last executing test programs:

12m14.758634896s ago: executing program 0 (id=702):
syz_open_dev$sndctrl(0x0, 0x8, 0x191000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

12m14.222155342s ago: executing program 0 (id=705):
prctl$PR_SET_DUMPABLE(0x4, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
recvmsg(0xffffffffffffffff, 0x0, 0x102)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24002821)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)="be79f200e0fa73e4f7cd1e40713417f8b347b7ecb07ab444ac1f95134865afd19128bff338ab66828b8fe53ba90718ef04b3165d97078173a24fe319ea8ffd7bc1189c31255a96c193123aabf5ffa8dbf00000", 0x53}, {&(0x7f0000000200)="0dca189b352df3da558f89659cfdcd274bee08e128bceea45c8ec14c3336c68922c9939ed8c67c809d7ff15f145846cd2fbb07fb6bf46e5a69db66f38ff277766d", 0x41}, {&(0x7f00000002c0)="bc151c62d30000f9bb56c2c3", 0xc}, {&(0x7f0000000300)}, {&(0x7f0000000380)="bcaab7d4935c71706d0f856cf4d9be31b3b59289bdb5e95cd1ace21f7fb4459ab59983d83b1eb7c13653dd177a886daa5ecc11d68d9cf2653883904760e3e3628f8b49198cc87498b8ea7d1dd5b1078a8e42a8ee4a1a112c2d876cae39aeb5c330c9b555b23de591ff9a8ae049d969ad1d1d4ede90e5e2617825762b9b4fcd7052f315aa7736bd1dfb4f7a570153bdaa7d01fe462e5863c784f824512ca94b4cd910b4d61a91070d61e74458256abef869588f1b4d25bdfd93b9de6accae09e3a3c08d8f027f7e7943ff50758104a933df74bbcda5ee8b7515e7ce37", 0xdc}, {&(0x7f0000000480)="5630c4916acf88ee98c743f0f8df685dd38135f9a36d3ad5173d1547b4b0e906df0fa645ba", 0x25}, {&(0x7f00000004c0)="88a42edcc64914aa846721e0f8daec8826d8725008539ac1939d863deffac46e77793a0f34740763d84ae289019a3870dcdee2b02105adfe2d9f8c4294cc379eb82230234445e5c931ba5ebce3da4bcfcf32e538736f6dc0fbd06a246f2e673d4f15e8c18412350a21eb8a757060d0e446eea3c6a9940b220aafb818b6c15c609f61b29cc303d2f1238b52e7aa80f8b74c177635632d7be4958deeca529410b7224077f805eb87a4be8775d6401fa84c1f03a35b0e3d1c37dd38db8da714016c75ea433393ae79cd9ff6eb", 0xcb}, {&(0x7f00000005c0)="94a83e6c7cabb6f70c938f6e897bd4bca9a1a1d3acef50ab779808701b548fe690a08bc9ec9e86ba727b987f7635a27f5e4623584bdf5f50e516fab96435ce201ec598aff01de4a871d09829c3afa1440e234eaffa3ce4a72b603e143a052f4e0e", 0x61}], 0x8, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x34b}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x51, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @broadcast, @private=0xa010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xd3, [@broadcast, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101, @empty, @remote, @multicast2, @empty, @multicast2]}, @end, @end, @timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0xd, [{@loopback, 0x8}, {@rand_addr=0x64010100, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x8}, {@remote, 0xfff}, {@rand_addr=0x64010100, 0x3fff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @lsrr={0x83, 0xb, 0x40, [@private=0xa010100, @multicast2]}, @end, @rr={0x7, 0x7, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x19, [@multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x66, 0x1, 0xe, [{@loopback, 0x2}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x8, [{@multicast1, 0x10fc}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0x7}]}, @cipso={0x86, 0x28, 0x3, [{0x1, 0x9, "ae3d44eb7de6f3"}, {0x0, 0x6, "3a9cb791"}, {0x0, 0x10, "cb59d6564e4adfef2a0c279aa25d"}, {0x1, 0x3, '*'}]}, @end, @generic={0x7, 0xe, "429ce51a4ea68ddfade00ffb"}, @timestamp_prespec={0x44, 0x3c, 0xb1, 0x3, 0x1, [{@remote, 0x5}, {@private=0xa010102, 0x9}, {@multicast2, 0x428}, {@empty}, {@remote, 0x1}, {@multicast1, 0x81}, {@private=0xa010100, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x1e0}}], 0x2, 0x8000)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)

12m13.407659451s ago: executing program 0 (id=708):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff5, 0xfffffffe}) (async)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000008c0), 0x0, 0x4001) (async)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0)
ioctl$VIDIOC_S_STD(r4, 0x40085618, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
shutdown(r0, 0xfffffffffffffffd) (async)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x8, 0x9a3, &(0x7f00000000c0)="e530f0f2e2476f45a62c0cb88008535ef0348858aaf9c48f9d0dd78e067dda39b7bbc835558105c229ec6454e3b7f13932a64968e3136d186a300a7f7373eb16d40f138ec7a418cf", 0x0, 0x48}) (async)
r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x40000) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)) (async)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f00000000c0)={0x800003, 0x5, 0x4, 0x64, '\x00', 0x6}) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2)

12m12.705057593s ago: executing program 0 (id=712):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

12m12.562489321s ago: executing program 0 (id=713):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0x2, 0x81}, 0x10)
syz_io_uring_setup(0x3a62, &(0x7f0000000700)={0x0, 0xa011, 0x200, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x101)
setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7435}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x330}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x2, 0x1}, {0x5, 0x5, 0xd}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})

12m11.320060765s ago: executing program 0 (id=714):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x7f)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000d0000007d95df16"], 0x10b8}, 0xff4c)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r5)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0x1, 0x5, 0x3ff, 0xf6, 0x3, "3a324777064acb9e97c2ae086ad2b4d60fb064"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1})

11m56.833843338s ago: executing program 32 (id=714):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x7f)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000d0000007d95df16"], 0x10b8}, 0xff4c)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r5)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0x1, 0x5, 0x3ff, 0xf6, 0x3, "3a324777064acb9e97c2ae086ad2b4d60fb064"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1})

1m10.102569691s ago: executing program 1 (id=3676):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040))
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioprio_set$pid(0x0, r3, 0x4007)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
write$sequencer(0xffffffffffffffff, 0x0, 0x10)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x6000000, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800})

1m6.536307011s ago: executing program 1 (id=3677):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x8000005, @local, 0x8}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x41, 0x6}}], 0x24}}], 0x2, 0x0)

1m5.636547305s ago: executing program 5 (id=3681):
socket$key(0xf, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(0x0, 0x22)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
unshare(0x2000000)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'veth0_to_batadv\x00', {}, 0xeff})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000deff00000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1m5.450284669s ago: executing program 4 (id=3682):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x1, 0x198f90f, 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x8000, 0x204, 0x5, 0xffffffc0, 0x9, 0x800}, &(0x7f00000000c0)=0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x700}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
close(0x3)

