last executing test programs:

3m59.764545987s ago: executing program 1 (id=638):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
unshare(0x6020400)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x40)
openat$audio1(0xffffff9c, &(0x7f0000000200), 0x800, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r2}, 0x18)
munlockall()
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x3)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89fd, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x61, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0xa004)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="0d202bbd7080ffdbdf25030000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r7 = fsmount(r3, 0x1, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]})
openat$cgroup_int(r7, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3m57.86679115s ago: executing program 1 (id=647):
r0 = socket(0xa, 0x3, 0x3a)
memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0600000004003282e343abadc99b18f0e22805bceed43403e95cc09522d42a1e0f491fa78a68989df2f3bd7525d89f0e849de51ee6c004c7a2d149382ea9ce907acb67c07dddd2a001b18cbe73e6b9f5ba9c487141a4aa733dcccd6b65906edffbff9572c85f475c884622a222d6ec7cf4e230d90d998c0394fcb0b9631310e86da5afabaeb6fb965045efcaf851b7efd4afc8ba88bae7a5ee7a72e5370ce65d61ec008e29aae7fe8625b54be78d8c9cd756be4e9a38c234c349c235c79915857a6ad8755e6cc7eb9ed16cc616ca47fddd03881a494d00"/225])
r1 = socket$kcm(0x11, 0xa, 0x300)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1f7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
socket(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000001000/0x3000)=nil, 0x1000, 0x1, 0x10, r3, 0x82000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="180000001200009c5102e7e67c5ad9ca70cf004feec7", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018460000ffffffff000000000000000085000000030000001858000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183900000200000000000000000000009500000000000000fe9603004e00000023b0c4ff08000000852000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0xad59)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='$\b\x003so', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])

3m57.019592212s ago: executing program 1 (id=649):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1, 0x0, 0xfffffffe})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open(&(0x7f00000001c0)='.\x00', 0x10000, 0x1f6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt}, {@uid_lt}, {@fowner_lt}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'xfrm0\x00'}}, {@euid_gt}], 0x2c})

3m56.681441573s ago: executing program 1 (id=653):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x6, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000018000100000000000000000002200000000000080000000008000500ad1414bbc2fc56a3e6bce19163810aa0d2e75b7e199721ecbd569b23f421e02e91d7282408128c56605835fddcd0d97e3e86815019699ec0020a84b14d05c8"], 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0xfffffff9, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x103)

3m55.517423279s ago: executing program 1 (id=655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0}) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000240))
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x3) (async)
ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000140)) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @private1, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x90, 0x80}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0)

3m54.529035149s ago: executing program 1 (id=658):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = signalfd(r0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001a0013f90000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000200020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000033000000fc0000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000a000400d900000000000000480001007368613100"/240], 0x138}}, 0x0)
bind$bt_rfcomm(r1, 0x0, 0x0)
stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getuid()
mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x40}}, {@default_permissions}], [{@seclabel}, {@dont_measure}, {@fowner_lt={'fowner<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0xba}}, {@measure}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r6 = getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$selinux_context(0xffffffffffffffff, &(0x7f0000000140)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r8, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x7}, 0x1c)
r9 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000000)={'hsr0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='nv', 0xffe8)
shutdown(r8, 0x1)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}})

3m39.382360842s ago: executing program 32 (id=658):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = signalfd(r0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001a0013f90000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000200020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000033000000fc0000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000a000400d900000000000000480001007368613100"/240], 0x138}}, 0x0)
bind$bt_rfcomm(r1, 0x0, 0x0)
stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getuid()
mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x40}}, {@default_permissions}], [{@seclabel}, {@dont_measure}, {@fowner_lt={'fowner<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0xba}}, {@measure}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r6 = getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$selinux_context(0xffffffffffffffff, &(0x7f0000000140)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r8, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x7}, 0x1c)
r9 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000000)={'hsr0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='nv', 0xffe8)
shutdown(r8, 0x1)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}})

11.149650526s ago: executing program 0 (id=1345):
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x1000000})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18})
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003f40)={0x0, &(0x7f0000000340)={0x18, 0x0, 0x100, {0x1}}, 0x0, &(0x7f00000003c0)={0x18, 0x4df60775bc85ec92, 0x2, {0x400}}, &(0x7f00000014c0)={0x18, 0xffffffffffffffda, 0x7fffffff, {0x40000000}}, &(0x7f0000001500)={0x28, 0x0, 0x400, {{0xff, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)={0x78, 0x0, 0xffffffffffffffff, {0x4, 0x3e2, 0x0, {0x2, 0xfffffffffffffff7, 0x1, 0xd, 0x4, 0x4, 0x1, 0xe80c, 0x1, 0x4000, 0x1ff, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000003940)={0x90, 0x0, 0x2b0, {0x5, 0x0, 0x101, 0x2, 0x2, 0xe5f, {0x0, 0x7, 0x8, 0x5, 0x75b, 0x10, 0x9, 0x5, 0x15d87b66, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1}}}, 0x0, &(0x7f00000036c0)=ANY=[], &(0x7f0000003cc0)={0xa0, 0x0, 0x401, {{0x1, 0x1, 0xa, 0x6, 0x8, 0xffffffff, {0x0, 0x1, 0x401, 0x4, 0xc, 0xf095, 0x1, 0x6, 0xe33f, 0x6000, 0x8, 0x0, 0xee01, 0xffffffff}}, {0x0, 0x1}}}, 0x0, &(0x7f0000003e00)={0x130, 0x0, 0x1, {0x2, 0x3da7, 0x0, '\x00', {0x10, 0x8, 0x2, 0x3, 0x0, 0x0, 0xa000, '\x00', 0x9, 0x0, 0x6, 0x7, {0xc, 0x3}, {0x9, 0xa}, {0x3, 0x9}, {0x5, 0x1}, 0xbb9, 0x8, 0x4, 0x8}}}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)

8.008876893s ago: executing program 4 (id=1354):
syz_open_dev$tty1(0xc, 0x4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x18803, 0xc104}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

7.914988568s ago: executing program 4 (id=1355):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

7.762087349s ago: executing program 4 (id=1356):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_io_uring_setup(0x333, &(0x7f0000000000)={0x0, 0x7421, 0x8, 0xfffffffd, 0x16b}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@caif=@dgm={0x25, 0x8, 0xd}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x847ba, 0x67e9, 0xe, 0x0, 0x0)

5.927991111s ago: executing program 2 (id=1362):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0)
mount$bpf(0x2000000000f0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

5.476471233s ago: executing program 4 (id=1363):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8a101)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x2f, @loopback, 0x4e23, 0x3, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.404105105s ago: executing program 5 (id=1364):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})
r3 = syz_clone(0x4c314080, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpgrp(0x0)
kcmp(r4, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080))
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x4)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0xe)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040))
r8 = socket$pppoe(0x18, 0x1, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000100))
setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, 0x0, 0x0)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCCONNECT(r11, 0x4004743a, &(0x7f0000000380))

5.343575304s ago: executing program 0 (id=1365):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000))
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
fanotify_init(0x20, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000300)={0x0, 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000980)=[{}, {}, {0x0, <r3=>0x80000000}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={r3, 0x0, &(0x7f0000002c40)})

5.320994716s ago: executing program 4 (id=1366):
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/profiling', 0x89022, 0x1)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x22)
creat(&(0x7f0000000080)='./file0\x00', 0x122)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x4062, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x3, 0x4}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2)
r3 = io_uring_setup(0x4b2b, &(0x7f0000000200)={0x0, 0x5a8c, 0x4000, 0x0, 0xf0})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x40, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)=""/13, 0xd}], &(0x7f00000000c0)=[0x4], 0x2}, 0x20)

5.271637332s ago: executing program 3 (id=1367):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x1008})
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x100f8})

4.995341772s ago: executing program 3 (id=1368):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x571c00)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4805d}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
r7 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000100))
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ac6000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0xa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet(0x2, 0x2, 0x1)
shutdown(r9, 0x0)
recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
getsockopt$sock_int(r2, 0x1, 0x5, 0x0, &(0x7f0000000180))
socket$inet6_udp(0xa, 0x2, 0x0)
accept(r1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6c93}, 0x1c)

4.670283545s ago: executing program 2 (id=1369):
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0xffe4, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x10, 0x0, <r7=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r7})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x800000b12})
r8 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0xa4, 0x0, 0x2, 0x0, 0x40}})
syz_pidfd_open(0x0, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)

3.915158802s ago: executing program 3 (id=1370):
syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fe8000000000"}}}}}}}, 0x0)

3.86176142s ago: executing program 5 (id=1371):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x26, 0x10, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

3.771338532s ago: executing program 4 (id=1372):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x100a01280, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x32d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff01]}}})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x40000009, 0x40000000000000, 0x8, 0x80000002, 0x2}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ptrace(0x10, r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)

3.770429673s ago: executing program 3 (id=1373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000b357f8900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x474481, 0x100)
sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="5c457d21167e6d433899da3115a2183fc725c289707ea3c11f40bb7dca1641e850273acd2f3b20f17625a511fc392bfc5da462ea085de20401bf6a77e9f5de89bf63b480cac5818ec0405e0481ef334fdc3ceda3d872b1bfa4930c838a7f94da20a7f4a368b9f54de70e2df5932ce4d56f7430b2dacb264aacaaeb4c5bd561d3a2f2ff3e86669f2a7e3df43c94c706ea1701453f8c06ccd20f3e3ad85f71839b285c256eba45a106848b5619ffb466c036135dd26576bf0096feca3b9364d7def2c042f92031c92c8afacbb395f7e5d15d8c9b437b2a2be1e979462865914721", 0xe0}, {&(0x7f0000000680)="f7579da64c9146dc7fa9c1b221e698314deacedc5b9837a35ce04424fbb6455ab203f4f7e62d7c37288dd35d3c96f972070946c046dc4c18391f71a54e84748f4ddada9953f3a8270d68e4b0ef16a39d048eb794ab1262988fa969b3319c9c650ca7e54554a4194e6c58a90349269faa870245ba5e238a61763c0896590c5026d9967243f2b9455c04758690a7a98ad745f1e6b5a6bdd0ad12aba9546547290a79f0577785f93c8dd8fb612294a73ec73a47c0e36dd802c5119fd37dbe7b3f4ae063d24c59eda853a2b2d63066ea47e2ec1f1e265c68526e98ca1c2b6a0c4b4f0a41ca4b7d6601d23da3c75f7977be5fdb15e40c12", 0xf5}, {&(0x7f0000000780)="7142a14d4e49e3611a532c18c33cbe007034876d79aa8d9962b0b64f8725745974343f572d646bae76a7dfc78112554fb27d13ce41ea0aa85b7cc06f485c3340b72a41225851f53fd3eee069b75a35986ffacddbb36083a3695b74797042", 0x5e}], 0x3, &(0x7f000001b000)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x40081}], 0x2, 0x20044840)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x540a, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}})
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}})
syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fc020000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

3.388885978s ago: executing program 5 (id=1374):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000300)="6626f6dff4a5bacf2d1600", 0xb, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000440)={@val={0xa, 0x72122ddbeb100a2b}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "cf7095", 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x30}, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x2, 0x0, 0x9}}}}}}}}, 0x4e)
read$watch_queue(r4, &(0x7f00000000c0)=""/16, 0x10)
keyctl$revoke(0x3, r3)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000280))
accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80000)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0)

2.985152582s ago: executing program 2 (id=1375):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000300)="6626f6dff4a5bacf2d1600", 0xb, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000440)={@val={0xa, 0x72122ddbeb100a2b}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "cf7095", 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x30}, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x2, 0x0, 0x9}}}}}}}}, 0x4e)
read$watch_queue(r4, &(0x7f00000000c0)=""/16, 0x10)
keyctl$revoke(0x3, r3)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000280))
accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80000)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0)

2.375405254s ago: executing program 0 (id=1376):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8a101)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x2f, @loopback, 0x4e23, 0x3, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.254881888s ago: executing program 3 (id=1377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @initial, @broadcast}}}]}, 0x44}}, 0x800)

2.185057181s ago: executing program 0 (id=1378):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000001180)={0x1, 0x0, {0xe, 0x7, 0x200a, 0x6, 0x4, 0x2, 0x0, 0x7}})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x15, 0x2, @tid=r1})

2.181848391s ago: executing program 5 (id=1379):
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240)=0x5, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000680)={@ll={0x11, 0x15, r5, 0x1, 0x4, 0x6, @remote}, {&(0x7f0000000380)=""/213, 0xd5}, &(0x7f0000000480)}, 0xa0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(r9, 0x1, &(0x7f0000000340))
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

1.977579873s ago: executing program 3 (id=1380):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x800, 0x6, 0x3a2})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000000)=r3)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="eb4db421e915af13865570157b8ff84aa1a5c8ed3f0fe11198bc8ea8e41913bc95981d9aeafa8822f2b523608a4b635a71aace2bedcce5cd14fdb9aa26a2c9f7", @ANYBLOB="6040f7ed242b52bd104716a2f007ce586208c5c5092fb5a70f6cc5ae19498baf093becca04e122afe445b10c6d69b00c36ee1e18e6937e71578899665d64149b7a253076ff1d73092147e6e7eebd52c3b73a8aa552826630bd7589fb4e1e0cf9f96eb32338baa15ec81d20ccd6d7e1fbed3e63ac861ad5c70cab58a8433b056e13081e78848145aa3add54725b0d089b093ff1f965309eaad80ca620defd4c42e45d4e3a539d8faf2266e3948e12cf908a", @ANYRES32=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r4, 0x4)
recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
close_range(r1, r4, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008011)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x5, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/74, 0x4a}], 0x1, 0x0, 0x1})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x22800, 0x0)
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x8, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8)

1.881178829s ago: executing program 2 (id=1381):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400040, 0x131)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
sendto$inet6(r2, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0x8001}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x114000})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000002100010000000000010000000000000000000000000000000000000064010101000000000000000000000000000000004e2200000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff000000000050001100fc020000000000000000000000000001000000000000000000000000000000006401010100000000000000000000000000000000000000000000ffffac1414aa6c01000006350000020002000c001c00", @ANYRES32=r10, @ANYBLOB="fa49e2d5283519de6ea376e93fb0f2cdb3f7983ff8b4ec84882ee62aaed91bb5f67422296a76c8e2992229bc0da240a0e0f76eb09bb924d654bf6d5bd88956f8d73adb9e42096a6d4fc77498de5e2e4b06da088ee3ce8a7fdb7b817efffc05a81d852b148bac9388f5c3324aa6b60913d966a5"], 0xac}}, 0x0)

1.207965736s ago: executing program 0 (id=1382):
socket$nl_route(0x10, 0x3, 0x0)
keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x8811)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f000050d000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0)
r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
fsmount(r5, 0x1, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d9aa9018b08004500003c3f066f3e047c73c5d3d0ba61d01414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001312b3e480a7613088fd71106c027deb3b110000"], 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)

994.357615ms ago: executing program 5 (id=1383):
syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fe8000000000"}}}}}}}, 0x0)

386.748284ms ago: executing program 5 (id=1384):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)

