comm="syz.1.1874" path="/336/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  466.251742][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.290133][T13045] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  466.977778][T13063] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1879'.
[  466.999838][T13073] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1880'.
[  467.056153][T13073] hfs: can't find a HFS filesystem on dev nbd6
[  467.134488][T13077] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1881'.
[  467.272845][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.280991][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.346579][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1881'.
[  467.395896][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'.
[  467.411116][T13085] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  467.419340][T13085] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  467.427790][T13085] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  468.477756][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.506320][T13101] FAULT_INJECTION: forcing a failure.
[  468.506320][T13101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.532629][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz.1.1886 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.532660][T13101] Tainted: [L]=SOFTLOCKUP
[  468.532666][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  468.532677][T13101] Call Trace:
[  468.532683][T13101]  <TASK>
[  468.532691][T13101]  dump_stack_lvl+0x100/0x190
[  468.532720][T13101]  should_fail_ex.cold+0x5/0xa
[  468.532743][T13101]  _copy_from_user+0x2e/0xd0
[  468.532768][T13101]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  468.532792][T13101]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  468.532816][T13101]  ? tcp_setsockopt+0xae/0x100
[  468.532836][T13101]  smc_setsockopt+0x299/0xa40
[  468.532859][T13101]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  468.532890][T13101]  ? __pfx_smc_setsockopt+0x10/0x10
[  468.532908][T13101]  ? __fget_files+0x215/0x3d0
[  468.532930][T13101]  ? selinux_socket_setsockopt+0x6a/0x80
[  468.532956][T13101]  ? __pfx_smc_setsockopt+0x10/0x10
[  468.532978][T13101]  do_sock_setsockopt+0xf3/0x1d0
[  468.533006][T13101]  __sys_setsockopt+0x195/0x220
[  468.533033][T13101]  __x64_sys_setsockopt+0xbd/0x160
[  468.533053][T13101]  ? do_syscall_64+0x90/0x870
[  468.533078][T13101]  ? lockdep_hardirqs_on+0x78/0x100
[  468.533100][T13101]  do_syscall_64+0x115/0x870
[  468.533122][T13101]  ? clear_bhb_loop+0x70/0xc0
[  468.533144][T13101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.533162][T13101] RIP: 0033:0x7f4143f9e0d9
[  468.533178][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.533194][T13101] RSP: 002b:00007f4144f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  468.533211][T13101] RAX: ffffffffffffffda RBX: 00007f4144225fa0 RCX: 00007f4143f9e0d9
[  468.533223][T13101] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003
[  468.533232][T13101] RBP: 00007f4144f38090 R08: 0000000000000018 R09: 0000000000000000
[  468.533243][T13101] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.533254][T13101] R13: 00007f4144226038 R14: 00007f4144225fa0 R15: 00007fff9bec0068
[  468.533277][T13101]  </TASK>
[  468.786545][T13105] FAULT_INJECTION: forcing a failure.
[  468.786545][T13105] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  468.800378][T13105] CPU: 1 UID: 0 PID: 13105 Comm: syz.1.1890 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.800407][T13105] Tainted: [L]=SOFTLOCKUP
[  468.800413][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  468.800425][T13105] Call Trace:
[  468.800431][T13105]  <TASK>
[  468.800438][T13105]  dump_stack_lvl+0x100/0x190
[  468.800466][T13105]  should_fail_ex.cold+0x5/0xa
[  468.800487][T13105]  ? prepare_alloc_pages+0x16d/0x5f0
[  468.800513][T13105]  should_fail_alloc_page+0xeb/0x140
[  468.800538][T13105]  prepare_alloc_pages+0x1f0/0x5f0
[  468.800565][T13105]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  468.800595][T13105]  ? __lock_acquire+0x49f/0x1a40
[  468.800619][T13105]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  468.800643][T13105]  ? __lock_acquire+0x49f/0x1a40
[  468.800678][T13105]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  468.800702][T13105]  ? policy_nodemask+0xed/0x4f0
[  468.800725][T13105]  alloc_pages_mpol+0x1fb/0x540
[  468.800750][T13105]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  468.800780][T13105]  folio_alloc_mpol_noprof+0x36/0x260
[  468.800807][T13105]  vma_alloc_folio_noprof+0xed/0x1d0
[  468.800832][T13105]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  468.800864][T13105]  do_anonymous_page+0xb2b/0x2080
[  468.800892][T13105]  ? rcu_read_unlock+0x2d/0xb0
[  468.800915][T13105]  __handle_mm_fault+0x1d2c/0x2a00
[  468.800937][T13105]  ? mt_find+0x45e/0x8e0
[  468.800964][T13105]  ? __pfx___handle_mm_fault+0x10/0x10
[  468.800979][T13105]  ? __pfx_mt_find+0x10/0x10
[  468.801016][T13105]  ? find_vma+0xbf/0x140
[  468.801037][T13105]  ? __pfx_find_vma+0x10/0x10
[  468.801061][T13105]  handle_mm_fault+0x37b/0xa30
[  468.801084][T13105]  do_user_addr_fault+0x74c/0x12f0
[  468.801119][T13105]  exc_page_fault+0x6f/0xd0
[  468.801142][T13105]  asm_exc_page_fault+0x26/0x30
[  468.801160][T13105] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  468.801179][T13105] Code: a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f a0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  468.801196][T13105] RSP: 0018:ffffc900036f79b8 EFLAGS: 00050202
[  468.801218][T13105] RAX: 0000000000000001 RBX: 0000000000000097 RCX: 0000000000000097
[  468.801229][T13105] RDX: 0000000000000001 RSI: ffff888034726000 RDI: 0000200000006200
[  468.801240][T13105] RBP: ffffc900036f7bc8 R08: 0000000000000000 R09: ffffed10068e4c12
[  468.801252][T13105] R10: ffff888034726096 R11: 0000000000000000 R12: ffff888034726000
[  468.801262][T13105] R13: 0000000000000000 R14: 0000200000006200 R15: 0000000000000097
[  468.801286][T13105]  _copy_to_iter+0x4c5/0x1720
[  468.801317][T13105]  ? __pfx__copy_to_iter+0x10/0x10
[  468.801343][T13105]  ? find_held_lock+0x2b/0x80
[  468.801360][T13105]  ? ip6fl_seq_stop+0x31/0xb0
[  468.801387][T13105]  ? ip6fl_seq_stop+0x31/0xb0
[  468.801420][T13105]  seq_read_iter+0xdab/0x1270
[  468.801446][T13105]  seq_read+0x344/0x4d0
[  468.801464][T13105]  ? __pfx_seq_read+0x10/0x10
[  468.801487][T13105]  ? lock_acquire+0x1b9/0x370
[  468.801514][T13105]  ? selinux_file_permission+0x8f/0x6d0
[  468.801546][T13105]  ? __pfx_seq_read+0x10/0x10
[  468.801564][T13105]  proc_reg_read+0x240/0x330
[  468.801588][T13105]  ? __pfx_proc_reg_read+0x10/0x10
[  468.801610][T13105]  vfs_read+0x1e4/0xb40
[  468.801642][T13105]  ? __pfx_vfs_read+0x10/0x10
[  468.801667][T13105]  ? __fget_files+0x215/0x3d0
[  468.801692][T13105]  ? __fget_files+0x21f/0x3d0
[  468.801718][T13105]  ksys_read+0x12a/0x250
[  468.801736][T13105]  ? __pfx_ksys_read+0x10/0x10
[  468.801758][T13105]  do_syscall_64+0x115/0x870
[  468.801780][T13105]  ? clear_bhb_loop+0x70/0xc0
[  468.801802][T13105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.801820][T13105] RIP: 0033:0x7f4143f9e0d9
[  468.801835][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.801851][T13105] RSP: 002b:00007f4144f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  468.801866][T13105] RAX: ffffffffffffffda RBX: 00007f4144225fa0 RCX: 00007f4143f9e0d9
[  468.801877][T13105] RDX: 000000000000ffe8 RSI: 0000200000006200 RDI: 0000000000000004
[  468.801887][T13105] RBP: 00007f4144f38090 R08: 0000000000000000 R09: 0000000000000000
[  468.801898][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.801909][T13105] R13: 00007f4144226038 R14: 00007f4144225fa0 R15: 00007fff9bec0068
[  468.801935][T13105]  </TASK>
[  469.530620][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.322118][T13128] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1894'.
[  470.333265][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.554217][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.648484][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  470.648499][   T30] audit: type=1400 audit(1786228669.669:1087): avc:  denied  { write } for  pid=13074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  470.742841][T13140] trusted_key: encrypted_key: insufficient parameters specified
[  471.582252][T13144] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1895'.
[  471.600288][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.793258][   T30] audit: type=1400 audit(1786228670.819:1088): avc:  denied  { write } for  pid=13149 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  472.004891][ T5732] bridge0: entered promiscuous mode
[  472.022541][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'.
[  472.633916][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.643456][   T30] audit: type=1400 audit(1786228671.649:1089): avc:  denied  { write } for  pid=13177 comm="syz.0.1907" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  472.670676][ T5721] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  472.685553][   T30] audit: type=1400 audit(1786228671.649:1090): avc:  denied  { open } for  pid=13177 comm="syz.0.1907" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  472.711820][ T5707] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  472.877312][ T5721] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  472.897474][ T5707] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.940912][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.979835][ T5707] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.017494][ T5721] usb 2-1: Product: syz
[  473.073269][ T5721] usb 2-1: Manufacturer: syz
[  473.101621][ T5707] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.137407][ T5721] usb 2-1: SerialNumber: syz
[  473.221063][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0
[  473.307825][ T5707] usb 7-1: New USB device found, idVendor=05ac, idProduct=b4dd, bcdDevice= 0.00
[  473.352006][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.434356][ T5707] usb 7-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0
[  473.552236][ T5707] usb 7-1: Manufacturer: syz
[  473.673534][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.049166][ T5707] usb 7-1: config 0 descriptor??
[  474.169030][T13195] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1912'.
[  474.232673][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  474.282535][ T5707] usbhid 7-1:0.0: can't add hid device: -71
[  474.339299][ T5707] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  474.361533][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  474.908218][ T5707] usb 7-1: USB disconnect, device number 41
[  474.923734][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.110904][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  475.205570][T13216] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1916'.
[  475.296001][ T5721] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  475.492419][T13224] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1918'.
[  475.590561][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.211562][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1918'.
[  476.226260][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.242581][T10210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.269100][T13237] FAULT_INJECTION: forcing a failure.
[  476.269100][T13237] name failslab, interval 1, probability 0, space 0, times 0
[  476.287287][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.307506][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.362248][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.5.1922 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.362281][T13237] Tainted: [L]=SOFTLOCKUP
[  476.362288][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  476.362299][T13237] Call Trace:
[  476.362306][T13237]  <TASK>
[  476.362313][T13237]  dump_stack_lvl+0x100/0x190
[  476.362342][T13237]  should_fail_ex.cold+0x5/0xa
[  476.362367][T13237]  should_failslab+0xc2/0x120
[  476.362392][T13237]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  476.362416][T13237]  ? create_dyn_event+0x80/0x1d0
[  476.362432][T13237]  ? __lock_acquire+0x49f/0x1a40
[  476.362456][T13237]  ? argv_split+0x35/0x420
[  476.362485][T13237]  kstrndup+0x64/0x120
[  476.362505][T13237]  ? __pfx___trace_eprobe_create+0x10/0x10
[  476.362523][T13237]  argv_split+0x35/0x420
[  476.362547][T13237]  ? __pfx___trace_eprobe_create+0x10/0x10
[  476.362566][T13237]  trace_probe_create+0x7d/0x100
[  476.362589][T13237]  ? __pfx_trace_probe_create+0x10/0x10
[  476.362616][T13237]  create_dyn_event+0xee/0x1d0
[  476.362636][T13237]  trace_parse_run_command+0x1ab/0x3b0
[  476.362657][T13237]  ? __pfx_create_dyn_event+0x10/0x10
[  476.362679][T13237]  vfs_write+0x2aa/0x1050
[  476.362697][T13237]  ? __pfx_dyn_event_write+0x10/0x10
[  476.362728][T13237]  ? __pfx_vfs_write+0x10/0x10
[  476.362745][T13237]  ? __fget_files+0x215/0x3d0
[  476.362771][T13237]  ? __fget_files+0x21f/0x3d0
[  476.362798][T13237]  ksys_write+0x12a/0x250
[  476.362814][T13237]  ? __pfx_ksys_write+0x10/0x10
[  476.362839][T13237]  do_syscall_64+0x115/0x870
[  476.362862][T13237]  ? clear_bhb_loop+0x70/0xc0
[  476.362886][T13237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.362905][T13237] RIP: 0033:0x7fe2fb39e0d9
[  476.362921][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.362939][T13237] RSP: 002b:00007fe2fc22a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  476.362957][T13237] RAX: ffffffffffffffda RBX: 00007fe2fb625fa0 RCX: 00007fe2fb39e0d9
[  476.362969][T13237] RDX: 000000000000001b RSI: 0000200000000100 RDI: 0000000000000003
[  476.362980][T13237] RBP: 00007fe2fc22a090 R08: 0000000000000000 R09: 0000000000000000
[  476.362990][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.363000][T13237] R13: 00007fe2fb626038 R14: 00007fe2fb625fa0 R15: 00007ffc50ee34e8
[  476.363027][T13237]  </TASK>
[  476.369914][ T5690] usb 2-1: USB disconnect, device number 54
[  476.570315][ T5721] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  476.969790][   T30] audit: type=1400 audit(1786228675.989:1091): avc:  denied  { bind } for  pid=13250 comm="syz.1.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  477.081470][ T5721] usb 7-1: Using ep0 maxpacket: 32
[  477.142380][ T5721] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  477.153349][ T5721] usb 7-1: config 0 has no interface number 0
[  477.181135][ T5721] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  477.199737][ T5721] usb 7-1: config 0 interface 184 has no altsetting 0
[  477.274449][ T5721] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  477.285777][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.318003][ T5721] usb 7-1: Product: syz
[  477.320401][ T5811] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  477.340371][ T5721] usb 7-1: Manufacturer: syz
[  477.364313][ T5721] usb 7-1: SerialNumber: syz
[  477.387622][ T5721] usb 7-1: config 0 descriptor??