1m4.794797935s ago: executing program 4 (id=3685):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='5\x00', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08400000000004001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYBLOB="e33b234a349dba337e183dae12a3636107927d31c92c8a935d09a5cdf17b5ef1e4fbbb613df224f930237a1498f10313bfdb773c7525545c73b68212c7d333f322e9767dacaa5abab4b791fe2d991730de6ec5d7b21e0b91e72283b5e070656b9d1f13a1c821aeb92e6962b60b37f14052b04525bcac3d02eb69ddfbe49afe22a4ab99fa480974eb1fa7b003764629f2b3db9a55be17f85d6d9b70f55c972b178d418a6f1e5463ef6b32cf0455ab190fe7559249db8eff95bd827e"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r10=>0x0, &(0x7f0000000200)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r9, 0x47f6, 0x195d, 0x25, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_pidfd_open(0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r12, 0xff06, 0x0)

58.778633683s ago: executing program 1 (id=3688):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xf00}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

58.618539068s ago: executing program 4 (id=3689):
syz_open_dev$media(0x0, 0x0, 0x200)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

52.873980676s ago: executing program 5 (id=3692):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x201000c, &(0x7f0000000040))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x8801)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000000, 0x2}, 0x50)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

52.737952745s ago: executing program 1 (id=3694):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204980, 0x0)
close(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e4001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mount$cgroup2(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d656d6ff267906765746c6269615f676f756e67696e672c00000074bea62e1f24d9d8537a0b15105c11acc18e1181099718b2beeb4b43f950835a073c9a08beefadf7ba04c384c06c1ebf9349eb887661b6d0d57b1b8c8605decc57a1b3ce4803725325b14a647624493116c6e98f77ae117785fed61c4887eb4dfe069e3ffd51abad6a462aaae70b9d13f41f07cff0a98607bfc2bdd4835855a3342dfbf364e9982a3a22074e7fba6a02b6412273fd0b1de655218396df7ed5b560eaf90eca7050802faaf832da4c37b0f9e36b31ccf8c6370d49afcce1701abfb431d044a091f1cf0000"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_clone(0x440e4500, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = gettid()
kcmp(r7, r6, 0x2000000, 0xffffffffffffffff, 0xffffffffffffffff)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000000c0), 0x0, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000700000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6400)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, 0x0)

49.866225976s ago: executing program 4 (id=3697):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x26, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

47.356698615s ago: executing program 5 (id=3699):
r0 = socket(0x40000000015, 0x5, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x123980, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2140088, &(0x7f00000001c0)={[{@metacopy_off, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2001, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd)
getdents64(r4, &(0x7f0000000580)=""/166, 0xfe)
r5 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)}, 0x400c0)
close_range(r0, 0xffffffffffffffff, 0x2)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0xa3, "4b3bc5af20d7a957d33a3dc183ae823ba018d61e507ad056aa9e1faf9dcd00905fef44434535bd96de00000000000100"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="c41feac78c3608f4348a81aa4730835af341c54557d484dd18656ea2d9884d5d5bcb85df96efd563ca32b5b7c24fdc6ac4216afb94c37fac079fc97aa3ffde3ecacd40f54a8da3a88f4e4b24bf1e6c52791fc9acfda242f301616a54a26c838b47c5eeda87157cc7f666f7f0616479d473a7cb8433743915834dcd5a2b5c1fb7188338fd9dd9e9681ac8b8f8775514e046650412ab1607a2bad51b06ac7ff6feb3", 0xa1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0)

47.354066844s ago: executing program 4 (id=3701):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x2000fff2, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)

46.336887441s ago: executing program 2 (id=3703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x2000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94)

46.060525091s ago: executing program 2 (id=3704):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000010) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) (async)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

45.802497377s ago: executing program 2 (id=3705):
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380))
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
rename(0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
setns(r3, 0x24020000)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4})
landlock_create_ruleset(0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00009d8000/0x3000)=nil, 0x3000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a23000/0x4000)=nil, 0x4000}})

43.034308546s ago: executing program 5 (id=3706):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_mptcp(0xa, 0x1, 0x106)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

40.878919084s ago: executing program 3 (id=3707):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)})
move_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xffffffffffffffff, 0x2)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000019340)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000200000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e5"], 0x0, 0x4000002, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000280)={0x3, 0x2000003}, 0x0)

40.678419583s ago: executing program 1 (id=3708):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xa00100, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x6310}, 0x1c)

35.948439196s ago: executing program 3 (id=3709):
r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x83)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unshare(0x2000400)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003c46c001040200017dba70175030109021200010805b01009042e050092e93c0848c62fe40210d3b06fa7aeafc7e5df876d8a77a214ed73af64ce53a8e6f5bae089aeea8006c635859d4397e8e8c0e520eeb953ea96515eb9e1bd0d33d60651be71518d43f35140aa62bff7b4991ed83f200741a46962706ca052456f45d3efb2f75b3726f07d1f454b289102872f171a7d762b4fc6ec2ac117fa8db17084c0549f654e7449af7aa6c99c8ce5835496a148cd05f8d00c6197225f09ed9f6e9ea4"], &(0x7f0000000140)={0x3d, 0x0, 0x21, &(0x7f00000016c0)=ANY=[@ANYBLOB="010f"], 0x0, [{0x0, &(0x7f0000000100)=@string={0x0, 0x3, "b762dc98078cbbcb820cbf4c08b121c6d7e1a7277f3f05618c8e9a4cc1eb83ce1c6241dbd6178b5fca6f22f77d"}}]})

35.230176258s ago: executing program 4 (id=3710):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4)
sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12140, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0})
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000700)={{0x60000, 0x7000, 0x0, 0x4, 0xc, 0x2, 0x0, 0xfc, 0x6, 0x4, 0x3f, 0x39}, {0x3cf205ff99026d61, 0x3000, 0xf, 0x0, 0x1, 0x9, 0x8, 0xdb, 0x3, 0x0, 0x9, 0x40}, {0x1000, 0x2000, 0xe, 0x4, 0x61, 0x8, 0x7, 0x2, 0x3, 0x50, 0x20, 0xe7}, {0x58000, 0x58000, 0xd, 0x9, 0x0, 0x3, 0x1, 0x10, 0x90, 0x52, 0xf4, 0x3}, {0x45000, 0x1, 0x3, 0xff, 0x7f, 0xe5, 0x0, 0x6, 0x5c, 0x0, 0x8, 0x5}, {0xc000, 0x58000, 0xd, 0x5, 0x0, 0xba, 0xe, 0x6, 0x8, 0x9, 0x40, 0xe}, {0xffffffff, 0x1, 0xc, 0x0, 0x2, 0x21, 0xcc, 0x6, 0x3, 0x7, 0xfb, 0xa}, {0xffff1000, 0x80a0000, 0x10, 0x3, 0x5, 0x3, 0xc, 0x1, 0x9, 0x81, 0x0, 0xff}, {0xeeee8000, 0x6}, {0xa000}, 0xc0050002, 0x0, 0xdddd1000, 0x410002, 0xb, 0x1900, 0x30000, 0x1, [0x5, 0x7f, 0x85, 0x8]})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000400000c0000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6})