320.180124ms ago: executing program 0 (id=1385):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba00090400000903000000092100000001222200090581033d"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="d36a9ec4bce090a95d146f90461973f72ea90f4b775644200c72ae128a0e7988814ca467faea3cef8dcee04f0fbf8793e5118ff3c1b21ecc0cf91084e0e7646ed3feda2c5df8bf4f02ea932ecdc2d10f8950d368c2a25f2138ccf894727dac7619190f7a7456faa73d203951df4a86b93fe5cd4fb08c8d75736a2697a0e4aea4c9a06d6d459aa8bf7f8bbbdb96990ccd2f103e8d4819", 0x96)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000640)={<r4=>0x0, 0x5, 0xffffffff, 0x100, 0x8, 0xfff7, 0x9, 0xc3, {0x0, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}}, 0x861, 0x5, 0x64, 0x0, 0x7}}, &(0x7f0000000000)=0xb0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r4, 0xfff}, 0x8)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x49, {0x49, 0xe, "8fee11aa4fc5f48bbed6c9081435fbd390491570479b0aff6d3c53c1e4852078d462529c9ee0fa7a9a37730c2f3a4c3ac9c54077701b4c5f357a3c0224167b5cacd8ae4209832a"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="c626bda591db84cb2f04"]}, &(0x7f0000000540)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="203127000000b6f3faeac29a5039b55e08f5f2ffffffffffffff9527952abfbed57488f7def7fce584e2ce9565"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0xc0, 0x5, 0x3, "e18a6a"}, &(0x7f0000000200)=ANY=[@ANYBLOB="40050200000072986e4bb9ff2c3fbc7c4ea0fac920b623f8d9190d34902320855729a425c857d97c5daf88c12836372f4406564b622bb01880c050fa6eefb00322d938628334610592dbb9375059bd1bdc69a5bc72c94b1c73a935828d408aa99ae96a15eebf3717adccf81051df"]})
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)

174.877627ms ago: executing program 2 (id=1386):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x3f00, 0x1})

0s ago: executing program 2 (id=1387):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x15)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8400, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
socket$packet(0x11, 0x3, 0x300)
r8 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r9 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
read$FUSE(r8, &(0x7f0000008880)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