[  477.407346][T13224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  477.448688][T13240] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1923'.
[  477.483296][ T5811] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  477.494649][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.512236][ T5811] usb 6-1: Product: syz
[  477.520658][ T5811] usb 6-1: Manufacturer: syz
[  477.532975][ T5811] usb 6-1: SerialNumber: syz
[  477.538029][   T30] audit: type=1400 audit(1786228676.559:1092): avc:  denied  { connect } for  pid=13265 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  477.625356][T13224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  478.110400][ T5721] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  478.202771][ T5721] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  478.401683][ T5732] net_ratelimit: 2 callbacks suppressed
[  478.401699][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.437038][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  478.454298][T13282] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1934'.
[  478.565110][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  478.605793][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  478.618607][ T5811] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  478.677468][   T30] audit: type=1400 audit(1786228677.699:1093): avc:  denied  { connect } for  pid=13284 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  478.879029][ T5721] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  478.893130][ T5721] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  478.904200][ T5721] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  478.914280][ T5721] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  478.926327][ T5721] usb 7-1: USB disconnect, device number 42
[  479.250207][ T5707] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  479.400391][ T5707] usb 2-1: Using ep0 maxpacket: 8
[  479.407626][ T5707] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  479.419079][ T5707] usb 2-1: config 0 has no interface number 0
[  479.425465][ T5707] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  479.430291][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.444328][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.444720][ T5707] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  479.472178][T10208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.481695][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.493968][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.504511][ T5707] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  479.516503][ T5707] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  479.533215][ T5707] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  479.546000][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.583008][ T5707] usb 2-1: config 0 descriptor??
[  479.595905][ T5707] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  479.617870][T13307] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1943'.
[  479.780738][T13319] hub 8-0:1.0: USB hub found
[  479.786954][T13319] hub 8-0:1.0: 1 port detected
[  479.980251][ T5707] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  480.140338][T13326] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.147650][T13326] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.164708][ T5707] usb 7-1: Using ep0 maxpacket: 16
[  480.222774][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.322436][T13326] geneve2: left promiscuous mode
[  480.337279][ T5707] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.352305][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  480.360289][ T8164] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.365944][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  480.381966][ T5707] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  480.392377][ T5707] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  480.406593][ T5707] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  480.429046][ T8164] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 53853 - 0
[  480.432371][ T5707] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  480.470588][ T5707] usb 7-1: Manufacturer: syz
[  480.491621][ T5707] usb 7-1: config 0 descriptor??
[  480.690242][ T8164] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.707120][ T8164] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 53853 - 0
[  480.744771][ T8164] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.756567][ T8164] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 53853 - 0
[  480.766470][ T8164] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.999849][ T8164] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 53853 - 0
[  481.305606][ T5732] usb 6-1: USB disconnect, device number 51
[  481.501956][ T5707] rc_core: IR keymap rc-hauppauge not found
[  481.517903][ T5707] Registered IR keymap rc-empty
[  481.532770][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.570695][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.586715][   T30] audit: type=1800 audit(1786228680.609:1094): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1946" name="file0" dev="overlay" ino=1662 res=0 errno=0
[  481.611498][ T5707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  481.653101][ T5707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input93
[  481.702053][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.740577][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.780549][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.800663][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.820614][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.861510][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.901439][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.923894][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.960418][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.990460][ T5707] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  482.012641][ T5707] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  482.030340][ T5707] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  482.066504][ T5707] usb 7-1: USB disconnect, device number 43
[  482.080400][ T5732] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  482.080896][    T9] usb 2-1: USB disconnect, device number 55
[  482.149829][    T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  482.271631][ T5732] usb 6-1: Using ep0 maxpacket: 16
[  482.383530][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  482.688425][ T5732] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  482.724254][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.757527][ T5732] usb 6-1: Product: syz
[  482.772590][ T5732] usb 6-1: Manufacturer: syz
[  482.787461][ T5732] usb 6-1: SerialNumber: syz
[  482.821151][ T5732] usb 6-1: config 0 descriptor??
[  482.833814][ T5732] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  482.860844][ T5732] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  482.874607][T13366] fuse: fd is not a fuse device
[  483.115798][T13361] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1958'.
[  483.193492][T13375] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1959'.
[  483.340130][ T5707] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  483.520240][ T5707] usb 1-1: Using ep0 maxpacket: 8
[  483.535799][ T5707] usb 1-1: config 6 has an invalid interface number: 222 but max is 2
[  483.546101][ T5707] usb 1-1: config 6 has an invalid interface number: 48 but max is 2
[  483.555060][ T5707] usb 1-1: config 6 has an invalid interface number: 13 but max is 2
[  483.579929][ T5707] usb 1-1: config 6 has no interface number 0
[  483.593215][ T5707] usb 1-1: config 6 has no interface number 1
[  483.599575][ T5707] usb 1-1: config 6 has no interface number 2
[  483.606158][ T5707] usb 1-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  483.619520][ T5707] usb 1-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  484.477912][ T5721] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  484.528193][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  484.540385][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  484.549918][ T5732] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  484.551551][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  484.571114][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  484.584367][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  484.596407][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  484.607928][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  484.634126][ T5732] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  484.654568][ T5732] em28xx 6-1:0.0: board has no eeprom
[  484.664454][ T5707] usb 1-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  484.694335][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  484.705852][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  484.717728][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  484.729294][ T5707] usb 1-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  484.730486][ T5732] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  484.744796][ T5721] usb 2-1: Using ep0 maxpacket: 32
[  484.791842][ T5732] em28xx 6-1:0.0: dvb set to bulk mode.
[  484.856408][ T5690] em28xx 6-1:0.0: Binding DVB extension
[  485.118412][ T5732] usb 6-1: USB disconnect, device number 52
[  485.310857][ T5732] em28xx 6-1:0.0: Disconnecting em28xx
[  485.567518][ T5707] usb 1-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  485.578397][ T5707] usb 1-1: config 6 interface 222 has no altsetting 0
[  485.585414][ T5707] usb 1-1: config 6 interface 48 has no altsetting 0
[  485.592272][ T5707] usb 1-1: config 6 interface 13 has no altsetting 0
[  485.599093][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.609270][ T5721] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.620980][ T5721] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.622599][ T5690] em28xx 6-1:0.0: Registering input extension
[  485.631344][ T5721] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  485.650387][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0
[  485.658871][ T5721] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  485.668461][ T5707] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  485.679018][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.689824][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.710116][ T5707] usb 1-1: Product: ⿃聪ﻫ㑬덀仡₮㜘ꧠ姆쮿夻㧺髩锖㯚聺ᡅ㦓큉罪᭶욷罻棱麓埤䜂㏗Შ⽰鉇妷脏羢顱䈖뢨㈸캲䡹ଥ芵ᙝ豝㻏䣱不䛡釥蟡⷟淍ꩉほᙪ푉荧笃⟽1籘뚘∫덱䇴☭빴ሾ쾖剁๹ȼ㎩ൽ냡ﳶ덟鼟霃䔧㺓ꏾ峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  485.714380][ T5732] em28xx 6-1:0.0: Closing input extension
[  485.761273][ T5721] usb 2-1: config 0 descriptor??
[  485.784263][ T5707] usb 1-1: Manufacturer: ⠁
[  485.810226][ T5707] usb 1-1: SerialNumber: ဇ
[  485.851325][ T5732] em28xx 6-1:0.0: Freeing device
[  486.003934][T13396] xt_l2tp: v2 doesn't support IP mode
[  486.560010][T13402] netlink: 'syz.6.1971': attribute type 1 has an invalid length.
[  486.572389][T13402] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  486.668147][ T5707] usb 1-1: USB disconnect, device number 54
[  487.261564][ T5721] usbhid 2-1:0.0: can't add hid device: -71
[  487.279017][ T5721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  487.306985][T13418] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1976'.
[  487.327579][T13420] xt_hashlimit: size too large, truncated to 1048576
[  487.357912][ T5721] usb 2-1: USB disconnect, device number 56
[  487.620305][ T5732] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  487.800172][ T5732] usb 6-1: Using ep0 maxpacket: 32
[  487.873647][ T5732] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  487.887439][ T5732] usb 6-1: config 0 has no interface number 0
[  487.909550][ T5732] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  487.922824][ T5811] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  487.947477][ T5732] usb 6-1: config 0 interface 184 has no altsetting 0
[  488.069519][T13439] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1980'.
[  488.154908][ T5732] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  488.178977][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.197974][ T5732] usb 6-1: Product: syz
[  488.207522][ T5732] usb 6-1: Manufacturer: syz
[  488.218492][ T5732] usb 6-1: SerialNumber: syz
[  488.244100][ T5732] usb 6-1: config 0 descriptor??
[  488.256572][T13423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  488.270321][ T5811] usb 7-1: Using ep0 maxpacket: 16
[  488.283809][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  488.307413][ T5811] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  488.327177][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.346235][ T5811] usb 7-1: Product: syz
[  488.356280][ T5811] usb 7-1: Manufacturer: syz
[  488.366331][ T5811] usb 7-1: SerialNumber: syz
[  488.371265][ T5690] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  488.387287][ T5811] usb 7-1: config 0 descriptor??
[  488.405879][ T5811] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  488.427789][ T5811] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  488.468950][T13418] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  488.540073][ T5690] usb 2-1: Using ep0 maxpacket: 8
[  488.551778][ T5690] usb 2-1: config 6 has an invalid interface number: 222 but max is 2
[  488.566423][ T5690] usb 2-1: config 6 has an invalid interface number: 48 but max is 2
[  488.605402][ T5690] usb 2-1: config 6 has an invalid interface number: 13 but max is 2
[  488.623639][ T5690] usb 2-1: config 6 has no interface number 0
[  488.639928][ T5690] usb 2-1: config 6 has no interface number 1
[  488.656427][ T5690] usb 2-1: config 6 has no interface number 2
[  488.670154][ T5690] usb 2-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  488.699572][ T5690] usb 2-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  488.725359][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  488.749392][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  488.773776][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  488.798488][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  488.823092][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  488.846832][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  488.865006][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  488.876761][ T5690] usb 2-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  488.897004][ T5732] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  488.918642][ T5732] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  488.929644][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  488.954431][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  488.988424][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'.
[  488.988965][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  489.045642][ T5690] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  489.072890][ T5690] usb 2-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  489.084086][ T5690] usb 2-1: config 6 interface 222 has no altsetting 0
[  489.091438][ T5690] usb 2-1: config 6 interface 48 has no altsetting 0
[  489.098563][ T5690] usb 2-1: config 6 interface 13 has no altsetting 0
[  489.108132][ T5690] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  489.117804][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.128390][ T5690] usb 2-1: Product: ⿃聪ﻫ㑬덀仡₮㜘ꧠ姆쮿夻㧺髩锖㯚聺ᡅ㦓큉罪᭶욷罻棱麓埤䜂㏗Შ⽰鉇妷脏羢顱䈖뢨㈸캲䡹ଥ芵ᙝ豝㻏䣱不䛡釥蟡⷟淍ꩉほᙪ푉荧笃⟽1籘뚘∫덱䇴☭빴ሾ쾖剁๹ȼ㎩ൽ냡ﳶ덟鼟霃䔧㺓ꏾ峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  489.161019][ T5732] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  489.172464][ T5690] usb 2-1: Manufacturer: ⠁
[  489.177158][ T5732] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  489.225761][ T5690] usb 2-1: SerialNumber: ဇ
[  489.233353][   T30] audit: type=1400 audit(1786228688.259:1095): avc:  denied  { read } for  pid=13448 comm="syz.4.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  489.259923][ T5732] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  489.383580][T13452] trusted_key: encrypted_key: key user:syz not found
[  489.390252][ T5732] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  490.126685][ T5811] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  490.226454][ T5811] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  490.255559][ T5690] usb 2-1: USB disconnect, device number 57
[  490.269121][ T5811] em28xx 7-1:0.0: board has no eeprom
[  490.360963][ T5811] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  490.381146][ T5811] em28xx 7-1:0.0: dvb set to bulk mode.
[  490.402128][ T5732] em28xx 7-1:0.0: Binding DVB extension
[  490.464759][ T5811] usb 6-1: USB disconnect, device number 53
[  490.581379][ T5732] em28xx 7-1:0.0: Registering input extension
[  490.613343][ T5732] usb 7-1: USB disconnect, device number 44
[  490.699666][ T5732] em28xx 7-1:0.0: Disconnecting em28xx
[  490.916283][ T5732] em28xx 7-1:0.0: Closing input extension
[  490.996549][ T5732] em28xx 7-1:0.0: Freeing device
[  491.133984][T13471] raw_sendmsg: syz.5.1989 forgot to set AF_INET. Fix it!
[  491.733909][T13482] xt_hashlimit: size too large, truncated to 1048576
[  491.757318][   T30] audit: type=1400 audit(1786228690.779:1096): avc:  denied  { write } for  pid=13483 comm="syz.5.1991" name="functions" dev="configfs" ino=9641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  491.862289][   T30] audit: type=1400 audit(1786228690.819:1097): avc:  denied  { write } for  pid=13483 comm="syz.5.1991" name="core" dev="configfs" ino=3577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  491.910533][T13470] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1988'.
[  491.955472][   T30] audit: type=1400 audit(1786228690.859:1098): avc:  denied  { write } for  pid=13483 comm="syz.5.1991" name="rd_mcp_0" dev="configfs" ino=52745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  492.187396][   T30] audit: type=1400 audit(1786228691.209:1099): avc:  denied  { mount } for  pid=13492 comm="syz.5.1994" name="/" dev="pstore" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  492.341136][   T30] audit: type=1400 audit(1786228691.279:1100): avc:  denied  { unmount } for  pid=13492 comm="syz.5.1994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  492.800126][ T5721] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  492.848492][T13498] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1996'.
