last executing test programs:

2m32.902267618s ago: executing program 0 (id=1558):
syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffbffff545f05"], 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x20482, 0x0)
mmap(&(0x7f0000562000/0x2000)=nil, 0x2000, 0x3, 0x810, 0xffffffffffffffff, 0x1347a000)
madvise(&(0x7f0000563000/0x1000)=nil, 0x1000, 0x17)
ioctl$RTC_VL_CLR(r0, 0x7014)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x2, 0x0)
keyctl$invalidate(0x28, 0x0)
ioctl$COMEDI_POLL(r1, 0x640f)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000400)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, &(0x7f0000000200)=[{0x0, <r2=>0x80000000}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)=[{}, {{}, {0x80000000, <r3=>0x0}}]})
r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{{}, {0x80000000, <r5=>0x0}}, {{}, {<r6=>0x80000000, <r7=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{r6, r5, 0x1, [0x0, 0xf7df]}, {r6, r7, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000940)=[{0x0, 0x80000000, 0x0, {<r8=>0x0}}, {}], 0x2, 0x0, &(0x7f0000000980)=[{}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a80)={{r2, r3, 0x4, [0xd, 0x7fff]}, {r6, r8, 0x7, [0x7, 0xc]}, 0x0, [0x5, 0x2]})
ioctl(r0, 0x9, &(0x7f00000000c0)='(')

2m32.82360783s ago: executing program 0 (id=1559):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x23, 0x5, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000040)={0x0, 0x9})
close(0x3)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0xc, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x2004c8c0)

2m30.191811702s ago: executing program 0 (id=1564):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

2m29.951713673s ago: executing program 0 (id=1566):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10)
r1 = open$dir(&(0x7f0000000400)='./file1\x00', 0x200080, 0x3d)
renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r2=>0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000002300)={&(0x7f0000000080)=[{0x90, 0x10, 0x0, 0x0}], 0x1})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
fchdir(0xffffffffffffffff)
open(0x0, 0x1031c2, 0x0)
r6 = syz_open_dev$swradio(0x0, 0x1, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045})
poll(0x0, 0x0, 0x9)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd460104000000000000131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c388df6"}, 0xd8)

2m24.187606811s ago: executing program 0 (id=1579):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000140)='pipefs\x00', 0x19000f0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)="35fc", 0x2)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000070000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000002640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002c00)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='6\x00\x00\x00,\x00\x00\x00', @ANYRES32, @ANYBLOB="2c013b005ef701c74f9604f49c8249c2bc898467a953213423724bf319c7c59f4b92963571015eeb2b8528e3f063d840ee47fa3ebfd8decb826e24997b6b103e0027f74386a9dd299f5925646696e1c85fa709f9b1eda455bb4c136f6db4b47c2220e6a4844475f955aa19f48ce6a6557cfa43b7f12df1159a4cc0a89c5bee8235", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
lstat(&(0x7f0000000500)='./proc\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmmsg$unix(r3, &(0x7f0000004200)=[{{&(0x7f00000003c0)=@file={0x1, './sys\x00'}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002580)="25d1ed7d69f3a6672259e78fad9e9d186d512a470a6ccc28747a15dbe8c2d2e54fbc2e4785f6d32aba4f2f42e3780d961844dc26f40a6b300f566db938f95481c05f29465bbd62afcad5ca72dff5694f62491b5862c8679d4fa3bcfbfe67ea7e9067d728933f1d996c589f0dbb523d8afce191b35c49b5cecdab6178d7cb1246c024a3a9cfcf8fce7c21f12cf4dfb00d890433b61769605ba8f1de7014bf1759ad38ef34ce242e903caf614cefe2f39f5257515c19a45baaeea8d416c506f2", 0xbf}, {&(0x7f0000002640)}], 0x2, &(0x7f0000002880), 0x0, 0x815}}, {{&(0x7f0000000440)=@file={0x1, './proc\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f00000026c0)="8bca5e8828673e30487a36e39e25954301b726b8fd837649f481fb1a928ab58cb36ca26f8d529a7300dd766e714774f44f4c05e4df453bfd599921d9e2bf8fdacd9c08d77624b2052c649f9ec60290fc4a09fca8841397e11a16c13c770bd39c12d9a5e62e9ccad34b8610fda26122cfa58d1345def40c306f96206de9f6543991ce08f62c4c17b53359177991eef4de3e31", 0x92}, {&(0x7f0000002780)="76e475759a5f905062027c855327ba18939c7b4ac902a3e9ba9a3bfab874b256f8c4a85ea5a3321cb94bcc3244b552ee2760c336aaa5cb322163827e856005ffed1b170dd0d569cb64e32956", 0x4c}, {&(0x7f0000002800)="4a4dd2aa3ea0b23876b9d75ee08ef12b8922f376842f2b63e7aa1b5afde29b7d2a6fa82b0333e5dc8ea78ecbfb1b1bd0c46e9c2d88c44036af170fa7842f34d4f91997d75819e13e59b3d92836f99efd2eed26ecfe81946521df781df193d9a355a6b19376f0fcdebf5adba419251d6eca501d3f3541e495b59dc172097562791f863e36e309bc7defcb09b54a8f40b93acd5a0395166269ccb52f83a02bd3e77a3dbdc696e4f69f10be3cb73d472e7bfd", 0xb1}, {&(0x7f00000028c0)="6c611961c3b14324860af69de48baccf0d4d3f3659c277f269cd01e3595cdda1628c1aa9463f173e0b18f726ec20c4a2d822e3223e6da9b9c6136ffa08bb88e3b15946b139c99a267b6aa88e1bd57e06a753573d3bd0bf791b7a50bfd3def76ea8", 0x61}, {&(0x7f0000002940)="96dcc7fe1030e239e801fbf15b1df86adb19555a3e0f67ebc000014367c913728609ba42f992978b8aa90a00519b36551afe7f7a86127bb0f9a96491acc0f9d24a4c5d2940471ee0a6d0225e7ef28417235e8fd3d6e049c9eea3ebbef501f4e33942ec666e78ad46d60980", 0x6b}, {&(0x7f0000002b80)="2583ba4ae1c32a2f2d5ffd95cf32b8de234f07a558bc21edfecd0bd5405be10b84d4b141aa7fcfa610b22cb63b175fb7bed85f9f990953461fa59fafe636c50bffdf6454ad8d2d83b27ab07b6cc6e5ce8ab6412c5e8acc0eb32f80242f2928738abc0b680ebccb1e5ed51bf8", 0x6c}, {&(0x7f0000002a40)="f98fcc1992a73b87ce099c461f71bb3dc9d2d89f2da8d857cc58f404004bf3a107e4a7a03d4c44cc433469536f5a4237aba0f7253017c1b785", 0x39}], 0x7, &(0x7f0000002e40)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8ffffffd0d11162832501133a1913e4dad2a866f5b50bb9c2525d8c8e363f4c8345d5d1cd138e06a003862df711f21622aef61e4894d3ab08c6caa172d05070182f4fc26d0500000066c7"], 0x90, 0x4000}}], 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r9 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r9, 0xffff)

2m23.744694263s ago: executing program 0 (id=1581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r4=>0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x1, 0x5003)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)

2m8.715329234s ago: executing program 32 (id=1581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r4=>0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x1, 0x5003)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)

5.05031169s ago: executing program 4 (id=2051):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})

5.031316166s ago: executing program 5 (id=2052):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0xc, 0x2, @thr={&(0x7f0000000400)="51b9a87195feda9235d64ba9491e7c17e2f90f285ae4fde379cb9b82f77dd70905d0ced57e2102e41f64630ecfff824776e6c09acfccf578763a3fa3e3dc104dbdaa215b1d2c73fba4651f574ef4ea380ece08d430be2b62029a40b8be9a1e1232d671946f80a674dd8236f8fd99f93e9abf886b75e00a9459f4bd4b51f16de3d8b7c71dc69698f73ca9d888", &(0x7f0000000500)="7a1b1c2def1640a0c73d6e96f834b73628f5864da370d675ad7ba1af7ba72a8bc03777b8316b0f6affffffffffffffff423af46a0900e1606ee5f4676f5a00a084c61ffa3c4f16b22b8626220ee3629f89b1eb0b9445e235aac26effb2b817e8ca43732ad63b87"}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x80000001, 0xffffffffffffffd3})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0xff}, 0x9)
r3 = io_uring_setup(0x4516, &(0x7f0000000140)={0x0, 0x5941, 0x40100, 0x2, 0x288, 0x0, r2})
r4 = landlock_create_ruleset(&(0x7f0000000100)={0x81, 0x0, 0x3, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r4, 0x1)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r5, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, 0x0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"})

4.524877109s ago: executing program 5 (id=2065):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20], 0x68}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

4.445162863s ago: executing program 2 (id=2057):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0xfffffffe, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cb00"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x3f420f0000000000, 0x0, 0x20000800}, 0x44801)

4.403707998s ago: executing program 5 (id=2058):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000200)={0x2, 0x4e02, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="0800281100040020", 0x8}], 0x1}, 0x400300}], 0x1, 0x4000)

4.329010911s ago: executing program 5 (id=2059):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f0000002540)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x3, &(0x7f0000002580)=""/70, 0x46}, 0x5}, {{&(0x7f0000002600)=@qipcrtr, 0x80, &(0x7f0000002780)=[{&(0x7f0000002680)=""/138, 0x8a}, {&(0x7f0000002740)=""/24, 0x18}], 0x2, &(0x7f00000027c0)=""/191, 0xbf}, 0x9}, {{&(0x7f0000002880)=@qipcrtr, 0x80, &(0x7f0000005d00), 0x0, &(0x7f0000005dc0)=""/110, 0x6e}, 0x3}, {{&(0x7f0000005e40)=@un=@abs, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005ec0)=""/27, 0x1b}, {&(0x7f0000005f00)=""/172, 0xac}, {&(0x7f0000005fc0)=""/192, 0xc0}, {&(0x7f0000006080)=""/179, 0xb3}, {&(0x7f0000006140)=""/113, 0x71}], 0x5, &(0x7f0000006240)=""/135, 0x87}}, {{&(0x7f0000006300)=@hci, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006380)=""/244, 0xf4}, {&(0x7f0000006480)=""/140, 0x8c}, {&(0x7f0000006540)=""/187, 0xbb}, {&(0x7f0000006600)=""/136, 0x88}, {&(0x7f00000066c0)=""/204, 0xcc}], 0x5, &(0x7f0000006840)=""/234, 0xea}, 0x1}, {{&(0x7f0000006940)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000069c0)=""/153, 0x99}], 0x1, &(0x7f0000006ac0)=""/16, 0x10}, 0xfff}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006b00)=""/55, 0x37}], 0x1, &(0x7f0000006b80)=""/98, 0x62}, 0x1ff}], 0x7, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xd}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000280)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8042, &(0x7f0000000200)={0x11, 0x9, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6}, 0x10) (async)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2})
io_uring_setup(0x7627, &(0x7f0000002900)={0x0, 0x653e, 0x80, 0x1, 0x1de, 0x0, r4}) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000000c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e287a89cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbdb1cdcb019dc2eab19e1ade2162d48ad90b5e46aeb1c0a5b7033ad302e4d31b7a823493cfb14c4") (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
clock_gettime(0x4, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
socket$inet(0xa, 0x801, 0x84) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

4.328867993s ago: executing program 2 (id=2060):
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12150003000000209904541040000102030109028d00030104007f080b0101010a20020904000000010120000924010700061500b20c24030500040a25007f008009040100000102200009040101010102200008240201e60304061024010505000400000005050000004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e0452082501040f43ce03"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

3.429135811s ago: executing program 5 (id=2061):
pidfd_send_signal(0xffffffffffffffff, 0x40, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})

2.572597889s ago: executing program 3 (id=2064):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08"], 0xfd6c)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000000c0), 0x0, 0x4}, 0x20)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000000000007e00000008000300df811018b87f9481e033a37b08a43370b618385259b7d31ebd8f50af7ae1de3879e5f1ac63216ea0b4b0fb39cd3e5b0a03dd9f90070b321dd6de26aa9c5e972b46828d1b389c17f2c761379acc9466", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd7000fcdbdf25020000000900030073797a30000000000500040001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, 0xe8)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000200)=[{0x0}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000340)={0x3, r10, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x70)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1.965260266s ago: executing program 1 (id=2067):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54)
getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef)
socket$kcm(0x10, 0x2, 0x0)

1.824503656s ago: executing program 4 (id=2068):
syz_emit_vhci(0x0, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xffe0, 0xffe0}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0)

1.822836207s ago: executing program 4 (id=2069):
write(0xffffffffffffffff, &(0x7f0000000000)="cad5cc598f25a13b1267f2db7d9254e2939847b33a835dd2206c2a158a0cfc14ea32173d14095d0d28b2335988bf3bdf6f0dc95e68ef6a2d514a0cee4eedf52aa5cc5644826448584c0ede017a298fcff4bb61715f2728cc7c860f43e00dac137322c5b4d1a0560841feacc7d19630620310611788946ec1ddfcdd3c4abb9446c07127265ddce9cdaff0d56e92de80bceba7f9f5a5d93e9e314d42986befc06ee34ef84e1cbd8e1c6095", 0xaa)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$dsp(r0, &(0x7f0000000100)="415c9d65d4a476d46ebaa8f5b945d9b8a38937e0527dba2f7d24186628f9d89ea2acdcd576f10a538095cfa89de42505de2b1921f4b195f2561e8f64134cfdee6bf3aee370201d6d0ba2c77ac7096e198c703b682997fd92402ea1ee495cbb463ec3b06e3ac35d1464d5fc4436aa18a6032edbd039e0b7d3dff8f4df8ab3d4e94db01db4966209d6a625f8d0b5c8eb913992d69136485d278a2ea4f8f6df5787088cb183562f4157d9ac827fb8bae92ee2d3563dba29d918a7dc90e804512c47f8f11d5ed7b043", 0xc7)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0x9a0000, 0x9, 0x3, r1, 0x0, &(0x7f0000000280)={0x9909e5, 0xdc1, '\x00', @p_u16=&(0x7f0000000240)}})
listen(r0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000003c0)={0x9b0000, 0x2, 0x757, r2, 0x0, &(0x7f0000000380)={0xa00a6e, 0x7f, '\x00', @p_u16=&(0x7f0000000340)=0xf6ce}})
ioctl$FE_READ_BER(r2, 0x80046f46, &(0x7f0000000400))
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000440))
recvfrom$inet6(r2, &(0x7f0000000480)=""/40, 0x28, 0x12003, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg0\x00', <r4=>0x0})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', <r7=>0x0})
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0}, &(0x7f00000006c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', <r9=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={<r10=>0x0, @broadcast, @broadcast}, &(0x7f0000000780)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', <r12=>0x0, 0x20, 0x80, 0x3, 0x7fffffff, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0xf, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x67, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', <r14=>0x0})
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r15=>0x0}, &(0x7f0000000980)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'gretap0\x00', <r16=>0x0, 0x80, 0x40, 0x4, 0x6, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp={0x44, 0xc, 0x5b, 0x0, 0x6, [0x9, 0x84d]}, @rr={0x7, 0x13, 0x7a, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast]}, @noop]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r0, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r17=>0x0}}, 0x10)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={<r18=>0x0, @multicast2, @multicast2}, &(0x7f0000000b80)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001480)={&(0x7f00000004c0), 0xc, &(0x7f0000001440)={&(0x7f0000000c00)={0x80c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfffc, 0x8, 0x2}, {0xdb, 0x3, 0x0, 0x9}, {0x2, 0xe7, 0x8}, {0x800, 0x0, 0xd2, 0xf0}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r14}, {0x20c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xca76}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x14}, 0x4000040)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000014c0)=@int=0x5, 0x4)

1.729446223s ago: executing program 4 (id=2070):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20], 0x68}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

1.728119198s ago: executing program 4 (id=2071):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}], 0x1}], 0x1, 0x40800)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0xc4, 0x12, 0x905, 0x70bd26, 0x25dfdbfe, {0x21, 0x9, 0xb, 0x0, {0x4e22, 0x4e26, [0xfffffffc, 0x6, 0x0, 0x6], [0x401, 0x2004, 0x6, 0x1], 0x0, [0x10000, 0x2008]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "92dd7f1c"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "3db2f22ed751e095d045f9c9581487ba2546518575142fe0b29975042008a11bf96089960f35c6d59a75f412049801529ef8e26ac3e9b925b670fda136c19e33e765ea1c79ae61e1faa556d321d4fa4d52bbd542121e3c6aede558e104bc898f17344127dbbba13f805f"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000010}, 0x24000044)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="bb9dbbbbbbbbaaaaaaaaaabb86dd6000000800283afffe8000000000000000000000000000aaff09e51846894644668f2d5ebe0200000000000000000000000000018700907800000000fe800000cc07b5910000000000000000000000bb0e020000000000000000000000000001"], 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10)
listen(r3, 0xa)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') (async)
r4 = accept(r3, 0x0, 0x0)
write(r4, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r5=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x200}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(r6, &(0x7f0000000040)='stat\x00')
pread64(r7, &(0x7f0000000280)=""/28, 0x1c, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r5, r3, 0x5, 0x2, 0x3}, 0x50)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000004200)={0x2020}, 0x2020)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000fff600e3bca9a7bfe801bb293c735861f1f1a404beed0f90f486d67b3b1c153b3c10e3596b67ed73dfd796bb314c56a77a77d0d3dea460798580607558e7e1ed3c01a38e160e66fcf8bdfa8dec82b842503edaeaf28ac9e3fdab122f1b621d4edc983c3b0eb161e9baf0933a2d8149dd509a706c31995d17614ce2da3c059626b7a25565938f50b353d91e15ae5b92a904dbc249fdae20c7713d52c4061e2d39d36c4e5fec0d32e5ba88a4d395cf602596930c2dea5cb08aaf29554abeaed9d9f755cf03dcebe978adea000000000000"], 0x50)

1.5444377s ago: executing program 1 (id=2072):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @local, 0xf}}}, 0x80, 0x0}, 0x2004b761)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20)
open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000d00)='nf   :27.0.0.1 2\\00000000 l\\calhost\n', 0x24)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) (async)
close(r0) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @local, 0xf}}}, 0x80, 0x0}, 0x2004b761) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) (async)
open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8001) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') (async)
openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) (async)
write(r6, &(0x7f0000000d00)='nf   :27.0.0.1 2\\00000000 l\\calhost\n', 0x24) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