  T24] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  392.493699][ T5915] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  392.528693][   T24] option 3-1:0.0: device disconnected
[  392.534280][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  392.551122][ T5874] dvb-usb: error while querying for an remote control event.
[  392.719175][ T5915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  392.788669][ T5928] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  392.823507][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  392.829638][ T5931] dvb-usb: error while querying for an remote control event.
[  392.839551][ T5915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  392.954735][ T5928] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  392.968848][ T5928] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  392.992997][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  392.996383][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0
[  393.023609][ T5915] dvb-usb: error while querying for an remote control event.
[  393.027449][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  393.059110][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  393.078322][ T5928] usb 5-1: Product: syz
[  393.086916][ T5928] usb 5-1: Manufacturer: syz
[  393.095914][ T5928] usb 5-1: SerialNumber: syz
[  393.118965][ T5928] usb 5-1: config 0 descriptor??
[  393.136854][ T5928] hub 5-1:0.0: bad descriptor, ignoring hub
[  393.149307][ T5928] hub 5-1:0.0: probe with driver hub failed with error -5
[  393.251465][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  393.293883][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  393.296276][ T5928] usb 5-1: selecting invalid altsetting 0
[  393.329040][ T5915] dvb-usb: error while querying for an remote control event.
[  393.338833][ T5931] usb 4-1: USB disconnect, device number 52
[  393.366164][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  393.435394][ T5931] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  393.497919][ T5931] quatech2 4-1:0.51: device disconnected
[  393.512367][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  393.531239][   T24] dvb-usb: error while querying for an remote control event.
[  393.709814][   T24] usb 5-1: USB disconnect, device number 37
[  393.725734][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  393.731510][ T5915] dvb-usb: error while querying for an remote control event.
[  394.700056][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  394.715482][ T5915] dvb-usb: error while querying for an remote control event.
[  395.094696][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  395.100469][ T5915] dvb-usb: error while querying for an remote control event.
[  395.165750][ T5915] usb 6-1: USB disconnect, device number 6
[  395.215779][ T5915] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
[  395.239707][ T5915] option 6-1:0.0: device disconnected
[  395.256684][   T30] audit: type=1400 audit(1767699204.874:568): avc:  denied  { getopt } for  pid=9569 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  395.292638][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  395.298923][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'.
[  395.307946][ T5931] dvb-usb: error while querying for an remote control event.
[  395.394768][   T61] wlan1: Trigger new scan to find an IBSS to join
[  395.416260][ T9584] binder: 9583:9584 ioctl 4018620d 0 returned -22
[  395.542402][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  395.619896][ T9585] ntfs3(nullb0): Primary boot signature is not NTFS.
[  395.627382][ T5931] dvb-usb: error while querying for an remote control event.
[  395.627846][ T9585] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  395.856545][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  395.862452][ T6199] dvb-usb: error while querying for an remote control event.
[  395.934083][ T9591] 8021q: VLANs not supported on gre0
[  396.108392][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  396.114477][ T5931] dvb-usb: error while querying for an remote control event.
[  396.385635][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  396.416096][ T5931] dvb-usb: error while querying for an remote control event.
[  396.647058][ T1160] wlan1: Creating new IBSS network, BSSID ee:ef:da:b0:5a:fb
[  396.812381][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  396.832751][ T5931] dvb-usb: error while querying for an remote control event.
[  396.990338][ T9598] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  397.185094][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  397.637328][ T5931] dvb-usb: error while querying for an remote control event.
[  398.235379][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  398.241157][ T5931] dvb-usb: error while querying for an remote control event.
[  398.785005][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  398.871058][ T5931] dvb-usb: error while querying for an remote control event.
[  398.903174][ T5942] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  399.073700][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  399.083959][ T5931] dvb-usb: error while querying for an remote control event.
[  399.097665][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  399.574750][  T754] wlan1: Trigger new scan to find an IBSS to join
[  399.600959][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  399.619113][ T5942] usb 3-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28
[  399.628193][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.646399][ T5942] usb 3-1: Product: syz
[  399.660805][ T5942] usb 3-1: Manufacturer: syz
[  399.665603][ T5942] usb 3-1: SerialNumber: syz
[  399.679634][ T5942] usb 3-1: config 0 descriptor??
[  399.697812][ T9620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  399.712083][ T9620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  399.724917][ T5942] option 3-1:0.0: GSM modem (1-port) converter detected
[  399.753315][ T5942] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0
[  399.810261][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  400.172562][ T5931] dvb-usb: error while querying for an remote control event.
[  400.332769][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  400.338600][ T5931] dvb-usb: error while querying for an remote control event.
[  400.397753][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  400.495604][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  400.512567][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  400.522073][ T5931] dvb-usb: error while querying for an remote control event.
[  401.329541][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  401.335627][ T5931] dvb-usb: error while querying for an remote control event.
[  401.513196][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  401.839287][ T5931] dvb-usb: error while querying for an remote control event.
[  402.022363][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  402.028119][ T5931] dvb-usb: error while querying for an remote control event.
[  402.117733][ T5931] usb 3-1: USB disconnect, device number 46
[  402.154991][ T5931] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  402.175219][ T5931] option 3-1:0.0: device disconnected
[  402.207900][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  402.222382][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  402.228376][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[  402.238620][ T5874] dvb-usb: error while querying for an remote control event.
[  402.412552][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  403.291552][ T5931] dvb-usb: error while querying for an remote control event.
[  403.392535][ T2981] wlan1: Trigger new scan to find an IBSS to join
[  403.465798][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  403.552233][ T5931] dvb-usb: error while querying for an remote control event.
[  403.805102][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  403.819435][ T5931] dvb-usb: error while querying for an remote control event.
[  404.024119][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  404.029862][ T5931] dvb-usb: error while querying for an remote control event.
[  404.243106][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  404.248837][ T5931] dvb-usb: error while querying for an remote control event.
[  404.442628][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  404.451689][   T24] dvb-usb: error while querying for an remote control event.
[  404.529921][   T61] wlan1: Creating new IBSS network, BSSID 52:7a:c5:46:35:15
[  404.632518][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  404.638299][   T24] dvb-usb: error while querying for an remote control event.
[  404.870213][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  405.122446][   T24] dvb-usb: error while querying for an remote control event.
[  405.330227][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  405.336371][   T24] dvb-usb: error while querying for an remote control event.
[  405.863974][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  405.869746][ T5874] dvb-usb: error while querying for an remote control event.
[  406.105709][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  406.111818][ T5874] dvb-usb: error while querying for an remote control event.
[  406.127845][ T9699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.164615][ T9699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.292697][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  406.771066][ T5874] dvb-usb: error while querying for an remote control event.
[  406.799797][ T9702] netlink: 'syz.4.989': attribute type 1 has an invalid length.
[  406.822422][ T9702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.989'.
[  406.942389][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  406.948834][ T5874] dvb-usb: error while querying for an remote control event.
[  407.173540][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  407.193180][ T5874] dvb-usb: error while querying for an remote control event.
[  407.256051][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'.
[  407.266500][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'.
[  407.275871][ T9714] FAULT_INJECTION: forcing a failure.
[  407.275871][ T9714] name failslab, interval 1, probability 0, space 0, times 0
[  407.288534][ T9714] CPU: 1 UID: 0 PID: 9714 Comm: syz.2.992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.288557][ T9714] Tainted: [L]=SOFTLOCKUP
[  407.288562][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  407.288568][ T9714] Call Trace:
[  407.288574][ T9714]  <TASK>
[  407.288579][ T9714]  dump_stack_lvl+0x16c/0x1f0
[  407.288598][ T9714]  should_fail_ex+0x512/0x640
[  407.288615][ T9714]  ? __kmalloc_node_track_caller_noprof+0xcb/0x930
[  407.288631][ T9714]  should_failslab+0xc2/0x120
[  407.288646][ T9714]  __kmalloc_node_track_caller_noprof+0xec/0x930
[  407.288660][ T9714]  ? tcf_bpf_init+0x479/0xc10
[  407.288680][ T9714]  ? kmemdup_noprof+0x29/0x60
[  407.288690][ T9714]  kmemdup_noprof+0x29/0x60
[  407.288701][ T9714]  tcf_bpf_init+0x479/0xc10
[  407.288721][ T9714]  ? __pfx_tcf_bpf_init+0x10/0x10
[  407.288736][ T9714]  ? __pfx____ratelimit+0x10/0x10
[  407.288750][ T9714]  ? rcu_is_watching+0x12/0xc0
[  407.288767][ T9714]  ? do_trace_netlink_extack+0x164/0x1b0
[  407.288796][ T9714]  ? __nla_parse+0x40/0x60
[  407.288810][ T9714]  tcf_action_init_1+0x460/0x6c0
[  407.288827][ T9714]  ? tc_lookup_action_n+0xc9/0xf0
[  407.288841][ T9714]  ? __pfx_tcf_action_init_1+0x10/0x10
[  407.288858][ T9714]  ? __pfx_tc_action_load_ops+0x10/0x10
[  407.288880][ T9714]  ? __nla_parse+0x40/0x60
[  407.288892][ T9714]  tcf_action_init+0x432/0xa50
[  407.288914][ T9714]  ? __pfx_tcf_action_init+0x10/0x10
[  407.288940][ T9714]  ? arch_stack_walk+0xa6/0x100
[  407.288975][ T9714]  ? kasan_save_free_info+0x3b/0x60
[  407.288987][ T9714]  ? __lock_acquire+0x436/0x2890
[  407.289002][ T9714]  tcf_action_add+0xee/0x5c0
[  407.289020][ T9714]  ? __pfx_tcf_action_add+0x10/0x10
[  407.289057][ T9714]  ? __nla_parse+0x40/0x60
[  407.289070][ T9714]  tc_ctl_action+0x35b/0x470
[  407.289091][ T9714]  ? __pfx_tc_ctl_action+0x10/0x10
[  407.289112][ T9714]  ? __pfx_tc_ctl_action+0x10/0x10
[  407.289129][ T9714]  rtnetlink_rcv_msg+0x3c9/0xe90
[  407.289144][ T9714]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  407.289160][ T9714]  ? ref_tracker_free+0x37c/0x830
[  407.289172][ T9714]  netlink_rcv_skb+0x158/0x420
[  407.289186][ T9714]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  407.289201][ T9714]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.289220][ T9714]  ? netlink_deliver_tap+0x1ae/0xd30
[  407.289235][ T9714]  netlink_unicast+0x5aa/0x870
[  407.289253][ T9714]  ? __pfx_netlink_unicast+0x10/0x10
[  407.289284][ T9714]  netlink_sendmsg+0x8c8/0xdd0
[  407.289310][ T9714]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.289337][ T9714]  ____sys_sendmsg+0xa5d/0xc30
[  407.289353][ T9714]  ? copy_msghdr_from_user+0x10a/0x160
[  407.289364][ T9714]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.289385][ T9714]  ___sys_sendmsg+0x134/0x1d0
[  407.289397][ T9714]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.289424][ T9714]  __sys_sendmsg+0x16d/0x220
[  407.289436][ T9714]  ? __pfx___sys_sendmsg+0x10/0x10
[  407.289456][ T9714]  do_syscall_64+0xcd/0xf80
[  407.289471][ T9714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.289482][ T9714] RIP: 0033:0x7fe27ab8f749
[  407.289492][ T9714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.289503][ T9714] RSP: 002b:00007fe27b9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.289514][ T9714] RAX: ffffffffffffffda RBX: 00007fe27ade6090 RCX: 00007fe27ab8f749
[  407.289521][ T9714] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  407.289527][ T9714] RBP: 00007fe27b9de090 R08: 0000000000000000 R09: 0000000000000000
[  407.289533][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.289540][ T9714] R13: 00007fe27ade6128 R14: 00007fe27ade6090 R15: 00007ffe2bdab4c8
[  407.289554][ T9714]  </TASK>
[  407.668607][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  407.674435][ T5894] dvb-usb: error while querying for an remote control event.
[  407.832344][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  407.969919][ T5874] dvb-usb: error while querying for an remote control event.
[  408.015150][ T5942] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  408.182551][ T5942] usb 4-1: Using ep0 maxpacket: 8
[  408.239689][ T5942] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  408.242416][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  408.248938][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.280687][ T6199] dvb-usb: error while querying for an remote control event.
[  408.289232][ T5942] pvrusb2: Hardware description: Terratec Grabster AV400
[  408.297848][ T5942] pvrusb2: **********
[  408.303465][ T5942] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  408.318497][ T5942] pvrusb2: Important functionality might not be entirely working.
[  408.328858][ T9729] tmpfs: Unknown parameter 'usrquotauencer'
[  408.344758][ T5942] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  408.462255][ T9731] syz.4.997 (9731): drop_caches: 2
[  408.514698][ T9731] syz.4.997 (9731): drop_caches: 2
[  408.520053][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  408.525989][ T6199] dvb-usb: error while querying for an remote control event.
[  408.572444][ T5942] pvrusb2: **********
[  408.579787][ T2339] pvrusb2: Invalid write control endpoint
[  408.702363][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  408.708186][ T6199] dvb-usb: error while querying for an remote control event.
[  408.727067][ T2339] pvrusb2: Invalid write control endpoint
[  408.739899][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  408.761480][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  408.776843][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  408.796894][ T9734] pimreg: entered allmulticast mode
[  408.803169][ T2339] pvrusb2: Device being rendered inoperable
[  408.809589][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  408.824859][   T10] usb 4-1: USB disconnect, device number 53
[  408.902529][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  408.915139][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  408.920427][ T6199] dvb-usb: error while querying for an remote control event.
[  408.949446][ T2339] pvrusb2: Attached sub-driver cx25840
[  409.073269][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  409.092893][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  409.122357][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  409.128158][ T6199] dvb-usb: error while querying for an remote control event.
[  409.662509][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  409.676328][ T6199] dvb-usb: error while querying for an remote control event.
[  409.728831][   T30] audit: type=1400 audit(1767699219.354:569): avc:  denied  { map } for  pid=9741 comm="syz.5.999" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  409.832809][   T30] audit: type=1400 audit(1767699219.354:570): avc:  denied  { execute } for  pid=9741 comm="syz.5.999" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  409.937472][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  409.945492][   T24] dvb-usb: error while querying for an remote control event.
[  409.992367][ T6199] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  410.122562][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  410.193999][ T6199] usb 6-1: config 8 has an invalid interface number: 8 but max is 1
[  410.459475][   T24] dvb-usb: error while querying for an remote control event.
[  410.477022][ T6199] usb 6-1: config 8 has an invalid interface number: 8 but max is 1
[  410.499878][ T6199] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2
[  410.528063][ T6199] usb 6-1: config 8 has no interface number 0
[  410.536938][ T6199] usb 6-1: config 8 interface 8 has no altsetting 1
[  410.548745][ T6199] usb 6-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93
[  410.558242][ T6199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.568201][ T6199] usb 6-1: Product: syz
[  410.590201][ T6199] usb 6-1: Manufacturer: syz
[  410.601408][ T6199] usb 6-1: SerialNumber: syz
[  410.631437][ T9752] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  410.641749][ T1166] wlan1: Selected IBSS BSSID 42:d4:2c:33:27:7f based on configured SSID
[  410.732965][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  410.738768][   T44] dvb-usb: error while querying for an remote control event.
[  410.958090][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  411.001336][   T44] dvb-usb: error while querying for an remote control event.
[  411.564020][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  411.569821][   T44] dvb-usb: error while querying for an remote control event.
[  411.727164][ T6199] qmi_wwan 6-1:8.8: probe with driver qmi_wwan failed with error -22
[  411.783439][ T6199] usb 6-1: USB disconnect, device number 7
[  411.984501][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  411.992139][   T44] dvb-usb: error while querying for an remote control event.
[  412.510705][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  412.540292][   T44] dvb-usb: error while querying for an remote control event.
[  412.756076][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  412.761808][ T6199] dvb-usb: error while querying for an remote control event.
[  412.993170][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  412.998941][ T6199] dvb-usb: error while querying for an remote control event.
[  413.223040][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  413.232350][ T6199] dvb-usb: error while querying for an remote control event.
[  413.857204][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  413.893209][ T6199] dvb-usb: error while querying for an remote control event.
[  414.062370][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  414.068138][ T6199] dvb-usb: error while querying for an remote control event.
[  414.342114][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  414.374218][ T6199] dvb-usb: error while querying for an remote control event.
[  414.887293][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  414.893059][ T6199] dvb-usb: error while querying for an remote control event.
[  414.980159][ T9807] xt_CT: You must specify a L4 protocol and not use inversions on it
[  415.100140][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  415.125285][ T5874] dvb-usb: error while querying for an remote control event.
[  415.171098][ T9809] loop7: detected capacity change from 0 to 16384
[  415.242399][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  415.318910][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  415.722699][   T10] usb 4-1: Using ep0 maxpacket: 16
[  415.827816][   T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  415.850541][   T24] dvb-usb: error while querying for an remote control event.
[  415.855521][   T10] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  415.879329][   T10] usb 4-1: config 0 has no interface number 0
[  415.896602][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  415.905911][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.914263][   T10] usb 4-1: Product: syz
[  415.918576][   T10] usb 4-1: Manufacturer: syz
[  415.925814][   T10] usb 4-1: SerialNumber: syz
[  415.944451][   T10] usb 4-1: config 0 descriptor??
[  415.956433][   T10] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  415.965610][   T10] uvcvideo 4-1:0.105: No valid video chain found.
[  416.077008][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  416.101582][ T5894] dvb-usb: error while querying for an remote control event.
[  416.186621][ T9812] loop7: detected capacity change from 16384 to 0