[  493.001599][ T5721] usb 2-1: Using ep0 maxpacket: 16
[  493.026834][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  493.030713][ T5732] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  493.072541][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  493.110664][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.139648][ T5721] usb 2-1: Product: syz
[  493.155708][ T5721] usb 2-1: Manufacturer: syz
[  493.167563][ T5721] usb 2-1: SerialNumber: syz
[  493.182934][ T5721] usb 2-1: config 0 descriptor??
[  493.208720][ T5721] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  493.230023][ T5732] usb 7-1: Using ep0 maxpacket: 8
[  493.245653][ T5732] usb 7-1: config 6 has an invalid interface number: 222 but max is 2
[  493.264399][ T5721] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  493.265482][ T5732] usb 7-1: config 6 has an invalid interface number: 48 but max is 2
[  493.313944][ T5732] usb 7-1: config 6 has an invalid interface number: 13 but max is 2
[  493.349433][ T5732] usb 7-1: config 6 has no interface number 0
[  493.364822][   T30] audit: type=1400 audit(1786228692.389:1101): avc:  denied  { write } for  pid=13502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  493.390509][ T5732] usb 7-1: config 6 has no interface number 1
[  493.400033][ T5732] usb 7-1: config 6 has no interface number 2
[  493.412888][ T5732] usb 7-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  493.426569][ T5732] usb 7-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  493.440983][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  493.454082][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  493.478901][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  493.567442][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  493.586565][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  493.601119][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  493.628139][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  493.643312][ T5732] usb 7-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  493.656562][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  493.667720][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  493.681812][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  493.692953][ T5732] usb 7-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  493.704193][ T5732] usb 7-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  493.743201][ T5732] usb 7-1: config 6 interface 222 has no altsetting 0
[  493.756195][   T30] audit: type=1400 audit(1786228692.779:1102): avc:  denied  { write } for  pid=13520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  493.782335][ T5732] usb 7-1: config 6 interface 48 has no altsetting 0
[  493.807567][ T5732] usb 7-1: config 6 interface 13 has no altsetting 0
[  493.825732][ T5732] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  493.880605][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.917456][ T5732] usb 7-1: Product: ⿃聪ﻫ㑬덀仡₮㜘ꧠ姆쮿夻㧺髩锖㯚聺ᡅ㦓큉罪᭶욷罻棱麓埤䜂㏗Შ⽰鉇妷脏羢顱䈖뢨㈸캲䡹ଥ芵ᙝ豝㻏䣱不䛡釥蟡⷟淍ꩉほᙪ푉荧笃⟽1籘뚘∫덱䇴☭빴ሾ쾖剁๹ȼ㎩ൽ냡ﳶ덟鼟霃䔧㺓ꏾ峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  494.030365][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'.
[  494.067729][ T5732] usb 7-1: Manufacturer: ⠁
[  495.229386][ T5732] usb 7-1: SerialNumber: ဇ
[  495.265793][ T5721] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  495.377536][ T5721] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  495.425106][ T5721] em28xx 2-1:0.0: board has no eeprom
[  495.466984][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'.
[  495.511506][T13547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.541652][ T5721] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  495.563060][T13547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.303357][T13554] orangefs_mount: mount request failed with -4
[  496.309136][ T5721] em28xx 2-1:0.0: dvb set to bulk mode.
[  496.315282][ T5707] em28xx 2-1:0.0: Binding DVB extension
[  496.352724][ T5732] usb 7-1: USB disconnect, device number 45
[  496.372560][ T5721] usb 2-1: USB disconnect, device number 58
[  496.379870][ T5721] em28xx 2-1:0.0: Disconnecting em28xx
[  496.646860][ T5707] em28xx 2-1:0.0: Registering input extension
[  496.878728][ T5721] em28xx 2-1:0.0: Closing input extension
[  496.927994][   T30] audit: type=1400 audit(1786228695.949:1103): avc:  denied  { write } for  pid=13570 comm="syz.0.2011" name="functions" dev="configfs" ino=9641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  497.693762][T13582] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2009'.
[  497.801361][ T5721] em28xx 2-1:0.0: Freeing device
[  497.946355][   T30] audit: type=1400 audit(1786228696.969:1104): avc:  denied  { write } for  pid=13531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  498.866831][   T30] audit: type=1400 audit(1786228697.889:1105): avc:  denied  { write } for  pid=13596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  498.959974][ T5732] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  499.140280][ T5690] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  499.148077][ T5732] usb 1-1: Using ep0 maxpacket: 16
[  499.165777][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  499.180713][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  499.205585][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.214798][ T5732] usb 1-1: Product: syz
[  499.231385][ T5732] usb 1-1: Manufacturer: syz
[  499.236539][ T5732] usb 1-1: SerialNumber: syz
[  499.277917][ T5732] usb 1-1: config 0 descriptor??
[  500.489652][ T5690] usb 7-1: Using ep0 maxpacket: 32
[  500.508448][ T5690] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  500.548248][ T5690] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.562019][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  500.593129][ T5732] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  500.616781][ T5690] usb 7-1: config 0 has no interface number 0
[  500.638659][ T5732] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  501.193265][ T5690] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  501.629758][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.638898][ T5690] usb 7-1: Product: syz
[  501.643790][ T5690] usb 7-1: Manufacturer: syz
[  501.648400][ T5690] usb 7-1: SerialNumber: syz
[  501.660406][ T5690] usb 7-1: config 0 descriptor??
[  502.820853][ T5732] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  503.349771][ T5732] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  503.366485][ T5690] usb 7-1: USB disconnect, device number 46
[  503.394690][ T5732] em28xx 1-1:0.0: board has no eeprom
[  503.416115][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'.
[  503.540219][ T5732] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  503.562531][ T5732] em28xx 1-1:0.0: dvb set to bulk mode.
[  503.937090][ T5708] em28xx 1-1:0.0: Binding DVB extension
[  503.958521][ T5732] usb 1-1: USB disconnect, device number 55
[  503.998784][ T5732] em28xx 1-1:0.0: Disconnecting em28xx
[  504.056323][ T5708] em28xx 1-1:0.0: Registering input extension
[  504.122359][ T5732] em28xx 1-1:0.0: Closing input extension
[  504.128871][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2024'.
[  504.200822][ T5732] em28xx 1-1:0.0: Freeing device
[  504.455696][T13643] netlink: 'syz.6.2027': attribute type 25 has an invalid length.
[  504.488423][T13643] netlink: 'syz.6.2027': attribute type 3 has an invalid length.
[  504.516238][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2027'.
[  504.636041][T13650] ip_tables: iptables: counters copy to user failed while replacing table
[  504.839220][T13655] 9p: Bad value for 'rfdno'
[  504.845839][T13656] 9p: Bad value for 'rfdno'
[  505.460105][ T5732] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  505.563689][ T5721] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  506.231296][ T5721] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  506.242692][ T5732] usb 1-1: Using ep0 maxpacket: 16
[  506.254017][ T5721] usb 2-1: config 0 has no interface number 0
[  506.260349][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'.
[  506.270927][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  506.293306][ T5721] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  506.293564][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  506.313912][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.322598][ T5732] usb 1-1: Product: syz
[  506.380066][ T5732] usb 1-1: Manufacturer: syz
[  506.384766][ T5732] usb 1-1: SerialNumber: syz
[  506.396909][ T5732] usb 1-1: config 0 descriptor??
[  506.426733][ T5732] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  506.436626][ T5732] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  506.442665][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.474146][ T5721] usb 2-1: Product: syz
[  506.490432][ T5721] usb 2-1: Manufacturer: syz
[  506.501404][ T5721] usb 2-1: SerialNumber: syz
[  506.519456][ T5721] usb 2-1: config 0 descriptor??
[  506.828711][T13665] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2035'.
[  506.846980][ T5721] asix 2-1:0.251: probe with driver asix failed with error -71
[  506.900693][ T5721] usb 2-1: USB disconnect, device number 59
[  507.526060][T13700] FAULT_INJECTION: forcing a failure.
[  507.526060][T13700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.566689][T13700] CPU: 1 UID: 0 PID: 13700 Comm: syz.5.2043 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  507.566709][T13700] Tainted: [L]=SOFTLOCKUP
[  507.566713][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  507.566720][T13700] Call Trace:
[  507.566724][T13700]  <TASK>
[  507.566728][T13700]  dump_stack_lvl+0x100/0x190
[  507.566747][T13700]  should_fail_ex.cold+0x5/0xa
[  507.566761][T13700]  strncpy_from_user+0x3b/0x2d0
[  507.566774][T13700]  ? get_pid_task+0x106/0x250
[  507.566790][T13700]  path_setxattrat+0x127/0x3b0
[  507.566805][T13700]  ? __pfx_path_setxattrat+0x10/0x10
[  507.566820][T13700]  ? ksys_write+0x190/0x250
[  507.566830][T13700]  ? ksys_write+0x190/0x250
[  507.566849][T13700]  ? fput+0x79/0x100
[  507.566861][T13700]  ? ksys_write+0x1ac/0x250
[  507.566871][T13700]  ? __pfx_ksys_write+0x10/0x10
[  507.566882][T13700]  __x64_sys_setxattr+0xc6/0x140
[  507.566896][T13700]  ? do_syscall_64+0x90/0x870
[  507.566910][T13700]  ? lockdep_hardirqs_on+0x78/0x100
[  507.566924][T13700]  do_syscall_64+0x115/0x870
[  507.566938][T13700]  ? clear_bhb_loop+0x70/0xc0
[  507.566951][T13700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.566963][T13700] RIP: 0033:0x7fe2fb39e0d9
[  507.566973][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.566983][T13700] RSP: 002b:00007fe2fc22a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  507.566995][T13700] RAX: ffffffffffffffda RBX: 00007fe2fb625fa0 RCX: 00007fe2fb39e0d9
[  507.567002][T13700] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000000
[  507.567009][T13700] RBP: 00007fe2fc22a090 R08: 0000000000000000 R09: 0000000000000000
[  507.567015][T13700] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001
[  507.567022][T13700] R13: 00007fe2fb626038 R14: 00007fe2fb625fa0 R15: 00007ffc50ee34e8
[  507.567035][T13700]  </TASK>
[  507.771440][ T5732] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  507.842903][ T5732] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  507.850945][ T5732] em28xx 1-1:0.0: board has no eeprom
[  507.909951][ T5732] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  507.917784][ T5732] em28xx 1-1:0.0: dvb set to bulk mode.
[  507.923900][ T5708] em28xx 1-1:0.0: Binding DVB extension
[  507.946735][T13704] xt_CT: No such helper "snmp"
[  508.021541][ T5732] usb 1-1: USB disconnect, device number 56
[  508.030610][ T5732] em28xx 1-1:0.0: Disconnecting em28xx
[  508.193810][ T5708] em28xx 1-1:0.0: Registering input extension
[  508.200259][ T5732] em28xx 1-1:0.0: Closing input extension
[  508.325133][ T5732] em28xx 1-1:0.0: Freeing device
[  508.872909][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  509.098079][T13738] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2051'.
[  509.144993][T13737] netlink: 'syz.5.2053': attribute type 1 has an invalid length.
[  509.179924][T13737] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2053'.
[  509.915951][T13750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2054'.
[  510.240140][ T5721] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  510.421095][ T5721] usb 7-1: Using ep0 maxpacket: 8
[  510.443980][ T5721] usb 7-1: config index 0 descriptor too short (expected 6427, got 27)
[  510.486969][ T5721] usb 7-1: config 0 has an invalid interface number: 21 but max is 0
[  510.529043][ T5721] usb 7-1: config 0 has no interface number 0
[  510.545905][ T5721] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.579760][ T5721] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.621735][ T5721] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  510.640394][ T5721] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  510.672438][ T5721] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  510.700504][ T5721] usb 7-1: Product: syz
[  510.714791][ T5721] usb 7-1: Manufacturer: syz
[  510.735051][ T5721] usb 7-1: config 0 descriptor??
[  511.290736][ T5721] usb 7-1: USB disconnect, device number 47
[  514.068297][T13816] FAULT_INJECTION: forcing a failure.
[  514.068297][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.126596][T13816] CPU: 1 UID: 0 PID: 13816 Comm: syz.1.2077 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.126630][T13816] Tainted: [L]=SOFTLOCKUP
[  514.126637][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  514.126648][T13816] Call Trace:
[  514.126655][T13816]  <TASK>
[  514.126663][T13816]  dump_stack_lvl+0x100/0x190
[  514.126695][T13816]  should_fail_ex.cold+0x5/0xa
[  514.126719][T13816]  _copy_from_user+0x2e/0xd0
[  514.126746][T13816]  kstrtouint_from_user+0xd6/0x1d0
[  514.126765][T13816]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  514.126784][T13816]  ? __lock_acquire+0x49f/0x1a40
[  514.126817][T13816]  proc_fail_nth_write+0x83/0x220
[  514.126837][T13816]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  514.126862][T13816]  vfs_write+0x2aa/0x1050
[  514.126881][T13816]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  514.126902][T13816]  ? __pfx_vfs_write+0x10/0x10
[  514.126918][T13816]  ? __fget_files+0x215/0x3d0
[  514.126944][T13816]  ? __fget_files+0x21f/0x3d0
[  514.126970][T13816]  ksys_write+0x12a/0x250
[  514.126987][T13816]  ? __pfx_ksys_write+0x10/0x10
[  514.127012][T13816]  do_syscall_64+0x115/0x870
[  514.127035][T13816]  ? clear_bhb_loop+0x70/0xc0
[  514.127058][T13816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.127077][T13816] RIP: 0033:0x7f4143f5e90e
[  514.127093][T13816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  514.127110][T13816] RSP: 002b:00007f4144f37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  514.127129][T13816] RAX: ffffffffffffffda RBX: 00007f4144f386c0 RCX: 00007f4143f5e90e
[  514.127141][T13816] RDX: 0000000000000001 RSI: 00007f4144f380a0 RDI: 0000000000000004
[  514.127152][T13816] RBP: 00007f4144f38090 R08: 0000000000000000 R09: 0000000000000000
[  514.127163][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.127173][T13816] R13: 00007f4144226038 R14: 00007f4144225fa0 R15: 00007fff9bec0068
[  514.127199][T13816]  </TASK>
[  515.596062][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'.