1.482898506s ago: executing program 3 (id=2073):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000002dab000000000000008000000000000009c0dab5b9094d38b435feb9527d1497f2e107c04b086c60699d9bfab1f9c293f3182ecce8e02465554dceabcd42cf18c2cf0a6c33ee7b6c3e5cb8c83a77090061b0bce9db5a243f7493cde5cdc87eafe9", @ANYRES32, @ANYBLOB="000000000000aa2b35c2bd114ddf9674a7bd7143853ea0f64ce76f22eb302a51946a3cb7f8d1dfb12e698d001f1ac45a1d1f4bb082316a258f2af091a168c919f07addae1956b2b832435be55ba6cca26ae1c5e89c020dea048490f5192b6d6a54ab8f6a98d4295b9477522395a3f0a0f5e99d3c83b1bdfff400"/136, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x13, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f00000001c0)=[{r3}], 0x1, 0x9)
close(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x242000, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x140)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = eventfd(0x71f1)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0xf006, 0x8000000, 0x0, r9})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r8, 0x4})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1000}, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)

1.426560191s ago: executing program 1 (id=2074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x1000000)

1.306440669s ago: executing program 1 (id=2075):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
r0 = syz_io_uring_setup(0x4d92, &(0x7f0000000180)={0x0, 0x6abc, 0x80000, 0x3, 0xae}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f00000000c0)=0x18) (async)
close_range(r0, r1, 0xd3420f7e429ba8a7)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async)
mkdir(0x0, 0x0) (async)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1000}, 0x8) (async)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)

1.218560797s ago: executing program 2 (id=2076):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
sendto$inet6(r0, &(0x7f0000000080)="edcfcb428850e9bedf88b294bb6b3e61c6960058727b564fed930cb33e1ba26e608b76fc6de29c84a0dd943514a3f8cf3c1e7a53b45b1f89affe053fa5a9a199189a733a87b425ed8cb0bb41964ee5c0868929960bd29ca242e0ec6e19ad526166d370a265776c831a301f0eb91cab55be0eb47d07318ed70dfbbb754daede41f162d63da2509a26c7f6f6e57f52f6c537373076cd592c6fdb2e606e97ae9849af828d764d58340b1e02f5df05c38af6b221af42d3e626cdf1a19080349e2c7e0602e93ecfc921044c5601bdf1281a7380135b", 0xd3, 0x40000, &(0x7f0000000180)={0xa, 0x4e21, 0xe79d, @empty, 0x2}, 0x1c)
recvfrom$inet(r0, &(0x7f00000001c0)=""/36, 0x24, 0x2000, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x2, 0x1000, 0xe4, &(0x7f0000000240)="14e6962958ff667cc17d279dced4b91ea6a51f6702d85aa3311e90b0610e86e3f93aaae550cdb323520c266aa3ab539a0c07c686fdd45cc8295e693c3f37f88272bf7921c1bd936d1d5b8852bcefba1f91f77cb43f253a1ecd8da9c00197c03dd93d67392283a93f951791fd5bfb7b439aac0121e9226ad4a41753eca75b0ee55a242d72d45d4499e557dee08be319f65a382f8a35fdc8c7e59625430a2c478094de0279040d464cd9a8f5db79324d269e08bc3c7782c7d35ad0270be77d9daa1552c610c2fa76cb05864f88e11c44e62d444fdac0a79109dd5e37ef9995a2166bf11e0a", 0xb7, 0x0, &(0x7f0000000340)="6b88c3b731163898b53e3ae8adc21bb9fdf3cd8c7c582553b93a09b196480888d786d6e4515215be5dda37d2c2ea7b67f5bd61ba0fc270d26d179e354e8f23d10f6b0e550106ffb96e0c7d63bd862f02861121d768f3f494117a95ba5a426912be8fc05ec1aeba8e487005cc2c60dc6002cda8d184bf9e8b3ebf6f8bb1c8e21d095aeb08fd755cb64aecd743a7decb244358308acb850f2069d04a6842b737082b5a2e40e9f779f8b1283a109c8c82b0a600b9c8804602"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0xe4f4, 0xb29e, 0x2, 0x48001, 0x1, 0x0, '\x00', 0x0, r0, 0x4, 0x3, 0x5, 0x0, @value=r0}, 0x50)
write$snddsp(r0, &(0x7f0000000540)="902680b635ac31465cf2c525d53c098367d0d6a14af27df796f91ba2a1e270daa880161553ff686c5787fb1bb7afac9f5da4e460e4cae6e7b4cdd4652cc2e528f9cee3c9fc50", 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x9, 0x1, 0x8, 0x1}, {0x2, 0x3, 0x8, 0x1}, {0x1000, 0x4, 0x40, 0xffffffff}, {0x2, 0x10, 0x9, 0x1}, {0x1, 0x4, 0xfb, 0x8}]})
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, &(0x7f00000006c0)='./file0\x00')
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000700)={0x1000, 0x100000})
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000007c0)={<r5=>0x0, 0x6c, "ffdd2036debbad79da01c919a093bd16823a0508102be6d3d0182e66b05b32f15d7deca269c66a4c2de75443c27719019927e78f220ae924c12bf114ce2ad28ff2e886183aaf386c703dcebdaeb922bc76d30ccc22fb3fe1501f3f087a8087ca62b42e29a9f055656ca09ca8"}, &(0x7f0000000840)=0x74)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000880)={0x6, 0x8, 0x0, 0x3, r5}, 0x10)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000900)=[@text32={0x20, &(0x7f00000008c0)="c4e2fdbc847094292ba3c4e119fb97e86e0000b9fa0300000f320f01c566bad10466b8c20066ef0f01c9f080a50b00000084670f0059a60f015e0bf20f06", 0x3e}], 0x1, 0x40, &(0x7f0000000940)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r4)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000ac0)=0xe8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000b00)={0xe3c, 0x209, 0x27d3, 0x7, <r6=>r5}, &(0x7f0000000b40)=0x10)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000b80)=""/180)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000c40)={0x5, 0x2, 0x4, 0x1000, &(0x7f0000fe7000/0x1000)=nil, 0xffffffff80000000, r0})
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000d00)={r6, 0x5, 0xe8, "69ea9e02722a3eea815074cdd051cd4736055354160ce22907c08ef043ab1a7bef01cad8bb6e27e8728002119d2e750c970f3967fe9ad1b9a650178d4d4303243f37942659ca0b41e366cf776e8db43925f3059c91f8c4a7c8133c03770a32d1c255299719d43c24a0e02a5678da0208e6397d9f108461c6ba0e03dd2ae20355b3ffd4712052a97f0c903d16532d683cb8028e421f5ddcb7c584912bb2fe3cef8e5d255ff22c2da1a087008f35cec1506cf7895479312ab1dd7a1b80b93cfd6797bc7354aff0c443cea0179f89cc47be59c26384b687679f0b8644eea62a3f0d7ef25701fbad2530"}, 0xf0)
socket$inet_sctp(0x2, 0x0, 0x84)
sendmsg$nl_route(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd2d, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x6, 0x5, 0x0, 0x0, 0x5, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000081)
r7 = syz_open_dev$radio(&(0x7f0000000f00), 0x2, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000f40)={0x3, [0x0, 0x0, 0x0]})

1.210862798s ago: executing program 3 (id=2077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000001000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a010100000700000000000100000914000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.109106323s ago: executing program 3 (id=2078):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x4, 0x7, 0x7f, 0x28, 0xffffffffffffffff, 0x5}, 0x50)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0)

1.108254256s ago: executing program 3 (id=2079):
syz_emit_vhci(0x0, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xffe0, 0xffe0}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0)

1.060356806s ago: executing program 3 (id=2080):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10)
r1 = open$dir(&(0x7f0000000400)='./file1\x00', 0x200080, 0x3d)
renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r2=>0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000002300)={&(0x7f0000000080)=[{0x90, 0x10, 0x0, 0x0}], 0x1})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
fchdir(0xffffffffffffffff)
open(0x0, 0x1031c2, 0x0)
r6 = syz_open_dev$swradio(0x0, 0x1, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045})
poll(0x0, 0x0, 0x9)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd460104000000000000131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c388df6"}, 0xd8)

1.020932888s ago: executing program 2 (id=2081):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20], 0x68}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

938.146688ms ago: executing program 2 (id=2082):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x3000000, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc8}}, 0x20050800)

864.947941ms ago: executing program 2 (id=2083):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @sdr={0x31435641, 0x1}})
set_mempolicy(0x3, 0x0, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x1})
creat(&(0x7f00000002c0)='./file0\x00', 0x5d)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2eaf500090584"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102399, 0x18fff)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100008b}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000960474984025aaaaaaaaaa0c0055e3e8f0ed46514257"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)

849.312346ms ago: executing program 4 (id=2084):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/141, 0x8d}], 0x1, 0x1a9, 0x5, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x60, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB])
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
fchdir(r3)
readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8)
readlink(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=""/104, 0x68)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

503.515151ms ago: executing program 1 (id=2085):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042a6b89e4b862f239a3749815", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e000018000280040012000500170000000000050016"], 0x48}, 0x1, 0x0, 0x0, 0x4041090}, 0x4000020)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x900, 0x4000000}, 0x0)

344.990283ms ago: executing program 1 (id=2086):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000300)=@v2={0x5, 0x1, 0xe, 0x8, 0x42, "b42072ea60438bc8c6b53947bc6e3ef93e2891250ce9cfa646acd1a278ca3f177c4d8151f64d28ca9fa65beab797f84ddeed89b130d7933e74c98acaed9951625022"}, 0x4b, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
clock_settime(0x0, &(0x7f0000000000)={0x77359400})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000003c0)={"60ddfe05cf5ab44163f210bc961ad8d06825126d28a0dc6c6f8b4966456546e376981a00febc7c6e84f40ecc8426c26140af6064e773de180c55e2415a39c76082d6e0365d40970183aa59a45c23058e1a3bab96548e07eccc538d9cd92e94cf08e063d898eee5d6b9cb67827f2a690f89db08250cc8fbdae590d7196381607df366bd7343763dacf64432449df9ce150050aacd5cb1ddb1d50758eb44e171bc5a927c1c8f6e2e869cb8f25bd622182b2f531caf0c4b3bdcf8c6c6e4896ac9c83a7622f9606d319e7e8d8e3dea8b54a7872f11fab1190fa3b9aa1f68213b9cade6731b46657a288e4dafc236cb510841af38c3de8cee93483ead0829c2baee5a7d08b84028a53394d4c66b7110a20b06b4d039be18da617ade0091224a31c5791611f66d36e75d722d9fdfe30d2438cb5933f8c1d833c85e3cf4f12d60ec7425ee40611eb915c342fef4b532685ea878099950ef51cdeb555fb371716c34482517ee5877970c0e675a07d16987e27c0ec50b6f7ecd9e4fdaf09ea8c3e558675e92758104ebd05e8b3a01e037e32865668bedb183ef4c90f0d7ff7b24645520cccacd166a44f145426cf7d496b9ea19c2aec33650ceaee005ac2fd742820e21f62ba28fe96ed4111a0954740e12ddf113fbad49266ffc86cb45cbfba35b4298e61cff8cd209ed4efaecbae24c0ae5ebcd6edbdd5b96ed6817a37c9d6848e6d65b59013ae11fffda70e4197364b5ab7948ade0301a48997901c7b912e73d23e4ccaa33bb6528f967af7bfd4bf728d0a43cdf1db7797da7fdc479c9c07d76a0528e239c2b0d4877708f00baeaa2ff06cd1a0efd30cdfd871cd9db248ef7ef1a960955089e1f49060e4e477070078c4405b04b295b801773787ef3a36d16cfcec5f3a6e00c6e3a490dd4cfff6b2ce9a8baa70df2da6878c9e86ae01c423b71ab88e83c6c230ec4874d149b31a4d74769e43b0875636bf94bde1196f994adc44eb921a3119cce3fb48499d013b2566ceb1eabd234c79cb169aff7aae16ed890725be47ab8208c9daca87c0f7710999d2a579936c7cde984e69f230244a6272e7ca14660eaf76cc9c47405d096d7738b601206ae76b1472c5bdcd236aafefdce7f73b4bfcfda90887a38f88e55f6fd7392ca6cfbbb2d6d7f389d205a9a656c32c47e8bb0fa641df4a5354a733b008bcf7ee101c7e67ab8fcdbc0ae3c09e4ad5dee614a23c73d5873301cf0a046959f9afb214ad98fc6b6f9ab80ed4ed893ba3951be1cc14197926775e5a51dd3877b3a079a1f269fa1e4a203a849c8c12ccb195dcea9e86f10937e3c0ce65f954eab99192392818d5b75dcafdcadc70da2100c908ffb2a60edfa7807b3391968631b8f415d7f2d1390696d8e8e743879d697afd34ab0205339b36c10f4e9f88b195100f6d9e6d22b3c10d82d9d7f7c8b9b74eebdf622"})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x3, 0x10, 0x4, 0x80, 0x7, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff, 0x0, '\x00', 0x2})
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x901, 0x0)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000000200)="fd780f17", 0x4}], 0x1)
io_setup(0x7f, &(0x7f0000000080))
openat(r3, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x79001, 0x0)
write(r1, &(0x7f0000000280)="6335f9650bb6a792728177374a63c48f6f9f0b1e3c531866eaa959b834f332ef806ec8a92568192f8197b701f2df858f0680d8518e1363007101d0c3a94054380da4af7723588a5d1bf824ba0966c6d545054e5e40d02a84e34d7fd54827d9fdff", 0x61)
r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002060110000034e400000000000000000537010006000000050004"], 0x24}}, 0x2)
r8 = socket$kcm(0x10, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008007, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0xfff, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x3fd, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xe, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x3, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x223, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
io_setup(0x200, &(0x7f0000000140)=<r9=>0x0)
io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000}])

0s ago: executing program 5 (id=2087):
syz_usb_connect$cdc_ecm(0x4, 0xe7, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x2, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x26, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x9, 0x1, 0x2}, [@mdlm_detail={0x85, 0x24, 0x13, 0x3, "6b7fda3d1d86920d4abd9297203e431ac5c6d44c2e47ac1aa5cd75a6eddcdba92a067d444167758a3cac832e790a7d9287de274704c1001ad11983f611047a0cf4970b6928f23470c10ecc581123f9fc86c522684c02ce8d944ef67fd37af8563ff0c9fda8fa13c4e2a38a2ec33b29086df35e2926a74f667142c46a646dd9fe53"}, @mbim={0xc, 0x24, 0x1b, 0xef4, 0x7ff, 0x9, 0x1, 0xfff, 0x80}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe4, 0xf, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0xfd, 0x9, 0xff, 0x36}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc07}}, {0xb0, &(0x7f00000001c0)=@string={0xb0, 0x3, "130589e7ebca29a1bb89ead7d2abfeff5277575dd6e7c58c34787d4a1ac949e0739f15de31912c86077d37ebd6bba2ad89fa1fa6b3a1ce5949a7479a93174df7b907b94675572475bae55d9a3fb64ceef8812dfd180b98bf69c989917e55081384e8719e5418db08a1077386d69dcda6df9864aa948548bff0ce6fd7875fabe74824ad84c7a8753920a877316168f965d8902f5441e5448886643b5392c0ea07e2197b054f6f01c84dcf740dfe93"}}]})
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000004880)={0xa, @raw_data="980f23f78204a50333394f72ffccc830335fafc05e3d96381cdc39b6affddbac533612cbde7a1e02052bed84a7e67f693a3ad227efe9fbd153c8a07720d7c454d92dad6061dbf97832233279affcfe9ffae59f015c22bfd37fb716111a95c15a353c470d403ad711b413e1bbba4e6cbd2afc4e4389654defb840505ff5ea727e85e00227109671841330cb9a852190a310106328edcd36ce88b8692914bea709a36f6148982d644f37b12ae4d94a0fc453c9f61016feae6f7167500bface17ba17f8461dabf90bf8"})

kernel console output (not intermixed with test programs):

