last executing test programs:

2m54.297874058s ago: executing program 0 (id=571):
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffc, 0xa, 0x9, 0x47}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setrlimit(0x8, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getcwd(0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x4)
unshare(0x400)
sendmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="f233110809e4f9cadb493d3b239d6ae3ea7e7ef3a5975ac107c9737a1cab55d3e3d014cdc28aa0847617798fe3c8f298608662e7d234bbbf829ece687e220997f95c8f23a577700361d1859254bf43701e1162c0924876595d781adff66c61304bf0404a26442c6038fd86c5873430c75360d634ba6cbf7d7c0529e7fe287860db1015499dda16edeacc9e4f7e1836bea21d72f7f19c8d0b264de9aecd87558e186a3489fcba065c622cfc80221e507f3d02b4ad549837", 0xb7}, {&(0x7f00000002c0)="8155f3a95bdf6ee888b767afcd933bb9ac558f51523d71f6908b989529d22b10432931fac52a34f1b495bae69c87d307b0a43cfe0f64dc", 0x37}], 0x2, &(0x7f0000000340)=[{0xe8, 0x113, 0x0, "15aa4199cd99fcbf4abad10df4b871b274462be87bd0e13bcc2bdcfa79a4d57ed97f4a2de115365ee3758ae15fd53dbfe5de83994d336c2023634f55861958cef67be1ed13b646b0f41e4a250f25415285a5d2fdd373fce4d096f1deee346af67d54b45f005869f65f9723223e2960fc89931bd65fc171f790d59c5bb6468c5cb9c49459c23717eed45764a0b0280dd0481125f383038fd6708f76ca88e76281866480c2757958dfdd2e79f6b15f6ebe57d4696754304b8541ccf56203be9d153171c541a9eb1e29276a7c09f6d8f9f107d8"}], 0xe8}}, {{&(0x7f0000000440)=@in6={0xa, 0x4e24, 0xc6, @mcast2, 0x7}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="21c15d62a423fe79ee47720de925f71d7f2d7af43f008a880e7cbf373c58da7757791f80db2178b2", 0x28}, {&(0x7f0000000500)="7b3aff7ad33557d0eb9ac9f182a0f9e5dd4d4d6e0bfeadf20175fb637e4073d9958307a250ec634095b218a49a1b09bf9631606856d499905352c5278e3fcc17d6ad8055570977d8e405dc57f5aeace02e1911d2d4d968d23253a6f0c3b86760979c5ad5b6cf6d642fa3214b117b07ed15ea990e7ff4194bf641946cd3ae57f533092f4a1768416db416297bffd9d161fb5ddda7a6", 0x95}, {&(0x7f00000005c0)="e38208c2cf383ba693d6a8cccfeea2c4aab27b7477e67ac97c288af3cddd85d29b756457dea6a470a5f1f4007151e2e81a6036fe8b8c7b4ee5138b6de5b5eabe7060ae04fb90f2185703111470b63a2c92eba1dd04d650746e8d0b44479dbc302ea29398c1291ab3418c30013657c661a83742d145", 0x75}, {&(0x7f0000000680)="42d1c950cd11a64d6176335f1a54cb0a28077f473435339fa7972fe2ff06147b893abf06b1b4c994f1f31cf7b60845f476b46f327d0016335dec4e85714911da0c8f1f32ca9e346054b5e71724208ba759d3ef90ab542495b4488904d3384348c06dda1aba955307b1620f426f74cb5c732e436805fad5075fad874560f2f97c05584b81cfbc3b3e", 0x88}, {&(0x7f0000000740)="0d4c96cbaf4f30c7d324faa505753cecff2166", 0x13}], 0x5, &(0x7f0000000900)=[{0x38, 0x10c, 0x1, "72054d82d67fc2b4e6ac9271de94d38d522b360b4420cdffc5498376d66b1eef0c6e1b02"}, {0xa0, 0x119, 0x6e3, "e2290ae8c9b771d06c4420a280c236271fd1ccb3772d2b2075b862fdd91ac1bdc02ca524a9198521080e5cdcfbccade162c78d56949680c0996d0e100ac9e5b72be5c2214db622a868f6929643ca95a9d047782164af31dd86df2ebed4f17ea50533c77d31ce8fe68af720970e7f6400dd40de8d140b0af367216f20fa1ea769b71d0569f4a642fa8f5946250a"}, {0x18, 0x84, 0x100, "1dd5e8b9ca06aa"}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a00)="97993c9e8b295924d416842d09d02a85aea38a479520441c7f08bcf876fac960039cad8ccdd8581b2cb0b889c7f3fa4092ec74c3c7391b46b635ee0c3a98c019d033dac6de6720293f6001822b3f4e4f18162d8af02bed9599eee6407cfea3b4741bfe9abf192f3cab88c61dd09dbe718341bf0e09ca54fc36ae0d9a9a48db0120f8fdfa8bfe733d719f64649c4b159e1af773ebf7763c32cb396ddd15736920046676832b7f71b8cee0481dfd19255fcb925ea3222581e4a89a7f21bbe7af6ff3797a420f5c60688a40ce20e6090961cfc63e", 0xd3}, {&(0x7f0000000b00)="cf5050aa4671c8205ede5cd7040e6fd0962e7ec1bd83282e7174ee762fc3f8edbd3a91ab0e59c29b138bcec1ded0b1c6dcd5c1bdb2a36caa17fd06159a52d1e815a7a9465f9608165f4ab87841bea7ead52b34a429489fcfcdb9f0aef0d1218120e220ffe9fbd18761d45b4c81c7ca799c2b8926aaba68aec70481d52eb0ce3d14a86ea053faff319899d0e7d268c9315300a3e584b1f0cb2f6b889916a49f35551c3ccdef227bb65bf516d9a4c9862d36786f3bfb90701a0a90e7cc8b6ed91fd100909dd670a9bd18", 0xc9}, {&(0x7f0000000c00)="7be9c262952c3f39546f23ed40df2df9b0ac305f682a46b10a5206c7d0962f37d77f45a2e7b80bc76b4cd43214da906932dc40e97721254b6c734490238f82d8d49b2d55957c31b271d4c75db7df9ef544131e79997be5aaa780a576e5931c566cc259", 0x63}, {&(0x7f0000000c80)="e362f2877a274b446854a10c8e85b85a7ac7f07a209e78a6e4900cbbeadf677aa887863e231c21693d209ab0dfa2087c95ecc22fb1947610b37f0737f72c31ccea6547fbd49d5071ff626a56af8343a3d6e79e", 0x53}, {&(0x7f0000000d00)="815e9dbe74b9d92762e9bef3cd5cca2ab7463d5a2e68880e4ed3095fddfaabb92c32073625e47cf85181ccf456b61676f6ede18a9d6b02a274edae5e4836283134dbc4c29369d6f9491161912002aff70c302b90ee6b14b0f82e1a257ad16dc6a2b5fb2b9370c5609c13b30dcedaf0c53854d8ef45e049999f1e6619620694b03334d38e63bddab426e9c18aaf09be5a2e3d87f6c4cc126a8760b69e908747317dbc45147970928f32685c2ec7a499cad5b0267bf98fe7da2060ed6384ae6e29973ebee397b069efee439a49e7d7842aff486d23e16684b930b824eff84e5f82fa7d40422e0a8175d0873e5370ea5d23096486e3420025", 0xf7}, {&(0x7f0000000e00)="78f9be0a96e7291f33dd321c1d8b590460898a0b8934f48873381145a2efcf0c2f1e89d6722a746fbf7e19d6525e3a827732a87dca79731ce0f80747669dda7181b5ef283e774b513a635168e59ecdfd135918b1e5ef35b6b1f27261a6eba1b7b1b48c20334790dc18fef9b79d68b09b139fd66a9d9c322a4e11d033a61b7cd8e0a3304a914bba4e2e7cb8cc0e80120e5a62a9d2219f411b015efd3cdcacb5b78697fa58c6d76f92a102df872fa796c69a0b0eb4758811aab5f6c1aacffaba79196780", 0xc3}, {&(0x7f0000000f00)="6105e8fdfa3f31cf922c2759af59e0820427a7f0c0d899e010138e07bd2c68a7ba822142be0ebb1935616b96c3c0ab1761997385554d841bf1b631e5d3156042b725bbf3a69b3cdd084a266b803831e22c9273d4eac1a2d6e6d4cb5103aba902dbd91980f3fb250a6977", 0x6a}, {&(0x7f0000000f80)="adf29493b1905a2ff8785bdbcf6f39615a124089269ce830fe74976ac5d6c9b0c3c68ee94ab3a4ba01eb2842a3e4b13835a8674dd37425ac4c8909d560ab7f11574aeb8ecd37476682c6eb3bbafbf19a8224c9ce396074f54c2bf79d49", 0x5d}], 0x8, &(0x7f0000001080)=[{0x80, 0x1, 0x77eb, "a299d104557a05de95c7d33626bd1749a799a950d3089a22906ef43727d5b1eb14dc7c7b173e0cd64866870a6c0e6e87e8427193a4bf39f42edd44d8d1edf945895f440914b7d7b60bad9b8dc0c9d19d3d117b8797e54178e60ed078437aec00fb1e0af129d3a6aeecf5e8dc"}, {0x108, 0x6, 0x0, "dda0b5828e765d3df5aeaa19ef62c920ea750b8453b09019801db32888d6a84b48fcfae777b455c28e668c04bc2fed12d4f3be64b06e48e31922df23bf7d1ba5100adfe855b3db5be2bf95d347abefad1c27e6c0d78c452ca22c6fbdc16a9defc10b866b4f3b5815047e34558481bf5b4d4c511db8e1006eb2eca36f65fb97e6af3268bb5cea06691efebc5f98be0cd873fe2b33cd5a3b7f801985537ec03a0c2bf851f66ebfd8dd6fccd5c8cdf1e0af20991c470b5ce7c3e950c27f7a19ad428c1ea67c0ca28745ef11b733d3bd4df3edb5adfaecc4eadf475cef5c80e34b30b836b3488a47427750699896d853f629874458"}, {0xa0, 0x10c, 0x5ea7d8a5, "9c6f96c5e397309cb565c7f5d8403bdbda9bf4b45d0989644f5d03f97266f1c8da35e41e34c1a3a788dadf902f902b6c8aba09a391eab72e24294cafd490878559490ce9cb60fe14fef6f4840134406004b07b2532bb25814d40cd0529d78121f012a863ae7319f8f4301b66c345760842ff819059a4cfa8badbe248191571eba87c4a9514bccfddec"}, {0xa8, 0x0, 0x8, "62662ff355cc40e8af802526a7578c18b82c1ff59cdf643251bafce50e0d8151a49d7f77943888efdd2c13b880aee768ff9e0ef798a2bedbeb44a344e7e6a30014f3a8043fd011266bfdf45af6e8ccb99e68686e31ab4beaf5c060d65e500e4efd867eb00559c0f80342e6ab5b914b17b24da4644dc0f429d48b2aaad10fabd202f6a131f105b784f7d65a9a97793009b8dfcc854b02cf"}, {0x98, 0x107, 0x2, "d071defe9341e59956662715d2a353998b82e60bd6b82943343ed9a73635714f32e8a04faee20d8963d4baf411e115863ff1826fb1d42b672f30ce4ac2f72d746659f3c7f336ac1cb9f10f0e8e7203297636e61c333634be9811352be965aa0d2db8def7d5f2bd0f0d7b9d4a94c86280b71a0a4f378cd5bbf72b15d4c37f73d990b964223f0cd3ef"}], 0x368}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001400)="07bcf3d8d88d98b7bd4462aed213cefb3885b8800e654a8e62", 0x19}, {&(0x7f0000001440)="3b2a97190bbc70deae6d5ecece8503bc013369e7f7ec6bc2a4eeb2c4d13e74819be28a485f446c46578e742596c0d033c75a7c2a685ebea98c273710b7a84e", 0x3f}, {&(0x7f0000001480)="5d2d514e0f992876e0166eb7ca93a78d852fdd03a4a3b765935ebe4b2f86583ee2745a1c1318b3564efcda7c72a95d509c16fcc0d60391ef20cdc7d9d6c841ad30d3a508141580d0eb6448d57e3c15f6cfec7c093b9cfa0bd400322e61a297bf139d2c11939a1a976f7c118cade8813b7b192c0ccc07209d4a5760816e6ca1bcb143aeb6f6f819dd0cd4e8b2940eb0ddaa9879dda5e9d630d085cca3c0210397f5b3911b3c3e2c7e1b333dee56d76b0fde1218894c4d7da73553939f8d7bc343ff7677821bcc3cde4336dc60ccf6c3f9ae2f7b72ec64337bad467e4eab2a6359bf82a0240c615e8352e4168c3a", 0xed}], 0x3, &(0x7f00000015c0)=[{0xa0, 0x10f, 0x150dd916, "b47642e42a076db5412ee612fcfb4c928cbe905e4145f613d9f88807816cac2589905a3ecd466c13d562b17d547fac05e4a84d3072e19bc31d0d1747ff1c631d05ef9cb3c849653b5051e44aa152048199505802d69ca946078588705b1e2f19d38e26d9a45bd6c1e8fddbc2afd43b6fcbd567e826fd827298add9541667f3d5fd53dfceb2b78fb313"}, {0x80, 0x1d5, 0x1, "c58e2228f7752f0620b4c850f6df66e6f981e13c8ebf3369b0de6a112bb0c2a7ada8a983a43bf9c411d00046e9dc694058c211af338cf6b36b0783027579c1fe27d8335b31dd70849e9025d42ab1d32f5fc16b97e1d69c717347d4a86571a79d82717a6ae2877b1a8cbd49"}, {0x40, 0x104, 0x6, "38081001872782bbc80047e86ff1ad75df27f2529132ad08d0502a78811a041286f3f16387629bf2f0f6dc"}], 0x160}}], 0x4, 0x14)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28)

2m51.706324716s ago: executing program 0 (id=579):
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})

2m49.458676611s ago: executing program 0 (id=582):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
r1 = userfaultfd(0x801)
fremovexattr(r0, &(0x7f00000000c0)=@random={'osx.', '!\'\x00'})
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x300)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x40045532, &(0x7f0000003f80)=""/4086)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000004f00), &(0x7f0000004f40)=0xc)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x40, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa})

2m46.647143422s ago: executing program 0 (id=592):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r1, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
quotactl$Q_SETQUOTA(0x2, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888edfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x74, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m43.515419809s ago: executing program 0 (id=597):
creat(&(0x7f0000000000)='./file0\x00', 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000080)={0x6, 0xd3}, &(0x7f00000003c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0)

2m42.133431515s ago: executing program 0 (id=601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = gettid()
tkill(r3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
ioprio_get$pid(0x3, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x3}]}, {0x0, [0x61, 0x5f, 0x0, 0x0, 0x30]}}, &(0x7f0000000180)=""/88, 0x2b, 0x58, 0x0, 0x401}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r8=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0x0, 0x1}, 0x50)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r9)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="110128bd7000fddbdf25040000001400018008004d9c40d5a324050002"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)

2m26.647524325s ago: executing program 32 (id=601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = gettid()
tkill(r3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
ioprio_get$pid(0x3, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x3}]}, {0x0, [0x61, 0x5f, 0x0, 0x0, 0x30]}}, &(0x7f0000000180)=""/88, 0x2b, 0x58, 0x0, 0x401}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r8=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0x0, 0x1}, 0x50)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r9)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="110128bd7000fddbdf25040000001400018008004d9c40d5a324050002"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)

14.402264492s ago: executing program 1 (id=1076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r4, 0x5ee36000)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="8ff819011349850a69e9dc600733c942a066177e34fbafc34cd22dcdf25ab41945ec9b71eda8aeb2a3560b19800e44d21666762b4823a6dfe1c7dcebbab82b88b0629b4f31323edd15a8a1b100003c6c5b8929c77a4b98d7e40f0bc7f32fa4f53634b0c28abdf6a23cd07fcc9675e8d75ba8822afb72343db154e17d51e1a7cd7de494c6ebb981c1f7c45f34525c71b8b569637703b816d33ba4d2ba64", 0x9d, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe)

13.374736029s ago: executing program 1 (id=1078):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000080)={0x7})
munlockall()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501242, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
poll(&(0x7f0000000540)=[{r5, 0x2020}], 0x1, 0xb8)

10.972287395s ago: executing program 4 (id=1083):
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000002c0)={0x5, 0x4, @name="cf664363f7d8a805ad4be9938b9e87c01fea41d4290685ba44fad955a7168d3f"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, 0x0, 0x8000)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f771df363bd148f3be52162648412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48}], 0x1, 0x81c618d029b411e9)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0)

9.747524309s ago: executing program 2 (id=1085):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000001c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="fa", 0x1}, {&(0x7f0000000200)="b763cf894f", 0x5}], 0x3}, 0x4801)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x401, 0x2, 0x0, 0x81, <r1=>0x0})
prlimit64(r1, 0x5, 0x0, &(0x7f00000002c0))

9.744152399s ago: executing program 4 (id=1086):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.479296015s ago: executing program 4 (id=1089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r4, 0x5ee36000)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="8ff819011349850a69e9dc600733c942a066177e34fbafc34cd22dcdf25ab41945ec9b71eda8aeb2a3560b19800e44d21666762b4823a6dfe1c7dcebbab82b88b0629b4f31323edd15a8a1b100003c6c5b8929c77a4b98d7e40f0bc7f32fa4f53634b0c28abdf6a23cd07fcc9675e8d75ba8822afb72343db154e17d51e1a7cd7de494c6ebb981c1f7c45f34525c71b8b569637703b816d33ba4d2ba64", 0x9d, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe)