[  515.672060][T13834] 9pnet_fd: p9_fd_create_unix (13834): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  515.763214][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'.
[  515.949847][   T30] audit: type=1400 audit(1786228714.969:1106): avc:  denied  { setopt } for  pid=13837 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  515.976214][   T30] audit: type=1400 audit(1786228714.999:1107): avc:  denied  { bind } for  pid=13837 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  516.287300][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'.
[  516.386074][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2086'.
[  516.609896][ T5708] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  516.820378][ T5708] usb 1-1: Using ep0 maxpacket: 8
[  516.833827][ T5708] usb 1-1: config index 0 descriptor too short (expected 26, got 18)
[  516.834622][   T30] audit: type=1400 audit(1786228715.859:1108): avc:  denied  { create } for  pid=13854 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  516.842384][ T5708] usb 1-1: config 0 has an invalid interface number: 127 but max is 0
[  516.877815][ T5708] usb 1-1: config 0 has no interface number 0
[  516.885369][ T5708] usb 1-1: too many endpoints for config 0 interface 127 altsetting 206: 158, using maximum allowed: 30
[  516.896906][ T5708] usb 1-1: config 0 interface 127 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 158
[  516.924486][ T5708] usb 1-1: config 0 interface 127 has no altsetting 0
[  516.944021][ T5708] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  516.991750][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.019274][ T5708] usb 1-1: Product: syz
[  517.031211][ T5708] usb 1-1: Manufacturer: syz
[  517.055054][ T5708] usb 1-1: SerialNumber: syz
[  517.086118][ T5708] usb 1-1: config 0 descriptor??
[  517.146375][T13865] xt_hashlimit: size too large, truncated to 1048576
[  518.627802][ T5708] gspca_main: sq930x-2.14.0 probing 2770:930c
[  518.687014][ T5708] gspca_sq930x: reg_r 001f failed -71
[  518.698269][ T5708] sq930x 1-1:0.127: probe with driver sq930x failed with error -71
[  518.712602][ T5708] usb 1-1: USB disconnect, device number 57
[  518.837236][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'.
[  519.170853][T13886] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  522.345266][T13951] xt_hashlimit: size too large, truncated to 1048576
[  523.199345][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'.
[  523.636613][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'.
[  523.816854][T13978] syzkaller1: entered promiscuous mode
[  523.831135][T13978] syzkaller1: entered allmulticast mode
[  523.858308][T13978] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116
[  525.124757][T13991] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2113'.
[  525.555830][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'.
[  527.062963][T14020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2123'.
[  527.067624][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'.
[  528.490459][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2131'.
[  528.511154][T14038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.528744][T14038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.549662][T14038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.557964][T14038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.933698][T14040] orangefs_mount: mount request failed with -4
[  530.317185][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2137'.
[  530.546872][T14065] xt_hashlimit: size too large, truncated to 1048576
[  530.814304][T14049] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2130'.
[  531.436439][   T30] audit: type=1400 audit(1786228730.459:1109): avc:  denied  { ioctl } for  pid=14078 comm="syz.1.2143" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  531.572308][T14077] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2140'.
[  533.111563][T14102] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2147'.
[  533.119941][ T5708] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  533.241415][   T30] audit: type=1400 audit(1786228732.259:1110): avc:  denied  { write } for  pid=14123 comm="syz.0.2155" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  533.291763][ T5708] usb 2-1: Using ep0 maxpacket: 8
[  533.305640][ T5708] usb 2-1: config 6 has an invalid interface number: 222 but max is 2
[  533.318795][T14126] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  533.327823][ T5708] usb 2-1: config 6 has an invalid interface number: 48 but max is 2
[  533.342212][T14126] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  533.379372][ T5708] usb 2-1: config 6 has an invalid interface number: 13 but max is 2
[  533.387598][T14126] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  533.408062][T14126] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  533.415786][ T5708] usb 2-1: config 6 has no interface number 0
[  533.436412][ T5708] usb 2-1: config 6 has no interface number 1
[  533.446118][   T30] audit: type=1400 audit(1786228732.469:1111): avc:  denied  { mounton } for  pid=14130 comm="syz.6.2157" path="/345/file0" dev="tmpfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  533.456924][ T5708] usb 2-1: config 6 has no interface number 2
[  533.536328][ T5708] usb 2-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  533.551032][ T5708] usb 2-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  533.562369][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  533.573387][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  533.584421][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  533.787715][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  533.833709][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  533.857576][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  533.886143][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  533.900451][ T5708] usb 2-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  533.916222][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  533.927651][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  533.938760][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  533.950303][ T5708] usb 2-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  533.962004][ T5708] usb 2-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  533.963702][T14147] netlink: 'syz.6.2161': attribute type 10 has an invalid length.
[  533.973099][ T5708] usb 2-1: config 6 interface 222 has no altsetting 0
[  533.987628][ T5708] usb 2-1: config 6 interface 48 has no altsetting 0
[  533.994575][ T5708] usb 2-1: config 6 interface 13 has no altsetting 0
[  534.002519][T14147] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2161'.
[  534.003488][ T5708] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  534.069857][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.069891][T14147] dummy0: entered promiscuous mode
[  534.086778][ T5708] usb 2-1: Product: ⿃聪ﻫ㑬덀仡₮㜘ꧠ姆쮿夻㧺髩锖㯚聺ᡅ㦓큉罪᭶욷罻棱麓埤䜂㏗Შ⽰鉇妷脏羢顱䈖뢨㈸캲䡹ଥ芵ᙝ豝㻏䣱不䛡釥蟡⷟淍ꩉほᙪ푉荧笃⟽1籘뚘∫덱䇴☭빴ሾ쾖剁๹ȼ㎩ൽ냡ﳶ덟鼟霃䔧㺓ꏾ峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  534.123661][ T5708] usb 2-1: Manufacturer: ⠁
[  534.129151][ T5708] usb 2-1: SerialNumber: ဇ
[  535.597758][ T5607] Bluetooth: hci3: command 0x0406 tx timeout
[  535.597767][ T5601] Bluetooth: hci1: command 0x0406 tx timeout
[  535.597800][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout
[  535.604180][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout
[  535.706525][ T5708] usb 2-1: USB disconnect, device number 60
[  536.112398][T14177] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  536.233439][T14177] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  536.243712][T14177] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  536.255275][T14177] kvm: requested 107276 ns i8254 timer period limited to 200000 ns
[  536.279963][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  536.328910][T14177] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  536.336988][T14177] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  536.344895][T14177] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  536.352780][T14177] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  536.360762][T14177] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  536.370218][T14177] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  536.530536][    T9] usb 1-1: Using ep0 maxpacket: 32
[  536.546978][   T30] audit: type=1400 audit(1786228735.569:1112): avc:  denied  { connect } for  pid=14184 comm="syz.1.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  536.606258][T14181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2171'.
[  536.623457][    T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  536.632099][    T9] usb 1-1: config 0 has no interface number 0
[  536.638249][    T9] usb 1-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  536.653689][    T9] usb 1-1: config 0 interface 89 has no altsetting 0
[  536.663534][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  536.672830][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.681436][    T9] usb 1-1: Product: syz
[  536.685665][    T9] usb 1-1: Manufacturer: syz
[  536.744611][    T9] usb 1-1: SerialNumber: syz
[  536.755817][    T9] usb 1-1: config 0 descriptor??
[  536.832628][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2173'.
[  536.985350][T14194] FAULT_INJECTION: forcing a failure.
[  536.985350][T14194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.027712][T14194] CPU: 0 UID: 0 PID: 14194 Comm: syz.5.2175 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  537.027743][T14194] Tainted: [L]=SOFTLOCKUP
[  537.027750][T14194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  537.027761][T14194] Call Trace:
[  537.027767][T14194]  <TASK>
[  537.027775][T14194]  dump_stack_lvl+0x100/0x190
[  537.027803][T14194]  should_fail_ex.cold+0x5/0xa
[  537.027826][T14194]  _copy_from_iter+0x1f4/0x1690
[  537.027854][T14194]  ? __asan_memset+0x23/0x50
[  537.027875][T14194]  ? __pfx__copy_from_iter+0x10/0x10
[  537.027899][T14194]  ? __pfx___alloc_skb+0x10/0x10
[  537.027931][T14194]  netlink_sendmsg+0x808/0xda0
[  537.027956][T14194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.027978][T14194]  ? selinux_socket_sendmsg+0x198/0x2f0
[  537.028008][T14194]  ____sys_sendmsg+0xa4d/0xbe0
[  537.028036][T14194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.028057][T14194]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.028096][T14194]  ___sys_sendmsg+0x190/0x1e0
[  537.028118][T14194]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.028134][T14194]  ? __lock_acquire+0x49f/0x1a40
[  537.028157][T14194]  ? get_pid_task+0x106/0x250
[  537.028202][T14194]  __sys_sendmsg+0x160/0x210
[  537.028226][T14194]  ? __pfx___sys_sendmsg+0x10/0x10
[  537.028262][T14194]  do_syscall_64+0x115/0x870
[  537.028285][T14194]  ? clear_bhb_loop+0x70/0xc0
[  537.028308][T14194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.028326][T14194] RIP: 0033:0x7fe2fb39e0d9
[  537.028341][T14194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.028357][T14194] RSP: 002b:00007fe2fc22a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.028380][T14194] RAX: ffffffffffffffda RBX: 00007fe2fb625fa0 RCX: 00007fe2fb39e0d9
[  537.028392][T14194] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  537.028402][T14194] RBP: 00007fe2fc22a090 R08: 0000000000000000 R09: 0000000000000000
[  537.028413][T14194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.028423][T14194] R13: 00007fe2fb626038 R14: 00007fe2fb625fa0 R15: 00007ffc50ee34e8
[  537.028453][T14194]  </TASK>
[  538.802508][ T5797] usb 1-1: USB disconnect, device number 58
[  539.332362][   T30] audit: type=1400 audit(1786228738.349:1113): avc:  denied  { mounton } for  pid=14233 comm="syz.0.2186" path="/proc/1330/task" dev="proc" ino=56552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  540.203119][T14244] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2187'.
[  540.389531][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'.
[  540.418008][T14256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.233970][T14258] orangefs_mount: mount request failed with -4
[  541.373448][T14267] FAULT_INJECTION: forcing a failure.
[  541.373448][T14267] name failslab, interval 1, probability 0, space 0, times 0
[  541.422931][T14267] CPU: 0 UID: 0 PID: 14267 Comm: syz.0.2196 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  541.422964][T14267] Tainted: [L]=SOFTLOCKUP
[  541.422970][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  541.422981][T14267] Call Trace:
[  541.422987][T14267]  <TASK>
[  541.422995][T14267]  dump_stack_lvl+0x100/0x190
[  541.423024][T14267]  should_fail_ex.cold+0x5/0xa
[  541.423047][T14267]  should_failslab+0xc2/0x120
[  541.423075][T14267]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  541.423098][T14267]  ? __alloc_skb+0x5b7/0x710
[  541.423119][T14267]  ? __alloc_skb+0x140/0x710
[  541.423144][T14267]  __alloc_skb+0x140/0x710
[  541.423164][T14267]  ? __alloc_skb+0x5b7/0x710
[  541.423184][T14267]  ? __pfx___alloc_skb+0x10/0x10
[  541.423213][T14267]  netlink_alloc_large_skb+0x69/0x150
[  541.423235][T14267]  netlink_sendmsg+0x680/0xda0
[  541.423258][T14267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.423278][T14267]  ? selinux_socket_sendmsg+0x198/0x2f0
[  541.423306][T14267]  ____sys_sendmsg+0xa4d/0xbe0
[  541.423332][T14267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.423353][T14267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  541.423392][T14267]  ___sys_sendmsg+0x190/0x1e0
[  541.423411][T14267]  ? __pfx____sys_sendmsg+0x10/0x10
[  541.423427][T14267]  ? __lock_acquire+0x49f/0x1a40
[  541.423450][T14267]  ? get_pid_task+0x106/0x250
[  541.423495][T14267]  __sys_sendmsg+0x160/0x210
[  541.423520][T14267]  ? __pfx___sys_sendmsg+0x10/0x10
[  541.423556][T14267]  do_syscall_64+0x115/0x870
[  541.423578][T14267]  ? clear_bhb_loop+0x70/0xc0
[  541.423600][T14267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.423618][T14267] RIP: 0033:0x7f434719e0d9
[  541.423632][T14267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.423649][T14267] RSP: 002b:00007f4347fb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.423667][T14267] RAX: ffffffffffffffda RBX: 00007f4347425fa0 RCX: 00007f434719e0d9
[  541.423678][T14267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  541.423689][T14267] RBP: 00007f4347fb3090 R08: 0000000000000000 R09: 0000000000000000
[  541.423700][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.423711][T14267] R13: 00007f4347426038 R14: 00007f4347425fa0 R15: 00007fffbdf1f788
[  541.423736][T14267]  </TASK>
[  542.026230][T14280] xt_hashlimit: size too large, truncated to 1048576
[  542.056828][T14287] �x9�@: renamed from bridge_slave_0 (while UP)
[  543.768957][T14312] FAULT_INJECTION: forcing a failure.