nterface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  532.513039][ T5706] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  532.520569][  T981] usb 5-1: Using ep0 maxpacket: 32
[  532.525654][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0
[  532.541185][ T5706] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  532.551900][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  532.556900][  T981] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  532.561160][ T5706] usb 2-1: Product: syz
[  532.574160][ T5706] usb 2-1: Manufacturer: syz
[  532.579142][ T5706] usb 2-1: SerialNumber: syz
[  532.596343][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.596370][  T981] usb 5-1: Product: syz
[  532.596386][  T981] usb 5-1: Manufacturer: syz
[  532.596421][  T981] usb 5-1: SerialNumber: syz
[  532.603586][  T981] usb 5-1: config 0 descriptor??
[  532.605020][ T5706] usb 2-1: config 0 descriptor??
[  532.611002][  T981] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  532.611098][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  532.611113][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  532.611203][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  532.611233][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  532.621054][   T29] pwc: recv_control_msg error -32 req 02 val 2b00
[  532.625553][   T29] pwc: recv_control_msg error -32 req 02 val 2700
[  532.626512][   T29] pwc: recv_control_msg error -32 req 02 val 2c00
[  532.627260][   T29] pwc: recv_control_msg error -32 req 04 val 1000
[  532.627754][   T29] pwc: recv_control_msg error -32 req 04 val 1300
[  532.653008][  T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  532.770249][ T5713] usb 6-1: USB disconnect, device number 9
[  532.792713][  T981] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  532.810364][T11723] dvb-usb: bulk message failed: -22 (7/0)
[  532.816135][T11723] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  532.827141][T11723] ttusb2: i2c transfer failed.
[  532.890467][   T29] pwc: recv_control_msg error -71 req 02 val 2000
[  532.896956][ T5706] usb 2-1: selecting invalid altsetting 0
[  533.168828][  T981] usb 5-1: media controller created
[  533.226607][   T29] pwc: recv_control_msg error -71 req 02 val 2100
[  533.246368][  T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  533.258464][   T29] pwc: recv_control_msg error -71 req 04 val 1500
[  533.278832][   T29] pwc: recv_control_msg error -71 req 02 val 2500
[  533.303530][   T29] pwc: recv_control_msg error -71 req 02 val 2400
[  533.314405][  T981] usb 5-1: selecting invalid altsetting 3
[  533.321809][ T5706] usb 2-1: USB disconnect, device number 75
[  533.338457][   T29] pwc: recv_control_msg error -71 req 02 val 2600
[  533.354049][  T981] ttusb2: set interface to alts=3 failed
[  533.376863][   T29] pwc: recv_control_msg error -71 req 02 val 2900
[  533.426251][   T29] pwc: recv_control_msg error -71 req 02 val 2800
[  533.450164][   T29] pwc: recv_control_msg error -71 req 04 val 1100
[  533.503296][   T29] pwc: recv_control_msg error -71 req 04 val 1200
[  533.540508][   T29] pwc: Registered as video103.
[  533.553825][  T981] DVB: Unable to find symbol tda10086_attach()
[  533.574975][T11736] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1741'.
[  533.588153][  T981] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  533.599946][   T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input95
[  533.625720][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  533.646635][   T29] usb 4-1: USB disconnect, device number 77
[  533.655091][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  533.943801][T11740] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  533.950349][T11740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  534.028465][T11740] vhci_hcd vhci_hcd.0: Device attached
[  534.291429][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  534.310167][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  534.323012][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  534.338912][  T981] usb 5-1: USB disconnect, device number 91
[  534.529835][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  534.589995][ T5713] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  534.759940][   T24] usb 6-1: Using ep0 maxpacket: 32
[  535.045224][   T24] usb 6-1: config 0 has no interfaces?
[  535.145183][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  535.172722][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  535.260744][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.338700][   T30] audit: type=1400 audit(1786073111.615:703): avc:  denied  { getopt } for  pid=11748 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  535.395530][   T24] usb 6-1: Product: syz
[  535.675694][   T24] usb 6-1: Manufacturer: syz
[  535.780533][   T24] usb 6-1: SerialNumber: syz
[  535.875211][  T981] IPVS: starting estimator thread 0...
[  535.928153][   T30] audit: type=1400 audit(1786073111.785:704): avc:  denied  { lock } for  pid=11748 comm="syz.2.1742" path="socket:[35309]" dev="sockfs" ino=35309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  535.971370][   T24] usb 6-1: config 0 descriptor??
[  536.131006][T11755] IPVS: using max 44 ests per chain, 105600 per kthread
[  536.309270][T11743] vhci_hcd: unknown pdu 2
[  536.654906][ T6144] vhci_hcd vhci_hcd.5: stop threads
[  536.703050][ T6144] vhci_hcd vhci_hcd.5: release socket
[  536.765856][ T6144] vhci_hcd vhci_hcd.5: disconnect device
[  536.860339][   T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  537.155543][   T24] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  537.238732][   T24] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  537.335851][T11753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1618 sclass=netlink_route_socket pid=11753 comm=syz.2.1742
[  537.572298][   T24] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  537.690496][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  537.699399][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  537.708947][   T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  537.719129][   T24] usb 4-1: Product: syz
[  537.723568][   T24] usb 4-1: Manufacturer: syz
[  537.728199][   T24] usb 4-1: SerialNumber: syz
[  537.730651][  T187] usb 6-1: USB disconnect, device number 10
[  537.762378][   T24] usb 4-1: config 0 descriptor??
[  537.772784][   T24] usb 4-1: selecting invalid altsetting 0
[  538.084350][   T24] usb 4-1: USB disconnect, device number 78
[  538.450117][  T187] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  538.612853][  T187] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  538.753677][  T187] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  538.806723][  T187] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  538.820875][  T187] usb 6-1: config 0 interface 0 has no altsetting 0
[  538.835192][  T187] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  538.856848][  T187] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  538.865909][  T187] usb 6-1: Product: syz
[  538.870108][  T187] usb 6-1: Manufacturer: syz
[  538.875377][  T187] usb 6-1: SerialNumber: syz
[  538.886006][  T187] usb 6-1: config 0 descriptor??
[  539.023967][  T187] usb 6-1: selecting invalid altsetting 0
[  539.271988][   T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  539.354627][  T187] usb 6-1: USB disconnect, device number 11
[  539.461728][   T30] audit: type=1400 audit(1786073115.745:705): avc:  denied  { setopt } for  pid=11804 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  539.486371][   T30] audit: type=1400 audit(1786073115.765:706): avc:  denied  { connect } for  pid=11804 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  539.508755][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.529396][   T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  539.567637][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.604170][   T24] usb 4-1: config 0 descriptor??
[  539.644204][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  539.714810][T11808] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  539.769886][ T5713] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  539.965990][T11801] comedi comedi3: bad chanlist[0]=0x00001002 chan=4098 range length=1
[  540.037186][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  540.062968][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  540.079416][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  540.102577][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  540.112188][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  540.120603][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  540.316120][T11819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1618 sclass=netlink_route_socket pid=11819 comm=syz.5.1764
[  540.397150][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  541.320112][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  541.337854][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  541.346273][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  541.353163][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  541.360504][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  541.367386][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  541.374363][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  541.381240][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  541.389950][   T24] pwc: Registered as video103.
[  541.397856][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input96
[  541.412805][   T24] usb 4-1: USB disconnect, device number 79
[  541.617315][T11830] netlink: 'syz.4.1768': attribute type 4 has an invalid length.
[  541.639402][   T30] audit: type=1400 audit(1786073117.895:707): avc:  denied  { accept } for  pid=11822 comm="syz.4.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  541.800150][  T981] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  541.913058][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'.
[  541.994942][  T981] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  542.020694][  T981] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  542.060702][  T981] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  542.114489][  T981] usb 2-1: config 0 interface 0 has no altsetting 0
[  542.149369][  T981] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  542.173659][  T981] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  542.197943][  T981] usb 2-1: Product: syz
[  542.212362][  T981] usb 2-1: Manufacturer: syz
[  542.217270][  T981] usb 2-1: SerialNumber: syz
[  542.243401][  T981] usb 2-1: config 0 descriptor??
[  542.273724][  T981] usb 2-1: selecting invalid altsetting 0
[  542.746886][  T981] usb 2-1: USB disconnect, device number 76
[  542.865351][T11857] FAULT_INJECTION: forcing a failure.
[  542.865351][T11857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.892817][T11857] CPU: 0 UID: 0 PID: 11857 Comm: syz.5.1778 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  542.892846][T11857] Tainted: [L]=SOFTLOCKUP
[  542.892853][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  542.892863][T11857] Call Trace:
[  542.892870][T11857]  <TASK>
[  542.892877][T11857]  dump_stack_lvl+0x100/0x190
[  542.892905][T11857]  should_fail_ex.cold+0x5/0xa
[  542.892927][T11857]  _copy_from_user+0x2e/0xd0
[  542.892950][T11857]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  542.892978][T11857]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  542.893008][T11857]  do_sock_getsockopt+0x530/0x6e0
[  542.893028][T11857]  ? __lock_acquire+0x49f/0x1a40
[  542.893052][T11857]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  542.893073][T11857]  ? rcu_read_lock_any_held+0x6a/0xa0
[  542.893103][T11857]  ? find_held_lock+0x2b/0x80
[  542.893166][T11857]  ? __fget_files+0x21f/0x3d0
[  542.893189][T11857]  __sys_getsockopt+0x148/0x260
[  542.893214][T11857]  ? __x64_sys_getsockopt+0xbd/0x160
[  542.893229][T11857]  __x64_sys_getsockopt+0xbd/0x160
[  542.893246][T11857]  ? do_syscall_64+0x90/0x870
[  542.893264][T11857]  ? lockdep_hardirqs_on+0x78/0x100
[  542.893280][T11857]  do_syscall_64+0x115/0x870
[  542.893296][T11857]  ? clear_bhb_loop+0x40/0x90
[  542.893317][T11857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.893335][T11857] RIP: 0033:0x7f3111d9e0d9
[  542.893352][T11857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.893366][T11857] RSP: 002b:00007f3112c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  542.893383][T11857] RAX: ffffffffffffffda RBX: 00007f3112026090 RCX: 00007f3111d9e0d9
[  542.893395][T11857] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003
[  542.893406][T11857] RBP: 00007f3112c79090 R08: 00002000000000c0 R09: 0000000000000000
[  542.893416][T11857] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  542.893427][T11857] R13: 00007f3112026128 R14: 00007f3112026090 R15: 00007ffebb7b2848
[  542.893449][T11857]  </TASK>
[  543.719610][T11865] ubi: mtd0 is already attached to ubi16
[  543.861272][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.887302][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.970224][   T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  543.999969][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.040027][T11375] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  544.187029][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.239834][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.265324][   T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.286859][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.317682][ T5713] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  544.339271][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.377560][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.524407][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.537065][ T5713] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  544.548424][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.575573][ T5713] usb 6-1: config 0 descriptor??
[  544.616695][ T5713] pwc: Askey VC010 type 2 USB webcam detected.
[  544.859932][T11375] usb 5-1: Using ep0 maxpacket: 32
[  544.982113][   T30] audit: type=1400 audit(1786073121.265:708): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  545.024128][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00
[  545.075658][T11375] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  545.093713][ T5713] pwc: recv_control_msg error -32 req 02 val 2700
[  545.128315][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.130234][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00
[  545.174571][ T5713] pwc: recv_control_msg error -32 req 04 val 1000
[  545.189526][ T5713] pwc: recv_control_msg error -32 req 04 val 1300
[  545.217439][T11884] netlink: 'syz.3.1784': attribute type 4 has an invalid length.
[  546.116203][T11375] usb 5-1: Product: syz
[  546.170275][T11886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1618 sclass=netlink_route_socket pid=11886 comm=syz.1.1786
[  546.190622][T11375] usb 5-1: Manufacturer: syz
[  546.264980][T11375] usb 5-1: SerialNumber: syz
[  546.675882][ T5713] pwc: recv_control_msg error -32 req 04 val 1400
[  546.695455][T11375] usb 5-1: config 0 descriptor??
[  546.827848][T11375] usb 5-1: can't set config #0, error -71
[  546.881070][T11375] usb 5-1: USB disconnect, device number 92
[  546.901603][ T5713] pwc: recv_control_msg error -71 req 02 val 2100
[  546.908633][ T5713] pwc: recv_control_msg error -71 req 04 val 1500
[  546.937149][ T5713] pwc: recv_control_msg error -71 req 02 val 2500
[  546.970615][ T5713] pwc: recv_control_msg error -71 req 02 val 2400
[  546.991076][ T5713] pwc: recv_control_msg error -71 req 02 val 2600
[  547.063964][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.106586][ T5713] pwc: recv_control_msg error -71 req 02 val 2900
[  547.114139][ T5713] pwc: recv_control_msg error -71 req 02 val 2800
[  547.131312][ T5713] pwc: recv_control_msg error -71 req 04 val 1100
[  547.138117][ T5713] pwc: recv_control_msg error -71 req 04 val 1200
[  547.165149][   T30] audit: type=1400 audit(1786073123.445:709): avc:  denied  { create } for  pid=11888 comm="syz.3.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  547.201910][ T5713] pwc: Registered as video103.
[  547.233123][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input97
[  547.321875][ T5713] usb 6-1: USB disconnect, device number 12
[  547.363099][T11889] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  547.529248][T11889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  547.868744][   T30] audit: type=1400 audit(1786073124.145:710): avc:  denied  { create } for  pid=11909 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  547.918197][T11911] netlink: 'syz.1.1790': attribute type 4 has an invalid length.
[  547.968798][   T30] audit: type=1400 audit(1786073124.185:711): avc:  denied  { connect } for  pid=11909 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  548.056256][   T30] audit: type=1400 audit(1786073124.305:712): avc:  denied  { watch_mount watch_reads } for  pid=11909 comm="syz.5.1792" path="/21/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  548.117529][T11911] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1790'.
[  548.486088][T11919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1795'.
[  548.802929][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'.
[  548.906316][T11928] ubi: mtd0 is already attached to ubi16
[  550.159808][   T29] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  550.360258][   T29] usb 2-1: Using ep0 maxpacket: 32
[  550.399252][   T29] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  550.449501][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.496342][   T29] usb 2-1: Product: syz
[  550.521795][   T29] usb 2-1: Manufacturer: syz
[  550.555422][   T29] usb 2-1: SerialNumber: syz
[  550.588614][   T29] usb 2-1: config 0 descriptor??
[  550.626817][   T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  550.655761][   T29] dvb-usb: bulk message failed: -22 (4/0)
[  550.698323][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  550.749611][   T29] dvb-usb: bulk message failed: -22 (5/0)
[  550.777898][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  551.195575][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  551.234812][   T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  551.264051][   T29] usb 2-1: media controller created
[  551.328549][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  551.421146][   T29] usb 2-1: selecting invalid altsetting 3
[  551.447188][   T29] ttusb2: set interface to alts=3 failed
[  551.614938][   T29] DVB: Unable to find symbol tda10086_attach()
[  551.634390][   T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  551.667587][   T29] dvb-usb: bulk message failed: -22 (4/0)
[  551.699428][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  551.739696][   T29] dvb-usb: bulk message failed: -22 (5/0)
[  551.756175][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  551.789074][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  551.848972][   T29] usb 2-1: USB disconnect, device number 77
[  552.062249][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1809'.
[  552.093913][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  552.150077][T11961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1809'.
[  552.176145][T11962] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  553.220716][T11375] IPVS: starting estimator thread 0...
[  553.329813][T11978] IPVS: using max 43 ests per chain, 103200 per kthread
[  553.479795][   T29] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  553.649915][   T29] usb 3-1: Using ep0 maxpacket: 16
[  553.669994][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.701387][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.728089][T11986] ubi: mtd0 is already attached to ubi16
[  553.734142][   T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  553.734188][   T29] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  553.734210][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.750999][   T29] usb 3-1: config 0 descriptor??
[  554.099902][T11375] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  554.255253][   T29] hid_parser_main: 5 callbacks suppressed
[  554.271142][   T29] shield 0003:0955:7214.0020: unknown main item tag 0x0
[  554.279568][T11996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'.
[  554.290006][   T29] shield 0003:0955:7214.0020: unknown main item tag 0x0
[  554.303582][T11996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'.
[  554.561099][T12001] FAULT_INJECTION: forcing a failure.
[  554.561099][T12001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.594139][   T29] shield 0003:0955:7214.0020: unknown main item tag 0x0
[  554.610170][   T29] shield 0003:0955:7214.0020: unknown main item tag 0x0
[  554.629814][   T29] shield 0003:0955:7214.0020: unknown main item tag 0x0
[  554.647501][T11997] ubi: mtd0 is already attached to ubi16
[  554.658899][   T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input98
[  554.709348][   T30] audit: type=1400 audit(1786073130.955:713): avc:  denied  { create } for  pid=11979 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  554.801110][T12001] CPU: 0 UID: 0 PID: 12001 Comm: syz.1.1818 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.801137][T12001] Tainted: [L]=SOFTLOCKUP
[  554.801143][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  554.801151][T12001] Call Trace:
[  554.801157][T12001]  <TASK>
[  554.801163][T12001]  dump_stack_lvl+0x100/0x190
[  554.801187][T12001]  should_fail_ex.cold+0x5/0xa
[  554.801205][T12001]  _copy_from_iter+0x1f4/0x1690
[  554.801225][T12001]  ? irqentry_exit+0x24d/0xa00
[  554.801244][T12001]  ? __pfx__copy_from_iter+0x10/0x10
[  554.801272][T12001]  netlink_sendmsg+0x808/0xda0
[  554.801298][T12001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.801321][T12001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.801345][T12001]  ____sys_sendmsg+0xa4d/0xbe0
[  554.801364][T12001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.801386][T12001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.801409][T12001]  ? rcu_is_watching+0x12/0xc0
[  554.801434][T12001]  ___sys_sendmsg+0x190/0x1e0
[  554.801456][T12001]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.801475][T12001]  ? find_held_lock+0x2b/0x80
[  554.801496][T12001]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[  554.801522][T12001]  ? __rcu_read_unlock+0x26a/0x5e0
[  554.801552][T12001]  __sys_sendmsg+0x160/0x210
[  554.801568][T12001]  ? __pfx___sys_sendmsg+0x10/0x10
[  554.801591][T12001]  ? trace_hardirqs_off+0x70/0x170
[  554.801615][T12001]  do_syscall_64+0x115/0x870
[  554.801630][T12001]  ? clear_bhb_loop+0x40/0x90
[  554.801648][T12001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.801663][T12001] RIP: 0033:0x7fd1b0d9e0d9