[  416.186916][    C0] I/O error, dev loop7, sector 14592 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  416.228100][ T5894] usb 4-1: USB disconnect, device number 54
[  416.295952][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  416.295975][   T24] dvb-usb: error while querying for an remote control event.
[  416.452572][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  416.489726][   T24] dvb-usb: error while querying for an remote control event.
[  416.517914][   T30] audit: type=1400 audit(1767699226.114:571): avc:  denied  { write } for  pid=9823 comm="syz.5.1023" name="file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  416.793544][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  416.807362][   T24] dvb-usb: error while querying for an remote control event.
[  416.807717][   T30] audit: type=1400 audit(1767699226.114:572): avc:  denied  { ioctl } for  pid=9823 comm="syz.5.1023" path="/57/file0" dev="tmpfs" ino=328 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  416.972345][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  417.493281][   T24] dvb-usb: error while querying for an remote control event.
[  417.682469][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  417.690457][ T5874] dvb-usb: error while querying for an remote control event.
[  417.855280][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'.
[  417.882342][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  417.894337][ T5874] dvb-usb: error while querying for an remote control event.
[  418.082339][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  418.132017][ T5874] dvb-usb: error while querying for an remote control event.
[  418.765777][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  418.785418][ T5874] dvb-usb: error while querying for an remote control event.
[  418.952381][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  418.986038][ T5874] dvb-usb: error while querying for an remote control event.
[  419.202383][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  419.208158][ T5874] dvb-usb: error while querying for an remote control event.
[  419.239880][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  419.892416][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  419.990829][   T44] dvb-usb: error while querying for an remote control event.
[  420.232516][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  420.671173][   T44] dvb-usb: error while querying for an remote control event.
[  420.903733][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  421.077555][   T44] dvb-usb: error while querying for an remote control event.
[  421.111859][ T9871] syz.3.1035 (9871): drop_caches: 2
[  421.118522][ T9871] syz.3.1035 (9871): drop_caches: 2
[  421.382941][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  421.403767][   T44] dvb-usb: error while querying for an remote control event.
[  421.632169][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  421.651851][   T44] dvb-usb: error while querying for an remote control event.
[  421.934203][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  421.940171][   T44] dvb-usb: error while querying for an remote control event.
[  422.414356][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  422.423145][   T44] dvb-usb: error while querying for an remote control event.
[  422.777273][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  422.805122][   T44] dvb-usb: error while querying for an remote control event.
[  422.972549][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  422.979077][ T5874] dvb-usb: error while querying for an remote control event.
[  423.505335][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  423.511103][ T5874] dvb-usb: error while querying for an remote control event.
[  424.269264][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  424.278749][ T5874] dvb-usb: error while querying for an remote control event.
[  424.842363][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  424.849577][ T5894] dvb-usb: error while querying for an remote control event.
[  425.052166][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  425.061384][ T5894] dvb-usb: error while querying for an remote control event.
[  425.262362][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  425.379372][ T5894] dvb-usb: error while querying for an remote control event.
[  425.523163][   T30] audit: type=1400 audit(1767699235.154:573): avc:  denied  { execute } for  pid=9930 comm="syz.5.1053" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  425.553482][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  425.559917][ T5894] dvb-usb: error while querying for an remote control event.
[  425.762768][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  425.778725][   T24] dvb-usb: error while querying for an remote control event.
[  425.805275][ T9931] vfat: Unknown parameter 'discard8Ø+å6†<¨ìç«×^®~x%½¯Ë6RÍæ‘’Lž©›À?wÜW0º@èIá�wÌKFØiÉùlêÑ'
[  425.832586][ T9939] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  425.839189][ T9939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  425.853860][ T9931] binder: 9930:9931 ioctl c0306201 200000000540 returned -22
[  425.923204][ T9939] vhci_hcd vhci_hcd.0: Device attached
[  426.068507][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  426.077962][   T24] dvb-usb: error while querying for an remote control event.
[  426.172744][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  426.241251][ T5874] usb 3-1: new low-speed USB device number 47 using dummy_hcd
[  426.249890][ T5894] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  426.262822][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  426.276507][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  426.289291][   T24] dvb-usb: error while querying for an remote control event.
[  426.402418][ T5874] usb 3-1: device descriptor read/64, error -32
[  426.482497][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  426.519098][   T24] dvb-usb: error while querying for an remote control event.
[  426.662372][ T5874] usb 3-1: new low-speed USB device number 48 using dummy_hcd
[  426.702518][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  426.708458][   T24] dvb-usb: error while querying for an remote control event.
[  427.160543][ T6019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  427.303809][ T5874] usb 3-1: config 0 has no interfaces?
[  427.309296][ T5874] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  427.424828][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  427.950111][   T24] dvb-usb: error while querying for an remote control event.
[  427.970196][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.007501][ T5874] usb 3-1: config 0 descriptor??
[  428.242085][ T7427] usb 3-1: USB disconnect, device number 48
[  428.248324][ T9942] vhci_hcd: connection reset by peer
[  428.265081][ T1166] vhci_hcd vhci_hcd.2: stop threads
[  428.277817][ T1166] vhci_hcd vhci_hcd.2: release socket
[  428.350588][ T1166] vhci_hcd vhci_hcd.2: disconnect device
[  428.777813][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  428.784287][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  428.812729][ T5874] dvb-usb: error while querying for an remote control event.
[  429.002372][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  429.008123][   T24] dvb-usb: error while querying for an remote control event.
[  429.232543][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  429.344193][   T24] dvb-usb: error while querying for an remote control event.
[  429.657591][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  429.934038][   T24] dvb-usb: error while querying for an remote control event.
[  430.079098][ T9981] netlink: 'syz.4.1067': attribute type 1 has an invalid length.
[  430.131840][ T9981] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1067'.
[  430.189690][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  430.209423][   T24] dvb-usb: error while querying for an remote control event.
[  430.923438][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  430.929329][   T24] dvb-usb: error while querying for an remote control event.
[  431.113092][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'.
[  431.149508][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  431.168653][   T44] dvb-usb: error while querying for an remote control event.
[  431.187743][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'.
[  431.832650][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  431.859545][   T24] dvb-usb: error while querying for an remote control event.
[  432.036564][ T2981] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.619698][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  432.625549][   T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  432.646337][ T5894] dvb-usb: error while querying for an remote control event.
[  432.804336][   T44] usb 5-1: config 0 has an invalid interface number: 183 but max is 0
[  432.870267][   T44] usb 5-1: config 0 has no interface number 0
[  432.877288][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  432.892685][ T5894] dvb-usb: error while querying for an remote control event.
[  432.902873][   T44] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  432.953181][   T44] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94
[  432.994532][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.038213][   T44] usb 5-1: config 0 descriptor??
[  433.071845][ T9997] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  433.085057][   T44] pl2303 5-1:0.183: required endpoints missing
[  433.093324][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  433.099235][ T5874] dvb-usb: error while querying for an remote control event.
[  433.292442][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  433.300903][   T44] dvb-usb: error while querying for an remote control event.
[  433.473313][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  433.489307][ T5874] dvb-usb: error while querying for an remote control event.
[  433.948502][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  433.970370][ T5874] dvb-usb: error while querying for an remote control event.
[  434.132476][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  434.139066][ T5929] dvb-usb: error while querying for an remote control event.
[  434.468332][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  434.480004][ T5874] dvb-usb: error while querying for an remote control event.
[  434.562374][ T5929] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  434.565250][ T3838] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  434.571115][ T5874] usb 5-1: USB disconnect, device number 38
[  434.953291][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  435.055385][ T5894] dvb-usb: error while querying for an remote control event.
[  435.072670][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  435.191431][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0
[  435.214667][ T5929] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40
[  435.236670][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.244756][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  435.250469][ T5894] dvb-usb: error while querying for an remote control event.
[  435.359312][ T5929] usb 3-1: Product: �얘�ꀾߧ䆧輡⋃ɾ茮횣᧳඲㮌�衉ꛓ䖫㉢ᙘ곙焰龃够秫ﲔꔇ泃啅╦��▇侘㰃ⲅᾂ晤ힾ綟雾�涘⻦�훾⟲ᴃ贅Ὲ䙡抬윈徧���ꃂा馆⬚�촰⣓䜡쓢蛭锃犆咜䤌柵ᶔ�싹詨䌙儱些Æ匪샑䉎��撉鷓沗Ｖ쌼銅쪗曌뜇蟓術鄈ꢅⲺꄦ㣋혅ሩ堭英ື貧ꆥ믦�匥�냤㺠�
[  435.918678][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  435.929012][ T5894] dvb-usb: error while querying for an remote control event.
[  436.004420][ T5929] usb 3-1: Manufacturer: ��膟斩ꞻ湾�餃ꅵ뷜㇔豦뢨繾䌫�뎺熧뤓凨㹌墊��ࢪ�ⲉ伹䘤麻ᷧ毼ﭛ䯺钽냑홫ǚ连ڎ䵽㸰힑�絀嬦鹮㶌㮆椤ἱ囂춡⥋饜ⷑ�넽뛰냰䚺嵜ຒ蛷瓎㠚ཱི딷㠬癵⨊웻ꕕ셷්〳゘ᴈ꺃뼤縲畒ꇜ㸆列ᖪ䒾眩呂퓣픎㽇Ꭴ��귻풼
[  436.071006][ T5929] usb 3-1: SerialNumber: �
[  436.092838][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  436.101419][ T5881] dvb-usb: error while querying for an remote control event.
[  436.352378][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  436.358179][ T5881] dvb-usb: error while querying for an remote control event.
[  436.494373][ T5828] Bluetooth: hci5: command 0x0406 tx timeout
[  436.553384][T10040] syz.4.1084 (10040): drop_caches: 2
[  436.574608][T10040] syz.4.1084 (10040): drop_caches: 2
[  436.593788][T10040] syz.4.1084 (10040): drop_caches: 2
[  436.622684][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  436.632381][ T5874] dvb-usb: error while querying for an remote control event.
[  436.665014][   T30] audit: type=1400 audit(1767699246.294:574): avc:  denied  { getopt } for  pid=10038 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  436.802327][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  436.808221][ T5874] dvb-usb: error while querying for an remote control event.
[  436.982766][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  436.995693][ T5874] dvb-usb: error while querying for an remote control event.
[  437.268294][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  437.280273][ T5874] dvb-usb: error while querying for an remote control event.
[  437.453888][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  437.462028][ T5874] dvb-usb: error while querying for an remote control event.
[  437.541011][ T5929] usbhid 3-1:1.0: can't add hid device: -71
[  437.605163][ T5929] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  437.632390][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  437.638148][ T6199] dvb-usb: error while querying for an remote control event.
[  437.664736][ T5929] usb 3-1: USB disconnect, device number 49
[  437.900796][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  438.023167][T10047] syzkaller1: entered promiscuous mode
[  438.028709][T10047] syzkaller1: entered allmulticast mode
[  438.183961][ T6199] dvb-usb: error while querying for an remote control event.
[  438.357138][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  438.664844][ T6199] dvb-usb: error while querying for an remote control event.
[  438.782509][T10059] netlink: 'syz.3.1088': attribute type 1 has an invalid length.
[  438.822663][T10059] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1088'.
[  438.874836][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  438.936934][ T6199] dvb-usb: error while querying for an remote control event.
[  439.364466][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  439.370225][ T6199] dvb-usb: error while querying for an remote control event.
[  439.732550][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  439.748613][   T24] dvb-usb: error while querying for an remote control event.
[  440.052811][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  440.058559][   T24] dvb-usb: error while querying for an remote control event.
[  440.527405][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  440.542397][   T24] dvb-usb: error while querying for an remote control event.
[  440.606956][T10078] syz.4.1093 (10078): drop_caches: 2
[  440.624273][T10078] syz.4.1093 (10078): drop_caches: 2
[  440.647405][   T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  440.712442][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  440.718692][   T24] dvb-usb: error while querying for an remote control event.
[  440.922521][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  440.944005][   T24] dvb-usb: error while querying for an remote control event.
[  441.023184][   T30] audit: type=1400 audit(1767699250.654:575): avc:  denied  { ioctl } for  pid=10083 comm="syz.2.1099" path="socket:[27345]" dev="sockfs" ino=27345 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  441.132398][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  441.138162][   T24] dvb-usb: error while querying for an remote control event.
[  441.322332][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  441.328255][ T9098] dvb-usb: error while querying for an remote control event.
[  441.332490][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  441.567149][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  441.573254][ T9098] dvb-usb: error while querying for an remote control event.
[  441.621878][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'.
[  441.634274][ T5928] usb 3-1: config 0 has no interfaces?
[  441.649400][ T5928] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  441.782485][   T30] audit: type=1400 audit(1767699251.334:576): avc:  denied  { read open } for  pid=10097 comm="syz.5.1103" path="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  442.060859][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  442.066654][ T9098] dvb-usb: error while querying for an remote control event.
[  442.116377][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.192901][ T5928] usb 3-1: config 0 descriptor??
[  442.646932][T10107] netlink: 'syz.0.1104': attribute type 1 has an invalid length.
[  442.655083][T10107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1104'.
[  443.132630][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  443.402573][ T5874] dvb-usb: error while querying for an remote control event.
[  443.573623][ T5874] usb 3-1: USB disconnect, device number 50
[  443.593036][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  443.624562][ T9098] dvb-usb: error while querying for an remote control event.
[  444.602237][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  444.608079][ T9098] dvb-usb: error while querying for an remote control event.
[  444.839938][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  444.862348][ T5894] dvb-usb: error while querying for an remote control event.
[  444.916197][T10122] tipc: Started in network mode
[  444.941738][T10122] tipc: Node identity 080211, cluster identity 4711
[  444.989084][T10123] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  444.995597][T10123] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  444.999927][T10122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.032522][T10127] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  445.045864][T10123] vhci_hcd vhci_hcd.0: Device attached
[  445.052633][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  445.095099][T10127] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  445.102886][ T5894] dvb-usb: error while querying for an remote control event.
[  445.113576][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'.
[  445.133811][T10122] tipc: Resetting bearer <eth:syzkaller0>
[  445.452353][ T9098] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  445.457193][   T30] audit: type=1400 audit(1767699255.084:577): avc:  denied  { lock } for  pid=10121 comm="syz.4.1109" path="socket:[27445]" dev="sockfs" ino=27445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  445.482448][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  445.492466][ T5874] dvb-usb: error while querying for an remote control event.
[  445.512328][ T5894] usb 3-1: new low-speed USB device number 51 using dummy_hcd
[  445.542340][ T9098] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  445.692934][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  445.698682][ T5929] dvb-usb: error while querying for an remote control event.
[  445.725721][ T5894] usb 3-1: config 0 has no interfaces?
[  445.792813][ T5894] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  445.957312][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.092601][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  446.429030][ T5894] usb 3-1: config 0 descriptor??
[  446.442448][ T5929] dvb-usb: error while querying for an remote control event.
[  446.465249][ T5929] tipc: Node number set to 134353152
[  446.696023][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  446.702085][ T5929] dvb-usb: error while querying for an remote control event.
[  446.737320][T10125] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  446.748535][ T5954] vhci_hcd vhci_hcd.2: stop threads
[  446.762298][ T5954] vhci_hcd vhci_hcd.2: release socket
[  446.769206][ T5954] vhci_hcd vhci_hcd.2: disconnect device
[  447.272752][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  447.281532][ T5894] dvb-usb: error while querying for an remote control event.
[  447.305656][ T7427] usb 3-1: USB disconnect, device number 51
[  447.472476][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  447.497949][ T5894] dvb-usb: error while querying for an remote control event.
[  447.843914][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  447.858223][ T5915] dvb-usb: error while querying for an remote control event.
[  447.902436][ T5929] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  448.054401][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  448.079313][ T5915] dvb-usb: error while querying for an remote control event.
[  448.087540][ T5929] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  448.103395][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  448.122799][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  448.133853][T10154] netlink: 'syz.2.1118': attribute type 1 has an invalid length.
[  448.133895][T10154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1118'.
[  448.142033][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  448.252323][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  448.388321][ T5915] dvb-usb: error while querying for an remote control event.
[  448.411606][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  448.422013][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  448.442346][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  448.450421][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  448.463976][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  448.475976][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  448.483740][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  448.530145][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  448.549677][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  448.656365][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  448.662903][ T5915] dvb-usb: error while querying for an remote control event.
