last executing test programs:

12.628069188s ago: executing program 2 (id=1770):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/usb_gadget/g1\x00', 0x0, 0xb0)
mkdirat(r0, &(0x7f0000000700)='./file0\x00', 0xc7)

11.671777163s ago: executing program 2 (id=1772):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x42880)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffb7, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8010)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000015eaa5af3b5e11bb360da3d51f34fa6f071dedf25314ef78fd022003bb6652b2d687b3b4bb124963c3870b3ccf7f8695a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000300)="e7c66d6546", 0x5, 0x4040, &(0x7f00000002c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
close(r1)

10.056752853s ago: executing program 0 (id=1778):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2120, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffa}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x9a}}}}}, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc)

10.016299692s ago: executing program 3 (id=1779):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x2c, r3, 0x928d46e1eee28e63, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000})

9.020781097s ago: executing program 3 (id=1780):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x50703}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r0, @ANYBLOB="080027bd7000ffdbdf25870000000c009900060000007e00000035002a0075040800000072060303030303030517b95181640ca3ba156f9ca5e1a99d7ab575c8cc2195e3ee06d9f9003c04010807c60000007b002a0082670004ff"], 0x10c}, 0x1, 0x0, 0x0, 0x41}, 0xc801)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fdffffff000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20005000000008a2772fbf8ffffffb703000008000000b70400000000000085000000c30000008500000000002aded3980684585304243ecc46a6e0da4314817cb9c0d1f39e2465b7634bc1e564485bfdddcf26c261bc5ba28e2893d1b12b65722ec9f4c4edc5bd5d8d8ff806c34a8ace6b88525b4c78dc86c3616a6246a5d593da18e4c4f157ba6adc4c42895e91a4305046cdf1c991ddaf26fb672fc9bde84df4e42fa7a5be6f481c88a17d376c4a29ee091f69cc5e79ddfa3f4844d8879d62056962adf6a7c350b8bdf805f5db130ad69748a824630aaaf65d"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb5)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840)
r5 = syz_io_uring_setup(0x74d9, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x20000002}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000))
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x7, 0x2, 0x1000, 0xa, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x4, 0x8, 0x4, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]})
ioctl$COMEDI_SETWSUBD(r6, 0x6411)
timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=<r7=>0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d0009050b0200020500ff0905820206"], 0x0)
unshare(0x2c020400)
r8 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x12b, 0x0, 0x1, 0x4, 0x10000, @value=r8}, 0x28)
timer_settime(r7, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x8, 0x2, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)

8.556978805s ago: executing program 2 (id=1782):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x2c, r3, 0x928d46e1eee28e63, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000})

7.873086269s ago: executing program 2 (id=1783):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0xe47020)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r8, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0)
r9 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000})
r10 = fcntl$dupfd(r9, 0x0, r2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r11, 0xffffffffffffffff, 0x0)

7.810685162s ago: executing program 4 (id=1784):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0)
memfd_create(0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
socket$unix(0x1, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9)
write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

7.298082968s ago: executing program 4 (id=1786):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async)
semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) (async)
semop(r1, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1)
semctl$GETZCNT(r1, 0x2, 0xf, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x1) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00', 0x1}, 0x18)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea42, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x6], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x7fff, 0x2ae, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x1, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r7 = gettid() (async)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='source', 0x0, r4) (async)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r7, @ANYRES16=r8, @ANYBLOB="00022bbd7000fddbdf250f0000000a000900bbbbbbbbbbbb000008000b0008000000050033000000000008003a00b700000008003b00040000000600280004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x2000c000) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)

7.225559503s ago: executing program 1 (id=1787):
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000002c0)={0x6, 0x2, 0x1, 0x2, 0x2c52, 0x10, 0x1})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8040)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'caif0\x00', 0x1}, 0x18)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x20, 0x0, 0x28, {0x28, 0x10, "8bc8c7bdb908a9338f0d7523e28e37b999fbfaaae766276544fd1b374ae10a6cde15a98e99c8"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "c01a12d00ac923e336276499bed226403fd6b3cf60265a5413"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x8, 0xbc, "f867a528", "c263e4e0"}}, 0x0}, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "9ae063ac6914c131", "6952d9075d9983b5e927cc0357c3573b", "3522ef3b", "aed33b420a6f94b8"}, 0x28)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000026c0)={<r5=>0x0, 0x8}, &(0x7f0000002700)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000002740)={<r6=>0x0, 0x7}, &(0x7f0000002780)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000002900)={&(0x7f0000000280)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002540)=[{&(0x7f00000003c0)="5e849607d2ed0c492cb742bc6c3d33756c4c03ca1a7cab7ed1a415ba29ab2d1ebad927c4e51c90c5563716e836dd107d9f77219566bf4a7f08d8e0c3bc6a48b1e1815a9fd7242c31548cd8caeded2549c6e5c1902eef3b80e43187af10e4c6ad24f9c39a351cf75c761aa39f4bbcaa2a8afa1ea5309cd3edd969968f9056e3b8f8b5f463aa944a6b493c7435181010f49fe3f67978615bc92698acadc78e40ec831eaf600d2ab12a9edb34b2a1e179d07c8ac47402e04eefd64134a6f4a6a1bb3ee9f6a494e9430ef58609d39e04190d7be7c20673e4d920476148d3af3c2b5e728d533a17e6ffd0b2d82bd255609105c402c720c6ccf38e6e6313effb56aca678b3636b0d31b921c879e90b2abeb22c9f7cea1180e8de1ded712db5ae8355627ba2b68f07d402d30946d4f66ba526d72ae7ae94fa1ea0e777b0a4655258501d8ecbfc36163437fbf5e198371a797bd621f3e1e33d070fdde696d06b41da43c0105bd7970a0a65adb15f4ebeb1d84816b7ac6c826e8a413fa922cddee7c9fdc7b0b6d621020607c445b2a14967bceaeb32ef7d6098c98eabfc7ded296b312aff354dfbd5ec3574cde0709e1cda5d0c56954bdbaef2b4e874fb47fc1ac89e36f04e97f82ff2181b188f8d57c639834f9974bf70a8bec2947022ba25c81efcf6742725b0fc5e9d9dd3c0355934087e93518a9b10875288a5688b9b29886c800ddbe785c9a2ebeaac0298b783641030497db3809f7146521254012c25521fecf0321fcae63dea884677a0a35b5482b1da18b9b69de9cf3cf6f20fe70df3a43ee168e2997b6726acc870b0a9fa0e8ac6d511ca46204b9b98a774c58012ac5ea7e4da5ab8fbb3d14a503c9529533da9754faf0c1425f213b5883651c61a776adef702efde71529efe4f9777bf0a03bbf7469d3fd14b3ce04c86109d26755db3b06ecb6d8c8e5584c5fae237d447db16917bf0e4f7de29c527b558fe671faf00a10b305058e611cae9105f8f9ee647d672c8c1ea6c3d28cbc606f581251ce81d1c3c484f68221a3d082edeac96ef3ed92ef095571e9e285eba66c36c6ce220c3486b177039fb1eb103b24443c04dca6ae6518965acf9cc8239d98343cc5d780ab1eb8767aa24345b8a6008da0affc45739f96c19e2d05921c4a88dd8e9760a91ad104da60df1b4cfcf0da9ca3bba63533543a66baaba42341a3a36d4c498f564366d4ec52db12e7c55b96fedaf8b3d6a10d3845645ca7b9caf673daec2df01c0fed7cb52c3a42dc61589927c25bc851d90b521ea9d736b703ee6c7481b255c5b0b15d4683c08627117487cf2355d90d62f8690bf4e70cc5c94a3e179083f89b65a528c4bbc8ee9332ad467b84d26d08748b7c2ddbcda559b0c29ba815c7dcd10d43a7877c08e402fd38b4ba7236e84a407086e38ccc8bbe4cbb32a5b9abf5b70032e25e353f48a5ed28847330a89bd7ecf9f00634be8eed29a78ae8b3fda1668a0d69f205edbece59e5268109b9397fb5a4b5f47d752e2f7f0fa82c200d21dc04dae2191cade2ff7be9769c3311e7f8924ff9ae9b795443d75379944f4c326e460112b2b354da52ce01cd2ed5728a825aeb421ce659ff7808ea9ba9c1302ab295a43f34f3c82b503e22708e1091761b39b179181efad7369bc0798798a1961c3fff998bb65059a1838af9671422aaf23311ddf1b8987a3fa188c0efc05e2bb37bb09e048ba024116acd0380acc45e9ff05095fa071aea19fbc60262dd2c490ae7f4ba7a14e0f7853eba3a07a8b5f38c55771794ac3fd6e8cb6e429711d80223512d375fac7224c80dfaeebffa375d6edebf3131cc27cb9b2132b87af52b9895e89ffef58495db2d8e2f9074d7187b1883162c00b5e87a7b3eb93d48e2d83b0b337a29ac76af28feb25cea619b23fab4cb0e3063f2ff33de95d8104d6a552e1c8f43c6fd4e4d54747f0b97b5992be2e0d35e977d72501cfde0564609f4bcf335a10361bcbf399fa82e19784c59bd759e422c65dd52096a379ac7000f15814a80ec3e8bd9f73a47c437766d2d333ed6d9706a5654375a839b4526f835a0a388fe69080e20dccb703f9b4887abd88424ccb0b405f2512359ef17dea7efbe9ce06e8d6d05b23449e74b7284edd4cea57e22164a0354514ba7fb73ab3ecbc9fe8bb44da2cd9b552256f86d532d65ecfad5751bba292c46b937fe123c027f33f2d2b3140773ecfababb0e3877ae3d4d52341d1164cddac339ef9bf019d7b64ca3f9886c3aada81999eb77b3f373bf7fdb228b8bba6da678f25d65b9e502a41d90dafae7bd6c75933ba510f71a5b40e5f63d1b067f49fbbbdd2a7e1c09e45ba34a827cfe3d40ad6b312e76e316e74fb32e2cb8ea6707ef21ed690ea7d63598498b998a793435827b44f8e62111533320fd79dcd0e5ed17434b7e2f27a10abc6975ad1cea832d19a901ad41ad1255cda83b35e3d9ab14f48acc43892a26f248ebf336ba70ffe8f9ca7c839801885cb88124b81a1ff68524bd0b80731bfc0c868664c1be11afd5c9b4aaed2b766d0242ee64f0cec62ba47623cf61f8713e32fdc418ae4135b9beb4cc6aca92cb25ccbf439282c313a9f18af7e4c4a6d44aea8b59866d2c01cbded2bbbacf2e463a11707c30304f0f73cf49d7f082b6d6068a9597820e73b8b31a1a289dca6b5098950cdb6b0fb9ba28ff389d6ed6c643af85407c8e8c15bb0574de9186faa8adbc8ecb742e5315931a4e0695e5ac6d20205fda27fe39602314037e8e5aec1b6b8247d0bc34306488b9983881af139ece315ebd885f19f910a7d33b6497bffd3abf5693d85c56707b72009f79c60f9da7e31c4a8a9b70d6f74b67d42e1a64619292734c06619188e6e6cd4af334b41e6f01877249cbb594489bd07c6f04cfb7f979293fc55d3e322877f40d24383632426ea2b2e6775359c6d45c7131a40efd3108ea1b71e8d56f054bbc1fe82659e27163157b5c23f10030296c25d4ef20472bc22fa930c7b873661520202e53b632c984f5db6ef7f48df1cd1f247c3ee8f01a037c77806d072a2de1ef50c3509bec976317d8ffbe2e13b13e05f9e3487d1f3df1dcd2a2b0abad7a78d038188122fab27562cb6f6db6bf4040b267a0715d606093dfdfb54a79b52a80ca8c70ebb096007e365561973f2821e52f2b6426c01ab9198244b3b56a10786a939f088f15cbf72f1b09de6ad944bdbc2f7bc0983ce2b49f22df68b7545b4dff2a99b197290c37d83abcc7afec1abd1c69388ffc1ad52fb234b87fb398967a25b313b7dd33e768f42582b5727a18c54581ad0ed179d344a83c4aee1c5b3d04ebc8d73d853d29243351c61ea893565efe35769c6bce5b6ade2b96a0043e0106c55e292165623c433848a60df285ca233beed4cb0b8f3cafdbd7e4406fb6baa9963342f3de376a3e5cf130803ebe3cd3ec96abcb9df3570254126b6b828131cda2b90ddeb7ff415a188d36590fdcbd69595b9bf2d7af7924d3e5df0bafacb6331f8a9a5823383366eb297751b3ce2278349ae31a4b47113e957b01b06140e941112dcc9a4afd13ca4e5a0ed33fdb1525ed3935260337b38885ea8f3831707c6efbc2b5517d056d0314695acd9217776f416db8e49da2949e7fa8e6f1081464c45554eae7a38ae9168e7fcd0789aca93e5d5117bb77ca6ea6cf980def0be2f59ad5d4fb630e7f21c650e2c6e65ef342887cbfe6e191f6dfcb977f6827b0318a4d2c3938bb408a2d6cf250655255a886acd741bd3df12d5bb56c780e034c34ae422749130d014dd19b428ece5ba3c98d9f060774f6f2db787318687319659db378800c8ed2157074ca17cf7e8f6c92c16b29d89decff0f2b0379c1be0e118332d2897979ffa91a78fe1abf54d6f02d9e734233f6c941234246e352b9d468ddec1457956e33b627ee74466e7acfee850217570b0105075a2b059710fcbf7edd559e062541b648fdfa28eb5149ecfee0c0bd11536336beed6600e2e41e954757320839cdeea49523b302c4d51a8e20303659f380c911b7ce43f298c3338271aa2503d1fc69a6c133c18db1d97668c850a0a1ca41a593afe123b0f9304b7e3aaa4141b306618e1aae2ea7f654471803cafe96b654c924d625b9efa1aac028faec22ac5ffb099a71e8864feaef2d708d54f9e3c3c447e486e48279d79d6ceab6e0ce6957dd34fa242bffabc4ee872bbcbbfca1be0698faa070db42e5be7f72cd7d9986b95309f34f3b42535c2fdfb083eba67eb15e34857ed5ba54c60effb49dbad734b69527d4f0ab519f4813e2e88295b1d8bb0350fc370d2a3296a1d9fd412042a4d064d9c90448a44392cd7a0c8c3c46aee992182965b212ce1eba5cf999a523d037abbb966ef254413a5a45d25379cf76a31ce829fbb652487dd6858bdf19715777b01b040ecb88825ca796735d86d0024d07126cee74cc57784111a7e934bf9c747fa322990cf4482a440ded95b21982af6bfb0f30af4cae50ed554f2c789f43fb914c7cbfbf3c386f6eb259d5a42a700d77a67164d09f55e7e8de296372ffcfb8bf375663a8aae35c9e73bbde09694b294eced6e103e7971b3d06375d370918eae6b1e984cddddd935b10d52b441a60c876810b10aaf0aedb6a231be5222dcdc7c46b45c350710cd3845a937e1b49dd3c3b8c1aa0691e7a07cb3d4876461e31d539e5666cabc7420205313680028b7c8d6e51d8c82f5c2e1540cb8b8fcf0ed0185391c133dea03d7d63815d17382866043e74fcb9b14937a3e42eaea04f8e270c0150ae51da2aa8b6f8a67400d120d85288c5125e39c12fa359571540a324d6279ecd5b5ad8ada7a8b22e0098a9e1c0ffd7b652000f1dd73c38e94534d7ca43509e109022e3b211736b6b757f62c282c4b4b2f43b03b1d4fb92e123f3fab7fc6c672e77b5266e512f5e51968a0424ba016e52e74787699423a81cbe662f4b1c419accd9751fabedfb524519f25bddbf7da41b980f3ebd8f8863740bc14df07a6bc200f2f3a6fadb9df8eaa070ef05e1920fb8e22a55ca589a406f11744c8491aa7135b046a004e3588ee6ea0472f7dc387e3485d737febcf08187fea4299944cf9761a1040a82a84de5015f67264dc03e5ce90096ee23763c7d181f17ee6cdefb3c1365a81b40815b86ccb1445218393a5cfd87ab7c1cb15a80e5e7944385f13d3c41c96b028d53fd1d55e34197420e783fb8231d6da6bc61f5bbc7a5cc7a297cab6e255464504821720b3ccf044e6d6048b80c46853c3fe808f74a9ef0ba4a42efb8b1cfb3960e7c82064ebac3fcf4f38ed40cfc717dd69231063acb39a09939b480ebf43bdf83d82185a2608fa1fa883c99fd88c1ce0ccb40a16182819fc950ca20db573b671cee3abd49afebcdfdf2124365d3830cd2b46c224e1360aecea0c9561c9ac54926e71e0c4d1aed87add0794826b42e4710206eb644210d9bd2c2fa57b943b51592180156b332ce9a51bb5092824bf4a95e027100f67184f40594a992ac5117eb070a8700963a51cba91a8756c3cec695484c88cf42f76293fd731fc35a3372ce2ec68bc775fa2fc0036f9f1519f8b73092a4c8a8d5b240776a6209f0ec01cd9b242fe352c30fde227e67e1a827d69d9bf42c5020bb8c5d2b5a7eb0e709e6613de3289e7cf81bcfd91cc307f216eb90e33957d3a756f1dfaa1493b0da2ed5aa191698c041aed4bcfa9060e01680eb02030bccb176ba8a2ac3028898ccccd13ad3417836c610d44514647e03ce5bdf091052bfdf6eb14467d82a651089f89c31e42c3115f2ac52381ab02cf3b", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="5c97261cd7d5baf3547c75e4e7826d55aad2aebf442a33de309a2f03034bf5f48dfaf9a89575cbbe2706c11d85af090578a7b5cb52dbbe01a219d45d5315b4fb4efd190a9a", 0x45}], 0x3, &(0x7f00000027c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0xa8, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x3, 0x0, 0x2, 0x3, 0x7, 0x91, 0x5, r5}}, @authinfo={0x18, 0x84, 0x6, {0xff39}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0x8, 0x1000}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8008, 0x80000001, 0x401, r6}}], 0x118, 0x10800}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