[  543.768957][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  543.842437][T14312] CPU: 1 UID: 0 PID: 14312 Comm: syz.6.2208 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  543.842469][T14312] Tainted: [L]=SOFTLOCKUP
[  543.842476][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  543.842487][T14312] Call Trace:
[  543.842494][T14312]  <TASK>
[  543.842502][T14312]  dump_stack_lvl+0x100/0x190
[  543.842530][T14312]  should_fail_ex.cold+0x5/0xa
[  543.842553][T14312]  _copy_to_user+0x32/0xd0
[  543.842580][T14312]  simple_read_from_buffer+0xcb/0x170
[  543.842603][T14312]  proc_fail_nth_read+0x1af/0x230
[  543.842633][T14312]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  543.842662][T14312]  ? rw_verify_area+0xce/0x6d0
[  543.842687][T14312]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  543.842715][T14312]  vfs_read+0x1e4/0xb40
[  543.842747][T14312]  ? __pfx_vfs_read+0x10/0x10
[  543.842774][T14312]  ? __fget_files+0x215/0x3d0
[  543.842799][T14312]  ? __fget_files+0x21f/0x3d0
[  543.842826][T14312]  ksys_read+0x12a/0x250
[  543.842842][T14312]  ? __pfx_ksys_read+0x10/0x10
[  543.842867][T14312]  do_syscall_64+0x115/0x870
[  543.842890][T14312]  ? clear_bhb_loop+0x70/0xc0
[  543.842912][T14312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.842930][T14312] RIP: 0033:0x7f11aef5e90e
[  543.842945][T14312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  543.842961][T14312] RSP: 002b:00007f11afda6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  543.842978][T14312] RAX: ffffffffffffffda RBX: 00007f11afda76c0 RCX: 00007f11aef5e90e
[  543.842990][T14312] RDX: 000000000000000f RSI: 00007f11afda70a0 RDI: 0000000000000003
[  543.843000][T14312] RBP: 00007f11afda7090 R08: 0000000000000000 R09: 0000000000000000
[  543.843011][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.843021][T14312] R13: 00007f11af226038 R14: 00007f11af225fa0 R15: 00007ffc11ca9188
[  543.843046][T14312]  </TASK>
[  545.394006][T14326] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2212'.
[  545.549882][ T5797] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  545.585848][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2212'.
[  545.719848][ T5797] usb 2-1: Using ep0 maxpacket: 32
[  545.733868][ T5797] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  545.770733][ T5797] usb 2-1: config 0 has no interface number 0
[  545.817250][ T5797] usb 2-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  545.895865][ T5797] usb 2-1: config 0 interface 89 has no altsetting 0
[  545.959988][    T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  545.974157][ T5797] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  546.042189][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.123483][ T5797] usb 2-1: Product: syz
[  546.157633][ T5797] usb 2-1: Manufacturer: syz
[  546.166733][    T9] usb 6-1: Using ep0 maxpacket: 32
[  546.195008][    T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  546.228142][ T5797] usb 2-1: SerialNumber: syz
[  546.263285][    T9] usb 6-1: config 0 has no interface number 0
[  546.340355][    T9] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  546.368822][ T5797] usb 2-1: config 0 descriptor??
[  546.493042][    T9] usb 6-1: config 0 interface 184 has no altsetting 0
[  546.607378][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  546.653980][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.737217][    T9] usb 6-1: Product: syz
[  546.781060][    T9] usb 6-1: Manufacturer: syz
[  546.810501][    T9] usb 6-1: SerialNumber: syz
[  546.853404][    T9] usb 6-1: config 0 descriptor??
[  546.885316][T14335] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  547.099388][T14326] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  547.512574][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  547.523611][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  548.626551][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  548.642644][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  548.653999][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  548.667506][    T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  548.684843][    T9] usb 6-1: USB disconnect, device number 54
[  548.716182][ T5708] usb 2-1: USB disconnect, device number 61
[  548.972122][T14384] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2220'.
[  548.986942][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'.
[  549.659846][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  549.830066][    T9] usb 1-1: Using ep0 maxpacket: 32
[  549.842957][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  549.889747][    T9] usb 1-1: config 0 has no interface number 0
[  549.935121][    T9] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  549.979495][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[  550.011702][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  550.057555][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.088655][    T9] usb 1-1: Product: syz
[  550.106683][    T9] usb 1-1: Manufacturer: syz
[  550.114697][    T9] usb 1-1: SerialNumber: syz
[  550.150535][    T9] usb 1-1: config 0 descriptor??
[  550.177387][T14384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  550.417375][T14384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  550.854958][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  550.979989][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  551.496057][T14423] FAULT_INJECTION: forcing a failure.
[  551.496057][T14423] name failslab, interval 1, probability 0, space 0, times 0
[  551.533161][T14423] CPU: 0 UID: 0 PID: 14423 Comm: syz.5.2230 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  551.533191][T14423] Tainted: [L]=SOFTLOCKUP
[  551.533198][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  551.533209][T14423] Call Trace:
[  551.533216][T14423]  <TASK>
[  551.533223][T14423]  dump_stack_lvl+0x100/0x190
[  551.533251][T14423]  should_fail_ex.cold+0x5/0xa
[  551.533275][T14423]  should_failslab+0xc2/0x120
[  551.533299][T14423]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  551.533324][T14423]  ? __alloc_skb+0x140/0x710
[  551.533350][T14423]  __alloc_skb+0x140/0x710
[  551.533373][T14423]  ? __pfx___alloc_skb+0x10/0x10
[  551.533401][T14423]  tcp_stream_alloc_skb+0x34/0x660
[  551.533430][T14423]  tcp_connect+0xf22/0x5510
[  551.533457][T14423]  ? secure_tcpv6_seq_and_ts_off+0x218/0x310
[  551.533488][T14423]  ? __pfx_tcp_connect+0x10/0x10
[  551.533507][T14423]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  551.533539][T14423]  ? inet6_hash_connect+0xe7/0x180
[  551.533561][T14423]  tcp_v6_connect+0x1831/0x2660
[  551.533591][T14423]  ? __pfx_tcp_v6_connect+0x10/0x10
[  551.533623][T14423]  __inet_stream_connect+0x208/0xfa0
[  551.533654][T14423]  ? __pfx___inet_stream_connect+0x10/0x10
[  551.533677][T14423]  ? kasan_save_track+0x14/0x30
[  551.533698][T14423]  ? __kasan_kmalloc+0xaa/0xb0
[  551.533721][T14423]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  551.533748][T14423]  ? tcp_sendmsg_fastopen+0x24d/0x750
[  551.533779][T14423]  tcp_sendmsg_fastopen+0x3ed/0x750
[  551.533813][T14423]  tcp_sendmsg_locked+0x276d/0x44d0
[  551.533846][T14423]  ? __lock_acquire+0x49f/0x1a40
[  551.533868][T14423]  ? __lock_acquire+0x49f/0x1a40
[  551.533894][T14423]  ? reacquire_held_locks+0xce/0x1e0
[  551.533918][T14423]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  551.533945][T14423]  ? do_raw_spin_lock+0x128/0x260
[  551.533969][T14423]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  551.534000][T14423]  ? __local_bh_enable_ip+0x9e/0x120
[  551.534029][T14423]  tcp_sendmsg+0x2e/0x50
[  551.534053][T14423]  ? __pfx_tcp_sendmsg+0x10/0x10
[  551.534079][T14423]  inet6_sendmsg+0xb9/0x140
[  551.534100][T14423]  __sys_sendto+0x36d/0x4e0
[  551.534123][T14423]  ? __pfx___sys_sendto+0x10/0x10
[  551.534151][T14423]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  551.534186][T14423]  ? ksys_write+0x1ac/0x250
[  551.534203][T14423]  ? __pfx_ksys_write+0x10/0x10
[  551.534223][T14423]  __x64_sys_sendto+0xe0/0x1c0
[  551.534242][T14423]  ? do_syscall_64+0x90/0x870
[  551.534265][T14423]  ? lockdep_hardirqs_on+0x78/0x100
[  551.534288][T14423]  do_syscall_64+0x115/0x870
[  551.534310][T14423]  ? clear_bhb_loop+0x70/0xc0
[  551.534333][T14423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.534351][T14423] RIP: 0033:0x7fe2fb39e0d9
[  551.534368][T14423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.534384][T14423] RSP: 002b:00007fe2fc22a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  551.534402][T14423] RAX: ffffffffffffffda RBX: 00007fe2fb625fa0 RCX: 00007fe2fb39e0d9
[  551.534412][T14423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  551.534421][T14423] RBP: 00007fe2fc22a090 R08: 00002000000001c0 R09: 000000000000001c
[  551.534432][T14423] R10: 0000000024008051 R11: 0000000000000246 R12: 0000000000000001
[  551.534443][T14423] R13: 00007fe2fb626038 R14: 00007fe2fb625fa0 R15: 00007ffc50ee34e8
[  551.534463][T14423]  </TASK>
[  551.912182][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  551.923074][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  551.934026][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  551.943546][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  551.957314][    T9] usb 1-1: USB disconnect, device number 59
[  552.344652][T14433] FAULT_INJECTION: forcing a failure.
[  552.344652][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.481331][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.5.2234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  552.481362][T14433] Tainted: [L]=SOFTLOCKUP
[  552.481368][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  552.481382][T14433] Call Trace:
[  552.481389][T14433]  <TASK>
[  552.481397][T14433]  dump_stack_lvl+0x100/0x190
[  552.481425][T14433]  should_fail_ex.cold+0x5/0xa
[  552.481448][T14433]  _copy_from_iter+0x1f4/0x1690
[  552.481475][T14433]  ? __asan_memset+0x23/0x50
[  552.481495][T14433]  ? __pfx__copy_from_iter+0x10/0x10
[  552.481519][T14433]  ? __pfx___alloc_skb+0x10/0x10
[  552.481550][T14433]  netlink_sendmsg+0x808/0xda0
[  552.481573][T14433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  552.481593][T14433]  ? selinux_socket_sendmsg+0x198/0x2f0
[  552.481622][T14433]  ____sys_sendmsg+0xa4d/0xbe0
[  552.481648][T14433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  552.481669][T14433]  ? __pfx_____sys_sendmsg+0x10/0x10
[  552.481703][T14433]  ___sys_sendmsg+0x190/0x1e0
[  552.481722][T14433]  ? __pfx____sys_sendmsg+0x10/0x10
[  552.481738][T14433]  ? __lock_acquire+0x49f/0x1a40
[  552.481761][T14433]  ? get_pid_task+0x106/0x250
[  552.481811][T14433]  __sys_sendmsg+0x160/0x210
[  552.481835][T14433]  ? __pfx___sys_sendmsg+0x10/0x10
[  552.481871][T14433]  do_syscall_64+0x115/0x870
[  552.481894][T14433]  ? clear_bhb_loop+0x70/0xc0
[  552.481917][T14433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.481936][T14433] RIP: 0033:0x7fe2fb39e0d9
[  552.481951][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.481967][T14433] RSP: 002b:00007fe2fc22a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  552.481986][T14433] RAX: ffffffffffffffda RBX: 00007fe2fb625fa0 RCX: 00007fe2fb39e0d9
[  552.481998][T14433] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003
[  552.482009][T14433] RBP: 00007fe2fc22a090 R08: 0000000000000000 R09: 0000000000000000
[  552.482020][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.482031][T14433] R13: 00007fe2fb626038 R14: 00007fe2fb625fa0 R15: 00007ffc50ee34e8
[  552.482056][T14433]  </TASK>
[  553.944356][ T5690] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  554.001842][T14443] FAULT_INJECTION: forcing a failure.
[  554.001842][T14443] name failslab, interval 1, probability 0, space 0, times 0
[  554.027291][   T30] audit: type=1400 audit(1786228753.049:1114): avc:  denied  { execute } for  pid=14441 comm="syz.1.2236" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  554.030179][T14443] CPU: 1 UID: 0 PID: 14443 Comm: syz.0.2238 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.030204][T14443] Tainted: [L]=SOFTLOCKUP
[  554.030210][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  554.030219][T14443] Call Trace:
[  554.030225][T14443]  <TASK>
[  554.030232][T14443]  dump_stack_lvl+0x100/0x190
[  554.030258][T14443]  should_fail_ex.cold+0x5/0xa
[  554.030278][T14443]  should_failslab+0xc2/0x120
[  554.030299][T14443]  kmem_cache_alloc_noprof+0x91/0x6a0
[  554.030319][T14443]  ? do_getname+0x35/0x390
[  554.030343][T14443]  do_getname+0x35/0x390
[  554.030365][T14443]  __x64_sys_rename+0x66/0xb0
[  554.030385][T14443]  do_syscall_64+0x115/0x870
[  554.030405][T14443]  ? clear_bhb_loop+0x70/0xc0
[  554.030424][T14443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.030440][T14443] RIP: 0033:0x7f434719e0d9
[  554.030454][T14443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.030469][T14443] RSP: 002b:00007f4347fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  554.030486][T14443] RAX: ffffffffffffffda RBX: 00007f4347425fa0 RCX: 00007f434719e0d9
[  554.030496][T14443] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0
[  554.030506][T14443] RBP: 00007f4347fb3090 R08: 0000000000000000 R09: 0000000000000000
[  554.030515][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.030525][T14443] R13: 00007f4347426038 R14: 00007f4347425fa0 R15: 00007fffbdf1f788
[  554.030546][T14443]  </TASK>
[  554.165073][ T5690] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  554.260825][ T5690] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  554.276150][ T5690] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  554.285615][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.296455][ T5690] usb 7-1: Product: syz
[  554.300902][ T5690] usb 7-1: Manufacturer: syz
[  554.305551][ T5690] usb 7-1: SerialNumber: syz
[  554.330210][ T5690] usb-storage 7-1:1.0: USB Mass Storage device detected
[  554.354993][ T5690] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  554.363366][ T5690] scsi host1: usb-storage 7-1:1.0
[  554.419134][T14450] smpboot: CPU 1 is now offline
[  554.632589][    T9] usb 7-1: USB disconnect, device number 48
[  554.903884][T14456] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  554.939360][ T7402] ------------[ cut here ]------------
[  554.940189][ T7402] 
[  554.940194][ T7402] ======================================================
[  554.940200][ T7402] WARNING: possible circular locking dependency detected
[  554.940208][ T7402] syzkaller #0 Tainted: G             L     
[  554.940216][ T7402] ------------------------------------------------------
[  554.940221][ T7402] syz.4.318/7402 is trying to acquire lock:
[  554.940229][ T7402] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  554.940272][ T7402] 
[  554.940272][ T7402] but task is already holding lock:
[  554.940276][ T7402] ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  554.940311][ T7402] 
[  554.940311][ T7402] which lock already depends on the new lock.