35.052520249s ago: executing program 2 (id=3711):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x8000, 0x2, 0x3, 0x10}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb3e3167be3baf8fc27ef04b148aadec23ad381459133ec017de1e176c", 0x2c, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000040)={0x1f, 0x0, 0x80000005, 0x0, 0xfffffffffffffff8, 0x7, 0x8}, 0x0, 0x0, 0x0)

33.710035698s ago: executing program 5 (id=3712):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

32.550266067s ago: executing program 3 (id=3713):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"401d23eaecff5c3f66c13a79380d2e3dfd72b439dd33c56d806068c1aa1f52f2071c5658915cfabcae3d05ed1a3861c5367b8ae05dac17197761e48da2f4df3e09fac6dfc7776c834979b5f08cccc927fbfe6ee07e0dae4301b19eefa0cf5dc2ea69b1517cfef5e1cd15d416a54cd455dba5eb5ef4821d17b9bc63064cdf450c9bf3c5e12889df06b377cf088c5db341931945dd482f1ded3a003212a230c1b97ebe9e7b928b15f2a110393b9230ce6abba4b2ccbe3e6040ec648827a6a89697611caa5e2d3e36eb03125e6fa660f341d242e47f63d6161871975cece35cbcce512e36558108db8b9ba8175d9736ec2966498ae354cd895735dce0f404b109909f93d947f5c77f098fde8c673fcb2aa5d06fc3efa2bd365e6b85b98922e1a4c29e97944f8d1aebc1592a3e47786c2be4fab00504970ac603fe77d110f78eca4048beb44a14daf82a635faf11cecae11c1d1a8fcbe05c365c3483abd84ccf5c5ce45050d4e87708a00a317986ebd59be7ccdff7e7da2f428c2ad34419aa6d0601ab3020efeebc4d3ca8b7d9f69594c3d30a12f1ac6fe056bf5fd9f7ab20f9fc5167d0e63f922118898f338b06a30041342ff6ea916f31791b4f0efdffc0f3e52bccd1f3ee0f6323747dc1af9a77e5a9c4b38530aa7e6e5608109cd56e23b1c89642bb14573caca5deaf1a6982c5940b445961ddbf5a1b26c01627b245e70a52e02f1b53b89aaa554ce75a62f242d11b459192be0ff634c3fe22ee86f1ddfab0b9f5a709479647be7991949474f449d47603fb4dabf66c95d36b4324f2e2a893f094b31a17fc17d92811478c1e151915f68575a882c05e0f3eeacdeb32e0fdf6213a40057bca3d9c9d1e6efde3e57a0c59ce998a2e07aee5880173f324a53ec8a30423378844d5ecf0ca30c05e520c333d7d35107d9c06d5c49d8d457cea74d2cccdd1f2b823db63a03815ca8377ea20f850d5b0654c4164193a2e222bd600c22b9de1476790641346312324a34b9548c1d1b730e7712c7bdc30e1c8fc79bdf244b8796759335e74097fdfa462ccd6f25bb087985c875999dfdfe12d0cb3864d8a02f7dc704b700ec8d14f634476b6750d84e1e711f6faea42b06f81099bd8697c623cf0ec4e2c1fc711815d2c52d13b82fcd9276c1dac602f11ee8178d1b01826a43950cfb3d2f8317b83a1bc29ced1f9391f976ee5866e0f04f13c91d01faab58a5fbc9d4a40679f1c77342afd0ba2c691fe30a739019c0823d7f81fc58a3dab0963e91748f2703eb33fba6b91d023c3530a27cf930bd8eb689b41b8ed1c4d7bfb31802557943038244c9e1346cc91f0e65c9dd3155a389723e4ed1652d3460549a0aa99dd54e26f4ab4b50e0171e88e0a95c82297d2f13e19763ccf115196f4f1f1a61fa3be6824930ad75d903c90fc57a926d639891ed3e3778bc55bc828592c97c62b7e9fe329136ae8d00cf5ba7c80ed894ba1c48b5dd6cf4e24375ce141df77d0f675196e6803600af9ee449c1d0293e66f5aa4353063e7ef81de1a687d3e10316319c28b0f497a71470ddcf4718782f9abebda930e582ec989c67cae00148dd731183bd3566967e47e63eb643b48496eb2d10e3e8a8da2681224aec5976d9b45c6eef87a2e9db84bed69990040a63e0ee084dec5db82d8329d1324c1b8776e2124e76d33ea32f5b957d20213d3f0a3b4418367d21a060f7f7f103cedcc30ecd86810b1f7560620c7d2915f2c159ed3cfb147c2dde4e23dd95a4dc914ecb1421e0df784c3bb6fdad48fdc448f132a026e4225788306b1d887c2d262095ece496149b29d2a56e9aefb02af7bc1782fdcfc136de3b91e583596bed0ce20585ec8551aafb40bbd81fb7299b9801eb2f8105f4123f1f69f49cc5c83b6e089549669ec19ceceaeb5100749bc57d0761804d76cb9bdb3a26bf1778625cd5a67f76963f2441bfaa3645ebc733f3f3b8a33e2fc9fce2b037d83c5ea707f56cc68c6773835bddff1d54f0bebcfbae46030c171950862734e288b1c1e301c9d81c0a57af70dc2b27c0f415e24945c6be41efbd70edc06aa567d38db6e868a767cb89e32ad40ff81eb06ef913b3a7c8ab2037fca61931269adba1b2dfe408d5cce0a1d7988ea17a3b70191239da96a2b708c68f6d912b218cf6f2b56b093c2ac2ac08a45aa27c6d655b1a7524feccd8e6353f0bb6b1c77a4ea344d3ad6c44ed6f6800a19d976d968505204d20d44972fb85c2bee26ebececa1f22433becb84eb50750fa39e2f02008c158aaa2129edc047dde0febc3f25a3eca2922d9bcca485802aa2afcb02ea59a1ddb5d6d947921a88d7e8e4f2af9409a7587933ace0ab9c207c6aabb2f215e89a6b81e4cfe45fc4f3e96a595da88f6114213836fb6cadd54ddd6fd1a2f82124ff5e71058e653ef992f3472773a3f89d468b687027ad5ad81ae53389af3ff4417eace69fc0ece976dbb700e7a160120dbf769491fa4e5f2b4f4a711a0f28820ae3db57d378ecaa265c0fb15b87686ef569938369563abd8fed2804d618fef91f4cbaa220100865c4bffdb02ef9ebab2da970b7b7d1cefc0a7c2f83dc94d32d289c403b6d02a856ad030b1fdde98abd9b45343442ac68916144a50e6e0d34e271b05c61ff084da7c87a639f1111e0547b8392c66231e4fc4fcaa6ac296006f1c2cd428b40289d7c2046f85a7fabdf70cd12bf35eb6c9717603be135b13a0d5f481465