6.938256s ago: executing program 4 (id=1788):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000005cfbe44c0a31080045000014fffd000000869078ac2414bbac1414bb103ab33da51e68007ee459f8550d7fec2a2059719255d68a83a099fa79d6c82f0131ac64db8fbf610de4b4b6e1268c64bbbe0f2a3c08e8a5edf45cf7d19526cd961fae73b0a66aa0855f9b9f3f7ef03b7293e5a1346e31148208484b98bb6fb4a253ab941b2309f271ffb98aac49533bc488b9b7361ec6184f8ba1ebc659"], 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a009228c377714b9c030000000020060001fe0000240000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
pipe2$9p(&(0x7f0000001900), 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x14000, 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
write$uinput_user_dev(r5, &(0x7f0000000540)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x10, 0x63, 0x1, 0x6, 0x9, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x8, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x1000008, 0x2, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffffa, 0x6, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x9, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0xffffffff, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x0, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0xca4d, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x5, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x800, 0x1, 0xc, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x1008000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x1b, 0x8000, 0xe, 0xf5, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x9, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x20, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0xde82, 0x7fb, 0x6, 0x0, 0x0, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8002, 0x1904, 0x2, 0xc, 0x8, 0x7ff, 0x196, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

5.92109944s ago: executing program 4 (id=1789):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d0000007f000000040000000800000001000000", @ANYRES32=r3, @ANYBLOB="02000000000075d5b504d5f88796000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x5, 0xfffffffb, 0x20000000, {0xe1, 0x2}, 0x0, 0x2})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="cf4c534b7c500a5954ba0f3fefbd245c10390cff7dc8f1c6d60d50170efb3c9c5697c77d905b728f782e5705be61c9fe0eb8f9c6aa2948308c35348abad9a87af6472bfed6fb8856280bab500427c93fb65f26cd2144d11d6cd9010c0d806093f92dbd3c2c7dceb9d2e28eb655a8ec284851cc9339183c7f74482ecfe0a98d7bb7a2fd5430a8335f87844c2aae69"], 0x48}}, 0x20000840)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_wait(r5, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x1c, r10, 0x3, 0x709d29, 0xe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
r11 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2)
ioctl$VIDIOC_QUERYMENU(r11, 0xc02c5625, &(0x7f0000000140)={0x8, 0x4, @name="6777e5d1d8836e8294203487e87d9c85a3b3be25427ae228c5edbc10c97df5f1"})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10)

5.726939355s ago: executing program 0 (id=1790):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x1, 0x0, 0x110}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000002404000000000300000a28000000000a01010000000000000000020000000900010073797a31000000000800024000000007b8020000090a05000000000000000000010000000c000b40fffffffffffffb870800054000000002080004400000000008000f40000000055401098008000140000000050800014000000000080001400000ffff08000140800000013c0002802c00018008000140000000fc080001400000031d08000125355c0c5d453299400000005e08000140000000060c0001800800014000000002ec00028034000180080001407fffffff080001400000000908000140fffffff80800014000000007080001400000000608000140fffffff82c00018008000140000000f808000140000003ff080001400000002d08000140000000020800014000000e3e14000180080001400000004a08000140000000bc1c0001800800014000000006080001400000085d08000140000000060c00018008000140000000084c0001800800014000008001080001400000000c08000140000000070800014000000007080001400000000408000140000000090800014000007fff080001400000800108000140000000060800014000000000040109800800014000000ac4e00002801c00018008000140000001ff080001400000000408000140000000070c0001800800014000000f8a44000180080001400000000508000140000004110800014000000003080001400000000408000140000000980800014000000010080001400000d2d008000140000000050c0001800800014000000005440001800800014000000100080001400000000908000140000000010800014000000007080001400000af3a08000140000000080800014000010000080001400000000d0c000180080001400000004f14000180080001400000000708000140000000dc0800014000007fff0800014000000006080001400000000a080004400000000108000c40000000050c00104000000000000000030c000b40000000000000000228000000000a030000000000000000000200000008000240000000030900010073797a31"], 0x330}, 0x1, 0x0, 0x0, 0xd23da58c28baabc0}, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000009716fb7a872345734a68f0eacd829757454a09f4248155e2be8958e38b0b1e66f8e9679045aa", @ANYRES16=r2, @ANYBLOB="01002ebd7000fedbdf2512000000180001801400020074756e6c3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x6840)
r3 = userfaultfd(0x80001)
ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000100)={0x2, 0x1, 0xfffffffffffffff8, 0x1, 0x0, 0x5})
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x702, 0xff9f, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

5.174376297s ago: executing program 0 (id=1791):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x2c, r3, 0x928d46e1eee28e63, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000})

5.131365803s ago: executing program 1 (id=1792):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r2, &(0x7f0000000cc0)=[{&(0x7f00000006c0)='7', 0x1}], 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}])

4.234839298s ago: executing program 0 (id=1793):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x2c, r3, 0x928d46e1eee28e63, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000})

3.538855005s ago: executing program 0 (id=1794):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001})
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00')
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet6(r5, &(0x7f0000033b00)={&(0x7f0000000140)={0xa, 0x4e23, 0x9, @empty, 0x9}, 0x1c, &(0x7f00000337c0)=[{&(0x7f0000000180)="787acce27ef686f6449465", 0xb}, {&(0x7f0000000440)="ba1e2d2897df2097961623eee1cf664d7456fd3774465f1831ff23d3f7e7333d3c1a609a73593128a3b2263e63b50429a49832310e2a58a931aa425a70426ec5ec84fadddce707bdf1a38d4c1b9a6095b4bc7f1686b7853f81aedada8df1255d5f21f0e5a1b81ee056a04b831067bda4952edc239100af5d8b23d7d6af4d699ba248748146626783a7711331ba9a1af7bbac3a912249bd707192774c3f3c7def1683b1fb0fbbbd32060c7d72193a17016e7e8ed509adbacdef7702d09ffd1155050df2c09a79662be7aa3ded9488db9dfeb53b2159f6558138456a4464f9c473dfcdd06c908e99fc441ac9dd", 0xec}, {&(0x7f0000000740)="7132af55daca622547f77d848db9cd6f3398946ce9b487fb90eb6636171fc286b38be2bd171aeedee26c40f7b9a575048af44e71f136e4f1791b6147f2db541cb23828e342b86b2150c4baa94ac7ff90f5d5cd2d1bb37e3a199dc11698e5392ca33cba7d998c5b58c62d40b64fda5c049b15eca25b9a940375f10314c739490a0c959e0c95528d44cbb606f269b3bcc9c3b9bcf50e3968d57aee751dbd5012e3b035b5f151cd3893ba75a537abc88deab47b1f997fdaef7e13d509790840844a1cbb35991f15a4b3a695b2a2110babb04bf7132423a9fb1b9f7963744e9088f16614b449049c82c79eeb9998e6e4db5e9fcc", 0xf2}, {&(0x7f0000032680)="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", 0x1000}, {&(0x7f0000033680)="86cea67813337f08d3d09262e3bf315b674cde0ffca68ad7348d379423384bb95a46c51003779e675cfce964cea8ae6ffa", 0x31}, {&(0x7f00000336c0)="4619f3990c7523d339c7be357fbdd791699fa1d8fb97fb21c045b4e926fe36afcd7abc9ac264307b2ea3ee9dc51cae0b87b37d22607ffba473489a1d3b46811cfd84300523a0aa84d6a89db550e47bbfa115ca882fef6622cc2dea9f4ebe47286fb7bebb171082ad3e044cb04c1021f7a210d772263e021e8c5a6f5c6c054f47b34d301b1bc7009d3ad3eec4d2136043fbb35eb1e5e108153ddcdb9b1710cea9807b98aef57aae7f1128d48944085f4df4880df3f2c6f12fbc76726854ee529324d5abfb007f8d5512ea1328e75c0651c0f95857004e", 0xd6}], 0x6, &(0x7f0000033840)=[@rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x1, 0x20, 0x0, [@mcast1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts={{0x148, 0x29, 0x37, {0x0, 0x25, '\x00', [@generic={0x2, 0xe4, "f09f62ebb10c2547b4bad3bf703114af68db82f985345fdd85b6abed0174c825f5e97f1c5f3b414ba429956607a2a2312e9e6bbaa81f724938aa157ba6ff7badb3b4c193595d73c87e4b291123bb4c0d0027eca59bc1f6dae335cf1ed8cd4a671c930b453a57337d84cd6fd1efdd90db381eee18309b41af9aa4fa6571acd717a32c2c017b8b558d083af04b4bfdea9d4051b1968f6557a4c1c79a6f6f41fc6b7984e268f5e24b53aab9c1e6da3fc45b48d5418700c89ba800f7c14ee0fa33ff77d1b4e3863b3cfd629e08870a2b41b651672a36318dcb8f906905dd3e7ed9ac075f0f55"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x7, [0x8, 0xa230, 0x7, 0x109f, 0xffffffff992e72ce, 0x9, 0x5091]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x40}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x88, 0xa, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x7ff, [0x101, 0x9, 0x2, 0x12, 0x8000, 0x8]}}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2, 0xd}}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x2b8}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c})
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02100000110000000000000000000000050006006c0000000a004e2300000003fe8800000000000000000000000000010f00000000000000020013002d0000002dbd7000023500000800120004000400bd"], 0x88}}, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/94)
socket(0xa, 0x3, 0x87)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

3.501497813s ago: executing program 3 (id=1795):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0)
memfd_create(0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
socket$unix(0x1, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9)
write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

3.446624313s ago: executing program 2 (id=1796):
syz_open_dev$video4linux(&(0x7f0000000140), 0x47e3, 0x0)
mkdir(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r1, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)

3.075428252s ago: executing program 3 (id=1797):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0xe47020)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r8, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0)
r9 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000})
r10 = fcntl$dupfd(r9, 0x0, r2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r11, 0xffffffffffffffff, 0x0)

2.854094588s ago: executing program 2 (id=1798):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0xa)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x33)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8010, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
socket(0x8, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x2, 0x0, 0x9, 0x4, 0x120000000, 0x800031f, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x24, 0x26, 0x2, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xd, 0xc}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()

2.554082442s ago: executing program 1 (id=1799):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xf, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r11, 0x4b3a, 0x0)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000280))

1.836221514s ago: executing program 3 (id=1800):
r0 = socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x6, 0x0)
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x30, r1, 0xf1add000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c)

1.373277258s ago: executing program 4 (id=1801):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x4080)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0xffff, 0xbf62})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x8041)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x3)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write$selinux_user(r7, &(0x7f0000000140)={'system_u:object_r:system_cron_spool_t:s0', 0x20, 'staff_u\x00'}, 0x31)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3dc037)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000200"/28], 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

1.327422344s ago: executing program 3 (id=1802):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110cb000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x573}, 0x94)
rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00')
symlink(&(0x7f0000000100)='./config\x00', &(0x7f0000000140)='./config\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
socket$inet(0x2, 0x1, 0x100)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
pselect6(0x40, &(0x7f0000000100)={0x7fffffffffffffff, 0x8, 0x10001, 0x10001, 0x9, 0x2b2, 0x8, 0xffffffffffffffff}, &(0x7f00000001c0)={0x6, 0x9, 0xfffffffffffffff8, 0x9, 0x1, 0x0, 0x400, 0x5}, &(0x7f0000000240)={0x9, 0x0, 0x4, 0x4d, 0x4, 0x400, 0x800, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8})
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)

1.320653219s ago: executing program 1 (id=1803):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/198, 0xc6}], 0x1000000000000239, 0x8, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff"], 0x0}, 0x94)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c00000008", @ANYRES32], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1)

1.317679922s ago: executing program 0 (id=1804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
syz_io_uring_setup(0x5af4, &(0x7f00000008c0)={0x0, 0x8d3, 0x4, 0x1, 0x32e}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=<r1=>0x0)
syz_io_uring_submit(0x0, 0x0, r1, &(0x7f0000000a00)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x7, 0x2, 0x0, 0x5, 0x0, 0x1})
listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x90980, 0xb5)
socket$netlink(0x10, 0x3, 0xc)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_setup(0x1b7c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x802, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmmsg$inet6(r3, &(0x7f0000001840), 0x3fffffffffffefb, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x150, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x13c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xa4, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x150}}, 0x0)

962.631623ms ago: executing program 1 (id=1805):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x2c, r3, 0x928d46e1eee28e63, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000})

3.258956ms ago: executing program 1 (id=1806):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00')
readlinkat(r2, 0x0, &(0x7f0000000540)=""/76, 0x4c)
accept4$bt_l2cap(r2, 0x0, &(0x7f0000000300), 0x80000)
r3 = epoll_create1(0x0)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
fcntl$setlease(r3, 0x400, 0xe67cce22a2e663fb)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
open(0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0)
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10ffff}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)