9.249039394s ago: executing program 1 (id=1091):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket(0x21, 0x2, 0xa)
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000002100)=0xfff)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)

8.054878106s ago: executing program 4 (id=1092):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = eventfd2(0x9, 0x80001)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000bc0)={0x2, r2})
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffffffffffed3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)
r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800)
r6 = socket$inet6(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x4, [{0x0, 0x4}, {0xa, 0x1}]}]}}, 0x0, 0x46}, 0x28)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0)
ioctl$RTC_ALM_READ(r7, 0x40187013, &(0x7f00000000c0))
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r8 = socket$inet(0x2, 0x80001, 0x84)
listen(r8, 0x3)
r9 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r9, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10)
listen(r9, 0x3)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {<r10=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000240)={r10, &(0x7f0000000200)=[{<r11=>0x80000000}], 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000000)={r11, 0x0, 0x0})

7.807267479s ago: executing program 4 (id=1093):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42203)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x7, &(0x7f0000000080)={0x11, "a73b6cd937b8a60b7d166e63a88d79c999dbc9fa29b475a3a9f393d5189793be0b"}})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e26, 0xf9000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x24)
tkill(r2, 0x13)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001240000000052602f1ec785360c63ed86c0537b784b58bb53d242f7fa1a2447556eac8554575cfde944b1dce51e32f7f0d214970096ae90183c562c0c08e5dab9b1c4c"], 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x40c0)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.632286426s ago: executing program 2 (id=1094):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}})

6.325999526s ago: executing program 3 (id=1097):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200001b)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x3, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x6c, 0x0, @rand_addr=0x6401011c, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce)

6.010075639s ago: executing program 3 (id=1098):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.989269983s ago: executing program 2 (id=1099):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r1 = getpid()
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000180)={0x1, 0x7fff})
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r2 = dup(r0)
write$cgroup_int(r2, &(0x7f0000001a00)=0x1000000000000014, 0x12)
sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x10000000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101041)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
semtimedop(0x0, 0x0, 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000003c0)=0x2, 0x12)

5.697853647s ago: executing program 3 (id=1100):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

5.601692227s ago: executing program 3 (id=1101):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000080)={0x7})
munlockall()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501242, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
poll(&(0x7f0000000540)=[{r5, 0x2020}], 0x1, 0xb8)

4.87337897s ago: executing program 1 (id=1102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000008b}, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
writev(r0, &(0x7f0000000000), 0x0)
syz_usb_connect(0x1, 0x43, &(0x7f0000000300)={{0x12, 0x1, 0x388, 0x8f, 0xdb, 0xc0, 0x8, 0x16d5, 0x650a, 0x11df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x2, 0x2, 0x3, 0x0, 0x8, "", [{{0x9, 0x4, 0x2a, 0x0, 0x1, 0x2, 0x6, 0x0, 0x80, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x5, 0x1, 0x3, [@generic={0x5, 0xb, "6a469e"}]}}]}}, {{0x9, 0x4, 0x7b, 0x6d, 0x0, 0x2, 0x18, 0x3d, 0x6, [@generic={0x8, 0xb, "79f6ab312ee3"}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xe, 0x0, 0x8, 0xf5, 0x11, 0xa5, 0x0, 0x0, 0x8, 0xeb}, {0xeeef0000, 0xeeef0000, 0xa, 0x3, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xdddd0000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0x80a0000, 0x9, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x68, 0xfc}, {0x4, 0x10000, 0x9, 0x9, 0x5, 0x5, 0x42, 0x7, 0xb0, 0x1, 0x0, 0x10}, {0x8080000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xc000, 0xeeee8000, 0xa, 0x21, 0xc, 0x8, 0xa, 0xc, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0x4000, 0x6}, 0x40000000, 0x0, 0x58000, 0x200, 0x4, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x19]})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000540000000000000070000006b1147000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

4.711944026s ago: executing program 5 (id=1103):
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(r1, 0xe, &(0x7f00000002c0)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x7, 0x60})
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
r4 = syz_pidfd_open(r1, 0x0)
setns(r4, 0x24020000)
r5 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000580)="fad2655712f2f6cff2dd4818725e2217d64ddb109e7e2965a80a86663e287c3c50f3fd0685bffb6db1a5eb6ea038935e0a604be71be930c7a6c1c2b1e04952795229c8e6a76c15542420433d28ad5a11ee4e2cdbd7b4a2c131b24bc86333f1dccfd39a5a03086cdf51927dbf1724ba11a40999e1d9a347ef72661691f51d9ec18256252b27fc05dfeb9f85b661f917a1acdf0a19a73a963b567e9806d7d5e1e8925a23a9e13d0028f4993f9b17b51cb06dbba14f3e6e92a273e5ecc0bee55747b53bc0d4f974b1c1d3e57bdbc3bd7ea17e41f0891bc951073de29b3868b1641db2c4768d46b38ae78614f3d6c6c21f81265b322c449d9f0391be74545c709e91b0abd285354766a0a1f87101d01a5c027719cec519334ee70c9c2882290f8fa7c0d9bdbfdd0494e14e80cf635809a98c6dbeaada980a435bdd2b00f1facb8370f0f8013ed67426b6ab230e79c229c15954ae96948fcd462c00aa315721965cd3f540816d43ce6fcee72d9dde54c2b9ce706e3e84eefd4438ab5091082035e56c47a104509b627d98a1ace03c871bd3ce636ac190fa92e643065b917d09c41198ecb6720d17107da5663f25c069b8bfdb7e369a95f55edfaa48731b633ae20ba54467911aadb711df5048e5c27f6a1092a00f6f3266d74a39633cc0ca66f20df7b5ad9b55753b50c611b693e610e2fead467ec9c72de4c4281e12f47189ca386b354cf51c4f3af0fd408266427858cbcee426cba5978ce3fe120b35e11aa8b8b3318e653d11ec0ff00dd00044b412406bd307b13b6a231a1e944f7acece38d516a8e23a5c6e424c48b203e290520684682440d82e1c990321828aafc11c8211bc2bb906a987859d380a48c2a3b643ad3321d1511feb6c3317d86d94db07d1ff09c16d75c344ea6af5dd96bf3140b394efcd92881f39cc29245a635ec086d99425f82b5168fc10e70b634999b92b64d500e719914ac2bad1ae57b10889f45b948faf19919d9e623e303cc6333388f5f3afafde496abef4a6834567d9dae01d2c93e8c63a972e6bb735d8e8f322c37d94bad7bfc743900c76a644a9bc6abbf1ca91076927aa042e0db8c25eae0c27a67ba527d69c338ae1dc63e32c422527cfa0800aa4fbc41a494db6e38ee7f89e984a37f52118800762f44cd2a90969f6192ff32f4995f7eef40ba13387264091eeb9fb71db0f7ff90e46dd0726583f00f1973513f6c50e768339a51af48c80db798589d6fa7f1fdcd66ca9d532caebb345ea6e0cdf902f24804d8197a7d1ede5b05d6dc86c480dcd87464820dd88b9fdc42484e8ced15f946082d54868dd21ea4733e9d48ebfe036433ce7b595a1ba4f8738cb406887d5183288b9dcf58f5c4cad2905feee9e7f9ae29ae981cdce53686d613b51b32ee4cc3c8c482f26a460f5b3eb8ffdaa57352914afbd906966fce6d41681704acdde530db1dde6696a26237bcd49c7a1ff1d08e4d8552cddc1e8ee324cc00db8f149ea9cc02dacc8efc1903861419079d7619c6482b1f3a4584debac8fffe490768ebb58280503658f194bf4c67571f811c2dcb31d2ab428f9af0bc959ef4767f75eb9ea0c86606d68d098cbbf7c5bdf9c5d9a5a814cb04fd5a628942cb6173b38900becc67a7ad6767efdf4b0be75bd1afa533f9ee1d112769f25bbc7054f02c8b7501acff84b036ddbbf812c48c4c1fdeef89881055ff729faa3fb045ea3da384766d37c472f783957fefdbb599c928873414c49602771d0962e4bb7eb7373b1e26a05d8788040ff0e07fc5d2eced9d367b0f660e7ab8de62a398ad9e4ba4f125345102013062a239160bcd5fd9b02948f9925bc098eeef35e82b80b7d62583f9d7f4714141b5f114adee2e2fc9e5622b03e911f069485a3cfdebccb4a07ca1005cd53995a9ae6c71ccb806766beacd4079a32fe6dafc0d04b0b1685cede99a216f0ea6ce08862342055876f80c6e49a8240954eefb3a293909f384cca2157a3b6a7e81165da9848743e73cc21d830bb40f300399823833f6d972ce7e0080ab509ef5ee0d169f753078edeb639e05f81c2c696f8d71ea4426ecc57b73f3f8acf7371323d9bfaeb7705732984da5922f9151dd37c5179fa63ec9de96bc7382cc2adf38ecde108f85eb6478bb87f57bb817f69b04df85509f9fcd22b8045fda03868c733cba84f89aed1726c73ad737a30489682f8d5a8a8e472199887166622d7adc121df98fe1e4b3f0cabbd096b00d8d97f1a3096e2eab379b7401d33afcc3aefeccbd94f2c38e59982ca4cc9f55f003a1a7c112ac400e3adf1e102d7b08b8b28144c0fe5d71ae7f3c6d95f4c6fdeb6abfac83f98be4a4b2252a2477c38b72d841e01c2fab8a26323c9017adc43f8b8401b2999040933e53321cd72b1b24fbe76981c063dfeb29d8b615ea259d81acd92bd0d8894f962a75fd1e7cefea0d8bd3aadd21d58458774da3a8cd3131fdbe86acef37feeeacf91a099a0e09c1592b30501e34df727f07961e04ea7e184532615ec916f9ff37f9884710e9008812073d29a39a999fbc3e4b97efe744506fa8e310149382aa0788352cd76cb1787abc1961c12c9274ee1ffe370d4f223a8ee9618fa0b82060aceb4798ac396307d1de242de5892b1d6e1f8bb75156eeb0d8333ebe54cb285dd13631f245cae061907b2464a3a8f1854e792446ac6df9dda451b244dd1569dd4ca7969abd256c1a5af7b35f20fdd5bf8cf942905359ee5d35b686c163e07577f5c7142df944c81a754fe8593b48434ebd150b0b48834315d865659a9978ab5fdcefea9a1e72c81f37b30be7c2aed11f72d82fde6406894e23a5bfed0fbc2d0fbd81814138656f46ac2928f52df5859873244cf1466c1b8cdd0d2a6053b7c707b665d108ec82eb0ec3a5d1673cc63d896478626622847716703e339699310c73d3e32b110353eb4d0d66eff643fe53316177ef67c5250253981c0df6a98644322b1ce9dccdc9c2b506b9b89a7c7ec8bfe6985fc054342eeecff9d4cf32c50e8bad0decbe7f65a6c8b46ecfb1fb0f5010e8be5d58c97092181495049c9421037c0395aacddf1dc45c0b1f3dd452d6954bc2009851468dbc2c27d88fb5023a5c045ac484c6922684eb10e4a5437f08d349065f5f40c2b5e41e1a78e1801a4df4834cf7e4292b660e4bde8af6aa6b87c61d0e4c1c58200349c5fa9262b87bcc3ac5b4350d59f2dbda14c10bf7aff93f57a725efbe1168d639aed2202adb9ece3628c6c66669d861774078b476bc30b787a2319f2bf6f302207cab9cc1b23fc615c3b3da6570e3126e84a253d900b86ec554fb2186c3de3495d90b8403cf2e32ed003a8b818965cee66b7ed86c2c3b7908b339b13afeb74bd217f7780871b1767e00a96edf60a964cc30f5fd138859cc64cac9f895cca5c3b61661a77ed4558db957a92deb24c58ae91cd43e06c5c926a5e19bf1dca80cf15853356caede8c833742371999448ab9959e0a5c06753e2d47ba23e67be61d80e76d2e5f930a1e9756a48f3851950bb32774993eed95390bc3430c713e90871543a2ad80cfd3cfc56512c4a4e6d97d9c2d94bdadf193a6417bb7bf06c550a3d1290fcb47cd6b807ea75d6e4a0db76620f0aefeba896623e20cf33dd1d1beed1b874fb5de4f0024dc1764921c293a69bb21582fb774845110d598abd3a8c9876c50923a5230e8ccd56e72e67c62bf294d8b3202248921b4b3cb5034778cc7e5814bb378a948cfd3f280bf291aca2771a24aa5bdc8df4547ef0fd2790bc501e5208b4c6f2983bcc9664038bde50999209100b38d51adb2d2a8bf2adf9895a049c7de8138d224a05c1d68c10e75de9a61cfb66f1cfdf71b5d55331dda86d9fd78b9985587df1b494a4ca8f4c800a4eb4bc459abcbee119e196eb84f62dc911b15addb4c19addb71c64c87d6d8a73f0dbe5b614eb1db6522aa550127135cf63d6739c8457d4d62f3ce0255d68c43cd678738bc49e4709b4c6463b7bdaccd8ad07d4a4f0b27d04aa3b4286559eb11fafd24eb6755daac88ba97faf925b0be74593db3711bfa826fe0408bd699cdb92dab95617111ae31f23a28148c9462949dcb8552ec5d623d0017fffadc9226aae155395cd1b477ef5579876ba4b24e4501bd39a21ee6327f8b1f1b6db2b3bcde8cb81453b52d90483a4c1b8ecb4b6a34a8d7ddb67a0c478110dbe5bfa8e9a651120b7f30335d59a50e502954d09272396485e643d7add7157fb891cb55dc7ca9f7835244fa8e52ab677515af1762ed5ddd4abf01eabb434ac2671bd2c6616d5df156a60ecaaf7a1063a4a87c2e23d8b55f4c0f06bea6ab60a9f1a5d1a73830bca180e6fcc7c2a173b2912115cc79ccf839eaf86e95eaa9878aa9d3bb1836e60e629693a4bed84a057583bf876b71db19b28212689e04e6aa7048700d0dbdca9787e1f56b582ec9fc261631cc4395909319c17cce614c697b9d82a8df71eade705bf3fc7601db17eba333fa0cee0a63f859ce70b09c9792c6ff8a55aec036de778f7b685afa3eadb703dc2fe0f66e8765a8141464e5ef8fd130f7218a01a1c7dcf3d22558e87c30c0b2d58fb10fdd612328f79cbaf3ac069264d252aa1409bd3c60e62820e99566a66ac79791addee841abdca3dd8169b7d65820eb65e7c547f6f70ddbbfc5681cf10d951fcafd95fa030e3b2e749ff371aec0cfb2014d3c99a74fc11bb565cb94a28c0746e8ef71cf1aaa1a4a8f524fa1bcccfcedda0a848a61e375af421a61c8cb1594189c0a8b13772978346ee0c87615774bc0375e44190a2760dd73a75fe04bdd1aad7124111ac0c4ff1bcdb0c57c2cefe41897a2cfd96dfa910a391855ccf4b7f1e6608d1eb86940c93e3b8129bb628f575c6f66d92c5ef57eb9d80677441b7197754ed470e542c0cd2ee966f4c10da75468068ac427b5014d7595868411820b591bae2e744655a8893501b65ab940e8a2d05c432688428852446e7f6b9b6c1bfc4df75c524ebee99a8837172c14f1b576255a455aad6509b02058fb21b1f22263bfa6a141f9f0ded4b445cc0ce93dccf354b8a4a3e70c0e7d7b51d1f9987ffeea2482a3cf660e2d2604f3633ce1145b1dc29cb56c2bb69dfc6f351da4eb0931d2abf54cf7e257ac92879a0d6dac9b222166df0d77d904ddcf86ff0e6ae8e9ca2fc7ee5b26f9785636779c1a42b09a3d72ec44b964ddbc51bbfbd38052492ece1109e5117fc80358f30fa013c1ed47ae9bbcfea7732d1b0fd46dfd13cb3f30e63edec7e131e2ded107d757ecfd11b463e194830c9f087d34c628771830e0e723e920bb9c2b5731768e0be6e1efffaf04a4288d990ce49249950f36ecde365c84e2afbe66b72ed210f912e10602328ae661ab0e2e3ac9de2a51e58275b4e318cde5672bc8dcb045892e2516488af2e2e943fdc148691efdc2f43dacc20ccd9c034ca4649615c710039b386efdd89c0d524194388c50fbc6f45556fe88c9e34bdbf2af607badbdc78341c9e09ed58b433a1d3883ba94eee95588524cf21a5eaa3031fc6474f77ae74ffc4416f28009a9b98c21051af4ce493961fbdd57bee53c91746bdbc6787f77d69c3b4e23321f062babeb04699bd1ab88f8351a01ec8cf2ebc727b779bafa468334435ec599e0a68ca6763d0bfa4c1a3fbe8b8ea7dd38eedf1162b8a4176fdd6c4083d94c846dd0db4c70d38b758951c280c7244cbed4b7a0fb14b5ac4166256b87d080609830c5b3e142068783161450cad129584a2da4226bb07f7f137d9a9b593b5c7736c28a7d35ebf1efe081c182feb3abaa5", 0x1000, r2)
keyctl$describe(0x6, r5, &(0x7f0000001580)=""/111, 0x6f)
syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r6)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x3, 0x100000000, 0x4}}, 0x28)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)

4.188659639s ago: executing program 2 (id=1104):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x103080, 0x0)
io_setup(0x1, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r2, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d", 0xc2}], 0x1}}], 0x1, 0x42054)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
epoll_create(0x7)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')
read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020)
preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000100))
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