[  554.940311][ T7402] 
[  554.940316][ T7402] 
[  554.940316][ T7402] the existing dependency chain (in reverse order) is:
[  554.940321][ T7402] 
[  554.940321][ T7402] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  554.940338][ T7402]        lock_acquire+0x1b9/0x370
[  554.940355][ T7402]        _raw_spin_lock_nested+0x31/0x40
[  554.940370][ T7402]        raw_spin_rq_lock_nested+0x2c/0x140
[  554.940389][ T7402]        _task_rq_lock+0xcf/0x500
[  554.940408][ T7402]        cgroup_move_task+0x81/0x320
[  554.940421][ T7402]        css_set_move_task+0x285/0x600
[  554.940440][ T7402]        cgroup_post_fork+0x1f9/0x9a0
[  554.940456][ T7402]        copy_process+0x6b7a/0x8030
[  554.940474][ T7402]        kernel_clone+0x176/0x9d0
[  554.940492][ T7402]        user_mode_thread+0xcc/0x110
[  554.940510][ T7402]        rest_init+0x21/0x260
[  554.940530][ T7402]        start_kernel+0x48e/0x490
[  554.940550][ T7402]        x86_64_start_reservations+0x24/0x30
[  554.940572][ T7402]        x86_64_start_kernel+0x12b/0x130
[  554.940592][ T7402]        common_startup_64+0x13e/0x158
[  554.940605][ T7402] 
[  554.940605][ T7402] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  554.940622][ T7402]        lock_acquire+0x1b9/0x370
[  554.940642][ T7402]        _raw_spin_lock_irqsave+0x3a/0x60
[  554.940657][ T7402]        try_to_wake_up+0xbd/0x1c90
[  554.940675][ T7402]        __wake_up_common+0x135/0x1f0
[  554.940690][ T7402]        __wake_up+0x31/0x60
[  554.940702][ T7402]        tty_port_default_wakeup+0x47/0x60
[  554.940720][ T7402]        serial8250_tx_chars+0x68f/0x860
[  554.940738][ T7402]        serial8250_handle_irq_locked+0x770/0x9a0
[  554.940756][ T7402]        serial8250_handle_irq.part.0+0xb4/0x530
[  554.940774][ T7402]        serial8250_default_handle_irq+0xc2/0x280
[  554.940792][ T7402]        serial8250_interrupt+0xf8/0x1b0
[  554.940812][ T7402]        __handle_irq_event_percpu+0x232/0x880
[  554.940834][ T7402]        handle_irq_event+0xab/0x1e0
[  554.940854][ T7402]        handle_edge_irq+0x34c/0x950
[  554.940874][ T7402]        __common_interrupt+0xd8/0x2f0
[  554.940890][ T7402]        common_interrupt+0xb9/0xe0
[  554.940901][ T7402]        asm_common_interrupt+0x26/0x40
[  554.940916][ T7402]        stack_trace_consume_entry+0xd3/0x170
[  554.940930][ T7402]        arch_stack_walk+0x88/0xf0
[  554.940941][ T7402]        stack_trace_save+0x8e/0xc0
[  554.940954][ T7402]        save_stack+0x162/0x1e0
[  554.940970][ T7402]        __set_page_owner+0x8c/0x540
[  554.940992][ T7402]        post_alloc_hook+0xfd/0x120
[  554.941004][ T7402]        get_page_from_freelist+0xf48/0x3530
[  554.941017][ T7402]        __alloc_frozen_pages_noprof+0x299/0x2dc0
[  554.941031][ T7402]        alloc_pages_mpol+0x1fb/0x540
[  554.941049][ T7402]        folio_alloc_mpol_noprof+0x36/0x260
[  554.941070][ T7402]        vma_alloc_folio_noprof+0xed/0x1d0
[  554.941090][ T7402]        do_wp_page+0x1ee1/0x4350
[  554.941108][ T7402]        __handle_mm_fault+0x1ab6/0x2a00
[  554.941120][ T7402]        handle_mm_fault+0x37b/0xa30
[  554.941132][ T7402]        do_user_addr_fault+0x5a3/0x12f0
[  554.941153][ T7402]        exc_page_fault+0x6f/0xd0
[  554.941168][ T7402]        asm_exc_page_fault+0x26/0x30
[  554.941180][ T7402] 
[  554.941180][ T7402] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  554.941198][ T7402]        lock_acquire+0x1b9/0x370
[  554.941213][ T7402]        _raw_spin_lock_irqsave+0x3a/0x60
[  554.941228][ T7402]        __wake_up+0x1c/0x60
[  554.941240][ T7402]        tty_port_default_wakeup+0x47/0x60
[  554.941257][ T7402]        serial8250_tx_chars+0x68f/0x860
[  554.941273][ T7402]        serial8250_handle_irq_locked+0x770/0x9a0
[  554.941291][ T7402]        serial8250_handle_irq.part.0+0xb4/0x530
[  554.941309][ T7402]        serial8250_default_handle_irq+0xc2/0x280
[  554.941327][ T7402]        serial8250_interrupt+0xf8/0x1b0
[  554.941347][ T7402]        __handle_irq_event_percpu+0x232/0x880
[  554.941368][ T7402]        handle_irq_event+0xab/0x1e0
[  554.941388][ T7402]        handle_edge_irq+0x34c/0x950
[  554.941406][ T7402]        __common_interrupt+0xd8/0x2f0
[  554.941422][ T7402]        common_interrupt+0xb9/0xe0
[  554.941434][ T7402]        asm_common_interrupt+0x26/0x40
[  554.941447][ T7402]        finish_task_switch.isra.0+0x2cd/0x10c0
[  554.941466][ T7402]        __schedule+0x1264/0x6730
[  554.941480][ T7402]        schedule+0xdd/0x2c0
[  554.941493][ T7402]        worker_thread+0x53b/0xe50
[  554.941508][ T7402]        kthread+0x370/0x450
[  554.941520][ T7402]        ret_from_fork+0x72b/0xd50
[  554.941539][ T7402]        ret_from_fork_asm+0x1a/0x30
[  554.941559][ T7402] 
[  554.941559][ T7402] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  554.941576][ T7402]        lock_acquire+0x1b9/0x370
[  554.941591][ T7402]        _raw_spin_lock_irqsave+0x3a/0x60
[  554.941605][ T7402]        serial8250_console_write+0x177/0x1a50
[  554.941625][ T7402]        console_flush_one_record+0x790/0xe50
[  554.941650][ T7402]        console_unlock+0x103/0x260
[  554.941673][ T7402]        vprintk_emit+0x407/0x6b0
[  554.941684][ T7402]        _printk+0xcf/0x110
[  554.941696][ T7402]        register_console.cold+0xc0/0x248
[  554.941709][ T7402]        univ8250_console_init+0x6f/0x80
[  554.941728][ T7402]        console_init+0x3d5/0x5b0
[  554.941742][ T7402]        start_kernel+0x314/0x490
[  554.941761][ T7402]        x86_64_start_reservations+0x24/0x30
[  554.941782][ T7402]        x86_64_start_kernel+0x12b/0x130
[  554.941802][ T7402]        common_startup_64+0x13e/0x158
[  554.941814][ T7402] 
[  554.941814][ T7402] -> #0 (console_owner){-.-.}-{0:0}:
[  554.941831][ T7402]        check_prev_add+0xeb/0xe60
[  554.941846][ T7402]        __lock_acquire+0x136c/0x1a40
[  554.941862][ T7402]        lock_acquire+0x1b9/0x370
[  554.941877][ T7402]        console_lock_spinning_enable+0x72/0x80
[  554.941897][ T7402]        console_flush_one_record+0x739/0xe50
[  554.941917][ T7402]        console_unlock+0x103/0x260
[  554.941937][ T7402]        vprintk_emit+0x407/0x6b0
[  554.941947][ T7402]        _printk+0xcf/0x110
[  554.941958][ T7402]        __report_bug.cold+0x34/0x141
[  554.941973][ T7402]        report_bug+0xb2/0x220
[  554.941990][ T7402]        handle_bug+0x16a/0x2a0
[  554.942008][ T7402]        exc_invalid_op+0x17/0x50
[  554.942027][ T7402]        asm_exc_invalid_op+0x1a/0x20
[  554.942039][ T7402]        update_rq_clock+0x40a/0xd20
[  554.942059][ T7402]        __schedule+0x1e2d/0x6730
[  554.942072][ T7402]        preempt_schedule_irq+0x50/0x90
[  554.942088][ T7402]        irqentry_exit+0x205/0xa00
[  554.942104][ T7402]        asm_sysvec_reschedule_ipi+0x1a/0x20
[  554.942118][ T7402]        lock_release+0x0/0x310
[  554.942133][ T7402]        unwind_next_frame+0x3c3/0x2090
[  554.942147][ T7402]        arch_stack_walk+0x94/0xf0
[  554.942158][ T7402]        stack_trace_save+0x8e/0xc0
[  554.942171][ T7402]        save_stack+0x162/0x1e0
[  554.942186][ T7402]        __reset_page_owner+0x84/0x190
[  554.942202][ T7402]        free_unref_folios+0xa44/0x1710
[  554.942215][ T7402]        folios_put_refs+0x585/0xaa0
[  554.942236][ T7402]        shmem_undo_range+0x5e5/0x1570
[  554.942250][ T7402]        shmem_evict_inode+0x3a5/0xbe0
[  554.942263][ T7402]        evict+0x3c2/0xad0
[  554.942280][ T7402]        iput.part.0+0x989/0x1050
[  554.942297][ T7402]        iput+0x35/0x40
[  554.942313][ T7402]        dentry_unlink_inode+0x284/0x470
[  554.942329][ T7402]        dentry_kill+0x25d/0xc20
[  554.942346][ T7402]        shrink_dentry_list+0x1e8/0x310
[  554.942365][ T7402]        shrink_dcache_tree+0x201/0x400
[  554.942384][ T7402]        shrink_dcache_for_umount+0x101/0x6c0
[  554.942405][ T7402]        generic_shutdown_super+0x7e/0x360
[  554.942424][ T7402]        kill_anon_super+0x3a/0x60
[  554.942442][ T7402]        deactivate_locked_super+0xc1/0x1b0
[  554.942462][ T7402]        deactivate_super+0xe7/0x110
[  554.942481][ T7402]        cleanup_mnt+0x21f/0x450
[  554.942493][ T7402]        task_work_run+0x150/0x240
[  554.942507][ T7402]        do_exit+0x951/0x2ae0
[  554.942518][ T7402]        do_group_exit+0xd5/0x2a0
[  554.942530][ T7402]        get_signal+0x1ec7/0x21e0
[  554.942547][ T7402]        arch_do_signal_or_restart+0x91/0x7e0
[  554.942561][ T7402]        exit_to_user_mode_loop+0x139/0x6f0
[  554.942579][ T7402]        do_syscall_64+0x666/0x870
[  554.942596][ T7402]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.942609][ T7402] 
[  554.942609][ T7402] other info that might help us debug this:
[  554.942609][ T7402] 
[  554.942613][ T7402] Chain exists of:
[  554.942613][ T7402]   console_owner --> &p->pi_lock --> &rq->__lock
[  554.942613][ T7402] 
[  554.942633][ T7402]  Possible unsafe locking scenario:
[  554.942633][ T7402] 
[  554.942641][ T7402]        CPU0                    CPU1
[  554.942645][ T7402]        ----                    ----
[  554.942649][ T7402]   lock(&rq->__lock);
[  554.942658][ T7402]                                lock(&p->pi_lock);
[  554.942667][ T7402]                                lock(&rq->__lock);
[  554.942677][ T7402]   lock(console_owner);
[  554.942685][ T7402] 
[  554.942685][ T7402]  *** DEADLOCK ***
[  554.942685][ T7402] 
[  554.942689][ T7402] 5 locks held by syz.4.318/7402:
[  554.942696][ T7402]  #0: ffff8880375940d8 (&type->s_umount_key#34){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  554.942737][ T7402]  #1: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  554.942768][ T7402]  #2: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  554.942804][ T7402]  #3: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[  554.942834][ T7402]  #4: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[  554.942872][ T7402] 
[  554.942872][ T7402] stack backtrace:
[  554.942881][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.4.318 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.942900][ T7402] Tainted: [L]=SOFTLOCKUP
[  554.942905][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  554.942914][ T7402] Call Trace:
[  554.942919][ T7402]  <TASK>
[  554.942925][ T7402]  dump_stack_lvl+0x100/0x190
[  554.942941][ T7402]  print_circular_bug.cold+0x178/0x1c7
[  554.942964][ T7402]  check_noncircular+0x146/0x160
[  554.942982][ T7402]  check_prev_add+0xeb/0xe60
[  554.943000][ T7402]  __lock_acquire+0x136c/0x1a40
[  554.943020][ T7402]  lock_acquire+0x1b9/0x370
[  554.943036][ T7402]  ? console_lock_spinning_enable+0x61/0x80
[  554.943057][ T7402]  ? console_lock_spinning_enable+0x4a/0x80
[  554.943080][ T7402]  console_lock_spinning_enable+0x72/0x80
[  554.943101][ T7402]  ? console_lock_spinning_enable+0x61/0x80
[  554.943122][ T7402]  console_flush_one_record+0x739/0xe50
[  554.943145][ T7402]  ? __pfx_console_flush_one_record+0x10/0x10
[  554.943170][ T7402]  ? is_printk_cpu_sync_owner+0x32/0x40
[  554.943185][ T7402]  console_unlock+0x103/0x260
[  554.943207][ T7402]  ? __pfx_console_unlock+0x10/0x10
[  554.943229][ T7402]  ? do_raw_spin_unlock+0x145/0x1e0
[  554.943250][ T7402]  ? _printk+0xcf/0x110
[  554.943264][ T7402]  vprintk_emit+0x407/0x6b0
[  554.943276][ T7402]  ? __pfx_vprintk_emit+0x10/0x10
[  554.943288][ T7402]  ? do_raw_spin_lock+0x128/0x260
[  554.943309][ T7402]  ? find_held_lock+0x2b/0x80
[  554.943321][ T7402]  ? debug_object_activate+0x343/0x4b0
[  554.943343][ T7402]  _printk+0xcf/0x110
[  554.943355][ T7402]  ? __pfx__printk+0x10/0x10
[  554.943368][ T7402]  ? debug_object_activate+0x343/0x4b0
[  554.943388][ T7402]  ? __pfx_debug_object_activate+0x10/0x10
[  554.943406][ T7402]  ? __report_bug.cold+0x24/0x141
[  554.943422][ T7402]  ? __report_bug+0x2ab/0x440
[  554.943439][ T7402]  __report_bug.cold+0x34/0x141
[  554.943454][ T7402]  ? update_rq_clock+0x40a/0xd20
[  554.943475][ T7402]  ? __pfx___report_bug+0x10/0x10
[  554.943494][ T7402]  ? __lock_acquire+0x49f/0x1a40
[  554.943512][ T7402]  ? update_rq_clock+0x40a/0xd20
[  554.943533][ T7402]  report_bug+0xb2/0x220
[  554.943550][ T7402]  ? update_rq_clock+0x40a/0xd20
[  554.943570][ T7402]  handle_bug+0x16a/0x2a0
[  554.943590][ T7402]  exc_invalid_op+0x17/0x50
[  554.943624][ T7402]  asm_exc_invalid_op+0x1a/0x20
[  554.943641][ T7402] RIP: 0010:update_rq_clock+0x40a/0xd20
[  554.943662][ T7402] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  554.943676][ T7402] RSP: 0018:ffffc900034e6930 EFLAGS: 00010046
[  554.943687][ T7402] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001
[  554.943696][ T7402] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380
[  554.943705][ T7402] RBP: ffffc900034e6ad8 R08: 0000000000000001 R09: 0000000000000001