d974a6469a2cbad3757a0af41606de3ab44d41539a404e4880d44677765e10ca324080b7c47e4b65e2463e5cb6d4c76b4fe98bb3339861895cab1ab7bef240aaea24e367ec96634ec72f287d6bf7bf0271d1103f43b5dea22f391c5e3f04e20f817f61b433c05c11bb0622719cd1326ef8750495892be6028aa869491beb05abf2a8fdb2a6a2ade80012b21fa94f9c859510a79b7fe17d5d2f5d6ff86c97349801f3f24e59af0dfcfae570a63ddae2b76d3aae8f0524b72184a7c8012e759dd758d2eb169302edad9ce881bf4db2e1dcb31292caf9d18805a94a39d8b7aa2c2be5164fff735fa2ba621745d7aadcf71a7d6105777472a0501233f58547c0201692432f03c7d0bd67d05c9c26f9003b3998973f2a32eaa1ca7713a90df5a21c69e4d6772e14e21d2e463d136b1a6300a2f7cd0c243c44a9ee15ae4829b557b17c4129301ecebc6f496e4f5aaec1664ab9de96058f040d13cdf97a223d66056340e641b56f04369f49fc8de1acc054261b467cec0e89809ecbe35dff43969b30a47486da428f1c1f2e29fd4b61e661776d1b1955588bc187e071af51a76127fc832556fd90115a997d45d1be82062c0dc829fc41527aa9f97e16090df2b020b5398ae62658b66234697d0c1037f697092140ae0ca8a5812af183b5e77adf9a6c83fdc41af88fb9ce3934a235e405601be4e3b7e54c0aef8f2697f6eb7200461c3288800a5b24777ec02efbbeb3218cf455583eabc1640c76ccd5dd907e98aa5d9d38a1e4e7f3ac4e40dc89f4fe887934e3cb16ba737ede88ca58a643052ee7a58be2206b8844833d036dc18db9f7c817e767adc1487e099da5faa95cbaf7d5cb232e84dd9fbbbfe08847046e3844453f188d279550af527e1f1e4204580ad01e585bc634b08dd5e5801121b9b5185d067f8dff3a0edaf0a67bd944b50a54270c6191ff8142eeee0f4e109a2dbc9f20296d5435964046f0fdc9b7612ffd86e93b8f488bb07412d6bab485397ba9c4e38fadaf8f7cb0849d64be11e6562c23fc42fbc93e61b34a53692b0436d490ca7c1f0294a45f99da0c16fe97a39ba27c3af81dd8d6063efb18ec890c079c284ce2fe8a6d3610107fdc980368f6fded29be634c2744553fc352b913b4569ddd31798610b0cb6bddb97bb2f88b1661aba9b5a51af91b162dd22199eae29e7deee1250223ede797dffbe5d34f376346d47917dea92a96b088193c706e0196d056ba330e64bb6eaf0f8a5c8a589bf11164da60ae24ee0556a932cd81c55c31ae1ebb0a73162568eb70f436c3fb2f5a4a6f0dcada47a9bd1e08ca4a3915cb34f276709fe1eaf8978e854f01bb09c832d794c2036010af0aa49a77e539fa56990df052ac04820b359a3af5b0a19d12847d1245f48703338ad10ccca3cb8ebc5d483d8e9a695e151e96ec74d234dbda55de35b8c6ff4458913570f4748a5bcf5526a1ce890322191a2980e8f59702931afa4d49021c8870938fc672b445150f782df38532dfa4fb34edfac0ee443cc89bd17c779dfc83d4cac4fa9788b5e69ac0fb670bc49a89d1df67201d624830e1ce107d35fe588aa4f842bb577aa5024bf51667616d6c37e8d55715958f08464c9115680017d047059f56a2bcd99d66e190f09add0f437a3ba878d488bb97d96b9f37dc066196553691f130f4323931bcbc13413725b141f56a069c1168ef34be28eeea4c3cc30f6fd53649453089030d376a1cd9021bee38455a53edf605573d5bf117c07104604940e52710db31b3bfcc3a95704c7415026e98acfc731fa4d271679c649bfcfb5d976185da8420447508127d56e1345479eed27b60f23d41bdff53ac8b0a194cadc98f3c56a2a91c3b0ec4bf31d8afcc17ed441363d77256fb66a550f0c72ea8e25ce7384e291948739c2c9bf8979f902733649e07ad864c8a366377a104e17260d71d623809eb54387df65d603388c5c1b408c298ef7d0df848e34025c5ba947b3d151b684ea2bc9ce96f46e187288112717d0f1d6ed1287d423b9950822a3d9551d64bf622a57977e98e19010885833dcd70ec15c882709402918d5916cedbd8a6f31fd981d6f1ca8e7ea81d5aa17e7e1ee4c1a6cf8825f41f9b457c88270af38eef8d216ebb6189eb7aad2234872ac834b1da5ed3d6610e0a3b475f4a941dd2217662f73688ead8c4e8d83c4586f592eb1cb086958ee9764c9cd481b6f1e45f1d8949619aed94dacbefa5598f8d2581470484edf840bca0b92109b3b8dbe356e9f910b62f652eb444a334eb592644c779495c0a8205f49e51d2e462f8dbf8225da35913910956a1b0d83201a426fa8c89570657cf0c7e6e33cb40607dbcf959507b7b76dd058d86263c68720469b6c86938d509ac8b6a586e65e7e4de0afc4bd76c1497d2556ce978a9475eea0bfb1cfc71f3ad3e5286478867c3185a93297c8089c766bbcacd66ab69f2fac64db7b130bb88aee1c72283dff67fc0eea2a61ed4c0a19b44366ab5e5b97955c00262b26c637748b8472601c1c8800fb88abebbb964a50c9705921d224c736d108b8987d9be87cae76a4712c6af3415ff5523b0c93562e110999c21e16976d69ca52a29ba71763f66f22af0cce3b0175ef0d665676e145f1fac0089da4e915527cdde51ef95f684d5d337a01be107cfe85483db28fe23e12ac77afcb0cf28c6974d55e6f4d8044b51d2c756f55d633d1a14d3c41cc6aea801eb488d32f2fc181049d4e69d64df52e93401f32c772c2fa1ac4c13b0a186ff23f5fe07850a5e7f846e3230b07573c21e1fe0a34cef4a4b3f5d6bd33a5fa9fd99938b043ee6c8f7a01f55de844321b7e3c8c21649eb8fb8b55ac9f4c64b23d7519e640bf326d806e86fb5189be4de0f6d6db3acf17f09fc7ffd98b389b85999ee32bf108fdbca89953cc78c2ca67a6d8e089994afafa5893bec632f7af89709a1d835d5916fcc8fb67dd314b08adc316a368ebbbd27e6fefda699b8184792e4fbc87b166a7905e49f88b80b1642cde83580ba2ac422aedbea45a0ffc8518d2c0dc0acfc88f41d4d55dde66ff8d985b96f143ec7", 0x1000}}, 0x1006)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001a8aaaaaaaa14ac"], 0x0)