3.477288907s ago: executing program 5 (id=1105):
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(r1, 0xe, &(0x7f00000002c0)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x7, 0x60})
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
r4 = syz_pidfd_open(r1, 0x0)
setns(r4, 0x24020000)
r5 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000580)="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", 0x1000, r2)
keyctl$describe(0x6, r5, &(0x7f0000001580)=""/111, 0x6f)
syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r6)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x3, 0x100000000, 0x4}}, 0x28)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)

3.048897254s ago: executing program 4 (id=1106):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
fcntl$getownex(r2, 0x10, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000080)={0x7})
munlockall()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501242, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
poll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x2020}], 0x1, 0xb8)

3.002009457s ago: executing program 2 (id=1107):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x401, 0x10}, 0xc)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r0, 0x4)
r1 = socket(0x80000000000000a, 0x2, 0x0)
lseek(r1, 0x4, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000340)=""/181, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x350759, 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {0x7}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r7, 0x409, 0xb)

2.855145624s ago: executing program 1 (id=1108):
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(r1, 0xe, &(0x7f00000002c0)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x7, 0x60})
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
r4 = syz_pidfd_open(r1, 0x0)
setns(r4, 0x24020000)
r5 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000580)="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", 0x1000, r2)
keyctl$describe(0x6, r5, &(0x7f0000001580)=""/111, 0x6f)
syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fchdir(0xffffffffffffffff)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x3, 0x100000000, 0x4}}, 0x28)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)

1.851383836s ago: executing program 2 (id=1109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="40a7b609da583d7311b8d7be7ebc925368cd5094d9cfa1e78f98", 0x1a, 0xfecc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000240)={0x0, 0x6, "df8af5", 0xc, 0x4})
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0xfff, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0280b3a4f3000437ffff0000000000000000", @ANYRES32=r9, @ANYBLOB="0c009900ff03000039000000"], 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x0)
sendmmsg$inet6(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x1, @loopback, 0xcd5}, 0x1c, 0x0}}], 0x2, 0x40080)

1.8509068s ago: executing program 3 (id=1110):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x44000890)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x90}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
recvmmsg$unix(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x80)

1.141765427s ago: executing program 5 (id=1111):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.058682327s ago: executing program 3 (id=1112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket(0x21, 0x2, 0xa)
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000002100)=0xfff)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)

1.006011363s ago: executing program 5 (id=1113):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

921.433749ms ago: executing program 5 (id=1114):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r1 = getpid()
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000180)={0x1, 0x7fff})
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r2 = dup(r0)
write$cgroup_int(r2, &(0x7f0000001a00)=0x1000000000000014, 0x12)
sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x10000000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101041)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
semtimedop(0x0, 0x0, 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000003c0)=0x2, 0x12)

338.216928ms ago: executing program 1 (id=1115):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac620940601001378010203010902460091020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b00200007039a0305d15b89f26d0905bfdc94ab0903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x3, 0x42, {0x42, 0x10, "cbd5aba7e61cb058be540a9e8690257e9b72842707ede84280808b07ae87ea333ff7aefca5d193a6ae2e990449494f682d0eaa437561ef325423e38bc22f1e9f"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000840)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="0003000100002959343e0f9cf54b26f7edba0ebd62b9a179b45e586938b8bcd9aad55017ac9ab2aa442b5cc6eab68a1aadfcfac7b919da871fdd68e337dbc1b3bb4d9cb680a2204892f4de112483db7d99871ae9d2af71d7909ec3e6c2eddbd6ccb864ad024657fe690c1a875c05de04da36cf9fa53c283d21c9e6a07d16d5a980f34cede1075a27d51986f895b11023966fef2621d13e34b06421d68db76aac4f6d0a107a77664736f2fbec0c2ae5d49c4c1f6eeae2fe62938d7cfd39937b3dc233e5ea06a1aa789c1eb5682796cb50bffcab0a47d8df6b411b4e4a357104177a10cd8244a8000000000000000000"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)=ANY=[@ANYBLOB="20a7d5dee3bc200000"], &(0x7f0000000740)={0x20, 0x82, 0x1, '\a'}, &(0x7f0000000780)={0x20, 0x83, 0x3, "f3f93e"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "ad"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "407a89"}})
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)=@gettaction={0xa4, 0x32, 0x104, 0x70bd2c, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
connect$netlink(r4, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
socket$netlink(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10)

0s ago: executing program 5 (id=1116):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xc020, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1a80c0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4)

kernel console output (not intermixed with test programs):

16] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.486766][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.494001][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.501303][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.508604][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.515809][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.523030][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.530738][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.537916][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.545046][ T5616] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  340.558227][ T5616] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[  340.597419][ T8758] usbtmc 6-1:16.0: simple usb_control_msg returned 0
[  340.755709][ T5715] usb 4-1: failed to send control message: -71
[  340.770919][ T5715] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  340.782173][ T5715] usb 4-1: USB disconnect, device number 32
[  340.790507][ T5715] ch341 4-1:0.0: device disconnected
[  341.071859][ T5616] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device
[  341.094459][ T5616] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse
[  341.117100][ T5616] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71
[  341.147207][ T5616] usb 3-1: USB disconnect, device number 40
[  342.127564][ T4933] Bluetooth: hci6: command 0x1003 tx timeout
[  342.141094][ T5630] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  343.123154][ T5715] usb 6-1: USB disconnect, device number 11
[  343.287969][ T8785] netlink: 9 bytes leftover after parsing attributes in process `syz.3.819'.
[  343.475981][ T8793] netlink: 9 bytes leftover after parsing attributes in process `syz.5.822'.
[  344.190282][ T8799] FAULT_INJECTION: forcing a failure.
[  344.190282][ T8799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.222148][ T8799] CPU: 0 UID: 0 PID: 8799 Comm: syz.3.824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.222176][ T8799] Tainted: [L]=SOFTLOCKUP
[  344.222182][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  344.222192][ T8799] Call Trace:
[  344.222198][ T8799]  <TASK>
[  344.222204][ T8799]  dump_stack_lvl+0x100/0x190
[  344.222230][ T8799]  should_fail_ex.cold+0x5/0xa
[  344.222255][ T8799]  _copy_from_user+0x2e/0xd0
[  344.222277][ T8799]  binder_ioctl+0x4cb/0x7550
[  344.222301][ T8799]  ? finish_task_switch.isra.0+0x384/0x1010
[  344.222327][ T8799]  ? rcu_is_watching+0x12/0xc0
[  344.222351][ T8799]  ? trace_sched_exit_tp+0x11c/0x160
[  344.222368][ T8799]  ? __schedule+0x12a7/0x67a0
[  344.222395][ T8799]  ? __pfx_binder_ioctl+0x10/0x10
[  344.222413][ T8799]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.222437][ T8799]  ? do_vfs_ioctl+0x226/0x13e0
[  344.222453][ T8799]  ? __pfx___schedule+0x10/0x10
[  344.222472][ T8799]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  344.222487][ T8799]  ? preempt_schedule_irq+0x7b/0x90
[  344.222507][ T8799]  ? rcu_is_watching+0x12/0xc0
[  344.222530][ T8799]  ? irqentry_exit+0x24d/0x970
[  344.222549][ T8799]  ? lockdep_hardirqs_on+0x78/0x100
[  344.222583][ T8799]  ? __pfx_binder_ioctl+0x10/0x10
[  344.222602][ T8799]  __x64_sys_ioctl+0x18e/0x210
[  344.222621][ T8799]  do_syscall_64+0x115/0x870
[  344.222642][ T8799]  ? clear_bhb_loop+0x40/0x90
[  344.222663][ T8799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.222681][ T8799] RIP: 0033:0x7fc94fd9ce59
[  344.222697][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.222712][ T8799] RSP: 002b:00007fc950bb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.222729][ T8799] RAX: ffffffffffffffda RBX: 00007fc950015fa0 RCX: 00007fc94fd9ce59
[  344.222741][ T8799] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000003
[  344.222751][ T8799] RBP: 00007fc950bb3090 R08: 0000000000000000 R09: 0000000000000000
[  344.222761][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.222771][ T8799] R13: 00007fc950016038 R14: 00007fc950015fa0 R15: 00007fff10ab77f8
[  344.222793][ T8799]  </TASK>
[  344.223881][ T8799] binder: 8798:8799 ioctl c0306201 200000000040 returned -14
[  344.538261][   T30] audit: type=1400 audit(1781455710.675:711): avc:  denied  { unmount } for  pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  344.864474][ T5715] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[  344.989946][ T5630] Bluetooth: hci3: unexpected event for opcode 0x2023
[  345.042417][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short
[  345.078614][ T5715] usb 4-1: config 2 has an invalid interface number: 42 but max is 1
[  346.124436][ T5715] usb 4-1: config 2 has an invalid interface number: 123 but max is 1
[  346.238188][ T5715] usb 4-1: config 2 has no interface number 0
[  346.251997][ T5715] usb 4-1: config 2 has no interface number 1
[  346.259719][ T5715] usb 4-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  346.289447][ T5715] usb 4-1: config 2 interface 123 has no altsetting 0
[  346.788723][ T8827] netlink: 76 bytes leftover after parsing attributes in process `syz.5.835'.
[  347.511605][   T30] audit: type=1400 audit(1781455713.635:712): avc:  denied  { write } for  pid=8832 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  347.577524][    T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  347.581819][   T30] audit: type=1400 audit(1781455713.715:713): avc:  denied  { read } for  pid=8844 comm="syz.4.840" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  347.698768][   T30] audit: type=1400 audit(1781455713.745:714): avc:  denied  { open } for  pid=8844 comm="syz.4.840" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  347.707977][ T5715] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  347.770850][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  347.788850][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.797627][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  347.809556][    T9] usb 6-1: config 202 has an invalid interface number: 36 but max is 0
[  347.819706][ T5715] usb 4-1: Interface #123 referenced by multiple IADs
[  347.828602][ T5715] usb 4-1: can't set config #2, error -71
[  347.835310][    T9] usb 6-1: config 202 has no interface number 0
[  347.852684][    T9] usb 6-1: config 202 interface 36 has no altsetting 0
[  347.860101][ T5715] usb 4-1: USB disconnect, device number 33
[  347.867360][   T29] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  347.877891][    T9] usb 6-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=bf.9f
[  347.889158][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.959969][ T8852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  347.970082][ T8852] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  348.237393][    T9] usb 6-1: Product: syz
[  348.248280][    T9] usb 6-1: Manufacturer: syz
[  348.262387][    T9] usb 6-1: SerialNumber: syz
[  348.370999][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.422895][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.473608][   T29] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  348.509972][    T9] gspca_main: conex-2.14.0 probing 0572:0041
[  348.510405][ T8857] syzkaller0: entered promiscuous mode
[  348.524141][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.538669][ T8857] syzkaller0: entered allmulticast mode
[  348.557345][   T29] usb 2-1: config 0 descriptor??
[  348.649800][ T8857] tipc: Started in network mode
[  348.654735][ T8857] tipc: Node identity b6ca6637c002, cluster identity 4711
[  348.662648][ T8857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.676481][ T8856] tipc: Resetting bearer <eth:syzkaller0>
[  348.716734][ T8856] tipc: Disabling bearer <eth:syzkaller0>
[  348.757940][    T9] usb 6-1: USB disconnect, device number 12
[  349.061115][   T29] hid_parser_main: 208 callbacks suppressed
[  349.061138][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.100796][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.118650][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.140588][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.160337][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.168637][ T8865] misc userio: Invalid payload size
[  349.182279][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.192474][ T8865] misc userio: The device must be registered before sending interrupts
[  349.206828][   T29] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0
[  349.234146][   T29] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  349.376813][  T804] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  349.518720][ T8868] FAULT_INJECTION: forcing a failure.
[  349.518720][ T8868] name failslab, interval 1, probability 0, space 0, times 0
[  349.532801][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.2.847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  349.532830][ T8868] Tainted: [L]=SOFTLOCKUP
[  349.532836][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  349.532846][ T8868] Call Trace:
[  349.532851][ T8868]  <TASK>
[  349.532858][ T8868]  dump_stack_lvl+0x100/0x190
[  349.532887][ T8868]  should_fail_ex.cold+0x5/0xa
[  349.532911][ T8868]  ? __pfx_crypto_alg_extsize+0x10/0x10
[  349.532935][ T8868]  should_failslab+0xc2/0x120
[  349.532953][ T8868]  ? __pfx_crypto_alg_extsize+0x10/0x10
[  349.532976][ T8868]  __kmalloc_node_noprof+0xe6/0x850
[  349.533002][ T8868]  ? crypto_alloc_tfmmem.isra.0+0x38/0x110
[  349.533027][ T8868]  ? __pfx_crypto_alg_extsize+0x10/0x10
[  349.533050][ T8868]  crypto_alloc_tfmmem.isra.0+0x38/0x110
[  349.533072][ T8868]  crypto_create_tfm_node+0x85/0x350
[  349.533090][ T8868]  ? vfs_getxattr_alloc+0x246/0x350
[  349.533117][ T8868]  crypto_alloc_tfm_node+0x102/0x260
[  349.533136][ T8868]  ? shmem_huge_global_enabled.isra.0+0x6c/0x210
[  349.533162][ T8868]  ima_alloc_tfm+0x1fa/0x2e0
[  349.533193][ T8868]  ima_calc_file_hash+0x1b5/0x380
[  349.533221][ T8868]  ima_collect_measurement+0x94f/0xb30
[  349.533245][ T8868]  ? __pfx_ima_collect_measurement+0x10/0x10
[  349.533286][ T8868]  ? vfs_getxattr_alloc+0xec/0x350
[  349.533312][ T8868]  ? ima_get_hash_algo+0x22d/0x400
[  349.533330][ T8868]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  349.533349][ T8868]  ? process_measurement+0xdfe/0x2350
[  349.533365][ T8868]  process_measurement+0xdfe/0x2350
[  349.533387][ T8868]  ? __pfx_process_measurement+0x10/0x10
[  349.533405][ T8868]  ? avc_has_perm+0x135/0x1e0
[  349.533420][ T8868]  ? __pfx_avc_has_perm+0x10/0x10
[  349.533464][ T8868]  ? find_held_lock+0x2b/0x80
[  349.533476][ T8868]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  349.533488][ T8868]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  349.533513][ T8868]  ? __file_map_prot_check+0x3b1/0x550
[  349.533531][ T8868]  ima_file_mmap+0x1bb/0x1e0
[  349.533548][ T8868]  ? __pfx_ima_file_mmap+0x10/0x10
[  349.533566][ T8868]  ? proc_fail_nth_write+0x9f/0x220
[  349.533580][ T8868]  security_mmap_file+0x278/0x9b0
[  349.533599][ T8868]  vm_mmap_pgoff+0xec/0x470
[  349.533613][ T8868]  ? find_held_lock+0x2b/0x80
[  349.533623][ T8868]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  349.533635][ T8868]  ? __fget_files+0x215/0x3d0
[  349.533652][ T8868]  ? __fget_files+0x21f/0x3d0
[  349.533669][ T8868]  ksys_mmap_pgoff+0x3cb/0x610
[  349.533683][ T8868]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  349.533695][ T8868]  ? fput+0x79/0x100
[  349.533710][ T8868]  ? ksys_write+0x1ac/0x250
[  349.533722][ T8868]  ? __pfx_ksys_write+0x10/0x10
[  349.533736][ T8868]  __x64_sys_mmap+0x125/0x190
[  349.533752][ T8868]  do_syscall_64+0x115/0x870
[  349.533767][ T8868]  ? clear_bhb_loop+0x40/0x90
[  349.533780][ T8868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.533792][ T8868] RIP: 0033:0x7f9702f9ce59
[  349.533803][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.533814][ T8868] RSP: 002b:00007f9703edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  349.533826][ T8868] RAX: ffffffffffffffda RBX: 00007f9703215fa0 RCX: 00007f9702f9ce59
[  349.533833][ T8868] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000
[  349.533840][ T8868] RBP: 00007f9703edc090 R08: 0000000000000005 R09: 0000000000000000
[  349.533846][ T8868] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[  349.533853][ T8868] R13: 00007f9703216038 R14: 00007f9703215fa0 R15: 00007ffcfe2d4be8
[  349.533868][ T8868]  </TASK>
[  349.534078][ T8868] ima: Can not allocate sha512 (reason: -12)
[  349.895130][  T804] usb 4-1: Using ep0 maxpacket: 16
[  349.901532][ T5616] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  349.902717][   T30] audit: type=1800 audit(1781455716.045:715): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.847" name="memory.current" dev="tmpfs" ino=1025 res=0 errno=0
[  349.932781][  T804] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  349.943206][  T804] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  349.957835][  T804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  349.967043][  T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  349.975109][  T804] usb 4-1: SerialNumber: syz
[  350.089090][ T5616] usb 6-1: config 0 has no interfaces?
[  350.095476][ T5616] usb 6-1: config 0 has no interfaces?
[  350.104159][ T5616] usb 6-1: config 0 has no interfaces?
[  350.109848][ T5616] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  350.119063][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.131821][ T5616] usb 6-1: config 0 descriptor??
[  350.185298][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.194664][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.215756][  T804] usb 4-1: USB disconnect, device number 34
[  350.343400][ T5616] usb 6-1: USB disconnect, device number 13
[  350.531084][   T29] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device
[  350.545767][   T29] pyra 0003:1E7D:2CF6.000A: couldn't install mouse
[  350.585280][   T29] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71
[  350.625588][   T29] usb 2-1: USB disconnect, device number 31
[  351.920568][ T5715] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  351.978855][   T30] audit: type=1400 audit(1781455718.105:716): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="bus" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  351.979286][   T30] audit: type=1400 audit(1781455718.105:717): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.076390][   T30] audit: type=1400 audit(1781455718.105:718): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.210093][   T30] audit: type=1400 audit(1781455718.105:719): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.392462][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short
[  352.514235][   T30] audit: type=1400 audit(1781455718.105:720): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.514676][   T30] audit: type=1400 audit(1781455718.215:721): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.636061][   T30] audit: type=1400 audit(1781455718.225:722): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="work" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  352.729931][ T5715] usb 2-1: config 2 has an invalid interface number: 42 but max is 1
[  352.902544][   T30] audit: type=1400 audit(1781455718.225:723): avc:  denied  { write } for  pid=8874 comm="syz.2.849" name="bus" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  352.925535][ T5715] usb 2-1: config 2 has an invalid interface number: 123 but max is 1
[  353.103601][ T5715] usb 2-1: config 2 has no interface number 0
[  353.128761][ T5715] usb 2-1: config 2 has no interface number 1
[  353.152490][ T5715] usb 2-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  353.171006][ T5715] usb 2-1: config 2 interface 123 has no altsetting 0
[  353.180855][   T30] audit: type=1400 audit(1781455719.305:724): avc:  denied  { write } for  pid=5624 comm="syz-executor" name="bus" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  353.317507][   T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  353.627901][   T10] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  353.675052][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.720637][   T10] usb 6-1: Product: syz
[  353.740631][   T10] usb 6-1: Manufacturer: syz
[  353.764218][   T10] usb 6-1: SerialNumber: syz
[  353.854882][   T10] usb 6-1: config 0 descriptor??
[  354.420661][ T5715] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  354.447615][ T8915] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  354.460354][ T8915] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  354.477187][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.526526][ T5715] usb 2-1: Interface #123 referenced by multiple IADs
[  354.797758][ T5715] usb 2-1: can't set config #2, error -71
[  355.188643][   T10] usb 6-1: ignoring: probably an ADSL modem
[  355.622923][ T8930] hugetlbfs: Bad value for 'size'
[  355.680516][ T8924] ip6tnl0: Caught tx_queue_len zero misconfig
[  355.739518][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  355.739538][   T30] audit: type=1400 audit(1781455721.735:727): avc:  denied  { ioctl } for  pid=8923 comm="syz.2.863" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  355.934473][    C0] raw-gadget.1 gadget.5: ignoring, device is not running
[  356.074284][ T5715] usb 2-1: USB disconnect, device number 32
[  356.081091][ T8924] netlink: 'syz.2.863': attribute type 1 has an invalid length.
[  356.092974][   T10] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  356.122654][   T10] usb 6-1: USB disconnect, device number 14
[  356.369019][  T990] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[  356.498524][ T5616] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  356.564153][  T990] usb 5-1: unable to get BOS descriptor or descriptor too short
[  356.623155][  T990] usb 5-1: config 2 has an invalid interface number: 42 but max is 1
[  356.631835][  T990] usb 5-1: config 2 has an invalid interface association descriptor of length 5, skipping
[  356.664359][  T990] usb 5-1: config 2 has an invalid interface number: 123 but max is 1
[  356.684873][  T990] usb 5-1: config 2 has no interface number 0
[  356.696855][ T5616] usb 4-1: Using ep0 maxpacket: 16
[  356.701458][  T990] usb 5-1: config 2 has no interface number 1
[  356.707003][ T5616] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  356.717256][  T990] usb 5-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  356.726763][ T5616] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  356.737371][  T990] usb 5-1: config 2 interface 123 has no altsetting 0
[  356.749588][ T5616] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  356.765074][ T5616] usb 4-1: config 1 interface 0 has no altsetting 0
[  356.782273][ T5616] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  356.793412][  T990] usb 5-1: string descriptor 0 read error: -22
[  356.800828][  T990] usb 5-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  356.811570][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.813704][  T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.835717][ T8928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  356.835720][ T5616] usb 4-1: Product: syz
[  356.835739][ T5616] usb 4-1: Manufacturer: syz
[  356.866323][ T5616] usb 4-1: SerialNumber: syz
[  358.011903][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.022124][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.084485][   T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  358.215596][ T5616] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  358.277693][   T29] usb 6-1: Using ep0 maxpacket: 32
[  359.469572][  T990] qmi_wwan 5-1:2.42: probe with driver qmi_wwan failed with error -22
[  359.489398][  T990] usb 5-1: USB disconnect, device number 34
[  360.130509][   T29] usb 6-1: device descriptor read/all, error -71
[  360.150951][ T5616] usb 4-1: USB disconnect, device number 35
[  360.180684][ T5616] usblp0: removed
[  360.903355][ T8974] mmap: syz.3.875 (8974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  361.159877][   T30] audit: type=1400 audit(1781455727.285:728): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="bus" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  361.163682][   T30] audit: type=1400 audit(1781455727.295:729): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.273881][   T30] audit: type=1400 audit(1781455727.295:730): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.446892][ T5616] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  361.516840][   T30] audit: type=1400 audit(1781455727.295:731): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.575120][   T30] audit: type=1400 audit(1781455727.295:732): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.677337][   T30] audit: type=1400 audit(1781455727.295:733): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.787264][   T30] audit: type=1400 audit(1781455727.295:734): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="work" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  361.884809][   T30] audit: type=1400 audit(1781455727.295:735): avc:  denied  { write } for  pid=8966 comm="syz.5.874" name="bus" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  361.980802][  T990] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  362.075641][ T5616] usb 3-1: unable to get BOS descriptor or descriptor too short
[  362.093366][ T5616] usb 3-1: config 2 has an invalid interface number: 42 but max is 1
[  362.104984][ T5616] usb 3-1: config 2 has an invalid interface number: 123 but max is 1
[  362.114307][ T5616] usb 3-1: config 2 has no interface number 0
[  362.121026][ T5616] usb 3-1: config 2 has no interface number 1
[  362.143770][   T30] audit: type=1400 audit(1781455728.265:736): avc:  denied  { write } for  pid=8096 comm="syz-executor" name="bus" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  362.144203][   T30] audit: type=1400 audit(1781455728.265:737): avc:  denied  { write } for  pid=8096 comm="syz-executor" name="bus" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  362.236878][ T5616] usb 3-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  362.348681][ T5616] usb 3-1: config 2 interface 123 has no altsetting 0
[  362.359623][ T5616] usb 3-1: string descriptor 0 read error: -22
[  362.367523][  T990] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  362.369066][ T5616] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  362.377300][  T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.386367][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.398083][  T990] usb 2-1: Product: syz