0s ago: executing program 4 (id=1807):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0)
memfd_create(0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
socket$unix(0x1, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9)
write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

kernel console output (not intermixed with test programs):

cdc_mbim 1-1:1.0: MBIM functional descriptor missing
[  548.115014][   T29] cdc_mbim 1-1:1.0: bind() failure
[  548.568634][T10830] netlink: 'syz.4.1254': attribute type 4 has an invalid length.
[  548.579172][T10816] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1249'.
[  548.642008][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1254'.
[  548.705425][ T7596] usb 1-1: USB disconnect, device number 29
[  548.724968][T10831] netlink: 90 bytes leftover after parsing attributes in process `syz.4.1254'.
[  548.747017][T10831] netlink: 90 bytes leftover after parsing attributes in process `syz.4.1254'.
[  548.915279][   T29] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  549.081741][   T29] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  549.092982][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.101976][   T29] usb 2-1: Product: syz
[  549.106355][   T29] usb 2-1: Manufacturer: syz
[  549.115419][   T29] usb 2-1: SerialNumber: syz
[  549.264586][   T30] audit: type=1400 audit(1785132222.400:802): avc:  denied  { map } for  pid=10839 comm="syz.2.1257" path="socket:[31886]" dev="sockfs" ino=31886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  549.362636][   T30] audit: type=1400 audit(1785132222.430:803): avc:  denied  { accept } for  pid=10839 comm="syz.2.1257" path="socket:[31886]" dev="sockfs" ino=31886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  550.001031][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  550.014322][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  550.028175][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  550.047118][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  550.121489][T10850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  550.140248][T10851] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 1
[  550.153034][T10853] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 2
[  550.168826][T10855] IPVS: stopping master sync thread 10854 ...
[  550.175045][T10854] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 3
[  550.227052][T10855] IPVS: stopping master sync thread 10853 ...
[  550.233643][T10855] IPVS: stopping master sync thread 10851 ...
[  550.301639][T10855] IPVS: stopping master sync thread 10850 ...
[  550.412499][T10847] IPVS: stopping backup sync thread 10861 ...
[  550.418698][T10861] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  550.460451][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  550.474741][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.496371][   T29] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  550.533777][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.573304][T10868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  550.593975][T10847] netlink: 'syz.1.1255': attribute type 12 has an invalid length.
[  550.609390][T10847] netlink: 'syz.1.1255': attribute type 29 has an invalid length.
[  550.626100][T10868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  550.645356][T10847] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1255'.
[  550.760207][ T7583] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  551.056558][ T7583] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  551.080132][ T7583] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.146941][ T7583] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  551.163428][ T7583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.200075][ T7609] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  551.401405][ T7609] usb 4-1: Using ep0 maxpacket: 32
[  551.414640][ T7609] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  551.428850][ T7609] usb 4-1: config 0 interface 0 has no altsetting 0
[  551.439372][ T7609] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  551.448833][ T7609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.463099][ T7583] usb 1-1: usb_control_msg returned -32
[  551.469218][ T7583] usbtmc 1-1:16.0: can't read capabilities
[  551.486446][ T7609] usb 4-1: config 0 descriptor??
[  551.584828][   T30] audit: type=1400 audit(1785132224.710:804): avc:  denied  { relabelfrom } for  pid=10884 comm="syz.4.1269" name="" dev="pipefs" ino=31722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  551.633702][   T30] audit: type=1400 audit(1785132224.750:805): avc:  denied  { map } for  pid=10884 comm="syz.4.1269" path="pipe:[31723]" dev="pipefs" ino=31723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  551.733236][ T7583] usb 2-1: USB disconnect, device number 32
[  551.912728][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.969925][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.026238][ T7583] usb 1-1: USB disconnect, device number 30
[  552.055298][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.097828][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.187261][ T7609] usbhid 4-1:0.0: can't add hid device: -71
[  552.205665][ T7609] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  552.235393][ T5718] kworker/1:5 (5718) used greatest stack depth: 18152 bytes left
[  552.298819][ T7609] usb 4-1: USB disconnect, device number 46
[  553.329899][T10907] misc userio: Invalid payload size
[  553.480348][   T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  553.648397][   T29] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  553.658350][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.694091][   T29] usb 2-1: Product: syz
[  553.709122][   T29] usb 2-1: Manufacturer: syz
[  553.735218][   T29] usb 2-1: SerialNumber: syz
[  554.283008][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  554.330432][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  554.860285][ T7609] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  555.009075][T10931] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  555.019717][T10912] IPVS: stopping backup sync thread 10931 ...
[  555.058933][ T7609] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  555.133114][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.144488][ T7609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.184576][ T7609] usb 1-1: Product: syz
[  555.191864][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.254964][ T7609] usb 1-1: Manufacturer: syz
[  555.263729][ T7609] usb 1-1: SerialNumber: syz
[  555.274833][T10912] netlink: 'syz.1.1274': attribute type 12 has an invalid length.
[  555.298947][T10912] netlink: 'syz.1.1274': attribute type 29 has an invalid length.
[  555.344560][T10912] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1274'.
[  555.423606][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  555.499539][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  555.512805][   T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  555.553759][   T29] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  555.714377][   T29] usb 2-1: USB disconnect, device number 33
[  555.717783][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  555.746893][   T30] audit: type=1400 audit(1785132228.880:806): avc:  denied  { validate_trans } for  pid=10933 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  556.324633][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  556.367511][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  556.399620][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  556.495202][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  556.801250][ T7609] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  556.801469][T10950] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  556.820445][T10949] IPVS: stopping backup sync thread 10950 ...
[  556.853999][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.878962][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.922175][T10930] netlink: 'syz.0.1280': attribute type 12 has an invalid length.
[  556.954213][T10930] netlink: 'syz.0.1280': attribute type 29 has an invalid length.
[  557.086493][T10930] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1280'.
[  557.685480][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  557.693296][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  557.720347][T10960] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  558.082138][ T7609] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  558.122670][T10963] nbd: socks must be embedded in a SOCK_ITEM attr
[  558.186416][   T30] audit: type=1400 audit(1785132231.320:807): avc:  denied  { create } for  pid=10967 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  558.218453][   T29] usb 1-1: USB disconnect, device number 31
[  558.273884][   T30] audit: type=1400 audit(1785132231.400:808): avc:  denied  { connect } for  pid=10967 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  558.300660][   T30] audit: type=1400 audit(1785132231.400:809): avc:  denied  { write } for  pid=10967 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  558.351505][ T7609] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  558.846731][ T7583] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  559.583386][ T7609] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  559.608573][ T7609] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  559.681225][ T7609] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  559.706838][ T7609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.729786][ T7609] usb 5-1: Product: syz
[  559.745135][ T7609] usb 5-1: Manufacturer: syz
[  559.750270][ T7583] usb 2-1: Using ep0 maxpacket: 32
[  559.763390][ T7583] usb 2-1: config 11 has an invalid interface number: 161 but max is 0
[  559.774018][ T7609] usb 5-1: SerialNumber: syz
[  559.782066][ T7583] usb 2-1: config 11 has no interface number 0
[  559.795151][T10960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  559.807031][ T7583] usb 2-1: config 11 interface 161 has no altsetting 0
[  559.838865][ T7583] usb 2-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  559.867383][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.900045][ T7583] usb 2-1: Product: syz
[  559.913429][ T7583] usb 2-1: Manufacturer: syz
[  559.928366][ T7583] usb 2-1: SerialNumber: syz
[  560.027573][T10960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  560.164292][ T7583] usblcd 2-1:11.161: USBLCD model not supported.
[  560.199086][ T7583] usb 2-1: USB disconnect, device number 34
[  560.671140][T10960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  560.722082][T10976] nbd: socks must be embedded in a SOCK_ITEM attr
[  560.869437][   T30] audit: type=1400 audit(1785132233.930:810): avc:  denied  { create } for  pid=10988 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  561.266395][ T7609] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  561.307906][ T7609] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  561.324896][   T30] audit: type=1400 audit(1785132233.930:811): avc:  denied  { bind } for  pid=10988 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  561.355045][ T7609] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  561.355252][   T30] audit: type=1400 audit(1785132233.940:812): avc:  denied  { connect } for  pid=10988 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  564.107852][ T7609] cdc_ncm 5-1:1.0: setting tx_max = 16384
[  564.329521][ T7609] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  564.382233][ T7609] usb 5-1: USB disconnect, device number 40
[  564.404933][ T7609] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  564.450367][   T30] audit: type=1400 audit(1785132237.580:813): avc:  denied  { read } for  pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  565.120196][ T7609] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  565.370079][ T7609] usb 5-1: Using ep0 maxpacket: 8
[  565.727368][ T7609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  565.824586][ T7609] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  566.203696][ T7609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.225724][ T7609] usb 5-1: config 0 descriptor??
[  566.870384][ T7583] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  567.552038][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x1
[  567.579550][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.612612][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.633701][ T7583] usb 2-1: Using ep0 maxpacket: 16
[  567.645993][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.664847][ T7583] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[  567.697155][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.714662][ T7583] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  567.730627][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.748100][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.763998][ T7583] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  567.776757][ T7609] itetech 0003:06CB:2968.0008: unknown main item tag 0x0
[  567.789959][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.815430][ T7609] itetech 0003:06CB:2968.0008: hidraw0: USB HID v0.09 Device [HID 06cb:2968] on usb-dummy_hcd.4-1/input0
[  567.830435][ T7583] usb 2-1: Product: syz
[  567.843295][ T7583] usb 2-1: Manufacturer: syz
[  567.861182][ T7583] usb 2-1: SerialNumber: syz
[  567.872327][T11019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  567.942027][   T29] usb 5-1: USB disconnect, device number 41
[  568.033350][T11036] fido_id[11036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  568.218411][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1298'.
[  568.254473][T11026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'.
[  568.268447][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1298'.
[  568.291706][T11026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'.
[  568.300819][   T30] audit: type=1400 audit(1785132241.400:814): avc:  denied  { ioctl } for  pid=11025 comm="syz.1.1298" path="socket:[32118]" dev="sockfs" ino=32118 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  568.520875][ T7583] usb 2-1: BAAD GENERIC IO: no channels?
[  568.545842][T11047] SELinux: security_context_str_to_sid (0xffffffffffffffff) failed with errno=-22
[  569.117852][   T30] audit: type=1400 audit(1785132242.250:815): avc:  denied  { map } for  pid=11046 comm="syz.0.1308" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  569.119765][ T7583] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  569.927734][ T7583] usb 2-1: USB disconnect, device number 35
[  570.102986][ T8075] udevd[8075]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  571.070975][   T29] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  571.254838][   T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  571.284310][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.311276][   T29] usb 4-1: Product: syz
[  571.325226][   T29] usb 4-1: Manufacturer: syz
[  571.352096][   T29] usb 4-1: SerialNumber: syz
[  571.370092][ T7583] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  572.014250][ T7583] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  572.035194][ T7583] usb 2-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  572.048851][ T7583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.062593][ T7583] usb 2-1: Product: syz
[  572.075494][ T7583] usb 2-1: Manufacturer: syz
[  572.096515][ T7583] usb 2-1: SerialNumber: syz
[  572.226702][   T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  572.240131][  T187] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  572.262740][   T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  572.286718][   T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  572.305462][   T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  572.326087][   T30] audit: type=1400 audit(1785132245.460:816): avc:  denied  { write } for  pid=11071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  572.356878][   T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  572.392644][   T29] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  572.393270][ T7583] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  572.478682][  T187] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  572.498422][  T187] usb 5-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  572.522560][ T7583] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  572.531966][  T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.563847][  T187] usb 5-1: Product: syz
[  572.580988][ T7583] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  572.591980][  T187] usb 5-1: Manufacturer: syz
[  572.607130][  T187] usb 5-1: SerialNumber: syz
[  572.616123][ T7583] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  572.647014][T11091] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  572.647128][T11090] IPVS: stopping backup sync thread 11091 ...
[  572.660404][ T7583] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  572.677270][T11093] kvm: user requested TSC rate below hardware speed
[  572.724383][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.802971][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.925618][   T30] audit: type=1400 audit(1785132246.060:817): avc:  denied  { write } for  pid=11094 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  572.985991][T11090] netlink: 'syz.3.1310': attribute type 12 has an invalid length.
[  573.026973][ T7583] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  573.054813][T11090] netlink: 'syz.3.1310': attribute type 29 has an invalid length.
[  573.097864][T11090] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1310'.
[  573.141115][ T7583] usb 2-1: USB disconnect, device number 36
[  573.179299][ T6435] udevd[6435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  573.274265][  T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  573.282002][  T187] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  573.343441][  T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  573.414521][  T187] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  573.470590][ T7609] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  573.484357][  T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  573.631701][ T7609] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  573.665414][  T187] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[  573.681282][ T7609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  573.706653][ T7609] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  573.724054][  T187] usb 5-1: USB disconnect, device number 42
[  573.755055][ T7609] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  573.776026][ T8075] udevd[8075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  573.792958][ T7609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.808792][ T7609] usb 3-1: Product: syz
[  573.873818][ T7609] usb 3-1: Manufacturer: syz
[  573.911560][ T7609] usb 3-1: SerialNumber: syz
[  573.956008][ T7609] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  573.997667][ T7609] cdc_mbim 3-1:1.0: bind() failure
[  574.046883][   T30] audit: type=1400 audit(1785132247.180:818): avc:  denied  { write } for  pid=11097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  574.209719][   T29] usb 4-1: USB disconnect, device number 47
[  574.252837][ T7609] usb 3-1: USB disconnect, device number 43