[  554.801676][T12001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.801691][T12001] RSP: 002b:00007fd1b1c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.801707][T12001] RAX: ffffffffffffffda RBX: 00007fd1b1026090 RCX: 00007fd1b0d9e0d9
[  554.801716][T12001] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  554.801725][T12001] RBP: 00007fd1b1c37090 R08: 0000000000000000 R09: 0000000000000000
[  554.801733][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.801742][T12001] R13: 00007fd1b1026128 R14: 00007fd1b1026090 R15: 00007ffdbc85ac28
[  554.801762][T12001]  </TASK>
[  555.116326][   T29] shield 0003:0955:7214.0020: Registered Thunderstrike controller
[  555.196173][   T29] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  555.270804][   T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  555.343017][ T5819] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  555.345975][  T187] usb 3-1: USB disconnect, device number 83
[  555.358572][ T5819] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  555.381454][ T5819] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  555.393594][ T5819] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  555.429893][   T24] usb 4-1: Using ep0 maxpacket: 32
[  555.438880][   T24] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  555.444837][T11375] usb 6-1: Using ep0 maxpacket: 32
[  555.449004][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.462899][   T24] usb 4-1: Product: syz
[  555.467370][   T24] usb 4-1: Manufacturer: syz
[  555.472072][   T24] usb 4-1: SerialNumber: syz
[  555.479036][   T24] usb 4-1: config 0 descriptor??
[  555.491165][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  555.499809][  T981] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  555.507500][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  555.513680][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  555.527038][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  555.532872][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  555.538108][T11375] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  555.546080][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  555.562667][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  555.562849][T11375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.571160][   T24] usb 4-1: media controller created
[  555.578537][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  555.580205][T11375] usb 6-1: Product: syz
[  555.595380][   T24] usb 4-1: selecting invalid altsetting 3
[  555.597239][T11375] usb 6-1: Manufacturer: syz
[  555.602994][   T24] ttusb2: set interface to alts=3 failed
[  555.607443][T11375] usb 6-1: SerialNumber: syz
[  555.618761][T11375] usb 6-1: config 0 descriptor??
[  555.639473][   T24] DVB: Unable to find symbol tda10086_attach()
[  555.645699][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  555.654414][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  555.660160][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  555.670291][  T981] usb 5-1: Using ep0 maxpacket: 32
[  555.675477][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  555.681307][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  555.688419][ T5706] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  555.691725][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  555.709766][T11997] dvb-usb: bulk message failed: -22 (7/0)
[  555.715491][T11997] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  555.725640][T11997] ttusb2: i2c transfer failed.
[  555.735676][  T981] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  555.750849][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.790129][  T981] usb 5-1: Product: syz
[  555.899192][  T981] usb 5-1: Manufacturer: syz
[  555.904401][  T981] usb 5-1: SerialNumber: syz
[  555.924249][  T981] usb 5-1: config 0 descriptor??
[  556.061854][T11375] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  556.074732][T11375] dvb-usb: bulk message failed: -22 (4/0)
[  556.080494][T11375] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.090904][T11375] dvb-usb: bulk message failed: -22 (5/0)
[  556.096630][T11375] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.110265][T11375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  556.136320][  T981] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  556.144563][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  556.151200][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.161437][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  556.167180][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.184853][  T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  556.185038][T11375] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  556.206396][ T5692] usb 4-1: USB disconnect, device number 80
[  556.232440][T11375] usb 6-1: media controller created
[  556.232440][  T981] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  556.257407][  T981] usb 5-1: media controller created
[  556.268972][ T5692] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  556.284766][T11375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  556.317537][T11375] usb 6-1: selecting invalid altsetting 3
[  556.323878][  T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  556.337394][  T981] usb 5-1: selecting invalid altsetting 3
[  556.347762][  T981] ttusb2: set interface to alts=3 failed
[  556.531699][ T5706] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  556.674184][ T5706] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  556.692677][T11375] ttusb2: set interface to alts=3 failed
[  556.727738][ T5706] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  556.755501][ T5706] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  556.789394][  T981] DVB: Unable to find symbol tda10086_attach()
[  556.815571][  T981] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  556.816566][ T5706] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  556.857074][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  556.880367][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.895496][T11375] DVB: Unable to find symbol tda10086_attach()
[  556.903510][ T5706] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  556.916468][T11375] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  556.934483][ T5706] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  556.950351][ T5706] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  556.964152][T11375] dvb-usb: bulk message failed: -22 (4/0)
[  556.970534][T11375] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  556.982158][T11375] dvb-usb: bulk message failed: -22 (5/0)
[  556.990531][T11375] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  557.001831][ T5706] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  557.012942][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.021644][ T5706] usb 2-1: Product: syz
[  557.028018][T11375] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  557.045484][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  557.053567][ T5706] usb 2-1: Manufacturer: syz
[  557.075333][ T5706] usb 2-1: SerialNumber: syz
[  557.101455][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  557.106720][T11375] usb 6-1: USB disconnect, device number 13
[  557.134127][ T5706] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected
[  557.162045][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  557.190277][ T5706] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  557.249486][  T981] usb 5-1: USB disconnect, device number 93
[  557.274198][ T5706] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  557.293768][T11375] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  557.411731][ T5706] usb 2-1: USB disconnect, device number 78
[  557.491161][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  557.497468][ T5706] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  557.572018][ T5706] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  557.624761][ T5706] ti_usb_3410_5052 2-1:2.0: device disconnected
[  558.732628][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'.
[  558.743809][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'.
[  558.762189][T12049] netlink: 'syz.2.1841': attribute type 3 has an invalid length.
[  558.892564][T12053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  558.962551][T12053] FAULT_INJECTION: forcing a failure.
[  558.962551][T12053] name failslab, interval 1, probability 0, space 0, times 0
[  558.975671][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.1.1832 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  558.975697][T12053] Tainted: [L]=SOFTLOCKUP
[  558.975703][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  558.975713][T12053] Call Trace:
[  558.975720][T12053]  <TASK>
[  558.975726][T12053]  dump_stack_lvl+0x100/0x190
[  558.975753][T12053]  should_fail_ex.cold+0x5/0xa
[  558.975776][T12053]  should_failslab+0xc2/0x120
[  558.975797][T12053]  __kmalloc_noprof+0xfc/0x820
[  558.975815][T12053]  ? rcu_is_watching+0x12/0xc0
[  558.975840][T12053]  ? tomoyo_realpath_from_path+0xb6/0x690
[  558.975869][T12053]  tomoyo_realpath_from_path+0xb6/0x690
[  558.975898][T12053]  tomoyo_path_number_perm+0x23c/0x580
[  558.975917][T12053]  ? tomoyo_path_number_perm+0x22e/0x580
[  558.975939][T12053]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  558.975982][T12053]  ? find_held_lock+0x2b/0x80
[  558.976007][T12053]  ? __fget_files+0x215/0x3d0
[  558.976023][T12053]  ? hook_file_ioctl_common+0x140/0x440
[  558.976047][T12053]  ? __fget_files+0x215/0x3d0
[  558.976068][T12053]  ? __fget_files+0x21f/0x3d0
[  558.976088][T12053]  security_file_ioctl+0xd3/0x230
[  558.976111][T12053]  __x64_sys_ioctl+0xb7/0x210
[  558.976137][T12053]  do_syscall_64+0x115/0x870
[  558.976159][T12053]  ? clear_bhb_loop+0x40/0x90
[  558.976180][T12053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.976197][T12053] RIP: 0033:0x7fd1b0d9e0d9
[  558.976211][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.976227][T12053] RSP: 002b:00007fd1b1c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  558.976244][T12053] RAX: ffffffffffffffda RBX: 00007fd1b1025fa0 RCX: 00007fd1b0d9e0d9
[  558.976255][T12053] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  558.976265][T12053] RBP: 00007fd1b1c58090 R08: 0000000000000000 R09: 0000000000000000
[  558.976275][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.976285][T12053] R13: 00007fd1b1026038 R14: 00007fd1b1025fa0 R15: 00007ffdbc85ac28
[  558.976308][T12053]  </TASK>
[  558.976315][T12053] ERROR: Out of memory at tomoyo_realpath_from_path.
[  560.266377][T12064] ubi: mtd0 is already attached to ubi16
[  560.415381][T12071] 
ÿ: renamed from dummy0
[  560.519863][ T5713] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  560.580405][  T981] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  560.892970][  T981] usb 3-1: Using ep0 maxpacket: 32
[  560.898184][ T5713] usb 6-1: Using ep0 maxpacket: 32
[  560.925446][  T981] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  560.935332][ T5713] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  560.958212][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.970983][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.983968][  T981] usb 3-1: Product: syz
[  560.988200][ T5713] usb 6-1: Product: syz
[  560.992851][  T981] usb 3-1: Manufacturer: syz
[  560.997507][ T5713] usb 6-1: Manufacturer: syz
[  561.002925][  T981] usb 3-1: SerialNumber: syz
[  561.007554][ T5713] usb 6-1: SerialNumber: syz
[  561.019590][  T981] usb 3-1: config 0 descriptor??
[  561.036510][ T5713] usb 6-1: config 0 descriptor??
[  561.045640][  T981] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  561.058995][ T5713] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  561.077285][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  561.085656][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  561.091842][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  561.103178][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  561.114856][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  561.121394][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  561.127315][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  561.137652][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  561.152810][  T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  561.163300][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  561.173648][  T981] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  561.182003][ T5713] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  561.199950][  T981] usb 3-1: media controller created
[  561.205396][ T5713] usb 6-1: media controller created
[  561.235531][  T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  561.256857][T12069] dvb-usb: bulk message failed: -22 (7/0)
[  561.262654][T12069] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  561.272780][T12069] ttusb2: i2c transfer failed.
[  561.321628][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  561.586223][T12064] dvb-usb: bulk message failed: -22 (7/0)
[  561.592061][T12064] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  561.602172][T12064] ttusb2: i2c transfer failed.
[  561.931154][  T981] usb 3-1: selecting invalid altsetting 3
[  561.946687][  T981] ttusb2: set interface to alts=3 failed
[  561.960495][ T5713] usb 6-1: selecting invalid altsetting 3
[  561.980397][ T5713] ttusb2: set interface to alts=3 failed
[  562.046314][  T981] DVB: Unable to find symbol tda10086_attach()
[  562.053815][  T981] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  562.073726][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  562.087408][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  562.099574][ T5713] DVB: Unable to find symbol tda10086_attach()
[  562.110496][ T5713] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  562.124406][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  562.138535][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  562.149806][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  562.161615][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  562.179931][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  562.199213][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  562.219185][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  562.229907][  T981] usb 3-1: USB disconnect, device number 84
[  562.258875][   T30] audit: type=1400 audit(1786073138.535:714): avc:  denied  { create } for  pid=12078 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  562.297293][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  562.337861][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  562.362863][ T5713] usb 6-1: USB disconnect, device number 14
[  562.462583][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  562.503934][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  562.517781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  562.555804][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'.
[  562.566154][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'.
[  563.161343][  T981] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  563.321382][  T981] usb 2-1: Using ep0 maxpacket: 32
[  563.330820][  T981] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  563.340078][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.348084][  T981] usb 2-1: Product: syz
[  563.352673][  T981] usb 2-1: Manufacturer: syz
[  563.357437][  T981] usb 2-1: SerialNumber: syz
[  563.365372][  T981] usb 2-1: config 0 descriptor??
[  563.377853][  T981] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  563.386137][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  563.392190][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  563.402803][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  563.408616][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  563.436019][  T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  563.457382][  T981] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  563.488561][  T981] usb 2-1: media controller created
[  563.511907][  T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  563.592070][  T981] usb 2-1: selecting invalid altsetting 3
[  563.597862][  T981] ttusb2: set interface to alts=3 failed
[  563.614176][T12092] dvb-usb: bulk message failed: -22 (7/0)
[  563.620315][T12092] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  563.631460][T12092] ttusb2: i2c transfer failed.
[  564.041829][  T981] DVB: Unable to find symbol tda10086_attach()
[  564.053128][  T981] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  564.091180][  T981] dvb-usb: bulk message failed: -22 (4/0)
[  564.110720][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  564.138952][  T981] dvb-usb: bulk message failed: -22 (5/0)
[  564.151699][  T981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  564.180105][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  564.202310][  T981] usb 2-1: USB disconnect, device number 79
[  564.292061][  T981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  564.415750][T12116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.430788][   T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  564.579357][T11375] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  564.611491][   T24] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  564.624047][   T24] usb 4-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[  564.634783][   T24] usb 4-1: config 0 has no interfaces?
[  564.640527][   T24] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  564.649646][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.660375][   T24] usb 4-1: config 0 descriptor??
[  564.744357][T11375] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  564.782433][T11375] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  564.809802][T11375] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  564.826642][T11375] usb 6-1: config 0 interface 0 has no altsetting 0
[  564.878817][   T24] usb 4-1: USB disconnect, device number 81
[  564.954565][T11375] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  565.225102][T11375] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  565.249813][T11375] usb 6-1: Product: syz
[  565.262166][T11375] usb 6-1: Manufacturer: syz
[  565.270634][T11375] usb 6-1: SerialNumber: syz
[  565.294385][T11375] usb 6-1: config 0 descriptor??
[  565.312001][T12131] binder: 12130:12131 ioctl 40186f02 200000000180 returned -22
[  565.324721][T11375] usb 6-1: selecting invalid altsetting 0
[  565.555424][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  565.568832][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'.
[  566.636206][ T5692] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  566.662802][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.671947][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.681121][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.840374][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.848292][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.858504][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.866722][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.877997][ T6169] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  566.999435][T12108] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[  566.999852][T11375] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  567.008314][ T6169] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.042842][  T187] usb 6-1: USB disconnect, device number 15
[  567.079174][ T6169] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.092475][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.106509][ T6169] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.125475][T12146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1862'.
[  567.136064][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.158247][T12146] nbd: couldn't find a device at index 196608
[  567.166929][ T5692] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  567.179447][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.202384][ T5692] usb 2-1: config 0 descriptor??
[  567.238435][T11375] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  567.258004][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.266916][T11375] usb 5-1: Product: syz
[  567.271663][T11375] usb 5-1: Manufacturer: syz
[  567.276844][T11375] usb 5-1: SerialNumber: syz
[  567.597486][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.616010][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.653741][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'.
[  568.041826][ T5692] cp2112 0003:10C4:EA90.0021: unknown global tag 0xd
[  568.082271][ T5692] cp2112 0003:10C4:EA90.0021: item 0 0 1 13 parsing failed
[  568.090326][   T30] audit: type=1400 audit(1786073144.365:715): avc:  denied  { getopt } for  pid=12164 comm="syz.5.1867" lport=53801 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  568.119185][T12133] team0: Port device team_slave_0 removed
[  568.127766][ T5692] cp2112 0003:10C4:EA90.0021: parse failed
[  568.133719][ T5692] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -22
[  568.273071][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1871'.
[  569.095875][   T24] usb 2-1: USB disconnect, device number 80
[  569.256170][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'.
[  569.292830][   T30] audit: type=1400 audit(1786073145.575:716): avc:  denied  { audit_read } for  pid=12132 comm="syz.4.1859" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.329976][T11375] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  569.351949][T11375] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  569.366155][T11375] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  569.413433][T11375] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  569.443919][T11375] usb 5-1: USB disconnect, device number 94
[  569.619800][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  569.830865][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.842584][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  570.502195][T11375] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  570.596329][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.728570][   T24] usb 6-1: config 0 descriptor??
[  570.739047][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  570.768157][T11375] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  570.952739][T11375] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  570.996541][T11375] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  571.015940][T11375] usb 5-1: config 0 interface 0 has no altsetting 0
[  571.032099][T11375] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  571.042951][T11375] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  571.051245][T11375] usb 5-1: Product: syz
[  571.056240][T11375] usb 5-1: Manufacturer: syz
