last executing test programs:

5m41.17811984s ago: executing program 1 (id=206):
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x10003, 0x7})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
faccessat(0xffffffffffffffff, 0x0, 0x89)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20840001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m39.378014065s ago: executing program 1 (id=208):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b08"], 0x24}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108)
inotify_init1(0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
r4 = getpid()
ptrace(0x18, r4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5)
socket(0x11, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

5m38.098264661s ago: executing program 1 (id=212):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0)
unshare(0x2c020400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x18)
symlinkat(0x0, r3, &(0x7f0000000140)='./file0\x00')
openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES8=r3], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4})
r7 = gettid()
migrate_pages(r7, 0x3, 0x0, 0x0)

5m36.877811031s ago: executing program 1 (id=219):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffff00, 0x0, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xe776ab4dd4470d33, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x9, 0x7, 0xfffe, 0x9, 0x16, 'gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x1116e5cc8e8d249a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
r1 = syz_open_dev$sg(&(0x7f0000000440), 0xfffffffffffffff7, 0x240280)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000480))
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
umount2(0x0, 0xb)
syz_open_dev$vim2m(&(0x7f00000004c0), 0x200000000000000a, 0x2)
r2 = syz_usb_connect(0x5, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newaddr={0x74, 0x14, 0x2, 0x70bd2a, 0x25dfdbfd, {0xa, 0x38, 0x4, 0xff, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x10001, 0x7fffffff, 0x5, 0x9bdd}}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xef89}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0xffb52889df0cecdf)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="210000000000000020001280633907784179d8977d4437b7ffd096e5", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

5m35.236440863s ago: executing program 1 (id=229):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f14110026bd7000fddbdf2508000300000000000800450069627539"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7ff})
pwrite64(r1, &(0x7f00000000c0)="d300001f6df7", 0x6, 0xc899)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc98f64b0955508297fd52a126a7a4d0d3337b9d21c387af2e358a5c59d8289283bbb00370b41105349a3c05d3449c52e6010000000000005c17befac190ef8fa1edf7487b3c3927773a85681119f454e5d5f46cd4a19c878285915ce9145aa887dc0a417d07dfe5b5dd1a2ba1a4c0f7435a5a41d2683c561204a109eeebc8c746caaefe9aed289c47c04c6e612c5832a1669e99dca4f1e1eba2730e1491f3d1934981c488a0f09c14b714806c418f1bcc2ec5e800016f7e47a6", @ANYRES16=r5, @ANYBLOB], 0x38}}, 0x0)
listen(r3, 0xc)
syz_open_dev$dri(0x0, 0x1f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = socket$inet(0x2, 0x1, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000600)='/,0x7f0000800000,0x7', 0x14)
shutdown(r7, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r9)

5m34.243428215s ago: executing program 1 (id=233):
r0 = gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
accept(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x6)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8)
writev(r8, 0x0, 0x0)
sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x8080, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff)

5m33.498983332s ago: executing program 32 (id=233):
r0 = gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
accept(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x6)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8)
writev(r8, 0x0, 0x0)
sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x8080, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff)

4m35.981537495s ago: executing program 5 (id=389):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3e40, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x3) (async)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) (async)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) (async)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x4000010, r1, 0x80000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) (async)
creat(&(0x7f0000000440)='./file0\x00', 0x0) (async)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)

4m35.413411565s ago: executing program 5 (id=392):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x4020000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000854)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x8, 0x0, 0x17c, 0x2, 0x800, 0xf9, 0x3f2, 0x1, 0x2, 0x6, 0x2000009, 0x8, 0x9, 0x80000000000, 0xbdc], 0x60000, 0xc1390})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

4m32.001473491s ago: executing program 5 (id=406):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m31.950592425s ago: executing program 5 (id=407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bfa81d03f61c18fb56ef325aae4f8c846f964ffd67a300f5"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = getpid()
getpid()
sched_setscheduler(r3, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='mtd0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/f1\x00', 0x42, 0x1ff)
setxattr(&(0x7f0000000500)='./mnt/f1\x00', &(0x7f0000000600)=@known='user.syz\x00', 0x0, 0x0, 0x0)
setxattr(&(0x7f0000000500)='./mnt/f1\x00', &(0x7f0000000800)=@random={'user.', 'syz2\x00'}, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f00000001c0)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s', 0x0)
r7 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000100)={r4, r2})

4m31.009927236s ago: executing program 5 (id=411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
read(r10, &(0x7f0000000040)=""/252, 0xfc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140), 0x0, 0x4004845, 0x0, 0x0)

4m28.668590418s ago: executing program 5 (id=419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060093eae687115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="bcbf1b332c00"])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prlimit64(0x0, 0x5, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0)
ioprio_set$pid(0x7, 0x0, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x134)
mkdir(&(0x7f0000000000)='./bus\x00', 0x64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0)
open(&(0x7f0000000e80)='.\x00', 0x555502, 0x88)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)

4m28.032358847s ago: executing program 33 (id=419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060093eae687115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="bcbf1b332c00"])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prlimit64(0x0, 0x5, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0)
ioprio_set$pid(0x7, 0x0, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x134)
mkdir(&(0x7f0000000000)='./bus\x00', 0x64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0)
open(&(0x7f0000000e80)='.\x00', 0x555502, 0x88)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)

4m19.710116432s ago: executing program 0 (id=436):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091)
sendmsg$alg(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000300), 0x5c, 0x0, 0x0, 0x24040054}, 0x10)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr\x00')
symlinkat(&(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000440)='./proc\x00')
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000140)={0x8, 0x2, 0xbfe3})
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x35}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, 0x0, 0x0)
prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

4m18.635825406s ago: executing program 0 (id=437):
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(0x0, 0x77, 0x3501)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)
r1 = add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r1, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)={0x2}, 0x8, 0xfffffffffffffff9)
sendmsg$tipc(r3, 0x0, 0x4000889)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@delqdisc={0x24, 0x26, 0x309, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffe0, 0xb}, {0x1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0)
syz_emit_ethernet(0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2c55b40e7d53152a809000000008100400081000200fb"], 0x0)

4m17.933936286s ago: executing program 0 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
read(r10, &(0x7f0000000040)=""/252, 0xfc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140), 0x0, 0x4004845, 0x0, 0x0)

4m16.878216193s ago: executing program 0 (id=443):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0xf, 0x15, "a1cf08b91648712b7e5e8dca1e1976fba5fa403092"}, 0x0, 0x0, 0x0, 0x0, 0x0})

4m12.254459114s ago: executing program 0 (id=448):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d)
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@noprefix}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x2, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r6 = open(&(0x7f00000003c0)='./file2\x00', 0x20381, 0x10dd722b6e14c3dd)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_mark(r1, 0x1, 0x10001040, r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4m11.036538255s ago: executing program 0 (id=450):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00')
r0 = getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280))
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r1, 0x40104cff, &(0x7f0000000640)="51abaf5fc5b1942824b6991c27dde938b6899914abaeec9e0d570ea8c2572b387664f3835e1849fe651023030000005dcb2dbe3652bd81787d5f587500000000000000000000007cedbdda4df6d4e45d0a7221775e61922eeed109718974ed76179fc3ce7491293ea96e9367cd1b6885357d46e1f0b456f24117d37ad0034e123740472fef1bd7d233e2d9dad71dd5c6efc03effa3f4ac683eead79472daea2df19d2384fe5d64bfad1d43d48bbca6b46f1d858638465d0acb0e0e73fad58b657d94aa8a3ecd0df47db1a8d40612ab")
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
listxattr(&(0x7f0000000200)='./proc\x00', &(0x7f0000000540)=""/252, 0xfc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)

4m10.723289874s ago: executing program 34 (id=450):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00')
r0 = getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280))
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r1, 0x40104cff, &(0x7f0000000640)="51abaf5fc5b1942824b6991c27dde938b6899914abaeec9e0d570ea8c2572b387664f3835e1849fe651023030000005dcb2dbe3652bd81787d5f587500000000000000000000007cedbdda4df6d4e45d0a7221775e61922eeed109718974ed76179fc3ce7491293ea96e9367cd1b6885357d46e1f0b456f24117d37ad0034e123740472fef1bd7d233e2d9dad71dd5c6efc03effa3f4ac683eead79472daea2df19d2384fe5d64bfad1d43d48bbca6b46f1d858638465d0acb0e0e73fad58b657d94aa8a3ecd0df47db1a8d40612ab")
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
listxattr(&(0x7f0000000200)='./proc\x00', &(0x7f0000000540)=""/252, 0xfc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)

16.185797288s ago: executing program 2 (id=1105):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080)
syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x400000009)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x1000000201005)
ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x1d)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000ffff7c25e80f5f2e19f0052cbd16ff7f000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fa0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cb9b287d850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

11.891988176s ago: executing program 2 (id=1112):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000230300000000000000000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000e6230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x10002, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0x0) (fail_nth: 2)

10.735684875s ago: executing program 2 (id=1114):
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
socket(0x18, 0x65ad97ec227a036b, 0x2)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
rt_sigsuspend(0xffffffffffffffff, 0x8)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000700)=@ethtool_stats})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x1, 0x7ffffc, 0x2000000, {}, [{0x34, 0x1, [@m_gact={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0xb0000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93b71fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f698fa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10c0328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec800", 0x2000, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38)
close_range(r1, 0xffffffffffffffff, 0x0)

8.498124641s ago: executing program 6 (id=1120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80)

8.342792157s ago: executing program 6 (id=1121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x7, 0x1, 0x0, 0x0, @msi={0x1, 0xe, 0xfff, 0x1}}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.188586947s ago: executing program 4 (id=1123):
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x10003, 0x7})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r4, 0x29, 0x1c, &(0x7f00000005c0)="ff02040000ffffff68122dc39d59aa800775fd58d32f8d3bbee11a48458f31bbb940412dd3b1d763570500000000000000c2d6ae3669c312b1eb0f36f2945d0500000000000000dd0f69aef0b1fb8231d2fdaaa1f20cf86a0000010000000000d6650ec57f0ef35c64ceb0c50000ea68936249bb0381e3ed58635801990fc0ffce470e2bdc504549975cdd00f164bc5d8bdbc7bba1c279d61abd0e998dc5329773b1c31112fb5d812596a8fe1fafaa6089c3066b03f7979cb6a9eccbf603465952d6a30d1ce4cf18109beb8251c876facbdb077a7db838da75d9705fac14f47e14", 0xe1)

7.475262584s ago: executing program 2 (id=1125):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) (fail_nth: 2)

7.23446699s ago: executing program 4 (id=1126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29)
write(r1, &(0x7f0000000000)='7', 0x1)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddb03000400000007000b0005"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000)

6.512038355s ago: executing program 7 (id=1128):
setresuid(0xee01, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, 0x0)
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904"], 0x0)

6.498329646s ago: executing program 6 (id=1129):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(r2, 0x40049409, r2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregs(0xe, r3, 0x4, &(0x7f0000000000)=""/162)

6.197583018s ago: executing program 4 (id=1130):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

5.669557068s ago: executing program 3 (id=1131):
r0 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b08"], 0x24}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108)
r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
r4 = getpid()
ptrace(0x18, r4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5)
socket(0x11, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

5.560087838s ago: executing program 2 (id=1132):
r0 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b08"], 0x24}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108)
r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
r4 = getpid()
ptrace(0x18, r4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5)
socket(0x11, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

5.559109354s ago: executing program 6 (id=1133):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3)

4.71647116s ago: executing program 3 (id=1134):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001800010027bd7000fddbdf251d010600080005000600ff0715000300", @ANYRESOCT], 0x48}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f4251316b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b36c45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f3f4bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38c96b89aa3f24ce0728f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013c80a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"})
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.639815858s ago: executing program 6 (id=1135):
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x18882)
ioctl$NBD_DISCONNECT(r0, 0xab08)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x94)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

4.637302683s ago: executing program 4 (id=1136):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x3e, 0x0, 0x0, 0x1000, 0x3ff, 0x0, 0x0, 0x36b6b9abe5f921aa}}}, &(0x7f0000000300)=<r7=>0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x4, 0x202ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x100, 0x1, 0x78}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1889, 0x40, 0x2, 0x31a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x80, 0x801, 0x2a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7e, 0x0, 0x0, 0x206, 0x0, r1}}], 0x4, &(0x7f0000000540)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xafe, 0x0, 0x0}}, &(0x7f0000001e40))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80600, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x3ff, 0x5, 0xffffffffffffffff, 0x20009, 0x3ffffffffffffffe, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000280), 0x3)
sendmsg$IPVS_CMD_SET_INFO(r11, 0x0, 0x0)
getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000b00000000001c0012000c000100626f6e64000000000c0002000800010006e665b87d4ba931f32290684c5d5df6c1b8b8a83f2f10088626dfb0e86401c84ecfa4f8026ea71756c4834c67bc29efa86a2f03c2178e6230039df2104b403b40e6597451ed0a756b8e28fe7a830b785f8be5ab2841123f2d426d92d508c5faad20927a720564e151fe73252d1cc8a4d76d5004d649e9d5e1e319d876e09cc144477bd6d044bc6bc05ec90cc70214cbfc3b6d2b35c0512759463dbd9a04c8fc23c30c1ed1133d8ddcfa621a9c177a61780e57ad6b5784459f8a0d4e4520f871355c11c1"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004)

4.53338387s ago: executing program 2 (id=1137):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002000000104c054b0200000000000109022400010000a08f090400b7020300000009210a000601222b000905810340"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x20, 0x3e, 0x2b, {0x2b, 0xa, "01001b612b8526792c3cbd450f918d0fb74237cc6e446c4e88e78881ce2a52e871525fa7449eaa19a5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYBLOB="66c41d1af52d13c5369700fcffdc23503b9d3b1ded17aaae4c40a1a61ecedad1ad8871035df5bb22e22cafdf0cbf2f09983801c989e5004915ef2aa2db07a702c1c9b92accb1e8771554026a7097cd7fa0f89e18635fa407e6ef7b2050d9f2044fa5e9e5942836f74f7eafba4201867a22712bba457efdf4bcf1e2a468268ab73bb566ee67a7380354bf3f0ac322459b34bf1f41ea1d27dea8f3a8ed5721f0f7ef1797ae90a5b5242be185b154a7fd4b64dcbae35eced9dcd7a7157a6e5c59ec27eba9913e4847e48ebf1998a48748dcf4ad1c895c5303c9ec0cbe4d1163240f9d4c74a2953ed572c83b55bb95ad2567162b031b26692cbfcac46a", @ANYBLOB="b7e32c18c21f02a8015225e94b8db27d80dcfc211f2df67efa6c282c001d180cbae1811c6a989b8cb94907e67258ac8872348216b9f5aa764f76a4ec053871090e10d43100f6193eaa9c88958b0553d41babf32513e203fc576dcf2106aad1c26eb3bbbfe53b1db389b53f303bae1532ad459a7ea2d9c3853ea0d638d0f1153b9bb183a84f529fdd8822784bd9039b6dd5171a20ccca2e20626203586217fb4dd345505249f968c2fa2c68023b96e7fe110363c75f69c947b9ae6a03a1886d66e5d198a839fce8fa87fe1759904bf11a27ef6a8bbdb58fe836c4508cb4654a1ba153f4f5"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.62504806s ago: executing program 7 (id=1138):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x94)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) (fail_nth: 2)

3.366375151s ago: executing program 4 (id=1139):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x18, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa120000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94)

3.313670111s ago: executing program 6 (id=1140):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
sendmsg$rds(r0, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = io_uring_setup(0x47, 0x0)
io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000380)={0x20, 0x15, 0x3d, "27cbc93327c4af8be3ca1010588c0477e4fb9e57868bc03193e37e836ea0dcb2b791c653340c1d720575b2be56c585993b3307301a12ec92de5ca77e65"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1e}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}})

3.308309831s ago: executing program 3 (id=1141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x57, 0x10, 0x2, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x6d028}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0xdc0, 0x0, &(0x7f0000000500)="b9ff03076804263a9cc17d6aa733", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x1, 0x0, @remote, @local}, @echo_reply={0xe0}}}}}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
writev(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)="2e9bbd3507e03dd65193dfb6c575963f86dd606712e900320400000000000000eeeb", 0x22}, {&(0x7f0000000680)="17a8a7c41e58e8b6cdb8040db329c064116e4c4cbb04627d", 0x18}, {&(0x7f0000000280)="b2d3c384d6efe833d30671889b649ef066ce5ea2", 0x14}], 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8)
ioctl$FITHAW(r0, 0xc0045878)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)

2.366736877s ago: executing program 4 (id=1142):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
sendmsg$rds(r1, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
getsockname$packet(r0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_setup(0x47, 0x0)
io_uring_setup(0x74ff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)

2.270067592s ago: executing program 7 (id=1143):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x9)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
read$FUSE(r2, &(0x7f0000002b40)={0x2020}, 0x2020)

2.050259473s ago: executing program 3 (id=1144):
r0 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b08"], 0x24}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108)
r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
r4 = getpid()
ptrace(0x18, r4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5)
socket(0x11, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

1.95709146s ago: executing program 7 (id=1145):
openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b08"], 0x24}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108)
inotify_init1(0x0)
r2 = getpid()
ptrace(0x18, r2)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

1.344100713s ago: executing program 3 (id=1146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.02739965s ago: executing program 7 (id=1147):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'})
ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102)
r4 = socket$inet6(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
close(r2)

833.217074ms ago: executing program 3 (id=1148):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregs(0xe, r0, 0x4, &(0x7f0000000000)=""/162)

0s ago: executing program 7 (id=1149):
setresuid(0xee01, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, 0x0)
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904"], 0x0)

kernel console output (not intermixed with test programs):