[  574.334312][   T30] audit: type=1400 audit(1785132247.470:819): avc:  denied  { write } for  pid=11112 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  574.409403][T11117] kvm: user requested TSC rate below hardware speed
[  575.274767][T11127] misc userio: Invalid payload size
[  577.651274][ T7609] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  577.665648][   T30] audit: type=1400 audit(1785132250.800:820): avc:  denied  { getopt } for  pid=11145 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  577.707228][T11146] tipc: Started in network mode
[  577.714146][T11146] tipc: Node identity c633fee5e61f, cluster identity 4711
[  577.724706][T11146] tipc: Enabled bearer <eth:xfrm0>, priority 12
[  577.821787][ T7609] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  577.862272][ T7609] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  577.878000][ T7609] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  577.890079][ T7609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.500191][ T7609] usb 4-1: usb_control_msg returned -32
[  578.508177][ T7609] usbtmc 4-1:16.0: can't read capabilities
[  579.090123][   T29] tipc: Node number set to 539819749
[  579.123151][  T187] usb 4-1: USB disconnect, device number 48
[  579.300939][   T30] audit: type=1400 audit(1785132252.430:821): avc:  denied  { write } for  pid=11166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  579.402870][T11181] FAULT_INJECTION: forcing a failure.
[  579.402870][T11181] name failslab, interval 1, probability 0, space 0, times 0
[  579.415767][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.1.1333 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  579.415795][T11181] Tainted: [L]=SOFTLOCKUP
[  579.415801][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  579.415810][T11181] Call Trace:
[  579.415816][T11181]  <TASK>
[  579.415822][T11181]  dump_stack_lvl+0x100/0x190
[  579.415851][T11181]  should_fail_ex.cold+0x5/0xa
[  579.415874][T11181]  should_failslab+0xc2/0x120
[  579.415897][T11181]  kmem_cache_alloc_noprof+0x91/0x6a0
[  579.415919][T11181]  ? do_getname+0x35/0x390
[  579.415946][T11181]  do_getname+0x35/0x390
[  579.415970][T11181]  user_path_at+0x26/0x60
[  579.415987][T11181]  __x64_sys_mount+0x1fb/0x310
[  579.416011][T11181]  ? __pfx___x64_sys_mount+0x10/0x10
[  579.416041][T11181]  do_syscall_64+0x115/0x870
[  579.416060][T11181]  ? clear_bhb_loop+0x40/0x90
[  579.416081][T11181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.416098][T11181] RIP: 0033:0x7f4cdeb9de99
[  579.416114][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.416131][T11181] RSP: 002b:00007f4cdfab1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  579.416149][T11181] RAX: ffffffffffffffda RBX: 00007f4cdee26180 RCX: 00007f4cdeb9de99
[  579.416161][T11181] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000
[  579.416172][T11181] RBP: 00007f4cdfab1090 R08: 0000000000000000 R09: 0000000000000000
[  579.416182][T11181] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001
[  579.416192][T11181] R13: 00007f4cdee26218 R14: 00007f4cdee26180 R15: 00007ffd171d49e8
[  579.416216][T11181]  </TASK>
[  579.700129][   T30] audit: type=1400 audit(1785132252.830:822): avc:  denied  { write } for  pid=11182 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  579.868590][T11186] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.1334'.
[  579.885832][T11164] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  579.893530][T11164] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  580.327741][T11164] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  580.519505][T11164] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  581.530337][ T7583] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  582.082859][ T7583] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.330845][ T7583] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  582.352327][   T30] audit: type=1400 audit(1785132255.470:823): avc:  denied  { setopt } for  pid=11204 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  582.387377][T11164] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  582.399079][T11194] xt_time: invalid argument - start or stop time greater than 23:59:59
[  582.421033][ T7583] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  582.431921][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.432085][T11164] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  582.450252][ T7583] usb 1-1: Product: syz
[  582.455338][ T7583] usb 1-1: Manufacturer: syz
[  582.466089][ T7583] usb 1-1: SerialNumber: syz
[  582.485561][ T7583] usb 1-1: config 0 descriptor??
[  582.558958][T11164] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  582.589439][T11164] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  582.630099][   T30] audit: type=1400 audit(1785132255.760:824): avc:  denied  { write } for  pid=11190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  582.972509][   T30] audit: type=1400 audit(1785132256.110:825): avc:  denied  { write } for  pid=11216 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  582.994639][  T187] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  583.161978][  T187] usb 2-1: Using ep0 maxpacket: 32
[  583.192358][  T187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  583.229944][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  583.266269][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  583.296012][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  583.329853][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  583.363189][  T187] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  583.386698][  T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.410318][  T187] usb 2-1: Product: syz
[  583.423011][  T187] usb 2-1: Manufacturer: syz
[  583.440484][  T187] usb 2-1: SerialNumber: syz
[  583.460522][  T187] usb 2-1: config 0 descriptor??
[  583.706749][   T30] audit: type=1400 audit(1785132256.840:826): avc:  denied  { write } for  pid=11225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  583.734105][T11164] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  583.747471][T11164] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  583.892691][   T30] audit: type=1400 audit(1785132257.030:827): avc:  denied  { write } for  pid=11243 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  584.059830][ T7609] usb 1-1: USB disconnect, device number 32
[  584.322516][   T30] audit: type=1400 audit(1785132257.460:828): avc:  denied  { map } for  pid=11251 comm="syz.2.1346" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  584.659130][T11261] sch_tbf: burst 19872 is lower than device lo mtu (65558) !
[  584.725090][  T187] iforce 2-1:0.0: usb_submit_urb failed: -110
[  584.880101][  T187] input input33: Device does not respond to id packet M
[  584.899843][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  584.917876][  T187] input input33: Device does not respond to id packet P
[  584.950128][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.047643][  T187] input input33: Device does not respond to id packet B
[  585.088546][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.111068][  T187] input input33: Device does not respond to id packet N
[  585.414135][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.426075][T11266] vlan2: entered promiscuous mode
[  585.453852][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.485987][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.523984][  T187] iforce 2-1:0.0: usb_submit_urb failed: -32
[  585.698364][   T30] audit: type=1400 audit(1785132258.830:829): avc:  denied  { write } for  pid=11248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.728272][  T187] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33
[  586.507734][   T30] audit: type=1400 audit(1785132259.640:830): avc:  denied  { write } for  pid=11295 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.647987][   T30] audit: type=1400 audit(1785132259.780:831): avc:  denied  { bind } for  pid=11298 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  586.709709][   T30] audit: type=1400 audit(1785132259.780:832): avc:  denied  { setopt } for  pid=11298 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  587.587491][   T30] audit: type=1400 audit(1785132260.720:833): avc:  denied  { write } for  pid=11306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.780110][   T29] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  587.845371][   T30] audit: type=1400 audit(1785132260.980:834): avc:  denied  { write } for  pid=11326 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.951301][   T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  587.978696][   T29] usb 5-1: config 0 has no interface number 0
[  588.005024][   T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.046149][   T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.083416][   T29] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  588.126345][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.179501][   T29] usb 5-1: config 0 descriptor??
[  588.715429][   T30] audit: type=1400 audit(1785132261.850:835): avc:  denied  { create } for  pid=11340 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  588.756837][   T29] prodikeys 0003:041E:2801.0009: item fetching failed at offset 5/7
[  588.785189][   T30] audit: type=1400 audit(1785132261.880:836): avc:  denied  { ioctl } for  pid=11340 comm="syz.1.1363" path="socket:[33994]" dev="sockfs" ino=33994 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  588.810737][   T29] prodikeys 0003:041E:2801.0009: hid parse failed
[  588.817848][   T29] prodikeys 0003:041E:2801.0009: probe with driver prodikeys failed with error -22
[  588.906690][T11347] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1364'.
[  589.048767][  T187] usb 5-1: USB disconnect, device number 43
[  589.636238][   T30] audit: type=1400 audit(1785132262.770:837): avc:  denied  { write } for  pid=11331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  589.956970][   T30] audit: type=1400 audit(1785132263.090:838): avc:  denied  { write } for  pid=11370 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  590.564531][T11386] kvm: user requested TSC rate below hardware speed
[  590.841393][T11381] 9p: Could not find request transport: kema
[  590.904600][T11389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11389 comm=syz.2.1375
[  591.124817][T11392] netlink: 'syz.3.1376': attribute type 3 has an invalid length.
[  592.780285][   T29] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  592.992007][   T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  593.018519][   T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.040199][ T7583] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  593.060110][   T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  593.088056][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.221083][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  593.231214][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  593.268802][ T7583] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  593.365779][ T7583] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  593.454202][ T7583] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  593.535960][ T7583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.699267][   T29] usb 5-1: usb_control_msg returned -32
[  593.704936][   T30] audit: type=1400 audit(1785132266.390:839): avc:  denied  { relabelto } for  pid=11423 comm="syz.1.1387" name="283" dev="tmpfs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  593.724537][T11432] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1990
[  593.730979][   T29] usbtmc 5-1:16.0: can't read capabilities
[  593.749637][T11412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  593.806079][ T7583] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  594.073772][   T29] usb 3-1: USB disconnect, device number 44
[  594.838900][   T29] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  595.128304][   T29] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  595.369418][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.384617][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.412847][T11451] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  595.423141][T11450] IPVS: stopping backup sync thread 11451 ...
[  595.448298][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.484294][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.485897][T11453] FAULT_INJECTION: forcing a failure.
[  595.485897][T11453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  595.519796][   T29] usb 5-1: USB disconnect, device number 44
[  595.550509][T11450] netlink: 'syz.1.1392': attribute type 12 has an invalid length.
[  595.576390][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.2.1393 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  595.576419][T11453] Tainted: [L]=SOFTLOCKUP
[  595.576426][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  595.576436][T11453] Call Trace:
[  595.576442][T11453]  <TASK>
[  595.576448][T11453]  dump_stack_lvl+0x100/0x190
[  595.576476][T11453]  should_fail_ex.cold+0x5/0xa
[  595.576500][T11453]  _copy_from_iter+0x1f4/0x1690
[  595.576528][T11453]  ? __asan_memset+0x23/0x50
[  595.576546][T11453]  ? __pfx__copy_from_iter+0x10/0x10
[  595.576569][T11453]  ? __pfx___alloc_skb+0x10/0x10
[  595.576601][T11453]  netlink_sendmsg+0x808/0xda0
[  595.576624][T11453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.576644][T11453]  ? selinux_socket_sendmsg+0x198/0x2f0
[  595.576674][T11453]  ____sys_sendmsg+0xa4d/0xbe0
[  595.576699][T11453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.576720][T11453]  ? __pfx_____sys_sendmsg+0x10/0x10
[  595.576755][T11453]  ___sys_sendmsg+0x190/0x1e0
[  595.576784][T11453]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.576809][T11453]  ? __lock_acquire+0x49f/0x1a40
[  595.576831][T11453]  ? get_pid_task+0x106/0x250
[  595.576892][T11453]  __sys_sendmsg+0x160/0x210
[  595.576914][T11453]  ? __pfx___sys_sendmsg+0x10/0x10
[  595.576950][T11453]  do_syscall_64+0x115/0x870
[  595.576968][T11453]  ? clear_bhb_loop+0x40/0x90
[  595.576990][T11453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.577007][T11453] RIP: 0033:0x7f58bb39de99
[  595.577023][T11453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.577039][T11453] RSP: 002b:00007f58bc263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.577057][T11453] RAX: ffffffffffffffda RBX: 00007f58bb625fa0 RCX: 00007f58bb39de99
[  595.577068][T11453] RDX: 0000000000040094 RSI: 0000200000000400 RDI: 0000000000000003
[  595.577079][T11453] RBP: 00007f58bc263090 R08: 0000000000000000 R09: 0000000000000000
[  595.577089][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.577098][T11453] R13: 00007f58bb626038 R14: 00007f58bb625fa0 R15: 00007fff9edb03a8
[  595.577124][T11453]  </TASK>
[  595.585029][T11450] netlink: 'syz.1.1392': attribute type 29 has an invalid length.
[  595.860134][T11450] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1392'.
[  595.880290][T11455] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1394'.
[  596.758616][   T30] audit: type=1400 audit(1785132269.890:840): avc:  denied  { accept } for  pid=11466 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  596.793661][T11469] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  596.859081][   T30] audit: type=1400 audit(1785132269.990:841): avc:  denied  { associate } for  pid=11467 comm="syz.4.1398" name="pids.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  597.960275][   T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  598.120278][   T29] usb 5-1: Using ep0 maxpacket: 8
[  598.145285][   T30] audit: type=1400 audit(1785132271.270:842): avc:  denied  { set_context_mgr } for  pid=11523 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  598.191490][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.236041][   T29] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  598.246458][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.275379][   T29] usb 5-1: config 0 descriptor??
[  598.422952][   T29] rndis_host 5-1:0.0: rndis: master #0/ffff888078536000 slave #1/0000000000000000
[  598.551747][ T7596] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  599.104902][T11518] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  599.193531][ T7596] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  599.205243][ T7596] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  599.218821][ T7596] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  599.228693][ T7596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.487586][ T7596] usb 4-1: usb_control_msg returned -32
[  599.497889][ T7596] usbtmc 4-1:16.0: can't read capabilities
[  599.598411][T11537] xt_time: invalid argument - start or stop time greater than 23:59:59
[  599.616928][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.629074][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.647189][T11550] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  599.647447][T11549] IPVS: stopping backup sync thread 11550 ...
[  599.691568][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.704899][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.717140][T11549] netlink: 'syz.1.1409': attribute type 12 has an invalid length.
[  599.727230][T11549] netlink: 'syz.1.1409': attribute type 29 has an invalid length.
[  599.738501][T11549] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1409'.
[  600.050563][ T7596] usb 4-1: USB disconnect, device number 49
[  600.211342][   T29] usb 5-1: USB disconnect, device number 45
[  600.680554][ T7609] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  600.912763][ T7609] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  600.998945][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.073618][ T7609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.184929][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.216733][ T7609] usb 1-1: Product: syz
[  601.279801][ T7609] usb 1-1: Manufacturer: syz
[  601.357970][ T7609] usb 1-1: SerialNumber: syz
[  602.133455][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  602.152122][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  602.245314][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  602.292548][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  602.317365][ T7609] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  602.350310][T11577] kvm: user requested TSC rate below hardware speed
[  602.378333][ T7609] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  602.513252][T11579] fuse: Bad value for 'user_id'
[  602.518312][T11579] fuse: Bad value for 'user_id'
[  602.679474][T11579] team0 (unregistering): Port device team_slave_0 removed
[  602.711089][T11579] team0 (unregistering): Port device team_slave_1 removed
[  602.724132][T11586] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  602.734678][T11585] IPVS: stopping backup sync thread 11586 ...
[  602.742725][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.770552][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.861846][T11582] netlink: 'syz.0.1410': attribute type 12 has an invalid length.
[  603.084751][T11582] netlink: 'syz.0.1410': attribute type 29 has an invalid length.
[  603.486984][T11593] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1422'.
[  603.500162][T11582] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1410'.