[  571.061044][T11375] usb 5-1: SerialNumber: syz
[  571.067163][T12203] trusted_key: syz.1.1880 sent an empty control message without MSG_MORE.
[  571.076991][T11375] usb 5-1: config 0 descriptor??
[  571.140020][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  571.147288][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  571.157006][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  571.167181][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  571.179002][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  571.187205][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  571.268144][T11375] usb 5-1: selecting invalid altsetting 0
[  571.402106][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  571.459067][ T5713] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  571.481405][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  571.492544][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  571.500322][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  571.508059][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  571.515694][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  571.523346][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  571.557668][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  571.575146][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  571.586622][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  571.595289][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  571.613835][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  571.685136][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.700911][   T24] pwc: Registered as video103.
[  571.706067][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  571.722479][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input99
[  571.738643][ T5713] usb 3-1: config 0 has no interfaces?
[  571.745484][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  571.753939][ T5692] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  571.764547][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  571.790381][   T24] usb 6-1: USB disconnect, device number 16
[  571.800298][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.826809][ T5713] usb 3-1: config 0 descriptor??
[  571.969812][ T5692] usb 2-1: Using ep0 maxpacket: 8
[  571.984664][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short
[  572.376581][ T5692] usb 2-1: config 4 interface 0 has no altsetting 0
[  572.397706][ T5692] usb 2-1: string descriptor 0 read error: -22
[  572.412693][ T5692] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  572.434118][ T5692] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  572.483581][ T5692] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  572.537222][ T5692] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  572.560451][ T5692] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  572.568505][ T5692] usb 2-1: media controller created
[  572.623854][ T5692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  572.640763][T12226] ubi: mtd0 is already attached to ubi16
[  572.673963][   T30] audit: type=1400 audit(1786073148.955:717): avc:  denied  { ioctl } for  pid=12201 comm="syz.1.1880" path="socket:[37242]" dev="sockfs" ino=37242 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  572.900770][ T5713] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  572.958845][   T30] audit: type=1400 audit(1786073149.235:718): avc:  denied  { getopt } for  pid=12201 comm="syz.1.1880" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  572.980356][T11375] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  573.059787][ T5713] usb 6-1: Using ep0 maxpacket: 32
[  573.068684][ T5713] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  573.078166][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.086221][ T5713] usb 6-1: Product: syz
[  573.090516][ T5713] usb 6-1: Manufacturer: syz
[  573.095131][ T5713] usb 6-1: SerialNumber: syz
[  573.103581][ T5713] usb 6-1: config 0 descriptor??
[  573.114540][ T5713] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  573.122338][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  573.128077][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  573.129837][T11375] usb 4-1: Using ep0 maxpacket: 16
[  573.138552][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  573.138574][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  573.140797][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  573.172012][ T5713] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  573.173920][T11375] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  573.189256][ T5713] usb 6-1: media controller created
[  573.189358][T11375] usb 4-1: config 1 has no interface number 0
[  573.202025][T11375] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  573.203794][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  573.213236][T11375] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  573.231464][ T5713] usb 6-1: selecting invalid altsetting 3
[  573.231483][ T5713] ttusb2: set interface to alts=3 failed
[  573.277405][T11375] usb 4-1: config 1 interface 105 has no altsetting 0
[  573.277426][ T5713] DVB: Unable to find symbol tda10086_attach()
[  573.283393][T11375] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  573.304791][T11375] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  573.540469][T11375] usb 4-1: Product: syz
[  573.560008][T11375] usb 4-1: Manufacturer: syz
[  573.570092][T11375] usb 4-1: SerialNumber: syz
[  573.640277][ T5713] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  573.641085][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  573.641102][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  573.641183][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  573.641196][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  573.641244][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  573.650085][T12229] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  573.650329][T12229] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  573.806899][T12193] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  573.816624][ T5706] usb 6-1: USB disconnect, device number 17
[  573.847744][ T5692] usb 2-1: USB disconnect, device number 81
[  573.858992][ T5713] usb 5-1: USB disconnect, device number 95
[  573.919110][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  575.389233][ T5706] usb 3-1: USB disconnect, device number 85
[  576.210954][T11375] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71
[  576.297821][   T30] audit: type=1400 audit(1786073152.575:719): avc:  denied  { mount } for  pid=12251 comm="syz.2.1897" name="/" dev="hugetlbfs" ino=38447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  576.344206][T11375] usb 4-1: USB disconnect, device number 82
[  576.447776][T12258] FAULT_INJECTION: forcing a failure.
[  576.447776][T12258] name failslab, interval 1, probability 0, space 0, times 0
[  576.466151][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.4.1899 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  576.466181][T12258] Tainted: [L]=SOFTLOCKUP
[  576.466188][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  576.466199][T12258] Call Trace:
[  576.466206][T12258]  <TASK>
[  576.466213][T12258]  dump_stack_lvl+0x100/0x190
[  576.466242][T12258]  should_fail_ex.cold+0x5/0xa
[  576.466265][T12258]  should_failslab+0xc2/0x120
[  576.466289][T12258]  __kmalloc_noprof+0xfc/0x820
[  576.466307][T12258]  ? rcu_is_watching+0x12/0xc0
[  576.466334][T12258]  ? tomoyo_realpath_from_path+0xb6/0x690
[  576.466364][T12258]  tomoyo_realpath_from_path+0xb6/0x690
[  576.466400][T12258]  tomoyo_path_number_perm+0x23c/0x580
[  576.466420][T12258]  ? tomoyo_path_number_perm+0x22e/0x580
[  576.466443][T12258]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  576.466485][T12258]  ? find_held_lock+0x2b/0x80
[  576.466510][T12258]  ? __fget_files+0x215/0x3d0
[  576.466527][T12258]  ? hook_file_ioctl_common+0x140/0x440
[  576.466550][T12258]  ? __fget_files+0x215/0x3d0
[  576.466568][T12258]  ? __fget_files+0x21f/0x3d0
[  576.466588][T12258]  security_file_ioctl+0xd3/0x230
[  576.466611][T12258]  __x64_sys_ioctl+0xb7/0x210
[  576.466636][T12258]  do_syscall_64+0x115/0x870
[  576.466652][T12258]  ? clear_bhb_loop+0x40/0x90
[  576.466671][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.466688][T12258] RIP: 0033:0x7f402d59e0d9
[  576.466702][T12258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.466715][T12258] RSP: 002b:00007f402e460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  576.466731][T12258] RAX: ffffffffffffffda RBX: 00007f402d825fa0 RCX: 00007f402d59e0d9
[  576.466741][T12258] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000003
[  576.466751][T12258] RBP: 00007f402e460090 R08: 0000000000000000 R09: 0000000000000000
[  576.466760][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.466769][T12258] R13: 00007f402d826038 R14: 00007f402d825fa0 R15: 00007ffe2994f0d8
[  576.466789][T12258]  </TASK>
[  576.466795][T12258] ERROR: Out of memory at tomoyo_realpath_from_path.
[  576.716928][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1896'.
[  576.779958][ T5692] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  576.976890][ T5692] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.001851][ T5692] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  577.011932][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.022164][ T5692] usb 6-1: config 0 descriptor??
[  577.123175][ T5692] pwc: Askey VC010 type 2 USB webcam detected.
[  577.753218][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00
[  577.764546][ T5692] pwc: recv_control_msg error -32 req 02 val 2700
[  577.774618][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00
[  577.782473][ T5692] pwc: recv_control_msg error -32 req 04 val 1000
[  577.790964][ T5692] pwc: recv_control_msg error -32 req 04 val 1300
[  577.809148][ T5692] pwc: recv_control_msg error -32 req 04 val 1400
[  578.112366][ T5692] pwc: recv_control_msg error -71 req 02 val 2100
[  578.154493][T12280] netlink: 'syz.2.1906': attribute type 3 has an invalid length.
[  578.207452][ T5592] Bluetooth: hci4: unexpected subevent 0x0a length: 10 < 30
[  578.234497][ T5692] pwc: recv_control_msg error -71 req 04 val 1500
[  578.247671][ T5692] pwc: recv_control_msg error -71 req 02 val 2500
[  578.256644][ T5692] pwc: recv_control_msg error -71 req 02 val 2400
[  578.269633][ T5692] pwc: recv_control_msg error -71 req 02 val 2600
[  578.277200][ T5692] pwc: recv_control_msg error -71 req 02 val 2900
[  578.285122][ T5692] pwc: recv_control_msg error -71 req 02 val 2800
[  578.293089][ T5692] pwc: recv_control_msg error -71 req 04 val 1100
[  578.301285][ T5692] pwc: recv_control_msg error -71 req 04 val 1200
[  578.333627][ T5692] pwc: Registered as video103.
[  578.355836][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input100
[  578.391485][ T5692] usb 6-1: USB disconnect, device number 18
[  579.347485][T12304] sock: sock_set_timeout: `syz.4.1913' (pid 12304) tries to set negative timeout
[  579.365195][   T30] audit: type=1400 audit(1786073155.625:720): avc:  denied  { setopt } for  pid=12303 comm="syz.4.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  579.436773][T12307] fuse: Bad value for 'fd'
[  579.441400][   T30] audit: type=1400 audit(1786073155.655:721): avc:  denied  { read } for  pid=12303 comm="syz.4.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  579.601041][   T30] audit: type=1400 audit(1786073155.875:722): avc:  denied  { compute_member } for  pid=12316 comm="syz.2.1917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  579.603133][T12318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1917'.
[  579.674810][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  579.693780][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  581.032608][T11375] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  581.475083][T11375] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  581.498330][T11375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.506358][T11375] usb 2-1: Product: syz
[  581.510525][T11375] usb 2-1: Manufacturer: syz
[  581.515119][T11375] usb 2-1: SerialNumber: syz
[  581.655242][T12350] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  581.682802][T12353] ubi: mtd0 is already attached to ubi16
[  581.852366][T12328] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO)
[  581.861826][T12328] device-mapper: ioctl: error adding target to table
[  581.931359][ T5819] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  581.980868][T11375] rtl8150 2-1:1.0: couldn't reset the device
[  581.987390][T11375] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  582.010498][ T5713] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  582.019667][T11375] usb 2-1: USB disconnect, device number 82
[  582.100169][ T5819] usb 5-1: Using ep0 maxpacket: 32
[  582.109181][ T5819] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  582.119889][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.127950][ T5819] usb 5-1: Product: syz
[  582.132476][ T5819] usb 5-1: Manufacturer: syz
[  582.137088][ T5819] usb 5-1: SerialNumber: syz
[  582.144049][ T5819] usb 5-1: config 0 descriptor??
[  582.153666][ T5819] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  582.163333][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[  582.169206][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  582.179654][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[  582.185505][ T5713] usb 6-1: Using ep0 maxpacket: 8
[  582.190840][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  582.202550][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  582.215064][ T5713] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  582.219804][ T5692] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  582.224768][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  582.242025][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.250460][ T5819] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  582.259080][ T5819] usb 5-1: media controller created
[  582.265469][ T5713] usb 6-1: config 0 descriptor??
[  582.282600][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  582.296873][ T5819] usb 5-1: selecting invalid altsetting 3
[  582.302774][   T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  582.310594][ T5819] ttusb2: set interface to alts=3 failed
[  582.340818][ T5819] DVB: Unable to find symbol tda10086_attach()
[  582.347596][ T5819] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  582.360423][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[  582.366526][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  582.381013][T12353] dvb-usb: bulk message failed: -22 (7/0)
[  582.387112][T12353] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  582.397283][T12353] ttusb2: i2c transfer failed.
[  582.402775][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[  582.409411][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  582.423556][ T5819] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  582.494604][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.533593][   T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  582.563053][ T5692] usb 3-1: not running at top speed; connect to a high speed hub
[  582.671449][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.688466][ T5692] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config
[  582.701039][ T5713] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  582.703506][ T5692] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  582.852007][   T24] usb 4-1: config 0 descriptor??
[  582.852393][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.857127][T12355] comedi comedi3: comedi_config --init_data is deprecated
[  582.930392][T12364] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1930'.
[  582.938761][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  583.135461][T12364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12364 comm=syz.5.1930
[  583.250669][ T5692] uvcvideo 3-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  583.278542][ T5713] usb 6-1: USB disconnect, device number 19
[  583.279998][ T5692] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  583.486361][ T5819] usb 5-1: USB disconnect, device number 96
[  583.494378][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  583.514904][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  583.540297][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  583.552248][ T5713] usb 3-1: USB disconnect, device number 86
[  583.559601][ T5819] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  583.571940][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  583.589356][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  583.672736][   T30] audit: type=1400 audit(1786073159.955:723): avc:  denied  { write } for  pid=12365 comm="syz.1.1934" name="usbmon4" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  583.815406][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  583.846215][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  583.866545][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  583.892141][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  583.915695][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  583.927940][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  583.936156][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  583.943985][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  583.951338][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  584.815907][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  584.865648][   T24] pwc: Registered as video103.
[  584.872156][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101
[  584.886285][   T24] usb 4-1: USB disconnect, device number 83
[  585.240211][   T29] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  585.411994][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'.
[  585.531213][   T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  585.634652][   T29] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  585.647003][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'.
[  585.656114][ T6082] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.689905][ T6082] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  585.742029][   T29] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  585.847155][ T6082] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  585.900710][   T29] usb 5-1: config 0 interface 0 has no altsetting 0
[  585.910439][ T6082] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  585.920765][ T5713] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  585.940056][   T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  585.959624][   T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  585.977759][   T29] usb 5-1: Product: syz
[  585.986844][   T29] usb 5-1: Manufacturer: syz
[  585.999172][   T29] usb 5-1: SerialNumber: syz
[  586.011532][   T29] usb 5-1: config 0 descriptor??
[  586.028678][   T29] usb 5-1: selecting invalid altsetting 0
[  586.141667][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.151961][ T5713] usb 2-1: config 0 has no interfaces?
[  586.157443][ T5713] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  586.166542][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.175895][ T5713] usb 2-1: config 0 descriptor??
[  586.300599][   T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  586.342776][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.351252][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.359231][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.367289][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.377275][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.395199][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.416152][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.434588][T12374] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  586.460158][   T24] usb 4-1: Using ep0 maxpacket: 8
[  586.469454][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  586.470104][ T5692] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  586.480225][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.531547][ T5713] usb 5-1: USB disconnect, device number 97
[  586.542771][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  586.555194][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  586.572046][   T24] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  586.583371][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.596484][   T24] usb 4-1: Product: syz
[  586.614063][   T24] usb 4-1: Manufacturer: syz
[  586.627688][   T24] usb 4-1: SerialNumber: syz
[  586.645144][   T24] usb 4-1: config 0 descriptor??
[  586.653377][T12404] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  586.701670][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.725392][ T5692] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  586.735951][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.763089][ T5692] usb 3-1: config 0 descriptor??
[  586.778037][ T5692] pwc: Askey VC010 type 2 USB webcam detected.
[  586.874752][   T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  586.892290][   T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input102
[  586.944693][T12427] FAULT_INJECTION: forcing a failure.
[  586.944693][T12427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  586.959975][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.5.1956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  586.960006][T12427] Tainted: [L]=SOFTLOCKUP
[  586.960012][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  586.960022][T12427] Call Trace:
[  586.960028][T12427]  <TASK>
[  586.960035][T12427]  dump_stack_lvl+0x100/0x190
[  586.960062][T12427]  should_fail_ex.cold+0x5/0xa
[  586.960085][T12427]  _copy_from_user+0x2e/0xd0
[  586.960107][T12427]  copy_msghdr_from_user+0x9f/0x4c0
[  586.960133][T12427]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  586.960169][T12427]  ___sys_sendmsg+0x106/0x1e0
[  586.960192][T12427]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.960214][T12427]  ? __lock_acquire+0x49f/0x1a40
[  586.960233][T12427]  ? get_pid_task+0x106/0x250
[  586.960284][T12427]  __sys_sendmsg+0x160/0x210
[  586.960311][T12427]  ? __pfx___sys_sendmsg+0x10/0x10
[  586.960343][T12427]  do_syscall_64+0x115/0x870
[  586.960360][T12427]  ? clear_bhb_loop+0x40/0x90
[  586.960382][T12427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.960397][T12427] RIP: 0033:0x7f3111d9e0d9
[  586.960410][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.960424][T12427] RSP: 002b:00007f3112c9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.960441][T12427] RAX: ffffffffffffffda RBX: 00007f3112025fa0 RCX: 00007f3111d9e0d9
[  586.960453][T12427] RDX: 0000000000000844 RSI: 00002000000001c0 RDI: 0000000000000003
[  586.960464][T12427] RBP: 00007f3112c9a090 R08: 0000000000000000 R09: 0000000000000000