[  448.674988][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  448.692408][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  448.929874][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  449.196625][ T5915] dvb-usb: error while querying for an remote control event.
[  449.235560][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  449.473062][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  449.478831][ T5915] dvb-usb: error while querying for an remote control event.
[  449.617189][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.645987][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.751953][T10172] syz.2.1120 (10172): drop_caches: 2
[  449.765044][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  449.776481][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.785656][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  449.791376][ T5915] dvb-usb: error while querying for an remote control event.
[  449.807118][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.828240][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  449.858122][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.896481][T10172] syz.2.1120 (10172): drop_caches: 2
[  449.991325][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  450.002194][ T5915] dvb-usb: error while querying for an remote control event.
[  450.026374][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  450.069616][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  450.094382][ T5929] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  450.110203][ T5929] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  450.151644][ T5929] usb 4-1: Product: syz
[  450.164605][ T5929] usb 4-1: Manufacturer: syz
[  450.173306][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  450.184385][ T5929] usb 4-1: SerialNumber: syz
[  450.189692][ T5915] dvb-usb: error while querying for an remote control event.
[  450.223385][ T5929] usb 4-1: config 0 descriptor??
[  450.242650][ T5929] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  450.399649][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  450.410182][ T5929] dvb-usb: error while querying for an remote control event.
[  450.420406][ T5915] usb 4-1: USB disconnect, device number 55
[  450.896084][ T9098] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  450.919068][ T5915] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  451.087912][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  451.121206][   T44] dvb-usb: error while querying for an remote control event.
[  451.514920][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  451.546175][ T5929] dvb-usb: error while querying for an remote control event.
[  451.665748][T10197] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  451.672273][T10197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  451.703014][  T754] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  451.729796][T10197] vhci_hcd vhci_hcd.0: Device attached
[  451.732331][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.752589][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  451.758314][ T5138] Bluetooth: Unexpected continuation frame (len 4)
[  451.758335][ T5929] dvb-usb: error while querying for an remote control event.
[  451.887626][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.908919][ T7427] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  452.382929][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  452.388702][ T9098] dvb-usb: error while querying for an remote control event.
[  452.459597][ T7427] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  452.514295][T10199] vhci_hcd: connection reset by peer
[  452.524344][ T1106] vhci_hcd vhci_hcd.0: stop threads
[  452.531168][ T1106] vhci_hcd vhci_hcd.0: release socket
[  452.536816][ T1106] vhci_hcd vhci_hcd.0: disconnect device
[  452.558750][   T30] audit: type=1400 audit(1767699262.184:578): avc:  denied  { read } for  pid=10203 comm="syz.5.1130" lport=50919 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  452.562504][ T7427] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  452.699273][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  453.241977][ T5929] dvb-usb: error while querying for an remote control event.
[  453.432334][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  453.438092][ T5929] dvb-usb: error while querying for an remote control event.
[  453.632442][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  454.098227][ T5874] dvb-usb: error while querying for an remote control event.
[  454.274144][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  454.279884][ T5874] dvb-usb: error while querying for an remote control event.
[  454.488083][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  454.531854][ T5874] dvb-usb: error while querying for an remote control event.
[  454.792607][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  454.807478][ T5874] dvb-usb: error while querying for an remote control event.
[  455.023071][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  455.034304][T10237] loop6: detected capacity change from 0 to 2640
[  455.035228][ T5929] dvb-usb: error while querying for an remote control event.
[  455.053051][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.061238][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.069209][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.077191][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.085817][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.094002][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.101938][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.109894][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.117861][T10237] ldm_validate_partition_table(): Disk read failed.
[  455.124846][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.132858][T10237] Buffer I/O error on dev loop6, logical block 0, async page read
[  455.135202][   T30] audit: type=1400 audit(1767699264.654:579): avc:  denied  { append } for  pid=10235 comm="syz.4.1139" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  455.142042][T10237] Dev loop6: unable to read RDB block 0
[  455.171003][T10237]  loop6: unable to read partition table
[  455.177323][T10237] loop_reread_partitions: partition scan of loop6 (3„¾‚³˜) failed (rc=-5)
[  455.212475][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  455.314214][ T5874] dvb-usb: error while querying for an remote control event.
[  455.442195][   T30] audit: type=1804 audit(1767699265.064:580): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1138" name="/newroot/224/bus/file0" dev="overlay" ino=1215 res=1 errno=0
[  455.483244][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  455.492650][ T5915] dvb-usb: error while querying for an remote control event.
[  455.694251][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  455.760194][ T5915] dvb-usb: error while querying for an remote control event.
[  455.953355][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  455.983521][ T5915] dvb-usb: error while querying for an remote control event.
[  456.361155][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  456.384068][ T5915] dvb-usb: error while querying for an remote control event.
[  457.083512][T10263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  457.090019][T10263] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  457.105239][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  457.111544][ T6199] dvb-usb: error while querying for an remote control event.
[  457.227231][T10263] vhci_hcd vhci_hcd.0: Device attached
[  457.302567][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  457.325362][ T6199] dvb-usb: error while querying for an remote control event.
[  457.427326][ T6199] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  457.502469][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  457.508379][ T5915] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[  457.516301][ T6199] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  457.524104][ T5929] dvb-usb: error while querying for an remote control event.
[  457.702794][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  457.709217][ T5894] dvb-usb: error while querying for an remote control event.
[  457.719515][ T5915] usb 4-1: config 0 has no interfaces?
[  457.734508][ T5915] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  457.782301][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.812081][ T5915] usb 4-1: config 0 descriptor??
[  457.822900][ T5929] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  457.919046][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.927832][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.015367][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  458.021129][ T5915] dvb-usb: error while querying for an remote control event.
[  458.082397][ T5929] usb 6-1: Using ep0 maxpacket: 8
[  458.083875][ T5928] usb 4-1: USB disconnect, device number 56
[  458.087474][T10269] vhci_hcd: connection reset by peer
[  458.102125][ T6019] vhci_hcd vhci_hcd.3: stop threads
[  458.115976][ T6019] vhci_hcd vhci_hcd.3: release socket
[  458.121719][ T6019] vhci_hcd vhci_hcd.3: disconnect device
[  458.268276][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'.
[  458.277462][T10283] block nbd0: Unsupported socket: should be TCP or UNIX.
[  458.396441][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  458.503722][ T6199] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  458.511304][ T5929] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  458.542222][ T5929] usb 6-1: config 0 has no interface number 0
[  458.548572][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  458.558135][ T5881] dvb-usb: error while querying for an remote control event.
[  458.573907][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  458.596199][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  458.608997][ T5929] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  458.621800][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  458.635366][ T5929] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  458.665288][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.683778][ T5929] usb 6-1: config 0 descriptor??
[  458.695509][ T5929] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  458.742334][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  458.748579][ T5929] dvb-usb: error while querying for an remote control event.
[  458.914907][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  458.930845][ T5929] dvb-usb: error while querying for an remote control event.
[  458.946985][ T5881] usb 6-1: USB disconnect, device number 8
[  458.967621][ T5881] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  459.132503][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  459.144757][ T5929] dvb-usb: error while querying for an remote control event.
[  459.203933][T10295] tmpfs: Unknown parameter 'usrquotauencer'
[  459.315456][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  459.328857][ T5929] dvb-usb: error while querying for an remote control event.
[  460.339048][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  460.348053][ T5929] dvb-usb: error while querying for an remote control event.
[  460.709555][T10313] FAULT_INJECTION: forcing a failure.
[  460.709555][T10313] name failslab, interval 1, probability 0, space 0, times 0
[  460.732001][T10313] CPU: 0 UID: 0 PID: 10313 Comm: syz.5.1161 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.732030][T10313] Tainted: [L]=SOFTLOCKUP
[  460.732036][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  460.732048][T10313] Call Trace:
[  460.732054][T10313]  <TASK>
[  460.732061][T10313]  dump_stack_lvl+0x16c/0x1f0
[  460.732095][T10313]  should_fail_ex+0x512/0x640
[  460.732123][T10313]  ? __kvmalloc_node_noprof+0x129/0xa40
[  460.732149][T10313]  should_failslab+0xc2/0x120
[  460.732174][T10313]  __kvmalloc_node_noprof+0x14a/0xa40
[  460.732196][T10313]  ? nla_strdup+0xc6/0x150
[  460.732215][T10313]  ? nf_tables_addchain.constprop.0+0x606/0x1c90
[  460.732249][T10313]  ? nf_tables_addchain.constprop.0+0x606/0x1c90
[  460.732269][T10313]  nf_tables_addchain.constprop.0+0x606/0x1c90
[  460.732296][T10313]  ? nft_chain_lookup+0x5be/0xaa0
[  460.732326][T10313]  ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10
[  460.732351][T10313]  ? __pfx_nft_chain_lookup+0x10/0x10
[  460.732377][T10313]  ? __lock_acquire+0x436/0x2890
[  460.732418][T10313]  ? nla_strcmp+0xff/0x130
[  460.732440][T10313]  ? nft_table_lookup.part.0+0x1e3/0x230
[  460.732466][T10313]  nf_tables_newchain+0x206d/0x2da0
[  460.732500][T10313]  ? __nla_validate_parse+0x600/0x2880
[  460.732524][T10313]  ? __pfx_nf_tables_newchain+0x10/0x10
[  460.732549][T10313]  ? __pfx___nla_validate_parse+0x10/0x10
[  460.732580][T10313]  ? __nla_parse+0x40/0x60
[  460.732603][T10313]  nfnetlink_rcv_batch+0x190d/0x2350
[  460.732646][T10313]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  460.732691][T10313]  ? avc_has_perm_noaudit+0x149/0x3b0
[  460.732748][T10313]  ? __nla_parse+0x40/0x60
[  460.732771][T10313]  nfnetlink_rcv+0x3c1/0x430
[  460.732798][T10313]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  460.732832][T10313]  netlink_unicast+0x5aa/0x870
[  460.732860][T10313]  ? __pfx_netlink_unicast+0x10/0x10
[  460.732892][T10313]  netlink_sendmsg+0x8c8/0xdd0
[  460.732919][T10313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.732952][T10313]  ____sys_sendmsg+0xa5d/0xc30
[  460.732976][T10313]  ? copy_msghdr_from_user+0x10a/0x160
[  460.732996][T10313]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.733031][T10313]  ___sys_sendmsg+0x134/0x1d0
[  460.733051][T10313]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.733108][T10313]  __sys_sendmsg+0x16d/0x220
[  460.733128][T10313]  ? __pfx___sys_sendmsg+0x10/0x10
[  460.733164][T10313]  do_syscall_64+0xcd/0xf80
[  460.733190][T10313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.733209][T10313] RIP: 0033:0x7fe27918f749
[  460.733224][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.733242][T10313] RSP: 002b:00007fe279fca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.733260][T10313] RAX: ffffffffffffffda RBX: 00007fe2793e6180 RCX: 00007fe27918f749
[  460.733272][T10313] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005
[  460.733284][T10313] RBP: 00007fe279fca090 R08: 0000000000000000 R09: 0000000000000000
[  460.733295][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  460.733305][T10313] R13: 00007fe2793e6218 R14: 00007fe2793e6180 R15: 00007ffef18c08a8
[  460.733331][T10313]  </TASK>
[  461.323984][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  461.335609][ T5929] dvb-usb: error while querying for an remote control event.
[  461.574443][T10318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  461.580960][T10318] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  461.614155][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  461.624610][ T5915] dvb-usb: error while querying for an remote control event.
[  461.653285][T10318] vhci_hcd vhci_hcd.0: Device attached
[  461.654316][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.697999][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.704644][T10323] binder: 10319:10323 ioctl c0306201 200000001440 returned -11
[  461.822415][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  461.829209][ T5929] dvb-usb: error while querying for an remote control event.
[  461.872404][ T5930] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  461.884761][   T30] audit: type=1400 audit(1767699271.514:581): avc:  denied  { read } for  pid=10330 comm="syz.2.1167" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  461.917018][T10324] vhci_hcd: connection closed
[  461.929138][   T61] vhci_hcd vhci_hcd.0: stop threads
[  461.949912][   T61] vhci_hcd vhci_hcd.0: release socket
[  461.982323][ T5930] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  462.022607][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  462.028365][ T5929] dvb-usb: error while querying for an remote control event.
[  462.142663][   T61] vhci_hcd vhci_hcd.0: disconnect device
[  462.205702][   T30] audit: type=1400 audit(1767699271.534:582): avc:  denied  { open } for  pid=10330 comm="syz.2.1167" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  462.262400][   T10] usb 3-1: new low-speed USB device number 52 using dummy_hcd
[  462.322237][   T30] audit: type=1400 audit(1767699271.534:583): avc:  denied  { ioctl } for  pid=10330 comm="syz.2.1167" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  462.347515][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  462.376846][ T5929] dvb-usb: error while querying for an remote control event.
[  462.422318][   T10] usb 3-1: Invalid ep0 maxpacket: 32
[  462.582409][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  462.598426][ T5929] dvb-usb: error while querying for an remote control event.
[  462.624756][   T10] usb 3-1: new low-speed USB device number 53 using dummy_hcd
[  462.852513][   T10] usb 3-1: Invalid ep0 maxpacket: 32
[  462.931803][   T10] usb usb3-port1: attempt power cycle
[  463.172356][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  463.178114][ T5929] dvb-usb: error while querying for an remote control event.
[  463.655530][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  463.661605][ T5881] dvb-usb: error while querying for an remote control event.
[  463.709829][   T10] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  463.886474][ T5978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  463.899824][   T10] usb 3-1: Invalid ep0 maxpacket: 32
[  463.937564][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  463.971962][ T5881] dvb-usb: error while querying for an remote control event.
[  464.229642][   T10] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  464.282841][   T10] usb 3-1: Invalid ep0 maxpacket: 32
[  464.352769][   T10] usb usb3-port1: unable to enumerate USB device
[  464.425356][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  464.441551][   T30] audit: type=1400 audit(1767699274.064:584): avc:  denied  { name_bind } for  pid=10352 comm="syz.5.1174" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  464.472392][ T5881] dvb-usb: error while querying for an remote control event.
[  464.632383][   T30] audit: type=1400 audit(1767699274.094:585): avc:  denied  { setopt } for  pid=10352 comm="syz.5.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  464.653036][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  464.837380][T10366] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  465.051416][ T5929] dvb-usb: error while querying for an remote control event.
[  465.185877][   T30] audit: type=1400 audit(1767699274.804:586): avc:  denied  { getopt } for  pid=10363 comm="syz.5.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  465.243273][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  465.249149][ T5929] dvb-usb: error while querying for an remote control event.
[  465.774596][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  465.786872][ T5929] dvb-usb: error while querying for an remote control event.
[  465.826633][T10376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  465.833144][T10376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  465.863699][T10376] vhci_hcd vhci_hcd.0: Device attached
[  465.875926][T10379] vhci_hcd: connection closed
[  465.876201][ T1160] vhci_hcd vhci_hcd.5: stop threads
[  465.888878][ T1160] vhci_hcd vhci_hcd.5: release socket
[  465.902825][ T1160] vhci_hcd vhci_hcd.5: disconnect device
[  465.983820][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  466.452360][   T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1)
[  469.048054][ T5929] dvb-usb: error while querying for an remote control event.
[  470.022968][ T5930] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  470.082326][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  470.202604][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  470.208365][ T5929] dvb-usb: error while querying for an remote control event.
[  470.833487][T10414] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.489653][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  471.533699][ T5929] dvb-usb: error while querying for an remote control event.
[  471.702835][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  471.791197][ T5940] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  471.822476][ T5929] dvb-usb: error while querying for an remote control event.
[  471.862505][   T10] usb 4-1: device descriptor read/64, error -71
[  472.102638][   T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  472.122708][ T5930] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  472.272380][  T754] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  472.303398][ T5930] usb 3-1: Using ep0 maxpacket: 8
[  472.313752][ T5940] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  472.333493][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  472.352723][ T5940] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  472.364879][   T10] usb 4-1: config 0 has an invalid interface number: 63 but max is 0
[  472.374403][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  472.387727][ T5940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  472.399413][   T10] usb 4-1: config 0 has no interface number 0
[  472.405556][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.413660][ T5942] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  472.422183][   T10] usb 4-1: too many endpoints for config 0 interface 63 altsetting 255: 255, using maximum allowed: 30
[  472.433807][ T5940] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  472.442417][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  472.447092][ T5930] usb 3-1: Product: syz
[  472.456760][ T5930] usb 3-1: Manufacturer: syz
[  472.461575][   T10] usb 4-1: config 0 interface 63 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  472.471754][ T5929] dvb-usb: error while querying for an remote control event.