[  554.943714][ T7402] R10: ffffffff912191d7 R11: 0000000000000000 R12: ffffffff9121c5a4
[  554.943723][ T7402] R13: ffff8880b853c3a0 R14: ffff88801eac4a80 R15: ffff8880b843c058
[  554.943739][ T7402]  __schedule+0x1e2d/0x6730
[  554.943759][ T7402]  ? __pfx___schedule+0x10/0x10
[  554.943776][ T7402]  ? mark_held_locks+0x40/0x70
[  554.943793][ T7402]  preempt_schedule_irq+0x50/0x90
[  554.943810][ T7402]  irqentry_exit+0x205/0xa00
[  554.943828][ T7402]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  554.943843][ T7402] RIP: 0010:lock_release+0x0/0x310
[  554.943860][ T7402] Code: 8b 44 24 1c 44 8b 4c 24 18 4c 8b 54 24 10 44 8b 5c 24 0c eb 98 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b
[  554.943873][ T7402] RSP: 0018:ffffc900034e6bf0 EFLAGS: 00000202
[  554.943884][ T7402] RAX: 0000000000000001 RBX: ffffc900034e6eb0 RCX: ffffffff91d38401
[  554.943893][ T7402] RDX: 0000000000000000 RSI: ffffffff81b866be RDI: ffffffff8ebe8200
[  554.943902][ T7402] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007
[  554.943910][ T7402] R10: 0000000000000200 R11: 000000000001857b R12: ffffc900034e6cb8
[  554.943919][ T7402] R13: ffffc900034e6c68 R14: ffffc900034e6eb0 R15: ffffc900034e6c9c
[  554.943931][ T7402]  ? unwind_next_frame+0x3be/0x2090
[  554.943946][ T7402]  unwind_next_frame+0x3c3/0x2090
[  554.943960][ T7402]  ? save_stack+0x162/0x1e0
[  554.943977][ T7402]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  554.943993][ T7402]  arch_stack_walk+0x94/0xf0
[  554.944006][ T7402]  ? __reset_page_owner+0x84/0x190
[  554.944026][ T7402]  stack_trace_save+0x8e/0xc0
[  554.944040][ T7402]  ? __pfx_stack_trace_save+0x10/0x10
[  554.944055][ T7402]  ? __lock_acquire+0x49f/0x1a40
[  554.944071][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  554.944087][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  554.944105][ T7402]  save_stack+0x162/0x1e0
[  554.944121][ T7402]  ? __pfx_save_stack+0x10/0x10
[  554.944141][ T7402]  ? page_ext_put+0x3e/0xd0
[  554.944160][ T7402]  __reset_page_owner+0x84/0x190
[  554.944179][ T7402]  free_unref_folios+0xa44/0x1710
[  554.944195][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  554.944212][ T7402]  folios_put_refs+0x585/0xaa0
[  554.944235][ T7402]  ? __pfx_folios_put_refs+0x10/0x10
[  554.944258][ T7402]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  554.944276][ T7402]  shmem_undo_range+0x5e5/0x1570
[  554.944294][ T7402]  ? __pfx_shmem_undo_range+0x10/0x10
[  554.944326][ T7402]  shmem_evict_inode+0x3a5/0xbe0
[  554.944341][ T7402]  ? inode_wait_for_writeback+0x171/0x390
[  554.944356][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  554.944371][ T7402]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  554.944386][ T7402]  ? find_held_lock+0x2b/0x80
[  554.944398][ T7402]  ? evict+0x37e/0xad0
[  554.944415][ T7402]  ? evict+0x37e/0xad0
[  554.944433][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  554.944448][ T7402]  evict+0x3c2/0xad0
[  554.944466][ T7402]  ? __pfx_evict+0x10/0x10
[  554.944486][ T7402]  ? iput.part.0+0x981/0x1050
[  554.944506][ T7402]  iput.part.0+0x989/0x1050
[  554.944527][ T7402]  iput+0x35/0x40
[  554.944544][ T7402]  dentry_unlink_inode+0x284/0x470
[  554.944562][ T7402]  dentry_kill+0x25d/0xc20
[  554.944582][ T7402]  shrink_dentry_list+0x1e8/0x310
[  554.944603][ T7402]  ? __pfx_select_collect_umount+0x10/0x10
[  554.944622][ T7402]  shrink_dcache_tree+0x201/0x400
[  554.944651][ T7402]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  554.944672][ T7402]  ? fsnotify_grab_connector+0x11f/0x290
[  554.944699][ T7402]  shrink_dcache_for_umount+0x101/0x6c0
[  554.944721][ T7402]  ? __pfx_shrink_dcache_for_umount+0x10/0x10
[  554.944744][ T7402]  ? __pfx_fsnotify_sb_delete+0x10/0x10
[  554.944763][ T7402]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  554.944782][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  554.944801][ T7402]  generic_shutdown_super+0x7e/0x360
[  554.944822][ T7402]  kill_anon_super+0x3a/0x60
[  554.944841][ T7402]  deactivate_locked_super+0xc1/0x1b0
[  554.944862][ T7402]  deactivate_super+0xe7/0x110
[  554.944882][ T7402]  cleanup_mnt+0x21f/0x450
[  554.944896][ T7402]  task_work_run+0x150/0x240
[  554.944912][ T7402]  ? __pfx_task_work_run+0x10/0x10
[  554.944929][ T7402]  do_exit+0x951/0x2ae0
[  554.944942][ T7402]  ? __pfx_do_exit+0x10/0x10
[  554.944954][ T7402]  ? cgroup_update_frozen_flag+0x125/0x240
[  554.944977][ T7402]  ? find_held_lock+0x2b/0x80
[  554.944989][ T7402]  ? get_signal+0x184f/0x21e0
[  554.945008][ T7402]  do_group_exit+0xd5/0x2a0
[  554.945022][ T7402]  get_signal+0x1ec7/0x21e0
[  554.945043][ T7402]  ? __pfx_get_signal+0x10/0x10
[  554.945061][ T7402]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  554.945078][ T7402]  arch_do_signal_or_restart+0x91/0x7e0
[  554.945094][ T7402]  ? get_timespec64+0x147/0x240
[  554.945110][ T7402]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  554.945128][ T7402]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  554.945147][ T7402]  exit_to_user_mode_loop+0x139/0x6f0
[  554.945165][ T7402]  ? rcu_is_watching+0x12/0xc0
[  554.945187][ T7402]  do_syscall_64+0x666/0x870
[  554.945205][ T7402]  ? clear_bhb_loop+0x70/0xc0
[  554.945221][ T7402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.945235][ T7402] RIP: 0033:0x7fce3535e90e
[  554.945245][ T7402] Code: Unable to access opcode bytes at 0x7fce3535e8e4.
[  554.945252][ T7402] RSP: 002b:00007fce361fbf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  554.945264][ T7402] RAX: fffffffffffffdfc RBX: 00007fce361fc6c0 RCX: 00007fce3535e90e
[  554.945273][ T7402] RDX: 00007fce361fbfb0 RSI: 0000000000000000 RDI: 0000000000000000
[  554.945282][ T7402] RBP: 00007fce35435024 R08: 0000000000000000 R09: 0000000000000000
[  554.945290][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.945299][ T7402] R13: 00007fce35626038 R14: 00007fce35625fa0 R15: 00007ffec479a7e8
[  554.945312][ T7402]  </TASK>
[  556.733372][ T7402] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
[  556.733384][ T7402] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.4.318/7402
[  556.751124][ T7402] Modules linked in:
[  556.755001][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.4.318 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  556.765741][ T7402] Tainted: [L]=SOFTLOCKUP
[  556.770041][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  556.780074][ T7402] RIP: 0010:update_rq_clock+0x40a/0xd20
[  556.785623][ T7402] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  556.805210][ T7402] RSP: 0018:ffffc900034e6930 EFLAGS: 00010046
[  556.811270][ T7402] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001
[  556.819219][ T7402] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380
[  556.827170][ T7402] RBP: ffffc900034e6ad8 R08: 0000000000000001 R09: 0000000000000001
[  556.835121][ T7402] R10: ffffffff912191d7 R11: 0000000000000000 R12: ffffffff9121c5a4
[  556.843084][ T7402] R13: ffff8880b853c3a0 R14: ffff88801eac4a80 R15: ffff8880b843c058
[  556.851045][ T7402] FS:  0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000
[  556.860051][ T7402] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  556.866626][ T7402] CR2: 0000200000b15000 CR3: 000000004bc7d000 CR4: 00000000003526f0
[  556.874577][ T7402] Call Trace:
[  556.877838][ T7402]  <TASK>
[  556.880751][ T7402]  __schedule+0x1e2d/0x6730
[  556.885244][ T7402]  ? __pfx___schedule+0x10/0x10
[  556.890077][ T7402]  ? mark_held_locks+0x40/0x70
[  556.894825][ T7402]  preempt_schedule_irq+0x50/0x90
[  556.899835][ T7402]  irqentry_exit+0x205/0xa00
[  556.904410][ T7402]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  556.909850][ T7402] RIP: 0010:lock_release+0x0/0x310
[  556.914943][ T7402] Code: 8b 44 24 1c 44 8b 4c 24 18 4c 8b 54 24 10 44 8b 5c 24 0c eb 98 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b
[  556.934544][ T7402] RSP: 0018:ffffc900034e6bf0 EFLAGS: 00000202
[  556.940603][ T7402] RAX: 0000000000000001 RBX: ffffc900034e6eb0 RCX: ffffffff91d38401
[  556.948555][ T7402] RDX: 0000000000000000 RSI: ffffffff81b866be RDI: ffffffff8ebe8200
[  556.956592][ T7402] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007
[  556.964542][ T7402] R10: 0000000000000200 R11: 000000000001857b R12: ffffc900034e6cb8
[  556.972493][ T7402] R13: ffffc900034e6c68 R14: ffffc900034e6eb0 R15: ffffc900034e6c9c
[  556.980449][ T7402]  ? unwind_next_frame+0x3be/0x2090
[  556.985630][ T7402]  unwind_next_frame+0x3c3/0x2090
[  556.990634][ T7402]  ? save_stack+0x162/0x1e0
[  556.995135][ T7402]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  557.001272][ T7402]  arch_stack_walk+0x94/0xf0
[  557.005845][ T7402]  ? __reset_page_owner+0x84/0x190
[  557.010941][ T7402]  stack_trace_save+0x8e/0xc0
[  557.015601][ T7402]  ? __pfx_stack_trace_save+0x10/0x10
[  557.020953][ T7402]  ? __lock_acquire+0x49f/0x1a40
[  557.025874][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  557.031664][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  557.036847][ T7402]  save_stack+0x162/0x1e0
[  557.041172][ T7402]  ? __pfx_save_stack+0x10/0x10
[  557.046010][ T7402]  ? page_ext_put+0x3e/0xd0
[  557.050496][ T7402]  __reset_page_owner+0x84/0x190
[  557.055421][ T7402]  free_unref_folios+0xa44/0x1710
[  557.060431][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  557.066218][ T7402]  folios_put_refs+0x585/0xaa0
[  557.070972][ T7402]  ? __pfx_folios_put_refs+0x10/0x10
[  557.076246][ T7402]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  557.082556][ T7402]  shmem_undo_range+0x5e5/0x1570
[  557.087479][ T7402]  ? __pfx_shmem_undo_range+0x10/0x10
[  557.092849][ T7402]  shmem_evict_inode+0x3a5/0xbe0
[  557.097771][ T7402]  ? inode_wait_for_writeback+0x171/0x390
[  557.103468][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  557.108906][ T7402]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  557.114953][ T7402]  ? find_held_lock+0x2b/0x80
[  557.119608][ T7402]  ? evict+0x37e/0xad0
[  557.123665][ T7402]  ? evict+0x37e/0xad0
[  557.127722][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  557.133161][ T7402]  evict+0x3c2/0xad0
[  557.137041][ T7402]  ? __pfx_evict+0x10/0x10
[  557.141448][ T7402]  ? iput.part.0+0x981/0x1050
[  557.146120][ T7402]  iput.part.0+0x989/0x1050
[  557.150609][ T7402]  iput+0x35/0x40
[  557.154227][ T7402]  dentry_unlink_inode+0x284/0x470
[  557.159321][ T7402]  dentry_kill+0x25d/0xc20
[  557.163727][ T7402]  shrink_dentry_list+0x1e8/0x310
[  557.168738][ T7402]  ? __pfx_select_collect_umount+0x10/0x10
[  557.174526][ T7402]  shrink_dcache_tree+0x201/0x400
[  557.179547][ T7402]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  557.185077][ T7402]  ? fsnotify_grab_connector+0x11f/0x290
[  557.190715][ T7402]  shrink_dcache_for_umount+0x101/0x6c0
[  557.196261][ T7402]  ? __pfx_shrink_dcache_for_umount+0x10/0x10
[  557.202315][ T7402]  ? __pfx_fsnotify_sb_delete+0x10/0x10
[  557.207844][ T7402]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  557.213982][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  557.219163][ T7402]  generic_shutdown_super+0x7e/0x360
[  557.224433][ T7402]  kill_anon_super+0x3a/0x60
[  557.229008][ T7402]  deactivate_locked_super+0xc1/0x1b0
[  557.234364][ T7402]  deactivate_super+0xe7/0x110
[  557.239114][ T7402]  cleanup_mnt+0x21f/0x450
[  557.243509][ T7402]  task_work_run+0x150/0x240
[  557.248081][ T7402]  ? __pfx_task_work_run+0x10/0x10
[  557.253173][ T7402]  do_exit+0x951/0x2ae0
[  557.257307][ T7402]  ? __pfx_do_exit+0x10/0x10
[  557.261889][ T7402]  ? cgroup_update_frozen_flag+0x125/0x240
[  557.267683][ T7402]  ? find_held_lock+0x2b/0x80
[  557.272339][ T7402]  ? get_signal+0x184f/0x21e0
[  557.277001][ T7402]  do_group_exit+0xd5/0x2a0
[  557.281484][ T7402]  get_signal+0x1ec7/0x21e0
[  557.285973][ T7402]  ? __pfx_get_signal+0x10/0x10
[  557.290805][ T7402]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  557.296261][ T7402]  arch_do_signal_or_restart+0x91/0x7e0
[  557.301790][ T7402]  ? get_timespec64+0x147/0x240
[  557.306626][ T7402]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  557.312763][ T7402]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  557.318550][ T7402]  exit_to_user_mode_loop+0x139/0x6f0
[  557.323905][ T7402]  ? rcu_is_watching+0x12/0xc0
[  557.328673][ T7402]  do_syscall_64+0x666/0x870
[  557.333249][ T7402]  ? clear_bhb_loop+0x70/0xc0
[  557.337922][ T7402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.343807][ T7402] RIP: 0033:0x7fce3535e90e
[  557.348201][ T7402] Code: Unable to access opcode bytes at 0x7fce3535e8e4.