OFTLOCKUP
[  394.770679][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  394.770690][ T9623] Call Trace:
[  394.770696][ T9623]  <TASK>
[  394.770703][ T9623]  dump_stack_lvl+0x100/0x190
[  394.770735][ T9623]  should_fail_ex.cold+0x5/0xa
[  394.770761][ T9623]  should_failslab+0xc2/0x120
[  394.770782][ T9623]  __kmalloc_noprof+0xfc/0x840
[  394.770800][ T9623]  ? bpf_test_init.isra.0+0x88/0x100
[  394.770827][ T9623]  bpf_test_init.isra.0+0x88/0x100
[  394.770853][ T9623]  bpf_prog_test_run_skb+0x48e/0x3530
[  394.770881][ T9623]  ? lock_acquire+0x1d1/0x380
[  394.770899][ T9623]  ? __fget_files+0x34/0x3d0
[  394.770919][ T9623]  ? find_held_lock+0x2b/0x80
[  394.770949][ T9623]  ? __fget_files+0x161/0x3d0
[  394.770973][ T9623]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  394.771000][ T9623]  ? fput+0x7c/0x100
[  394.771022][ T9623]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  394.771047][ T9623]  __sys_bpf+0x2265/0x4a30
[  394.771079][ T9623]  ? __pfx___sys_bpf+0x10/0x10
[  394.771103][ T9623]  ? find_held_lock+0x2b/0x80
[  394.771124][ T9623]  ? get_pid_task+0xfc/0x250
[  394.771146][ T9623]  ? get_pid_task+0xfc/0x250
[  394.771177][ T9623]  ? find_held_lock+0x2b/0x80
[  394.771206][ T9623]  ? rcu_read_lock_any_held+0x6a/0x90
[  394.771230][ T9623]  ? find_held_lock+0x2b/0x80
[  394.771253][ T9623]  ? ksys_write+0x190/0x250
[  394.771269][ T9623]  ? ksys_write+0x190/0x250
[  394.771285][ T9623]  ? lock_acquire+0x1d1/0x380
[  394.771319][ T9623]  ? fput+0x7c/0x100
[  394.771340][ T9623]  ? ksys_write+0x1ac/0x250
[  394.771359][ T9623]  ? __x64_sys_bpf+0xce/0x140
[  394.771375][ T9623]  __x64_sys_bpf+0xce/0x140
[  394.771392][ T9623]  ? do_syscall_64+0xae/0x790
[  394.771414][ T9623]  do_syscall_64+0x123/0x790
[  394.771435][ T9623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.771453][ T9623] RIP: 0033:0x7fbcaa39e159
[  394.771469][ T9623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.771486][ T9623] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  394.771504][ T9623] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  394.771518][ T9623] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[  394.771529][ T9623] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  394.771540][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.771551][ T9623] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  394.771575][ T9623]  </TASK>
[  394.883096][   T30] audit: type=1400 audit(1788231162.385:888): avc:  denied  { append } for  pid=9606 comm="syz.3.904" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  395.128890][   T30] audit: type=1400 audit(1788231162.635:889): avc:  denied  { mount } for  pid=9628 comm="syz.4.911" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  395.458272][ T9630] FAULT_INJECTION: forcing a failure.
[  395.458272][ T9630] name failslab, interval 1, probability 0, space 0, times 0
[  395.471104][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.4.911 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  395.471125][ T9630] Tainted: [L]=SOFTLOCKUP
[  395.471130][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  395.471138][ T9630] Call Trace:
[  395.471142][ T9630]  <TASK>
[  395.471148][ T9630]  dump_stack_lvl+0x100/0x190
[  395.471169][ T9630]  should_fail_ex.cold+0x5/0xa
[  395.471187][ T9630]  should_failslab+0xc2/0x120
[  395.471202][ T9630]  __kmalloc_cache_noprof+0x91/0x6d0
[  395.471220][ T9630]  ? sctp_add_bind_addr+0xae/0x3e0
[  395.471245][ T9630]  sctp_add_bind_addr+0xae/0x3e0
[  395.471265][ T9630]  sctp_do_bind+0x36c/0x760
[  395.471287][ T9630]  sctp_connect_new_asoc+0x5e7/0x770
[  395.471315][ T9630]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  395.471338][ T9630]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  395.471353][ T9630]  __sctp_connect+0x3e7/0xc70
[  395.471375][ T9630]  ? __pfx___sctp_connect+0x10/0x10
[  395.471395][ T9630]  ? selinux_sctp_bind_connect+0xe0/0x230
[  395.471415][ T9630]  __sctp_setsockopt_connectx+0x100/0x190
[  395.471434][ T9630]  sctp_setsockopt+0x46a9/0xb370
[  395.471454][ T9630]  ? __pfx_sctp_setsockopt+0x10/0x10
[  395.471470][ T9630]  ? __fget_files+0x215/0x3d0
[  395.471485][ T9630]  ? selinux_socket_setsockopt+0x6a/0x80
[  395.471500][ T9630]  ? sock_common_setsockopt+0x2e/0xf0
[  395.471512][ T9630]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  395.471527][ T9630]  do_sock_setsockopt+0xf3/0x1d0
[  395.471541][ T9630]  __sys_setsockopt+0x195/0x220
[  395.471560][ T9630]  __x64_sys_setsockopt+0xbd/0x160
[  395.471577][ T9630]  ? do_syscall_64+0xae/0x790
[  395.471589][ T9630]  ? lockdep_hardirqs_on+0x7d/0x110
[  395.471600][ T9630]  do_syscall_64+0x123/0x790
[  395.471614][ T9630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.471627][ T9630] RIP: 0033:0x7fbcaa39e159
[  395.471637][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.471650][ T9630] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  395.471661][ T9630] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  395.471668][ T9630] RDX: 000000000000006e RSI: 0000000000000084 RDI: 000000000000000c
[  395.471675][ T9630] RBP: 00007fbcaa435024 R08: 000000000000001c R09: 0000000000000000
[  395.471681][ T9630] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000
[  395.471688][ T9630] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  395.471701][ T9630]  </TASK>
[  395.666519][ T5693] usb 4-1: USB disconnect, device number 43
[  395.693762][   T30] audit: type=1400 audit(1788231163.195:890): avc:  denied  { unmount } for  pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  395.797169][ T9635] netlink: 'syz.7.912': attribute type 2 has an invalid length.
[  397.366912][   T30] audit: type=1400 audit(1788231164.865:891): avc:  denied  { shutdown } for  pid=9662 comm="syz.7.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  397.484642][   T30] audit: type=1400 audit(1788231164.985:892): avc:  denied  { name_connect } for  pid=9662 comm="syz.7.919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  397.624761][ T9664] autofs4:pid:9664:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e)
[  397.951479][ T9668] cgroup: noprefix used incorrectly
[  398.774780][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  398.774855][   T30] audit: type=1400 audit(1788231166.275:896): avc:  denied  { create } for  pid=9677 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  398.826961][   T30] audit: type=1400 audit(1788231166.335:897): avc:  denied  { write } for  pid=9677 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  398.870900][   T30] audit: type=1400 audit(1788231166.375:898): avc:  denied  { read } for  pid=9677 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  398.908610][   T30] audit: type=1400 audit(1788231166.415:899): avc:  denied  { ioctl } for  pid=9669 comm="syz.6.922" path="/81/tracing/events/kvm/kvm_hv_stimer_cleanup/trigger" dev="tracefs" ino=19680823 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  398.948317][   T30] audit: type=1400 audit(1788231166.455:900): avc:  denied  { setopt } for  pid=9677 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  399.150024][ T9677] Process accounting resumed
[  399.166686][   T30] audit: type=1400 audit(1788231166.665:901): avc:  denied  { write } for  pid=9675 comm="syz.7.923" path="socket:[25371]" dev="sockfs" ino=25371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  399.256649][ T5714] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  399.308979][ T9685] cgroup: noprefix used incorrectly
[  399.853720][ T5714] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  399.875579][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.875627][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  399.875650][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  399.875672][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  399.875689][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  399.946360][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  399.946432][ T5714] usb 3-1: Product: syz
[  399.946446][ T5714] usb 3-1: Manufacturer: syz
[  399.946458][ T5714] usb 3-1: SerialNumber: syz
[  400.176490][ T5714] usb 3-1: config 0 descriptor??
[  401.159107][ T5714] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110
[  401.160267][ T5714] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  402.540013][   T30] audit: type=1400 audit(1788231170.045:902): avc:  denied  { map } for  pid=9701 comm="syz.4.932" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  402.563080][   T30] audit: type=1400 audit(1788231170.045:903): avc:  denied  { execute } for  pid=9701 comm="syz.4.932" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  402.619034][ T5693] usb 3-1: USB disconnect, device number 37
[  402.728608][ T9707] cgroup: noprefix used incorrectly
[  403.559291][ T9713] cgroup: noprefix used incorrectly
[  404.594994][   T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  404.759507][   T25] usb 5-1: Using ep0 maxpacket: 32
[  404.761506][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  404.762327][   T25] usb 5-1: config index 0 descriptor too short (expected 164, got 36)
[  404.762362][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.762384][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.762412][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.764398][   T25] usb 5-1: config 0 descriptor??
[  404.979053][ T9724] netlink: 'syz.2.939': attribute type 2 has an invalid length.
[  405.174067][   T25] hid_parser_main: 12 callbacks suppressed
[  405.176408][   T25] logitech 0003:046D:C29C.0011: unknown main item tag 0x0
[  405.180897][   T25] logitech 0003:046D:C29C.0011: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  405.408527][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.444536][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.724216][   T25] logitech 0003:046D:C29C.0011: no inputs found
[  406.146970][   T25] usb 5-1: USB disconnect, device number 45
[  406.212050][ T9735] fido_id[9735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  406.769816][ T9755] cgroup: noprefix used incorrectly
[  406.895057][ T7556] IPVS: starting estimator thread 0...
[  406.902837][ T9757] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  406.909571][ T9759] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  406.952820][   T30] audit: type=1400 audit(1788231174.455:904): avc:  denied  { shutdown } for  pid=9764 comm="syz.7.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  406.986378][ T9765] IPVS: using max 45 ests per chain, 108000 per kthread
[  407.037673][   T30] audit: type=1400 audit(1788231174.515:905): avc:  denied  { read } for  pid=9764 comm="syz.7.947" path="socket:[25695]" dev="sockfs" ino=25695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  407.496554][ T9773] cgroup: noprefix used incorrectly
[  407.525125][   T30] audit: type=1400 audit(1788231175.025:906): avc:  denied  { write } for  pid=9770 comm="syz.7.948" path="socket:[25709]" dev="sockfs" ino=25709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  408.383069][ T9780] netlink: 'syz.6.951': attribute type 2 has an invalid length.
[  409.304386][   T30] audit: type=1400 audit(1788231176.805:907): avc:  denied  { read } for  pid=9798 comm="syz.6.957" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  409.304447][   T30] audit: type=1400 audit(1788231176.805:908): avc:  denied  { open } for  pid=9798 comm="syz.6.957" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  409.666669][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'.
[  409.685395][ T9799] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  409.685544][ T9799] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  409.706788][   T30] audit: type=1400 audit(1788231177.215:909): avc:  denied  { name_bind } for  pid=9811 comm="syz.2.961" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  409.806335][ T9799] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  409.806456][ T9799] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  410.086287][ T3170] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  410.096327][   T25] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  410.106288][ T5714] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  410.239909][ T3170] usb 4-1: unable to get BOS descriptor or descriptor too short
[  410.240623][ T3170] usb 4-1: not running at top speed; connect to a high speed hub
[  410.240657][ T3170] usb 4-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac
[  410.248014][ T3170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.248035][ T3170] usb 4-1: Product: syz
[  410.248047][ T3170] usb 4-1: Manufacturer: syz
[  410.248059][ T3170] usb 4-1: SerialNumber: syz
[  410.253485][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  410.258269][   T25] usb 5-1: not running at top speed; connect to a high speed hub
[  410.258294][   T25] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac
[  410.268113][ T3170] upd78f0730 4-1:254.0: upd78f0730 converter detected
[  410.272678][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.272699][   T25] usb 5-1: Product: syz
[  410.272711][   T25] usb 5-1: Manufacturer: syz
[  410.272723][   T25] usb 5-1: SerialNumber: syz
[  410.293984][ T3170] usb 4-1: upd78f0730 converter now attached to ttyUSB0
[  410.298279][   T25] upd78f0730 5-1:254.0: upd78f0730 converter detected
[  410.305897][   T25] usb 5-1: upd78f0730 converter now attached to ttyUSB1
[  410.319450][ T5714] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  410.332638][ T5714] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  410.332664][ T5714] usb 8-1: config 0 has no interface number 0
[  410.332703][ T5714] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.332726][ T5714] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.332757][ T5714] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.419435][ T5714] usb 8-1: config 0 descriptor??
[  410.578695][ T9801] binder: 9800:9801 ioctl c0306201 200000000080 returned -14
[  410.615657][ T9816] binder: 9802:9816 ioctl c0306201 200000000080 returned -14
[  410.635657][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.635963][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.636164][   T25] usb 4-1: USB disconnect, device number 44
[  410.659963][ T9818] cgroup: noprefix used incorrectly
[  410.676015][   T25] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  410.687501][   T25] upd78f0730 4-1:254.0: device disconnected
[  410.888250][ T5714] prodikeys 0003:041E:2801.0012: item fetching failed at offset 5/7
[  411.018039][ T5714] prodikeys 0003:041E:2801.0012: hid parse failed
[  411.018138][ T5714] prodikeys 0003:041E:2801.0012: probe with driver prodikeys failed with error -22
[  411.245727][ T5714] usb 8-1: USB disconnect, device number 19
[  411.469547][ T9824] FAULT_INJECTION: forcing a failure.
[  411.469547][ T9824] name failslab, interval 1, probability 0, space 0, times 0
[  411.469583][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.2.963 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.469606][ T9824] Tainted: [L]=SOFTLOCKUP
[  411.469613][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  411.469622][ T9824] Call Trace:
[  411.469627][ T9824]  <TASK>
[  411.469633][ T9824]  dump_stack_lvl+0x100/0x190
[  411.469666][ T9824]  should_fail_ex.cold+0x5/0xa
[  411.469690][ T9824]  should_failslab+0xc2/0x120
[  411.469709][ T9824]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  411.469725][ T9824]  ? __alloc_skb+0x5b7/0x710
[  411.469747][ T9824]  ? __alloc_skb+0x140/0x710
[  411.469774][ T9824]  __alloc_skb+0x140/0x710
[  411.469795][ T9824]  ? __alloc_skb+0x5b7/0x710
[  411.469816][ T9824]  ? __pfx___alloc_skb+0x10/0x10
[  411.469844][ T9824]  netlink_alloc_large_skb+0x69/0x150
[  411.469870][ T9824]  netlink_sendmsg+0x680/0xda0
[  411.469896][ T9824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  411.469920][ T9824]  ? selinux_socket_sendmsg+0x198/0x2f0
[  411.469947][ T9824]  ____sys_sendmsg+0xa4d/0xbe0
[  411.469965][ T9824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  411.469989][ T9824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  411.470012][ T9824]  ? lock_acquire+0x1d1/0x380
[  411.470028][ T9824]  ? get_pid_task+0x2a/0x250
[  411.470050][ T9824]  ___sys_sendmsg+0x190/0x1e0
[  411.470070][ T9824]  ? __pfx____sys_sendmsg+0x10/0x10
[  411.470090][ T9824]  ? get_pid_task+0x106/0x250
[  411.470118][ T9824]  ? find_held_lock+0x2b/0x80
[  411.470152][ T9824]  __sys_sendmsg+0x160/0x210
[  411.470167][ T9824]  ? __pfx___sys_sendmsg+0x10/0x10
[  411.470196][ T9824]  do_syscall_64+0x123/0x790
[  411.470216][ T9824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.470233][ T9824] RIP: 0033:0x7fba96f9e159
[  411.470246][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.470260][ T9824] RSP: 002b:00007fba97e91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  411.470276][ T9824] RAX: ffffffffffffffda RBX: 00007fba97225fa0 RCX: 00007fba96f9e159
[  411.470286][ T9824] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  411.470296][ T9824] RBP: 00007fba97e91090 R08: 0000000000000000 R09: 0000000000000000
[  411.470305][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.470314][ T9824] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffec1537248
[  411.470335][ T9824]  </TASK>
[  411.678863][ T4920] Bluetooth: hci2: command 0x0406 tx timeout
[  411.762874][ T9826] FAULT_INJECTION: forcing a failure.
[  411.762874][ T9826] name failslab, interval 1, probability 0, space 0, times 0
[  411.762917][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.2.965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.762943][ T9826] Tainted: [L]=SOFTLOCKUP
[  411.762949][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  411.762959][ T9826] Call Trace:
[  411.762965][ T9826]  <TASK>
[  411.762972][ T9826]  dump_stack_lvl+0x100/0x190
[  411.763004][ T9826]  should_fail_ex.cold+0x5/0xa
[  411.763031][ T9826]  should_failslab+0xc2/0x120
[  411.763054][ T9826]  __kmalloc_noprof+0xfc/0x840
[  411.763073][ T9826]  ? tomoyo_encode2+0xfb/0x3c0
[  411.763095][ T9826]  tomoyo_encode2+0xfb/0x3c0
[  411.763115][ T9826]  tomoyo_encode+0x29/0x50
[  411.763130][ T9826]  tomoyo_realpath_from_path+0x18c/0x690
[  411.763153][ T9826]  tomoyo_path_number_perm+0x23c/0x580
[  411.763182][ T9826]  ? tomoyo_path_number_perm+0x22e/0x580
[  411.763207][ T9826]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  411.763239][ T9826]  ? __lock_acquire+0x4c5/0x1ec0
[  411.763268][ T9826]  ? __fget_files+0x34/0x3d0
[  411.763287][ T9826]  ? find_held_lock+0x2b/0x80
[  411.763309][ T9826]  ? hook_file_ioctl_common+0x140/0x440