[  362.412066][ T5616] usb 3-1: Interface #123 referenced by multiple IADs
[  362.426314][  T990] usb 2-1: Manufacturer: syz
[  362.439996][  T990] usb 2-1: SerialNumber: syz
[  362.444982][ T8976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  362.473110][  T990] usb 2-1: config 0 descriptor??
[  362.825982][  T990] usb 2-1: ignoring: probably an ADSL modem
[  362.934614][ T8989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  362.951064][ T8989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  363.056277][  T990] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  363.077039][  T990] usb 2-1: USB disconnect, device number 33
[  363.294524][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.314315][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.386840][   T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  363.660260][   T29] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  364.168763][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.177584][   T29] usb 6-1: Product: syz
[  364.181790][   T29] usb 6-1: Manufacturer: syz
[  364.186410][   T29] usb 6-1: SerialNumber: syz
[  364.197023][   T29] usb 6-1: config 0 descriptor??
[  364.281783][ T9008] FAULT_INJECTION: forcing a failure.
[  364.281783][ T9008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.298071][ T9008] CPU: 1 UID: 0 PID: 9008 Comm: syz.1.885 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  364.298104][ T9008] Tainted: [L]=SOFTLOCKUP
[  364.298110][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  364.298120][ T9008] Call Trace:
[  364.298126][ T9008]  <TASK>
[  364.298134][ T9008]  dump_stack_lvl+0x100/0x190
[  364.298160][ T9008]  should_fail_ex.cold+0x5/0xa
[  364.298185][ T9008]  _copy_to_user+0x32/0xd0
[  364.298208][ T9008]  simple_read_from_buffer+0xcb/0x170
[  364.298232][ T9008]  proc_fail_nth_read+0x1af/0x230
[  364.298251][ T9008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.298270][ T9008]  ? rw_verify_area+0xce/0x6d0
[  364.298286][ T9008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.298305][ T9008]  vfs_read+0x1e4/0xb30
[  364.298326][ T9008]  ? __pfx_vfs_read+0x10/0x10
[  364.298345][ T9008]  ? __fget_files+0x215/0x3d0
[  364.298372][ T9008]  ? __fget_files+0x21f/0x3d0
[  364.298401][ T9008]  ksys_read+0x12a/0x250
[  364.298419][ T9008]  ? __pfx_ksys_read+0x10/0x10
[  364.298440][ T9008]  ? rcu_is_watching+0x12/0xc0
[  364.298470][ T9008]  do_syscall_64+0x115/0x870
[  364.298493][ T9008]  ? clear_bhb_loop+0x40/0x90
[  364.298515][ T9008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.298534][ T9008] RIP: 0033:0x7fb8f675d68e
[  364.298549][ T9008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  364.298566][ T9008] RSP: 002b:00007fb8f75ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  364.298583][ T9008] RAX: ffffffffffffffda RBX: 00007fb8f75cd6c0 RCX: 00007fb8f675d68e
[  364.298594][ T9008] RDX: 000000000000000f RSI: 00007fb8f75cd0a0 RDI: 0000000000000005
[  364.298605][ T9008] RBP: 00007fb8f75cd090 R08: 0000000000000000 R09: 0000000000000000
[  364.298615][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.298625][ T9008] R13: 00007fb8f6a16038 R14: 00007fb8f6a15fa0 R15: 00007ffd155ad598
[  364.298650][ T9008]  </TASK>
[  364.560882][   T29] usb 6-1: ignoring: probably an ADSL modem
[  364.622320][ T9012] 8021q: adding VLAN 0 to HW filter on device bond2
[  364.646769][ T5772] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  364.763548][   T29] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  364.775072][   T29] usb 6-1: USB disconnect, device number 17
[  364.808490][ T5772] usb 4-1: Using ep0 maxpacket: 32
[  364.816052][ T5772] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  364.826304][ T5772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.836971][ T5772] usb 4-1: config 0 has no interface number 0
[  364.843106][ T5772] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  364.858865][ T5772] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  364.868945][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.886806][ T5772] usb 4-1: Product: syz
[  364.895540][ T5772] usb 4-1: Manufacturer: syz
[  364.900642][ T5772] usb 4-1: SerialNumber: syz
[  364.908791][ T5772] usb 4-1: config 0 descriptor??
[  364.919676][ T5772] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input32
[  365.121605][  T990] usb 4-1: USB disconnect, device number 36
[  365.276754][   T29] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  365.426855][   T29] usb 2-1: Using ep0 maxpacket: 16
[  365.433834][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  365.447388][   T29] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  365.456599][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.465706][   T29] usb 2-1: Product: syz
[  365.470156][   T29] usb 2-1: Manufacturer: syz
[  365.475134][   T29] usb 2-1: SerialNumber: syz
[  365.481749][   T29] usb 2-1: config 0 descriptor??
[  365.489778][   T29] hub 2-1:0.0: bad descriptor, ignoring hub
[  365.495780][   T29] hub 2-1:0.0: probe with driver hub failed with error -5
[  365.505367][   T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  365.585440][ T5616] qmi_wwan 3-1:2.42: probe with driver qmi_wwan failed with error -22
[  365.597530][ T5772] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  365.625662][ T5616] usb 3-1: USB disconnect, device number 41
[  365.753512][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.762858][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.777133][ T5772] usb 6-1: Using ep0 maxpacket: 16
[  365.783784][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  365.794703][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  365.806395][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  365.818242][ T5772] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  365.828277][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  365.837981][ T5772] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  365.847726][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  365.862639][ T5772] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  365.873150][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.881202][ T5772] usb 6-1: Product: syz
[  365.885382][ T5772] usb 6-1: Manufacturer: syz
[  365.890059][ T5772] usb 6-1: SerialNumber: syz
[  365.896282][ T5772] usb 6-1: config 0 descriptor??
[  365.902232][ T9022] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  365.911177][ T5772] iuu_phoenix 6-1:0.0: iuu_phoenix converter detected
[  365.919855][ T5772] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[  365.977282][  T990] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  366.001002][ T5772] usb 2-1: USB disconnect, device number 34
[  366.066834][ T5616] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  366.115802][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.124893][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.134022][  T990] usb 4-1: Using ep0 maxpacket: 16
[  366.134700][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.140964][  T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  366.148002][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.174258][  T990] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  366.190586][  T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.205219][  T990] usb 4-1: Product: syz
[  366.213551][  T990] usb 4-1: Manufacturer: syz
[  366.221537][  T990] usb 4-1: SerialNumber: syz
[  366.236505][  T990] usb 4-1: config 0 descriptor??
[  366.238437][ T5616] usb 3-1: Using ep0 maxpacket: 16
[  366.244057][  T990] hub 4-1:0.0: bad descriptor, ignoring hub
[  366.257250][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  366.260578][  T990] hub 4-1:0.0: probe with driver hub failed with error -5
[  366.273345][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  366.273437][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  366.273494][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  366.273547][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.273597][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  366.273648][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  366.276107][ T5616] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  366.286556][  T990] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  366.294828][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.294849][ T5616] usb 3-1: Product: syz
[  366.294862][ T5616] usb 3-1: Manufacturer: syz
[  366.294875][ T5616] usb 3-1: SerialNumber: syz
[  366.314458][ T5616] usb 3-1: config 0 descriptor??
[  366.500762][ T5772] usb 6-1: USB disconnect, device number 18
[  366.512554][ T5772] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  366.543082][ T5772] iuu_phoenix 6-1:0.0: device disconnected
[  366.556845][ T9026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  366.613889][ T5616] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected
[  366.642249][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.657058][ T5616] usb 3-1: iuu_phoenix converter now attached to ttyUSB0
[  366.677511][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.751456][ T9036] netlink: 9 bytes leftover after parsing attributes in process `syz.1.895'.
[  366.761468][  T990] usb 4-1: USB disconnect, device number 37
[  366.864446][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.877728][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.891403][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.901226][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.030885][ T5723] usb 3-1: USB disconnect, device number 42
[  367.037451][   T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  367.082297][ T9044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  367.091256][ T9044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  367.102204][ T5723] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  367.145777][ T5723] iuu_phoenix 3-1:0.0: device disconnected
[  367.207219][   T10] usb 5-1: Using ep0 maxpacket: 16
[  367.220241][   T10] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  367.233417][   T10] usb 5-1: config 0 has no interface number 0
[  367.262710][   T10] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  367.285255][   T10] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  367.303455][   T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  367.313851][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.322327][   T10] usb 5-1: Product: syz
[  367.326522][   T10] usb 5-1: Manufacturer: syz
[  367.335642][   T10] usb 5-1: SerialNumber: syz
[  367.343485][   T10] usb 5-1: config 0 descriptor??
[  367.349748][ T9035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  367.378834][ T9035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  367.573136][ T9052] kvm: kvm [9050]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  367.617992][ T9035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  367.645967][ T9035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  367.865227][ T9062] fuse: Unknown parameter 'fd0x0000000000000003'
[  367.885609][   T10] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  367.914811][   T10] asix 5-1:0.34: probe with driver asix failed with error -61
[  367.970321][  T990] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  368.133977][  T990] usb 3-1: unable to get BOS descriptor or descriptor too short
[  368.156367][  T990] usb 3-1: config 2 has an invalid interface number: 42 but max is 1
[  368.226798][  T990] usb 3-1: config 2 has an invalid interface number: 123 but max is 1
[  368.237123][  T990] usb 3-1: config 2 has no interface number 0
[  368.243865][  T990] usb 3-1: config 2 has no interface number 1
[  368.258035][  T990] usb 3-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  368.416996][  T990] usb 3-1: config 2 interface 123 has no altsetting 0
[  368.541726][  T990] usb 3-1: string descriptor 0 read error: -22
[  368.550139][  T990] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  368.570217][  T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.584337][  T990] usb 3-1: Interface #123 referenced by multiple IADs
[  368.602119][ T9058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  368.732515][ T9076] FAULT_INJECTION: forcing a failure.
[  368.732515][ T9076] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.763385][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.5.908 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  368.763413][ T9076] Tainted: [L]=SOFTLOCKUP
[  368.763419][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  368.763429][ T9076] Call Trace:
[  368.763435][ T9076]  <TASK>
[  368.763442][ T9076]  dump_stack_lvl+0x100/0x190
[  368.763466][ T9076]  should_fail_ex.cold+0x5/0xa
[  368.763489][ T9076]  _copy_from_user+0x2e/0xd0
[  368.763507][ T9076]  ____sys_sendmsg+0x1d1/0xb70
[  368.763523][ T9076]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.763542][ T9076]  ___sys_sendmsg+0x190/0x1e0
[  368.763561][ T9076]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.763607][ T9076]  __sys_sendmsg+0x170/0x220
[  368.763633][ T9076]  ? __pfx___sys_sendmsg+0x10/0x10
[  368.763666][ T9076]  ? rcu_is_watching+0x12/0xc0
[  368.763688][ T9076]  do_syscall_64+0x115/0x870
[  368.763703][ T9076]  ? clear_bhb_loop+0x40/0x90
[  368.763722][ T9076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.763740][ T9076] RIP: 0033:0x7f5030d9ce59
[  368.763754][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.763769][ T9076] RSP: 002b:00007f502eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.763786][ T9076] RAX: ffffffffffffffda RBX: 00007f5031015fa0 RCX: 00007f5030d9ce59
[  368.763795][ T9076] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  368.763802][ T9076] RBP: 00007f502eff6090 R08: 0000000000000000 R09: 0000000000000000
[  368.763808][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.763815][ T9076] R13: 00007f5031016038 R14: 00007f5031015fa0 R15: 00007ffdc7cb8348
[  368.763828][ T9076]  </TASK>
[  369.052761][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'.
[  369.111736][ T9079] bond1: Invalid ad_actor_system MAC address.
[  369.119486][ T9079] bond1: option ad_actor_system: invalid value (1)
[  369.128074][ T9079] bond1 (unregistering): Released all slaves
[  369.731846][ T9088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  369.740673][ T9088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  369.781740][   T10] usb 5-1: USB disconnect, device number 35
[  369.815182][ T9089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.935034][ T9089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.145658][ T9101] netlink: 'syz.5.915': attribute type 10 has an invalid length.
[  371.354258][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  371.965613][ T9101] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  372.354852][  T990] qmi_wwan 3-1:2.42: probe with driver qmi_wwan failed with error -22
[  372.383013][  T990] usb 3-1: USB disconnect, device number 43
[  373.121019][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  373.312745][ T9127] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  373.321543][ T9127] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  373.363850][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  373.363865][   T30] audit: type=1400 audit(1781455739.495:741): avc:  denied  { read } for  pid=9124 comm="syz.5.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.647312][ T5772] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  374.208648][ T5772] usb 5-1: Using ep0 maxpacket: 8
[  374.242937][ T5772] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  374.316928][ T9141] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  374.325928][ T9141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  374.523041][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.546393][ T5772] usb 5-1: Product: syz
[  374.565573][ T5772] usb 5-1: Manufacturer: syz
[  374.875163][ T5772] usb 5-1: SerialNumber: syz
[  374.980325][ T5772] usb 5-1: config 0 descriptor??
[  374.997868][ T5772] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  375.006841][ T5772] dvb-usb: bulk message failed: -22 (2/0)
[  375.022980][ T5772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  375.034844][ T5772] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  375.432824][ T5772] usb 5-1: media controller created
[  375.475426][ T5772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  375.510555][ T9130] fuse: Bad value for 'rootmode'
[  375.724502][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.287267][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.346278][ T9130] netlink: 'syz.4.924': attribute type 1 has an invalid length.
[  376.780416][   T29] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  376.990322][   T29] usb 6-1: unable to get BOS descriptor or descriptor too short
[  377.059058][ T5616] usb 2-1: new low-speed USB device number 35 using dummy_hcd
[  377.085558][ T9130] 8021q: adding VLAN 0 to HW filter on device bond1
[  377.096238][   T29] usb 6-1: config 2 has an invalid interface number: 42 but max is 1
[  377.112560][ T5772] cxusb: set interface failed
[  377.121301][   T29] usb 6-1: config 2 has an invalid interface number: 123 but max is 1
[  377.129611][ T5772] dvb-usb: bulk message failed: -22 (1/0)
[  377.138840][   T29] usb 6-1: config 2 has no interface number 0
[  377.154531][   T29] usb 6-1: config 2 has no interface number 1
[  377.168334][   T29] usb 6-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  377.181375][   T29] usb 6-1: config 2 interface 123 has no altsetting 0
[  377.192158][ T5772] DVB: Unable to find symbol mt352_attach()
[  378.138470][ T5616] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  378.154976][ T5772] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  378.185877][ T5616] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  378.196626][ T5616] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  378.218059][ T5616] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  378.229731][   T29] usb 6-1: string descriptor 0 read error: -22
[  378.239334][   T29] usb 6-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  378.256471][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  378.272946][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.288210][ T9172] capability: warning: `syz.2.935' uses 32-bit capabilities (legacy support in use)
[  378.301933][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  378.322014][   T29] usb 6-1: Interface #123 referenced by multiple IADs
[  378.331330][ T5616] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  378.331439][ T9155] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  378.357876][ T5772] rc_core: IR keymap rc-dvico-portable not found
[  378.377034][ T5772] Registered IR keymap rc-empty
[  378.387414][ T5616] usb 2-1: language id specifier not provided by device, defaulting to English
[  378.397789][ T5772] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  378.417798][ T5616] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  378.427328][ T5772] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input33
[  378.438747][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.444922][ T9176] netlink: 180 bytes leftover after parsing attributes in process `syz.2.937'.
[  378.448217][ T5616] usb 2-1: Manufacturer: 躔
[  378.462213][ T5772] dvb-usb: schedule remote query interval to 100 msecs.
[  378.471819][ T5772] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  378.484474][ T5616] usb 2-1: config 0 descriptor??
[  378.529185][ T5616] hub 2-1:0.0: bad descriptor, ignoring hub
[  378.538309][ T5772] usb 5-1: USB disconnect, device number 36
[  378.589301][ T5616] hub 2-1:0.0: probe with driver hub failed with error -5
[  379.000211][ T5616] input: 躔 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34
[  379.848541][   T29] qmi_wwan 6-1:2.42: probe with driver qmi_wwan failed with error -22
[  379.890147][ T5616] usb 2-1: USB disconnect, device number 35
[  379.953609][   T29] usb 6-1: USB disconnect, device number 19
[  379.988057][ T5772] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  380.697536][ T5772] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  380.962804][ T5772] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  381.012406][ T5772] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  381.064761][ T5772] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  381.091089][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.115268][ T9174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  381.418054][ T5772] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  382.295836][ T9206] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  382.358646][ T5772] usb 5-1: USB disconnect, device number 37
[  382.786243][ T9212] hugetlbfs: Bad value for 'size'
[  384.247229][   T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  384.381519][ T9227] netlink: 'syz.4.949': attribute type 1 has an invalid length.
[  384.409572][   T10] usb 4-1: config 0 has an invalid interface number: 70 but max is 0
[  384.418379][   T10] usb 4-1: config 0 has no interface number 0
[  384.424688][   T10] usb 4-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  384.436132][   T10] usb 4-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83
[  384.464145][   T10] usb 4-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64
[  384.499352][   T10] usb 4-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  384.555679][   T10] usb 4-1: config 0 interface 70 has no altsetting 0
[  384.636740][   T10] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  384.664840][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.743680][   T10] usb 4-1: Product: syz
[  384.775841][   T10] usb 4-1: Manufacturer: syz
[  384.792583][ T9232] netlink: 9 bytes leftover after parsing attributes in process `syz.4.951'.
[  384.842764][   T10] usb 4-1: SerialNumber: syz
[  384.992168][   T10] usb 4-1: config 0 descriptor??
[  385.016398][ T9218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  385.328392][ T5723] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  385.352086][   T10] ti_usb_3410_5052 4-1:0.70: TI USB 3410 1 port adapter converter detected
[  385.583527][ T5723] usb 2-1: Using ep0 maxpacket: 16