32.19724991s ago: executing program 3 (id=3714):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r7, r6, <r8=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000740)})
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r8})
ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000180)={0x8, r8})
r9 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x300, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
statx(0xffffffffffffffff, 0xfffffffffffffffd, 0x1000, 0x20, 0x0)
mount(0x0, &(0x7f0000000780)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r10, 0xffffff7f00000000, 0x1)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]})
epoll_create1(0x80000)

31.087731487s ago: executing program 2 (id=3715):
syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x1, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x1, 0x0, @rand_addr=0x64010102, {0x15, 0x4, 0x0, 0x4, 0x0, 0xe0, 0x0, 0x4, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0x4, 0x0, 0x1, 0x5}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0x800}, {@multicast2, 0x2}, {@dev, 0x4}]}]}}}}}}}, 0x0)

30.94226018s ago: executing program 3 (id=3716):
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000003c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0x8, &(0x7f0000000380))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='omfs\x00', 0x446, &(0x7f0000000240)='\x00')
shutdown(r6, 0x1)

30.888432024s ago: executing program 5 (id=3717):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x8004}, {{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/160, 0xa0}], 0x1, &(0x7f00000009c0)=""/132, 0x84}, 0x1000}, {{&(0x7f0000000a80)=@caif, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/193, 0xc1}, 0xffffffff}], 0x3, 0x140, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'syzkaller0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'dh\x00', 0x1, 0x8000a7e, 0x70}, 0x2c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_pidfd_open(0x0, 0x0)

30.611828397s ago: executing program 2 (id=3718):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001900010700bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000abf79f52ce359b407794f6ea3725407fbaffc4cc693ec21996b0031f8e607279c5927abcc4bd6b63ff09e0821999", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000100010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5934d158e34db7d5, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7fff, "ad338bf3820c404039d842e80cf3348c"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
chdir(&(0x7f0000000040)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, 0x0, 0x0)

30.538285665s ago: executing program 1 (id=3719):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
setsockopt(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x7000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x942, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}})

28.253377282s ago: executing program 3 (id=3720):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x116f, 0x1000, 0x2, 0x3ba}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r4}})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r0, 0x1)

0s ago: executing program 33 (id=3717):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x8004}, {{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/160, 0xa0}], 0x1, &(0x7f00000009c0)=""/132, 0x84}, 0x1000}, {{&(0x7f0000000a80)=@caif, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/193, 0xc1}, 0xffffffff}], 0x3, 0x140, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'syzkaller0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'dh\x00', 0x1, 0x8000a7e, 0x70}, 0x2c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_pidfd_open(0x0, 0x0)

kernel console output (not intermixed with test programs):