[  411.763332][ T9826]  ? __fget_files+0x21f/0x3d0
[  411.763355][ T9826]  security_file_ioctl+0xd3/0x230
[  411.763383][ T9826]  __x64_sys_ioctl+0xb7/0x210
[  411.763414][ T9826]  do_syscall_64+0x123/0x790
[  411.763438][ T9826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.763469][ T9826] RIP: 0033:0x7fba96f9e159
[  411.763485][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.763502][ T9826] RSP: 002b:00007fba97e91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  411.763521][ T9826] RAX: ffffffffffffffda RBX: 00007fba97225fa0 RCX: 00007fba96f9e159
[  411.763533][ T9826] RDX: 0000000000000000 RSI: 0000000000005202 RDI: 0000000000000003
[  411.763543][ T9826] RBP: 00007fba97e91090 R08: 0000000000000000 R09: 0000000000000000
[  411.763552][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.763562][ T9826] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffec1537248
[  411.763583][ T9826]  </TASK>
[  411.763611][ T9826] ERROR: Out of memory at tomoyo_realpath_from_path.
[  411.836703][ T4920] Bluetooth: hci1: command 0x0406 tx timeout
[  412.199442][   T30] audit: type=1400 audit(1788231179.695:910): avc:  denied  { map } for  pid=9821 comm="syz.3.964" path="socket:[25786]" dev="sockfs" ino=25786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  412.199496][   T30] audit: type=1400 audit(1788231179.695:911): avc:  denied  { read accept } for  pid=9821 comm="syz.3.964" path="socket:[25786]" dev="sockfs" ino=25786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  413.315517][ T3170] usb 5-1: USB disconnect, device number 46
[  413.350889][ T3170] upd78f0730 ttyUSB1: upd78f0730 converter now disconnected from ttyUSB1
[  413.363684][ T3170] upd78f0730 5-1:254.0: device disconnected
[  413.756306][ T4920] Bluetooth: hci2: command 0x0406 tx timeout
[  413.789837][ T9841] ip_tables: iptables: counters copy to user failed while replacing table
[  413.918821][ T4920] Bluetooth: hci1: command 0x0406 tx timeout
[  415.334374][ T9850] cgroup: noprefix used incorrectly
[  416.447260][   T30] audit: type=1400 audit(1788231183.945:912): avc:  denied  { write } for  pid=9860 comm="syz.7.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  416.493409][   T30] audit: type=1400 audit(1788231183.995:913): avc:  denied  { connect } for  pid=9860 comm="syz.7.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  416.524691][ T9865] FAULT_INJECTION: forcing a failure.
[  416.524691][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.524729][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.4.978 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.524751][ T9865] Tainted: [L]=SOFTLOCKUP
[  416.524757][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  416.524766][ T9865] Call Trace:
[  416.524771][ T9865]  <TASK>
[  416.524778][ T9865]  dump_stack_lvl+0x100/0x190
[  416.524805][ T9865]  should_fail_ex.cold+0x5/0xa
[  416.524828][ T9865]  _copy_to_user+0x32/0xd0
[  416.524854][ T9865]  simple_read_from_buffer+0xcb/0x170
[  416.524874][ T9865]  proc_fail_nth_read+0x1af/0x230
[  416.524894][ T9865]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.524913][ T9865]  ? rw_verify_area+0xce/0x6d0
[  416.524935][ T9865]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.524953][ T9865]  vfs_read+0x1e4/0xb40
[  416.524977][ T9865]  ? lock_acquire+0x1d1/0x380
[  416.524993][ T9865]  ? __fget_files+0x34/0x3d0
[  416.525010][ T9865]  ? __pfx_vfs_read+0x10/0x10
[  416.525031][ T9865]  ? find_held_lock+0x2b/0x80
[  416.525052][ T9865]  ? __fget_files+0x215/0x3d0
[  416.525073][ T9865]  ? __fget_files+0x21f/0x3d0
[  416.525097][ T9865]  ksys_read+0x12a/0x250
[  416.525119][ T9865]  ? __pfx_ksys_read+0x10/0x10
[  416.525148][ T9865]  do_syscall_64+0x123/0x790
[  416.525174][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.525190][ T9865] RIP: 0033:0x7fbcaa35e98e
[  416.525203][ T9865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  416.525218][ T9865] RSP: 002b:00007fbcab1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  416.525234][ T9865] RAX: ffffffffffffffda RBX: 00007fbcab1d76c0 RCX: 00007fbcaa35e98e
[  416.525244][ T9865] RDX: 000000000000000f RSI: 00007fbcab1d70a0 RDI: 0000000000000004
[  416.525253][ T9865] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  416.525262][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.525271][ T9865] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  416.525292][ T9865]  </TASK>
[  416.945039][   T30] audit: type=1400 audit(1788231184.445:914): avc:  denied  { create } for  pid=9871 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  417.020270][   T30] audit: type=1400 audit(1788231184.515:915): avc:  denied  { write } for  pid=9871 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  417.186731][ T9878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.983'.
[  417.473749][   T30] audit: type=1400 audit(1788231184.975:916): avc:  denied  { ioctl } for  pid=9883 comm="syz.6.984" path="socket:[26790]" dev="sockfs" ino=26790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  417.483235][ T9884] FAULT_INJECTION: forcing a failure.
[  417.483235][ T9884] name failslab, interval 1, probability 0, space 0, times 0
[  417.483262][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.6.984 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.483283][ T9884] Tainted: [L]=SOFTLOCKUP
[  417.483289][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  417.483298][ T9884] Call Trace:
[  417.483303][ T9884]  <TASK>
[  417.483309][ T9884]  dump_stack_lvl+0x100/0x190
[  417.483336][ T9884]  should_fail_ex.cold+0x5/0xa
[  417.483358][ T9884]  should_failslab+0xc2/0x120
[  417.483377][ T9884]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  417.483394][ T9884]  ? __alloc_skb+0x5b7/0x710
[  417.483416][ T9884]  ? __alloc_skb+0x140/0x710
[  417.483441][ T9884]  __alloc_skb+0x140/0x710
[  417.483462][ T9884]  ? __alloc_skb+0x5b7/0x710
[  417.483484][ T9884]  ? __pfx___alloc_skb+0x10/0x10
[  417.483505][ T9884]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  417.483529][ T9884]  ? sock_has_perm+0x25a/0x2f0
[  417.483550][ T9884]  ? __pfx_sock_has_perm+0x10/0x10
[  417.483572][ T9884]  netlink_alloc_large_skb+0x69/0x150
[  417.483597][ T9884]  netlink_sendmsg+0x680/0xda0
[  417.483623][ T9884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.483647][ T9884]  ? selinux_socket_sendmsg+0x198/0x2f0
[  417.483673][ T9884]  ____sys_sendmsg+0xa4d/0xbe0
[  417.483691][ T9884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.483715][ T9884]  ? __pfx_____sys_sendmsg+0x10/0x10
[  417.483739][ T9884]  ? lock_acquire+0x1d1/0x380
[  417.483754][ T9884]  ? get_pid_task+0x2a/0x250
[  417.483777][ T9884]  ___sys_sendmsg+0x190/0x1e0
[  417.483798][ T9884]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.483817][ T9884]  ? get_pid_task+0x106/0x250
[  417.483845][ T9884]  ? find_held_lock+0x2b/0x80
[  417.483879][ T9884]  __sys_sendmsg+0x160/0x210
[  417.483894][ T9884]  ? __pfx___sys_sendmsg+0x10/0x10
[  417.483920][ T9884]  do_syscall_64+0x123/0x790
[  417.483940][ T9884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.483957][ T9884] RIP: 0033:0x7f5549b9e159
[  417.483971][ T9884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.483985][ T9884] RSP: 002b:00007f554aa2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.484001][ T9884] RAX: ffffffffffffffda RBX: 00007f5549e25fa0 RCX: 00007f5549b9e159
[  417.484012][ T9884] RDX: 000000002800804c RSI: 00002000000001c0 RDI: 0000000000000004
[  417.484022][ T9884] RBP: 00007f554aa2e090 R08: 0000000000000000 R09: 0000000000000000
[  417.484031][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.484040][ T9884] R13: 00007f5549e26038 R14: 00007f5549e25fa0 R15: 00007ffeb1c0beb8
[  417.484061][ T9884]  </TASK>
[  417.506311][ T5714] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  417.625483][ T9882] FAULT_INJECTION: forcing a failure.
[  417.625483][ T9882] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.625509][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.3.985 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.625531][ T9882] Tainted: [L]=SOFTLOCKUP
[  417.625536][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  417.625545][ T9882] Call Trace:
[  417.625551][ T9882]  <TASK>
[  417.625557][ T9882]  dump_stack_lvl+0x100/0x190
[  417.625586][ T9882]  should_fail_ex.cold+0x5/0xa
[  417.625609][ T9882]  _copy_to_user+0x32/0xd0
[  417.625635][ T9882]  simple_read_from_buffer+0xcb/0x170
[  417.625655][ T9882]  proc_fail_nth_read+0x1af/0x230
[  417.625674][ T9882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  417.625694][ T9882]  ? rw_verify_area+0xce/0x6d0
[  417.625716][ T9882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  417.625733][ T9882]  vfs_read+0x1e4/0xb40
[  417.625756][ T9882]  ? lock_acquire+0x1d1/0x380
[  417.625773][ T9882]  ? __fget_files+0x34/0x3d0
[  417.625791][ T9882]  ? __pfx_vfs_read+0x10/0x10
[  417.625811][ T9882]  ? find_held_lock+0x2b/0x80
[  417.625833][ T9882]  ? __fget_files+0x215/0x3d0
[  417.625853][ T9882]  ? __fget_files+0x21f/0x3d0
[  417.625877][ T9882]  ksys_read+0x12a/0x250
[  417.625900][ T9882]  ? __pfx_ksys_read+0x10/0x10
[  417.625929][ T9882]  do_syscall_64+0x123/0x790
[  417.625949][ T9882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.625965][ T9882] RIP: 0033:0x7f1381b5e98e
[  417.625978][ T9882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  417.625993][ T9882] RSP: 002b:00007f1382b45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  417.626009][ T9882] RAX: ffffffffffffffda RBX: 00007f1382b466c0 RCX: 00007f1381b5e98e
[  417.626020][ T9882] RDX: 000000000000000f RSI: 00007f1382b460a0 RDI: 0000000000000004
[  417.626029][ T9882] RBP: 00007f1382b46090 R08: 0000000000000000 R09: 0000000000000000
[  417.626039][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.626048][ T9882] R13: 00007f1381e26038 R14: 00007f1381e25fa0 R15: 00007fffe1ff3c98
[  417.626070][ T9882]  </TASK>
[  417.685320][ T5714] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  417.707971][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.708010][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.743421][ T5714] usb 3-1: config 0 descriptor??
[  418.104888][   T30] audit: type=1400 audit(1788231185.605:917): avc:  denied  { bind } for  pid=9879 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  418.259058][   T30] audit: type=1400 audit(1788231185.765:918): avc:  denied  { ioctl } for  pid=9891 comm="syz.3.989" path="socket:[25924]" dev="sockfs" ino=25924 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  418.262093][ T5714] usbhid 3-1:0.0: can't add hid device: -71
[  418.262164][ T5714] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  418.274502][ T5714] usb 3-1: USB disconnect, device number 38
[  419.162123][ T5714] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  419.310781][ T5714] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  419.328028][ T5714] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.328089][ T5714] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  419.328110][ T5714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  419.328128][ T5714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  419.328144][ T5714] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  419.337037][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  419.337060][ T5714] usb 8-1: Product: syz
[  419.337077][ T5714] usb 8-1: Manufacturer: syz
[  419.337089][ T5714] usb 8-1: SerialNumber: syz
[  419.413310][ T5714] usb 8-1: config 0 descriptor??
[  419.959521][ T5714] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -110
[  419.959723][ T5714] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5
[  420.074214][ T9917] FAULT_INJECTION: forcing a failure.
[  420.074214][ T9917] name failslab, interval 1, probability 0, space 0, times 0
[  420.095287][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.4.996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.095316][ T9917] Tainted: [L]=SOFTLOCKUP
[  420.095322][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  420.095332][ T9917] Call Trace:
[  420.095338][ T9917]  <TASK>
[  420.095345][ T9917]  dump_stack_lvl+0x100/0x190
[  420.095377][ T9917]  should_fail_ex.cold+0x5/0xa
[  420.095404][ T9917]  should_failslab+0xc2/0x120
[  420.095424][ T9917]  __kmalloc_cache_node_noprof+0x94/0x720
[  420.095445][ T9917]  ? __get_vm_area_node+0x124/0x350
[  420.095469][ T9917]  __get_vm_area_node+0x124/0x350
[  420.095490][ T9917]  __vmalloc_node_range_noprof+0x268/0x1420
[  420.095511][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.095534][ T9917]  ? up_write+0x2dc/0x5b0
[  420.095555][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.095574][ T9917]  ? lock_acquire+0x1d1/0x380
[  420.095591][ T9917]  ? find_held_lock+0x2b/0x80
[  420.095613][ T9917]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  420.095634][ T9917]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  420.095660][ T9917]  ? avc_has_perm_noaudit+0x145/0x3b0
[  420.095680][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.095698][ T9917]  __vmalloc_node_noprof+0xad/0xf0
[  420.095718][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.095739][ T9917]  __vmalloc_noprof+0xa3/0x120
[  420.095759][ T9917]  ? __pfx___vmalloc_noprof+0x10/0x10
[  420.095779][ T9917]  ? rcu_is_watching+0x13/0xc0
[  420.095800][ T9917]  ? cap_capable+0x107/0x430
[  420.095824][ T9917]  bpf_prog_alloc_no_stats+0x59/0x690
[  420.095843][ T9917]  ? security_capable+0x80/0x260
[  420.095867][ T9917]  bpf_prog_alloc+0x3b/0x200
[  420.095885][ T9917]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  420.095904][ T9917]  bpf_prog_load+0x49e/0x2a80
[  420.095930][ T9917]  ? __pfx_bpf_prog_load+0x10/0x10
[  420.095961][ T9917]  __sys_bpf+0x1f46/0x4a30
[  420.095982][ T9917]  ? __pfx___sys_bpf+0x10/0x10
[  420.095998][ T9917]  ? find_held_lock+0x2b/0x80
[  420.096012][ T9917]  ? get_pid_task+0xfc/0x250
[  420.096026][ T9917]  ? get_pid_task+0xfc/0x250
[  420.096044][ T9917]  ? find_held_lock+0x2b/0x80
[  420.096061][ T9917]  ? rcu_read_lock_any_held+0x6a/0x90
[  420.096077][ T9917]  ? find_held_lock+0x2b/0x80
[  420.096091][ T9917]  ? ksys_write+0x190/0x250
[  420.096100][ T9917]  ? ksys_write+0x190/0x250
[  420.096109][ T9917]  ? lock_acquire+0x1d1/0x380
[  420.096129][ T9917]  ? fput+0x7c/0x100
[  420.096141][ T9917]  ? ksys_write+0x1ac/0x250
[  420.096152][ T9917]  ? __x64_sys_bpf+0xce/0x140
[  420.096162][ T9917]  __x64_sys_bpf+0xce/0x140
[  420.096172][ T9917]  ? do_syscall_64+0xae/0x790
[  420.096185][ T9917]  do_syscall_64+0x123/0x790
[  420.096200][ T9917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.096217][ T9917] RIP: 0033:0x7fbcaa39e159
[  420.096231][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.096253][ T9917] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  420.096271][ T9917] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  420.096282][ T9917] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  420.096293][ T9917] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  420.096303][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.096312][ T9917] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  420.096332][ T9917]  </TASK>
[  420.196699][ T9917] syz.4.996: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  420.196765][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz.4.996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.196786][ T9917] Tainted: [L]=SOFTLOCKUP
[  420.196792][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  420.196801][ T9917] Call Trace:
[  420.196807][ T9917]  <TASK>
[  420.196813][ T9917]  dump_stack_lvl+0x100/0x190
[  420.196839][ T9917]  warn_alloc.cold+0x9e/0xb2
[  420.196857][ T9917]  ? __pfx_warn_alloc+0x10/0x10
[  420.196879][ T9917]  ? __kasan_kmalloc+0x8a/0xb0
[  420.196904][ T9917]  ? __get_vm_area_node+0x22b/0x350
[  420.196926][ T9917]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  420.196948][ T9917]  ? up_write+0x2dc/0x5b0
[  420.196970][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.196989][ T9917]  ? lock_acquire+0x1d1/0x380
[  420.197005][ T9917]  ? find_held_lock+0x2b/0x80
[  420.197026][ T9917]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  420.197044][ T9917]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  420.197067][ T9917]  ? avc_has_perm_noaudit+0x145/0x3b0
[  420.197086][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.197104][ T9917]  __vmalloc_node_noprof+0xad/0xf0
[  420.197123][ T9917]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  420.197144][ T9917]  __vmalloc_noprof+0xa3/0x120
[  420.197163][ T9917]  ? __pfx___vmalloc_noprof+0x10/0x10
[  420.197184][ T9917]  ? rcu_is_watching+0x13/0xc0
[  420.197203][ T9917]  ? cap_capable+0x107/0x430
[  420.197226][ T9917]  bpf_prog_alloc_no_stats+0x59/0x690
[  420.197243][ T9917]  ? security_capable+0x80/0x260
[  420.197264][ T9917]  bpf_prog_alloc+0x3b/0x200
[  420.197281][ T9917]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  420.197300][ T9917]  bpf_prog_load+0x49e/0x2a80
[  420.197324][ T9917]  ? __pfx_bpf_prog_load+0x10/0x10
[  420.197361][ T9917]  __sys_bpf+0x1f46/0x4a30
[  420.197390][ T9917]  ? __pfx___sys_bpf+0x10/0x10
[  420.197413][ T9917]  ? find_held_lock+0x2b/0x80
[  420.197433][ T9917]  ? get_pid_task+0xfc/0x250
[  420.197452][ T9917]  ? get_pid_task+0xfc/0x250
[  420.197478][ T9917]  ? find_held_lock+0x2b/0x80
[  420.197503][ T9917]  ? rcu_read_lock_any_held+0x6a/0x90
[  420.197524][ T9917]  ? find_held_lock+0x2b/0x80
[  420.197543][ T9917]  ? ksys_write+0x190/0x250
[  420.197557][ T9917]  ? ksys_write+0x190/0x250
[  420.197571][ T9917]  ? lock_acquire+0x1d1/0x380
[  420.197601][ T9917]  ? fput+0x7c/0x100
[  420.197620][ T9917]  ? ksys_write+0x1ac/0x250
[  420.197637][ T9917]  ? __x64_sys_bpf+0xce/0x140
[  420.197650][ T9917]  __x64_sys_bpf+0xce/0x140
[  420.197666][ T9917]  ? do_syscall_64+0xae/0x790
[  420.197684][ T9917]  do_syscall_64+0x123/0x790
[  420.197703][ T9917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.197720][ T9917] RIP: 0033:0x7fbcaa39e159
[  420.197738][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.197752][ T9917] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  420.197767][ T9917] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  420.197777][ T9917] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  420.197786][ T9917] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  420.197796][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.197805][ T9917] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  420.197826][ T9917]  </TASK>
[  420.237975][ T9917] Mem-Info:
[  420.237986][ T9917] active_anon:71509 inactive_anon:0 isolated_anon:0
[  420.237986][ T9917]  active_file:0 inactive_file:63012 isolated_file:0
[  420.237986][ T9917]  unevictable:0 dirty:265 writeback:0
[  420.237986][ T9917]  slab_reclaimable:12251 slab_unreclaimable:100950
[  420.237986][ T9917]  mapped:49636 shmem:57806 pagetables:1775
[  420.237986][ T9917]  sec_pagetables:0 bounce:0
[  420.237986][ T9917]  kernel_misc_reclaimable:0
[  420.237986][ T9917]  free:1207637 free_pcp:23170 free_cma:0
[  420.238024][ T9917] Node 0 active_anon:286036kB inactive_anon:0kB active_file:0kB inactive_file:251840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198544kB dirty:1048kB writeback:0kB shmem:231224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:6980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  420.238063][ T9917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  420.238100][ T9917] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.238143][ T9917] lowmem_reserve[]: 0 2470 2471 2471 2471
[  420.238170][ T9917] Node 0 DMA32 free:860992kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:286036kB inactive_anon:0kB active_file:0kB inactive_file:251840kB unevictable:0kB writepending:1048kB zspages:0kB present:3129332kB managed:2530276kB mlocked:0kB bounce:0kB free_pcp:92680kB local_pcp:69032kB free_cma:0kB
[  420.238231][ T9917] lowmem_reserve[]: 0 0 0 0 0
[  420.238256][ T9917] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.238295][ T9917] lowmem_reserve[]: 0 0 0 0 0
[  420.238320][ T9917] Node 1 Normal free:3954228kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.238362][ T9917] lowmem_reserve[]: 0 0 0 0 0
[  420.238387][ T9917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  420.238489][ T9917] Node 0 DMA32: 258*4kB (UME) 532*8kB (UME) 297*16kB (UME) 302*32kB (UME) 168*64kB (UME) 55*128kB (UME) 29*256kB (UME) 36*512kB (UME) 11*1024kB (UM) 2*2048kB (E) 191*4096kB (M) = 861048kB
[  420.238610][ T9917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  420.238683][ T9917] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 4*16kB (UM) 6*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 964*4096kB (UM) = 3954228kB
[  420.238802][ T9917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  420.238814][ T9917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  420.238825][ T9917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  420.238836][ T9917] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  420.238848][ T9917] 120814 total pagecache pages
[  420.238853][ T9917] 0 pages in swap cache
[  420.238858][ T9917] Free swap  = 124996kB
[  420.238863][ T9917] Total swap = 124996kB
[  420.238869][ T9917] 2097051 pages RAM
[  420.238874][ T9917] 0 pages HighMem/MovableOnly
[  420.238879][ T9917] 432847 pages reserved
[  420.238884][ T9917] 0 pages cma reserved
[  420.816352][ T5714] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  420.966316][ T5714] usb 7-1: Using ep0 maxpacket: 32
[  420.967816][ T5714] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  420.974539][ T5714] usb 7-1: config 2 has an invalid interface number: 88 but max is 0
[  420.974560][ T5714] usb 7-1: config 2 has no interface number 0
[  420.974590][ T5714] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  420.974611][ T5714] usb 7-1: config 2 interface 88 has no altsetting 0
[  420.980552][ T5714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  420.980573][ T5714] usb 7-1: Product: syz
[  420.980585][ T5714] usb 7-1: Manufacturer: syz
[  420.980597][ T5714] usb 7-1: SerialNumber: syz
[  421.049464][ T9922] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  421.104528][ T9934] FAULT_INJECTION: forcing a failure.
[  421.104528][ T9934] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  421.104556][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz.3.1000 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.104580][ T9934] Tainted: [L]=SOFTLOCKUP
[  421.104586][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  421.104595][ T9934] Call Trace:
[  421.104601][ T9934]  <TASK>
[  421.104607][ T9934]  dump_stack_lvl+0x100/0x190
[  421.104633][ T9934]  should_fail_ex.cold+0x5/0xa
[  421.104652][ T9934]  ? prepare_alloc_pages+0x16d/0x5b0
[  421.104673][ T9934]  should_fail_alloc_page+0xeb/0x140
[  421.104693][ T9934]  prepare_alloc_pages+0x1f0/0x5b0
[  421.104715][ T9934]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  421.104761][ T9934]  ? lock_acquire+0x1d1/0x380
[  421.104776][ T9934]  ? process_measurement+0x1567/0x2350
[  421.104802][ T9934]  ? __pfx___might_resched+0x10/0x10
[  421.104819][ T9934]  ? find_held_lock+0x2b/0x80
[  421.104839][ T9934]  ? process_measurement+0x4c8/0x2350
[  421.104861][ T9934]  ? process_measurement+0x4c8/0x2350
[  421.104883][ T9934]  ? down_write+0x146/0x1f0
[  421.104903][ T9934]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  421.104931][ T9934]  ? process_measurement+0x1f4/0x2350
[  421.104957][ T9934]  ? __lock_acquire+0x4c5/0x1ec0
[  421.104978][ T9934]  ? __lock_acquire+0x4c5/0x1ec0
[  421.104995][ T9934]  ? lock_acquire+0x1d1/0x380
[  421.105010][ T9934]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  421.105029][ T9934]  ? policy_nodemask+0xed/0x4f0
[  421.105050][ T9934]  alloc_pages_mpol+0x201/0x550
[  421.105070][ T9934]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  421.105088][ T9934]  ? is_bpf_text_address+0x8a/0x1a0
[  421.105107][ T9934]  ? bpf_ksym_find+0x128/0x1c0
[  421.105129][ T9934]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  421.105155][ T9934]  ___kmalloc_large_node+0xe8/0x130
[  421.105176][ T9934]  __kmalloc_large_node_noprof+0x1c/0x70
[  421.105195][ T9934]  ? __lock_acquire+0x4c5/0x1ec0
[  421.105211][ T9934]  __kmalloc_noprof+0x5a8/0x840
[  421.105226][ T9934]  ? iovec_from_user+0x8d/0x140
[  421.105253][ T9934]  iovec_from_user+0x8d/0x140
[  421.105277][ T9934]  __import_iovec+0x81/0x640
[  421.105298][ T9934]  ? __might_fault+0x90/0x140
[  421.105319][ T9934]  ? __might_fault+0xc5/0x140
[  421.105343][ T9934]  import_iovec+0x101/0x130
[  421.105369][ T9934]  copy_msghdr_from_user+0x2c6/0x4c0
[  421.105390][ T9934]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  421.105415][ T9934]  ? lock_acquire+0x1d1/0x380
[  421.105429][ T9934]  ? get_pid_task+0x2a/0x250
[  421.105451][ T9934]  ___sys_sendmsg+0x106/0x1e0
[  421.105472][ T9934]  ? __pfx____sys_sendmsg+0x10/0x10
[  421.105491][ T9934]  ? get_pid_task+0x106/0x250
[  421.105519][ T9934]  ? rcu_read_lock_any_held+0x6a/0x90
[  421.105550][ T9934]  ? __pfx_do_sys_openat2+0x10/0x10
[  421.105574][ T9934]  __sys_sendmsg+0x160/0x210
[  421.105590][ T9934]  ? __pfx___sys_sendmsg+0x10/0x10
[  421.105616][ T9934]  do_syscall_64+0x123/0x790
[  421.105635][ T9934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.105651][ T9934] RIP: 0033:0x7f1381b9e159
[  421.105665][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.105679][ T9934] RSP: 002b:00007f1382b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  421.105695][ T9934] RAX: ffffffffffffffda RBX: 00007f1381e25fa0 RCX: 00007f1381b9e159
[  421.105705][ T9934] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003
[  421.105715][ T9934] RBP: 00007f1382b46090 R08: 0000000000000000 R09: 0000000000000000
[  421.105730][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.105739][ T9934] R13: 00007f1381e26038 R14: 00007f1381e25fa0 R15: 00007fffe1ff3c98
[  421.105760][ T9934]  </TASK>
[  421.381716][ T5795] usb 8-1: USB disconnect, device number 20
[  421.489669][ T9922] netlink: 220 bytes leftover after parsing attributes in process `syz.6.998'.
[  421.489687][ T9922] tc_dump_action: action bad kind
[  421.782158][ T5714] asix 7-1:2.88: probe with driver asix failed with error -71
[  421.820162][ T5714] usb 7-1: USB disconnect, device number 30
[  422.313771][   T30] audit: type=1400 audit(1788231189.815:919): avc:  denied  { setopt } for  pid=9949 comm="syz.7.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  422.607398][ T9952] FAULT_INJECTION: forcing a failure.
[  422.607398][ T9952] name failslab, interval 1, probability 0, space 0, times 0
[  422.607429][ T9952] CPU: 1 UID: 0 PID: 9952 Comm: syz.6.1004 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.607445][ T9952] Tainted: [L]=SOFTLOCKUP
[  422.607449][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  422.607455][ T9952] Call Trace:
[  422.607459][ T9952]  <TASK>
[  422.607463][ T9952]  dump_stack_lvl+0x100/0x190
[  422.607483][ T9952]  should_fail_ex.cold+0x5/0xa
[  422.607499][ T9952]  should_failslab+0xc2/0x120
[  422.607513][ T9952]  __kmalloc_cache_node_noprof+0x94/0x720
[  422.607527][ T9952]  ? __get_vm_area_node+0x124/0x350
[  422.607541][ T9952]  __get_vm_area_node+0x124/0x350
[  422.607556][ T9952]  __vmalloc_node_range_noprof+0x268/0x1420
[  422.607570][ T9952]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  422.607587][ T9952]  ? up_write+0x2dc/0x5b0
[  422.607616][ T9952]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  422.607630][ T9952]  ? lock_acquire+0x1d1/0x380
[  422.607642][ T9952]  ? find_held_lock+0x2b/0x80
[  422.607657][ T9952]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  422.607670][ T9952]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  422.607686][ T9952]  ? avc_has_perm_noaudit+0x145/0x3b0
[  422.607700][ T9952]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  422.607713][ T9952]  __vmalloc_node_noprof+0xad/0xf0
[  422.607727][ T9952]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  422.607742][ T9952]  __vmalloc_noprof+0xa3/0x120
[  422.607755][ T9952]  ? __pfx___vmalloc_noprof+0x10/0x10
[  422.607770][ T9952]  ? rcu_is_watching+0x13/0xc0
[  422.607784][ T9952]  ? cap_capable+0x107/0x430
[  422.607800][ T9952]  bpf_prog_alloc_no_stats+0x59/0x690
[  422.607813][ T9952]  ? security_capable+0x80/0x260
[  422.607828][ T9952]  bpf_prog_alloc+0x3b/0x200
[  422.607840][ T9952]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  422.607853][ T9952]  bpf_prog_load+0x49e/0x2a80
[  422.607870][ T9952]  ? __pfx_bpf_prog_load+0x10/0x10
[  422.607896][ T9952]  __sys_bpf+0x1f46/0x4a30
[  422.607917][ T9952]  ? __pfx___sys_bpf+0x10/0x10
[  422.607933][ T9952]  ? find_held_lock+0x2b/0x80
[  422.607947][ T9952]  ? get_pid_task+0xfc/0x250
[  422.607962][ T9952]  ? get_pid_task+0xfc/0x250
[  422.607980][ T9952]  ? find_held_lock+0x2b/0x80
[  422.607997][ T9952]  ? rcu_read_lock_any_held+0x6a/0x90
[  422.608012][ T9952]  ? find_held_lock+0x2b/0x80
[  422.608026][ T9952]  ? ksys_write+0x190/0x250
[  422.608036][ T9952]  ? ksys_write+0x190/0x250
[  422.608045][ T9952]  ? lock_acquire+0x1d1/0x380
[  422.608065][ T9952]  ? fput+0x7c/0x100
[  422.608077][ T9952]  ? ksys_write+0x1ac/0x250
[  422.608089][ T9952]  ? __x64_sys_bpf+0xce/0x140
[  422.608098][ T9952]  __x64_sys_bpf+0xce/0x140
[  422.608111][ T9952]  ? do_syscall_64+0xae/0x790
[  422.608124][ T9952]  do_syscall_64+0x123/0x790
[  422.608137][ T9952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.608149][ T9952] RIP: 0033:0x7f5549b9e159
[  422.608158][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.608168][ T9952] RSP: 002b:00007f554aa2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  422.608180][ T9952] RAX: ffffffffffffffda RBX: 00007f5549e25fa0 RCX: 00007f5549b9e159
[  422.608186][ T9952] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  422.608193][ T9952] RBP: 00007f554aa2e090 R08: 0000000000000000 R09: 0000000000000000
[  422.608199][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.608205][ T9952] R13: 00007f5549e26038 R14: 00007f5549e25fa0 R15: 00007ffeb1c0beb8
[  422.608219][ T9952]  </TASK>
[  423.831207][ T9958] netlink: 'syz.6.1006': attribute type 1 has an invalid length.
[  423.918895][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  423.939294][   T30] audit: type=1400 audit(1788231191.445:920): avc:  denied  { setopt } for  pid=9960 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.978191][ T9958] 8021q: adding VLAN 0 to HW filter on device bond1
[  424.006964][   T30] audit: type=1400 audit(1788231191.505:921): avc:  denied  { connect } for  pid=9960 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  424.055089][   T30] audit: type=1400 audit(1788231191.555:922): avc:  denied  { read } for  pid=9960 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  424.072266][ T9962] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[  424.342752][ T9970] FAULT_INJECTION: forcing a failure.
[  424.342752][ T9970] name failslab, interval 1, probability 0, space 0, times 0
[  424.342789][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.6.1010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.342812][ T9970] Tainted: [L]=SOFTLOCKUP
[  424.342818][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  424.342828][ T9970] Call Trace:
[  424.342833][ T9970]  <TASK>
[  424.342838][ T9970]  dump_stack_lvl+0x100/0x190
[  424.342865][ T9970]  should_fail_ex.cold+0x5/0xa
[  424.342888][ T9970]  should_failslab+0xc2/0x120
[  424.342907][ T9970]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  424.342925][ T9970]  ? __alloc_skb+0x5b7/0x710
[  424.342948][ T9970]  ? __alloc_skb+0x140/0x710
[  424.342973][ T9970]  __alloc_skb+0x140/0x710
[  424.342994][ T9970]  ? __alloc_skb+0x5b7/0x710
[  424.343016][ T9970]  ? __pfx___alloc_skb+0x10/0x10
[  424.343044][ T9970]  netlink_alloc_large_skb+0x69/0x150
[  424.343070][ T9970]  netlink_sendmsg+0x680/0xda0
[  424.343099][ T9970]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.343130][ T9970]  ? selinux_socket_sendmsg+0x198/0x2f0
[  424.343156][ T9970]  ____sys_sendmsg+0xa4d/0xbe0
[  424.343174][ T9970]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.343197][ T9970]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.343220][ T9970]  ? lock_acquire+0x1d1/0x380
[  424.343236][ T9970]  ? get_pid_task+0x2a/0x250
[  424.343258][ T9970]  ___sys_sendmsg+0x190/0x1e0
[  424.343279][ T9970]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.343298][ T9970]  ? get_pid_task+0x106/0x250
[  424.343325][ T9970]  ? find_held_lock+0x2b/0x80
[  424.343359][ T9970]  __sys_sendmsg+0x160/0x210
[  424.343375][ T9970]  ? __pfx___sys_sendmsg+0x10/0x10
[  424.343401][ T9970]  do_syscall_64+0x123/0x790
[  424.343421][ T9970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.343437][ T9970] RIP: 0033:0x7f5549b9e159
[  424.343451][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.343465][ T9970] RSP: 002b:00007f554aa2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.343480][ T9970] RAX: ffffffffffffffda RBX: 00007f5549e25fa0 RCX: 00007f5549b9e159
[  424.343491][ T9970] RDX: 0000000000000802 RSI: 000020000000c2c0 RDI: 0000000000000003
[  424.343500][ T9970] RBP: 00007f554aa2e090 R08: 0000000000000000 R09: 0000000000000000
[  424.343509][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.343518][ T9970] R13: 00007f5549e26038 R14: 00007f5549e25fa0 R15: 00007ffeb1c0beb8
[  424.343539][ T9970]  </TASK>
[  424.446935][ T5714] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  424.479228][ T3170] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  424.597798][ T5714] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  424.605081][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.605119][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.670255][ T5714] usb 4-1: config 0 descriptor??
[  424.696314][ T3170] usb 3-1: Using ep0 maxpacket: 16
[  424.702057][ T3170] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  424.712409][ T3170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.723361][ T3170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  424.735955][ T3170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.744638][ T3170] usb 3-1: Product: syz
[  424.749863][ T3170] usb 3-1: Manufacturer: syz
[  424.749890][ T3170] usb 3-1: SerialNumber: syz
[  424.790965][ T3170] usb 3-1: 0:2 : does not exist
[  424.802650][ T3170] usb 3-1: unit 9 not found!
[  424.841045][ T9972] syzkaller0: entered promiscuous mode
[  424.841112][ T9972] syzkaller0: entered allmulticast mode
[  424.995227][   T30] audit: type=1400 audit(1788231192.495:923): avc:  denied  { read write } for  pid=9971 comm="syz.6.1011" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  425.021229][ T3170] usb 3-1: USB disconnect, device number 39
[  425.032954][   T30] audit: type=1400 audit(1788231192.535:924): avc:  denied  { open } for  pid=9971 comm="syz.6.1011" path="/100/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  425.192629][ T5714] cypress 0003:04B4:DE64.0013: item fetching failed at offset 1/24
[  425.193085][ T5714] cypress 0003:04B4:DE64.0013: parse failed
[  425.193151][ T5714] cypress 0003:04B4:DE64.0013: probe with driver cypress failed with error -22
[  425.264821][ T9976] FAULT_INJECTION: forcing a failure.
[  425.264821][ T9976] name failslab, interval 1, probability 0, space 0, times 0
[  425.279392][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.4.1013 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.279423][ T9976] Tainted: [L]=SOFTLOCKUP
[  425.279429][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  425.279440][ T9976] Call Trace:
[  425.279446][ T9976]  <TASK>
[  425.279454][ T9976]  dump_stack_lvl+0x100/0x190
[  425.279486][ T9976]  should_fail_ex.cold+0x5/0xa
[  425.279512][ T9976]  should_failslab+0xc2/0x120
[  425.279534][ T9976]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  425.279554][ T9976]  ? __alloc_skb+0x5b7/0x710
[  425.279587][ T9976]  ? __alloc_skb+0x140/0x710
[  425.279617][ T9976]  __alloc_skb+0x140/0x710
[  425.279642][ T9976]  ? __alloc_skb+0x5b7/0x710
[  425.279669][ T9976]  ? __pfx___alloc_skb+0x10/0x10
[  425.279702][ T9976]  netlink_alloc_large_skb+0x69/0x150
[  425.279731][ T9976]  netlink_sendmsg+0x680/0xda0
[  425.279762][ T9976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.279791][ T9976]  ? selinux_socket_sendmsg+0x198/0x2f0
[  425.279823][ T9976]  ____sys_sendmsg+0xa4d/0xbe0
[  425.279844][ T9976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.279873][ T9976]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.279905][ T9976]  ? lock_acquire+0x1d1/0x380
[  425.279923][ T9976]  ? get_pid_task+0x2a/0x250
[  425.279949][ T9976]  ___sys_sendmsg+0x190/0x1e0
[  425.279975][ T9976]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.279998][ T9976]  ? get_pid_task+0x106/0x250
[  425.280032][ T9976]  ? find_held_lock+0x2b/0x80
[  425.280071][ T9976]  __sys_sendmsg+0x160/0x210
[  425.280091][ T9976]  ? __pfx___sys_sendmsg+0x10/0x10
[  425.280122][ T9976]  do_syscall_64+0x123/0x790
[  425.280146][ T9976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.280165][ T9976] RIP: 0033:0x7fbcaa39e159