[  604.510148][   T29] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  604.570320][ T7609] usb 1-1: USB disconnect, device number 33
[  604.672131][   T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  604.696702][   T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  604.727471][   T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  604.746572][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.987356][   T29] usb 4-1: usb_control_msg returned -32
[  605.401860][   T29] usbtmc 4-1:16.0: can't read capabilities
[  607.054907][T11632] ip6gre1: entered promiscuous mode
[  607.072184][T11632] ip6gre1: entered allmulticast mode
[  607.084834][T11634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11634 comm=syz.0.1434
[  607.447079][   T29] usb 4-1: USB disconnect, device number 50
[  608.873222][T11660] netlink: 'syz.3.1443': attribute type 1 has an invalid length.
[  608.889708][   T30] audit: type=1400 audit(1785132282.020:843): avc:  denied  { name_bind } for  pid=11654 comm="syz.1.1441" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  608.943031][T11660] netlink: 'syz.3.1443': attribute type 1 has an invalid length.
[  609.247952][T11675] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  609.254490][T11675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  609.332920][T11675] vhci_hcd vhci_hcd.0: Device attached
[  609.510361][   T29] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  609.620215][ T7596] usb 3-1: new low-speed USB device number 45 using dummy_hcd
[  609.730100][   T29] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  609.851702][ T7596] usb 3-1: config 0 has no interfaces?
[  609.868477][ T7596] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  609.907508][ T7596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.941285][ T7596] usb 3-1: config 0 descriptor??
[  609.956805][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.988268][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.024934][   T30] audit: type=1400 audit(1785132283.160:844): avc:  denied  { getopt } for  pid=11688 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  610.090294][  T187] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  610.164616][T11676] vhci_hcd: cannot find the pending unlink 1025
[  610.179178][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.188055][T11676] usbip_core: unknown command
[  610.192795][T11676] vhci_hcd: unknown pdu 8
[  610.228641][T11676] usbip_core: unknown command
[  610.234508][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.242429][   T29] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  610.249192][ T6587] vhci_hcd vhci_hcd.2: stop threads
[  610.254925][ T6587] vhci_hcd vhci_hcd.2: release socket
[  610.275896][  T187] usb 1-1: Using ep0 maxpacket: 16
[  610.290301][ T6587] vhci_hcd vhci_hcd.2: disconnect device
[  610.302964][  T187] usb 1-1: config 73 has an invalid interface number: 24 but max is 0
[  610.319020][  T187] usb 1-1: config 73 has no interface number 0
[  610.338864][  T187] usb 1-1: config 73 interface 24 has no altsetting 0
[  610.340156][   T29] usb 37-1: device descriptor read/64, error -71
[  610.369159][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.387666][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.404579][  T187] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  610.425330][  T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.449048][  T187] usb 1-1: Product: syz
[  610.473016][  T187] usb 1-1: Manufacturer: syz
[  610.491936][ T7596] usb 3-1: USB disconnect, device number 45
[  610.504385][  T187] usb 1-1: SerialNumber: syz
[  610.551778][   T29] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  611.468486][T11701] tipc: Enabling <eth:lo> not permitted
[  611.474905][T11701] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  611.775599][  T187] go7007 1-1:73.24: probe with driver go7007 failed with error -12
[  611.808602][  T187] usb 1-1: USB disconnect, device number 34
[  611.975502][T11715] netlink: 'syz.2.1460': attribute type 3 has an invalid length.
[  612.151075][ T7596] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  612.406868][ T7596] usb 5-1: Using ep0 maxpacket: 32
[  612.422227][ T7596] usb 5-1: config 0 has an invalid interface number: 37 but max is 1
[  612.435645][ T7596] usb 5-1: config 0 has no interface number 1
[  612.478345][ T7596] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  612.489661][ T7596] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  612.507584][ T7596] usb 5-1: Product: syz
[  612.518704][ T7596] usb 5-1: Manufacturer: syz
[  612.527935][ T7596] usb 5-1: SerialNumber: syz
[  612.775441][ T7596] usb 5-1: config 0 descriptor??
[  613.075736][ T7596] usb 5-1: Could not set interface, error -71
[  613.338044][ T7596] usb 5-1: USB disconnect, device number 46
[  614.635989][T11729] misc userio: Invalid payload size
[  616.309526][T11745] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  616.969674][T11751] vlan2: entered promiscuous mode
[  617.497144][T11758] netlink: 'syz.3.1472': attribute type 4 has an invalid length.
[  618.724344][T11777] fuse: Unknown parameter '000000000000000000040x0000000000000004'
[  618.794746][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  618.806470][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  618.949971][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'.
[  619.875365][T11800] genirq: Flags mismatch irq 7. 00200000 (pcl818) vs. 00200080 (ttyS3)
[  620.039658][T11794] misc userio: Invalid payload size
[  620.247151][   T29] IPVS: starting estimator thread 0...
[  620.380200][T11811] IPVS: using max 42 ests per chain, 100800 per kthread
[  620.444472][T11817] FAULT_INJECTION: forcing a failure.
[  620.444472][T11817] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  620.458124][T11817] CPU: 1 UID: 0 PID: 11817 Comm: syz.0.1485 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  620.458149][T11817] Tainted: [L]=SOFTLOCKUP
[  620.458153][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  620.458161][T11817] Call Trace:
[  620.458166][T11817]  <TASK>
[  620.458172][T11817]  dump_stack_lvl+0x100/0x190
[  620.458194][T11817]  should_fail_ex.cold+0x5/0xa
[  620.458207][T11817]  ? prepare_alloc_pages+0x16d/0x5f0
[  620.458225][T11817]  should_fail_alloc_page+0xeb/0x140
[  620.458242][T11817]  prepare_alloc_pages+0x1f0/0x5f0
[  620.458260][T11817]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  620.458277][T11817]  ? __lock_acquire+0x49f/0x1a40
[  620.458295][T11817]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  620.458310][T11817]  ? find_held_lock+0x2b/0x80
[  620.458327][T11817]  ? is_bpf_text_address+0x8a/0x1a0
[  620.458343][T11817]  ? is_bpf_text_address+0x8a/0x1a0
[  620.458358][T11817]  ? bpf_ksym_find+0x128/0x1c0
[  620.458376][T11817]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  620.458393][T11817]  ? __kernel_text_address+0xd/0x30
[  620.458406][T11817]  ? unwind_get_return_address+0x59/0xa0
[  620.458420][T11817]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  620.458435][T11817]  ? policy_nodemask+0xed/0x4f0
[  620.458452][T11817]  alloc_pages_mpol+0x1fb/0x540
[  620.458468][T11817]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  620.458487][T11817]  folio_alloc_mpol_noprof+0x36/0x260
[  620.458506][T11817]  vma_alloc_folio_noprof+0xed/0x1d0
[  620.458524][T11817]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  620.458546][T11817]  do_anonymous_page+0xb2b/0x2080
[  620.458565][T11817]  ? rcu_read_unlock+0x2d/0xb0
[  620.458579][T11817]  __handle_mm_fault+0x1d2c/0x2a00
[  620.458609][T11817]  ? mt_find+0x45e/0x8e0
[  620.458634][T11817]  ? __pfx___handle_mm_fault+0x10/0x10
[  620.458651][T11817]  ? __pfx_mt_find+0x10/0x10
[  620.458673][T11817]  ? find_vma+0xbf/0x140
[  620.458686][T11817]  ? __pfx_find_vma+0x10/0x10
[  620.458701][T11817]  handle_mm_fault+0x37b/0xa30
[  620.458722][T11817]  do_user_addr_fault+0x74c/0x12f0
[  620.458745][T11817]  exc_page_fault+0x6f/0xd0
[  620.458758][T11817]  asm_exc_page_fault+0x26/0x30
[  620.458769][T11817] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  620.458787][T11817] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  620.458798][T11817] RSP: 0018:ffffc90007f5f9b8 EFLAGS: 00050206
[  620.458809][T11817] RAX: 0000000000000001 RBX: 0000000000000309 RCX: 0000000000000309
[  620.458816][T11817] RDX: 0000000000000001 RSI: ffff88803b8d4000 RDI: 0000200000007fc0
[  620.458822][T11817] RBP: ffffc90007f5fbc8 R08: 0000000000000000 R09: ffffed100771a861
[  620.458829][T11817] R10: ffff88803b8d4308 R11: 0000000000000000 R12: ffff88803b8d4000
[  620.458836][T11817] R13: 0000000000000000 R14: 0000200000007fc0 R15: 0000000000000309
[  620.458850][T11817]  _copy_to_iter+0x4c5/0x1720
[  620.458869][T11817]  ? __pfx__copy_to_iter+0x10/0x10
[  620.458883][T11817]  ? print_binder_stats+0x2fa/0x410
[  620.458901][T11817]  ? stats_show+0x5fa/0x730
[  620.458917][T11817]  seq_read_iter+0xdab/0x1270
[  620.458934][T11817]  seq_read+0x344/0x4d0
[  620.458946][T11817]  ? __pfx_seq_read+0x10/0x10
[  620.458959][T11817]  ? lock_acquire+0x1b9/0x370
[  620.458980][T11817]  full_proxy_read+0x135/0x1a0
[  620.458995][T11817]  ? __pfx_full_proxy_read+0x10/0x10
[  620.459010][T11817]  vfs_read+0x1e4/0xb40
[  620.459030][T11817]  ? __pfx_vfs_read+0x10/0x10
[  620.459047][T11817]  ? __fget_files+0x215/0x3d0
[  620.459061][T11817]  ? __fget_files+0x21f/0x3d0
[  620.459077][T11817]  ksys_read+0x12a/0x250
[  620.459094][T11817]  ? __pfx_ksys_read+0x10/0x10
[  620.459116][T11817]  do_syscall_64+0x115/0x870
[  620.459130][T11817]  ? clear_bhb_loop+0x40/0x90
[  620.459144][T11817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.459155][T11817] RIP: 0033:0x7f64d4f9de99
[  620.459165][T11817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.459175][T11817] RSP: 002b:00007f64d5e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  620.459185][T11817] RAX: ffffffffffffffda RBX: 00007f64d5225fa0 RCX: 00007f64d4f9de99
[  620.459191][T11817] RDX: 0000000000002020 RSI: 0000200000007fc0 RDI: 0000000000000005
[  620.459198][T11817] RBP: 00007f64d5e88090 R08: 0000000000000000 R09: 0000000000000000
[  620.459204][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.459210][T11817] R13: 00007f64d5226038 R14: 00007f64d5225fa0 R15: 00007fff3a5b6008
[  620.459225][T11817]  </TASK>
[  620.903042][   T30] audit: type=1400 audit(1785132293.580:845): avc:  denied  { call } for  pid=11816 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  620.978779][   T30] audit: type=1400 audit(1785132293.580:846): avc:  denied  { transfer } for  pid=11816 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  621.818506][   T30] audit: type=1400 audit(1785132294.640:847): avc:  denied  { write } for  pid=11822 comm="syz.1.1488" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  621.892357][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'.
[  622.462467][ T7609] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  623.174131][ T7609] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  623.188179][ T7609] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.204615][ T7609] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  623.217545][T11847] xt_time: invalid argument - start or stop time greater than 23:59:59
[  623.226082][ T7609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.511878][ T7609] usb 4-1: usb_control_msg returned -32
[  623.523783][ T7609] usbtmc 4-1:16.0: can't read capabilities
[  623.727708][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.740323][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.859130][ T7609] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  624.034532][ T7609] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  624.053846][ T7609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.069844][   T29] usb 4-1: USB disconnect, device number 51
[  624.071699][ T7609] usb 3-1: Product: syz
[  624.100888][ T7609] usb 3-1: Manufacturer: syz
[  624.107222][ T7609] usb 3-1: SerialNumber: syz
[  624.805944][T11858] nbd: socks must be embedded in a SOCK_ITEM attr
[  625.079198][ T7609] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  625.115906][ T7609] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  625.705323][   T30] audit: type=1400 audit(1785132298.840:848): avc:  denied  { node_bind } for  pid=11871 comm="syz.4.1501" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  626.015374][T11883] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  626.025767][T11884] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 1
[  626.038683][T11885] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 2
[  626.040670][T11886] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 3
[  626.059867][T11851] IPVS: stopping backup sync thread 11886 ...
[  626.069222][T11851] IPVS: stopping backup sync thread 11885 ...
[  626.155733][T11851] IPVS: stopping backup sync thread 11884 ...
[  626.181142][T11851] IPVS: stopping backup sync thread 11883 ...
[  626.182620][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.199374][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.281425][T11851] netlink: 'syz.2.1496': attribute type 12 has an invalid length.
[  626.298927][T11851] netlink: 'syz.2.1496': attribute type 29 has an invalid length.
[  626.318355][T11851] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1496'.
[  626.333876][ T7609] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  626.348447][ T7609] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  626.419585][ T7609] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  626.440221][ T7609] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  626.456612][ T7609] usb 3-1: USB disconnect, device number 46
[  626.530176][  T187] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  626.715467][  T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.747251][  T187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  626.758742][  T187] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  626.774803][  T187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  626.784467][  T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.797101][  T187] usb 5-1: Product: syz
[  626.804568][  T187] usb 5-1: Manufacturer: syz
[  626.812791][  T187] usb 5-1: SerialNumber: syz
[  627.397512][  T187] cdc_mbim 5-1:1.0: MBIM functional descriptor missing
[  627.411019][  T187] cdc_mbim 5-1:1.0: bind() failure
[  627.493752][T11910] netlink: 'syz.2.1512': attribute type 3 has an invalid length.
[  627.781206][T11891] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.1507'.
[  628.080152][T11917] overlayfs: missing 'lowerdir'
[  628.554036][  T187] usb 5-1: USB disconnect, device number 47
[  628.678622][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1515'.
[  628.773449][   T30] audit: type=1400 audit(1785132301.910:849): avc:  denied  { map } for  pid=11923 comm="syz.1.1516" path="/dev/sg0" dev="devtmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  628.802778][   T30] audit: type=1400 audit(1785132301.930:850): avc:  denied  { execute } for  pid=11923 comm="syz.1.1516" path="/dev/sg0" dev="devtmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  628.830211][   T29] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  628.929464][T11926] kvm: user requested TSC rate below hardware speed
[  628.970100][ T7609] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  629.003205][   T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  629.013380][   T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.042419][   T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  629.055559][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.135765][ T7609] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  629.158989][ T7609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.179376][ T7609] usb 4-1: Product: syz
[  629.186611][ T7609] usb 4-1: Manufacturer: syz
[  629.201238][ T7609] usb 4-1: SerialNumber: syz
[  629.283162][   T29] usb 3-1: usb_control_msg returned -32
[  629.299065][   T29] usbtmc 3-1:16.0: can't read capabilities
[  629.313923][T11938] netlink: 'syz.4.1521': attribute type 4 has an invalid length.
[  629.407090][  T187] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  629.564964][   T30] audit: type=1400 audit(1785132302.700:851): avc:  denied  { append } for  pid=11939 comm="syz.1.1522" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  629.572144][T11940] loop5: detected capacity change from 0 to 2640
[  629.627192][T11940] Buffer I/O error on dev loop5, logical block 0, async page read
[  629.671447][T11940] Buffer I/O error on dev loop5, logical block 1, async page read
[  629.682468][T11940] Buffer I/O error on dev loop5, logical block 3, async page read
[  629.690850][T11940]  loop5: unable to read partition table
[  629.696333][T11941] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  629.696778][T11940] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  629.765997][T11941] Buffer I/O error on dev loop5, logical block 1, lost async page write
[  629.810696][T11941] Buffer I/O error on dev loop5, logical block 2, lost async page write
[  629.824354][T11941] Buffer I/O error on dev loop5, logical block 3, lost async page write
[  629.857661][ T7609] usb 3-1: USB disconnect, device number 47
[  629.857691][T11941] Buffer I/O error on dev loop5, logical block 4, lost async page write
[  629.878883][T11941] Buffer I/O error on dev loop5, logical block 5, lost async page write
[  629.923189][T11941] Buffer I/O error on dev loop5, logical block 6, lost async page write
[  631.133155][  T187] usb 4-1: Service connection timeout for: 256
[  631.163819][  T187] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  631.198508][T11922] vlan2: entered allmulticast mode
[  631.210745][T11922] bond0: entered allmulticast mode
[  631.240985][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.266313][T11922] bond_slave_0: entered allmulticast mode
[  631.271074][  T187] ath9k_htc: Failed to initialize the device
[  631.293434][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.320237][T11922] bond_slave_1: entered allmulticast mode
[  631.352152][T11922] bridge0: entered allmulticast mode
[  631.494265][  T187] usb 4-1: ath9k_htc: USB layer deinitialized
[  631.631922][   T30] audit: type=1326 audit(1785132304.770:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz.2.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bb39de99 code=0x0
[  631.705680][   T29] usb 4-1: USB disconnect, device number 52
[  631.794677][   T30] audit: type=1326 audit(1785132304.900:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz.2.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bb39de99 code=0x0
[  632.293745][T11955] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1525'.
[  632.358609][T11959] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  632.619785][T11960] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1527'.
[  632.731489][T11962] ubi16: attaching mtd0
[  632.782186][T11962] ubi16: scanning is finished
[  632.787052][T11962] ubi16: empty MTD device detected
[  633.766644][T11973] kvm: user requested TSC rate below hardware speed
[  633.894943][T11976] tipc: Enabled bearer <ib:veth0_to_bridge>, priority 10
[  633.920476][  T187] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  634.180132][  T187] usb 3-1: Using ep0 maxpacket: 8
[  634.186559][T11962] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[  634.200768][  T187] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  634.217723][  T187] usb 3-1: config 0 has no interface number 0