[  472.475210][ T5930] usb 3-1: SerialNumber: syz
[  472.497886][ T5940] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  472.509802][   T10] usb 4-1: config 0 interface 63 has no altsetting 0
[  472.517281][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  472.526363][ T5930] usb 3-1: config 0 descriptor??
[  472.565548][   T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=0067, bcdDevice=f6.da
[  472.576725][ T5930] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  472.583797][ T5940] usb 6-1: Product: syz
[  472.588596][ T5942] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  472.597923][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.606043][ T5940] usb 6-1: Manufacturer: syz
[  472.611428][ T5942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  472.631570][   T10] usb 4-1: config 0 descriptor??
[  472.637386][ T5940] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  472.647212][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  472.657677][   T10] hub 4-1:0.63: bad descriptor, ignoring hub
[  472.668990][   T10] hub 4-1:0.63: probe with driver hub failed with error -5
[  472.677839][ T5942] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[  472.682380][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  472.692684][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  472.714005][ T5942] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  472.720675][ T5929] dvb-usb: error while querying for an remote control event.
[  472.723415][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  472.740618][ T5942] usb 5-1: Product: syz
[  472.745405][ T5942] usb 5-1: Manufacturer: syz
[  472.775766][ T5942] cdc_wdm 5-1:1.0: skipping garbage
[  472.781023][ T5942] cdc_wdm 5-1:1.0: skipping garbage
[  472.788176][ T5942] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  472.875643][   T30] audit: type=1400 audit(1767699282.504:587): avc:  denied  { map } for  pid=10407 comm="syz.3.1189" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  472.903729][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  472.920696][ T5929] dvb-usb: error while querying for an remote control event.
[  472.982520][ T5942] usb 5-1: USB disconnect, device number 39
[  473.092333][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  473.098548][ T5929] dvb-usb: error while querying for an remote control event.
[  473.232534][ T5942] usb 4-1: USB disconnect, device number 58
[  473.262497][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  473.268346][ T5929] dvb-usb: error while querying for an remote control event.
[  473.391227][ T5930] gspca_zc3xx: reg_w_i err -71
[  473.432661][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  473.438460][ T5929] dvb-usb: error while querying for an remote control event.
[  473.630860][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  473.647493][ T5929] dvb-usb: error while querying for an remote control event.
[  473.847600][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  473.854544][ T5929] dvb-usb: error while querying for an remote control event.
[  474.373707][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  474.385822][ T5930] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  474.387692][ T5929] dvb-usb: error while querying for an remote control event.
[  474.401928][ T5930] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  474.420952][ T5942] usb 6-1: USB disconnect, device number 9
[  474.441576][ T5930] usb 3-1: USB disconnect, device number 56
[  474.694131][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  475.112167][ T5929] dvb-usb: error while querying for an remote control event.
[  475.439130][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  475.636194][ T5929] dvb-usb: error while querying for an remote control event.
[  475.772356][ T9098] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  475.802352][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  475.808091][ T5929] dvb-usb: error while querying for an remote control event.
[  475.872543][T10481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1210'.
[  475.882395][ T5942] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  475.933546][ T9098] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.944081][ T9098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  475.963846][ T9098] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  475.973914][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  475.979637][ T5929] dvb-usb: error while querying for an remote control event.
[  475.991385][ T9098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.056310][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  476.063009][ T9098] usb 6-1: config 0 descriptor??
[  476.081567][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  476.248588][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  476.254763][ T9098] dvb-usb: error while querying for an remote control event.
[  477.598470][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  477.607267][ T9098] dvb-usb: error while querying for an remote control event.
[  477.631950][ T5942] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  477.632154][ T5881] usb 6-1: USB disconnect, device number 10
[  477.702569][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.724752][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'.
[  477.755188][ T5942] usb 4-1: Product: syz
[  477.759341][ T5942] usb 4-1: Manufacturer: syz
[  477.822568][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  477.875520][ T9098] dvb-usb: error while querying for an remote control event.
[  478.100099][ T5942] usb 4-1: SerialNumber: syz
[  478.131703][ T5942] usb 4-1: config 0 descriptor??
[  478.252672][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  478.261273][ T9098] dvb-usb: error while querying for an remote control event.
[  478.442365][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  478.539150][ T9098] dvb-usb: error while querying for an remote control event.
[  478.541669][   T30] audit: type=1400 audit(1767699288.164:588): avc:  denied  { bind } for  pid=10502 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  478.843306][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  478.850728][ T9098] dvb-usb: error while querying for an remote control event.
[  479.250245][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  479.273475][ T5929] dvb-usb: error while querying for an remote control event.
[  479.283185][T10514] tmpfs: Unknown parameter 'usrquotauencer'
[  479.373742][ T5942] usb 4-1: USB disconnect, device number 59
[  479.491598][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.617600][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  479.627675][ T5929] dvb-usb: error while querying for an remote control event.
[  480.312335][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  480.318089][ T5894] dvb-usb: error while querying for an remote control event.
[  480.612597][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  481.018098][ T5894] dvb-usb: error while querying for an remote control event.
[  481.194047][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  481.407204][ T5894] dvb-usb: error while querying for an remote control event.
[  481.447831][T10538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.460444][T10538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.602333][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  481.608098][ T9098] dvb-usb: error while querying for an remote control event.
[  481.685269][T10545] libceph: resolve '400' (ret=-3): failed
[  481.698712][ T5894] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  482.075929][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  482.095683][ T5874] dvb-usb: error while querying for an remote control event.
[  482.193743][ T5894] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  482.207822][ T5894] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  482.223616][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0
[  482.248699][ T5894] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  482.273544][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  482.281533][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.291807][ T5874] dvb-usb: error while querying for an remote control event.
[  482.310983][ T5894] usb 5-1: Product: syz
[  482.325945][ T5894] usb 5-1: Manufacturer: syz
[  482.335083][ T5894] usb 5-1: SerialNumber: syz
[  482.358082][T10534] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  482.366951][T10534] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  482.493758][ T5874] dvb-usb: bulk message failed: -22 (1/0)
[  482.511460][ T5874] dvb-usb: error while querying for an remote control event.
[  482.923538][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  482.940625][ T9098] dvb-usb: error while querying for an remote control event.
[  483.112373][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  483.120776][ T9098] dvb-usb: error while querying for an remote control event.
[  483.302343][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  483.321948][ T9098] dvb-usb: error while querying for an remote control event.
[  483.405117][   T30] audit: type=1400 audit(1767699293.034:589): avc:  denied  { connect } for  pid=10564 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  483.502450][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  483.526515][ T9098] dvb-usb: error while querying for an remote control event.
[  483.566850][   T30] audit: type=1400 audit(1767699293.194:590): avc:  denied  { setopt } for  pid=10564 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  483.722505][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  483.751457][ T5894] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  483.758973][ T9098] dvb-usb: error while querying for an remote control event.
[  483.932331][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  483.954692][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.983238][ T5894] dvb-usb: error while querying for an remote control event.
[  484.004153][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.058872][ T5940] usb 5-1: USB disconnect, device number 40
[  484.163262][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  484.184013][ T5894] dvb-usb: error while querying for an remote control event.
[  484.263618][ T6641] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  484.363295][   T30] audit: type=1400 audit(1767699293.984:591): avc:  denied  { write } for  pid=10576 comm="syz.5.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  484.382348][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  484.479158][T10575] FAULT_INJECTION: forcing a failure.
[  484.479158][T10575] name failslab, interval 1, probability 0, space 0, times 0
[  485.065199][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.3.1233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.065229][T10575] Tainted: [L]=SOFTLOCKUP
[  485.065235][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  485.065245][T10575] Call Trace:
[  485.065251][T10575]  <TASK>
[  485.065259][T10575]  dump_stack_lvl+0x16c/0x1f0
[  485.065284][T10575]  should_fail_ex+0x512/0x640
[  485.065302][T10575]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  485.065316][T10575]  should_failslab+0xc2/0x120
[  485.065331][T10575]  kmem_cache_alloc_node_noprof+0x86/0x800
[  485.065342][T10575]  ? __alloc_skb+0x156/0x410
[  485.065362][T10575]  ? __alloc_skb+0x156/0x410
[  485.065377][T10575]  __alloc_skb+0x156/0x410
[  485.065392][T10575]  ? __alloc_skb+0x35d/0x410
[  485.065408][T10575]  ? __pfx___alloc_skb+0x10/0x10
[  485.065433][T10575]  netlink_dump+0x19b/0xd30
[  485.065446][T10575]  ? rcu_is_watching+0x12/0xc0
[  485.065458][T10575]  ? trace_kmalloc+0x2b/0xb0
[  485.065471][T10575]  ? __pfx_netlink_dump+0x10/0x10
[  485.065483][T10575]  ? bpf_sk_storage_diag_alloc+0xa0/0x6c0
[  485.065505][T10575]  ? __inet_diag_dump_start+0x541/0x960
[  485.065524][T10575]  __netlink_dump_start+0x6d6/0x990
[  485.065539][T10575]  inet_diag_rcv_msg_compat+0x275/0x2d0
[  485.065555][T10575]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  485.065570][T10575]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  485.065584][T10575]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  485.065598][T10575]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  485.065614][T10575]  ? sock_diag_rcv_msg+0x315/0x790
[  485.065627][T10575]  sock_diag_rcv_msg+0x34d/0x790
[  485.065639][T10575]  netlink_rcv_skb+0x158/0x420
[  485.065652][T10575]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  485.065663][T10575]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  485.065682][T10575]  ? netlink_deliver_tap+0x1ae/0xd30
[  485.065697][T10575]  netlink_unicast+0x5aa/0x870
[  485.065712][T10575]  ? __pfx_netlink_unicast+0x10/0x10
[  485.065731][T10575]  netlink_sendmsg+0x8c8/0xdd0
[  485.065752][T10575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  485.065771][T10575]  ____sys_sendmsg+0xa5d/0xc30
[  485.065786][T10575]  ? copy_msghdr_from_user+0x10a/0x160
[  485.065797][T10575]  ? __pfx_____sys_sendmsg+0x10/0x10
[  485.065818][T10575]  ___sys_sendmsg+0x134/0x1d0
[  485.065830][T10575]  ? __pfx____sys_sendmsg+0x10/0x10
[  485.065858][T10575]  __sys_sendmsg+0x16d/0x220
[  485.065869][T10575]  ? __pfx___sys_sendmsg+0x10/0x10
[  485.065890][T10575]  do_syscall_64+0xcd/0xf80
[  485.065905][T10575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.065916][T10575] RIP: 0033:0x7fd8deb8f749
[  485.065925][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  485.065936][T10575] RSP: 002b:00007fd8dcdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  485.065946][T10575] RAX: ffffffffffffffda RBX: 00007fd8dede6090 RCX: 00007fd8deb8f749
[  485.065953][T10575] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  485.065960][T10575] RBP: 00007fd8dcdd5090 R08: 0000000000000000 R09: 0000000000000000
[  485.065967][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.065973][T10575] R13: 00007fd8dede6128 R14: 00007fd8dede6090 R15: 00007ffebc46b2b8
[  485.065987][T10575]  </TASK>
[  485.442768][ T9098] dvb-usb: error while querying for an remote control event.
[  485.672563][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  485.679487][ T9098] dvb-usb: error while querying for an remote control event.
[  486.339924][ T5942] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  486.360833][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  486.432598][ T9098] dvb-usb: error while querying for an remote control event.
[  486.532375][ T5942] usb 5-1: Using ep0 maxpacket: 32
[  486.543754][ T5942] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  486.645117][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  486.650037][ T5942] usb 5-1: config 0 has no interface number 0
[  486.661090][ T9098] dvb-usb: error while querying for an remote control event.
[  486.679512][ T5942] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  486.691360][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.724352][ T5942] usb 5-1: Product: syz
[  486.728538][ T5942] usb 5-1: Manufacturer: syz
[  486.762290][ T5942] usb 5-1: SerialNumber: syz
[  486.774675][ T5942] usb 5-1: config 0 descriptor??
[  486.803926][ T5942] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  486.816847][ T5942] usb 5-1: selecting invalid altsetting 1
[  486.832364][ T5942] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  487.017829][T10583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.060537][ T5942] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  487.063149][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  487.414802][T10583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.455883][ T5942] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  487.464318][ T5942] usb 5-1: media controller created
[  487.501488][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  487.545849][ T9098] dvb-usb: error while querying for an remote control event.
[  487.558860][   T30] audit: type=1400 audit(1767699297.174:592): avc:  denied  { create } for  pid=10598 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  487.578572][T10583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.640333][T10583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.743639][T10583] dvb-usb: bulk message failed: -22 (2/0)
[  487.802123][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  487.951774][ T5942] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  487.960413][ T5942] zl10353_read_register: readreg error (reg=127, ret==-71)
[  487.991067][ T5942] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  487.994293][ T9098] dvb-usb: error while querying for an remote control event.
[  488.171817][ T5942] usb 5-1: USB disconnect, device number 41
[  488.212379][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  488.212398][ T9098] dvb-usb: error while querying for an remote control event.
[  488.372631][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  488.372659][ T5915] dvb-usb: error while querying for an remote control event.
[  488.723272][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  488.723299][ T9098] dvb-usb: error while querying for an remote control event.
[  488.882387][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  488.882420][ T9098] dvb-usb: error while querying for an remote control event.
[  489.048158][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  489.048325][ T9098] dvb-usb: error while querying for an remote control event.
[  489.474654][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  489.474673][ T9098] dvb-usb: error while querying for an remote control event.
[  489.632439][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  489.632467][ T9098] dvb-usb: error while querying for an remote control event.
[  489.846225][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.846406][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.902831][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  489.902850][ T5894] dvb-usb: error while querying for an remote control event.
[  490.075428][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  490.075986][ T9098] dvb-usb: error while querying for an remote control event.
[  490.312435][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  490.379115][ T9098] dvb-usb: error while querying for an remote control event.
[  490.407747][  T754] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  490.552340][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  490.558126][ T9098] dvb-usb: error while querying for an remote control event.
[  490.722591][T10666] netlink: 'syz.2.1253': attribute type 1 has an invalid length.
[  490.742956][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  490.748736][ T9098] dvb-usb: error while querying for an remote control event.
[  491.237105][T10666] netlink: 'syz.2.1253': attribute type 2 has an invalid length.
[  491.266618][T10666] netlink: 'syz.2.1253': attribute type 1 has an invalid length.
[  491.317080][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'.
[  491.364736][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  491.385051][ T9098] dvb-usb: error while querying for an remote control event.
[  491.542153][   T30] audit: type=1400 audit(1767699301.164:593): avc:  denied  { map } for  pid=10674 comm="syz.4.1256" path="pipe:[31135]" dev="pipefs" ino=31135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  491.562323][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  491.600035][ T5894] dvb-usb: error while querying for an remote control event.
[  491.821922][   T30] audit: type=1400 audit(1767699301.164:594): avc:  denied  { execute } for  pid=10674 comm="syz.4.1256" path="pipe:[31135]" dev="pipefs" ino=31135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  491.847806][T10678] overlayfs: missing 'lowerdir'
[  491.952462][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  491.960166][ T5894] dvb-usb: error while querying for an remote control event.
[  492.152736][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  492.158493][ T5894] dvb-usb: error while querying for an remote control event.
[  492.352842][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  492.361224][ T5894] dvb-usb: error while querying for an remote control event.
[  492.632339][ T9098] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  492.662311][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  492.668087][ T5931] dvb-usb: error while querying for an remote control event.
[  492.791512][ T9098] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  492.810931][ T9098] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  492.839446][ T9098] usb 3-1: config 1 interface 0 has no altsetting 0
[  492.846676][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  492.861818][ T5931] dvb-usb: error while querying for an remote control event.
[  492.892602][ T9098] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  492.902307][ T9098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.914695][ T9098] usb 3-1: Product: syz
[  492.960650][ T9098] usb 3-1: Manufacturer: syz
[  492.971356][ T9098] usb 3-1: SerialNumber: syz
[  493.042363][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  493.075068][T10695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  493.084779][T10695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  493.103864][ T5931] dvb-usb: error while querying for an remote control event.
[  493.265717][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  493.620831][ T5931] dvb-usb: error while querying for an remote control event.
[  493.832385][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  493.840280][   T24] dvb-usb: error while querying for an remote control event.
[  494.111047][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  494.122791][ T5931] dvb-usb: error while querying for an remote control event.