[  586.960475][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.960484][T12427] R13: 00007f3112026038 R14: 00007f3112025fa0 R15: 00007ffebb7b2848
[  586.960504][T12427]  </TASK>
[  587.288641][    C1] powermate: config urb returned -71
[  587.288985][ T5706] usb 4-1: USB disconnect, device number 84
[  587.293969][    C1] powermate: usb_submit_urb(config) failed
[  587.300189][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  587.399814][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  587.468608][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00
[  587.570123][   T24] usb 6-1: Using ep0 maxpacket: 32
[  587.573169][ T5692] pwc: recv_control_msg error -32 req 02 val 2700
[  587.580158][   T24] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  587.583613][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00
[  587.600441][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.611648][   T24] usb 6-1: Product: syz
[  587.615856][   T24] usb 6-1: Manufacturer: syz
[  587.620860][   T24] usb 6-1: SerialNumber: syz
[  587.668525][   T24] usb 6-1: config 0 descriptor??
[  587.695988][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  587.708242][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  587.714044][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  587.725134][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  587.730941][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  587.766323][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  587.778506][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  587.786849][   T24] usb 6-1: media controller created
[  587.809121][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  587.809341][ T5692] pwc: recv_control_msg error -32 req 04 val 1000
[  587.859684][   T24] usb 6-1: selecting invalid altsetting 3
[  587.865630][   T24] ttusb2: set interface to alts=3 failed
[  587.885462][   T24] DVB: Unable to find symbol tda10086_attach()
[  587.891666][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  587.900424][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  587.906133][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  587.932148][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  587.955873][T12430] dvb-usb: bulk message failed: -22 (7/0)
[  587.961754][T12430] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  587.971830][T12430] ttusb2: i2c transfer failed.
[  587.976808][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  588.041891][ T5692] pwc: recv_control_msg error -32 req 04 val 1300
[  588.305399][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  589.039878][ T5692] pwc: recv_control_msg error -71 req 02 val 2000
[  589.051150][ T5692] pwc: recv_control_msg error -71 req 02 val 2100
[  589.313406][T12445] fuse: blksize only supported for fuseblk
[  589.400435][ T5692] pwc: recv_control_msg error -71 req 04 val 1500
[  589.405607][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1960'.
[  589.420320][ T5692] pwc: recv_control_msg error -71 req 02 val 2500
[  589.427441][ T5692] pwc: recv_control_msg error -71 req 02 val 2400
[  589.440323][ T5692] pwc: recv_control_msg error -71 req 02 val 2600
[  589.462692][ T5692] pwc: recv_control_msg error -71 req 02 val 2900
[  589.463770][   T24] usb 2-1: USB disconnect, device number 83
[  589.505985][ T5692] pwc: recv_control_msg error -71 req 02 val 2800
[  589.528091][ T5692] pwc: recv_control_msg error -71 req 04 val 1100
[  589.538101][ T5692] pwc: recv_control_msg error -71 req 04 val 1200
[  589.594070][ T5692] pwc: Registered as video103.
[  589.682235][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103
[  589.729139][T11375] usb 6-1: USB disconnect, device number 20
[  589.789470][ T5692] usb 3-1: USB disconnect, device number 87
[  589.822816][T11375] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  589.908513][T12455] Cannot find del_set index 4 as target
[  589.995147][T12460] netlink: 'syz.2.1965': attribute type 1 has an invalid length.
[  590.068431][T12460] 8021q: adding VLAN 0 to HW filter on device bond4
[  590.909217][T12479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1971'.
[  591.189976][   T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  591.351373][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.371358][   T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  591.391265][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  591.410418][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.434301][   T24] usb 6-1: config 0 descriptor??
[  591.480184][T12489] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1975'.
[  591.501999][ T5692] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  591.523298][   T30] audit: type=1400 audit(1786073167.805:724): avc:  denied  { connect } for  pid=12488 comm="syz.2.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  591.562570][T12489] SET target dimension over the limit!
[  591.672900][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.684394][ T5692] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  591.694782][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.718674][ T5692] usb 2-1: config 0 descriptor??
[  591.742453][T12496] binder: 12495:12496 ioctl 40186f02 200000000180 returned -22
[  591.823950][ T5692] pwc: Askey VC010 type 2 USB webcam detected.
[  591.882457][T12498] ubi: mtd0 is already attached to ubi16
[  592.000442][ T5819] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  592.129946][   T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  592.151247][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.162167][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.172145][ T5819] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  592.181731][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.192105][ T5819] usb 4-1: config 0 descriptor??
[  592.234330][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00
[  592.243987][ T5692] pwc: recv_control_msg error -32 req 02 val 2700
[  592.251854][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00
[  592.259421][ T5692] pwc: recv_control_msg error -32 req 04 val 1000
[  592.267325][ T5692] pwc: recv_control_msg error -32 req 04 val 1300
[  592.309805][   T24] usb 3-1: Using ep0 maxpacket: 32
[  592.318926][   T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  592.328134][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.336244][   T24] usb 3-1: Product: syz
[  592.340710][   T24] usb 3-1: Manufacturer: syz
[  592.345344][   T24] usb 3-1: SerialNumber: syz
[  592.354117][   T24] usb 3-1: config 0 descriptor??
[  592.363789][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  592.371480][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  592.377225][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  592.387435][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  592.393400][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  592.407916][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  592.417946][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  592.427569][   T24] usb 3-1: media controller created
[  592.442819][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  592.464576][   T24] usb 3-1: selecting invalid altsetting 3
[  592.470700][   T24] ttusb2: set interface to alts=3 failed
[  592.475869][ T5692] pwc: recv_control_msg error -71 req 02 val 2000
[  592.491307][ T5692] pwc: recv_control_msg error -71 req 02 val 2100
[  592.506609][ T5692] pwc: recv_control_msg error -71 req 04 val 1500
[  592.519052][ T5692] pwc: recv_control_msg error -71 req 02 val 2500
[  592.538630][   T24] DVB: Unable to find symbol tda10086_attach()
[  592.550353][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  592.565383][T12498] dvb-usb: bulk message failed: -22 (7/0)
[  592.571164][T12498] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  592.581484][T12498] ttusb2: i2c transfer failed.
[  592.605129][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  592.640412][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  592.650763][ T5692] pwc: recv_control_msg error -71 req 02 val 2400
[  592.651277][ T5692] pwc: recv_control_msg error -71 req 02 val 2600
[  592.765840][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  592.973534][ T5692] pwc: recv_control_msg error -71 req 02 val 2900
[  592.996207][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  593.009052][ T5692] pwc: recv_control_msg error -71 req 02 val 2800
[  593.011505][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  593.225124][ T5692] pwc: recv_control_msg error -71 req 04 val 1100
[  593.466369][ T5692] pwc: recv_control_msg error -71 req 04 val 1200
[  594.220190][ T5692] pwc: Registered as video103.
[  594.239669][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104
[  594.293299][ T5819] cp2112 0003:10C4:EA90.0022: unknown global tag 0xd
[  594.319215][ T5819] cp2112 0003:10C4:EA90.0022: item 0 0 1 13 parsing failed
[  594.333856][ T5819] cp2112 0003:10C4:EA90.0022: parse failed
[  594.340606][ T5819] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -22
[  594.376301][ T5692] usb 2-1: USB disconnect, device number 84
[  594.458679][ T5819] usb 4-1: USB disconnect, device number 85
[  594.635598][   T24] usb 3-1: USB disconnect, device number 88
[  594.637905][T11375] usb 6-1: USB disconnect, device number 21
[  594.722017][T12522] CUSE: info not properly terminated
[  594.765653][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  594.920208][ T5692] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  595.040328][T11375] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  595.094274][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.113878][ T5692] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  595.126490][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.142668][ T5692] usb 2-1: config 0 descriptor??
[  595.154921][ T5692] pwc: Askey VC010 type 2 USB webcam detected.
[  595.289899][T11375] usb 6-1: Using ep0 maxpacket: 16
[  595.308537][T11375] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  595.317500][T11375] usb 6-1: config 1 has no interface number 0
[  595.325188][T11375] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  595.336596][T11375] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  595.351341][T11375] usb 6-1: config 1 interface 105 has no altsetting 0
[  595.363202][T11375] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  595.374028][T11375] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  595.383826][T12528] loop9: detected capacity change from 0 to 2640
[  595.394855][T11375] usb 6-1: Product: syz
[  595.399484][T11375] usb 6-1: Manufacturer: syz
[  595.404587][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  595.405970][T11375] usb 6-1: SerialNumber: syz
[  595.413382][ T5819] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  595.426270][T12524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  595.447095][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  595.477693][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  595.489092][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  595.519341][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  595.600010][T12524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  595.661059][ T5819] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  595.766495][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00
[  595.798010][ T5819] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 236, changing to 11
[  595.819901][ T5819] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8A has invalid maxpacket 33117, setting to 1024
[  595.831570][   T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  595.842238][ T5819] usb 4-1: config 0 interface 0 has no altsetting 0
[  595.853449][ T5819] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  595.862630][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  595.871152][ T5819] usb 4-1: Product: syz
[  595.875428][ T5819] usb 4-1: Manufacturer: syz
[  595.880686][ T5819] usb 4-1: SerialNumber: syz
[  595.895204][ T5819] usb 4-1: config 0 descriptor??
[  595.904978][ T5819] usb 4-1: selecting invalid altsetting 0
[  595.994702][   T24] usb 5-1: device descriptor read/64, error -71
[  596.249865][   T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  596.346204][ T5692] pwc: recv_control_msg error -32 req 02 val 2700
[  596.479842][   T24] usb 5-1: device descriptor read/64, error -71
[  596.515778][T12526] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  596.547560][T12526] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  596.584711][T12526] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  596.615674][   T24] usb usb5-port1: attempt power cycle
[  597.020561][   T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  597.083141][   T24] usb 5-1: device descriptor read/8, error -71
[  597.361492][   T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  597.450815][   T24] usb 5-1: device descriptor read/8, error -71
[  597.580508][   T24] usb usb5-port1: unable to enumerate USB device
[  597.737836][ T5692] pwc: recv_control_msg error -71 req 02 val 2c00
[  597.746468][ T5692] pwc: recv_control_msg error -71 req 04 val 1000
[  597.758621][ T5692] pwc: recv_control_msg error -71 req 04 val 1300
[  597.766809][ T5692] pwc: recv_control_msg error -71 req 04 val 1400
[  597.770499][T12550] x_tables: ip_tables: osf match: only valid for protocol 6
[  597.774475][ T5692] pwc: recv_control_msg error -71 req 02 val 2000
[  597.791230][ T5692] pwc: recv_control_msg error -71 req 02 val 2100
[  597.798534][ T5692] pwc: recv_control_msg error -71 req 04 val 1500
[  597.806173][ T5692] pwc: recv_control_msg error -71 req 02 val 2500
[  597.813845][ T5692] pwc: recv_control_msg error -71 req 02 val 2400
[  597.822515][ T5692] pwc: recv_control_msg error -71 req 02 val 2600
[  597.837275][T11375] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  597.848464][ T5692] pwc: recv_control_msg error -71 req 02 val 2900
[  597.856113][ T5692] pwc: recv_control_msg error -71 req 02 val 2800
[  597.864562][ T5692] pwc: recv_control_msg error -71 req 04 val 1100
[  597.874687][T11375] usb 6-1: USB disconnect, device number 22
[  597.887471][ T5692] pwc: recv_control_msg error -71 req 04 val 1200
[  597.899785][   T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  597.908051][ T5692] pwc: Registered as video103.
[  597.916525][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105
[  597.948961][ T5692] usb 2-1: USB disconnect, device number 85
[  598.047638][T12555] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1992'.
[  598.135167][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.147420][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  598.159106][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.189215][   T24] usb 3-1: config 0 descriptor??
[  598.203916][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  598.284802][T12540] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  598.301299][ T5713] usb 4-1: USB disconnect, device number 86
[  598.504183][T12552] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO)
[  598.520851][T12552] device-mapper: ioctl: error adding target to table
[  598.603533][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  598.637055][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  598.673125][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  598.706815][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  598.717598][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'.
[  598.723240][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  598.805824][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'.
[  598.820105][ T6169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  598.829044][ T6169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  598.849910][ T5713] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  598.958676][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  598.985423][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  599.014063][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  599.026768][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.031884][T12566] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.046948][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  599.065958][ T5713] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  599.075767][ T5713] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  599.083791][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.085737][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  599.099041][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.107391][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  599.115402][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  599.124940][ T5713] usb 4-1: config 0 descriptor??
[  599.131072][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  599.155102][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  599.167470][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  599.178935][   T24] pwc: Registered as video103.
[  599.202422][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input106
[  599.239879][ T6265] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  599.250149][   T24] usb 3-1: USB disconnect, device number 89
[  599.260845][ T6265] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  599.889865][   T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  600.093347][   T24] usb 2-1: Using ep0 maxpacket: 32
[  600.164805][   T24] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  600.255035][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.400634][   T24] usb 2-1: Product: syz
[  600.404862][   T24] usb 2-1: Manufacturer: syz
[  600.409449][   T24] usb 2-1: SerialNumber: syz
[  600.416943][   T24] usb 2-1: config 0 descriptor??
[  600.425203][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  600.432873][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  600.439793][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  600.478473][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  600.484348][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  600.574410][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  600.835957][T12577] dvb-usb: bulk message failed: -22 (7/0)
[  600.843486][T12577] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  600.854080][T12577] ttusb2: i2c transfer failed.
[  600.984002][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  601.212673][   T24] usb 2-1: media controller created
[  601.311545][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  601.915980][ T5713] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  602.598206][   T24] usb 2-1: selecting invalid altsetting 3
[  602.605033][   T24] ttusb2: set interface to alts=3 failed
[  602.688790][   T24] DVB: Unable to find symbol tda10086_attach()
[  602.695849][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  602.696048][ T5692] usb 4-1: USB disconnect, device number 87
[  602.706643][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  602.718226][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  602.728833][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  602.773646][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  602.800303][ T5713] usb 6-1: no configurations
[  602.805510][ T5713] usb 6-1: can't read configurations, error -22
[  602.822889][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  602.862884][   T24] usb 2-1: USB disconnect, device number 86
[  602.960905][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  602.971086][ T5713] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  603.228433][   T29] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  603.250729][ T5713] usb 6-1: no configurations
[  603.255648][ T5713] usb 6-1: can't read configurations, error -22
[  603.277970][ T5713] usb usb6-port1: attempt power cycle
[  603.659766][   T29] usb 3-1: Using ep0 maxpacket: 32
[  603.667811][   T29] usb 3-1: config 0 interface 0 has no altsetting 0
[  604.125412][   T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da
[  604.162603][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.194542][   T29] usb 3-1: Product: syz
[  604.209494][   T29] usb 3-1: Manufacturer: syz
[  604.224171][   T29] usb 3-1: SerialNumber: syz
[  604.247655][   T29] usb 3-1: config 0 descriptor??
[  604.255442][   T30] audit: type=1400 audit(1786073180.525:725): avc:  denied  { write } for  pid=12628 comm="syz.1.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  604.522190][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.796379][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.850673][   T29] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X found
[  604.889266][   T29] snd_usb_podhd 3-1:0.0: set_interface failed
[  604.921322][   T29] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X now disconnected
[  604.953211][   T29] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -71
[  605.004813][   T29] usb 3-1: USB disconnect, device number 90
[  605.134559][T12620] comedi comedi3: bad chanlist[0]=0x00001002 chan=4098 range length=1
[  605.302883][T12643] loop9: detected capacity change from 0 to 2640
[  605.379891][   T29] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  605.405288][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  605.422512][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  605.587990][   T29] usb 3-1: config 0 interface 0 has no altsetting 0
[  605.595298][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  605.605248][   T29] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da
[  605.614908][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  605.634587][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.659244][ T9001] Buffer I/O error on dev loop9, logical block 0, async page read
[  605.672854][   T29] usb 3-1: Product: syz
[  605.688954][   T29] usb 3-1: Manufacturer: syz
[  605.728510][   T29] usb 3-1: SerialNumber: syz
[  605.759125][   T29] usb 3-1: config 0 descriptor??
[  605.939643][T12651] tmpfs: Unknown parameter 'mpol(default'
[  607.690270][   T29] flexcop_usb: set interface failed.
[  607.702905][   T29] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71
[  607.730984][   T29] usb 3-1: USB disconnect, device number 91
[  607.883486][T12667] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2022'.
[  607.900661][   T30] audit: type=1800 audit(1786073184.175:726): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2022" name="zoned" dev="configfs" ino=39684 res=0 errno=0
[  607.924217][   T30] audit: type=1800 audit(1786073184.205:727): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2022" name="memory_backed" dev="configfs" ino=39685 res=0 errno=0
[  607.949108][   T30] audit: type=1800 audit(1786073184.225:728): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2022" name="zone_nr_conv" dev="configfs" ino=39686 res=0 errno=0