[  634.249566][  T187] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  634.279161][  T187] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  634.312305][  T187] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  634.356361][  T187] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  634.401137][  T187] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  634.428639][  T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.472113][  T187] usb 3-1: config 0 descriptor??
[  634.519483][  T187] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  634.877218][T11994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=11994 comm=syz.4.1537
[  634.900085][  T187] tipc: Node number set to 1857627662
[  634.941809][T11201] usb 3-1: USB disconnect, device number 48
[  634.947798][    C0] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  635.985056][T11201] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  636.250871][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1542'.
[  636.450509][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1543'.
[  637.007573][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.020798][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.106059][T12022] misc userio: Invalid payload size
[  638.189149][   T30] audit: type=1400 audit(1785132311.220:854): avc:  denied  { create } for  pid=12020 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  638.786502][T12031] IPVS: Error connecting to the multicast addr
[  640.650963][   T29] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  640.672321][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.691427][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.775062][   T30] audit: type=1400 audit(1785132313.910:855): avc:  denied  { sys_module } for  pid=12060 comm="syz.0.1557" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  640.814727][ T7596] IPVS: starting estimator thread 0...
[  640.849745][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  640.889140][   T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=8e.7d
[  640.908270][   T29] usb 5-1: New USB device strings: Mfr=69, Product=2, SerialNumber=3
[  640.922437][   T29] usb 5-1: Product: syz
[  640.942086][   T29] usb 5-1: Manufacturer: syz
[  640.950417][   T29] usb 5-1: SerialNumber: syz
[  640.968220][   T29] usb 5-1: config 0 descriptor??
[  640.974225][T12065] IPVS: using max 75 ests per chain, 180000 per kthread
[  641.192103][T12047] syzkaller1: entered promiscuous mode
[  641.198010][T12047] syzkaller1: entered allmulticast mode
[  641.232116][T12047] syz_tun: entered allmulticast mode
[  641.241884][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'.
[  641.256699][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'.
[  641.306562][T12046] syz_tun: left allmulticast mode
[  641.323612][   T29] gspca_main: sonixb-2.14.0 probing 0c45:6007
[  641.347319][   T29] sonixb 5-1:0.0: Error reading register 00: -71
[  641.367835][   T29] usb 5-1: USB disconnect, device number 48
[  641.646072][T12074] misc userio: Invalid payload size
[  643.418403][   T50] Bluetooth: hci5: command 0x1003 tx timeout
[  643.426715][ T4927] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  643.591829][   T30] audit: type=1400 audit(2000000002.320:856): avc:  denied  { ioctl } for  pid=12079 comm="syz.0.1561" path="socket:[36860]" dev="sockfs" ino=36860 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  643.592220][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  643.795801][T12089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12089 comm=syz.0.1561
[  643.899595][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'.
[  643.916397][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.921173][T12092] block nbd1: Unsupported socket: should be TCP or UNIX.
[  643.950712][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.975737][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.003732][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.015320][   T29] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  645.010523][   T29] usb 5-1: Using ep0 maxpacket: 16
[  645.039312][   T29] usb 5-1: config 0 has no interfaces?
[  645.056246][   T29] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  645.077557][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.099734][   T29] usb 5-1: config 0 descriptor??
[  645.146753][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'.
[  645.157117][T12098] netlink: 5604 bytes leftover after parsing attributes in process `syz.3.1568'.
[  645.231545][   T30] audit: type=1400 audit(2000000003.950:857): avc:  denied  { unmount } for  pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  645.680579][T11201] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  645.841504][T11201] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  645.866741][T11201] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  645.917695][T11201] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  645.941902][T11201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.177262][T11201] usb 4-1: usb_control_msg returned -32
[  646.210663][T11201] usbtmc 4-1:16.0: can't read capabilities
[  646.250242][   T29] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  647.331566][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  647.357531][T11201] usb 5-1: USB disconnect, device number 49
[  647.382249][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  647.405139][T12109] syz.1.1563 (12109): drop_caches: 2
[  647.418593][   T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  647.452325][  T187] usb 4-1: USB disconnect, device number 53
[  647.459913][   T29] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  647.502401][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.549765][   T29] usb 1-1: config 0 descriptor??
[  647.572338][T12111] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  648.848218][T12122] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1574'.
[  648.918266][   T29] usbhid 1-1:0.0: can't add hid device: -71
[  648.932715][   T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  648.955986][   T29] usb 1-1: USB disconnect, device number 35
[  649.080094][  T187] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  649.127955][T12129] netlink: 'syz.1.1576': attribute type 4 has an invalid length.
[  650.142524][  T187] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  650.171140][  T187] usb 5-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  650.193574][  T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.225555][  T187] usb 5-1: Product: syz
[  650.241168][  T187] usb 5-1: Manufacturer: syz
[  650.326800][   T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  650.341555][  T187] usb 5-1: SerialNumber: syz
[  650.935530][  T187] usb 5-1: can't set config #1, error -71
[  650.944729][T12137] xt_time: invalid argument - start or stop time greater than 23:59:59
[  650.987709][  T187] usb 5-1: USB disconnect, device number 50
[  651.113713][   T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  651.160584][   T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  651.211453][   T29] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  651.275567][   T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  651.320600][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.360246][   T29] usb 1-1: Product: syz
[  651.381277][   T29] usb 1-1: Manufacturer: syz
[  651.400748][   T29] usb 1-1: SerialNumber: syz
[  651.487867][   T29] cdc_mbim 1-1:1.0: MBIM functional descriptor missing
[  651.523138][   T29] cdc_mbim 1-1:1.0: bind() failure
[  651.708125][T12133] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1577'.
[  651.992344][   T29] usb 1-1: USB disconnect, device number 36
[  652.325271][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'.
[  652.355691][   T30] audit: type=1400 audit(2000000011.080:858): avc:  denied  { setopt } for  pid=12145 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  652.386628][T12148] netlink: 'syz.3.1579': attribute type 3 has an invalid length.
[  652.431635][   T30] audit: type=1400 audit(2000000011.080:859): avc:  denied  { ioctl } for  pid=12145 comm="syz.1.1583" path="socket:[38079]" dev="sockfs" ino=38079 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  653.994291][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'.
[  654.082575][T12165] xt_time: invalid argument - start or stop time greater than 23:59:59
[  654.875346][T12185] IPVS: Error connecting to the multicast addr
[  655.812802][   T30] audit: type=1400 audit(2000000014.540:860): avc:  denied  { shutdown } for  pid=12186 comm="syz.2.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  656.624217][T12194] misc userio: Invalid payload size
[  657.203543][   T30] audit: type=1400 audit(2000000015.900:861): avc:  denied  { map } for  pid=12205 comm="syz.2.1600" path="socket:[37620]" dev="sockfs" ino=37620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  657.822549][   T30] audit: type=1400 audit(2000000015.920:862): avc:  denied  { cmd } for  pid=12205 comm="iou-wrk-12207" path="socket:[37620]" dev="sockfs" ino=37620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  658.554197][T12224] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  661.362997][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[  661.539688][T12269] random: crng reseeded on system resumption
[  663.152192][   T30] audit: type=1400 audit(2000000021.510:863): avc:  denied  { mounton } for  pid=12277 comm="syz.1.1622" path="/338/file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  663.280236][  T187] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  663.453948][  T187] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  663.492183][  T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.539603][  T187] usb 4-1: Product: syz
[  663.568892][  T187] usb 4-1: Manufacturer: syz
[  663.583577][  T187] usb 4-1: SerialNumber: syz
[  663.594807][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.638060][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.820128][   T29] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  663.991657][   T29] usb 3-1: Using ep0 maxpacket: 32
[  664.002348][   T29] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  664.016832][   T29] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  664.031414][   T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  664.036566][  T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  664.045987][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  664.078733][   T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  664.091335][  T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  664.096815][   T29] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  664.131460][   T29] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  664.141712][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.144210][  T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  664.167886][   T29] usb 3-1: config 0 descriptor??
[  664.195953][  T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  664.226660][  T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  664.255740][  T187] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  664.508400][   T29] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  664.539484][T12299] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  664.556853][T12298] IPVS: stopping backup sync thread 12299 ...
[  664.681175][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.799526][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.817851][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.859441][   T29] usb 3-1: USB disconnect, device number 49
[  664.912072][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  665.125996][T12298] netlink: 'syz.3.1623': attribute type 12 has an invalid length.
[  665.146389][   T29] usblp0: removed
[  665.168957][T12298] netlink: 'syz.3.1623': attribute type 29 has an invalid length.
[  665.226002][T12298] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1623'.
[  665.442884][  T187] IPVS: starting estimator thread 0...
[  665.468564][   T30] audit: type=1400 audit(2000000024.190:864): avc:  denied  { read } for  pid=12313 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  665.575667][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.585132][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.588315][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'.
[  665.593647][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.602694][T12314] IPVS: using max 50 ests per chain, 120000 per kthread
[  665.609976][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.628861][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.638872][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.664083][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.689262][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.711357][T12319] FAULT_INJECTION: forcing a failure.
[  665.711357][T12319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  665.724742][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.736078][   T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  665.745335][T12319] CPU: 1 UID: 0 PID: 12319 Comm: syz.2.1634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.745361][T12319] Tainted: [L]=SOFTLOCKUP
[  665.745367][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  665.745376][T12319] Call Trace:
[  665.745381][T12319]  <TASK>
[  665.745388][T12319]  dump_stack_lvl+0x100/0x190
[  665.745416][T12319]  should_fail_ex.cold+0x5/0xa
[  665.745436][T12319]  _copy_from_user+0x2e/0xd0
[  665.745453][T12319]  copy_msghdr_from_user+0x9f/0x4c0
[  665.745473][T12319]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  665.745499][T12319]  ? find_held_lock+0x2b/0x80
[  665.745525][T12319]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  665.745549][T12319]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  665.745579][T12319]  ___sys_sendmsg+0x106/0x1e0
[  665.745599][T12319]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.745616][T12319]  ? __lock_acquire+0x49f/0x1a40
[  665.745631][T12319]  ? rcu_is_watching+0x12/0xc0
[  665.745665][T12319]  __sys_sendmsg+0x160/0x210
[  665.745680][T12319]  ? __pfx___sys_sendmsg+0x10/0x10
[  665.745702][T12319]  do_syscall_64+0x115/0x870
[  665.745715][T12319]  ? clear_bhb_loop+0x40/0x90
[  665.745729][T12319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.745741][T12319] RIP: 0033:0x7f58bb39de99
[  665.745751][T12319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.745761][T12319] RSP: 002b:00007f58bc263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.745773][T12319] RAX: ffffffffffffffda RBX: 00007f58bb625fa0 RCX: 00007f58bb39de99
[  665.745780][T12319] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  665.745787][T12319] RBP: 00007f58bc263090 R08: 0000000000000000 R09: 0000000000000000
[  665.745793][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.745800][T12319] R13: 00007f58bb626038 R14: 00007f58bb625fa0 R15: 00007fff9edb03a8
[  665.745814][T12319]  </TASK>
[  666.035072][   T24] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  666.256899][T12322] xt_hashlimit: size too large, truncated to 1048576
[  666.315129][T12325] netlink: 'syz.2.1635': attribute type 5 has an invalid length.
[  666.461632][   T24] usb 4-1: USB disconnect, device number 54
[  666.670151][  T187] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  666.854416][  T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.870015][  T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.882450][  T187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  666.897205][  T187] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  666.907499][  T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.928909][  T187] usb 3-1: config 0 descriptor??
[  666.988668][   T30] audit: type=1400 audit(2000000025.710:865): avc:  denied  { lock } for  pid=12339 comm="syz.4.1641" path="/dev/video2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  667.080274][   T24] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  667.242061][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  667.252222][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  667.265893][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  667.275779][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.299951][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1642'.
[  667.651287][T12352] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  667.665055][T12351] IPVS: stopping master sync thread 12352 ...
[  667.673483][   T24] usb 4-1: usb_control_msg returned -32
[  668.233581][   T24] usbtmc 4-1:16.0: can't read capabilities
[  668.255214][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'.
[  668.268698][T12355] block nbd0: NBD_DISCONNECT
[  668.273779][T12355] block nbd0: Send disconnect failed -32
[  668.282817][T12355] block nbd0: shutting down sockets
[  668.858236][   T30] audit: type=1400 audit(2000000027.530:866): avc:  denied  { read } for  pid=12371 comm="syz.4.1651" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  669.454510][T11201] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  669.484524][  T187] usbhid 3-1:0.0: can't add hid device: -71
[  669.495305][  T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  669.547122][  T187] usb 3-1: USB disconnect, device number 50
[  669.882073][T11201] usb 4-1: USB disconnect, device number 55
[  670.198355][   T30] audit: type=1400 audit(2000000028.920:867): avc:  denied  { unmount } for  pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  670.285501][T12379] fido_id[12379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  670.749727][T12397] xt_hashlimit: size too large, truncated to 1048576
[  671.739453][   T30] audit: type=1400 audit(2000000030.460:868): avc:  denied  { mounton } for  pid=12411 comm="syz.0.1663" path="/328/file0" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  671.788718][   T30] audit: type=1400 audit(2000000030.510:869): avc:  denied  { ioctl } for  pid=12411 comm="syz.0.1663" path="socket:[39315]" dev="sockfs" ino=39315 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  674.210056][T11201] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  674.472024][  T187] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  674.480735][   T30] audit: type=1400 audit(2000000033.180:870): avc:  denied  { listen } for  pid=12436 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  674.528529][T11201] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  674.608617][T11201] usb 5-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  674.620144][T11201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.628328][T11201] usb 5-1: Product: syz
[  674.633013][T11201] usb 5-1: Manufacturer: syz
[  674.637791][T11201] usb 5-1: SerialNumber: syz
[  674.785596][  T187] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  674.858613][  T187] usb 3-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  674.931763][  T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.964223][  T187] usb 3-1: Product: syz
[  674.977293][  T187] usb 3-1: Manufacturer: syz
[  674.999041][  T187] usb 3-1: SerialNumber: syz