[  557.355199][ T7402] RSP: 002b:00007fce361fbf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  557.363593][ T7402] RAX: fffffffffffffdfc RBX: 00007fce361fc6c0 RCX: 00007fce3535e90e
[  557.371545][ T7402] RDX: 00007fce361fbfb0 RSI: 0000000000000000 RDI: 0000000000000000
[  557.379590][ T7402] RBP: 00007fce35435024 R08: 0000000000000000 R09: 0000000000000000
[  557.387542][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.395490][ T7402] R13: 00007fce35626038 R14: 00007fce35625fa0 R15: 00007ffec479a7e8
[  557.403635][ T7402]  </TASK>
[  557.406650][ T7402] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  557.413917][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.4.318 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  557.424675][ T7402] Tainted: [L]=SOFTLOCKUP
[  557.428982][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  557.439015][ T7402] Call Trace:
[  557.442279][ T7402]  <TASK>
[  557.445190][ T7402]  dump_stack_lvl+0x100/0x190
[  557.449851][ T7402]  vpanic+0x552/0x970
[  557.453809][ T7402]  ? __pfx_vpanic+0x10/0x10
[  557.458291][ T7402]  ? lock_release+0x24d/0x310
[  557.462954][ T7402]  panic+0xd1/0xe0
[  557.466654][ T7402]  ? __pfx_panic+0x10/0x10
[  557.471049][ T7402]  ? check_panic_on_warn+0x1f/0x90
[  557.476157][ T7402]  check_panic_on_warn.cold+0x19/0x34
[  557.481521][ T7402]  ? update_rq_clock+0x40a/0xd20
[  557.486454][ T7402]  __warn.cold+0x191/0x318
[  557.490851][ T7402]  __report_bug+0x30f/0x440
[  557.495340][ T7402]  ? update_rq_clock+0x40a/0xd20
[  557.500274][ T7402]  ? __pfx___report_bug+0x10/0x10
[  557.505285][ T7402]  ? __lock_acquire+0x49f/0x1a40
[  557.510206][ T7402]  ? update_rq_clock+0x40a/0xd20
[  557.515130][ T7402]  report_bug+0xb2/0x220
[  557.519353][ T7402]  ? update_rq_clock+0x40a/0xd20
[  557.524276][ T7402]  handle_bug+0x16a/0x2a0
[  557.528591][ T7402]  exc_invalid_op+0x17/0x50
[  557.533086][ T7402]  asm_exc_invalid_op+0x1a/0x20
[  557.537919][ T7402] RIP: 0010:update_rq_clock+0x40a/0xd20
[  557.543457][ T7402] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  557.563045][ T7402] RSP: 0018:ffffc900034e6930 EFLAGS: 00010046
[  557.569109][ T7402] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001
[  557.577079][ T7402] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380
[  557.585031][ T7402] RBP: ffffc900034e6ad8 R08: 0000000000000001 R09: 0000000000000001
[  557.592983][ T7402] R10: ffffffff912191d7 R11: 0000000000000000 R12: ffffffff9121c5a4
[  557.600935][ T7402] R13: ffff8880b853c3a0 R14: ffff88801eac4a80 R15: ffff8880b843c058
[  557.608900][ T7402]  __schedule+0x1e2d/0x6730
[  557.613392][ T7402]  ? __pfx___schedule+0x10/0x10
[  557.618232][ T7402]  ? mark_held_locks+0x40/0x70
[  557.622993][ T7402]  preempt_schedule_irq+0x50/0x90
[  557.628008][ T7402]  irqentry_exit+0x205/0xa00
[  557.632585][ T7402]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  557.638037][ T7402] RIP: 0010:lock_release+0x0/0x310
[  557.643132][ T7402] Code: 8b 44 24 1c 44 8b 4c 24 18 4c 8b 54 24 10 44 8b 5c 24 0c eb 98 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b
[  557.662731][ T7402] RSP: 0018:ffffc900034e6bf0 EFLAGS: 00000202
[  557.668789][ T7402] RAX: 0000000000000001 RBX: ffffc900034e6eb0 RCX: ffffffff91d38401
[  557.676751][ T7402] RDX: 0000000000000000 RSI: ffffffff81b866be RDI: ffffffff8ebe8200
[  557.684703][ T7402] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007
[  557.692653][ T7402] R10: 0000000000000200 R11: 000000000001857b R12: ffffc900034e6cb8
[  557.700603][ T7402] R13: ffffc900034e6c68 R14: ffffc900034e6eb0 R15: ffffc900034e6c9c
[  557.708560][ T7402]  ? unwind_next_frame+0x3be/0x2090
[  557.713753][ T7402]  unwind_next_frame+0x3c3/0x2090
[  557.718761][ T7402]  ? save_stack+0x162/0x1e0
[  557.723250][ T7402]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  557.729386][ T7402]  arch_stack_walk+0x94/0xf0
[  557.733957][ T7402]  ? __reset_page_owner+0x84/0x190
[  557.739051][ T7402]  stack_trace_save+0x8e/0xc0
[  557.743706][ T7402]  ? __pfx_stack_trace_save+0x10/0x10
[  557.749058][ T7402]  ? __lock_acquire+0x49f/0x1a40
[  557.753978][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  557.759763][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  557.764942][ T7402]  save_stack+0x162/0x1e0
[  557.769254][ T7402]  ? __pfx_save_stack+0x10/0x10
[  557.774088][ T7402]  ? page_ext_put+0x3e/0xd0
[  557.778575][ T7402]  __reset_page_owner+0x84/0x190
[  557.783497][ T7402]  free_unref_folios+0xa44/0x1710
[  557.788506][ T7402]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  557.794292][ T7402]  folios_put_refs+0x585/0xaa0
[  557.799043][ T7402]  ? __pfx_folios_put_refs+0x10/0x10
[  557.804314][ T7402]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  557.810627][ T7402]  shmem_undo_range+0x5e5/0x1570
[  557.815548][ T7402]  ? __pfx_shmem_undo_range+0x10/0x10
[  557.820916][ T7402]  shmem_evict_inode+0x3a5/0xbe0
[  557.825834][ T7402]  ? inode_wait_for_writeback+0x171/0x390
[  557.831533][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  557.836972][ T7402]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  557.843027][ T7402]  ? find_held_lock+0x2b/0x80
[  557.847681][ T7402]  ? evict+0x37e/0xad0
[  557.851747][ T7402]  ? evict+0x37e/0xad0
[  557.855799][ T7402]  ? __pfx_shmem_evict_inode+0x10/0x10
[  557.861238][ T7402]  evict+0x3c2/0xad0
[  557.865122][ T7402]  ? __pfx_evict+0x10/0x10
[  557.869524][ T7402]  ? iput.part.0+0x981/0x1050
[  557.874196][ T7402]  iput.part.0+0x989/0x1050
[  557.878685][ T7402]  iput+0x35/0x40
[  557.882306][ T7402]  dentry_unlink_inode+0x284/0x470
[  557.887404][ T7402]  dentry_kill+0x25d/0xc20
[  557.891814][ T7402]  shrink_dentry_list+0x1e8/0x310
[  557.896826][ T7402]  ? __pfx_select_collect_umount+0x10/0x10
[  557.902618][ T7402]  shrink_dcache_tree+0x201/0x400
[  557.907631][ T7402]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  557.913162][ T7402]  ? fsnotify_grab_connector+0x11f/0x290
[  557.918788][ T7402]  shrink_dcache_for_umount+0x101/0x6c0
[  557.924323][ T7402]  ? __pfx_shrink_dcache_for_umount+0x10/0x10
[  557.930388][ T7402]  ? __pfx_fsnotify_sb_delete+0x10/0x10
[  557.935918][ T7402]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  557.942058][ T7402]  ? lockdep_hardirqs_on+0x78/0x100
[  557.947254][ T7402]  generic_shutdown_super+0x7e/0x360
[  557.952527][ T7402]  kill_anon_super+0x3a/0x60
[  557.957102][ T7402]  deactivate_locked_super+0xc1/0x1b0
[  557.962461][ T7402]  deactivate_super+0xe7/0x110
[  557.967212][ T7402]  cleanup_mnt+0x21f/0x450
[  557.971625][ T7402]  task_work_run+0x150/0x240
[  557.976207][ T7402]  ? __pfx_task_work_run+0x10/0x10
[  557.981314][ T7402]  do_exit+0x951/0x2ae0
[  557.985452][ T7402]  ? __pfx_do_exit+0x10/0x10
[  557.990033][ T7402]  ? cgroup_update_frozen_flag+0x125/0x240
[  557.995830][ T7402]  ? find_held_lock+0x2b/0x80
[  558.000487][ T7402]  ? get_signal+0x184f/0x21e0
[  558.005149][ T7402]  do_group_exit+0xd5/0x2a0
[  558.009631][ T7402]  get_signal+0x1ec7/0x21e0
[  558.014122][ T7402]  ? __pfx_get_signal+0x10/0x10
[  558.018970][ T7402]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  558.024411][ T7402]  arch_do_signal_or_restart+0x91/0x7e0
[  558.029952][ T7402]  ? get_timespec64+0x147/0x240
[  558.034786][ T7402]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  558.040922][ T7402]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  558.046721][ T7402]  exit_to_user_mode_loop+0x139/0x6f0
[  558.052087][ T7402]  ? rcu_is_watching+0x12/0xc0
[  558.056852][ T7402]  do_syscall_64+0x666/0x870
[  558.061428][ T7402]  ? clear_bhb_loop+0x70/0xc0
[  558.066102][ T7402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.071976][ T7402] RIP: 0033:0x7fce3535e90e
[  558.076378][ T7402] Code: Unable to access opcode bytes at 0x7fce3535e8e4.
[  558.083385][ T7402] RSP: 002b:00007fce361fbf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  558.091777][ T7402] RAX: fffffffffffffdfc RBX: 00007fce361fc6c0 RCX: 00007fce3535e90e
[  558.099729][ T7402] RDX: 00007fce361fbfb0 RSI: 0000000000000000 RDI: 0000000000000000
[  558.107679][ T7402] RBP: 00007fce35435024 R08: 0000000000000000 R09: 0000000000000000
[  558.115629][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  558.123580][ T7402] R13: 00007fce35626038 R14: 00007fce35625fa0 R15: 00007ffec479a7e8
[  558.131548][ T7402]  </TASK>
[  558.134682][ T7402] Kernel Offset: disabled
[  558.138986][ T7402] Rebooting in 86400 seconds..