[  425.280183][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.280200][ T9976] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.280220][ T9976] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  425.280233][ T9976] RDX: 000000000000c084 RSI: 00002000000016c0 RDI: 0000000000000003
[  425.280244][ T9976] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  425.280255][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.280267][ T9976] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  425.280292][ T9976]  </TASK>
[  425.789449][   T30] audit: type=1400 audit(1788231193.265:925): avc:  denied  { cmd } for  pid=9978 comm="iou-wrk-9982" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  425.789647][   T30] audit: type=1400 audit(1788231193.285:926): avc:  denied  { setopt } for  pid=9978 comm="syz.4.1014" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  426.948203][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1015'.
[  427.226290][ T5700] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  427.389105][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short
[  427.389545][ T5700] usb 5-1: not running at top speed; connect to a high speed hub
[  427.389570][ T5700] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac
[  427.412656][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.412680][ T5700] usb 5-1: Product: syz
[  427.412692][ T5700] usb 5-1: Manufacturer: syz
[  427.412704][ T5700] usb 5-1: SerialNumber: syz
[  427.438627][ T5700] upd78f0730 5-1:254.0: upd78f0730 converter detected
[  427.449662][   T25] libceph: connect (1)[c::]:6789 error -101
[  427.453638][ T5700] usb 5-1: upd78f0730 converter now attached to ttyUSB0
[  427.459908][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  427.507585][T10006] ceph: No mds server is up or the cluster is laggy
[  427.597369][   T25] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  428.623056][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.623407][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.638524][T10015] binder: 9994:10015 ioctl c0306201 200000000080 returned -14
[  428.958253][ T3170] usb 4-1: USB disconnect, device number 45
[  429.521041][   T30] audit: type=1400 audit(1788231197.025:927): avc:  denied  { create } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  429.558368][   T30] audit: type=1400 audit(1788231197.065:928): avc:  denied  { ioctl } for  pid=10029 comm="syz.6.1024" path="socket:[27416]" dev="sockfs" ino=27416 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  429.746292][ T5693] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  429.845078][   T30] audit: type=1400 audit(1788231197.345:929): avc:  denied  { nosuid_transition } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  429.870117][   T30] audit: type=1400 audit(1788231197.375:930): avc:  denied  { transition } for  pid=10029 comm="syz.6.1024" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  429.902756][   T30] audit: type=1400 audit(1788231197.415:931): avc:  denied  { entrypoint } for  pid=10029 comm="syz.6.1024" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=99 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  429.902820][   T30] audit: type=1400 audit(1788231197.415:932): avc:  denied  { share } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  429.906323][ T5693] usb 4-1: device descriptor read/64, error -71
[  429.971610][   T30] audit: type=1400 audit(1788231197.475:933): avc:  denied  { read } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  429.974657][   T25] usb 5-1: USB disconnect, device number 47
[  429.991628][   T30] audit: type=1400 audit(1788231197.475:934): avc:  denied  { noatsecure } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  430.001671][   T25] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  430.002042][   T25] upd78f0730 5-1:254.0: device disconnected
[  430.045040][   T30] audit: type=1400 audit(1788231197.545:935): avc:  denied  { write } for  pid=10029 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  430.156568][ T5693] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  430.286655][ T5693] usb 4-1: device descriptor read/64, error -71
[  430.399259][ T5693] usb usb4-port1: attempt power cycle
[  430.448591][T10038] cgroup: noprefix used incorrectly
[  430.471079][T10041] cgroup: noprefix used incorrectly
[  430.478009][   T30] audit: type=1400 audit(1788231197.975:936): avc:  denied  { create } for  pid=10040 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  431.147612][ T5693] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  431.198405][ T5693] usb 4-1: device descriptor read/8, error -71
[  431.515389][ T5693] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  431.529315][ T5693] usb 4-1: device descriptor read/8, error -71
[  431.754540][ T5693] usb usb4-port1: unable to enumerate USB device
[  432.325314][T10026] Process accounting paused
[  432.480291][T10051] syzkaller1: entered promiscuous mode
[  432.480330][T10051] syzkaller1: entered allmulticast mode
[  432.741718][T10054] syzkaller0: entered promiscuous mode
[  432.741752][T10054] syzkaller0: entered allmulticast mode
[  434.108092][ T5693] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  434.164330][T10080] syzkaller0: entered promiscuous mode
[  434.164354][T10080] syzkaller0: entered allmulticast mode
[  434.261307][ T5693] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  434.265908][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.265947][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.273872][ T5693] usb 3-1: config 0 descriptor??
[  434.286267][   T25] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  434.441976][   T25] usb 7-1: unable to get BOS descriptor or descriptor too short
[  434.442429][   T25] usb 7-1: not running at top speed; connect to a high speed hub
[  434.442453][   T25] usb 7-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac
[  434.461671][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.461695][   T25] usb 7-1: Product: syz
[  434.461707][   T25] usb 7-1: Manufacturer: syz
[  434.461719][   T25] usb 7-1: SerialNumber: syz
[  434.489513][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  434.489637][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  434.491751][   T25] upd78f0730 7-1:254.0: upd78f0730 converter detected
[  434.549738][   T25] usb 7-1: upd78f0730 converter now attached to ttyUSB0
[  434.609759][T10088] cgroup: noprefix used incorrectly
[  435.308982][ T5693] usbhid 3-1:0.0: can't add hid device: -71
[  435.309075][ T5693] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  435.310912][ T5693] usb 3-1: USB disconnect, device number 40
[  435.461426][T10091] binder: 10074:10091 ioctl c0306201 200000000080 returned -14
[  436.116285][ T5714] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  436.250318][ T5714] usb 4-1: device descriptor read/64, error -71
[  436.506416][ T5714] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  436.646301][ T5714] usb 4-1: device descriptor read/64, error -71
[  436.657342][T10109] FAULT_INJECTION: forcing a failure.
[  436.657342][T10109] name failslab, interval 1, probability 0, space 0, times 0
[  436.672805][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.4.1047 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.672834][T10109] Tainted: [L]=SOFTLOCKUP
[  436.672840][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  436.672849][T10109] Call Trace:
[  436.672856][T10109]  <TASK>
[  436.672863][T10109]  dump_stack_lvl+0x100/0x190
[  436.672895][T10109]  should_fail_ex.cold+0x5/0xa
[  436.672921][T10109]  should_failslab+0xc2/0x120
[  436.672944][T10109]  __kmalloc_noprof+0xfc/0x840
[  436.672963][T10109]  ? bpf_test_init.isra.0+0x88/0x100
[  436.672991][T10109]  bpf_test_init.isra.0+0x88/0x100
[  436.673017][T10109]  bpf_prog_test_run_skb+0x48e/0x3530
[  436.673047][T10109]  ? lock_acquire+0x1d1/0x380
[  436.673064][T10109]  ? __fget_files+0x34/0x3d0
[  436.673083][T10109]  ? find_held_lock+0x2b/0x80
[  436.673108][T10109]  ? __fget_files+0x161/0x3d0
[  436.673133][T10109]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  436.673160][T10109]  ? fput+0x7c/0x100
[  436.673186][T10109]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  436.673211][T10109]  __sys_bpf+0x2265/0x4a30
[  436.673244][T10109]  ? __pfx___sys_bpf+0x10/0x10
[  436.673270][T10109]  ? find_held_lock+0x2b/0x80
[  436.673292][T10109]  ? get_pid_task+0xfc/0x250
[  436.673314][T10109]  ? get_pid_task+0xfc/0x250
[  436.673345][T10109]  ? find_held_lock+0x2b/0x80
[  436.673373][T10109]  ? rcu_read_lock_any_held+0x6a/0x90
[  436.673403][T10109]  ? find_held_lock+0x2b/0x80
[  436.673425][T10109]  ? ksys_write+0x190/0x250
[  436.673440][T10109]  ? ksys_write+0x190/0x250
[  436.673456][T10109]  ? lock_acquire+0x1d1/0x380
[  436.673491][T10109]  ? fput+0x7c/0x100
[  436.673511][T10109]  ? ksys_write+0x1ac/0x250
[  436.673529][T10109]  ? __x64_sys_bpf+0xce/0x140
[  436.673544][T10109]  __x64_sys_bpf+0xce/0x140
[  436.673565][T10109]  ? do_syscall_64+0xae/0x790
[  436.673588][T10109]  do_syscall_64+0x123/0x790
[  436.673610][T10109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.673629][T10109] RIP: 0033:0x7fbcaa39e159
[  436.673646][T10109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.673662][T10109] RSP: 002b:00007fbcab1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  436.673680][T10109] RAX: ffffffffffffffda RBX: 00007fbcaa625fa0 RCX: 00007fbcaa39e159
[  436.673692][T10109] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  436.673703][T10109] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  436.673714][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.673724][T10109] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  436.673749][T10109]  </TASK>
[  436.760707][ T5714] usb usb4-port1: attempt power cycle
[  437.116710][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  437.116749][   T30] audit: type=1400 audit(1788231204.615:939): avc:  denied  { ioctl } for  pid=10113 comm="syz.4.1049" path="socket:[27570]" dev="sockfs" ino=27570 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  437.131432][ T5714] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  437.171233][T10117] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  437.213684][ T3170] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  437.272586][ T5714] usb 4-1: device descriptor read/8, error -71
[  437.344962][ T5693] usb 7-1: USB disconnect, device number 31
[  437.383590][   T30] audit: type=1400 audit(1788231204.835:940): avc:  denied  { ioctl } for  pid=10110 comm="syz.7.1048" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  437.412184][ T3170] usb 8-1: Using ep0 maxpacket: 32
[  437.429665][ T3170] usb 8-1: unable to get BOS descriptor or descriptor too short
[  437.429967][ T3170] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.2a
[  437.433641][ T3170] usb 8-1: config 7 has an invalid interface number: 143 but max is 0
[  437.433669][ T3170] usb 8-1: config 7 has no interface number 0
[  437.433788][ T3170] usb 8-1: config 7 interface 143 has no altsetting 0
[  437.494888][ T3170] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.494947][ T3170] usb 8-1: Product: syz
[  437.494991][ T3170] usb 8-1: Manufacturer: syz
[  437.495027][ T3170] usb 8-1: SerialNumber: syz
[  437.696265][ T5714] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  437.727795][   T30] audit: type=1400 audit(1788231205.235:941): avc:  denied  { read write } for  pid=7541 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  437.790870][ T5714] usb 4-1: device descriptor read/8, error -71
[  437.824177][   T30] audit: type=1400 audit(1788231205.325:942): avc:  denied  { open } for  pid=7541 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  437.864629][   T30] audit: type=1400 audit(1788231205.355:943): avc:  denied  { ioctl } for  pid=7541 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  437.958083][ T5714] usb usb4-port1: unable to enumerate USB device
[  438.008880][   T30] audit: type=1400 audit(1788231205.495:944): avc:  denied  { create } for  pid=10120 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  438.034055][ T5693] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  438.125255][ T5693] upd78f0730 7-1:254.0: device disconnected
[  438.133605][   T30] audit: type=1400 audit(1788231205.645:945): avc:  denied  { setopt } for  pid=10120 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  438.133677][   T30] audit: type=1400 audit(1788231205.645:946): avc:  denied  { bind } for  pid=10120 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  438.133707][   T30] audit: type=1400 audit(1788231205.645:947): avc:  denied  { name_bind } for  pid=10120 comm="syz.2.1050" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  438.133736][   T30] audit: type=1400 audit(1788231205.645:948): avc:  denied  { node_bind } for  pid=10120 comm="syz.2.1050" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  438.562765][ T3170] viperboard 8-1:7.143: version 0.00 found at bus 008 address 022
[  438.598445][ T3170] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  438.598475][ T3170] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  438.633206][ T3170] usb 8-1: USB disconnect, device number 22
[  438.689608][   T25] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  438.796738][ T5693] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  438.841656][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[  438.843847][   T25] usb 3-1: not running at top speed; connect to a high speed hub
[  438.843873][   T25] usb 3-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac
[  438.872132][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.872176][   T25] usb 3-1: Product: syz
[  438.872190][   T25] usb 3-1: Manufacturer: syz
[  438.872202][   T25] usb 3-1: SerialNumber: syz
[  438.910493][   T25] upd78f0730 3-1:254.0: upd78f0730 converter detected
[  439.052619][   T25] usb 3-1: upd78f0730 converter now attached to ttyUSB0
[  439.089600][ T5693] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  439.090483][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.090525][ T5693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.092651][ T5693] usb 7-1: config 0 descriptor??
[  439.591119][ T5693] usbhid 7-1:0.0: can't add hid device: -71
[  439.591238][ T5693] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  439.602007][ T5693] usb 7-1: USB disconnect, device number 32
[  439.605790][T10141] binder: 10120:10141 ioctl c0306201 200000000080 returned -14
[  439.644884][T10138] syzkaller0: entered promiscuous mode
[  439.644918][T10138] syzkaller0: entered allmulticast mode
[  439.669028][T10143] netlink: 'syz.4.1055': attribute type 1 has an invalid length.
[  439.785954][T10143] 8021q: adding VLAN 0 to HW filter on device bond1
[  439.805072][T10147] cgroup: noprefix used incorrectly
[  439.917650][T10143] netlink: 'syz.4.1055': attribute type 10 has an invalid length.
[  439.917679][T10143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1055'.
[  439.917814][T10143] dummy0: entered promiscuous mode
[  440.387644][T10158] FAULT_INJECTION: forcing a failure.
[  440.387644][T10158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.401851][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.7.1059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.401871][T10158] Tainted: [L]=SOFTLOCKUP
[  440.401876][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  440.401883][T10158] Call Trace:
[  440.401887][T10158]  <TASK>
[  440.401892][T10158]  dump_stack_lvl+0x100/0x190
[  440.401915][T10158]  should_fail_ex.cold+0x5/0xa
[  440.401933][T10158]  strncpy_from_user+0x3b/0x2d0
[  440.401950][T10158]  ? get_pid_task+0x106/0x250
[  440.401967][T10158]  path_setxattrat+0x127/0x3b0
[  440.401983][T10158]  ? __pfx_path_setxattrat+0x10/0x10
[  440.401999][T10158]  ? ksys_write+0x190/0x250
[  440.402009][T10158]  ? ksys_write+0x190/0x250
[  440.402029][T10158]  ? fput+0x7c/0x100
[  440.402042][T10158]  ? ksys_write+0x1ac/0x250
[  440.402052][T10158]  ? __pfx_ksys_write+0x10/0x10
[  440.402063][T10158]  __x64_sys_setxattr+0xc6/0x140
[  440.402078][T10158]  ? do_syscall_64+0xae/0x790
[  440.402090][T10158]  ? lockdep_hardirqs_on+0x7d/0x110
[  440.402102][T10158]  do_syscall_64+0x123/0x790
[  440.402115][T10158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.402127][T10158] RIP: 0033:0x7f7f9ed9e159
[  440.402137][T10158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.402147][T10158] RSP: 002b:00007f7f9cff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  440.402159][T10158] RAX: ffffffffffffffda RBX: 00007f7f9f026090 RCX: 00007f7f9ed9e159
[  440.402166][T10158] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  440.402173][T10158] RBP: 00007f7f9cff6090 R08: 0000000000000001 R09: 0000000000000000
[  440.402179][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.402186][T10158] R13: 00007f7f9f026128 R14: 00007f7f9f026090 R15: 00007ffd9c654a58
[  440.402200][T10158]  </TASK>
[  440.600979][T10160] FAULT_INJECTION: forcing a failure.
[  440.600979][T10160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.601015][T10160] CPU: 1 UID: 0 PID: 10160 Comm: syz.4.1060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.601031][T10160] Tainted: [L]=SOFTLOCKUP
[  440.601035][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  440.601042][T10160] Call Trace:
[  440.601046][T10160]  <TASK>
[  440.601051][T10160]  dump_stack_lvl+0x100/0x190
[  440.601071][T10160]  should_fail_ex.cold+0x5/0xa
[  440.601087][T10160]  _copy_from_iter+0x1f4/0x1690
[  440.601108][T10160]  ? __pfx__copy_from_iter+0x10/0x10
[  440.601125][T10160]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  440.601142][T10160]  ? lock_acquire+0x1d1/0x380
[  440.601156][T10160]  copy_page_from_iter+0x238/0x300
[  440.601175][T10160]  tun_build_skb.constprop.0+0x2ea/0x18f0
[  440.601198][T10160]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  440.601216][T10160]  ? unwind_get_return_address+0x59/0xa0
[  440.601239][T10160]  ? lock_acquire+0x1d1/0x380
[  440.601255][T10160]  ? avc_has_perm_noaudit+0x56/0x3b0
[  440.601277][T10160]  ? find_held_lock+0x2b/0x80
[  440.601299][T10160]  ? avc_has_perm_noaudit+0x145/0x3b0
[  440.601315][T10160]  tun_get_user+0x1674/0x3cc0
[  440.601340][T10160]  ? __lock_acquire+0x4c5/0x1ec0
[  440.601351][T10160]  ? __pfx_tun_get_user+0x10/0x10
[  440.601368][T10160]  ? __file_has_perm+0x336/0x460
[  440.601384][T10160]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  440.601401][T10160]  ? find_held_lock+0x2b/0x80
[  440.601415][T10160]  ? tun_get+0x191/0x370
[  440.601430][T10160]  ? tun_get+0x191/0x370
[  440.601449][T10160]  tun_chr_write_iter+0xdc/0x200