[  675.129629][T11201] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  675.160688][T11201] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  675.188626][T11201] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  675.215611][T11201] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  675.441021][  T187] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  675.452228][  T187] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  675.461543][T11201] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  675.560531][ T7583] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  676.776238][  T187] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  676.783316][T11201] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[  676.792715][  T187] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  676.811725][T11201] usb 5-1: USB disconnect, device number 51
[  676.839876][ T8075] udevd[8075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  676.871236][  T187] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  676.902933][ T7583] usb 1-1: Using ep0 maxpacket: 32
[  676.913639][ T7583] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[  676.925109][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.935005][ T7583] usb 1-1: Product: syz
[  676.940495][  T187] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  676.958269][  T187] usb 3-1: USB disconnect, device number 51
[  676.967478][ T7583] usb 1-1: Manufacturer: syz
[  676.982431][ T8075] udevd[8075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  677.000281][ T7583] usb 1-1: SerialNumber: syz
[  677.374239][ T7583] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  677.390079][ T7583] usb 1-1: MIDIStreaming interface descriptor not found
[  677.479666][ T7583] usb 1-1: USB disconnect, device number 37
[  677.521155][ T6440] udevd[6440]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  677.950183][   T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  678.101714][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.112061][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[  678.123763][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  678.134844][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  678.144745][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  678.158513][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  678.167647][   T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  678.175691][   T24] usb 5-1: Manufacturer: syz
[  678.181858][   T24] usb 5-1: config 0 descriptor??
[  678.250117][ T7583] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  678.394664][T11201] usb 5-1: USB disconnect, device number 52
[  678.423571][ T7583] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  678.433085][ T7583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.441190][ T7583] usb 4-1: Product: syz
[  678.445652][ T7583] usb 4-1: Manufacturer: syz
[  678.451301][ T7583] usb 4-1: SerialNumber: syz
[  678.623982][T12479] overlayfs: missing 'lowerdir'
[  679.186847][   T24] IPVS: starting estimator thread 0...
[  679.202903][ T7583] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  679.226111][ T7583] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  679.280214][T12488] IPVS: using max 46 ests per chain, 110400 per kthread
[  679.360897][T11201] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  679.553572][T11201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  679.584900][T12496] misc userio: Invalid payload size
[  679.887909][T12502] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  679.910767][T12474] IPVS: stopping backup sync thread 12502 ...
[  680.061566][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.185988][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.254595][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  680.262607][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  680.270341][T11201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  680.280046][T11201] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  680.295203][T11201] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  680.300842][T12474] netlink: 'syz.3.1677': attribute type 12 has an invalid length.
[  680.304484][T11201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.320391][T11201] usb 3-1: Product: syz
[  680.324681][T11201] usb 3-1: Manufacturer: syz
[  680.330281][T11201] usb 3-1: SerialNumber: syz
[  680.353095][T12474] netlink: 'syz.3.1677': attribute type 29 has an invalid length.
[  680.367156][T11201] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  680.374176][T11201] cdc_mbim 3-1:1.0: bind() failure
[  680.402965][T12474] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1677'.
[  680.558980][T12512] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  680.565494][ T7583] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  680.600026][   T30] audit: type=1400 audit(2000000039.310:871): avc:  denied  { create } for  pid=12507 comm="syz.4.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  680.780082][ T7583] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  680.828687][ T7583] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  680.837795][   T30] audit: type=1400 audit(2000000039.370:872): avc:  denied  { write } for  pid=12507 comm="syz.4.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  680.862544][T11201] usb 3-1: USB disconnect, device number 52
[  680.876161][ T7583] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  680.908362][ T7583] usb 4-1: USB disconnect, device number 56
[  681.026267][T12520] overlayfs: missing 'lowerdir'
[  681.065981][   T30] audit: type=1400 audit(2000000039.790:873): avc:  denied  { ioctl } for  pid=12521 comm="syz.0.1691" path="socket:[39534]" dev="sockfs" ino=39534 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  681.400879][T11201] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  681.592124][T11201] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  681.604099][T11201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.711133][T11201] usb 5-1: Product: syz
[  681.793733][T11201] usb 5-1: Manufacturer: syz
[  681.858769][T11201] usb 5-1: SerialNumber: syz
[  682.335497][T11201] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  682.431041][T11201] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  683.387480][T11201] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  683.401307][T11201] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  683.415848][T11201] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  683.461757][T11201] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[  684.272294][T12563] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  684.369722][T12562] IPVS: stopping backup sync thread 12563 ...
[  684.419002][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.443305][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.507737][T12523] netlink: 'syz.4.1692': attribute type 12 has an invalid length.
[  684.530405][T12523] netlink: 'syz.4.1692': attribute type 29 has an invalid length.
[  684.556313][T12523] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1692'.
[  684.559011][T12569] overlayfs: missing 'lowerdir'
[  685.826815][   T24] usb 5-1: USB disconnect, device number 53
[  685.971801][ T7596] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  686.635452][ T7596] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  686.730954][ T7596] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  686.824413][ T7596] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  686.907279][ T7596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.609557][ T7596] usb 4-1: usb_control_msg returned -32
[  688.624743][ T7596] usbtmc 4-1:16.0: can't read capabilities
[  689.188719][ T7596] hid_parser_main: 74 callbacks suppressed
[  689.188733][ T7596] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  689.202727][   T24] usb 4-1: USB disconnect, device number 57
[  689.247980][ T7596] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  689.345491][T12626] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  689.491196][T12630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  689.509551][T12629] IPVS: stopping master sync thread 12630 ...
[  690.620078][T11201] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  690.768902][T12644] netlink: 'syz.1.1724': attribute type 1 has an invalid length.
[  690.813557][T11201] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  690.830090][T11201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.850614][T11201] usb 4-1: Product: syz
[  690.884388][T11201] usb 4-1: Manufacturer: syz
[  690.910321][T11201] usb 4-1: SerialNumber: syz
[  690.928491][T12644] bond0: entered promiscuous mode
[  690.971636][T12644] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.064509][T12648] bond0: (slave bridge1): making interface the new active one
[  691.097294][T12648] bridge1: entered promiscuous mode
[  691.153948][T12648] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  691.201589][T12644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=12644 comm=syz.1.1724
[  691.378190][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  691.430130][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  691.497147][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  691.543213][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  691.580073][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  691.615160][T11201] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  691.855324][T12657] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  691.855437][T12656] IPVS: stopping backup sync thread 12657 ...
[  691.905801][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.949032][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.977350][T12656] netlink: 'syz.3.1720': attribute type 12 has an invalid length.
[  691.992369][T12656] netlink: 'syz.3.1720': attribute type 29 has an invalid length.
[  692.013898][T12656] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1720'.
[  692.945448][T12671] bridge2: entered promiscuous mode
[  692.958949][T12671] bridge2: entered allmulticast mode
[  692.981362][T12671] team0: Port device bridge2 added
[  693.006568][T12671] bridge0: port 3(team0) entered blocking state
[  693.021227][T12671] bridge0: port 3(team0) entered disabled state
[  693.034603][T12671] team0: entered allmulticast mode
[  693.042085][T12671] team_slave_0: entered allmulticast mode
[  693.054982][T12671] team_slave_1: entered allmulticast mode
[  693.070937][   T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  693.082712][T12671] team0: entered promiscuous mode
[  693.092599][T12671] team_slave_0: entered promiscuous mode
[  693.098537][T12671] team_slave_1: entered promiscuous mode
[  693.110108][ T7596] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  693.215159][T12672] xt_time: invalid argument - start or stop time greater than 23:59:59
[  693.252233][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  693.263691][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  693.284839][ T7596] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  693.296023][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  693.308236][ T7596] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  693.323361][ T7596] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  693.334342][ T7596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.357662][   T24] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  693.378743][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.390614][   T24] usb 5-1: Product: syz
[  693.408596][   T24] usb 5-1: Manufacturer: syz
[  693.409816][T11201] usb 4-1: USB disconnect, device number 58
[  693.436979][   T24] usb 5-1: SerialNumber: syz
[  693.486218][   T24] usb 5-1: config 0 descriptor??
[  693.511649][T12667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  693.517649][T12678] FAULT_INJECTION: forcing a failure.
[  693.517649][T12678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  693.562162][T12678] CPU: 1 UID: 0 PID: 12678 Comm: syz.3.1734 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.562193][T12678] Tainted: [L]=SOFTLOCKUP
[  693.562199][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  693.562209][T12678] Call Trace:
[  693.562216][T12678]  <TASK>
[  693.562222][T12678]  dump_stack_lvl+0x100/0x190
[  693.562250][T12678]  should_fail_ex.cold+0x5/0xa
[  693.562272][T12678]  _copy_from_user+0x2e/0xd0
[  693.562298][T12678]  memdup_user+0x6b/0xe0
[  693.562319][T12678]  strndup_user+0x78/0xe0
[  693.562338][T12678]  __x64_sys_mount+0x136/0x310
[  693.562362][T12678]  ? __pfx___x64_sys_mount+0x10/0x10
[  693.562391][T12678]  do_syscall_64+0x115/0x870
[  693.562410][T12678]  ? clear_bhb_loop+0x40/0x90
[  693.562430][T12678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.562449][T12678] RIP: 0033:0x7f505319de99
[  693.562463][T12678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.562478][T12678] RSP: 002b:00007f5053f8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  693.562494][T12678] RAX: ffffffffffffffda RBX: 00007f5053425fa0 RCX: 00007f505319de99
[  693.562505][T12678] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000200000000180
[  693.562515][T12678] RBP: 00007f5053f8f090 R08: 0000200000000840 R09: 0000000000000000
[  693.562524][T12678] R10: 0000000001008840 R11: 0000000000000246 R12: 0000000000000001
[  693.562533][T12678] R13: 00007f5053426038 R14: 00007f5053425fa0 R15: 00007fff532c8ff8
[  693.562556][T12678]  </TASK>
[  693.767228][ T7596] usb 3-1: usb_control_msg returned -32
[  693.773054][ T7596] usbtmc 3-1:16.0: can't read capabilities
[  693.837539][T12667] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1730'.
[  694.200200][T12687] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1990
[  694.262743][T12688] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  694.349020][T11201] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  694.372265][ T7583] usb 5-1: USB disconnect, device number 54
[  694.390801][ T7596] usb 3-1: USB disconnect, device number 53
[  694.428629][T11201] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  697.938359][T12716] loop5: detected capacity change from 0 to 2640
[  697.953605][T12716] buffer_io_error: 323 callbacks suppressed
[  697.953640][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  697.969450][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  697.977562][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  697.985616][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  697.993809][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.002325][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.010775][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.018882][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.026826][T12716] ldm_validate_partition_table(): Disk read failed.
[  698.033771][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.041861][T12716] Buffer I/O error on dev loop5, logical block 0, async page read
[  698.049993][T12716] Dev loop5: unable to read RDB block 0
[  698.064157][T12716]  loop5: unable to read partition table
[  698.070809][T12716] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  698.341537][ T4977] ldm_validate_partition_table(): Disk read failed.
[  698.357918][ T4977] Dev loop5: unable to read RDB block 0
[  698.371896][ T4977]  loop5: unable to read partition table
[  698.400119][ T7583] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  698.641192][ T7583] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  698.674105][ T7583] usb 5-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40
[  698.710343][ T7583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.729848][ T7583] usb 5-1: Product: syz
[  698.741753][ T7583] usb 5-1: Manufacturer: syz
[  698.750079][ T7583] usb 5-1: SerialNumber: syz
[  699.207909][ T7583] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  699.302767][ T7583] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  699.332674][ T7583] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  699.339875][ T7583] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  699.439508][ T7583] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  700.493559][ T7583] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[  700.540120][ T7583] usb 5-1: USB disconnect, device number 55
[  700.545863][ T8075] udevd[8075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.870170][T11201] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  701.046032][T11201] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  701.060175][ T7596] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  701.072572][T11201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.093063][T11201] usb 4-1: Product: syz
[  701.112115][T11201] usb 4-1: Manufacturer: syz
[  701.123217][T11201] usb 4-1: SerialNumber: syz
[  701.238372][ T7596] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  701.272895][ T7596] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  701.292893][ T7596] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  701.302619][ T7596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.420854][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  702.436457][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  702.439289][ T7596] usb 3-1: usb_control_msg returned -32
[  702.537163][   T30] audit: type=1400 audit(2000000061.250:874): avc:  denied  { write } for  pid=12750 comm="syz.4.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  702.566049][ T7596] usbtmc 3-1:16.0: can't read capabilities
[  702.687889][T12742] overlayfs: missing 'workdir'
[  702.846709][T12761] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1990
[  703.187906][ T7583] usb 3-1: USB disconnect, device number 54
[  703.306052][T12768] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  703.316411][T12769] IPVS: stopping backup sync thread 12768 ...
[  703.336435][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.380818][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.433440][T12738] netlink: 'syz.3.1753': attribute type 12 has an invalid length.
[  703.453782][T12738] netlink: 'syz.3.1753': attribute type 29 has an invalid length.
[  703.487063][T12738] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1753'.
[  703.523084][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  703.550968][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  703.580652][T11201] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  703.669728][T11201] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  703.690978][T11201] usb 4-1: USB disconnect, device number 59
[  703.894316][T12778] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  703.923923][T12778] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  705.288773][T12794] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  705.479680][T12799] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  705.491409][T12798] IPVS: stopping master sync thread 12799 ...
[  706.413328][T12808] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  707.153446][T12813] misc userio: Invalid payload size
[  707.776988][T12828] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  707.970319][ T7596] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  708.135176][ T7596] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  708.145993][ T7596] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  708.361601][ T7596] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  708.381170][ T7596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.429816][T12836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  708.540440][T12838] loop5: detected capacity change from 0 to 7