[  385.598174][   T10] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  385.611184][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  385.630729][   T10] usb 4-1: USB disconnect, device number 38
[  385.643776][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  385.662199][   T10] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  385.673349][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  385.685752][   T10] ti_usb_3410_5052 4-1:0.70: device disconnected
[  385.697492][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  385.709079][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  385.721031][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  385.738383][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  385.755605][ T5723] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  385.766209][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.775806][ T5723] usb 2-1: Product: syz
[  385.780956][ T5723] usb 2-1: Manufacturer: syz
[  385.786670][ T5723] usb 2-1: SerialNumber: syz
[  385.804546][ T5723] usb 2-1: config 0 descriptor??
[  385.821800][ T9237] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  385.831573][ T5723] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected
[  385.938036][ T5723] usb 2-1: iuu_phoenix converter now attached to ttyUSB0
[  386.341880][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.354517][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.367955][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.376672][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.752859][ T5715] usb 2-1: USB disconnect, device number 36
[  386.773043][ T5715] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  386.831457][ T5715] iuu_phoenix 2-1:0.0: device disconnected
[  386.838855][ T9253] overlayfs: missing 'lowerdir'
[  387.083938][ T9261] netlink: 9 bytes leftover after parsing attributes in process `syz.2.959'.
[  387.129256][ T9260] hugetlbfs: Bad value for 'size'
[  388.018153][ T9264] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  388.026432][ T9264] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  388.034920][ T9264] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  388.147393][ T9275] FAULT_INJECTION: forcing a failure.
[  388.147393][ T9275] name failslab, interval 1, probability 0, space 0, times 0
[  388.161128][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.2.965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  388.161155][ T9275] Tainted: [L]=SOFTLOCKUP
[  388.161161][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  388.161171][ T9275] Call Trace:
[  388.161176][ T9275]  <TASK>
[  388.161183][ T9275]  dump_stack_lvl+0x100/0x190
[  388.161207][ T9275]  should_fail_ex.cold+0x5/0xa
[  388.161230][ T9275]  ? tomoyo_encode2+0xfb/0x3c0
[  388.161253][ T9275]  should_failslab+0xc2/0x120
[  388.161272][ T9275]  __kmalloc_noprof+0xe0/0x850
[  388.161301][ T9275]  tomoyo_encode2+0xfb/0x3c0
[  388.161330][ T9275]  tomoyo_encode+0x29/0x50
[  388.161354][ T9275]  tomoyo_realpath_from_path+0x18c/0x690
[  388.161385][ T9275]  tomoyo_path_number_perm+0x23c/0x580
[  388.161407][ T9275]  ? tomoyo_path_number_perm+0x22e/0x580
[  388.161430][ T9275]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  388.161465][ T9275]  ? find_held_lock+0x2b/0x80
[  388.161476][ T9275]  ? __fget_files+0x215/0x3d0
[  388.161490][ T9275]  ? hook_file_ioctl_common+0x149/0x410
[  388.161501][ T9275]  ? __fget_files+0x215/0x3d0
[  388.161517][ T9275]  ? __fget_files+0x21f/0x3d0
[  388.161534][ T9275]  security_file_ioctl+0xd3/0x230
[  388.161551][ T9275]  __x64_sys_ioctl+0xb7/0x210
[  388.161564][ T9275]  do_syscall_64+0x115/0x870
[  388.161580][ T9275]  ? clear_bhb_loop+0x40/0x90
[  388.161595][ T9275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.161607][ T9275] RIP: 0033:0x7f9702f9ce59
[  388.161617][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.161628][ T9275] RSP: 002b:00007f9703edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  388.161639][ T9275] RAX: ffffffffffffffda RBX: 00007f9703215fa0 RCX: 00007f9702f9ce59
[  388.161647][ T9275] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  388.161653][ T9275] RBP: 00007f9703edc090 R08: 0000000000000000 R09: 0000000000000000
[  388.161660][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.161666][ T9275] R13: 00007f9703216038 R14: 00007f9703215fa0 R15: 00007ffcfe2d4be8
[  388.161680][ T9275]  </TASK>
[  388.161689][ T9275] ERROR: Out of memory at tomoyo_realpath_from_path.
[  388.326793][ T5616] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  388.467301][ T5715] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  388.576843][ T5616] usb 2-1: Using ep0 maxpacket: 32
[  388.585098][ T5616] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  388.598786][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.621329][ T5616] usb 2-1: Product: syz
[  388.633800][ T5616] usb 2-1: Manufacturer: syz
[  388.644624][ T5616] usb 2-1: SerialNumber: syz
[  388.652018][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.669070][ T5616] usb 2-1: config 0 descriptor??
[  388.758053][ T5715] usb 5-1: config 0 has no interfaces?
[  388.818229][ T5715] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  388.836187][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.869257][ T5715] usb 5-1: Product: syz
[  388.889830][ T5715] usb 5-1: Manufacturer: syz
[  388.904505][ T5715] usb 5-1: SerialNumber: syz
[  389.008264][ T5616] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 037
[  389.055231][ T5715] usb 5-1: config 0 descriptor??
[  389.118776][  T804] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  389.307973][  T804] usb 4-1: Using ep0 maxpacket: 32
[  389.477563][  T804] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  389.493888][  T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.509455][  T804] usb 4-1: Product: syz
[  389.514250][  T804] usb 4-1: Manufacturer: syz
[  389.522554][  T804] usb 4-1: SerialNumber: syz
[  389.578180][  T804] usb 4-1: config 0 descriptor??
[  390.283490][  T804] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 039
[  391.216531][ T9304] netdevsim netdevsim5 
€Â: renamed from netdevsim0 (while UP)
[  391.253284][ T9271] i2c i2c-1: failure writing data
[  391.270336][ T9285] i2c i2c-1: failure writing data
[  391.291839][   T30] audit: type=1400 audit(1781455757.425:742): avc:  denied  { map } for  pid=9296 comm="syz.5.971" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  391.709126][ T5715] usb 5-1: USB disconnect, device number 38
[  391.752231][ T5772] usb 2-1: USB disconnect, device number 37
[  391.802648][   T30] audit: type=1326 audit(1781455757.935:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f679ce59 code=0x7ffc0000
[  392.013947][   T30] audit: type=1326 audit(1781455757.935:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f679ce59 code=0x7ffc0000
[  392.972591][   T30] audit: type=1326 audit(1781455757.935:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb8f679ce59 code=0x7ffc0000
[  393.094556][  T804] usb 4-1: USB disconnect, device number 39
[  393.107061][   T30] audit: type=1326 audit(1781455757.935:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f679ce59 code=0x7ffc0000
[  393.208361][   T30] audit: type=1326 audit(1781455757.935:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f679ce59 code=0x7ffc0000
[  393.411832][ T9322] FAULT_INJECTION: forcing a failure.
[  393.411832][ T9322] name failslab, interval 1, probability 0, space 0, times 0
[  393.425509][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.5.979 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.425538][ T9322] Tainted: [L]=SOFTLOCKUP
[  393.425543][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  393.425553][ T9322] Call Trace:
[  393.425558][ T9322]  <TASK>
[  393.425565][ T9322]  dump_stack_lvl+0x100/0x190
[  393.425590][ T9322]  should_fail_ex.cold+0x5/0xa
[  393.425614][ T9322]  should_failslab+0xc2/0x120
[  393.425634][ T9322]  __kmalloc_cache_noprof+0x7a/0x6f0
[  393.425656][ T9322]  ? pagemap_read+0x225/0x830
[  393.425675][ T9322]  ? security_capable+0xbd/0x260
[  393.425700][ T9322]  pagemap_read+0x225/0x830
[  393.425722][ T9322]  ? avc_policy_seqno+0x9/0x20
[  393.425741][ T9322]  ? __pfx_pagemap_read+0x10/0x10
[  393.425764][ T9322]  ? rw_verify_area+0xce/0x6d0
[  393.425781][ T9322]  ? __pfx_pagemap_read+0x10/0x10
[  393.425800][ T9322]  vfs_read+0x1e4/0xb30
[  393.425822][ T9322]  ? __pfx_vfs_read+0x10/0x10
[  393.425838][ T9322]  ? find_held_lock+0x2b/0x80
[  393.425853][ T9322]  ? __fget_files+0x215/0x3d0
[  393.425873][ T9322]  ? __fget_files+0x215/0x3d0
[  393.425899][ T9322]  ? __fget_files+0x21f/0x3d0
[  393.425927][ T9322]  __x64_sys_pread64+0x1eb/0x250
[  393.425947][ T9322]  ? __pfx___x64_sys_pread64+0x10/0x10
[  393.425974][ T9322]  do_syscall_64+0x115/0x870
[  393.425995][ T9322]  ? clear_bhb_loop+0x40/0x90
[  393.426017][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.426034][ T9322] RIP: 0033:0x7f5030d9ce59
[  393.426049][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.426065][ T9322] RSP: 002b:00007f502efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  393.426083][ T9322] RAX: ffffffffffffffda RBX: 00007f5031016090 RCX: 00007f5030d9ce59
[  393.426094][ T9322] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000008
[  393.426104][ T9322] RBP: 00007f502efd5090 R08: 0000000000000000 R09: 0000000000000000
[  393.426119][ T9322] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000001
[  393.426129][ T9322] R13: 00007f5031016128 R14: 00007f5031016090 R15: 00007ffdc7cb8348
[  393.426153][ T9322]  </TASK>
[  393.446791][ T5772] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  393.918007][ T5772] usb 2-1: Using ep0 maxpacket: 16
[  393.964399][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  394.028079][ T9328] hugetlbfs: Bad value for 'size'
[  394.066624][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  394.198134][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  394.293992][ T5772] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  394.386132][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  394.508923][ T5772] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  394.594768][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  394.640299][ T5772] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  394.663496][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.692029][ T5772] usb 2-1: Product: syz
[  394.791362][ T9338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  394.803102][ T9338] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  394.848355][ T5772] usb 2-1: Manufacturer: syz
[  394.948607][ T5772] usb 2-1: SerialNumber: syz
[  395.095063][ T9340] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  395.104211][ T9340] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  395.324018][ T5772] usb 2-1: config 0 descriptor??
[  395.343226][ T9315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  395.368832][ T5772] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected
[  395.394375][ T5772] usb 2-1: iuu_phoenix converter now attached to ttyUSB0
[  395.557882][ T9346] overlayfs: missing 'lowerdir'
[  395.583924][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.608176][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.623974][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.633565][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.713908][ T5616] usb 2-1: USB disconnect, device number 38
[  395.739684][ T5616] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  395.769698][ T5616] iuu_phoenix 2-1:0.0: device disconnected
[  395.791275][ T9351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.988'.
[  395.856811][ T5772] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  396.013522][ T9357] sg_write: data in/out 431068/146 bytes for SCSI command 0x2-- guessing data in;
[  396.013522][ T9357]    program syz.3.985 not setting count and/or reply_len properly
[  396.061777][ T5772] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  396.087042][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.112267][ T5772] usb 3-1: Product: syz
[  396.124582][ T5772] usb 3-1: Manufacturer: syz
[  396.144827][ T5772] usb 3-1: SerialNumber: syz
[  396.378984][ T5772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  396.425048][ T5772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  396.444400][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  396.456573][ T5772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  396.509977][ T5772] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  396.541485][ T9366] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  396.550365][ T5772] usb 3-1: USB disconnect, device number 44
[  396.607636][   T10] usb 6-1: Using ep0 maxpacket: 32
[  396.618005][   T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  396.635653][   T10] usb 6-1: config 0 has no interface number 0
[  396.654503][   T10] usb 6-1: config 0 interface 12 has no altsetting 0
[  396.680002][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  396.703274][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.722187][   T10] usb 6-1: Product: syz
[  396.732494][   T10] usb 6-1: Manufacturer: syz
[  396.742456][   T10] usb 6-1: SerialNumber: syz
[  396.763693][   T10] usb 6-1: config 0 descriptor??
[  396.959577][ T9371] loop5: detected capacity change from 0 to 2640
[  396.969511][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  396.977908][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  396.987107][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  396.995441][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.005530][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.015360][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.023621][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.031907][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.039998][ T9371] ldm_validate_partition_table(): Disk read failed.
[  397.048181][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.056658][ T9371] Buffer I/O error on dev loop5, logical block 0, async page read
[  397.065238][ T9371] Dev loop5: unable to read RDB block 0
[  397.072438][ T9371]  loop5: unable to read partition table
[  397.078875][ T9371] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  397.098383][   T30] audit: type=1400 audit(1781455763.085:748): avc:  denied  { append } for  pid=9367 comm="syz.1.993" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  397.781663][ T9376] netlink: 17 bytes leftover after parsing attributes in process `syz.4.996'.
[  397.847658][   T10] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  397.855196][   T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  397.862907][   T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  397.870910][   T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  397.887185][   T10] usb 6-1: USB disconnect, device number 20
[  399.183240][ T9382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  399.193526][ T9382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  399.915459][ T5616] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  400.084096][ T5616] usb 5-1: No LPM exit latency info found, disabling LPM.
[  400.174644][ T5616] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  400.368768][ T5616] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  400.459347][ T5616] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  400.476087][   T30] audit: type=1400 audit(1781455766.615:749): avc:  denied  { mounton } for  pid=9402 comm="syz.2.1006" path="/proc/690/task" dev="proc" ino=26151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  400.946763][ T5744] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  400.947194][   T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  401.100158][ T5744] usb 6-1: config 8 has an invalid interface number: 137 but max is 0
[  401.129177][ T5744] usb 6-1: config 8 has no interface number 0
[  401.138939][   T10] usb 2-1: Using ep0 maxpacket: 8
[  401.149028][   T10] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  401.150175][ T5744] usb 6-1: string descriptor 0 read error: -22
[  401.175914][ T5744] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e
[  401.190533][   T10] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  401.190837][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.205403][ T9418] loop5: detected capacity change from 0 to 2640
[  401.220199][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  401.224030][ T5744] ttusb_dec_send_command: command bulk message failed: error -22
[  401.236991][   T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  401.238698][ T9418] ldm_validate_partition_table(): Disk read failed.
[  401.247304][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.271911][ T9418] Dev loop5: unable to read RDB block 0
[  401.282246][ T5744] ttusb-dec 6-1:8.137: probe with driver ttusb-dec failed with error -22
[  401.304577][   T10] usb 2-1: config 0 descriptor??
[  401.319905][ T9418]  loop5: unable to read partition table
[  401.330211][ T9418] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  402.149417][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.157126][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.164226][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.172063][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.181725][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.189063][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.197439][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.204583][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.212625][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.220811][   T10] uclogic 0003:5543:0004.000B: unknown main item tag 0x0
[  402.259224][   T10] uclogic 0003:5543:0004.000B: hidraw0: USB HID v0.04 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0
[  402.521291][ T9425] SQUASHFS error: Failed to read block 0x0: -5
[  402.538293][ T9425] unable to read squashfs_super_block
[  402.618708][ T5744] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  402.684940][ T5616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  402.698913][ T9431] FAULT_INJECTION: forcing a failure.
[  402.698913][ T9431] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  402.721559][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.752906][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.2.1013 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.752933][ T9431] Tainted: [L]=SOFTLOCKUP
[  402.752939][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  402.752949][ T9431] Call Trace:
[  402.752955][ T9431]  <TASK>
[  402.752962][ T9431]  dump_stack_lvl+0x100/0x190
[  402.752986][ T9431]  should_fail_ex.cold+0x5/0xa
[  402.753012][ T9431]  ? prepare_alloc_pages+0x16d/0x5f0
[  402.753034][ T9431]  should_fail_alloc_page+0xeb/0x140
[  402.753055][ T9431]  prepare_alloc_pages+0x1f0/0x5f0
[  402.753075][ T9431]  ? __lock_acquire+0x4a5/0x2630
[  402.753099][ T9431]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  402.753128][ T9431]  ? __lock_acquire+0x4a5/0x2630
[  402.753161][ T9431]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  402.753186][ T9431]  ? find_held_lock+0x2b/0x80
[  402.753204][ T9431]  ? bpf_ksym_find+0x128/0x1c0
[  402.753228][ T9431]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  402.753250][ T9431]  ? __kernel_text_address+0xd/0x30
[  402.753271][ T9431]  ? unwind_get_return_address+0x59/0xa0
[  402.753300][ T9431]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  402.753322][ T9431]  ? policy_nodemask+0xed/0x4f0
[  402.753346][ T9431]  alloc_pages_mpol+0x1fb/0x540
[  402.753366][ T9431]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  402.753388][ T9431]  ? __lock_acquire+0x4a5/0x2630
[  402.753410][ T9431]  folio_alloc_mpol_noprof+0x36/0x260
[  402.753434][ T9431]  vma_alloc_folio_noprof+0xed/0x1d0
[  402.753456][ T9431]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  402.753486][ T9431]  do_anonymous_page+0xb46/0x2050
[  402.753511][ T9431]  ? rcu_read_unlock+0x2d/0xb0
[  402.753542][ T9431]  __handle_mm_fault+0x1d2c/0x2a00
[  402.753569][ T9431]  ? mt_find+0x45e/0x8e0
[  402.753594][ T9431]  ? __pfx___handle_mm_fault+0x10/0x10
[  402.753614][ T9431]  ? __pfx_mt_find+0x10/0x10
[  402.753652][ T9431]  ? find_vma+0xbf/0x140
[  402.753669][ T9431]  ? __pfx_find_vma+0x10/0x10
[  402.753689][ T9431]  handle_mm_fault+0x37b/0xa30
[  402.753718][ T9431]  do_user_addr_fault+0x74c/0x12f0
[  402.753744][ T9431]  ? trace_page_fault_kernel+0x7a/0x200
[  402.753769][ T9431]  exc_page_fault+0x6f/0xd0
[  402.753791][ T9431]  asm_exc_page_fault+0x26/0x30
[  402.753807][ T9431] RIP: 0010:rep_movs_alternative+0x33/0x90
[  402.753823][ T9431] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  402.753839][ T9431] RSP: 0018:ffffc900033f79b8 EFLAGS: 00050212
[  402.753853][ T9431] RAX: 74207265646e6962 RBX: 0000000000000015 RCX: 0000000000000015
[  402.753863][ T9431] RDX: 0000000000000001 RSI: ffff88802cdbe000 RDI: 0000200000004800
[  402.753872][ T9431] RBP: ffffc900033f7bc8 R08: 0000000000000000 R09: ffffed10059b7c02
[  402.753882][ T9431] R10: ffff88802cdbe014 R11: 0000000000000000 R12: ffff88802cdbe000
[  402.753892][ T9431] R13: 0000000000000000 R14: 0000200000004800 R15: 0000000000000015
[  402.753915][ T9431]  _copy_to_iter+0x4c5/0x1720
[  402.753944][ T9431]  ? __pfx__copy_to_iter+0x10/0x10
[  402.753964][ T9431]  ? __asan_memcpy+0x3c/0x60
[  402.753998][ T9431]  seq_read_iter+0xdab/0x1270
[  402.754036][ T9431]  seq_read+0x33b/0x4c0
[  402.754055][ T9431]  ? __pfx_seq_read+0x10/0x10
[  402.754080][ T9431]  ? lock_acquire+0x1b1/0x370
[  402.754112][ T9431]  full_proxy_read+0x135/0x1a0
[  402.754140][ T9431]  ? __pfx_full_proxy_read+0x10/0x10
[  402.754167][ T9431]  vfs_read+0x1e4/0xb30
[  402.754190][ T9431]  ? __pfx_vfs_read+0x10/0x10
[  402.754208][ T9431]  ? __fget_files+0x215/0x3d0
[  402.754236][ T9431]  ? __fget_files+0x21f/0x3d0
[  402.754266][ T9431]  ksys_read+0x12a/0x250
[  402.754284][ T9431]  ? __pfx_ksys_read+0x10/0x10
[  402.754305][ T9431]  ? rcu_is_watching+0x12/0xc0
[  402.754334][ T9431]  do_syscall_64+0x115/0x870
[  402.754356][ T9431]  ? clear_bhb_loop+0x40/0x90
[  402.754377][ T9431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.754395][ T9431] RIP: 0033:0x7f9702f9ce59