[  608.100386][ T5706] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  608.108473][ T5692] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  608.189776][   T29] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  608.264957][T12678] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  608.278847][T12678] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  608.401339][ T5706] usb 4-1: config 1 has an invalid interface number: 110 but max is 0
[  608.421337][ T5706] usb 4-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config
[  608.488584][ T5706] usb 4-1: config 1 has no interface number 0
[  608.494843][ T5706] usb 4-1: too many endpoints for config 1 interface 110 altsetting 141: 71, using maximum allowed: 30
[  608.509414][ T5706] usb 4-1: config 1 interface 110 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 71
[  608.541839][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.556922][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.566725][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  608.579658][ T5706] usb 4-1: config 1 interface 110 has no altsetting 0
[  608.587069][ T5692] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  608.596144][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.655097][ T5692] usb 5-1: config 0 descriptor??
[  608.867410][T12679] comedi comedi3: bad chanlist[0]=0x00001002 chan=4098 range length=1
[  609.180553][   T29] usb 3-1: no configurations
[  609.189001][   T29] usb 3-1: can't read configurations, error -22
[  609.215067][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2028'.
[  609.231163][T12681] dummy0: entered promiscuous mode
[  609.247958][T12687] FAULT_INJECTION: forcing a failure.
[  609.247958][T12687] name failslab, interval 1, probability 0, space 0, times 0
[  609.267276][T12687] CPU: 1 UID: 0 PID: 12687 Comm: syz.1.2030 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  609.267304][T12687] Tainted: [L]=SOFTLOCKUP
[  609.267311][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  609.267322][T12687] Call Trace:
[  609.267328][T12687]  <TASK>
[  609.267334][T12687]  dump_stack_lvl+0x100/0x190
[  609.267360][T12687]  should_fail_ex.cold+0x5/0xa
[  609.267381][T12687]  should_failslab+0xc2/0x120
[  609.267405][T12687]  __kmalloc_noprof+0xfc/0x820
[  609.267424][T12687]  ? bpf_test_init.isra.0+0x88/0x100
[  609.267454][T12687]  bpf_test_init.isra.0+0x88/0x100
[  609.267479][T12687]  bpf_prog_test_run_xdp+0x57e/0x1670
[  609.267512][T12687]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  609.267544][T12687]  ? fput+0x79/0x100
[  609.267564][T12687]  ? __bpf_prog_get+0x97/0x2a0
[  609.267586][T12687]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  609.267610][T12687]  __sys_bpf+0x2a12/0x4e80
[  609.267633][T12687]  ? __pfx___sys_bpf+0x10/0x10
[  609.267650][T12687]  ? find_held_lock+0x2b/0x80
[  609.267675][T12687]  ? get_pid_task+0xfc/0x250
[  609.267698][T12687]  ? get_pid_task+0xfc/0x250
[  609.267730][T12687]  ? find_held_lock+0x2b/0x80
[  609.267758][T12687]  ? rcu_read_lock_any_held+0x6a/0xa0
[  609.267784][T12687]  ? find_held_lock+0x2b/0x80
[  609.267809][T12687]  ? ksys_write+0x190/0x250
[  609.267832][T12687]  ? ksys_write+0x190/0x250
[  609.267872][T12687]  ? fput+0x79/0x100
[  609.267902][T12687]  ? __x64_sys_bpf+0xce/0x140
[  609.267918][T12687]  __x64_sys_bpf+0xce/0x140
[  609.267935][T12687]  ? do_syscall_64+0x90/0x870
[  609.267953][T12687]  do_syscall_64+0x115/0x870
[  609.267969][T12687]  ? clear_bhb_loop+0x40/0x90
[  609.267992][T12687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.268010][T12687] RIP: 0033:0x7fd1b0d9e0d9
[  609.268025][T12687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.268040][T12687] RSP: 002b:00007fd1b1c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  609.268056][T12687] RAX: ffffffffffffffda RBX: 00007fd1b1025fa0 RCX: 00007fd1b0d9e0d9
[  609.268067][T12687] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  609.268077][T12687] RBP: 00007fd1b1c58090 R08: 0000000000000000 R09: 0000000000000000
[  609.268087][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.268097][T12687] R13: 00007fd1b1026038 R14: 00007fd1b1025fa0 R15: 00007ffdbc85ac28
[  609.268119][T12687]  </TASK>
[  609.511193][ T5706] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  609.526751][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.536115][ T5706] usb 4-1: Product: syz
[  609.547752][ T5706] usb 4-1: Manufacturer: syz
[  609.559777][ T5706] usb 4-1: SerialNumber: syz
[  609.569803][   T29] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  609.708029][ T5692] usbhid 5-1:0.0: can't add hid device: -71
[  609.714289][ T5692] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  609.726042][   T30] audit: type=1400 audit(1786073186.005:729): avc:  denied  { read } for  pid=12694 comm="syz.4.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  609.739519][ T5692] usb 5-1: USB disconnect, device number 102
[  609.746062][   T29] usb 3-1: no configurations
[  609.756447][   T29] usb 3-1: can't read configurations, error -22
[  609.763834][   T29] usb usb3-port1: attempt power cycle
[  609.805507][ T5706] usb 4-1: Cannot retrieve CPort count: -71
[  609.812500][ T5706] usb 4-1: Cannot retrieve CPort count: -71
[  609.826748][ T5706] es2_ap_driver 4-1:1.110: probe with driver es2_ap_driver failed with error -71
[  609.863377][ T5706] usb 4-1: USB disconnect, device number 88
[  610.110212][   T29] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  610.131082][T12709] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2035'.
[  610.151344][   T29] usb 3-1: no configurations
[  610.156052][   T29] usb 3-1: can't read configurations, error -22
[  610.290296][   T29] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  610.330906][   T29] usb 3-1: no configurations
[  610.335622][   T29] usb 3-1: can't read configurations, error -22
[  610.343930][   T29] usb usb3-port1: unable to enumerate USB device
[  610.366090][T12717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.446871][T12717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.455430][T12720] ubi: mtd0 is already attached to ubi16
[  610.497750][T12718] erspan0: entered promiscuous mode
[  610.508347][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2037'.
[  610.690958][T12722] comedi comedi3: bad chanlist[0]=0x00001002 chan=4098 range length=1
[  610.739875][ T5713] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  610.955907][ T5713] usb 4-1: Using ep0 maxpacket: 32
[  611.003023][ T5713] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  611.067573][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.144070][ T5713] usb 4-1: Product: syz
[  611.188115][ T5713] usb 4-1: Manufacturer: syz
[  611.256538][ T5713] usb 4-1: SerialNumber: syz
[  611.484797][ T5713] usb 4-1: config 0 descriptor??
[  611.623270][ T5592] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  611.708145][ T5713] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  611.792326][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  612.015663][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  612.205839][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  612.254521][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  612.315708][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  612.464639][   T30] audit: type=1400 audit(1786073188.745:730): avc:  denied  { read write } for  pid=12746 comm="syz.5.2044" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  612.497813][ T5713] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  612.541939][ T5713] usb 4-1: media controller created
[  612.594864][   T30] audit: type=1400 audit(1786073188.745:731): avc:  denied  { open } for  pid=12746 comm="syz.5.2044" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  613.260884][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  613.331536][ T5713] usb 4-1: selecting invalid altsetting 3
[  613.357535][ T5713] ttusb2: set interface to alts=3 failed
[  613.400654][   T29] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  613.419929][   T29] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  613.433017][ T5713] DVB: Unable to find symbol tda10086_attach()
[  613.445487][ T5713] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  613.469507][ T5713] dvb-usb: bulk message failed: -22 (4/0)
[  613.475654][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  613.510120][   T30] audit: type=1400 audit(1786073189.785:732): avc:  denied  { listen } for  pid=12756 comm="syz.1.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  613.534794][ T5713] dvb-usb: bulk message failed: -22 (5/0)
[  613.546999][   T29] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  613.586842][ T5713] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  614.239355][T12763] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  614.331475][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  614.331995][T12762] fido_id[12762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  614.353567][ T5713] usb 4-1: USB disconnect, device number 89
[  614.531522][ T5713] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  614.830053][   T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  615.000542][   T24] usb 5-1: no configurations
[  615.009778][   T24] usb 5-1: can't read configurations, error -22
[  615.031646][T12785] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2056'.
[  615.101977][ T5596] Bluetooth: hci1: unexpected event for opcode 0x1003
[  615.160508][   T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  615.270577][ T5713] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  615.341709][   T24] usb 5-1: no configurations
[  615.350827][   T24] usb 5-1: can't read configurations, error -22
[  615.369678][   T24] usb usb5-port1: attempt power cycle
[  615.442370][ T5713] usb 2-1: Using ep0 maxpacket: 8
[  615.459829][ T5819] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  615.469008][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  615.489758][ T5713] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  615.510044][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.531837][ T5713] usb 2-1: config 0 descriptor??
[  615.609770][ T5819] usb 3-1: device descriptor read/64, error -71
[  615.709827][   T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  615.750842][   T24] usb 5-1: no configurations
[  615.761252][   T24] usb 5-1: can't read configurations, error -22
[  615.762865][ T5713] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  615.859805][ T5819] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  615.909815][   T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  615.931606][   T24] usb 5-1: no configurations
[  615.936246][   T24] usb 5-1: can't read configurations, error -22
[  615.964684][   T24] usb usb5-port1: unable to enumerate USB device
[  615.999769][ T5819] usb 3-1: device descriptor read/64, error -71
[  616.018516][T12784] comedi comedi3: comedi_config --init_data is deprecated
[  616.142479][ T5819] usb usb3-port1: attempt power cycle
[  616.230078][T12801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2055'.
[  616.231146][T12804] FAULT_INJECTION: forcing a failure.
[  616.231146][T12804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  616.258034][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.3.2062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.258066][T12804] Tainted: [L]=SOFTLOCKUP
[  616.258072][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  616.258082][T12804] Call Trace:
[  616.258089][T12804]  <TASK>
[  616.258095][T12804]  dump_stack_lvl+0x100/0x190
[  616.258120][T12804]  should_fail_ex.cold+0x5/0xa
[  616.258142][T12804]  _copy_from_user+0x2e/0xd0
[  616.258162][T12804]  __sys_bpf+0x2f5/0x4e80
[  616.258186][T12804]  ? __pfx___sys_bpf+0x10/0x10
[  616.258201][T12804]  ? find_held_lock+0x2b/0x80
[  616.258225][T12804]  ? get_pid_task+0xfc/0x250
[  616.258250][T12804]  ? get_pid_task+0xfc/0x250
[  616.258281][T12804]  ? find_held_lock+0x2b/0x80
[  616.258311][T12804]  ? rcu_read_lock_any_held+0x6a/0xa0
[  616.258338][T12804]  ? find_held_lock+0x2b/0x80
[  616.258370][T12804]  ? ksys_write+0x190/0x250
[  616.258395][T12804]  ? ksys_write+0x190/0x250
[  616.258437][T12804]  ? fput+0x79/0x100
[  616.258462][T12804]  ? __x64_sys_bpf+0xce/0x140
[  616.258478][T12804]  __x64_sys_bpf+0xce/0x140
[  616.258496][T12804]  ? do_syscall_64+0x90/0x870
[  616.258516][T12804]  do_syscall_64+0x115/0x870
[  616.258532][T12804]  ? clear_bhb_loop+0x40/0x90
[  616.258552][T12804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.258570][T12804] RIP: 0033:0x7f485619e0d9
[  616.258587][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.258604][T12804] RSP: 002b:00007f48543f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  616.258623][T12804] RAX: ffffffffffffffda RBX: 00007f4856425fa0 RCX: 00007f485619e0d9
[  616.258634][T12804] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a
[  616.258645][T12804] RBP: 00007f48543f6090 R08: 0000000000000000 R09: 0000000000000000
[  616.258656][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.258666][T12804] R13: 00007f4856426038 R14: 00007f4856425fa0 R15: 00007ffda9607868
[  616.258691][T12804]  </TASK>
[  616.294824][T12805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12805 comm=syz.1.2055
[  616.349932][ T5596] Bluetooth: hci3: command 0x0406 tx timeout
[  616.549961][   T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  616.558758][ T5819] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  616.684899][ T5819] usb 3-1: device descriptor read/8, error -71
[  616.709825][   T24] usb 6-1: device descriptor read/64, error -71
[  616.806124][ T5692] usb 2-1: USB disconnect, device number 87
[  616.929946][ T5819] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  616.952185][ T5819] usb 3-1: device descriptor read/8, error -71
[  617.156041][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  617.271141][ T5819] usb usb3-port1: unable to enumerate USB device
[  617.289830][   T24] usb 6-1: device descriptor read/64, error -71
[  617.411064][   T24] usb usb6-port1: attempt power cycle
[  617.562119][T12815] syzkaller1: entered promiscuous mode
[  617.573009][T12815] syzkaller1: entered allmulticast mode
[  617.779786][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  617.820446][   T24] usb 6-1: device descriptor read/8, error -71
[  618.080078][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  618.112670][   T24] usb 6-1: device descriptor read/8, error -71
[  618.232173][   T24] usb usb6-port1: unable to enumerate USB device
[  618.366769][   T30] audit: type=1400 audit(1786073194.645:733): avc:  denied  { write } for  pid=12842 comm="syz.1.2075" name="os_desc" dev="configfs" ino=15050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  618.405334][   T30] audit: type=1400 audit(1786073194.645:734): avc:  denied  { create } for  pid=12842 comm="syz.1.2075" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  618.429233][   T30] audit: type=1400 audit(1786073194.645:735): avc:  denied  { write } for  pid=12842 comm="syz.1.2075" name="os_desc" dev="configfs" ino=15050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  618.458538][T12858] ubi: mtd0 is already attached to ubi16
[  618.709816][ T5819] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  618.850016][ T5692] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  618.859882][ T5819] usb 4-1: Using ep0 maxpacket: 32
[  618.868412][ T5819] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  618.878232][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.886300][ T5819] usb 4-1: Product: syz
[  618.891175][ T5819] usb 4-1: Manufacturer: syz
[  618.895801][ T5819] usb 4-1: SerialNumber: syz
[  618.912073][ T5819] usb 4-1: config 0 descriptor??
[  618.941465][ T5819] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  618.949113][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[  618.959114][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  618.969853][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[  618.976211][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  618.990026][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  619.000588][ T5819] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  619.001339][ T5692] usb 3-1: Using ep0 maxpacket: 8
[  619.008703][ T5819] usb 4-1: media controller created
[  619.016936][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  619.049087][ T5819] usb 4-1: selecting invalid altsetting 3
[  619.058903][ T5819] ttusb2: set interface to alts=3 failed
[  619.092571][ T5819] DVB: Unable to find symbol tda10086_attach()
[  619.098738][ T5819] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  619.107402][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[  619.113217][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  619.123974][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[  619.131047][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  619.141386][ T5819] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  619.155950][T12858] dvb-usb: bulk message failed: -22 (7/0)
[  619.161700][T12858] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  619.171806][T12858] ttusb2: i2c transfer failed.
[  619.179464][T12874] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer.
[  619.206826][T12874] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1829905768 (58556984576 ns) > initial count (3218844672 ns). Using initial count to start timer.
[  619.278084][T12876] netlink: 'syz.1.2086': attribute type 4 has an invalid length.
[  724.319663][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  724.319690][    C1] rcu: 	0-...!: (2 GPs behind) idle=9954/1/0x4000000000000000 softirq=64697/64698 fqs=2
[  724.320361][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=75521, q=418 ncpus=2)
[  724.320379][    C1] Sending NMI from CPU 1 to CPUs 0:
[  724.320404][    C0] NMI backtrace for cpu 0
[  724.320418][    C0] CPU: 0 UID: 0 PID: 12874 Comm: syz.1.2086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  724.320438][    C0] Tainted: [L]=SOFTLOCKUP
[  724.320443][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  724.320452][    C0] RIP: 0010:kasan_check_range+0xfc/0x1e0
[  724.320478][    C0] Code: c0 01 48 39 c2 74 1d 80 38 00 74 f2 ba 01 00 00 00 48 85 c0 74 2c 41 83 e2 07 49 39 c1 75 15 45 3a 11 7d 10 ba 01 00 00 00 5b <5d> 89 d0 41 5c e9 4a 7a 41 09 41 0f b6 d0 e8 e1 e6 ff ff 83 f0 01
[  724.320492][    C0] RSP: 0018:ffffc90000007ce0 EFLAGS: 00000046
[  724.320506][    C0] RAX: fffffbfff3721e9d RBX: ffffffff9b90f4e0 RCX: ffffffff81e63659
[  724.320516][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b90f4e0
[  724.320525][    C0] RBP: fffffbfff3721e9c R08: 0000000000000001 R09: fffffbfff3721e9c
[  724.320535][    C0] R10: ffffffff9b90f4e3 R11: 0000000000000000 R12: 1ffff92000000fa0
[  724.320545][    C0] R13: ffffffff9b90f4f0 R14: ffff88807b787300 R15: 1ffff92000000fb8
[  724.320556][    C0] FS:  00007fd1b1c586c0(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000
[  724.320571][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  724.320581][    C0] CR2: 0000001b32712ff8 CR3: 00000000345de000 CR4: 00000000003526f0
[  724.320590][    C0] Call Trace:
[  724.320595][    C0]  <IRQ>
[  724.320602][    C0]  do_raw_spin_lock+0x119/0x260
[  724.320622][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  724.320641][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[  724.320661][    C0]  _raw_spin_lock_irqsave+0x42/0x60
[  724.320682][    C0]  ? debug_object_deactivate+0x135/0x3b0
[  724.320699][    C0]  debug_object_deactivate+0x135/0x3b0
[  724.320715][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  724.320733][    C0]  ? timerqueue_linked_add+0x260/0x430
[  724.320753][    C0]  __hrtimer_run_queues+0x2e9/0x9c0
[  724.320774][    C0]  ? rcu_is_watching+0x12/0xc0
[  724.320795][    C0]  hrtimer_interrupt+0x3e5/0x940
[  724.320819][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  724.320841][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  724.320863][    C0]  </IRQ>
[  724.320868][    C0]  <TASK>
[  724.320873][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  724.320889][    C0] RIP: 0010:console_flush_one_record+0xac3/0xe50
[  724.320910][    C0] Code: 00 e8 51 27 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 3f d3 21 00 48 85 ed 0f 85 d7 01 00 00 e8 91 d8 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
[  724.320923][    C0] RSP: 0018:ffffc900053a7450 EFLAGS: 00000283
[  724.320936][    C0] RAX: ffffffff8f9aa758 RBX: ffffffff8f9aa700 RCX: ffffc9000cbd1000
[  724.320945][    C0] RDX: 0000000000080000 RSI: ffffffff81e87c4f RDI: ffff888027b48000
[  724.320954][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  724.320963][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000035ee
[  724.320971][    C0] R13: ffffffff8f9aa758 R14: ffffc900053a74d0 R15: dffffc0000000000
[  724.320983][    C0]  ? console_flush_one_record+0xabf/0xe50
[  724.321007][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  724.321029][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  724.321043][    C0]  console_unlock+0x103/0x260
[  724.321062][    C0]  ? __pfx_console_unlock+0x10/0x10
[  724.321083][    C0]  ? _printk+0xcf/0x110
[  724.321098][    C0]  vprintk_emit+0x407/0x6b0
[  724.321117][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  724.321137][    C0]  ? preempt_schedule_common+0x42/0xc0
[  724.321159][    C0]  _printk+0xcf/0x110
[  724.321177][    C0]  ? __pfx__printk+0x10/0x10
[  724.321189][    C0]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  724.321210][    C0]  ? __pfx____ratelimit+0x10/0x10
[  724.321225][    C0]  __start_apic_timer.cold+0xf4/0x152
[  724.321241][    C0]  kvm_apic_set_state+0x540/0xa70
[  724.321256][    C0]  kvm_arch_vcpu_ioctl+0x3bd/0x57a0
[  724.321275][    C0]  ? rcu_is_watching+0x12/0xc0
[  724.321293][    C0]  ? trace_hrtimer_start+0x77/0x220
[  724.321313][    C0]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  724.321333][    C0]  ? find_held_lock+0x2b/0x80
[  724.321352][    C0]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  724.321371][    C0]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  724.321389][    C0]  ? rcu_is_watching+0x12/0xc0
[  724.321409][    C0]  ? __lock_acquire+0x49f/0x1a40
[  724.321425][    C0]  ? rcu_is_watching+0x12/0xc0
[  724.321443][    C0]  ? trace_sched_exit_tp+0x120/0x160
[  724.321464][    C0]  ? lock_acquire+0x1b9/0x370
[  724.321482][    C0]  ? rcu_is_watching+0x12/0xc0
[  724.321500][    C0]  ? trace_contention_end+0x126/0x160
[  724.321516][    C0]  ? __mutex_lock+0x26d/0x1bd0
[  724.321530][    C0]  ? kvm_vcpu_ioctl+0x322/0x1700
[  724.321544][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  724.321557][    C0]  ? preempt_schedule_irq+0x7b/0x90
[  724.321577][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  724.321591][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  724.321604][    C0]  ? irqentry_exit+0x24d/0xa00