Device= 0.00
[  715.487335][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.526817][ T5915] usb 3-1: config 0 descriptor??
[  715.539374][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  716.428559][T16330] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[  716.463064][   T30] audit: type=1400 audit(1773349682.370:1102): avc:  denied  { relabelto } for  pid=16329 comm="syz.5.3054" name="430" dev="tmpfs" ino=2249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  716.546470][   T30] audit: type=1400 audit(1773349682.370:1103): avc:  denied  { associate } for  pid=16329 comm="syz.5.3054" name="430" dev="tmpfs" ino=2249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:"
[  716.615938][T16334] FAULT_INJECTION: forcing a failure.
[  716.615938][T16334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  716.641764][   T30] audit: type=1400 audit(1773349682.454:1104): avc:  denied  { remove_name } for  pid=8595 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  716.660807][T16335] 9p: Bad value for 'rfdno'
[  716.688196][T16334] CPU: 1 UID: 0 PID: 16334 Comm: syz.3.3056 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.688223][T16334] Tainted: [L]=SOFTLOCKUP
[  716.688229][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  716.688239][T16334] Call Trace:
[  716.688245][T16334]  <TASK>
[  716.688252][T16334]  dump_stack_lvl+0x100/0x190
[  716.688283][T16334]  should_fail_ex.cold+0x5/0xa
[  716.688305][T16334]  _copy_to_user+0x32/0xd0
[  716.688333][T16334]  simple_read_from_buffer+0xcb/0x170
[  716.688362][T16334]  proc_fail_nth_read+0x1af/0x230
[  716.688387][T16334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  716.688410][T16334]  ? rw_verify_area+0xce/0x6d0
[  716.688432][T16334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  716.688454][T16334]  vfs_read+0x1e4/0xb30
[  716.688492][T16334]  ? __pfx_vfs_read+0x10/0x10
[  716.688517][T16334]  ? __fget_files+0x215/0x3d0
[  716.688539][T16334]  ? __fget_files+0x21f/0x3d0
[  716.688563][T16334]  ksys_read+0x12a/0x250
[  716.688588][T16334]  ? __pfx_ksys_read+0x10/0x10
[  716.688619][T16334]  do_syscall_64+0x106/0xf80
[  716.688639][T16334]  ? clear_bhb_loop+0x40/0x90
[  716.688660][T16334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.688679][T16334] RIP: 0033:0x7fd09bd5cfce
[  716.688693][T16334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  716.688709][T16334] RSP: 002b:00007fd09cccefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  716.688727][T16334] RAX: ffffffffffffffda RBX: 00007fd09cccf6c0 RCX: 00007fd09bd5cfce
[  716.688739][T16334] RDX: 000000000000000f RSI: 00007fd09cccf0a0 RDI: 0000000000000004
[  716.688749][T16334] RBP: 00007fd09cccf090 R08: 0000000000000000 R09: 0000000000000000
[  716.688759][T16334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  716.688769][T16334] R13: 00007fd09c016038 R14: 00007fd09c015fa0 R15: 00007ffceb4d19f8
[  716.688794][T16334]  </TASK>
[  717.080052][   T30] audit: type=1400 audit(1773349682.454:1105): avc:  denied  { rmdir } for  pid=8595 comm="syz-executor" name="430" dev="tmpfs" ino=2249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  717.786056][ T5915] usb 3-1: USB disconnect, device number 46
[  717.876147][T16347] 9pnet_fd: p9_fd_create_tcp (16347): problem connecting socket to 127.0.0.1
[  717.886292][   T30] audit: type=1400 audit(1773349683.861:1106): avc:  denied  { mounton } for  pid=16346 comm="syz.3.3061" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  717.946050][T16347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  718.252694][T16361] netlink: 'syz.3.3065': attribute type 1 has an invalid length.
[  718.270442][T16361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3065'.
[  718.535199][T16370] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  718.596454][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'.
[  719.604725][T16370] SELinux: failed to load policy
[  721.156421][   T30] audit: type=1400 audit(1773349687.304:1107): avc:  denied  { create } for  pid=16385 comm="syz.1.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  721.242260][   T30] audit: type=1400 audit(1773349687.346:1108): avc:  denied  { write } for  pid=16385 comm="syz.1.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  721.248012][T16388] 9p: Bad value for 'rfdno'
[  721.375405][   T30] audit: type=1400 audit(1773349687.367:1109): avc:  denied  { read } for  pid=16385 comm="syz.1.3075" path="socket:[70564]" dev="sockfs" ino=70564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  721.849580][T16389] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  721.856528][T16389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  721.865699][T16389] vhci_hcd vhci_hcd.0: Device attached
[  721.909658][   T30] audit: type=1400 audit(1773349688.102:1110): avc:  denied  { write } for  pid=16394 comm="syz.2.3071" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  721.937691][T16395] random: crng reseeded on system resumption
[  722.103232][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3071'.
[  722.118744][  T792] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  722.238944][T16401] netlink: 'syz.3.3078': attribute type 1 has an invalid length.
[  722.386496][T16403] bond1: (slave gretap1): making interface the new active one
[  722.394414][T16403] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  722.428202][T16408] Invalid logical block size (16777216)
[  722.827193][T16392] vhci_hcd: connection reset by peer
[  722.898199][   T30] audit: type=1400 audit(1773349689.131:1111): avc:  denied  { remount } for  pid=16394 comm="syz.2.3071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  722.920169][   T36] vhci_hcd vhci_hcd.1: stop threads
[  722.928339][   T36] vhci_hcd vhci_hcd.1: release socket
[  722.964071][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  723.141682][   T30] audit: type=1400 audit(1773349689.394:1112): avc:  denied  { bind } for  pid=16422 comm="syz.1.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  723.194935][ T5819] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  723.240694][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'.
[  723.699485][ T5819] usb 3-1: Using ep0 maxpacket: 16
[  723.706829][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short
[  723.736727][ T5819] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config
[  723.770953][ T5819] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7
[  723.823438][ T5819] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 218, changing to 7
[  723.860820][T16436] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  723.875626][ T5819] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  723.909033][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.946017][ T5819] usb 3-1: Product: syz
[  723.952196][ T5819] usb 3-1: Manufacturer: syz
[  723.962937][ T5819] usb 3-1: SerialNumber: syz
[  724.290054][ T1842] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  724.347164][ T5875] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  724.366187][ T5915] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  724.413998][ T1842] usb 5-1: device descriptor read/64, error -71
[  724.509080][ T5875] usb 4-1: Using ep0 maxpacket: 8
[  724.515575][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  724.528732][ T5875] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  724.538072][ T5875] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  724.546230][ T5875] usb 4-1: Product: syz
[  724.552057][ T5875] usb 4-1: Manufacturer: syz
[  724.556770][ T5875] usb 4-1: SerialNumber: syz
[  724.561519][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  724.574137][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  724.587363][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  724.597360][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  724.610587][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  724.633582][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  724.645720][ T5915] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  724.652515][ T1842] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  724.655563][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.670377][ T5915] usb 2-1: Product: syz
[  724.674751][ T5915] usb 2-1: Manufacturer: syz
[  724.679577][ T5915] usb 2-1: SerialNumber: syz
[  724.689908][ T5915] usb 2-1: config 0 descriptor??
[  724.705947][ T5915] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected
[  724.718282][ T5915] ti_usb_3410_5052 2-1:0.0: missing endpoints
[  724.725023][T16449] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 !
[  724.749850][T16449] IPv6: NLM_F_CREATE should be specified when creating new route
[  724.759862][T16449] lo speed is unknown, defaulting to 1000
[  724.765686][T16449] lo speed is unknown, defaulting to 1000
[  724.772710][T16449] lo speed is unknown, defaulting to 1000
[  724.785000][T16449] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  724.791906][ T5875] usb 4-1: Invalid connection information received from device