[  402.754410][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.754426][ T9431] RSP: 002b:00007f9703edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  402.754442][ T9431] RAX: ffffffffffffffda RBX: 00007f9703215fa0 RCX: 00007f9702f9ce59
[  402.754453][ T9431] RDX: 0000000000002020 RSI: 0000200000004800 RDI: 0000000000000003
[  402.754463][ T9431] RBP: 00007f9703edc090 R08: 0000000000000000 R09: 0000000000000000
[  402.754474][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.754484][ T9431] R13: 00007f9703216038 R14: 00007f9703215fa0 R15: 00007ffcfe2d4be8
[  402.754508][ T9431]  </TASK>
[  402.796747][ T5744] usb 4-1: Using ep0 maxpacket: 8
[  403.214397][ T5616] usb 5-1: can't set config #1, error -71
[  403.221592][ T5616] usb 5-1: USB disconnect, device number 39
[  403.231183][ T5744] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  403.245021][ T5744] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  403.260884][ T5744] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  403.272136][ T5744] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  403.323506][ T9433] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  403.332638][ T9433] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  403.363563][ T5744] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  403.372812][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.631313][ T5744] usb 4-1: GET_CAPABILITIES returned 0
[  403.641983][ T5744] usbtmc 4-1:16.0: can't read capabilities
[  403.671206][ T5772] usb 6-1: USB disconnect, device number 21
[  404.257737][ T5744] usb 4-1: USB disconnect, device number 40
[  405.363813][ T9459] FAULT_INJECTION: forcing a failure.
[  405.363813][ T9459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.378118][ T9459] CPU: 0 UID: 0 PID: 9459 Comm: syz.2.1021 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.378146][ T9459] Tainted: [L]=SOFTLOCKUP
[  405.378152][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  405.378162][ T9459] Call Trace:
[  405.378168][ T9459]  <TASK>
[  405.378175][ T9459]  dump_stack_lvl+0x100/0x190
[  405.378201][ T9459]  should_fail_ex.cold+0x5/0xa
[  405.378226][ T9459]  _copy_to_iter+0x5a4/0x1720
[  405.378253][ T9459]  ? __pfx__copy_to_iter+0x10/0x10
[  405.378273][ T9459]  ? __local_bh_enable_ip+0x9e/0x120
[  405.378300][ T9459]  ? lockdep_hardirqs_on+0x78/0x100
[  405.378323][ T9459]  ? ipv6_route_seq_next+0x1c1/0x800
[  405.378344][ T9459]  ? ipv6_route_seq_next+0xe1/0x800
[  405.378370][ T9459]  seq_read_iter+0xdab/0x1270
[  405.378403][ T9459]  seq_read+0x33b/0x4c0
[  405.378425][ T9459]  ? __pfx_seq_read+0x10/0x10
[  405.378444][ T9459]  ? irqentry_exit+0x24d/0x970
[  405.378483][ T9459]  ? __pfx_seq_read+0x10/0x10
[  405.378504][ T9459]  proc_reg_read+0x240/0x330
[  405.378529][ T9459]  ? __pfx_proc_reg_read+0x10/0x10
[  405.378552][ T9459]  vfs_readv+0x5d8/0x8d0
[  405.378577][ T9459]  ? __pfx_vfs_readv+0x10/0x10
[  405.378595][ T9459]  ? find_held_lock+0x2b/0x80
[  405.378627][ T9459]  ? __fget_files+0x21f/0x3d0
[  405.378657][ T9459]  ? do_preadv+0x1ac/0x270
[  405.378673][ T9459]  do_preadv+0x1ac/0x270
[  405.378692][ T9459]  ? __pfx_do_preadv+0x10/0x10
[  405.378712][ T9459]  ? rcu_is_watching+0x12/0xc0
[  405.378741][ T9459]  do_syscall_64+0x115/0x870
[  405.378763][ T9459]  ? clear_bhb_loop+0x40/0x90
[  405.378790][ T9459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.378808][ T9459] RIP: 0033:0x7f9702f9ce59
[  405.378824][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.378840][ T9459] RSP: 002b:00007f9703e9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  405.378858][ T9459] RAX: ffffffffffffffda RBX: 00007f9703216180 RCX: 00007f9702f9ce59
[  405.378869][ T9459] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000007
[  405.378879][ T9459] RBP: 00007f9703e9a090 R08: 0000000000000004 R09: 0000000000000000
[  405.378889][ T9459] R10: 0000000000005fae R11: 0000000000000246 R12: 0000000000000001
[  405.378899][ T9459] R13: 00007f9703216218 R14: 00007f9703216180 R15: 00007ffcfe2d4be8
[  405.378924][ T9459]  </TASK>
[  405.834662][ T9453] hugetlbfs: Bad value for 'size'
[  406.522611][ T5744] usb 2-1: USB disconnect, device number 39
[  406.857089][  T990] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  406.881587][ T9476] FAULT_INJECTION: forcing a failure.
[  406.881587][ T9476] name failslab, interval 1, probability 0, space 0, times 0
[  406.897487][ T9476] CPU: 0 UID: 0 PID: 9476 Comm: syz.4.1029 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  406.897518][ T9476] Tainted: [L]=SOFTLOCKUP
[  406.897524][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  406.897534][ T9476] Call Trace:
[  406.897540][ T9476]  <TASK>
[  406.897547][ T9476]  dump_stack_lvl+0x100/0x190
[  406.897573][ T9476]  should_fail_ex.cold+0x5/0xa
[  406.897597][ T9476]  ? io_cache_alloc_new+0x45/0xe0
[  406.897614][ T9476]  should_failslab+0xc2/0x120
[  406.897634][ T9476]  __kmalloc_noprof+0xe0/0x850
[  406.897665][ T9476]  io_cache_alloc_new+0x45/0xe0
[  406.897682][ T9476]  __io_prep_rw+0x21d/0xfa0
[  406.897704][ T9476]  ? __pfx___io_prep_rw+0x10/0x10
[  406.897725][ T9476]  ? __fget_files+0x21f/0x3d0
[  406.897752][ T9476]  io_prep_rw+0x76/0x2c0
[  406.897771][ T9476]  ? __pfx_io_prep_rw+0x10/0x10
[  406.897788][ T9476]  ? io_req_defer_failed+0x2e4/0x480
[  406.897817][ T9476]  io_submit_sqes+0xa03/0x24b0
[  406.897852][ T9476]  __do_sys_io_uring_enter+0xa88/0x1b50
[  406.897880][ T9476]  ? __fget_files+0x21f/0x3d0
[  406.897901][ T9476]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  406.897928][ T9476]  ? fput+0x79/0x100
[  406.897951][ T9476]  ? ksys_write+0x1ac/0x250
[  406.897970][ T9476]  ? __pfx_ksys_write+0x10/0x10
[  406.897991][ T9476]  ? rcu_is_watching+0x12/0xc0
[  406.898020][ T9476]  do_syscall_64+0x115/0x870
[  406.898042][ T9476]  ? clear_bhb_loop+0x40/0x90
[  406.898063][ T9476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.898081][ T9476] RIP: 0033:0x7f83a459ce59
[  406.898096][ T9476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.898112][ T9476] RSP: 002b:00007f83a53d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  406.898129][ T9476] RAX: ffffffffffffffda RBX: 00007f83a4815fa0 RCX: 00007f83a459ce59
[  406.898138][ T9476] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  406.898148][ T9476] RBP: 00007f83a53d2090 R08: 0000000000000000 R09: 0000000000000000
[  406.898158][ T9476] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  406.898168][ T9476] R13: 00007f83a4816038 R14: 00007f83a4815fa0 R15: 00007ffcd4240cd8
[  406.898193][ T9476]  </TASK>
[  407.198298][   T30] audit: type=1400 audit(1781455773.335:750): avc:  denied  { append } for  pid=9480 comm="syz.4.1031" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  407.248986][  T990] usb 4-1: No LPM exit latency info found, disabling LPM.
[  407.258026][  T990] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  407.269303][  T990] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  407.280669][  T990] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  407.304673][   T30] audit: type=1400 audit(1781455773.445:751): avc:  denied  { shutdown } for  pid=9478 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  407.326556][   T30] audit: type=1400 audit(1781455773.445:752): avc:  denied  { setopt } for  pid=9478 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  407.348027][   T30] audit: type=1400 audit(1781455773.445:753): avc:  denied  { listen } for  pid=9478 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  407.768568][   T30] audit: type=1400 audit(1781455773.875:754): avc:  denied  { watch } for  pid=9488 comm="syz.1.1033" path="/224/file0" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  408.040979][   T30] audit: type=1400 audit(1781455773.875:755): avc:  denied  { watch_sb } for  pid=9488 comm="syz.1.1033" path="/224/file0" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  408.850109][ T4933] Bluetooth: hci5: command 0x0406 tx timeout
[  408.938574][ T5744] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  409.070372][   T30] audit: type=1400 audit(1781455775.205:756): avc:  denied  { execute } for  pid=9522 comm="syz.1.1044" path="/selinux/context" dev="selinuxfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  409.107407][ T5744] usb 5-1: Using ep0 maxpacket: 16
[  409.113882][ T5744] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  409.122455][ T5744] usb 5-1: config 0 has no interface number 0
[  409.128875][ T5744] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  409.139152][ T5744] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  409.151201][ T5744] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  409.162472][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.173510][ T5744] usb 5-1: Product: syz
[  409.178121][ T5744] usb 5-1: Manufacturer: syz
[  409.182716][ T5744] usb 5-1: SerialNumber: syz
[  409.193920][ T5744] usb 5-1: config 0 descriptor??
[  409.199485][ T9516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  409.207029][ T9516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  409.236759][ T5772] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  409.389885][ T5772] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  409.400152][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.407249][ T5723] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  409.408522][ T5772] usb 6-1: Product: syz
[  409.421173][ T5772] usb 6-1: Manufacturer: syz
[  409.424277][ T9516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  409.426111][ T5772] usb 6-1: SerialNumber: syz
[  409.434397][ T9516] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  409.452260][ T5772] usb 6-1: config 0 descriptor??
[  409.568026][ T5723] usb 2-1: Using ep0 maxpacket: 32
[  409.576536][ T5723] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  409.585698][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.593783][ T5723] usb 2-1: Product: syz
[  409.599545][ T5723] usb 2-1: Manufacturer: syz
[  409.604205][ T5723] usb 2-1: SerialNumber: syz
[  409.613862][ T5723] usb 2-1: config 0 descriptor??
[  409.623687][  T990] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  409.638539][  T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.653695][ T5744] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  409.682759][  T990] usb 4-1: can't set config #1, error -71
[  409.689391][ T5772] usb 6-1: ignoring: probably an ADSL modem
[  409.704869][  T990] usb 4-1: USB disconnect, device number 41
[  409.854521][ T5744] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  409.854641][ T5723] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 040
[  409.875345][ T5744] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  409.875561][ T5744] asix 5-1:0.34: probe with driver asix failed with error -61
[  409.901951][ T5772] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  409.927883][ T5772] usb 6-1: USB disconnect, device number 22
[  410.027186][  T990] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  410.176831][  T990] usb 4-1: Using ep0 maxpacket: 16
[  410.201749][  T990] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  410.219948][  T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.232242][  T990] usb 4-1: Product: syz
[  410.236507][  T990] usb 4-1: Manufacturer: syz
[  410.243400][  T990] usb 4-1: SerialNumber: syz
[  410.269596][  T990] usb 4-1: config 0 descriptor??
[  410.288505][  T990] gspca_main: spca508-2.14.0 probing 041e:4018
[  410.505830][  T990] gspca_spca508: reg_read err -32
[  410.512544][  T990] gspca_spca508: reg_read err -32
[  410.521716][  T990] gspca_spca508: reg_read err -32
[  410.536276][  T990] gspca_spca508: reg_read err -32
[  410.547636][  T990] gspca_spca508: reg_read err -32
[  410.709345][ T9544] tipc: Started in network mode
[  410.714287][ T9544] tipc: Node identity 4, cluster identity 4711
[  410.720513][ T9544] tipc: Node number set to 4
[  410.960438][  T990] gspca_spca508: reg write: error -71
[  410.968571][  T990] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  410.983250][  T990] usb 4-1: USB disconnect, device number 42
[  411.742178][ T5723] usb 5-1: USB disconnect, device number 40
[  411.940906][ T9561] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1052'.
[  411.962285][ T9559] overlayfs: missing 'lowerdir'
[  412.127421][ T9528] i2c i2c-1: failure writing data
[  412.996919][ T5772] usb 3-1: new low-speed USB device number 45 using dummy_hcd
[  413.451573][  T990] usb 2-1: USB disconnect, device number 40
[  413.561030][ T5772] usb 3-1: No LPM exit latency info found, disabling LPM.
[  413.574172][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  413.588984][ T5772] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  413.687475][ T5723] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  414.023166][ T5772] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  414.157300][ T5723] usb 4-1: Using ep0 maxpacket: 16
[  414.165036][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  414.252420][ T5723] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  414.268169][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.276220][ T5723] usb 4-1: Product: syz
[  414.281162][ T5723] usb 4-1: Manufacturer: syz
[  414.285785][ T5723] usb 4-1: SerialNumber: syz
[  414.301488][ T5723] usb 4-1: config 0 descriptor??
[  414.311876][ T5723] hub 4-1:0.0: bad descriptor, ignoring hub
[  414.318505][ T5723] hub 4-1:0.0: probe with driver hub failed with error -5
[  414.328359][ T5723] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  414.587818][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.611600][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.142953][ T5772] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.162494][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.177659][ T5723] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  415.214387][ T5772] usb 3-1: can't set config #1, error -71
[  415.247323][ T5772] usb 3-1: USB disconnect, device number 45
[  415.433684][ T5723] usb 5-1: Using ep0 maxpacket: 16
[  415.577328][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  415.604306][ T5723] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  415.620283][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.645090][ T5723] usb 5-1: Product: syz
[  415.659381][ T5723] usb 5-1: Manufacturer: syz
[  415.668760][ T5723] usb 5-1: SerialNumber: syz
[  415.693834][ T5723] usb 5-1: config 0 descriptor??
[  415.713417][ T5723] hub 5-1:0.0: bad descriptor, ignoring hub
[  415.721002][ T5723] hub 5-1:0.0: probe with driver hub failed with error -5
[  415.741753][ T5723] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  416.008770][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.029828][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.324860][ T9598] FAULT_INJECTION: forcing a failure.
[  416.324860][ T9598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.348138][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.2.1065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.348168][ T9598] Tainted: [L]=SOFTLOCKUP
[  416.348174][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  416.348185][ T9598] Call Trace:
[  416.348190][ T9598]  <TASK>
[  416.348200][ T9598]  dump_stack_lvl+0x100/0x190
[  416.348226][ T9598]  should_fail_ex.cold+0x5/0xa
[  416.348257][ T9598]  _copy_from_user+0x2e/0xd0
[  416.348281][ T9598]  video_usercopy+0xe74/0x1700
[  416.348305][ T9598]  ? __pfx___video_do_ioctl+0x10/0x10
[  416.348328][ T9598]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  416.348358][ T9598]  ? __pfx_video_usercopy+0x10/0x10
[  416.348396][ T9598]  v4l2_ioctl+0x1bd/0x250
[  416.348417][ T9598]  ? __pfx_v4l2_ioctl+0x10/0x10
[  416.348441][ T9598]  __x64_sys_ioctl+0x18e/0x210
[  416.348462][ T9598]  do_syscall_64+0x115/0x870
[  416.348484][ T9598]  ? clear_bhb_loop+0x40/0x90
[  416.348506][ T9598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.348525][ T9598] RIP: 0033:0x7f9702f9ce59
[  416.348540][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.348555][ T9598] RSP: 002b:00007f9703edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.348573][ T9598] RAX: ffffffffffffffda RBX: 00007f9703215fa0 RCX: 00007f9702f9ce59
[  416.348584][ T9598] RDX: 0000200000000100 RSI: 000000004014563c RDI: 0000000000000003
[  416.348593][ T9598] RBP: 00007f9703edc090 R08: 0000000000000000 R09: 0000000000000000
[  416.348603][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.348612][ T9598] R13: 00007f9703216038 R14: 00007f9703215fa0 R15: 00007ffcfe2d4be8
[  416.348636][ T9598]  </TASK>
[  416.565151][  T990] usb 4-1: USB disconnect, device number 43
[  416.894334][ T5772] usb 5-1: USB disconnect, device number 41
[  419.701393][ T1157] Bluetooth: hci6: Frame reassembly failed (-84)
[  419.777505][   T30] audit: type=1400 audit(1781455785.905:757): avc:  denied  { setopt } for  pid=9623 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  419.799389][ T9622] syzkaller1: entered promiscuous mode
[  419.805567][ T9622] syzkaller1: entered allmulticast mode
[  420.006922][ T5772] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  420.185769][ T5772] usb 5-1: Using ep0 maxpacket: 32
[  420.206119][ T5772] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  420.681249][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.706825][ T5772] usb 5-1: Product: syz
[  420.716214][ T5772] usb 5-1: Manufacturer: syz
[  420.728853][ T5772] usb 5-1: SerialNumber: syz
[  420.752025][ T5772] usb 5-1: config 0 descriptor??
[  420.777381][ T5715] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  420.999873][ T5715] usb 3-1: Using ep0 maxpacket: 16
[  421.006495][ T5772] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 042
[  421.020425][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  421.037558][ T5715] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  421.048808][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.058963][ T5715] usb 3-1: Product: syz
[  421.063456][ T5715] usb 3-1: Manufacturer: syz
[  421.081291][ T5715] usb 3-1: SerialNumber: syz
[  421.105529][ T5715] usb 3-1: config 0 descriptor??
[  421.120645][ T5715] hub 3-1:0.0: bad descriptor, ignoring hub
[  421.132140][ T5715] hub 3-1:0.0: probe with driver hub failed with error -5
[  421.152714][ T5715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  421.729469][ T5630] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  421.748895][ T4933] Bluetooth: hci6: command 0x1003 tx timeout
[  421.774551][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.799823][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.835166][ T5772] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  422.016893][ T5772] usb 6-1: Using ep0 maxpacket: 32
[  422.084263][ T5772] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  422.095479][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.124120][ T5772] usb 6-1: Product: syz
[  422.131007][ T5772] usb 6-1: Manufacturer: syz
[  422.136181][ T5772] usb 6-1: SerialNumber: syz
[  422.314132][ T5772] usb 6-1: config 0 descriptor??
[  422.588032][ T5772] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 023
[  423.225284][ T5772] usb 3-1: USB disconnect, device number 46
[  423.328802][ T9620] i2c i2c-1: failure writing data
[  423.343336][ T9636] i2c i2c-1: failure writing data
[  423.390948][ T5715] usb 5-1: USB disconnect, device number 42
[  424.748557][    T9] usb 6-1: USB disconnect, device number 23
[  425.414772][ T5772] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  425.966956][ T5772] usb 4-1: Using ep0 maxpacket: 16
[  426.069219][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.166973][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.314413][ T5772] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  426.341653][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.360688][ T5772] usb 4-1: Product: syz
[  426.366387][ T5772] usb 4-1: Manufacturer: syz
[  426.398921][ T5772] usb 4-1: SerialNumber: syz
[  426.426424][ T5772] usb 4-1: config 0 descriptor??
[  426.488428][ T9693] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1092'.
[  426.571787][ T9683] hugetlbfs: Bad value for 'size'
[  426.577090][ T5616] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  426.651221][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  426.675670][ T5772] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36
[  426.747378][ T5616] usb 2-1: Using ep0 maxpacket: 16
[  426.765891][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  426.765996][ T9702] loop5: detected capacity change from 0 to 2640
[  426.791901][ T9702] buffer_io_error: 32 callbacks suppressed
[  426.791917][ T9702] Buffer I/O error on dev loop5, logical block 0, async page read
[  426.798173][ T5772] imon:send_packet: packet tx failed (-71)
[  426.809811][ T5616] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  426.816385][ T9702] Buffer I/O error on dev loop5, logical block 0, async page read
[  426.822152][ T5772] imon 4-1:0.0: panel buttons/knobs setup failed
[  426.840117][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.870155][ T5715] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  427.890449][ T7005] Buffer I/O error on dev loop5, logical block 0, async page read
[  427.901900][ T7005] Buffer I/O error on dev loop5, logical block 0, async page read
[  427.918807][ T5616] usb 2-1: Product: syz
[  427.923092][ T5616] usb 2-1: Manufacturer: syz
[  427.930867][ T5616] usb 2-1: SerialNumber: syz
[  427.938759][ T5616] usb 2-1: config 0 descriptor??
[  427.957757][ T5616] hub 2-1:0.0: bad descriptor, ignoring hub
[  427.961270][ T7005] Buffer I/O error on dev loop5, logical block 0, async page read
[  427.971595][ T5616] hub 2-1:0.0: probe with driver hub failed with error -5
[  427.973654][ T5616] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  428.020142][ T5772] rc_core: IR keymap rc-imon-pad not found
[  428.029983][ T7005] Buffer I/O error on dev loop5, logical block 0, async page read
[  428.031055][ T5772] Registered IR keymap rc-empty
[  428.043873][ T5772] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  428.051389][ T7005] Buffer I/O error on dev loop5, logical block 0, async page read
[  428.054775][ T5772] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  428.071042][ T5715] usb 5-1: Using ep0 maxpacket: 32
[  428.087655][ T5772] imon:send_packet: packet tx failed (-71)
[  428.093757][ T9702] Buffer I/O error on dev loop5, logical block 0, async page read
[  428.110818][ T9702] Buffer I/O error on dev loop5, logical block 0, async page read