[  494.210617][   T30] audit: type=1400 audit(1767699303.634:595): avc:  denied  { remount } for  pid=10708 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  494.285023][T10713] netlink: 'syz.3.1268': attribute type 1 has an invalid length.
[  494.296875][T10713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1268'.
[  494.433126][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  494.439703][ T5931] dvb-usb: error while querying for an remote control event.
[  494.553333][ T9098] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  494.621722][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  494.652463][ T5894] dvb-usb: error while querying for an remote control event.
[  494.760326][ T5894] usb 3-1: USB disconnect, device number 57
[  494.841205][T10727] FAULT_INJECTION: forcing a failure.
[  494.841205][T10727] name failslab, interval 1, probability 0, space 0, times 0
[  494.895274][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  494.901055][ T9098] dvb-usb: error while querying for an remote control event.
[  494.921315][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.0.1272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.921343][T10727] Tainted: [L]=SOFTLOCKUP
[  494.921349][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  494.921359][T10727] Call Trace:
[  494.921365][T10727]  <TASK>
[  494.921372][T10727]  dump_stack_lvl+0x16c/0x1f0
[  494.921399][T10727]  should_fail_ex+0x512/0x640
[  494.921425][T10727]  ? __kmalloc_noprof+0xca/0x910
[  494.921455][T10727]  should_failslab+0xc2/0x120
[  494.921478][T10727]  __kmalloc_noprof+0xeb/0x910
[  494.921503][T10727]  ? __mod_timer+0x8f2/0xd30
[  494.921526][T10727]  ? nft_expr_init+0x216/0x3b0
[  494.921558][T10727]  ? nft_expr_init+0x216/0x3b0
[  494.921585][T10727]  nft_expr_init+0x216/0x3b0
[  494.921612][T10727]  ? __pfx_nft_expr_init+0x10/0x10
[  494.921650][T10727]  ? queue_delayed_work_on+0x12f/0x200
[  494.921674][T10727]  ? lockdep_hardirqs_on+0x7c/0x110
[  494.921696][T10727]  ? queue_delayed_work_on+0x8e/0x200
[  494.921725][T10727]  nft_set_elem_expr_alloc+0x27/0x270
[  494.921747][T10727]  nft_set_expr_alloc+0x2ab/0x5f0
[  494.921779][T10727]  nf_tables_newset+0x325b/0x4320
[  494.921808][T10727]  ? __pfx_nf_tables_newset+0x10/0x10
[  494.921834][T10727]  ? __nla_validate_parse+0x600/0x2880
[  494.921870][T10727]  ? __nla_parse+0x40/0x60
[  494.921893][T10727]  nfnetlink_rcv_batch+0x190d/0x2350
[  494.921934][T10727]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  494.921977][T10727]  ? avc_has_perm_noaudit+0x149/0x3b0
[  494.922028][T10727]  ? __nla_parse+0x40/0x60
[  494.922050][T10727]  nfnetlink_rcv+0x3c1/0x430
[  494.922076][T10727]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  494.922109][T10727]  netlink_unicast+0x5aa/0x870
[  494.922134][T10727]  ? __pfx_netlink_unicast+0x10/0x10
[  494.922166][T10727]  netlink_sendmsg+0x8c8/0xdd0
[  494.922192][T10727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.922223][T10727]  ____sys_sendmsg+0xa5d/0xc30
[  494.922250][T10727]  ? copy_msghdr_from_user+0x10a/0x160
[  494.922267][T10727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  494.922300][T10727]  ___sys_sendmsg+0x134/0x1d0
[  494.922320][T10727]  ? __pfx____sys_sendmsg+0x10/0x10
[  494.922369][T10727]  __sys_sendmsg+0x16d/0x220
[  494.922389][T10727]  ? __pfx___sys_sendmsg+0x10/0x10
[  494.922425][T10727]  do_syscall_64+0xcd/0xf80
[  494.922450][T10727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.922469][T10727] RIP: 0033:0x7fdc5258f749
[  494.922485][T10727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.922502][T10727] RSP: 002b:00007fdc533d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.922520][T10727] RAX: ffffffffffffffda RBX: 00007fdc527e5fa0 RCX: 00007fdc5258f749
[  494.922532][T10727] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003
[  494.922543][T10727] RBP: 00007fdc533d6090 R08: 0000000000000000 R09: 0000000000000000
[  494.922554][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  494.922565][T10727] R13: 00007fdc527e6038 R14: 00007fdc527e5fa0 R15: 00007fff1210ef58
[  494.922591][T10727]  </TASK>
[  495.234420][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  495.240174][ T9098] dvb-usb: error while querying for an remote control event.
[  495.436777][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  495.442915][   T24] dvb-usb: error while querying for an remote control event.
[  495.941913][ T6290] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  495.960471][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  495.966648][ T5894] dvb-usb: error while querying for an remote control event.
[  496.201502][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  496.391259][T10753] sp0: Synchronizing with TNC
[  496.508226][   T30] audit: type=1400 audit(1767699306.074:596): avc:  denied  { write } for  pid=10744 comm="syz.3.1276" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  496.602856][ T5894] dvb-usb: error while querying for an remote control event.
[  496.762350][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  496.779074][ T5881] dvb-usb: error while querying for an remote control event.
[  496.792553][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'.
[  496.973973][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.985623][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.269961][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  497.284691][ T5894] dvb-usb: error while querying for an remote control event.
[  497.427234][   T30] audit: type=1400 audit(1767699306.624:597): avc:  denied  { read } for  pid=10740 comm="syz.0.1275" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  497.582536][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  497.591125][ T5966] dvb-usb: error while querying for an remote control event.
[  497.853720][   T30] audit: type=1400 audit(1767699306.624:598): avc:  denied  { open } for  pid=10740 comm="syz.0.1275" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  497.886653][   T30] audit: type=1400 audit(1767699307.514:599): avc:  denied  { write } for  pid=10760 comm="syz.5.1279" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  497.889579][T10772] Device name not specified.
[  497.889579][T10772] 
[  498.124686][   T30] audit: type=1400 audit(1767699307.754:600): avc:  denied  { bind } for  pid=10760 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  498.152048][T10761] orangefs: client-core tried to read wrong size
[  498.182352][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  498.188167][ T5966] dvb-usb: error while querying for an remote control event.
[  498.280339][   T30] audit: type=1400 audit(1767699307.774:601): avc:  denied  { name_bind } for  pid=10760 comm="syz.5.1279" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  498.310480][   T30] audit: type=1400 audit(1767699307.774:602): avc:  denied  { node_bind } for  pid=10760 comm="syz.5.1279" saddr=100.1.1.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  498.473304][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  498.502343][ T5966] dvb-usb: error while querying for an remote control event.
[  499.246554][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  499.265473][   T44] dvb-usb: error while querying for an remote control event.
[  499.949724][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  499.955547][ T5966] dvb-usb: error while querying for an remote control event.
[  500.209733][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  500.222308][ T5966] dvb-usb: error while querying for an remote control event.
[  500.433087][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  500.438852][ T5966] dvb-usb: error while querying for an remote control event.
[  500.645754][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  501.194346][ T5966] dvb-usb: error while querying for an remote control event.
[  501.559940][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  501.572409][ T5966] dvb-usb: error while querying for an remote control event.
[  501.689368][T10834] FAULT_INJECTION: forcing a failure.
[  501.689368][T10834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.712702][T10837] mkiss: ax0: crc mode is auto.
[  501.780903][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  501.790367][ T9098] dvb-usb: error while querying for an remote control event.
[  501.845964][   T30] audit: type=1400 audit(1767699311.464:603): avc:  denied  { getopt } for  pid=10836 comm="syz.5.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  502.784791][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  502.790552][ T5966] dvb-usb: error while querying for an remote control event.
[  502.855552][T10834] CPU: 0 UID: 0 PID: 10834 Comm: syz.4.1289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.855584][T10834] Tainted: [L]=SOFTLOCKUP
[  502.855591][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  502.855603][T10834] Call Trace:
[  502.855611][T10834]  <TASK>
[  502.855618][T10834]  dump_stack_lvl+0x16c/0x1f0
[  502.855648][T10834]  should_fail_ex+0x512/0x640
[  502.855680][T10834]  _copy_from_user+0x2e/0xd0
[  502.855718][T10834]  do_tcp_setsockopt+0x7f6/0x2c10
[  502.855744][T10834]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  502.855762][T10834]  ? proc_fail_nth_write+0x9f/0x220
[  502.855789][T10834]  ? __pfx_sock_has_perm+0x10/0x10
[  502.855811][T10834]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  502.855837][T10834]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  502.855870][T10834]  ? find_held_lock+0x2b/0x80
[  502.855903][T10834]  tcp_setsockopt+0xe2/0x100
[  502.855923][T10834]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  502.855947][T10834]  do_sock_setsockopt+0xf3/0x1d0
[  502.855974][T10834]  __sys_setsockopt+0x1a0/0x230
[  502.855996][T10834]  __x64_sys_setsockopt+0xbd/0x160
[  502.856014][T10834]  ? do_syscall_64+0x91/0xf80
[  502.856037][T10834]  ? lockdep_hardirqs_on+0x7c/0x110
[  502.856061][T10834]  do_syscall_64+0xcd/0xf80
[  502.856086][T10834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.856105][T10834] RIP: 0033:0x7fcf8718f749
[  502.856121][T10834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.856138][T10834] RSP: 002b:00007fcf87fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  502.856158][T10834] RAX: ffffffffffffffda RBX: 00007fcf873e6090 RCX: 00007fcf8718f749
[  502.856171][T10834] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000005
[  502.856182][T10834] RBP: 00007fcf87fa5090 R08: 0000000020000328 R09: 0000000000000000
[  502.856193][T10834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.856205][T10834] R13: 00007fcf873e6128 R14: 00007fcf873e6090 R15: 00007ffebc56f008
[  502.856231][T10834]  </TASK>
[  503.176705][   T30] audit: type=1400 audit(1767699311.464:604): avc:  denied  { write } for  pid=10836 comm="syz.5.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  503.440101][   T30] audit: type=1400 audit(1767699311.464:605): avc:  denied  { ioctl } for  pid=10836 comm="syz.5.1296" path="socket:[30635]" dev="sockfs" ino=30635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  503.474391][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  503.522341][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  503.529008][ T5966] dvb-usb: error while querying for an remote control event.
[  504.179580][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  504.185413][ T5966] dvb-usb: error while querying for an remote control event.
[  504.352341][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  504.425049][ T5966] dvb-usb: error while querying for an remote control event.
[  504.730174][T10858] syzkaller1: entered promiscuous mode
[  504.730295][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  504.735770][T10858] syzkaller1: entered allmulticast mode
[  504.856915][ T5915] dvb-usb: error while querying for an remote control event.
[  505.443574][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  505.449694][ T5966] dvb-usb: error while querying for an remote control event.
[  505.602801][T10870] evm: overlay not supported
[  505.642323][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  505.648117][ T5966] dvb-usb: error while querying for an remote control event.
[  505.782359][ T7427] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  505.822387][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  505.828124][ T5929] dvb-usb: error while querying for an remote control event.
[  506.093421][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  506.134118][ T7427] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  506.145231][ T7427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.175196][ T7427] usb 3-1: Product: syz
[  506.672275][ T7427] usb 3-1: Manufacturer: syz
[  506.685511][ T5929] dvb-usb: error while querying for an remote control event.
[  506.692271][ T7427] usb 3-1: SerialNumber: syz
[  506.892520][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  506.942323][ T5929] dvb-usb: error while querying for an remote control event.
[  507.123316][ T5929] dvb-usb: bulk message failed: -22 (1/0)
[  507.131037][ T5929] dvb-usb: error while querying for an remote control event.
[  507.212506][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  507.482423][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  507.651593][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  507.769295][   T44] dvb-usb: error while querying for an remote control event.
[  507.983270][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  507.989008][   T44] dvb-usb: error while querying for an remote control event.
[  508.248813][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  508.310151][   T44] dvb-usb: error while querying for an remote control event.
[  508.522360][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  508.558332][   T44] dvb-usb: error while querying for an remote control event.
[  508.861992][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  508.900666][   T44] dvb-usb: error while querying for an remote control event.
[  509.625554][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  509.659137][   T44] dvb-usb: error while querying for an remote control event.
[  509.782516][T10885] binder: 10884:10885 ioctl d000943e 200000001340 returned -22
[  509.835194][T10885] binder: 10884:10885 ioctl d000943d 200000000280 returned -22
[  509.852430][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  509.882317][   T44] dvb-usb: error while querying for an remote control event.
[  509.892707][   T30] audit: type=1400 audit(1767699319.524:606): avc:  denied  { read } for  pid=10884 comm="syz.3.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  509.958275][T10885] sp0: Synchronizing with TNC
[  509.993284][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.017556][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.036403][   T30] audit: type=1400 audit(1767699319.664:607): avc:  denied  { map } for  pid=10906 comm="syz.0.1316" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  510.068061][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  510.082515][   T44] dvb-usb: error while querying for an remote control event.
[  510.262360][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  510.268116][   T44] dvb-usb: error while querying for an remote control event.
[  510.452357][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  510.458136][   T44] dvb-usb: error while querying for an remote control event.
[  510.504656][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  510.575841][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  510.618578][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO
[  510.623377][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  510.650943][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  510.671481][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  510.680852][   T44] dvb-usb: error while querying for an remote control event.
[  510.828381][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'.
[  510.863324][T10922] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1320'.
[  510.863460][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  510.952316][ T5915] dvb-usb: error while querying for an remote control event.
[  511.069026][ T7427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  511.098054][ T7427] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  511.113222][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  511.119085][ T5966] dvb-usb: error while querying for an remote control event.
[  511.129450][T10925] netlink: 'syz.4.1321': attribute type 1 has an invalid length.
[  511.144976][T10925] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1321'.
[  511.195544][ T7427] usb 3-1: USB disconnect, device number 58
[  511.405680][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  511.418064][ T5966] dvb-usb: error while querying for an remote control event.
[  511.592345][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  511.598100][ T5966] dvb-usb: error while querying for an remote control event.
[  511.802482][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  511.809798][ T5966] dvb-usb: error while querying for an remote control event.
[  512.782317][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  512.788264][ T5966] dvb-usb: error while querying for an remote control event.
[  513.062946][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  513.076997][ T5966] dvb-usb: error while querying for an remote control event.
[  513.192674][ T7427] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  513.295440][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  513.302341][ T5966] dvb-usb: error while querying for an remote control event.
[  513.470326][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  513.482405][ T5966] dvb-usb: error while querying for an remote control event.
[  513.682753][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  513.691623][ T5966] dvb-usb: error while querying for an remote control event.
[  513.947191][ T7427] usb 3-1: device descriptor read/all, error -71
[  514.012525][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  514.092705][ T5966] dvb-usb: error while querying for an remote control event.
[  514.254200][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  514.274452][ T5966] dvb-usb: error while querying for an remote control event.
[  514.452330][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  514.458071][ T5966] dvb-usb: error while querying for an remote control event.
[  514.465392][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  514.653219][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  514.668335][ T5966] dvb-usb: error while querying for an remote control event.
[  514.843041][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  514.856186][ T5966] dvb-usb: error while querying for an remote control event.
[  514.894875][T10968] FAULT_INJECTION: forcing a failure.
[  514.894875][T10968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.910152][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.4.1334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.910181][T10968] Tainted: [L]=SOFTLOCKUP
[  514.910186][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  514.910193][T10968] Call Trace:
[  514.910197][T10968]  <TASK>
[  514.910202][T10968]  dump_stack_lvl+0x16c/0x1f0
[  514.910221][T10968]  should_fail_ex+0x512/0x640
[  514.910242][T10968]  _copy_from_user+0x2e/0xd0
[  514.910259][T10968]  kstrtouint_from_user+0xd6/0x1d0
[  514.910272][T10968]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  514.910284][T10968]  ? __lock_acquire+0x436/0x2890
[  514.910300][T10968]  ? lock_acquire+0x179/0x330
[  514.910316][T10968]  proc_fail_nth_write+0x83/0x220
[  514.910329][T10968]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  514.910345][T10968]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  514.910355][T10968]  vfs_write+0x2a0/0x11d0
[  514.910371][T10968]  ? __pfx___mutex_lock+0x10/0x10
[  514.910388][T10968]  ? __pfx_vfs_write+0x10/0x10
[  514.910406][T10968]  ? __fget_files+0x20e/0x3c0
[  514.910427][T10968]  ksys_write+0x12a/0x250
[  514.910441][T10968]  ? __pfx_ksys_write+0x10/0x10
[  514.910459][T10968]  do_syscall_64+0xcd/0xf80
[  514.910475][T10968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.910487][T10968] RIP: 0033:0x7fcf8718e1ff
[  514.910496][T10968] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  514.910508][T10968] RSP: 002b:00007fcf87fc6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  514.910519][T10968] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf8718e1ff
[  514.910526][T10968] RDX: 0000000000000001 RSI: 00007fcf87fc60a0 RDI: 0000000000000004
[  514.910532][T10968] RBP: 00007fcf87fc6090 R08: 0000000000000000 R09: 0000000000000000
[  514.910539][T10968] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  514.910545][T10968] R13: 00007fcf873e6038 R14: 00007fcf873e5fa0 R15: 00007ffebc56f008
[  514.910560][T10968]  </TASK>
[  515.032298][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  515.216496][ T5966] dvb-usb: error while querying for an remote control event.
[  515.911210][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  515.946057][ T5966] dvb-usb: error while querying for an remote control event.
[  516.129175][T10979] syzkaller1: entered promiscuous mode
[  516.140393][T10979] syzkaller1: entered allmulticast mode
[  516.292343][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  516.317784][   T30] audit: type=1400 audit(1767699325.944:608): avc:  denied  { setopt } for  pid=10980 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  516.322284][ T5966] dvb-usb: error while querying for an remote control event.