[  440.601468][T10160]  vfs_write+0x6af/0x1050
[  440.601486][T10160]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  440.601505][T10160]  ? __pfx_vfs_write+0x10/0x10
[  440.601523][T10160]  ? find_held_lock+0x2b/0x80
[  440.601546][T10160]  ksys_write+0x12a/0x250
[  440.601556][T10160]  ? __pfx_ksys_write+0x10/0x10
[  440.601570][T10160]  do_syscall_64+0x123/0x790
[  440.601584][T10160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.601596][T10160] RIP: 0033:0x7fbcaa35e98e
[  440.601606][T10160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  440.601617][T10160] RSP: 002b:00007fbcab1d6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  440.601629][T10160] RAX: ffffffffffffffda RBX: 00007fbcab1d76c0 RCX: 00007fbcaa35e98e
[  440.601636][T10160] RDX: 000000000000007e RSI: 00002000000000c0 RDI: 00000000000000c8
[  440.601643][T10160] RBP: 00007fbcab1d7090 R08: 0000000000000000 R09: 0000000000000000
[  440.601649][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.601655][T10160] R13: 00007fbcaa626038 R14: 00007fbcaa625fa0 R15: 00007ffc60559a38
[  440.601669][T10160]  </TASK>
[  440.911846][ T5795] usb 3-1: USB disconnect, device number 41
[  440.932974][ T5795] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  440.941184][ T5795] upd78f0730 3-1:254.0: device disconnected
[  442.075327][T10180] FAULT_INJECTION: forcing a failure.
[  442.075327][T10180] name failslab, interval 1, probability 0, space 0, times 0
[  442.075378][T10180] CPU: 0 UID: 0 PID: 10180 Comm: syz.3.1066 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  442.075401][T10180] Tainted: [L]=SOFTLOCKUP
[  442.075407][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  442.075416][T10180] Call Trace:
[  442.075422][T10180]  <TASK>
[  442.075429][T10180]  dump_stack_lvl+0x100/0x190
[  442.075458][T10180]  should_fail_ex.cold+0x5/0xa
[  442.075482][T10180]  should_failslab+0xc2/0x120
[  442.075502][T10180]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  442.075520][T10180]  ? __alloc_skb+0x140/0x710
[  442.075548][T10180]  __alloc_skb+0x140/0x710
[  442.075570][T10180]  ? __alloc_skb+0x5b7/0x710
[  442.075592][T10180]  ? __pfx___alloc_skb+0x10/0x10
[  442.075613][T10180]  ? __pfx__copy_to_iter+0x10/0x10
[  442.075643][T10180]  netlink_dump+0x194/0xd00
[  442.075667][T10180]  ? __pfx_netlink_dump+0x10/0x10
[  442.075698][T10180]  ? skb_copy_datagram_iter+0xa1/0x250
[  442.075721][T10180]  netlink_recvmsg+0x7dc/0xa90
[  442.075745][T10180]  ? __pfx_netlink_recvmsg+0x10/0x10
[  442.075766][T10180]  ? _kstrtoull+0x144/0x200
[  442.075789][T10180]  ? __pfx_netlink_recvmsg+0x10/0x10
[  442.075822][T10180]  sock_recvmsg+0x1d5/0x220
[  442.075842][T10180]  ____sys_recvmsg+0x21e/0x670
[  442.075865][T10180]  ? __pfx_____sys_recvmsg+0x10/0x10
[  442.075892][T10180]  ? __lock_acquire+0x4c5/0x1ec0
[  442.075913][T10180]  ___sys_recvmsg+0x16a/0x1a0
[  442.075934][T10180]  ? __pfx____sys_recvmsg+0x10/0x10
[  442.075959][T10180]  ? lock_acquire+0x1d1/0x380
[  442.075994][T10180]  __x64_sys_recvmsg+0x19a/0x260
[  442.076011][T10180]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  442.076040][T10180]  do_syscall_64+0x123/0x790
[  442.076061][T10180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.076077][T10180] RIP: 0033:0x7f1381b9e159
[  442.076091][T10180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.076106][T10180] RSP: 002b:00007f1382b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  442.076123][T10180] RAX: ffffffffffffffda RBX: 00007f1381e25fa0 RCX: 00007f1381b9e159
[  442.076133][T10180] RDX: 0000000000004002 RSI: 0000200000004ac0 RDI: 0000000000000003
[  442.076144][T10180] RBP: 00007f1382b46090 R08: 0000000000000000 R09: 0000000000000000
[  442.076154][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.076163][T10180] R13: 00007f1381e26038 R14: 00007f1381e25fa0 R15: 00007fffe1ff3c98
[  442.076186][T10180]  </TASK>
[  442.205910][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  442.205930][   T30] audit: type=1400 audit(1788231209.715:1009): avc:  denied  { sys_module } for  pid=10181 comm="syz.6.1067" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  442.293625][   T30] audit: type=1400 audit(1788231209.775:1010): avc:  denied  { setopt } for  pid=10181 comm="syz.6.1067" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  442.311710][T10192] syzkaller0: entered promiscuous mode
[  442.311729][T10192] syzkaller0: entered allmulticast mode
[  442.650136][   T30] audit: type=1400 audit(1788231210.155:1011): avc:  denied  { read write } for  pid=10181 comm="syz.6.1067" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  442.650175][   T30] audit: type=1400 audit(1788231210.155:1012): avc:  denied  { open } for  pid=10181 comm="syz.6.1067" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  442.781518][   T30] audit: type=1400 audit(1788231210.285:1013): avc:  denied  { mounton } for  pid=10181 comm="syz.6.1067" path="/111/file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  442.781583][T10182] fuse: Unknown parameter 'wroup_id˙00000000000000000000'
[  443.159480][   T30] audit: type=1400 audit(1788231210.665:1014): avc:  denied  { read } for  pid=10181 comm="syz.6.1067" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  443.183950][   T30] audit: type=1400 audit(1788231210.665:1015): avc:  denied  { open } for  pid=10181 comm="syz.6.1067" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  443.207707][   T30] audit: type=1400 audit(1788231210.665:1016): avc:  denied  { ioctl } for  pid=10181 comm="syz.6.1067" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  443.597115][   T30] audit: type=1400 audit(1788231211.105:1017): avc:  denied  { cmd } for  pid=10221 comm="iou-wrk-10224" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  443.736005][   T30] audit: type=1400 audit(1788231211.195:1018): avc:  denied  { create } for  pid=10221 comm="syz.7.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  443.787871][T10230] netlink: 'syz.7.1074': attribute type 1 has an invalid length.
[  444.116530][T10230] 8021q: adding VLAN 0 to HW filter on device bond1
[  444.957543][ T5700] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  445.060272][T10247] IPv6: addrconf: prefix option has invalid lifetime
[  445.118472][ T5700] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  445.121358][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.121386][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.121414][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.141336][ T5700] usb 5-1: config 0 descriptor??
[  445.484981][T10251] syzkaller0: entered promiscuous mode
[  445.492691][T10251] syzkaller0: entered allmulticast mode
[  445.655076][ T5700] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x1
[  445.655129][ T5700] arvo 0003:1E7D:30D4.0014: item fetching failed at offset 2/7
[  445.657466][ T5700] arvo 0003:1E7D:30D4.0014: parse failed
[  445.657514][ T5700] arvo 0003:1E7D:30D4.0014: probe with driver arvo failed with error -22
[  445.823293][T10261] FAULT_INJECTION: forcing a failure.
[  445.823293][T10261] name failslab, interval 1, probability 0, space 0, times 0
[  445.823346][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.6.1085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  445.823370][T10261] Tainted: [L]=SOFTLOCKUP
[  445.823377][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  445.823386][T10261] Call Trace:
[  445.823391][T10261]  <TASK>
[  445.823397][T10261]  dump_stack_lvl+0x100/0x190
[  445.823425][T10261]  should_fail_ex.cold+0x5/0xa
[  445.823448][T10261]  should_failslab+0xc2/0x120
[  445.823468][T10261]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  445.823485][T10261]  ? __alloc_skb+0x5b7/0x710
[  445.823508][T10261]  ? __alloc_skb+0x140/0x710
[  445.823534][T10261]  __alloc_skb+0x140/0x710
[  445.823560][T10261]  ? __alloc_skb+0x5b7/0x710
[  445.823583][T10261]  ? __pfx___alloc_skb+0x10/0x10
[  445.823604][T10261]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  445.823628][T10261]  ? sock_has_perm+0x25a/0x2f0
[  445.823650][T10261]  ? __pfx_sock_has_perm+0x10/0x10
[  445.823672][T10261]  netlink_alloc_large_skb+0x69/0x150
[  445.823697][T10261]  netlink_sendmsg+0x680/0xda0
[  445.823724][T10261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.823749][T10261]  ? selinux_socket_sendmsg+0x198/0x2f0
[  445.823775][T10261]  ____sys_sendmsg+0xa4d/0xbe0
[  445.823793][T10261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.823818][T10261]  ? __pfx_____sys_sendmsg+0x10/0x10
[  445.823842][T10261]  ? lock_acquire+0x1d1/0x380
[  445.823858][T10261]  ? get_pid_task+0x2a/0x250
[  445.823881][T10261]  ___sys_sendmsg+0x190/0x1e0
[  445.823903][T10261]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.823922][T10261]  ? get_pid_task+0x106/0x250
[  445.823950][T10261]  ? find_held_lock+0x2b/0x80
[  445.823984][T10261]  __sys_sendmsg+0x160/0x210
[  445.824000][T10261]  ? __pfx___sys_sendmsg+0x10/0x10
[  445.824027][T10261]  do_syscall_64+0x123/0x790
[  445.824047][T10261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.824064][T10261] RIP: 0033:0x7f5549b9e159
[  445.824078][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.824093][T10261] RSP: 002b:00007f554aa2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.824109][T10261] RAX: ffffffffffffffda RBX: 00007f5549e25fa0 RCX: 00007f5549b9e159
[  445.824120][T10261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  445.824130][T10261] RBP: 00007f554aa2e090 R08: 0000000000000000 R09: 0000000000000000
[  445.824140][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.824150][T10261] R13: 00007f5549e26038 R14: 00007f5549e25fa0 R15: 00007ffeb1c0beb8
[  445.824171][T10261]  </TASK>
[  445.863161][ T5789] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  446.021726][ T5789] usb 8-1: device descriptor read/64, error -71
[  446.243352][ T5700] usb 5-1: USB disconnect, device number 48
[  446.256283][ T5789] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  446.396333][ T5789] usb 8-1: device descriptor read/64, error -71
[  446.507190][ T5789] usb usb8-port1: attempt power cycle
[  446.856405][ T5789] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  446.887455][ T5789] usb 8-1: device descriptor read/8, error -71
[  447.126532][ T5789] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  447.146788][ T5789] usb 8-1: device descriptor read/8, error -71
[  447.389368][ T5789] usb usb8-port1: unable to enumerate USB device
[  447.506462][ T5714] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  447.562782][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  447.569025][   T30] audit: type=1400 audit(1788231215.065:1048): avc:  denied  { create } for  pid=10280 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.686866][ T5714] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  447.698082][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.708419][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  447.720595][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  447.732134][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  447.742664][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  447.758827][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  447.767777][ T5714] usb 4-1: Product: syz
[  447.772983][ T5714] usb 4-1: Manufacturer: syz
[  447.777782][ T5714] usb 4-1: SerialNumber: syz
[  447.980332][ T5714] usb 4-1: config 0 descriptor??
[  448.237216][   T30] audit: type=1400 audit(1788231215.745:1049): avc:  denied  { map } for  pid=10292 comm="syz.4.1095" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  448.282557][   T30] audit: type=1400 audit(1788231215.785:1050): avc:  denied  { ioctl } for  pid=10292 comm="syz.4.1095" path="socket:[28941]" dev="sockfs" ino=28941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  448.320877][ T5714] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  448.320921][ T5714] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  448.484190][   T30] audit: type=1400 audit(1788231215.985:1051): avc:  denied  { name_bind } for  pid=10298 comm="syz.4.1098" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  448.527214][ T5714] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[  448.527253][ T5714] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  448.527431][ T5714] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  448.580427][ T5714] usb 4-1: USB disconnect, device number 54
[  448.637485][T10301] FAULT_INJECTION: forcing a failure.
[  448.637485][T10301] name failslab, interval 1, probability 0, space 0, times 0
[  448.637537][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.2.1097 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.637560][T10301] Tainted: [L]=SOFTLOCKUP
[  448.637567][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  448.637578][T10301] Call Trace:
[  448.637584][T10301]  <TASK>
[  448.637592][T10301]  dump_stack_lvl+0x100/0x190
[  448.637621][T10301]  should_fail_ex.cold+0x5/0xa
[  448.637643][T10301]  should_failslab+0xc2/0x120
[  448.637664][T10301]  __kmalloc_noprof+0xfc/0x840
[  448.637680][T10301]  ? __pfx_dynamic_dname+0x10/0x10
[  448.637696][T10301]  ? tomoyo_encode2+0xfb/0x3c0
[  448.637717][T10301]  tomoyo_encode2+0xfb/0x3c0
[  448.637736][T10301]  tomoyo_encode+0x29/0x50
[  448.637757][T10301]  tomoyo_realpath_from_path+0x18c/0x690
[  448.637779][T10301]  tomoyo_path_number_perm+0x23c/0x580
[  448.637801][T10301]  ? tomoyo_path_number_perm+0x22e/0x580
[  448.637826][T10301]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  448.637858][T10301]  ? __lock_acquire+0x4c5/0x1ec0
[  448.637885][T10301]  ? __fget_files+0x34/0x3d0
[  448.637904][T10301]  ? find_held_lock+0x2b/0x80
[  448.637924][T10301]  ? hook_file_ioctl_common+0x140/0x440
[  448.637947][T10301]  ? __fget_files+0x21f/0x3d0
[  448.637969][T10301]  security_file_ioctl+0xd3/0x230
[  448.637993][T10301]  __x64_sys_ioctl+0xb7/0x210
[  448.638019][T10301]  do_syscall_64+0x123/0x790
[  448.638040][T10301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.638057][T10301] RIP: 0033:0x7fba96f9e159
[  448.638070][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.638085][T10301] RSP: 002b:00007fba97e91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  448.638102][T10301] RAX: ffffffffffffffda RBX: 00007fba97225fa0 RCX: 00007fba96f9e159
[  448.638112][T10301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  448.638122][T10301] RBP: 00007fba97e91090 R08: 0000000000000000 R09: 0000000000000000
[  448.638132][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.638141][T10301] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffec1537248
[  448.638163][T10301]  </TASK>
[  448.692707][T10301] ERROR: Out of memory at tomoyo_realpath_from_path.
[  449.369092][   T30] audit: type=1400 audit(1788231216.875:1052): avc:  denied  { create } for  pid=10311 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  449.369716][   T30] audit: type=1400 audit(1788231216.875:1053): avc:  denied  { setopt } for  pid=10311 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  449.620896][   T30] audit: type=1400 audit(1788231217.125:1054): avc:  denied  { name_bind } for  pid=10313 comm="syz.7.1101" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  449.657773][T10317] FAULT_INJECTION: forcing a failure.
[  449.657773][T10317] name failslab, interval 1, probability 0, space 0, times 0
[  449.672041][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.2.1103 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.672071][T10317] Tainted: [L]=SOFTLOCKUP
[  449.672077][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  449.672087][T10317] Call Trace:
[  449.672093][T10317]  <TASK>
[  449.672099][T10317]  dump_stack_lvl+0x100/0x190
[  449.672129][T10317]  should_fail_ex.cold+0x5/0xa
[  449.672153][T10317]  should_failslab+0xc2/0x120
[  449.672172][T10317]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  449.672190][T10317]  ? __alloc_skb+0x5b7/0x710
[  449.672215][T10317]  ? __alloc_skb+0x140/0x710
[  449.672245][T10317]  __alloc_skb+0x140/0x710
[  449.672270][T10317]  ? __alloc_skb+0x5b7/0x710
[  449.672295][T10317]  ? __pfx___alloc_skb+0x10/0x10
[  449.672318][T10317]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  449.672345][T10317]  ? sock_has_perm+0x25a/0x2f0
[  449.672366][T10317]  ? __pfx_sock_has_perm+0x10/0x10
[  449.672390][T10317]  netlink_alloc_large_skb+0x69/0x150
[  449.672417][T10317]  netlink_sendmsg+0x680/0xda0
[  449.672445][T10317]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.672472][T10317]  ? selinux_socket_sendmsg+0x198/0x2f0
[  449.672501][T10317]  ____sys_sendmsg+0xa4d/0xbe0
[  449.672521][T10317]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.672548][T10317]  ? __pfx_____sys_sendmsg+0x10/0x10
[  449.672573][T10317]  ? lock_acquire+0x1d1/0x380
[  449.672591][T10317]  ? get_pid_task+0x2a/0x250
[  449.672618][T10317]  ___sys_sendmsg+0x190/0x1e0
[  449.672643][T10317]  ? __pfx____sys_sendmsg+0x10/0x10
[  449.672665][T10317]  ? get_pid_task+0x106/0x250
[  449.672696][T10317]  ? find_held_lock+0x2b/0x80
[  449.672742][T10317]  __sys_sendmsg+0x160/0x210
[  449.672762][T10317]  ? __pfx___sys_sendmsg+0x10/0x10
[  449.672794][T10317]  do_syscall_64+0x123/0x790
[  449.672818][T10317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.672837][T10317] RIP: 0033:0x7fba96f9e159
[  449.672854][T10317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.672872][T10317] RSP: 002b:00007fba97e91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.672891][T10317] RAX: ffffffffffffffda RBX: 00007fba97225fa0 RCX: 00007fba96f9e159
[  449.672903][T10317] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  449.672915][T10317] RBP: 00007fba97e91090 R08: 0000000000000000 R09: 0000000000000000
[  449.672926][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.672938][T10317] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffec1537248
[  449.672963][T10317]  </TASK>
[  449.850727][T10320] fuse: Unknown parameter '0xffffffffffffffff'
[  450.230605][   T30] audit: type=1400 audit(1788231217.475:1055): avc:  denied  { read write } for  pid=10313 comm="syz.7.1101" name="vhost-vsock" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  450.230660][   T30] audit: type=1400 audit(1788231217.475:1056): avc:  denied  { open } for  pid=10313 comm="syz.7.1101" path="/dev/vhost-vsock" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  450.230698][   T30] audit: type=1400 audit(1788231217.485:1057): avc:  denied  { ioctl } for  pid=10313 comm="syz.7.1101" path="/dev/vhost-vsock" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  452.672267][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  452.672318][   T30] audit: type=1400 audit(1788231220.165:1060): avc:  denied  { create } for  pid=10329 comm="syz.7.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  452.760396][   T30] audit: type=1400 audit(1788231220.255:1061): avc:  denied  { write } for  pid=10329 comm="syz.7.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  452.760438][   T30] audit: type=1400 audit(1788231220.255:1062): avc:  denied  { nlmsg_write } for  pid=10329 comm="syz.7.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  453.023972][ T1009] Bluetooth: hci5: Frame reassembly failed (-84)