[  428.110877][ T9710] syzkaller1: entered promiscuous mode
[  428.120789][ T9702] Buffer I/O error on dev loop5, logical block 0, async page read
[  428.137540][ T9710] syzkaller1: entered allmulticast mode
[  428.138229][ T5772] imon 4-1:0.0: remote input dev register failed
[  428.160033][ T5715] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  428.168134][ T5772] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  428.168511][ T9702] ldm_validate_partition_table(): Disk read failed.
[  428.170360][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.197106][ T9702] Dev loop5: unable to read RDB block 0
[  428.203265][ T9702]  loop5: unable to read partition table
[  428.221993][ T5715] usb 5-1: Product: syz
[  428.243936][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.248185][ T5715] usb 5-1: Manufacturer: syz
[  428.271496][ T9702] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  428.276097][ T5715] usb 5-1: SerialNumber: syz
[  428.291342][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.312674][ T5715] usb 5-1: config 0 descriptor??
[  428.315115][ T5772] imon 4-1:0.0: unable to initialize intf0, err 0
[  428.338742][ T5772] imon:imon_probe: failed to initialize context!
[  428.358494][ T5772] imon 4-1:0.0: unable to register, err -19
[  428.402816][ T5772] usb 4-1: USB disconnect, device number 44
[  428.472211][ T5616] usb 2-1: USB disconnect, device number 41
[  428.556478][ T5715] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 043
[  429.757365][   T29] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  430.171037][   T29] usb 2-1: unable to get BOS descriptor or descriptor too short
[  430.185921][   T29] usb 2-1: config 2 has an invalid interface number: 42 but max is 1
[  430.194720][   T29] usb 2-1: config 2 has an invalid interface association descriptor of length 5, skipping
[  430.204936][   T29] usb 2-1: config 2 has an invalid interface number: 123 but max is 1
[  430.213451][   T29] usb 2-1: config 2 has no interface number 0
[  430.220099][   T29] usb 2-1: config 2 has no interface number 1
[  430.226264][   T29] usb 2-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  430.236661][   T29] usb 2-1: config 2 interface 123 has no altsetting 0
[  430.253634][   T29] usb 2-1: string descriptor 0 read error: -22
[  430.263944][   T29] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df
[  430.283817][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.298671][ T9731] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  430.843208][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.852094][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.882606][ T9699] i2c i2c-1: failure writing data
[  430.929003][   T29] qmi_wwan 2-1:2.42: probe with driver qmi_wwan failed with error -22
[  430.951339][   T29] usb 2-1: USB disconnect, device number 42
[  431.309930][  T990] usb 5-1: USB disconnect, device number 43
[  432.587916][   T30] audit: type=1326 audit(1781455798.725:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.634608][   T30] audit: type=1326 audit(1781455798.725:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.662833][   T30] audit: type=1326 audit(1781455798.755:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83a455d68e code=0x7ffc0000
[  432.679939][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1110'.
[  432.690254][   T30] audit: type=1326 audit(1781455798.755:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.728468][   T30] audit: type=1326 audit(1781455798.755:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.768078][   T30] audit: type=1326 audit(1781455798.755:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.800059][   T30] audit: type=1326 audit(1781455798.755:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  432.896285][   T30] audit: type=1326 audit(1781455798.755:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  433.032419][   T30] audit: type=1326 audit(1781455798.755:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  433.334619][   T30] audit: type=1326 audit(1781455798.755:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.4.1106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a459ce59 code=0x7ffc0000
[  433.411642][ T9771] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  433.426499][ T9771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  433.656928][ T5616] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  433.816735][ T5616] usb 4-1: Using ep0 maxpacket: 16
[  433.825939][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  433.841224][ T5616] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  433.851407][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.851473][ T9778] netlink: 'syz.2.1109': attribute type 4 has an invalid length.
[  433.859703][ T5616] usb 4-1: Product: syz
[  433.859724][ T5616] usb 4-1: Manufacturer: syz
[  433.859737][ T5616] usb 4-1: SerialNumber: syz
[  433.882313][ T9778] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1109'.
[  433.895052][ T9778] .`: renamed from bond0 (while UP)
[  433.905607][ T5616] usb 4-1: config 0 descriptor??
[  433.921119][ T5616] hub 4-1:0.0: bad descriptor, ignoring hub
[  433.933975][ T5616] hub 4-1:0.0: probe with driver hub failed with error -5
[  433.950650][ T5616] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  433.959653][ T9780] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  434.180307][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.193994][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.347447][ T5723] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  434.497344][ T5723] usb 2-1: Using ep0 maxpacket: 32
[  434.504226][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short
[  434.513537][ T5723] usb 2-1: config 2 has too many interfaces: 145, using maximum allowed: 32
[  434.525309][ T5723] usb 2-1: config 2 descriptor has 1 excess byte, ignoring
[  434.536346][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  434.543596][ T5723] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 145
[  434.545035][   T31] INFO: task syz.0.601:7952 blocked for more than 143 seconds.
[  434.555013][ T5723] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  434.570035][   T31]       Tainted: G             L      syzkaller #0
[  434.570051][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  434.570064][   T31] task:syz.0.601       state:D stack:28408 pid:7952  tgid:7942  ppid:5623   task_flags:0x400640 flags:0x00080002
[  434.570147][   T31] Call Trace:
[  434.570153][   T31]  <TASK>
[  434.570164][   T31]  __schedule+0x1295/0x67a0
[  434.570205][   T31]  ? __pfx___schedule+0x10/0x10
[  434.570243][   T31]  ? find_held_lock+0x2b/0x80
[  434.570261][   T31]  ? schedule+0x2bf/0x390
[  434.570286][   T31]  schedule+0xdd/0x390
[  434.570307][   T31]  schedule_timeout+0x1b2/0x280
[  434.570325][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  434.570350][   T31]  ? __wait_for_common+0x2da/0x4c0
[  434.570392][   T31]  ? rcu_is_watching+0x12/0xc0
[  434.570422][   T31]  __wait_for_common+0x2e7/0x4c0
[  434.570445][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  434.570468][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  434.570489][   T31]  ? __pfx_try_to_wake_up+0x10/0x10
[  434.570536][   T31]  ? vfs_coredump+0x7e0/0x5770
[  434.570555][   T31]  ? rcu_is_watching+0x12/0xc0
[  434.570585][   T31]  wait_for_completion_state+0x1c/0x40
[  434.600734][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.604955][   T31]  vfs_coredump+0x80d/0x5770
[  434.617837][ T5723] usb 2-1: Product: syz
[  434.625035][   T31]  ? __lock_acquire+0x4a5/0x2630
[  434.631908][ T5723] usb 2-1: Manufacturer: syz
[  434.633989][   T31]  ? __pfx_vfs_coredump+0x10/0x10
[  434.639403][ T5723] usb 2-1: SerialNumber: syz
[  434.644459][   T31]  ? lock_acquire+0x1b1/0x370
[  434.820255][ T5616] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  434.845238][   T31]  ? find_held_lock+0x2b/0x80
[  434.850117][   T31]  ? is_bpf_text_address+0x8a/0x1a0
[  434.859589][   T31]  ? is_bpf_text_address+0x8a/0x1a0
[  434.864947][   T31]  ? bpf_ksym_find+0x128/0x1c0
[  434.869867][   T31]  ? is_bpf_text_address+0x94/0x1a0
[  434.875200][   T31]  ? kernel_text_address+0x8d/0x100
[  434.880571][   T31]  ? __kernel_text_address+0xd/0x30
[  434.885912][   T31]  ? unwind_get_return_address+0x59/0xa0
[  434.965946][   T31]  ? arch_stack_walk+0xa6/0xf0
[  434.971320][   T31]  ? __sigqueue_free+0xbe/0x2a0
[  434.982863][   T31]  ? __lock_acquire+0x4a5/0x2630
[  434.988061][ T5616] usb 6-1: Using ep0 maxpacket: 8
[  435.000348][ T5616] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  435.010687][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.023185][   T31]  ? __sigqueue_free+0xbe/0x2a0
[  435.028418][ T5616] usb 6-1: Product: syz
[  435.041018][   T31]  ? kasan_save_stack+0x3f/0x50
[  435.046186][ T5616] usb 6-1: Manufacturer: syz
[  435.056944][   T31]  ? kasan_save_stack+0x30/0x50
[  435.061950][ T5616] usb 6-1: SerialNumber: syz
[  435.067416][   T31]  ? kasan_save_track+0x14/0x30
[  435.074034][   T31]  ? kasan_save_free_info+0x3b/0x70
[  435.079904][   T31]  ? __kasan_slab_free+0x5f/0x80
[  435.085466][   T31]  ? kmem_cache_free+0x127/0x6c0
[  435.101988][ T5616] usb 6-1: config 0 descriptor??
[  435.124616][ T5616] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  435.137423][ T5616] dvb-usb: bulk message failed: -22 (2/0)
[  435.145513][   T31]  ? __sigqueue_free+0xbe/0x2a0
[  435.154586][   T31]  ? collect_signal+0x26c/0x550
[  435.167969][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  435.177850][   T31]  ? dequeue_signal+0x2be/0x500
[  435.182830][   T31]  ? get_signal+0x53a/0x2210
[  435.188461][   T31]  ? arch_do_signal_or_restart+0x91/0x7e0
[  435.194697][ T5616] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  435.207551][ T5616] usb 6-1: media controller created
[  435.214121][   T31]  ? exit_to_user_mode_loop+0x98/0x670
[  435.224479][   T31]  ? do_syscall_64+0x666/0x870
[  435.234749][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.248269][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  435.248439][   T31]  ? __sigqueue_free+0xbe/0x2a0
[  435.281686][   T31]  ? kmem_cache_free+0x127/0x6c0
[  435.287275][   T31]  ? __sigqueue_free+0xc3/0x2a0
[  435.292263][   T31]  ? collect_signal+0x271/0x550
[  435.301070][   T31]  ? recalc_sigpending+0x1fc/0x280
[  435.306317][   T31]  ? proc_coredump_connector+0x2d3/0x4f0
[  435.312629][   T31]  ? __pfx_proc_coredump_connector+0x10/0x10
[  435.318982][   T31]  ? rcu_is_watching+0x12/0xc0
[  435.324040][   T31]  get_signal+0x2162/0x2210
[  435.329346][   T31]  ? __pfx_get_signal+0x10/0x10
[  435.352350][   T31]  arch_do_signal_or_restart+0x91/0x7e0
[  435.362332][   T31]  ? __pfx_from_kuid_munged+0x10/0x10
[  435.368268][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  435.384801][   T31]  ? __pfx___x64_sys_tkill+0x10/0x10
[  435.390701][   T31]  ? rcu_is_watching+0x12/0xc0
[  435.395592][   T31]  exit_to_user_mode_loop+0x98/0x670
[  435.404216][   T31]  ? rcu_is_watching+0x12/0xc0
[  435.410047][   T31]  do_syscall_64+0x666/0x870
[  435.414934][   T31]  ? clear_bhb_loop+0x40/0x90
[  435.420054][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.426208][   T31] RIP: 0033:0x7f5340d9ce59
[  435.431039][   T31] RSP: 002b:00007f5341d21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8
[  435.443097][ T9796] fuse: Bad value for 'rootmode'
[  435.461600][   T31] RAX: 0000000000000000 RBX: 00007f5341016090 RCX: 00007f5340d9ce59
[  435.481147][   T31] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000015f
[  435.513945][   T31] RBP: 00007f5340e32d6f R08: 0000000000000000 R09: 0000000000000000
[  435.532354][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  435.551563][   T31] R13: 00007f5341016128 R14: 00007f5341016090 R15: 00007ffd389f5e18
[  435.581198][   T31]  </TASK>
[  435.589203][   T31] 
[  435.589203][   T31] Showing all locks held in the system:
[  435.628393][   T31] 1 lock held by khungtaskd/31:
[  435.633540][   T31]  #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  435.644179][   T31] 2 locks held by getty/5373:
[  435.657861][   T31]  #0: ffff8880333be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  435.668753][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  435.682419][   T31] 6 locks held by kworker/1:4/5616:
[  435.689183][   T31]  #0: ffff888020ec8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  435.702274][   T31]  #1: ffffc90003ba7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  435.724213][   T31]  #2: ffff88802b0821d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[  435.796942][   T31]  #3: ffff88803540c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  435.825177][   T31]  #4: ffff88802d99f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  435.838676][   T31]  #5: ffff88802af03f60 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x294/0xe20
[  435.893410][   T31] 3 locks held by kworker/0:2H/5893:
[  435.920511][   T31] 4 locks held by udevd/7005:
[  435.943050][   T31]  #0: ffff8880763dc098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  435.967782][ T5630] Bluetooth: hci0: command 0x0406 tx timeout
[  436.041061][   T31]  #1: ffff888028faf880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[  436.097634][   T31]  #2: ffff88803404db48 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[  436.154457][   T31]  #3: ffff88803540c1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  436.204538][   T31] 3 locks held by syz.3.1112/9772:
[  436.233393][   T31]  #0: ffffffff904edb80 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70
[  436.281413][   T31]  #1: ffff88803549d4b0 (&mdev->open_mutex){+.+.}-{4:4}, at: snd_seq_oss_midi_close+0xb6/0x4c0
[  436.328335][   T31]  #2: ffff88802bfd59e0 (&grp->list_mutex){++++}-{4:4}, at: snd_seq_port_disconnect+0x4c/0x650
[  436.339266][   T31] 1 lock held by syz.1.1115/9785:
[  436.344308][   T31]  #0: ffff88807bf724d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x35/0x140
[  436.355177][   T31] 2 locks held by syz.1.1115/9797:
[  436.360359][   T31]  #0: ffffffff9b5f0b40 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv_batch+0x281/0x2880
[  436.371105][   T31]  #1: ffff88807bf724d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x35/0x140
[  436.381951][   T31] 1 lock held by syz.1.1115/9798:
[  436.387164][   T31]  #0: ffffffff9b5f0b40 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv_batch+0x281/0x2880
[  436.397902][   T31] 6 locks held by syz.5.1116/9788:
[  436.403107][   T31]  #0: ffff888078831270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  436.413192][   T31]  #1: ffff88807bab0410 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  436.415724][ T5715] usb 4-1: USB disconnect, device number 45
[  436.428629][   T31]  #2: ffff8880570e3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  436.453762][   T31]  #3: ffffffff8e849b20 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520
[  436.464793][   T31]  #4: ffffffff8e67c630 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x567/0x890
[  436.477140][   T31]  #5: ffffffff8e849890 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x573/0x890
[  436.489093][   T31] 1 lock held by syz.2.1117/9789:
[  436.494298][   T31]  #0: ffff8880748d4180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  436.505266][   T31] 2 locks held by syz.2.1117/9794:
[  436.510450][   T31]  #0: ffff8880575052c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  436.521470][   T31]  #1: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  436.533997][   T31] 
[  436.542682][   T31] =============================================
[  436.542682][   T31] 
[  436.552016][ T5616] cxusb: set interface failed
[  436.560052][ T5616] dvb-usb: bulk message failed: -22 (1/0)
[  436.566175][   T31] NMI backtrace for cpu 1
[  436.566193][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.566215][   T31] Tainted: [L]=SOFTLOCKUP
[  436.566221][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.566231][   T31] Call Trace:
[  436.566237][   T31]  <TASK>
[  436.566243][   T31]  dump_stack_lvl+0x100/0x190
[  436.566268][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  436.566290][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  436.566311][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  436.566340][   T31]  sys_info+0x141/0x190
[  436.566364][   T31]  watchdog+0xcb1/0x1030
[  436.566388][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  436.566410][   T31]  ? __pfx_watchdog+0x10/0x10
[  436.566427][   T31]  ? __kthread_parkme+0x18c/0x230
[  436.566456][   T31]  ? kthread+0x13a/0x450
[  436.566473][   T31]  ? __pfx_watchdog+0x10/0x10
[  436.566490][   T31]  kthread+0x370/0x450
[  436.566508][   T31]  ? __pfx_kthread+0x10/0x10
[  436.566527][   T31]  ret_from_fork+0x72b/0xd50
[  436.566549][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  436.566570][   T31]  ? __switch_to+0x800/0x1100
[  436.566594][   T31]  ? __pfx_kthread+0x10/0x10
[  436.566614][   T31]  ret_from_fork_asm+0x1a/0x30
[  436.566645][   T31]  </TASK>
[  436.566652][   T31] Sending NMI from CPU 1 to CPUs 0:
[  436.698804][    C0] NMI backtrace for cpu 0
[  436.698820][    C0] CPU: 0 UID: 0 PID: 8058 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.698839][    C0] Tainted: [L]=SOFTLOCKUP
[  436.698844][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.698853][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  436.698879][    C0] RIP: 0010:stack_access_ok+0x76/0x1d0
[  436.698899][    C0] Code: c1 ea 03 80 3c 02 00 0f 85 24 01 00 00 48 8d 7b 10 4c 8b 6b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 0b 01 00 00 48 8b 43 10 49 39 ed 77 1a 48 39 e8 76 15 4a 8d
[  436.698911][    C0] RSP: 0018:ffffc9000db776b0 EFLAGS: 00000246
[  436.698922][    C0] RAX: dffffc0000000000 RBX: ffffc9000db77750 RCX: ffffffff9184a33e
[  436.698931][    C0] RDX: 1ffff92001b6eeec RSI: ffffc9000db77a98 RDI: ffffc9000db77760
[  436.698940][    C0] RBP: ffffc9000db77a98 R08: ffffffff9184a342 R09: 0000000000000007
[  436.698949][    C0] R10: 0000000000000200 R11: 0000000000017665 R12: 0000000000000008
[  436.698958][    C0] R13: ffffc9000db70000 R14: ffffc9000db77aa0 R15: ffffc9000db77784
[  436.698967][    C0] FS:  0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000
[  436.698981][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  436.698990][    C0] CR2: 0000001b2eefdff8 CR3: 000000000e596000 CR4: 00000000003526f0
[  436.698998][    C0] Call Trace:
[  436.699003][    C0]  <TASK>
[  436.699010][    C0]  unwind_next_frame+0xcf5/0x2090
[  436.699029][    C0]  ? kasan_save_stack+0x30/0x50
[  436.699043][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  436.699058][    C0]  arch_stack_walk+0x94/0xf0
[  436.699078][    C0]  ? kasan_save_stack+0x30/0x50
[  436.699091][    C0]  ? kfree_skbmem+0x19a/0x210
[  436.699107][    C0]  stack_trace_save+0x8e/0xc0
[  436.699119][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  436.699133][    C0]  ? __lock_acquire+0x4a5/0x2630
[  436.699150][    C0]  ? consume_skb+0xc4/0x110
[  436.699164][    C0]  ? nsim_dev_trap_report_work+0x8de/0xd20
[  436.699183][    C0]  ? process_one_work+0xa0e/0x1980
[  436.699199][    C0]  kasan_save_stack+0x30/0x50
[  436.699210][    C0]  ? kasan_save_stack+0x30/0x50
[  436.699238][    C0]  kasan_save_track+0x14/0x30
[  436.699249][    C0]  kasan_save_free_info+0x3b/0x70
[  436.699266][    C0]  __kasan_slab_free+0x5f/0x80
[  436.699279][    C0]  kmem_cache_free+0x127/0x6c0
[  436.699297][    C0]  ? skb_release_data+0x6ca/0x8e0
[  436.699317][    C0]  kfree_skbmem+0x19a/0x210
[  436.699331][    C0]  consume_skb+0xd1/0x110
[  436.699344][    C0]  nsim_dev_trap_report_work+0x8de/0xd20
[  436.699368][    C0]  process_one_work+0xa0e/0x1980
[  436.699389][    C0]  ? __pfx_process_one_work+0x10/0x10
[  436.699408][    C0]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  436.699429][    C0]  worker_thread+0x5ef/0xe50
[  436.699448][    C0]  ? __pfx_worker_thread+0x10/0x10
[  436.699465][    C0]  ? kthread+0x13a/0x450
[  436.699479][    C0]  ? __pfx_worker_thread+0x10/0x10
[  436.699495][    C0]  kthread+0x370/0x450
[  436.699508][    C0]  ? __pfx_kthread+0x10/0x10
[  436.699528][    C0]  ret_from_fork+0x72b/0xd50
[  436.699544][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  436.699560][    C0]  ? __switch_to+0x800/0x1100
[  436.699578][    C0]  ? __pfx_kthread+0x10/0x10
[  436.699593][    C0]  ret_from_fork_asm+0x1a/0x30
[  436.699616][    C0]  </TASK>
[  437.028762][ T5616] DVB: Unable to find symbol mt352_attach()
[  437.034703][ T5616] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  437.037559][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  437.037579][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  437.037602][   T31] Tainted: [L]=SOFTLOCKUP
[  437.037608][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  437.037618][   T31] Call Trace:
[  437.037624][   T31]  <TASK>
[  437.037631][   T31]  dump_stack_lvl+0x100/0x190
[  437.037656][   T31]  vpanic+0x552/0x970
[  437.037673][   T31]  ? __pfx_vpanic+0x10/0x10
[  437.037689][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  437.037717][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  437.037744][   T31]  panic+0xd1/0xe0
[  437.037759][   T31]  ? __pfx_panic+0x10/0x10
[  437.037777][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  437.037802][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  437.037828][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  437.037852][   T31]  ? watchdog.cold+0x1ec/0x234
[  437.037869][   T31]  ? watchdog+0xcc1/0x1030
[  437.037889][   T31]  watchdog.cold+0x1fd/0x234
[  437.037911][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  437.037931][   T31]  ? __pfx_watchdog+0x10/0x10
[  437.037949][   T31]  ? __kthread_parkme+0x18c/0x230
[  437.037976][   T31]  ? kthread+0x13a/0x450
[  437.037992][   T31]  ? __pfx_watchdog+0x10/0x10
[  437.038008][   T31]  kthread+0x370/0x450
[  437.038025][   T31]  ? __pfx_kthread+0x10/0x10
[  437.038050][   T31]  ret_from_fork+0x72b/0xd50
[  437.038071][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  437.038092][   T31]  ? __switch_to+0x800/0x1100
[  437.038115][   T31]  ? __pfx_kthread+0x10/0x10
[  437.038134][   T31]  ret_from_fork_asm+0x1a/0x30
[  437.038166][   T31]  </TASK>
[  437.043641][   T31] Kernel Offset: disabled