[  708.553139][T12838] Dev loop5: unable to read RDB block 7
[  708.558803][T12838]  loop5: AHDI p1
[  708.562591][T12838] loop5: partition table partially beyond EOD, truncated
[  708.597962][T12840] SELinux:  Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped).
[  708.611578][   T30] audit: type=1400 audit(2000000067.330:875): avc:  denied  { relabelto } for  pid=12839 comm="syz.4.1777" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0"
[  708.644274][ T7596] usb 3-1: usb_control_msg returned -32
[  708.653336][ T7596] usbtmc 3-1:16.0: can't read capabilities
[  708.666340][   T30] audit: type=1400 audit(2000000067.340:876): avc:  denied  { associate } for  pid=12839 comm="syz.4.1777" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:admin_passwd_exec_t:s0"
[  708.696205][   T30] audit: type=1400 audit(2000000067.340:877): avc:  denied  { prog_load } for  pid=12839 comm="syz.4.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  708.715597][   T30] audit: type=1400 audit(2000000067.340:878): avc:  denied  { bpf } for  pid=12839 comm="syz.4.1777" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  708.736369][   T30] audit: type=1400 audit(2000000067.390:879): avc:  denied  { map_create } for  pid=12837 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  708.755712][   T30] audit: type=1400 audit(2000000067.390:880): avc:  denied  { map_read map_write } for  pid=12837 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  708.860067][T11201] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  708.997674][T12842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1990
[  709.020067][T11201] usb 5-1: Using ep0 maxpacket: 32
[  709.026819][T11201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  709.038607][T11201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  709.051164][T11201] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  709.060263][T11201] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  709.068468][T11201] usb 5-1: Product: syz
[  709.072762][T11201] usb 5-1: Manufacturer: syz
[  709.077395][T11201] usb 5-1: SerialNumber: syz
[  709.084122][T11201] usb 5-1: config 0 descriptor??
[  709.096410][T11201] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  709.198760][ T7596] usb 3-1: USB disconnect, device number 55
[  710.192551][T11473] usb 5-1: Failed to submit usb control message: -110
[  710.236640][T11201] usb 5-1: USB disconnect, device number 56
[  710.250159][T11473] usb 5-1: unable to send the bmi data to the device: -110
[  710.299519][T11473] usb 5-1: unable to get target info from device
[  710.346007][ T7596] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  710.461604][ T7596] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  710.497008][T11473] usb 5-1: could not get target info (-110)
[  710.524375][T11473] usb 5-1: could not probe fw (-110)
[  711.882864][T12866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  711.910232][T12866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  712.003369][   T30] audit: type=1400 audit(2000000070.730:881): avc:  denied  { perfmon } for  pid=12867 comm="syz.3.1780" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  712.064528][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.064860][T12868] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  712.076848][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.104570][T12877] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  712.104570][T12877] The task syz.4.1786 (12877) triggered the difference, watch for misbehavior.
[  712.145157][T12868] bond1: entered allmulticast mode
[  712.168765][T12880] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  712.180897][T12881] IPVS: stopping backup sync thread 12880 ...
[  712.198800][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.222051][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.276767][T12876] netlink: 'syz.1.1787': attribute type 12 has an invalid length.
[  712.291554][   T30] audit: type=1400 audit(2000000071.010:882): avc:  denied  { wake_alarm } for  pid=12867 comm="syz.3.1780" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  712.321058][T12876] netlink: 'syz.1.1787': attribute type 29 has an invalid length.
[  712.328910][T12876] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1787'.
[  713.420064][ T7596] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  713.646073][ T7596] usb 4-1: Using ep0 maxpacket: 32
[  713.987819][T12890] misc userio: Invalid payload size
[  714.517404][ T7596] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  714.525752][ T7596] usb 4-1: config 0 has no interface number 0
[  714.526589][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.531931][ T7596] usb 4-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6
[  714.630519][ T7596] usb 4-1: config 0 interface 89 has no altsetting 0
[  714.645964][ T7596] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  714.655677][ T7596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.657585][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.663867][ T7596] usb 4-1: Product: syz
[  714.675791][ T7596] usb 4-1: Manufacturer: syz
[  714.683946][ T7596] usb 4-1: SerialNumber: syz
[  715.650259][ T7596] usb 4-1: config 0 descriptor??
[  715.668788][ T7596] usb 4-1: can't set config #0, error -71
[  715.693850][ T7596] usb 4-1: USB disconnect, device number 60
[  716.153414][T12909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12909 comm=syz.4.1789
[  716.309137][   T30] audit: type=1400 audit(2000000075.030:883): avc:  denied  { block_suspend } for  pid=12908 comm="syz.4.1789" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  716.728318][T12914] misc userio: Invalid payload size
[  717.229551][T12915] netlink: 'syz.4.1789': attribute type 8 has an invalid length.
[  717.424264][   T30] audit: type=1400 audit(2000000076.150:884): avc:  denied  { prog_run } for  pid=12925 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  717.915253][T12936] i2c i2c-0: new_device: Invalid device name
[  717.990789][T12942] loop5: detected capacity change from 0 to 7
[  718.003647][T12942]  loop5: [POWERTEC] p1 p2 p3
[  718.013209][T12942] loop5: p1 size 1919942656 extends beyond EOD, truncated
[  718.043088][T12942] loop5: p2 start 876163636 is beyond EOD, truncated
[  718.055911][   T30] audit: type=1400 audit(2000000076.780:885): avc:  denied  { write } for  pid=12939 comm="syz.3.1802" name="functions" dev="configfs" ino=14464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  718.096415][T12946] netlink: 'syz.0.1804': attribute type 4 has an invalid length.
[  718.115106][T12942] loop5: p3 start 29360128 is beyond EOD, truncated
[  718.185033][   T30] audit: type=1400 audit(2000000076.910:886): avc:  denied  { write } for  pid=12939 comm="syz.3.1802" name="functions" dev="configfs" ino=14464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  718.229122][ T8075] udevd[8075]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  718.276067][   T30] audit: type=1400 audit(2000000076.910:887): avc:  denied  { remove_name } for  pid=12939 comm="syz.3.1802" name="gser.usb0" dev="configfs" ino=41492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  718.328891][T12944] printk: legacy console [ttyGS0] disabled
[  719.168478][   T30] audit: type=1400 audit(2000000077.000:888): avc:  denied  { rmdir } for  pid=12939 comm="syz.3.1802" name="gser.usb0" dev="configfs" ino=41492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  719.295812][   T30] audit: type=1400 audit(2000000077.060:889): avc:  denied  { write } for  pid=12939 comm="syz.3.1802" name="c.1" dev="configfs" ino=18248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  719.325261][T12953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12953 comm=syz.2.1798
[  719.352689][T12952] ==================================================================
[  719.360782][T12952] BUG: KASAN: slab-use-after-free in tty_init_dev.part.0+0x44f/0x470
[  719.368846][T12952] Write of size 8 at addr ffff8880367de128 by task syz.3.1802/12952
[  719.376802][T12952] 
[  719.379115][T12952] CPU: 0 UID: 0 PID: 12952 Comm: syz.3.1802 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  719.379134][T12952] Tainted: [L]=SOFTLOCKUP
[  719.379138][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  719.379147][T12952] Call Trace:
[  719.379154][T12952]  <TASK>
[  719.379160][T12952]  dump_stack_lvl+0x100/0x190
[  719.379178][T12952]  print_report+0x13d/0x4b0
[  719.379203][T12952]  ? __virt_addr_valid+0x239/0x430
[  719.379221][T12952]  ? tty_init_dev.part.0+0x44f/0x470
[  719.379242][T12952]  kasan_report+0xdf/0x1c0
[  719.379261][T12952]  ? tty_init_dev.part.0+0x44f/0x470
[  719.379280][T12952]  tty_init_dev.part.0+0x44f/0x470
[  719.379309][T12952]  tty_open+0xa63/0xfa0
[  719.379328][T12952]  ? __pfx_tty_open+0x10/0x10
[  719.379345][T12952]  ? chrdev_open+0x589/0x6a0
[  719.379359][T12952]  ? chrdev_open+0x589/0x6a0
[  719.379373][T12952]  ? __pfx_tty_open+0x10/0x10
[  719.379389][T12952]  chrdev_open+0x234/0x6a0
[  719.379402][T12952]  ? __pfx_chrdev_open+0x10/0x10
[  719.379415][T12952]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  719.379432][T12952]  do_dentry_open+0x6ab/0x14d0
[  719.379443][T12952]  ? __pfx_chrdev_open+0x10/0x10
[  719.379456][T12952]  vfs_open+0x82/0x3f0
[  719.379472][T12952]  path_openat+0x2873/0x4280
[  719.379488][T12952]  ? __pfx_path_openat+0x10/0x10
[  719.379503][T12952]  do_file_open+0x20e/0x430
[  719.379516][T12952]  ? __pfx_do_file_open+0x10/0x10
[  719.379534][T12952]  ? alloc_fd+0x471/0x7a0
[  719.379547][T12952]  ? do_getname+0x191/0x390
[  719.379563][T12952]  do_sys_openat2+0x10f/0x1e0
[  719.379578][T12952]  ? __pfx_do_sys_openat2+0x10/0x10
[  719.379594][T12952]  ? do_raw_spin_lock+0x128/0x260
[  719.379611][T12952]  ? find_held_lock+0x2b/0x80
[  719.379632][T12952]  __x64_sys_openat+0x12d/0x210
[  719.379648][T12952]  ? __pfx___x64_sys_openat+0x10/0x10
[  719.379664][T12952]  ? kcov_ioctl+0x17a/0x750
[  719.379679][T12952]  do_syscall_64+0x115/0x870
[  719.379693][T12952]  ? clear_bhb_loop+0x40/0x90
[  719.379708][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.379723][T12952] RIP: 0033:0x7f505319de99
[  719.379736][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.379749][T12952] RSP: 002b:00007f5050fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  719.379762][T12952] RAX: ffffffffffffffda RBX: 00007f5053426270 RCX: 00007f505319de99
[  719.379770][T12952] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c
[  719.379778][T12952] RBP: 00007f5053233eaf R08: 0000000000000000 R09: 0000000000000000
[  719.379785][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.379792][T12952] R13: 00007f5053426308 R14: 00007f5053426270 R15: 00007fff532c8ff8
[  719.379805][T12952]  </TASK>
[  719.379810][T12952] 
[  719.651226][T12952] Allocated by task 12943:
[  719.655622][T12952]  kasan_save_stack+0x30/0x50
[  719.660298][T12952]  kasan_save_track+0x14/0x30
[  719.664979][T12952]  __kasan_kmalloc+0xaa/0xb0
[  719.669555][T12952]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  719.674913][T12952]  gserial_alloc_line_no_console+0xac/0x710
[  719.680797][T12952]  gserial_alloc_line+0x16/0xa0
[  719.685640][T12952]  gser_alloc_inst+0x86/0x100
[  719.690292][T12952]  try_get_usb_function_instance+0x136/0x1f0
[  719.696261][T12952]  usb_get_function_instance+0x16/0x70
[  719.701709][T12952]  function_make+0x18c/0x3f0
[  719.706284][T12952]  configfs_mkdir+0x51e/0xb70
[  719.710947][T12952]  vfs_mkdir+0x361/0x850
[  719.715170][T12952]  filename_mkdirat+0x48b/0x5e0
[  719.720005][T12952]  __x64_sys_mkdirat+0x89/0xc0
[  719.724743][T12952]  do_syscall_64+0x115/0x870
[  719.729306][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.735178][T12952] 
[  719.737486][T12952] Freed by task 12944:
[  719.741530][T12952]  kasan_save_stack+0x30/0x50
[  719.746191][T12952]  kasan_save_track+0x14/0x30
[  719.750858][T12952]  kasan_save_free_info+0x3b/0x70
[  719.755874][T12952]  __kasan_slab_free+0x5f/0x80
[  719.760633][T12952]  kfree+0x22b/0x6c0
[  719.764507][T12952]  gserial_free_port+0x146/0x2f0
[  719.769433][T12952]  gserial_free_line+0xf8/0x1e0
[  719.774266][T12952]  gser_free_inst+0x3b/0x50
[  719.778759][T12952]  usb_put_function_instance+0x89/0xc0
[  719.784197][T12952]  config_item_cleanup+0x146/0x240
[  719.789287][T12952]  config_item_put+0x93/0xb0
[  719.793869][T12952]  configfs_rmdir+0x5e3/0x950
[  719.798531][T12952]  vfs_rmdir+0x328/0x8a0
[  719.802754][T12952]  filename_rmdir+0x31a/0x5c0
[  719.807421][T12952]  __x64_sys_rmdir+0x46/0x70
[  719.811999][T12952]  do_syscall_64+0x115/0x870
[  719.816564][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.822429][T12952] 
[  719.824739][T12952] The buggy address belongs to the object at ffff8880367de000
[  719.824739][T12952]  which belongs to the cache kmalloc-2k of size 2048
[  719.838768][T12952] The buggy address is located 296 bytes inside of
[  719.838768][T12952]  freed 2048-byte region [ffff8880367de000, ffff8880367de800)
[  719.852621][T12952] 
[  719.854937][T12952] The buggy address belongs to the physical page:
[  719.861321][T12952] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880367da000 pfn:0x367d8
[  719.871378][T12952] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  719.879856][T12952] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  719.888329][T12952] page_type: f5(slab)
[  719.892298][T12952] raw: 00fff00000000240 ffff88813fe28000 ffffea0001da0810 ffffea0001dadc10
[  719.900859][T12952] raw: ffff8880367da000 0000000800080007 00000000f5000000 0000000000000000
[  719.909420][T12952] head: 00fff00000000240 ffff88813fe28000 ffffea0001da0810 ffffea0001dadc10
[  719.918062][T12952] head: ffff8880367da000 0000000800080007 00000000f5000000 0000000000000000
[  719.926711][T12952] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  719.935351][T12952] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  719.943999][T12952] page dumped because: kasan: bad access detected
[  719.950380][T12952] page_owner tracks the page as allocated
[  719.956063][T12952] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4966, tgid 4966 (klogd), ts 66925370459, free_ts 44585891476
[  719.976878][T12952]  post_alloc_hook+0xfd/0x120
[  719.981546][T12952]  get_page_from_freelist+0xf48/0x3530
[  719.986990][T12952]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  719.992857][T12952]  new_slab+0xa2/0x640
[  719.996905][T12952]  refill_objects+0xe3/0x410
[  720.001465][T12952]  __pcs_replace_empty_main+0x376/0x680
[  720.006988][T12952]  __kmalloc_cache_noprof+0x479/0x6c0
[  720.012337][T12952]  syslog_print+0xf8/0x620
[  720.016727][T12952]  do_syslog+0x5bd/0x6d0
[  720.020945][T12952]  __x64_sys_syslog+0x74/0xb0
[  720.025596][T12952]  do_syscall_64+0x115/0x870
[  720.030168][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.036032][T12952] page last free pid 5419 tgid 5419 stack trace:
[  720.042325][T12952]  __free_frozen_pages+0x79f/0x1090
[  720.047505][T12952]  qlist_free_all+0x47/0xf0
[  720.051981][T12952]  kasan_quarantine_reduce+0x1a0/0x1f0
[  720.057419][T12952]  __kasan_slab_alloc+0x69/0x90
[  720.062242][T12952]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  720.067681][T12952]  do_getname+0x35/0x390
[  720.071921][T12952]  __x64_sys_chdir+0xaa/0x280
[  720.076568][T12952]  do_syscall_64+0x115/0x870
[  720.081157][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.087052][T12952] 
[  720.089368][T12952] Memory state around the buggy address:
[  720.094970][T12952]  ffff8880367de000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  720.103011][T12952]  ffff8880367de080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  720.111052][T12952] >ffff8880367de100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  720.119122][T12952]                                   ^
[  720.124488][T12952]  ffff8880367de180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  720.132524][T12952]  ffff8880367de200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  720.140563][T12952] ==================================================================
[  720.474017][   T30] audit: type=1400 audit(2000000079.190:890): avc:  denied  { read } for  pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  720.499276][T12952] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  720.506537][T12952] CPU: 1 UID: 0 PID: 12952 Comm: syz.3.1802 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  720.517513][T12952] Tainted: [L]=SOFTLOCKUP
[  720.521840][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  720.531971][T12952] Call Trace:
[  720.535244][T12952]  <TASK>
[  720.538181][T12952]  dump_stack_lvl+0x100/0x190
[  720.542845][T12952]  vpanic+0x552/0x970
[  720.546803][T12952]  ? __pfx_vpanic+0x10/0x10
[  720.551293][T12952]  ? tty_init_dev.part.0+0x44f/0x470
[  720.556602][T12952]  panic+0xd1/0xe0
[  720.560302][T12952]  ? __pfx_panic+0x10/0x10
[  720.564708][T12952]  ? tty_init_dev.part.0+0x44f/0x470
[  720.569976][T12952]  ? preempt_schedule_common+0x42/0xc0
[  720.575417][T12952]  ? check_panic_on_warn+0x1f/0x90
[  720.580503][T12952]  check_panic_on_warn.cold+0x19/0x34
[  720.585857][T12952]  end_report.part.0+0x3a/0x90
[  720.590606][T12952]  kasan_report.cold+0xe/0x18
[  720.595276][T12952]  ? tty_init_dev.part.0+0x44f/0x470
[  720.600549][T12952]  tty_init_dev.part.0+0x44f/0x470
[  720.605653][T12952]  tty_open+0xa63/0xfa0
[  720.609799][T12952]  ? __pfx_tty_open+0x10/0x10
[  720.614459][T12952]  ? chrdev_open+0x589/0x6a0
[  720.619031][T12952]  ? chrdev_open+0x589/0x6a0
[  720.623600][T12952]  ? __pfx_tty_open+0x10/0x10
[  720.628265][T12952]  chrdev_open+0x234/0x6a0
[  720.632663][T12952]  ? __pfx_chrdev_open+0x10/0x10
[  720.637582][T12952]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  720.643894][T12952]  do_dentry_open+0x6ab/0x14d0
[  720.648726][T12952]  ? __pfx_chrdev_open+0x10/0x10
[  720.653664][T12952]  vfs_open+0x82/0x3f0
[  720.657716][T12952]  path_openat+0x2873/0x4280
[  720.662307][T12952]  ? __pfx_path_openat+0x10/0x10
[  720.667228][T12952]  do_file_open+0x20e/0x430
[  720.671806][T12952]  ? __pfx_do_file_open+0x10/0x10
[  720.676830][T12952]  ? alloc_fd+0x471/0x7a0
[  720.681143][T12952]  ? do_getname+0x191/0x390
[  720.685632][T12952]  do_sys_openat2+0x10f/0x1e0
[  720.690291][T12952]  ? __pfx_do_sys_openat2+0x10/0x10
[  720.695474][T12952]  ? do_raw_spin_lock+0x128/0x260
[  720.700488][T12952]  ? find_held_lock+0x2b/0x80
[  720.705154][T12952]  __x64_sys_openat+0x12d/0x210
[  720.710010][T12952]  ? __pfx___x64_sys_openat+0x10/0x10
[  720.715366][T12952]  ? kcov_ioctl+0x17a/0x750
[  720.719867][T12952]  do_syscall_64+0x115/0x870
[  720.724442][T12952]  ? clear_bhb_loop+0x40/0x90
[  720.729104][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.734988][T12952] RIP: 0033:0x7f505319de99
[  720.739387][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.758975][T12952] RSP: 002b:00007f5050fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  720.767370][T12952] RAX: ffffffffffffffda RBX: 00007f5053426270 RCX: 00007f505319de99
[  720.775321][T12952] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c
[  720.783281][T12952] RBP: 00007f5053233eaf R08: 0000000000000000 R09: 0000000000000000
[  720.791234][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  720.799201][T12952] R13: 00007f5053426308 R14: 00007f5053426270 R15: 00007fff532c8ff8
[  720.807179][T12952]  </TASK>
[  720.810416][T12952] Kernel Offset: disabled
[  720.814714][T12952] Rebooting in 86400 seconds..