[  724.321622][    C0]  ? kvm_vcpu_ioctl+0x8a0/0x1700
[  724.321635][    C0]  kvm_vcpu_ioctl+0x8a0/0x1700
[  724.321650][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  724.321664][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  724.321680][    C0]  ? do_vfs_ioctl+0x226/0x13e0
[  724.321698][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  724.321717][    C0]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  724.321739][    C0]  ? hook_file_ioctl_common+0x140/0x440
[  724.321761][    C0]  ? selinux_file_ioctl+0x13b/0x290
[  724.321778][    C0]  ? selinux_file_ioctl+0xb6/0x290
[  724.321795][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  724.321810][    C0]  __x64_sys_ioctl+0x18e/0x210
[  724.321828][    C0]  do_syscall_64+0x115/0x870
[  724.321841][    C0]  ? clear_bhb_loop+0x40/0x90
[  724.321856][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.321870][    C0] RIP: 0033:0x7fd1b0d9e0d9
[  724.321882][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  724.321894][    C0] RSP: 002b:00007fd1b1c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  724.321907][    C0] RAX: ffffffffffffffda RBX: 00007fd1b1025fa0 RCX: 00007fd1b0d9e0d9
[  724.321916][    C0] RDX: 0000200000000040 RSI: 000000004400ae8f RDI: 0000000000000008
[  724.321925][    C0] RBP: 00007fd1b0e35024 R08: 0000000000000000 R09: 0000000000000000
[  724.321934][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  724.321942][    C0] R13: 00007fd1b1026038 R14: 00007fd1b1025fa0 R15: 00007ffdbc85ac28
[  724.321957][    C0]  </TASK>
[  724.322400][    C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g75521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  724.322420][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  724.322430][    C1] rcu: RCU grace-period kthread stack dump:
[  724.322437][    C1] task:rcu_preempt     state:R  running task     stack:28824 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  724.322497][    C1] Call Trace:
[  724.322504][    C1]  <TASK>
[  724.322515][    C1]  __schedule+0x125c/0x6730
[  724.322556][    C1]  ? __pfx___schedule+0x10/0x10
[  724.322580][    C1]  ? find_held_lock+0x2b/0x80
[  724.322606][    C1]  ? schedule+0x225/0x2c0
[  724.322635][    C1]  schedule+0xdd/0x2c0
[  724.322660][    C1]  schedule_timeout+0x127/0x280
[  724.322688][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  724.322713][    C1]  ? __pfx_process_timeout+0x10/0x10
[  724.322734][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  724.322761][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  724.322785][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  724.322806][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  724.322829][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  724.322852][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  724.322870][    C1]  ? rcu_is_watching+0x12/0xc0
[  724.322894][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  724.322923][    C1]  rcu_gp_kthread+0x179/0x230
[  724.322943][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  724.322962][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  724.322991][    C1]  ? __kthread_parkme+0x18c/0x230
[  724.323017][    C1]  ? kthread+0x13a/0x450
[  724.323032][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  724.323051][    C1]  kthread+0x370/0x450
[  724.323067][    C1]  ? __pfx_kthread+0x10/0x10
[  724.323086][    C1]  ret_from_fork+0x72b/0xd50
[  724.323110][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  724.323134][    C1]  ? __switch_to+0x800/0x10f0
[  724.323153][    C1]  ? __pfx_kthread+0x10/0x10
[  724.323170][    C1]  ret_from_fork_asm+0x1a/0x30
[  724.323208][    C1]  </TASK>
[  724.323215][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  724.323227][    C1] CPU: 1 UID: 0 PID: 11173 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  724.323250][    C1] Tainted: [L]=SOFTLOCKUP
[  724.323257][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  724.323268][    C1] RIP: 0010:write_comp_data+0x10/0x90
[  724.323285][    C1] Code: 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 99 e2 58 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d 70 e2 58 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00
[  724.323301][    C1] RSP: 0018:ffffc90004fbf5f0 EFLAGS: 00000202
[  724.323315][    C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81fdb952
[  724.323327][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
[  724.323337][    C1] RBP: ffffe8ffffc29d80 R08: 0000000000000005 R09: 0000000000000000
[  724.323348][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  724.323359][    C1] R13: fffff91ffff853b1 R14: 0000000000000001 R15: ffff8880b853c880
[  724.323371][    C1] FS:  0000555585bbe500(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000
[  724.323388][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  724.323400][    C1] CR2: 00007f3112b556c8 CR3: 000000007638c000 CR4: 00000000003526f0
[  724.323412][    C1] Call Trace:
[  724.323418][    C1]  <TASK>
[  724.323424][    C1]  smp_call_function_many_cond+0x5b2/0x1870
[  724.323448][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  724.323476][    C1]  ? trace_contention_end+0x126/0x160
[  724.323499][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  724.323519][    C1]  ? ldt_dup_context+0x45/0x300
[  724.323544][    C1]  ? find_held_lock+0x2b/0x80
[  724.323568][    C1]  ? ldt_dup_context+0x1a4/0x300
[  724.323591][    C1]  ? ldt_dup_context+0x1a4/0x300
[  724.323620][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  724.323644][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  724.323671][    C1]  flush_tlb_mm_range+0x45f/0x16f0
[  724.323697][    C1]  ? dup_mmap+0x12ec/0x21b0
[  724.323720][    C1]  ? dup_mmap+0x12ec/0x21b0
[  724.323744][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  724.323768][    C1]  ? up_write+0x2e5/0x5c0
[  724.323793][    C1]  dup_mmap+0x1307/0x21b0
[  724.323825][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  724.323847][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  724.323877][    C1]  ? __lock_acquire+0x49f/0x1a40
[  724.323899][    C1]  ? find_held_lock+0x2b/0x80
[  724.323923][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  724.323962][    C1]  copy_process+0x4588/0x8030
[  724.323999][    C1]  ? __pfx_copy_process+0x10/0x10
[  724.324022][    C1]  ? do_raw_spin_lock+0x128/0x260
[  724.324055][    C1]  kernel_clone+0x176/0x9d0
[  724.324080][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  724.324110][    C1]  ? find_held_lock+0x2b/0x80
[  724.324134][    C1]  ? __might_fault+0xc5/0x140
[  724.324155][    C1]  __do_sys_clone+0xd9/0x120
[  724.324177][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  724.324220][    C1]  do_syscall_64+0x115/0x870
[  724.324237][    C1]  ? clear_bhb_loop+0x40/0x90
[  724.324259][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.324277][    C1] RIP: 0033:0x7f3111dc6b52
[  724.324293][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  724.324308][    C1] RSP: 002b:00007ffebb7b2a60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  724.324325][    C1] RAX: ffffffffffffffda RBX: 00007ffebb7b2a60 RCX: 00007f3111dc6b52
[  724.324337][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  724.324349][    C1] RBP: 00007ffebb7b2bec R08: 0000000000000000 R09: 0000000000000001
[  724.324360][    C1] R10: 0000555585bbe7d0 R11: 0000000000000246 R12: 0000000000000001
[  724.324371][    C1] R13: 0000000000000063 R14: 00000000000966af R15: 00007ffebb7b2c40
[  724.324396][    C1]  </TASK>
[  867.298298][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz-executor:11173]
[  867.298321][    C1] Modules linked in:
[  867.298330][    C1] irq event stamp: 1520314
[  867.298337][    C1] hardirqs last  enabled at (1520313): [<ffffffff8bb9173d>] irqentry_exit+0x24d/0xa00
[  867.298362][    C1] hardirqs last disabled at (1520314): [<ffffffff8bb9031e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  867.298390][    C1] softirqs last  enabled at (1520312): [<ffffffff81c8e222>] __irq_exit_rcu+0x162/0x210
[  867.298414][    C1] softirqs last disabled at (1520239): [<ffffffff81c8e222>] __irq_exit_rcu+0x162/0x210
[  867.298443][    C1] CPU: 1 UID: 0 PID: 11173 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.298467][    C1] Tainted: [L]=SOFTLOCKUP
[  867.298473][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  867.298483][    C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870
[  867.298505][    C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b4 9b 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31
[  867.298521][    C1] RSP: 0018:ffffc90004fbf5f8 EFLAGS: 00000293
[  867.298534][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb952
[  867.298545][    C1] RDX: ffff88802d66a540 RSI: ffffffff81fdb92c RDI: ffff88802d66a540
[  867.298557][    C1] RBP: ffffe8ffffc29d80 R08: 0000000000000005 R09: 0000000000000000
[  867.298567][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  867.298578][    C1] R13: fffff91ffff853b1 R14: 0000000000000001 R15: ffff8880b853c880
[  867.298594][    C1] FS:  0000555585bbe500(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000
[  867.298611][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  867.298623][    C1] CR2: 00007f3112b556c8 CR3: 000000007638c000 CR4: 00000000003526f0
[  867.298634][    C1] Call Trace:
[  867.298640][    C1]  <TASK>
[  867.298650][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  867.298678][    C1]  ? trace_contention_end+0x126/0x160
[  867.298701][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  867.298721][    C1]  ? ldt_dup_context+0x45/0x300
[  867.298744][    C1]  ? find_held_lock+0x2b/0x80
[  867.298768][    C1]  ? ldt_dup_context+0x1a4/0x300
[  867.298791][    C1]  ? ldt_dup_context+0x1a4/0x300
[  867.298820][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  867.298842][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  867.298863][    C1]  flush_tlb_mm_range+0x45f/0x16f0
[  867.298888][    C1]  ? dup_mmap+0x12ec/0x21b0
[  867.298909][    C1]  ? dup_mmap+0x12ec/0x21b0
[  867.298933][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  867.298957][    C1]  ? up_write+0x2e5/0x5c0
[  867.298981][    C1]  dup_mmap+0x1307/0x21b0
[  867.299012][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  867.299034][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  867.299064][    C1]  ? __lock_acquire+0x49f/0x1a40
[  867.299085][    C1]  ? find_held_lock+0x2b/0x80
[  867.299107][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  867.299145][    C1]  copy_process+0x4588/0x8030
[  867.299180][    C1]  ? __pfx_copy_process+0x10/0x10
[  867.299202][    C1]  ? do_raw_spin_lock+0x128/0x260
[  867.299235][    C1]  kernel_clone+0x176/0x9d0
[  867.299259][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  867.299288][    C1]  ? find_held_lock+0x2b/0x80
[  867.299312][    C1]  ? __might_fault+0xc5/0x140
[  867.299331][    C1]  __do_sys_clone+0xd9/0x120
[  867.299354][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  867.299397][    C1]  do_syscall_64+0x115/0x870
[  867.299413][    C1]  ? clear_bhb_loop+0x40/0x90
[  867.299435][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.299452][    C1] RIP: 0033:0x7f3111dc6b52
[  867.299468][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  867.299483][    C1] RSP: 002b:00007ffebb7b2a60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  867.299498][    C1] RAX: ffffffffffffffda RBX: 00007ffebb7b2a60 RCX: 00007f3111dc6b52
[  867.299509][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  867.299519][    C1] RBP: 00007ffebb7b2bec R08: 0000000000000000 R09: 0000000000000001
[  867.299529][    C1] R10: 0000555585bbe7d0 R11: 0000000000000246 R12: 0000000000000001
[  867.299539][    C1] R13: 0000000000000063 R14: 00000000000966af R15: 00007ffebb7b2c40
[  867.299562][    C1]  </TASK>
[  867.299569][    C1] Sending NMI from CPU 1 to CPUs 0:
[  867.299594][    C0] NMI backtrace for cpu 0
[  867.299605][    C0] CPU: 0 UID: 0 PID: 12874 Comm: syz.1.2086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.299624][    C0] Tainted: [L]=SOFTLOCKUP
[  867.299629][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  867.299637][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70
[  867.299654][    C0] Code: 64 00 be 03 00 00 00 5b e9 22 bb 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 45 db 58 12 <48> 8b 34 24 65 48 8b 15 21 db 58 12 a9 00 01 ff 00 74 1b f6 c4 01
[  867.299667][    C0] RSP: 0018:ffffc90000007e60 EFLAGS: 00000002
[  867.299678][    C0] RAX: 0000000000010002 RBX: ffff8880b8428640 RCX: ffffffff81f5d358
[  867.299687][    C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888027b48000
[  867.299696][    C0] RBP: ffff88807b787300 R08: 0000000000000005 R09: 0000000000000000
[  867.299704][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  867.299712][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428690
[  867.299721][    C0] FS:  00007fd1b1c586c0(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000
[  867.299736][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  867.299746][    C0] CR2: 0000001b32712ff8 CR3: 00000000345de000 CR4: 00000000003526f0
[  867.299755][    C0] Call Trace:
[  867.299760][    C0]  <IRQ>
[  867.299765][    C0]  enqueue_hrtimer+0x223/0x2f0
[  867.299786][    C0]  __hrtimer_run_queues+0x6ed/0x9c0
[  867.299806][    C0]  ? rcu_is_watching+0x12/0xc0
[  867.299827][    C0]  hrtimer_interrupt+0x3e5/0x940
[  867.299851][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  867.299873][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  867.299894][    C0]  </IRQ>
[  867.299899][    C0]  <TASK>
[  867.299904][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  867.299919][    C0] RIP: 0010:console_flush_one_record+0xac3/0xe50
[  867.299939][    C0] Code: 00 e8 51 27 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 3f d3 21 00 48 85 ed 0f 85 d7 01 00 00 e8 91 d8 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
[  867.299951][    C0] RSP: 0018:ffffc900053a7450 EFLAGS: 00000283
[  867.299962][    C0] RAX: ffffffff8f9aa758 RBX: ffffffff8f9aa700 RCX: ffffc9000cbd1000
[  867.299971][    C0] RDX: 0000000000080000 RSI: ffffffff81e87c4f RDI: ffff888027b48000
[  867.299980][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  867.299989][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000035ee
[  867.299997][    C0] R13: ffffffff8f9aa758 R14: ffffc900053a74d0 R15: dffffc0000000000
[  867.300010][    C0]  ? console_flush_one_record+0xabf/0xe50
[  867.300033][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  867.300056][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  867.300071][    C0]  console_unlock+0x103/0x260
[  867.300095][    C0]  ? __pfx_console_unlock+0x10/0x10
[  867.300116][    C0]  ? _printk+0xcf/0x110
[  867.300130][    C0]  vprintk_emit+0x407/0x6b0
[  867.300150][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  867.300170][    C0]  ? preempt_schedule_common+0x42/0xc0
[  867.300192][    C0]  _printk+0xcf/0x110
[  867.300205][    C0]  ? __pfx__printk+0x10/0x10
[  867.300218][    C0]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  867.300240][    C0]  ? __pfx____ratelimit+0x10/0x10
[  867.300255][    C0]  __start_apic_timer.cold+0xf4/0x152
[  867.300271][    C0]  kvm_apic_set_state+0x540/0xa70
[  867.300287][    C0]  kvm_arch_vcpu_ioctl+0x3bd/0x57a0
[  867.300307][    C0]  ? rcu_is_watching+0x12/0xc0
[  867.300325][    C0]  ? trace_hrtimer_start+0x77/0x220
[  867.300346][    C0]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  867.300366][    C0]  ? find_held_lock+0x2b/0x80
[  867.300384][    C0]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  867.300402][    C0]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  867.300421][    C0]  ? rcu_is_watching+0x12/0xc0
[  867.300440][    C0]  ? __lock_acquire+0x49f/0x1a40
[  867.300456][    C0]  ? rcu_is_watching+0x12/0xc0
[  867.300474][    C0]  ? trace_sched_exit_tp+0x120/0x160
[  867.300495][    C0]  ? lock_acquire+0x1b9/0x370
[  867.300512][    C0]  ? rcu_is_watching+0x12/0xc0
[  867.300530][    C0]  ? trace_contention_end+0x126/0x160
[  867.300547][    C0]  ? __mutex_lock+0x26d/0x1bd0
[  867.300560][    C0]  ? kvm_vcpu_ioctl+0x322/0x1700
[  867.300575][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  867.300588][    C0]  ? preempt_schedule_irq+0x7b/0x90
[  867.300609][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  867.300623][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  867.300636][    C0]  ? irqentry_exit+0x24d/0xa00
[  867.300654][    C0]  ? kvm_vcpu_ioctl+0x8a0/0x1700
[  867.300667][    C0]  kvm_vcpu_ioctl+0x8a0/0x1700
[  867.300683][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  867.300697][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  867.300714][    C0]  ? do_vfs_ioctl+0x226/0x13e0
[  867.300733][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  867.300752][    C0]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  867.300774][    C0]  ? hook_file_ioctl_common+0x140/0x440
[  867.300797][    C0]  ? selinux_file_ioctl+0x13b/0x290
[  867.300814][    C0]  ? selinux_file_ioctl+0xb6/0x290
[  867.300831][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  867.300846][    C0]  __x64_sys_ioctl+0x18e/0x210
[  867.300865][    C0]  do_syscall_64+0x115/0x870
[  867.300877][    C0]  ? clear_bhb_loop+0x40/0x90
[  867.300892][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.300906][    C0] RIP: 0033:0x7fd1b0d9e0d9
[  867.300918][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.300930][    C0] RSP: 002b:00007fd1b1c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  867.300943][    C0] RAX: ffffffffffffffda RBX: 00007fd1b1025fa0 RCX: 00007fd1b0d9e0d9
[  867.300952][    C0] RDX: 0000200000000040 RSI: 000000004400ae8f RDI: 0000000000000008
[  867.300961][    C0] RBP: 00007fd1b0e35024 R08: 0000000000000000 R09: 0000000000000000
[  867.300969][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.300978][    C0] R13: 00007fd1b1026038 R14: 00007fd1b1025fa0 R15: 00007ffdbc85ac28
[  867.300992][    C0]  </TASK>
[  867.301597][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  867.301610][    C1] CPU: 1 UID: 0 PID: 11173 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.301633][    C1] Tainted: [L]=SOFTLOCKUP
[  867.301639][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  867.301649][    C1] Call Trace:
[  867.301656][    C1]  <IRQ>
[  867.301663][    C1]  dump_stack_lvl+0x100/0x190
[  867.301686][    C1]  vpanic+0x552/0x970
[  867.301703][    C1]  ? __pfx_vpanic+0x10/0x10
[  867.301721][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  867.301748][    C1]  panic+0xd1/0xe0
[  867.301765][    C1]  ? __pfx_panic+0x10/0x10
[  867.301783][    C1]  ? __pfx_printk_trigger_flush+0x10/0x10
[  867.301811][    C1]  ? wq_watchdog_touch+0xec/0x1a0
[  867.301837][    C1]  ? watchdog_timer_fn.cold+0x5/0x25
[  867.301857][    C1]  ? watchdog_timer_fn+0x702/0x7a0
[  867.301879][    C1]  watchdog_timer_fn.cold+0x16/0x25
[  867.301900][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  867.301922][    C1]  __hrtimer_run_queues+0x13f/0x9c0
[  867.301955][    C1]  hrtimer_interrupt+0x3e5/0x940
[  867.301992][    C1]  __sysvec_apic_timer_interrupt+0x109/0x470
[  867.302018][    C1]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  867.302045][    C1]  </IRQ>
[  867.302051][    C1]  <TASK>
[  867.302059][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  867.302078][    C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870
[  867.302099][    C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b4 9b 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31
[  867.302115][    C1] RSP: 0018:ffffc90004fbf5f8 EFLAGS: 00000293
[  867.302128][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb952
[  867.302139][    C1] RDX: ffff88802d66a540 RSI: ffffffff81fdb92c RDI: ffff88802d66a540
[  867.302151][    C1] RBP: ffffe8ffffc29d80 R08: 0000000000000005 R09: 0000000000000000
[  867.302162][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  867.302173][    C1] R13: fffff91ffff853b1 R14: 0000000000000001 R15: ffff8880b853c880
[  867.302190][    C1]  ? smp_call_function_many_cond+0x5b2/0x1870
[  867.302210][    C1]  ? smp_call_function_many_cond+0x58c/0x1870
[  867.302234][    C1]  ? smp_call_function_many_cond+0x58c/0x1870
[  867.302257][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  867.302284][    C1]  ? trace_contention_end+0x126/0x160
[  867.302306][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  867.302326][    C1]  ? ldt_dup_context+0x45/0x300
[  867.302350][    C1]  ? find_held_lock+0x2b/0x80
[  867.302374][    C1]  ? ldt_dup_context+0x1a4/0x300
[  867.302397][    C1]  ? ldt_dup_context+0x1a4/0x300
[  867.302426][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  867.302449][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  867.302471][    C1]  flush_tlb_mm_range+0x45f/0x16f0
[  867.302496][    C1]  ? dup_mmap+0x12ec/0x21b0
[  867.302517][    C1]  ? dup_mmap+0x12ec/0x21b0
[  867.302542][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  867.302566][    C1]  ? up_write+0x2e5/0x5c0
[  867.302596][    C1]  dup_mmap+0x1307/0x21b0
[  867.302628][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  867.302650][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  867.302681][    C1]  ? __lock_acquire+0x49f/0x1a40
[  867.302702][    C1]  ? find_held_lock+0x2b/0x80
[  867.302726][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  867.302763][    C1]  copy_process+0x4588/0x8030
[  867.302798][    C1]  ? __pfx_copy_process+0x10/0x10
[  867.302821][    C1]  ? do_raw_spin_lock+0x128/0x260
[  867.302854][    C1]  kernel_clone+0x176/0x9d0
[  867.302878][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  867.302908][    C1]  ? find_held_lock+0x2b/0x80
[  867.302931][    C1]  ? __might_fault+0xc5/0x140
[  867.302951][    C1]  __do_sys_clone+0xd9/0x120
[  867.302973][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  867.303016][    C1]  do_syscall_64+0x115/0x870
[  867.303033][    C1]  ? clear_bhb_loop+0x40/0x90
[  867.303054][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.303072][    C1] RIP: 0033:0x7f3111dc6b52
[  867.303086][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  867.303102][    C1] RSP: 002b:00007ffebb7b2a60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  867.303118][    C1] RAX: ffffffffffffffda RBX: 00007ffebb7b2a60 RCX: 00007f3111dc6b52
[  867.303130][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  867.303140][    C1] RBP: 00007ffebb7b2bec R08: 0000000000000000 R09: 0000000000000001
[  867.303151][    C1] R10: 0000555585bbe7d0 R11: 0000000000000246 R12: 0000000000000001
[  867.303162][    C1] R13: 0000000000000063 R14: 00000000000966af R15: 00007ffebb7b2c40
[  867.303186][    C1]  </TASK>
[  868.402285][    C1] Shutting down cpus with NMI
[  868.402542][    C1] Kernel Offset: disabled