[  724.804426][ T1842] usb 5-1: device descriptor read/64, error -71
[  724.818628][T16449] lo speed is unknown, defaulting to 1000
[  724.830471][T16449] lo speed is unknown, defaulting to 1000
[  724.837567][T16449] lo speed is unknown, defaulting to 1000
[  724.848591][T16449] lo speed is unknown, defaulting to 1000
[  724.855519][T16449] lo speed is unknown, defaulting to 1000
[  724.863933][T16449] lo speed is unknown, defaulting to 1000
[  724.905997][ T5875] usb 2-1: USB disconnect, device number 66
[  724.919161][ T1842] usb usb5-port1: attempt power cycle
[  724.995862][ T5915] usb 4-1: USB disconnect, device number 65
[  725.214075][   T30] audit: type=1400 audit(1773349691.556:1113): avc:  denied  { ioctl } for  pid=16452 comm="syz.5.3095" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  725.299617][ T1842] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  725.328960][ T1842] usb 5-1: device descriptor read/8, error -71
[  725.457279][ T5819] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  725.471147][ T5819] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  725.480724][ T5819] usb 3-1: unit 6 not found!
[  725.485391][ T5819] usb 3-1: unit 7 not found!
[  725.547479][ T5819] usb 3-1: USB disconnect, device number 47
[  725.575902][ T1842] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  725.600998][T10173] udevd[10173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.626201][ T1842] usb 5-1: device descriptor read/8, error -71
[  725.816870][ T1842] usb usb5-port1: unable to enumerate USB device
[  726.362829][T16479] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  726.774577][T16492] netlink: 'syz.3.3108': attribute type 10 has an invalid length.
[  726.803584][T16492] team0: Device ipvlan1 failed to register rx_handler
[  727.033330][  T792] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  728.766704][ T1815] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  728.949073][ T1815] usb 3-1: Using ep0 maxpacket: 8
[  728.997265][ T1815] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4
[  729.054206][ T1815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.292483][ T1815] usb 3-1: config 0 descriptor??
[  729.320480][ T1815] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  729.519282][ T1815] cxusb: set interface failed
[  729.528653][ T1815] dvb-usb: bulk message failed: -22 (1/0)
[  729.617593][ T1815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  729.654030][T16521] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  729.665087][ T1815] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  729.810589][ T1815] usb 3-1: media controller created
[  729.839665][ T1815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  729.963570][ T1815] DVB: Unable to find symbol lgdt330x_attach()
[  729.979909][ T1815] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  730.034043][ T1815] dvb-usb: bulk message failed: -22 (1/0)
[  730.060807][ T1815] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  730.224388][ T1815] usb 3-1: USB disconnect, device number 48
[  731.015006][ T1815] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[  731.212120][T16539] md: md2 stopped.
[  731.222582][   T30] audit: type=1400 audit(1773349697.866:1114): avc:  denied  { ioctl } for  pid=16529 comm="syz.4.3119" path="/578/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  731.970961][T16549] hpfs: Bad magic ... probably not HPFS
[  732.608068][ T5915] hid (null): unknown global tag 0xe
[  732.903517][ T5915] hid-generic 0004:A35D:0000.0008: unknown main item tag 0x7
[  732.925905][ T5915] hid-generic 0004:A35D:0000.0008: unknown main item tag 0x7
[  732.947963][ T5915] hid-generic 0004:A35D:0000.0008: unknown global tag 0xe
[  732.973306][ T5915] hid-generic 0004:A35D:0000.0008: item 0 4 1 14 parsing failed
[  732.995114][ T5915] hid-generic 0004:A35D:0000.0008: probe with driver hid-generic failed with error -22
[  733.493753][T16565] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  733.740464][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'.
[  733.757931][T16573] block nbd0: Unsupported socket: should be TCP or UNIX.
[  733.776121][T16571] lo speed is unknown, defaulting to 1000
[  734.449180][T16581] sd 0:0:1:0: device reset
[  735.082284][T16587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  735.237137][   T30] audit: type=1400 audit(1773349702.087:1115): avc:  denied  { ioctl } for  pid=16590 comm="syz.1.3136" path="socket:[72130]" dev="sockfs" ino=72130 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  735.789049][T16589] xt_socket: unknown flags 0x4
[  736.573946][T16612] kvm: kvm [16608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  736.596653][T16612] kvm: kvm [16608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  736.962940][T16611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3139'.
[  737.041591][T16624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  737.048139][T16624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  737.205462][T16624] vhci_hcd vhci_hcd.0: Device attached
[  737.358199][T16615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  737.748488][ T5875] usb 38-1: SetAddress Request (2) to port 0
[  737.759932][ T5875] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  737.842953][T16625] vhci_hcd: connection closed
[  737.843274][T10602] vhci_hcd vhci_hcd.2: stop threads
[  738.032130][T10602] vhci_hcd vhci_hcd.2: release socket
[  738.061242][T10602] vhci_hcd vhci_hcd.2: disconnect device
[  738.681810][ T5915] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  739.065250][ T5915] usb 2-1: device descriptor read/64, error -71
[  739.377179][ T5915] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  739.434695][T16668] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  739.529630][ T5915] usb 2-1: device descriptor read/64, error -71
[  739.680390][ T5915] usb usb2-port1: attempt power cycle
[  740.009873][T16680] xt_ecn: cannot match TCP bits for non-tcp packets
[  740.070115][ T5915] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  740.120584][   T30] audit: type=1400 audit(1773349707.200:1116): avc:  denied  { map } for  pid=16678 comm="syz.2.3154" path="socket:[72317]" dev="sockfs" ino=72317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  740.246374][ T5915] usb 2-1: device descriptor read/8, error -71
[  740.948785][  T792] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  740.982453][T16712] syzkaller0: entered promiscuous mode
[  741.006055][T16712] syzkaller0: entered allmulticast mode
[  741.143403][T16714] bridge0: port 3(syz_tun) entered blocking state
[  741.151851][T16714] bridge0: port 3(syz_tun) entered disabled state
[  741.158979][T16714] syz_tun: entered allmulticast mode
[  741.188605][T16714] syz_tun: entered promiscuous mode
[  741.198511][T16714] bridge0: port 3(syz_tun) entered blocking state
[  741.205134][T16714] bridge0: port 3(syz_tun) entered forwarding state
[  741.406208][  T792] usb 4-1: Using ep0 maxpacket: 8
[  741.414778][  T792] usb 4-1: unable to get BOS descriptor or descriptor too short
[  741.451636][  T792] usb 4-1: config 4 has an invalid interface number: 245 but max is 0
[  741.460281][  T792] usb 4-1: config 4 has no interface number 0
[  741.567124][  T792] usb 4-1: too many endpoints for config 4 interface 245 altsetting 7: 146, using maximum allowed: 30
[  741.612996][  T792] usb 4-1: config 4 interface 245 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[  741.726335][  T792] usb 4-1: config 4 interface 245 has no altsetting 0
[  741.736602][T16721] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  741.743143][T16721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  741.775848][  T792] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  741.785489][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.805472][  T792] usb 4-1: Product: syz
[  741.811759][T16721] vhci_hcd vhci_hcd.0: Device attached
[  741.820291][  T792] usb 4-1: Manufacturer: syz
[  741.831453][  T792] usb 4-1: SerialNumber: syz
[  742.069543][T16730] macsec1: entered allmulticast mode
[  742.103071][  T792] ums-alauda 4-1:4.245: USB Mass Storage device detected
[  742.206767][ T5915] usb 44-1: SetAddress Request (10) to port 0
[  742.215499][ T5915] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd
[  742.242190][  T792] usb 4-1: USB disconnect, device number 66
[  742.256661][T16736] netlink: 'syz.2.3167': attribute type 4 has an invalid length.
[  742.330387][T16722] vhci_hcd: connection closed
[  742.339953][T15294] vhci_hcd vhci_hcd.5: stop threads
[  742.341900][T16736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3167'.
[  742.344819][T15294] vhci_hcd vhci_hcd.5: release socket
[  742.415552][T15294] vhci_hcd vhci_hcd.5: disconnect device
[  742.416103][T16736] .`: renamed from bond0 (while UP)
[  742.590328][T16742] comedi comedi4: bad chanlist[0]=0x00400006 chan=6 range length=2
[  742.724407][T16742] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  742.750366][T16742] block device autoloading is deprecated and will be removed.