[  516.533975][   T30] audit: type=1400 audit(1767699326.154:609): avc:  denied  { write } for  pid=10969 comm="syz.2.1335" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  516.632072][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  516.751663][T10996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  516.760432][T10996] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  516.769459][T10996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  517.255512][ T4136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  517.285317][ T5966] dvb-usb: error while querying for an remote control event.
[  517.464597][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  517.470353][ T5915] dvb-usb: error while querying for an remote control event.
[  518.007618][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  518.079293][ T5915] dvb-usb: error while querying for an remote control event.
[  518.094193][T11004] lo: entered allmulticast mode
[  518.105381][T11004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.302325][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  518.312008][ T5915] dvb-usb: error while querying for an remote control event.
[  518.711654][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  518.725200][ T9098] dvb-usb: error while querying for an remote control event.
[  519.179748][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  519.182265][   T30] audit: type=1400 audit(1767699328.464:610): avc:  denied  { mount } for  pid=11011 comm="syz.3.1348" name="/" dev="rpc_pipefs" ino=32062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  519.193951][ T9098] dvb-usb: error while querying for an remote control event.
[  519.398752][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  519.420043][ T9098] dvb-usb: error while querying for an remote control event.
[  519.420330][   T30] audit: type=1400 audit(1767699329.044:611): avc:  denied  { watch_mount } for  pid=11018 comm="syz.3.1350" path="/258" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  519.475244][   T30] audit: type=1400 audit(1767699329.104:612): avc:  denied  { bind } for  pid=11018 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  519.559322][ T9098] libceph: connect (1)[c::]:6789 error -101
[  519.568773][ T9098] libceph: mon0 (1)[c::]:6789 connect error
[  519.593136][T11021] ceph: No mds server is up or the cluster is laggy
[  519.601894][T11024] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1349'.
[  519.673013][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  519.678804][ T9098] dvb-usb: error while querying for an remote control event.
[  519.876290][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  519.889473][ T9098] dvb-usb: error while querying for an remote control event.
[  520.112452][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  520.118319][ T9098] dvb-usb: error while querying for an remote control event.
[  520.264011][T11038] No source specified
[  520.370714][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  520.570364][ T9098] dvb-usb: error while querying for an remote control event.
[  520.904219][   T30] audit: type=1400 audit(1767699330.534:613): avc:  denied  { create } for  pid=11046 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  521.069507][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  521.075321][ T9098] dvb-usb: error while querying for an remote control event.
[  521.242326][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  521.248155][ T9098] dvb-usb: error while querying for an remote control event.
[  522.242052][   T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  522.320770][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  522.326562][ T9098] dvb-usb: error while querying for an remote control event.
[  522.373382][   T30] audit: type=1400 audit(1767699331.994:614): avc:  denied  { connect } for  pid=11046 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  522.614440][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  522.620262][ T9098] dvb-usb: error while querying for an remote control event.
[  522.858987][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  522.859062][T11067] syzkaller1: entered promiscuous mode
[  522.871515][T11067] syzkaller1: entered allmulticast mode
[  523.076416][ T9098] dvb-usb: error while querying for an remote control event.
[  523.166056][   T30] audit: type=1400 audit(1767699332.794:615): avc:  denied  { mount } for  pid=11069 comm="syz.2.1362" name="/" dev="autofs" ino=32991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  523.253011][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  523.266523][ T5894] dvb-usb: error while querying for an remote control event.
[  523.482518][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  523.489546][ T9098] dvb-usb: error while querying for an remote control event.
[  523.682107][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  523.695929][ T9098] dvb-usb: error while querying for an remote control event.
[  523.774513][   T30] audit: type=1400 audit(1767699333.394:616): avc:  denied  { shutdown } for  pid=11087 comm="syz.3.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  523.837407][   T30] audit: type=1400 audit(1767699333.404:617): avc:  denied  { accept } for  pid=11087 comm="syz.3.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  523.865635][   T30] audit: type=1400 audit(1767699333.404:618): avc:  denied  { connect } for  pid=11087 comm="syz.3.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  523.885755][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  523.896137][ T9098] dvb-usb: error while querying for an remote control event.
[  523.938300][   T30] audit: type=1400 audit(1767699333.564:619): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  523.986884][   T30] audit: type=1400 audit(1767699333.614:620): avc:  denied  { read } for  pid=11092 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  524.123939][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  524.130774][ T9098] dvb-usb: error while querying for an remote control event.
[  524.643387][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  524.659698][ T9098] dvb-usb: error while querying for an remote control event.
[  524.832336][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  524.845833][ T9098] dvb-usb: error while querying for an remote control event.
[  525.045897][ T9098] dvb-usb: bulk message failed: -22 (1/0)
[  525.247540][ T9098] dvb-usb: error while querying for an remote control event.
[  525.547778][T11108] syzkaller1: entered promiscuous mode
[  525.553456][T11108] syzkaller1: entered allmulticast mode
[  525.859064][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  525.933637][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  526.197218][ T6199] dvb-usb: error while querying for an remote control event.
[  526.320116][T11116] syzkaller1: entered promiscuous mode
[  526.325725][T11116] syzkaller1: entered allmulticast mode
[  526.372608][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  526.379545][ T6199] dvb-usb: error while querying for an remote control event.
[  526.562660][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  526.568518][ T6199] dvb-usb: error while querying for an remote control event.
[  526.616976][T11132] netlink: 'syz.5.1379': attribute type 1 has an invalid length.
[  526.743456][ T6199] dvb-usb: bulk message failed: -22 (1/0)
[  526.859919][ T6199] dvb-usb: error while querying for an remote control event.
[  527.222382][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  527.239279][T11130] 8021q: adding VLAN 0 to HW filter on device bond1
[  527.268140][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'.
[  527.292363][ T5894] dvb-usb: error while querying for an remote control event.
[  527.321197][T11130] bond0: (slave bond1): Enslaving as an active interface with an up link
[  527.360069][T11133] gre1: entered promiscuous mode
[  527.494767][ T5894] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  527.502878][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  527.508703][ T5915] dvb-usb: error while querying for an remote control event.
[  528.052264][ T5138] Bluetooth: hci3: command 0x0406 tx timeout
[  528.092036][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  528.097228][ T5954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  528.098752][ T5915] dvb-usb: error while querying for an remote control event.
[  528.162370][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  528.168950][ T5894] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  528.205592][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.244360][ T5894] gspca_main: nw80x-2.14.0 probing 055f:d001
[  528.312370][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  528.322380][ T5915] dvb-usb: error while querying for an remote control event.
[  528.337446][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.462917][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.502308][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  528.508111][ T5915] dvb-usb: error while querying for an remote control event.
[  633.592197][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  633.599165][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P11049/1:b..l
[  633.607597][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=38681, q=456 ncpus=2)
[  633.615314][    C1] task:syz.4.1356      state:R  running task     stack:22256 pid:11049 tgid:11049 ppid:5831   task_flags:0x440640 flags:0x00080000
[  633.629496][    C1] Call Trace:
[  633.632802][    C1]  <TASK>
[  633.635726][    C1]  ? __schedule+0x10b9/0x6150
[  633.640402][    C1]  __schedule+0x1139/0x6150
[  633.644913][    C1]  ? __pfx___schedule+0x10/0x10
[  633.649758][    C1]  ? mark_held_locks+0x49/0x80
[  633.654534][    C1]  preempt_schedule_irq+0x51/0x90
[  633.659554][    C1]  irqentry_exit+0x1d8/0x8c0
[  633.664147][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  633.670136][    C1] RIP: 0010:lock_release+0x183/0x2d0
[  633.675417][    C1] Code: 0f c1 05 f8 00 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41
[  633.695013][    C1] RSP: 0018:ffffc90004496080 EFLAGS: 00000206
[  633.701068][    C1] RAX: 0f85b2fe9fc3bc00 RBX: ffffffff8e3c96a0 RCX: ffffc9000449608c
[  633.709026][    C1] RDX: 0000000000000003 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480
[  633.716988][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 000000003bcba75d
[  633.724945][    C1] R10: 0000000000000002 R11: 0000000000010b9d R12: ffffffff816cb9a4
[  633.732901][    C1] R13: 0000000000000206 R14: ffff8880304e0000 R15: 0000000000000004
[  633.740860][    C1]  ? unwind_next_frame+0x3f4/0x20b0
[  633.746068][    C1]  unwind_next_frame+0x3f9/0x20b0
[  633.751089][    C1]  ? __do_fault+0x10d/0x490
[  633.755581][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  633.761730][    C1]  arch_stack_walk+0x94/0x100
[  633.766404][    C1]  ? do_fault+0xae4/0x1ad0
[  633.770818][    C1]  stack_trace_save+0x8e/0xc0
[  633.775511][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  633.780874][    C1]  ? __lock_acquire+0x436/0x2890
[  633.785805][    C1]  save_stack+0x160/0x1f0
[  633.790126][    C1]  ? __pfx_save_stack+0x10/0x10
[  633.794969][    C1]  ? post_alloc_hook+0x1af/0x220
[  633.799900][    C1]  ? get_page_from_freelist+0xd0b/0x31a0
[  633.805519][    C1]  ? __alloc_frozen_pages_noprof+0x25f/0x2430
[  633.811572][    C1]  ? alloc_pages_mpol+0x1fb/0x550
[  633.816589][    C1]  ? folio_alloc_noprof+0x20/0x2d0
[  633.821698][    C1]  ? filemap_alloc_folio_noprof.part.0+0x39d/0x470
[  633.828190][    C1]  ? filemap_alloc_folio_noprof+0x5e/0x80
[  633.833901][    C1]  ? page_cache_ra_unbounded+0x379/0x9e0
[  633.839527][    C1]  ? page_cache_ra_order+0xbf4/0xed0
[  633.844809][    C1]  ? page_cache_async_ra+0x74b/0xc40
[  633.850088][    C1]  ? filemap_fault+0xd14/0x29d0
[  633.854924][    C1]  ? __do_fault+0x10d/0x490
[  633.859416][    C1]  ? __lock_acquire+0x436/0x2890
[  633.864353][    C1]  __set_page_owner+0x91/0x560
[  633.869112][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  633.874482][    C1]  ? bad_range+0x261/0x4c0
[  633.878889][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  633.884081][    C1]  post_alloc_hook+0x1af/0x220
[  633.888844][    C1]  get_page_from_freelist+0xd0b/0x31a0
[  633.894298][    C1]  ? __pfx___might_resched+0x10/0x10
[  633.899575][    C1]  ? should_fail_alloc_page+0xee/0x130
[  633.905033][    C1]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  633.910922][    C1]  ? __lock_acquire+0x436/0x2890
[  633.915850][    C1]  ? css_rstat_updated+0x1d1/0x590
[  633.920952][    C1]  ? __pfx_css_rstat_updated+0x10/0x10
[  633.926402][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  633.932729][    C1]  ? __lock_acquire+0x436/0x2890
[  633.937659][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  633.943544][    C1]  ? policy_nodemask+0xea/0x4e0
[  633.948388][    C1]  alloc_pages_mpol+0x1fb/0x550
[  633.953231][    C1]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  633.958596][    C1]  ? find_held_lock+0x2b/0x80
[  633.963277][    C1]  folio_alloc_noprof+0x20/0x2d0
[  633.968210][    C1]  filemap_alloc_folio_noprof.part.0+0x39d/0x470
[  633.974535][    C1]  ? xa_load+0x153/0x2c0
[  633.978771][    C1]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  633.985617][    C1]  filemap_alloc_folio_noprof+0x5e/0x80
[  633.991158][    C1]  page_cache_ra_unbounded+0x379/0x9e0
[  633.996621][    C1]  page_cache_ra_order+0xbf4/0xed0
[  634.001743][    C1]  page_cache_async_ra+0x74b/0xc40
[  634.006854][    C1]  filemap_fault+0xd14/0x29d0
[  634.011525][    C1]  ? __pfx_filemap_fault+0x10/0x10
[  634.016639][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  634.022085][    C1]  __do_fault+0x10d/0x490
[  634.026407][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  634.031849][    C1]  do_fault+0xae4/0x1ad0
[  634.036083][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  634.041534][    C1]  __handle_mm_fault+0x1919/0x2bb0
[  634.046650][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  634.052103][    C1]  ? __pte_offset_map_lock+0x174/0x310
[  634.057553][    C1]  ? find_held_lock+0x2b/0x80
[  634.062232][    C1]  ? follow_page_pte+0x5cf/0x1390
[  634.067256][    C1]  handle_mm_fault+0x3fe/0xad0
[  634.072021][    C1]  __get_user_pages+0x54e/0x3590
[  634.076961][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  634.082328][    C1]  ? __kernel_write_iter+0x5a5/0xb10
[  634.087612][    C1]  get_dump_page+0x257/0x3d0
[  634.092200][    C1]  ? __pfx_get_dump_page+0x10/0x10
[  634.097311][    C1]  ? dump_user_range+0x756/0xb70
[  634.102254][    C1]  ? dump_user_range+0x16e/0xb70
[  634.107194][    C1]  dump_user_range+0x195/0xb70
[  634.111962][    C1]  ? __pfx_dump_user_range+0x10/0x10
[  634.117244][    C1]  ? elf_coredump_extra_notes_write+0xbd/0x500
[  634.123393][    C1]  ? __pfx_writenote+0x10/0x10
[  634.128153][    C1]  elf_core_dump+0x29c3/0x3c10
[  634.132920][    C1]  ? __pfx_elf_core_dump+0x10/0x10
[  634.138019][    C1]  ? kasan_save_stack+0x33/0x60
[  634.142862][    C1]  ? kasan_save_track+0x14/0x30
[  634.147704][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[  634.152458][    C1]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[  634.157995][    C1]  ? vfs_coredump+0x1dd9/0x55e0
[  634.162843][    C1]  ? arch_do_signal_or_restart+0x8f/0x7e0
[  634.168557][    C1]  ? irqentry_exit+0x38a/0x8c0
[  634.173313][    C1]  ? asm_exc_page_fault+0x26/0x30
[  634.178333][    C1]  ? 0xffffffffff600000
[  634.182525][    C1]  ? vfs_coredump+0x2b85/0x55e0
[  634.187371][    C1]  vfs_coredump+0x2b85/0x55e0
[  634.192052][    C1]  ? __pfx_vfs_coredump+0x10/0x10
[  634.197072][    C1]  ? __lock_acquire+0x436/0x2890
[  634.202010][    C1]  ? __lock_acquire+0x436/0x2890
[  634.206939][    C1]  ? lock_acquire+0x179/0x330
[  634.211612][    C1]  ? lock_acquire+0x179/0x330
[  634.216298][    C1]  ? arch_stack_walk+0xa6/0x100
[  634.221149][    C1]  ? stack_trace_save+0x8e/0xc0
[  634.225989][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  634.231372][    C1]  ? stack_depot_save_flags+0x29/0x9b0
[  634.236825][    C1]  ? __lock_acquire+0x436/0x2890
[  634.241754][    C1]  ? kasan_save_stack+0x42/0x60
[  634.246640][    C1]  ? proc_coredump_connector+0x2d1/0x4f0
[  634.252265][    C1]  ? __pfx_proc_coredump_connector+0x10/0x10
[  634.258240][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.262995][    C1]  get_signal+0x22e1/0x26d0
[  634.267504][    C1]  ? __pfx_get_signal+0x10/0x10
[  634.272353][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[  634.277892][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  634.284046][    C1]  ? __bad_area_nosemaphore+0x350/0x690
[  634.289592][    C1]  irqentry_exit+0x38a/0x8c0
[  634.294186][    C1]  asm_exc_page_fault+0x26/0x30
[  634.299024][    C1] RIP: 0033:0x7fcf8718f751
[  634.303428][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  634.309482][    C1] RAX: 0000000000000000 RBX: 00007fcf873e6090 RCX: 00007fcf8718f749
[  634.317441][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  634.325398][    C1] RBP: 00007fcf87213f91 R08: 0000000000000000 R09: 0000000000000000
[  634.333788][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  634.341744][    C1] R13: 00007fcf873e6128 R14: 00007fcf873e6090 R15: 00007ffebc56f008
[  634.349715][    C1]  </TASK>
[  634.352723][    C1] rcu: rcu_preempt kthread starved for 10575 jiffies! g38681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  634.363903][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  634.373857][    C1] rcu: RCU grace-period kthread stack dump:
[  634.379724][    C1] task:rcu_preempt     state:R  running task     stack:28064 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  634.393203][    C1] Call Trace:
[  634.396470][    C1]  <TASK>
[  634.399399][    C1]  ? __schedule+0x10b9/0x6150
[  634.404066][    C1]  __schedule+0x1139/0x6150
[  634.408572][    C1]  ? __pfx___schedule+0x10/0x10
[  634.413411][    C1]  ? find_held_lock+0x2b/0x80
[  634.418083][    C1]  ? schedule+0x2d7/0x3a0
[  634.422404][    C1]  schedule+0xe7/0x3a0
[  634.426464][    C1]  schedule_timeout+0x123/0x290
[  634.431301][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  634.436664][    C1]  ? __pfx_process_timeout+0x10/0x10
[  634.441941][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  634.447738][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  634.453189][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  634.457946][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  634.463222][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  634.468415][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  634.473340][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[  634.478192][    C1]  rcu_gp_kthread+0x26d/0x380
[  634.482861][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  634.488051][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.492803][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  634.497992][    C1]  ? __kthread_parkme+0x19e/0x250
[  634.503007][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  634.508195][    C1]  kthread+0x3c5/0x780
[  634.512258][    C1]  ? __pfx_kthread+0x10/0x10
[  634.516838][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.521588][    C1]  ? __pfx_kthread+0x10/0x10
[  634.526173][    C1]  ret_from_fork+0x983/0xb10
[  634.530757][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  634.535860][    C1]  ? __switch_to+0x7af/0x10d0
[  634.540529][    C1]  ? __pfx_kthread+0x10/0x10
[  634.545109][    C1]  ret_from_fork_asm+0x1a/0x30
[  634.549881][    C1]  </TASK>
[  634.552884][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  634.559185][    C1] Sending NMI from CPU 1 to CPUs 0:
[  634.564378][    C0] NMI backtrace for cpu 0
[  634.564392][    C0] CPU: 0 UID: 0 PID: 11163 Comm: syz.2.1387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  634.564411][    C0] Tainted: [L]=SOFTLOCKUP
[  634.564416][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  634.564425][    C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  634.564442][    C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a fe 1e f6 48 89 df e8 32 51 1f f6 e8 9d 14 4c f6 fb bf 01 00 00 00 <e8> 42 54 0f f6 65 8b 05 9b b9 37 08 85 c0 74 06 5b e9 01 4d 00 00
[  634.564455][    C0] RSP: 0018:ffffc90004607ca0 EFLAGS: 00000206
[  634.564467][    C0] RAX: 000000000500659f RBX: ffff88802f62d340 RCX: ffffffff81c70a2f
[  634.564476][    C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: 0000000000000001
[  634.564485][    C0] RBP: ffff88802f62d540 R08: 0000000000000001 R09: 0000000000000001
[  634.564493][    C0] R10: ffffffff9088bad7 R11: ffff888032852ff0 R12: 0000000000000000
[  634.564502][    C0] R13: 0000000000000011 R14: 0000000000000200 R15: ffff88802f62d340
[  634.564511][    C0] FS:  00007fe27b9b66c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[  634.564525][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  634.564534][    C0] CR2: 0000000000000000 CR3: 0000000049001000 CR4: 00000000003526f0
[  634.564543][    C0] Call Trace:
[  634.564548][    C0]  <TASK>
[  634.564553][    C0]  get_signal+0x1e6a/0x26d0
[  634.564577][    C0]  ? __pfx_get_signal+0x10/0x10
[  634.564598][    C0]  arch_do_signal_or_restart+0x8f/0x7e0
[  634.564617][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  634.564635][    C0]  ? __pfx_restore_altstack+0x10/0x10
[  634.564652][    C0]  ? restore_signal_shadow_stack+0x63/0x460
[  634.564675][    C0]  exit_to_user_mode_loop+0x8c/0x540
[  634.564695][    C0]  do_syscall_64+0x4ee/0xf80
[  634.564713][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.564726][    C0] RIP: 0033:0x7fe27ab8f749
[  634.564738][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.564751][    C0] RSP: 002b:00007fe27b9b6038 EFLAGS: 00000246
[  634.564761][    C0] RAX: 0000000000000000 RBX: 00007fe27ade6180 RCX: 00007fe27ab8f749
[  634.564770][    C0] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  634.564779][    C0] RBP: 00007fe27ac13f91 R08: 0000000000000000 R09: 0000000000000000
[  634.564787][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  634.564796][    C0] R13: 00007fe27ade6218 R14: 00007fe27ade6180 R15: 00007ffe2bdab4c8
[  634.564810][    C0]  </TASK>