[  453.122467][ T8687] Bluetooth: hci5: Frame reassembly failed (-84)
[  454.629857][   T30] audit: type=1400 audit(1788231222.125:1063): avc:  denied  { create } for  pid=10341 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  454.835072][   T30] audit: type=1400 audit(1788231222.335:1064): avc:  denied  { connect } for  pid=10350 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  454.857564][   T30] audit: type=1400 audit(1788231222.365:1065): avc:  denied  { write } for  pid=10350 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  455.045651][ T5601] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  457.545994][T10368] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  457.886279][ T5785] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  458.070025][ T5785] usb 3-1: Using ep0 maxpacket: 32
[  458.073538][ T5785] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  458.074358][ T5785] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  458.074377][ T5785] usb 3-1: config 2 has no interface number 0
[  458.074405][ T5785] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  458.074427][ T5785] usb 3-1: config 2 interface 88 has no altsetting 0
[  458.076051][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  458.076070][ T5785] usb 3-1: Product: syz
[  458.076083][ T5785] usb 3-1: Manufacturer: syz
[  458.076096][ T5785] usb 3-1: SerialNumber: syz
[  458.083088][T10371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  458.110069][T10377] netlink: 'syz.7.1115': attribute type 1 has an invalid length.
[  458.110090][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1115'.
[  458.110856][T10373] CIFS: VFS: UNC: path must begin with // or \\
[  458.110867][T10373] Malformed UNC in devname
[  458.110867][T10373] 
[  458.110946][T10373] CIFS: VFS: Malformed UNC in devname
[  458.286818][ T3170] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  458.310689][   T30] audit: type=1400 audit(1788231225.815:1066): avc:  denied  { create } for  pid=10370 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  458.332636][   T30] audit: type=1400 audit(1788231225.835:1067): avc:  denied  { bind } for  pid=10370 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  458.353215][   T30] audit: type=1400 audit(1788231225.855:1068): avc:  denied  { listen } for  pid=10370 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  458.373926][   T30] audit: type=1400 audit(1788231225.875:1069): avc:  denied  { connect } for  pid=10370 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  458.395558][   T30] audit: type=1400 audit(1788231225.895:1070): avc:  denied  { setopt } for  pid=10370 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  458.437075][ T3170] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  458.438165][ T3170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.438393][ T3170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.438421][ T3170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  458.438460][ T3170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.442132][ T3170] usb 4-1: config 0 descriptor??
[  458.914686][ T3170] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  458.985060][   T30] audit: type=1400 audit(1788231226.485:1071): avc:  denied  { read } for  pid=10385 comm="syz.7.1117" name="vbi8" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  459.009837][   T30] audit: type=1400 audit(1788231226.515:1072): avc:  denied  { ioctl } for  pid=10385 comm="syz.7.1117" path="/dev/vbi8" dev="devtmpfs" ino=1000 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  459.782979][T10383] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1114'.
[  459.783012][T10383] tc_dump_action: action bad kind
[  459.798602][ T5785] asix 3-1:2.88: probe with driver asix failed with error -71
[  459.818036][ T5785] usb 3-1: USB disconnect, device number 42
[  459.949170][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'.
[  461.249194][ T3170] usb 4-1: USB disconnect, device number 55
[  461.581465][ T5785] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  461.737027][ T5785] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  461.739187][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.739212][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.739229][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  461.739259][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.741383][ T5785] usb 3-1: config 0 descriptor??
[  462.003301][   T30] audit: type=1400 audit(1788231229.505:1073): avc:  denied  { mounton } for  pid=10422 comm="syz.7.1128" path="/proc/413/task" dev="proc" ino=29143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  462.038849][   T30] audit: type=1400 audit(1788231229.545:1074): avc:  denied  { mount } for  pid=10422 comm="syz.7.1128" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  462.645766][T10413] FAULT_INJECTION: forcing a failure.
[  462.645766][T10413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.645822][T10413] CPU: 0 UID: 0 PID: 10413 Comm: syz.2.1125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  462.645847][T10413] Tainted: [L]=SOFTLOCKUP
[  462.645854][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  462.645863][T10413] Call Trace:
[  462.645870][T10413]  <TASK>
[  462.645883][T10413]  dump_stack_lvl+0x100/0x190
[  462.645912][T10413]  should_fail_ex.cold+0x5/0xa
[  462.645935][T10413]  _copy_from_user+0x2e/0xd0
[  462.645961][T10413]  kstrtouint_from_user+0xd6/0x1d0
[  462.645980][T10413]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  462.646003][T10413]  ? lock_acquire+0x1d1/0x380
[  462.646026][T10413]  proc_fail_nth_write+0x83/0x220
[  462.646045][T10413]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  462.646069][T10413]  vfs_write+0x2aa/0x1050
[  462.646094][T10413]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  462.646112][T10413]  ? lock_acquire+0x1d1/0x380
[  462.646130][T10413]  ? __fget_files+0x34/0x3d0
[  462.646148][T10413]  ? __pfx_vfs_write+0x10/0x10
[  462.646170][T10413]  ? find_held_lock+0x2b/0x80
[  462.646191][T10413]  ? __fget_files+0x215/0x3d0
[  462.646213][T10413]  ? __fget_files+0x21f/0x3d0
[  462.646237][T10413]  ksys_write+0x12a/0x250
[  462.646251][T10413]  ? __pfx_ksys_write+0x10/0x10
[  462.646273][T10413]  do_syscall_64+0x123/0x790
[  462.646294][T10413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.646311][T10413] RIP: 0033:0x7fba96f5e98e
[  462.646326][T10413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  462.646342][T10413] RSP: 002b:00007fba97e90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.646358][T10413] RAX: ffffffffffffffda RBX: 00007fba97e916c0 RCX: 00007fba96f5e98e
[  462.646369][T10413] RDX: 0000000000000001 RSI: 00007fba97e910a0 RDI: 0000000000000004
[  462.646379][T10413] RBP: 00007fba97e91090 R08: 0000000000000000 R09: 0000000000000000
[  462.646389][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.646400][T10413] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffec1537248
[  462.646422][T10413]  </TASK>
[  462.695359][T10416] Process accounting resumed
[  462.818314][ T3170] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  462.870434][T10429] syzkaller0: entered promiscuous mode
[  462.870454][T10429] syzkaller0: entered allmulticast mode
[  462.966665][ T3170] usb 8-1: Using ep0 maxpacket: 16
[  462.969715][ T3170] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  462.976330][ T3170] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  462.976350][ T3170] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  462.978849][ T3170] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.978870][ T3170] usb 8-1: Product: syz
[  462.978883][ T3170] usb 8-1: Manufacturer: syz
[  462.978895][ T3170] usb 8-1: SerialNumber: syz
[  463.002422][ T3170] usb 8-1: 0:2 : does not exist
[  463.002479][ T3170] usb 8-1: unit 9 not found!
[  463.216558][ T5785] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  463.218305][ T5785] usb 3-1: USB disconnect, device number 43
[  463.537412][ T3170] usb 8-1: USB disconnect, device number 27
[  463.602777][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  463.769153][T10443] fido_id[10443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  463.852587][T10446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1134'.
[  464.000405][T10456] netlink: 'syz.4.1136': attribute type 1 has an invalid length.
[  464.167914][T10456] 8021q: adding VLAN 0 to HW filter on device bond2
[  465.007082][ T5785] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  465.160941][   T30] audit: type=1400 audit(1788231232.665:1075): avc:  denied  { read } for  pid=10464 comm="syz.3.1141" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  465.161859][   T30] audit: type=1400 audit(1788231232.665:1076): avc:  denied  { open } for  pid=10464 comm="syz.3.1141" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  465.237576][ T5785] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  465.241591][ T5785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  465.241652][ T5785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  465.241677][ T5785] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  465.241702][ T5785] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  465.241740][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.305039][T10470] FAULT_INJECTION: forcing a failure.
[  465.305039][T10470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.318250][T10470] CPU: 1 UID: 0 PID: 10470 Comm: syz.7.1138 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.318281][T10470] Tainted: [L]=SOFTLOCKUP
[  465.318288][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  465.318298][T10470] Call Trace:
[  465.318305][T10470]  <TASK>
[  465.318312][T10470]  dump_stack_lvl+0x100/0x190
[  465.318345][T10470]  should_fail_ex.cold+0x5/0xa
[  465.318372][T10470]  _copy_to_user+0x32/0xd0
[  465.318401][T10470]  csum_and_copy_to_iter+0x73d/0x1ef0
[  465.318435][T10470]  ? __pfx_csum_and_copy_to_iter+0x10/0x10
[  465.318460][T10470]  ? lock_acquire+0x1d1/0x380
[  465.318480][T10470]  ? do_raw_spin_lock+0x128/0x260
[  465.318502][T10470]  ? find_held_lock+0x2b/0x80
[  465.318532][T10470]  ? __skb_recv_udp+0x725/0x950
[  465.318559][T10470]  ? __skb_recv_udp+0x725/0x950
[  465.318589][T10470]  __skb_datagram_iter+0x801/0x900
[  465.318610][T10470]  ? __pfx_csum_and_copy_to_iter+0x10/0x10
[  465.318635][T10470]  ? do_csum+0x1e5/0x380
[  465.318662][T10470]  skb_copy_and_csum_datagram_msg+0x222/0x380
[  465.318686][T10470]  ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10
[  465.318712][T10470]  ? lock_acquire+0x1d1/0x380
[  465.318730][T10470]  ? unwind_next_frame+0xbd/0x2090
[  465.318757][T10470]  udp_recvmsg+0x416/0xf80
[  465.318782][T10470]  ? __pfx_udp_recvmsg+0x10/0x10
[  465.318804][T10470]  ? is_bpf_text_address+0x94/0x1a0
[  465.318828][T10470]  ? copy_iovec_from_user+0x102/0x140
[  465.318854][T10470]  ? __pfx_udp_recvmsg+0x10/0x10
[  465.318872][T10470]  inet_recvmsg+0x277/0x4c0
[  465.318892][T10470]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  465.318912][T10470]  ? __pfx_inet_recvmsg+0x10/0x10
[  465.318936][T10470]  sock_recvmsg+0x1b8/0x220
[  465.318959][T10470]  ____sys_recvmsg+0x21e/0x670
[  465.318986][T10470]  ? __pfx_____sys_recvmsg+0x10/0x10
[  465.319017][T10470]  ? __lock_acquire+0x4c5/0x1ec0
[  465.319039][T10470]  ___sys_recvmsg+0x16a/0x1a0
[  465.319063][T10470]  ? __pfx____sys_recvmsg+0x10/0x10
[  465.319087][T10470]  ? lock_acquire+0x1d1/0x380
[  465.319124][T10470]  do_recvmmsg+0x2f3/0x740
[  465.319151][T10470]  ? __pfx_do_recvmmsg+0x10/0x10
[  465.319178][T10470]  ? lock_acquire+0x1d1/0x380
[  465.319199][T10470]  ? __mutex_unlock_slowpath+0x35d/0x930
[  465.319228][T10470]  ? __fget_files+0x21f/0x3d0
[  465.319256][T10470]  __x64_sys_recvmmsg+0x22a/0x280
[  465.319276][T10470]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  465.319303][T10470]  do_syscall_64+0x123/0x790
[  465.319325][T10470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.319344][T10470] RIP: 0033:0x7f7f9ed9e159
[  465.319360][T10470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.319378][T10470] RSP: 002b:00007f7f9cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  465.319396][T10470] RAX: ffffffffffffffda RBX: 00007f7f9f026090 RCX: 00007f7f9ed9e159
[  465.319408][T10470] RDX: 0000000004000048 RSI: 0000200000000940 RDI: 0000000000000003
[  465.319419][T10470] RBP: 00007f7f9cff6090 R08: 0000000000000000 R09: 0000000000000000
[  465.319431][T10470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.319442][T10470] R13: 00007f7f9f026128 R14: 00007f7f9f026090 R15: 00007ffd9c654a58
[  465.319464][T10470]  </TASK>
[  466.038516][T10469] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  466.105095][   T30] audit: type=1400 audit(1788231233.605:1077): avc:  denied  { listen } for  pid=10474 comm="syz.7.1143" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  466.156440][T10469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  466.162865][T10469] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  466.228034][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.228414][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.413376][   T30] audit: type=1400 audit(1788231233.915:1078): avc:  denied  { unmount } for  pid=7776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  466.460315][ T5789] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[  466.738159][ T5789] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  466.739220][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.739256][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  466.739277][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  466.739297][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  466.739333][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  466.926781][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  466.926845][ T5789] usb 7-1: Product: syz
[  466.926860][ T5789] usb 7-1: Manufacturer: syz
[  466.926871][ T5789] usb 7-1: SerialNumber: syz
[  467.003260][ T5789] usb 7-1: config 0 descriptor??
[  467.120537][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.129641][ T5714] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  467.196317][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.222002][ T5789] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  467.222029][ T5789] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  467.278420][ T5785] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1
[  467.302098][T10490] syzkaller0: entered promiscuous mode
[  467.302139][T10490] syzkaller0: entered allmulticast mode
[  467.357349][ T5714] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  467.358264][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  467.358302][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  467.358323][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  467.358344][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  467.358363][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  467.360161][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  467.360180][ T5714] usb 5-1: Product: syz
[  467.360193][ T5714] usb 5-1: Manufacturer: syz
[  467.360205][ T5714] usb 5-1: SerialNumber: syz
[  467.362602][ T5714] usb 5-1: config 0 descriptor??
[  467.459151][ T5789] radio-si470x 7-1:0.0: software version 0, hardware version 0
[  467.459174][ T5789] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  467.459207][ T5789] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  467.646711][   T30] audit: type=1400 audit(1788231235.155:1079): avc:  denied  { mount } for  pid=10491 comm="syz.7.1147" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  467.680409][   T30] audit: type=1400 audit(1788231235.185:1080): avc:  denied  { search } for  pid=10491 comm="syz.7.1147" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  467.703606][   T30] audit: type=1400 audit(1788231235.185:1081): avc:  denied  { search } for  pid=10491 comm="syz.7.1147" name="usb_gadget" dev="configfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  467.705654][   T30] audit: type=1400 audit(1788231235.215:1082): avc:  denied  { search } for  pid=10491 comm="syz.7.1147" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  467.760670][   T30] audit: type=1400 audit(1788231235.215:1083): avc:  denied  { search } for  pid=10491 comm="syz.7.1147" name="usb_gadget" dev="configfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  467.805174][ T5789] radio-si470x 7-1:0.0: submitting int urb failed (-90)
[  467.924438][ T5714] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110
[  467.924677][ T5714] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  468.076410][ T5601] Bluetooth: hci1: command 0x0406 tx timeout
[  468.082596][ T5601] Bluetooth: hci2: command 0x0406 tx timeout
[  468.271447][   T30] audit: type=1400 audit(1788231235.775:1084): avc:  denied  { unmount } for  pid=7776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  468.340489][ T5785] ==================================================================
[  468.340507][ T5785] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60
[  468.340537][ T5785] Read of size 256 at addr ffff888066afc760 by task kworker/0:6/5785
[  468.340555][ T5785] 
[  468.340568][ T5785] CPU: 0 UID: 0 PID: 5785 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.340595][ T5785] Tainted: [L]=SOFTLOCKUP
[  468.340605][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  468.340618][ T5785] Workqueue: usb_hub_wq hub_event
[  468.340643][ T5785] Call Trace:
[  468.340650][ T5785]  <TASK>
[  468.340658][ T5785]  dump_stack_lvl+0x100/0x190
[  468.340685][ T5785]  print_report+0x13d/0x4b0
[  468.340715][ T5785]  ? __virt_addr_valid+0x239/0x430
[  468.340736][ T5785]  ? fbcon_prepare_logo+0x94e/0xc60
[  468.340756][ T5785]  kasan_report+0xdf/0x1c0
[  468.340779][ T5785]  ? fbcon_prepare_logo+0x94e/0xc60
[  468.340803][ T5785]  kasan_check_range+0x10f/0x1e0
[  468.340830][ T5785]  __asan_memcpy+0x23/0x60
[  468.340858][ T5785]  fbcon_prepare_logo+0x94e/0xc60
[  468.340885][ T5785]  fbcon_init+0x1065/0x1830
[  468.340908][ T5785]  visual_init+0x320/0x620
[  468.340933][ T5785]  do_bind_con_driver.isra.0+0x636/0x9c0
[  468.340965][ T5785]  do_take_over_console+0x501/0x5d0
[  468.341002][ T5785]  do_fbcon_takeover+0xe9/0x210
[  468.341024][ T5785]  fbcon_fb_registered+0x364/0x4b0
[  468.341049][ T5785]  do_register_framebuffer+0x503/0x870
[  468.341072][ T5785]  ? __pfx_do_register_framebuffer+0x10/0x10
[  468.341096][ T5785]  ? find_held_lock+0x2b/0x80
[  468.341123][ T5785]  register_framebuffer+0x23/0x40
[  468.341142][ T5785]  __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0
[  468.341172][ T5785]  ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10
[  468.341197][ T5785]  drm_fb_helper_initial_config+0x44/0x60
[  468.341219][ T5785]  drm_fbdev_client_hotplug+0x19e/0x220
[  468.341237][ T5785]  ? __pfx_drm_fbdev_client_hotplug+0x10/0x10
[  468.341255][ T5785]  drm_client_register+0x197/0x280
[  468.341277][ T5785]  drm_fbdev_client_setup+0x155/0x480
[  468.341296][ T5785]  drm_client_setup+0x160/0x1a0
[  468.341325][ T5785]  gud_probe+0x1835/0x1c20
[  468.341348][ T5785]  ? __pfx_gud_probe+0x10/0x10
[  468.341367][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  468.341399][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  468.341429][ T5785]  ? __pm_runtime_set_status+0x13c/0x970
[  468.341452][ T5785]  usb_probe_interface+0x386/0x9b0
[  468.341479][ T5785]  ? __pfx_usb_probe_interface+0x10/0x10
[  468.341502][ T5785]  ? kernfs_put+0x3f/0x60
[  468.341528][ T5785]  ? sysfs_create_link+0x68/0xc0
[  468.341551][ T5785]  ? __pfx_usb_probe_interface+0x10/0x10
[  468.341576][ T5785]  really_probe+0x241/0xa60
[  468.341607][ T5785]  __driver_probe_device+0x210/0x460
[  468.341635][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  468.341664][ T5785]  driver_probe_device+0x4a/0x140
[  468.341694][ T5785]  __device_attach_driver+0x1df/0x320
[  468.341712][ T5785]  ? __pfx___device_attach_driver+0x10/0x10
[  468.341740][ T5785]  bus_for_each_drv+0x159/0x1e0
[  468.341764][ T5785]  ? __pfx_bus_for_each_drv+0x10/0x10
[  468.341789][ T5785]  ? lockdep_hardirqs_on+0x7d/0x110
[  468.341808][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  468.341838][ T5785]  __device_attach+0x1e4/0x4d0
[  468.341853][ T5785]  ? __pfx___device_attach+0x10/0x10
[  468.341870][ T5785]  ? do_raw_spin_unlock+0x145/0x1e0
[  468.341894][ T5785]  device_initial_probe+0xaf/0xd0
[  468.341911][ T5785]  bus_probe_device+0x64/0x160
[  468.341934][ T5785]  device_add+0x121d/0x1970
[  468.341954][ T5785]  ? __pfx_device_add+0x10/0x10
[  468.341973][ T5785]  ? mark_held_locks+0x40/0x70
[  468.341998][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  468.342035][ T5785]  usb_set_configuration+0xd97/0x1c60
[  468.342065][ T5785]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  468.342095][ T5785]  usb_generic_driver_probe+0xa1/0xe0
[  468.342122][ T5785]  usb_probe_device+0xef/0x400
[  468.342139][ T5785]  ? __pfx_usb_probe_device+0x10/0x10
[  468.342158][ T5785]  really_probe+0x241/0xa60
[  468.342182][ T5785]  __driver_probe_device+0x210/0x460
[  468.342205][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  468.342230][ T5785]  driver_probe_device+0x4a/0x140
[  468.342254][ T5785]  __device_attach_driver+0x1df/0x320
[  468.342270][ T5785]  ? __pfx___device_attach_driver+0x10/0x10
[  468.342294][ T5785]  bus_for_each_drv+0x159/0x1e0
[  468.342313][ T5785]  ? __pfx_bus_for_each_drv+0x10/0x10
[  468.342333][ T5785]  ? lockdep_hardirqs_on+0x7d/0x110
[  468.342350][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  468.342375][ T5785]  __device_attach+0x1e4/0x4d0
[  468.342390][ T5785]  ? __pfx___device_attach+0x10/0x10
[  468.342405][ T5785]  ? do_raw_spin_unlock+0x145/0x1e0
[  468.342425][ T5785]  device_initial_probe+0xaf/0xd0
[  468.342440][ T5785]  bus_probe_device+0x64/0x160
[  468.342462][ T5785]  device_add+0x121d/0x1970
[  468.342479][ T5785]  ? __pfx_device_add+0x10/0x10
[  468.342494][ T5785]  ? usb_detect_static_quirks+0x335/0x3e0
[  468.342514][ T5785]  usb_new_device.part.0+0xcc2/0x1686
[  468.342539][ T5785]  ? do_raw_spin_lock+0x128/0x260
[  468.342557][ T5785]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  468.342579][ T5785]  ? mark_held_locks+0x40/0x70
[  468.342596][ T5785]  hub_event.cold+0x1e3/0xe90
[  468.342624][ T5785]  ? __pfx_hub_event+0x10/0x10
[  468.342642][ T5785]  ? lock_acquire+0x1d1/0x380
[  468.342656][ T5785]  ? process_one_work+0xa2c/0x1b10
[  468.342678][ T5785]  ? process_one_work+0x906/0x1b10
[  468.342698][ T5785]  ? process_one_work+0x906/0x1b10
[  468.342722][ T5785]  process_one_work+0xac7/0x1b10
[  468.342749][ T5785]  ? __pfx_process_one_work+0x10/0x10
[  468.342772][ T5785]  ? lock_acquire+0x1d1/0x380
[  468.342790][ T5785]  ? __pfx_hub_event+0x10/0x10
[  468.342807][ T5785]  worker_thread+0x5ef/0xe50
[  468.342831][ T5785]  ? __pfx_worker_thread+0x10/0x10
[  468.342853][ T5785]  ? kthread+0x13a/0x450
[  468.342873][ T5785]  ? __pfx_worker_thread+0x10/0x10
[  468.342894][ T5785]  kthread+0x373/0x450
[  468.342912][ T5785]  ? __pfx_kthread+0x10/0x10
[  468.342933][ T5785]  ret_from_fork+0x730/0xd60
[  468.342951][ T5785]  ? __pfx_ret_from_fork+0x10/0x10
[  468.342966][ T5785]  ? __switch_to+0x800/0x10f0
[  468.342986][ T5785]  ? __pfx_kthread+0x10/0x10
[  468.343013][ T5785]  ret_from_fork_asm+0x1a/0x30
[  468.343033][ T5785]  </TASK>
[  468.343039][ T5785] 
[  468.343042][ T5785] Allocated by task 6070:
[  468.343051][ T5785]  kasan_save_stack+0x30/0x50
[  468.343067][ T5785]  kasan_save_track+0x14/0x30
[  468.343081][ T5785]  __kasan_slab_alloc+0x89/0x90
[  468.343096][ T5785]  kmem_cache_alloc_noprof+0x269/0x6a0
[  468.343108][ T5785]  inet_twsk_alloc+0x124/0xa20
[  468.343129][ T5785]  tcp_time_wait+0x5d/0xed0
[  468.343148][ T5785]  tcp_rcv_state_process+0x259e/0x7190
[  468.343166][ T5785]  tcp_v4_do_rcv+0x691/0x1260
[  468.343183][ T5785]  __release_sock+0x35a/0x440
[  468.343204][ T5785]  __tcp_close+0x5a0/0x1110
[  468.343222][ T5785]  tcp_close+0x28/0x110
[  468.343240][ T5785]  inet_release+0xed/0x200
[  468.343255][ T5785]  __sock_release+0xb3/0x260
[  468.343268][ T5785]  sock_close+0x1c/0x30
[  468.343280][ T5785]  __fput+0x3ff/0xb50
[  468.343296][ T5785]  task_work_run+0x150/0x240
[  468.343315][ T5785]  exit_to_user_mode_loop+0x1d8/0x700
[  468.343331][ T5785]  do_syscall_64+0x661/0x790
[  468.343346][ T5785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.343360][ T5785] 
[  468.343364][ T5785] Freed by task 15:
[  468.343371][ T5785]  kasan_save_stack+0x30/0x50
[  468.343386][ T5785]  kasan_save_track+0x14/0x30
[  468.343399][ T5785]  kasan_save_free_info+0x3b/0x70
[  468.343419][ T5785]  __kasan_slab_free+0x5f/0x80
[  468.343432][ T5785]  slab_free_after_rcu_debug+0xdf/0x170
[  468.343454][ T5785]  rcu_core+0x5f0/0x1260
[  468.343470][ T5785]  handle_softirqs+0x1e6/0x9d0
[  468.343483][ T5785]  run_ksoftirqd+0x38/0x60
[  468.343497][ T5785]  smpboot_thread_fn+0x3d3/0xab0
[  468.343515][ T5785]  kthread+0x373/0x450
[  468.343533][ T5785]  ret_from_fork+0x730/0xd60
[  468.343547][ T5785]  ret_from_fork_asm+0x1a/0x30
[  468.343561][ T5785] 
[  468.343566][ T5785] Last potentially related work creation:
[  468.343571][ T5785]  kasan_save_stack+0x30/0x50
[  468.343584][ T5785]  kasan_record_aux_stack+0xa7/0xc0
[  468.343603][ T5785]  kmem_cache_free+0x424/0x6c0
[  468.343621][ T5785]  inet_twsk_put+0x12c/0x1a0
[  468.343641][ T5785]  call_timer_fn+0x198/0x5f0
[  468.343654][ T5785]  __run_timers+0x757/0xb00
[  468.343666][ T5785]  run_timer_base+0x114/0x190
[  468.343680][ T5785]  run_timer_softirq+0x1a/0x50
[  468.343693][ T5785]  handle_softirqs+0x1e6/0x9d0
[  468.343706][ T5785]  __irq_exit_rcu+0x194/0x210
[  468.343719][ T5785]  irq_exit_rcu+0x9/0x30
[  468.343732][ T5785]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  468.343745][ T5785]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  468.343761][ T5785] 
[  468.343765][ T5785] The buggy address belongs to the object at ffff888066afc730
[  468.343765][ T5785]  which belongs to the cache tw_sock_TCP of size 304
[  468.343779][ T5785] The buggy address is located 48 bytes inside of
[  468.343779][ T5785]  freed 304-byte region [ffff888066afc730, ffff888066afc860)
[  468.343793][ T5785] 
[  468.343797][ T5785] The buggy address belongs to the physical page:
[  468.343804][ T5785] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888066afc000 pfn:0x66afc
[  468.343819][ T5785] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  468.343830][ T5785] memcg:ffff888033db6f01
[  468.343836][ T5785] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  468.343852][ T5785] page_type: f5(slab)
[  468.343865][ T5785] raw: 00fff00000000240 ffff888140acbc80 ffff888024692b88 ffffea0001e8d290
[  468.343879][ T5785] raw: ffff888066afc000 0000000200160010 00000000f5000000 ffff888033db6f01
[  468.343893][ T5785] head: 00fff00000000240 ffff888140acbc80 ffff888024692b88 ffffea0001e8d290
[  468.343906][ T5785] head: ffff888066afc000 0000000200160010 00000000f5000000 ffff888033db6f01
[  468.343919][ T5785] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  468.343931][ T5785] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  468.343939][ T5785] page dumped because: kasan: bad access detected
[  468.343947][ T5785] page_owner tracks the page as allocated
[  468.343951][ T5785] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6070, tgid 6070 (syz.2.80), ts 92170129305
[  468.343976][ T5785]  post_alloc_hook+0xfd/0x120
[  468.344005][ T5785]  get_page_from_freelist+0x110d/0x35d0
[  468.344026][ T5785]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  468.344048][ T5785]  new_slab+0xa9/0x6e0
[  468.344067][ T5785]  refill_objects+0xe3/0x410
[  468.344085][ T5785]  __pcs_replace_empty_main+0x35e/0x650
[  468.344105][ T5785]  kmem_cache_alloc_noprof+0x4c4/0x6a0
[  468.344117][ T5785]  inet_twsk_alloc+0x124/0xa20
[  468.344136][ T5785]  tcp_time_wait+0x5d/0xed0
[  468.344154][ T5785]  tcp_rcv_state_process+0x259e/0x7190
[  468.344172][ T5785]  tcp_v4_do_rcv+0x691/0x1260
[  468.344188][ T5785]  __release_sock+0x35a/0x440
[  468.344209][ T5785]  __tcp_close+0x5a0/0x1110
[  468.344227][ T5785]  tcp_close+0x28/0x110
[  468.344244][ T5785]  inet_release+0xed/0x200
[  468.344258][ T5785]  __sock_release+0xb3/0x260
[  468.344271][ T5785] page last free pid 6023 tgid 6023 ts 86977952542 stack trace:
[  468.344281][ T5785]  free_pages_prepare+0x586/0xe00
[  468.344299][ T5785]  __free_contig_range_common+0x14f/0x250
[  468.344317][ T5785]  free_pages_bulk+0xbd/0x200
[  468.344337][ T5785]  vm_area_free_pages+0xb2/0x2a0
[  468.344358][ T5785]  vfree+0xf7/0x6d0
[  468.344372][ T5785]  n_tty_close+0xd3/0x1f0
[  468.344387][ T5785]  tty_ldisc_close+0x114/0x1a0
[  468.344406][ T5785]  tty_ldisc_kill+0x8e/0x150
[  468.344424][ T5785]  tty_ldisc_release+0x21c/0x2f0
[  468.344444][ T5785]  tty_release_struct+0x23/0xe0
[  468.344464][ T5785]  tty_release+0xd7a/0x1300
[  468.344484][ T5785]  __fput+0x3ff/0xb50
[  468.344500][ T5785]  task_work_run+0x150/0x240
[  468.344520][ T5785]  exit_to_user_mode_loop+0x1d8/0x700
[  468.344535][ T5785]  do_syscall_64+0x661/0x790
[  468.344549][ T5785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.344564][ T5785] 
[  468.344567][ T5785] Memory state around the buggy address:
[  468.344576][ T5785]  ffff888066afc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  468.344587][ T5785]  ffff888066afc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  468.344597][ T5785] >ffff888066afc700: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb
[  468.344605][ T5785]                                                        ^
[  468.344614][ T5785]  ffff888066afc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  468.344623][ T5785]  ffff888066afc800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  468.344631][ T5785] ==================================================================
[  468.345409][ T5785] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  469.559169][ T5785] CPU: 0 UID: 0 PID: 5785 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.570098][ T5785] Tainted: [L]=SOFTLOCKUP
[  469.574400][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  469.584435][ T5785] Workqueue: usb_hub_wq hub_event
[  469.589465][ T5785] Call Trace:
[  469.592727][ T5785]  <TASK>
[  469.595639][ T5785]  dump_stack_lvl+0x100/0x190
[  469.600305][ T5785]  vpanic+0x553/0x970
[  469.604268][ T5785]  ? __pfx_vpanic+0x10/0x10
[  469.608750][ T5785]  ? fbcon_prepare_logo+0x94e/0xc60
[  469.613932][ T5785]  panic+0xd1/0xe0
[  469.617634][ T5785]  ? __pfx_panic+0x10/0x10
[  469.622030][ T5785]  ? fbcon_prepare_logo+0x94e/0xc60
[  469.627209][ T5785]  ? preempt_schedule_common+0x3c/0xb0
[  469.632650][ T5785]  check_panic_on_warn.cold+0x19/0x34
[  469.638003][ T5785]  end_report.part.0+0x3a/0x90
[  469.642758][ T5785]  kasan_report.cold+0xe/0x18
[  469.647434][ T5785]  ? fbcon_prepare_logo+0x94e/0xc60
[  469.652619][ T5785]  kasan_check_range+0x10f/0x1e0
[  469.657541][ T5785]  __asan_memcpy+0x23/0x60
[  469.661954][ T5785]  fbcon_prepare_logo+0x94e/0xc60
[  469.666963][ T5785]  fbcon_init+0x1065/0x1830
[  469.671448][ T5785]  visual_init+0x320/0x620
[  469.675849][ T5785]  do_bind_con_driver.isra.0+0x636/0x9c0
[  469.681472][ T5785]  do_take_over_console+0x501/0x5d0
[  469.686663][ T5785]  do_fbcon_takeover+0xe9/0x210
[  469.691511][ T5785]  fbcon_fb_registered+0x364/0x4b0
[  469.696608][ T5785]  do_register_framebuffer+0x503/0x870
[  469.702047][ T5785]  ? __pfx_do_register_framebuffer+0x10/0x10
[  469.708024][ T5785]  ? find_held_lock+0x2b/0x80
[  469.712689][ T5785]  register_framebuffer+0x23/0x40
[  469.717702][ T5785]  __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0
[  469.724816][ T5785]  ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10
[  469.732361][ T5785]  drm_fb_helper_initial_config+0x44/0x60
[  469.738072][ T5785]  drm_fbdev_client_hotplug+0x19e/0x220
[  469.743601][ T5785]  ? __pfx_drm_fbdev_client_hotplug+0x10/0x10
[  469.749652][ T5785]  drm_client_register+0x197/0x280
[  469.754753][ T5785]  drm_fbdev_client_setup+0x155/0x480
[  469.760106][ T5785]  drm_client_setup+0x160/0x1a0
[  469.764944][ T5785]  gud_probe+0x1835/0x1c20
[  469.769342][ T5785]  ? __pfx_gud_probe+0x10/0x10
[  469.774085][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.779879][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  469.785676][ T5785]  ? __pm_runtime_set_status+0x13c/0x970
[  469.791290][ T5785]  usb_probe_interface+0x386/0x9b0
[  469.796391][ T5785]  ? __pfx_usb_probe_interface+0x10/0x10
[  469.802009][ T5785]  ? kernfs_put+0x3f/0x60
[  469.806327][ T5785]  ? sysfs_create_link+0x68/0xc0
[  469.811246][ T5785]  ? __pfx_usb_probe_interface+0x10/0x10
[  469.816865][ T5785]  really_probe+0x241/0xa60
[  469.821357][ T5785]  __driver_probe_device+0x210/0x460
[  469.826629][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.832426][ T5785]  driver_probe_device+0x4a/0x140
[  469.837443][ T5785]  __device_attach_driver+0x1df/0x320
[  469.842793][ T5785]  ? __pfx___device_attach_driver+0x10/0x10
[  469.848678][ T5785]  bus_for_each_drv+0x159/0x1e0
[  469.853515][ T5785]  ? __pfx_bus_for_each_drv+0x10/0x10
[  469.858885][ T5785]  ? lockdep_hardirqs_on+0x7d/0x110
[  469.864066][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  469.869870][ T5785]  __device_attach+0x1e4/0x4d0
[  469.874613][ T5785]  ? __pfx___device_attach+0x10/0x10
[  469.879879][ T5785]  ? do_raw_spin_unlock+0x145/0x1e0
[  469.885064][ T5785]  device_initial_probe+0xaf/0xd0
[  469.890068][ T5785]  bus_probe_device+0x64/0x160
[  469.894820][ T5785]  device_add+0x121d/0x1970
[  469.899306][ T5785]  ? __pfx_device_add+0x10/0x10
[  469.904139][ T5785]  ? mark_held_locks+0x40/0x70
[  469.908881][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.914678][ T5785]  usb_set_configuration+0xd97/0x1c60
[  469.920055][ T5785]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  469.926116][ T5785]  usb_generic_driver_probe+0xa1/0xe0
[  469.931477][ T5785]  usb_probe_device+0xef/0x400
[  469.936229][ T5785]  ? __pfx_usb_probe_device+0x10/0x10
[  469.941585][ T5785]  really_probe+0x241/0xa60
[  469.946076][ T5785]  __driver_probe_device+0x210/0x460
[  469.951349][ T5785]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.957147][ T5785]  driver_probe_device+0x4a/0x140
[  469.962159][ T5785]  __device_attach_driver+0x1df/0x320
[  469.967510][ T5785]  ? __pfx___device_attach_driver+0x10/0x10
[  469.973395][ T5785]  bus_for_each_drv+0x159/0x1e0
[  469.978232][ T5785]  ? __pfx_bus_for_each_drv+0x10/0x10
[  469.983590][ T5785]  ? lockdep_hardirqs_on+0x7d/0x110
[  469.988771][ T5785]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  469.994567][ T5785]  __device_attach+0x1e4/0x4d0
[  469.999311][ T5785]  ? __pfx___device_attach+0x10/0x10
[  470.004574][ T5785]  ? do_raw_spin_unlock+0x145/0x1e0
[  470.009760][ T5785]  device_initial_probe+0xaf/0xd0
[  470.014769][ T5785]  bus_probe_device+0x64/0x160
[  470.019519][ T5785]  device_add+0x121d/0x1970
[  470.024029][ T5785]  ? __pfx_device_add+0x10/0x10
[  470.028871][ T5785]  ? usb_detect_static_quirks+0x335/0x3e0
[  470.034574][ T5785]  usb_new_device.part.0+0xcc2/0x1686
[  470.039933][ T5785]  ? do_raw_spin_lock+0x128/0x260
[  470.045473][ T5785]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  470.051265][ T5785]  ? mark_held_locks+0x40/0x70
[  470.056011][ T5785]  hub_event.cold+0x1e3/0xe90
[  470.060693][ T5785]  ? __pfx_hub_event+0x10/0x10
[  470.065443][ T5785]  ? lock_acquire+0x1d1/0x380
[  470.070099][ T5785]  ? process_one_work+0xa2c/0x1b10
[  470.075893][ T5785]  ? process_one_work+0x906/0x1b10
[  470.080992][ T5785]  ? process_one_work+0x906/0x1b10
[  470.086185][ T5785]  process_one_work+0xac7/0x1b10
[  470.091132][ T5785]  ? __pfx_process_one_work+0x10/0x10
[  470.096491][ T5785]  ? lock_acquire+0x1d1/0x380
[  470.101155][ T5785]  ? __pfx_hub_event+0x10/0x10
[  470.105903][ T5785]  worker_thread+0x5ef/0xe50
[  470.110484][ T5785]  ? __pfx_worker_thread+0x10/0x10
[  470.115583][ T5785]  ? kthread+0x13a/0x450
[  470.119848][ T5785]  ? __pfx_worker_thread+0x10/0x10
[  470.124948][ T5785]  kthread+0x373/0x450
[  470.129012][ T5785]  ? __pfx_kthread+0x10/0x10
[  470.133599][ T5785]  ret_from_fork+0x730/0xd60
[  470.138181][ T5785]  ? __pfx_ret_from_fork+0x10/0x10
[  470.143278][ T5785]  ? __switch_to+0x800/0x10f0
[  470.147941][ T5785]  ? __pfx_kthread+0x10/0x10
[  470.152517][ T5785]  ret_from_fork_asm+0x1a/0x30
[  470.157266][ T5785]  </TASK>
[  470.160456][ T5785] Kernel Offset: disabled
[  470.164773][ T5785] Rebooting in 86400 seconds..