[  742.796470][ T5882] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  742.901315][ T5875] usb 38-1: device descriptor read/8, error -110
[  743.186963][ T5882] usb 2-1: Using ep0 maxpacket: 8
[  743.195764][ T5882] usb 2-1: config 5 has an invalid interface number: 234 but max is 0
[  743.215759][ T5882] usb 2-1: config 5 has no interface number 0
[  743.233264][ T5882] usb 2-1: config 5 interface 234 has no altsetting 0
[  743.265976][ T5882] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e
[  743.288866][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.357097][ T5882] usb 2-1: Product: syz
[  743.363551][ T5875] usb usb38-port1: attempt power cycle
[  743.390457][ T5882] usb 2-1: Manufacturer: syz
[  743.415601][ T5882] usb 2-1: SerialNumber: syz
[  744.383716][ T5875] usb usb38-port1: unable to enumerate USB device
[  744.531771][   T30] audit: type=1400 audit(1773349711.809:1117): avc:  denied  { append } for  pid=16755 comm="syz.2.3175" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  745.447916][ T5882] ipw 2-1:5.234: IPWireless converter converter detected
[  745.541111][ T5882] usb 2-1: USB disconnect, device number 71
[  745.558239][ T5882] ipw 2-1:5.234: device disconnected
[  745.816962][T16778] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3180'.
[  745.855783][T16778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.944425][T16784] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  746.056550][T16785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  746.236989][T16791] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  746.901675][ T5882] usb 3-1: new low-speed USB device number 49 using dummy_hcd
[  747.030461][   T30] audit: type=1400 audit(1773349714.476:1118): avc:  denied  { bind } for  pid=16793 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  747.111140][ T5882] usb 3-1: Invalid ep0 maxpacket: 64
[  747.168388][ T5915] usb 44-1: device descriptor read/8, error -110
[  747.223628][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.254681][ T5882] usb 3-1: new low-speed USB device number 50 using dummy_hcd
[  747.279430][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.444490][ T5882] usb 3-1: Invalid ep0 maxpacket: 64
[  747.501895][ T5882] usb usb3-port1: attempt power cycle
[  747.513161][T16803] xt_connbytes: Forcing CT accounting to be enabled
[  747.519970][T16803] set match dimension is over the limit!
[  747.574666][T16806] netlink: 'syz.5.3187': attribute type 9 has an invalid length.
[  747.582564][T16806] netlink: 'syz.5.3187': attribute type 7 has an invalid length.
[  747.590335][T16806] netlink: 'syz.5.3187': attribute type 8 has an invalid length.
[  747.605353][T16806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.615173][T16806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.486163][ T5915] usb usb44-port1: attempt power cycle
[  749.952374][T16811] lo speed is unknown, defaulting to 1000
[  750.105648][T16817] openvswitch: netlink: Flow key attr not present in new flow.
[  750.132466][ T5915] usb usb44-port1: unable to enumerate USB device
[  750.235300][ T1815] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  750.379220][ T1815] usb 5-1: Using ep0 maxpacket: 16
[  750.386185][ T1815] usb 5-1: config 0 has no interfaces?
[  750.392971][ T1815] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  750.403124][ T1815] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  750.527112][ T1815] usb 5-1: Manufacturer: syz
[  750.753626][ T1815] usb 5-1: config 0 descriptor??
[  751.033977][  T792] usb 5-1: USB disconnect, device number 97
[  751.081030][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'.
[  751.093018][ T1815] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  751.167801][T16829] ipvlan3: entered promiscuous mode
[  751.225957][ T1815] usb 3-1: device descriptor read/64, error -71
[  752.445834][ T1815] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  752.626136][ T1815] usb 3-1: device descriptor read/64, error -71
[  752.653291][T16835] 9p: Bad value for 'rfdno'
[  752.741110][ T1815] usb usb3-port1: attempt power cycle
[  753.188329][ T1815] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  753.217468][ T1815] usb 3-1: device descriptor read/8, error -71
[  753.346575][T16846] hub 9-0:1.0: USB hub found
[  753.355288][T16846] hub 9-0:1.0: 1 port detected
[  753.493179][   T30] audit: type=1400 audit(1773349721.206:1119): avc:  denied  { listen } for  pid=16840 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  753.655726][ T1815] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  753.694619][ T1815] usb 3-1: device descriptor read/8, error -71
[  753.817062][ T1815] usb usb3-port1: unable to enumerate USB device
[  753.819388][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'.
[  753.956651][T16861] netlink: 'syz.3.3202': attribute type 19 has an invalid length.
[  754.082985][T16861] netlink: 'syz.3.3202': attribute type 19 has an invalid length.
[  754.200715][T10602] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  754.211367][T16862] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  754.217992][T16862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  754.237930][T10602] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  754.336069][T16862] vhci_hcd vhci_hcd.0: Device attached
[  754.374541][T16863] vhci_hcd: connection closed
[  754.374887][T15136] vhci_hcd vhci_hcd.4: stop threads
[  754.386709][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'.
[  754.396982][T10602] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  754.410951][T15136] vhci_hcd vhci_hcd.4: release socket
[  754.416377][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035967800: rx timeout, send abort
[  754.429201][T10602] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  754.439745][T10602] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  754.449473][T15136] vhci_hcd vhci_hcd.4: disconnect device
[  754.456383][T10602] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  754.587144][   T24] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  754.604837][T10602] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  754.628165][ T1815] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  754.891036][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035967400: rx timeout, send abort
[  754.902630][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035967800: abort rx timeout. Force session deactivation
[  754.934607][ T1815] usb 2-1: device descriptor read/64, error -71
[  754.943677][T10602] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  755.105968][T16882] Invalid logical block size (33554432)
[  755.266457][ T1815] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  755.333325][T16886] netlink: 'syz.5.3210': attribute type 2 has an invalid length.
[  755.356545][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'.
[  755.375739][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035967400: abort rx timeout. Force session deactivation
[  755.431180][ T1815] usb 2-1: device descriptor read/64, error -71
[  755.765921][ T1815] usb usb2-port1: attempt power cycle
[  755.806183][T16886] hmaÓË224)
: entered promiscuous mode
[  756.121708][ T1815] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  756.130148][T16897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  756.154229][T16897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  756.165871][T16897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  756.183479][ T1815] usb 2-1: device descriptor read/8, error -71
[  756.189956][T16897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  756.197410][T16897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  756.331825][T16889] syzkaller0: entered promiscuous mode
[  756.337328][T16889] syzkaller0: entered allmulticast mode
[  756.445437][ T1815] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  756.458668][T16901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  756.478708][ T1815] usb 2-1: device descriptor read/8, error -71
[  756.501890][T16895] lo speed is unknown, defaulting to 1000
[  756.600431][ T1815] usb usb2-port1: unable to enumerate USB device
[  757.468923][T16924] overlayfs: unescaped trailing colons in lowerdir mount option.
[  757.530270][   T30] audit: type=1400 audit(1773349725.489:1120): avc:  denied  { write } for  pid=16923 comm="syz.2.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  757.726075][T16895] chnl_net:caif_netlink_parms(): no params data found
[  758.252227][T16897] Bluetooth: hci0: command tx timeout
[  758.262089][T16927] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  758.544911][T16895] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.570736][T16895] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.624773][T16895] bridge_slave_0: entered allmulticast mode
[  758.633816][T16895] bridge_slave_0: entered promiscuous mode
[  758.644428][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'.
[  758.655313][ T5915] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  758.930179][ T5915] usb 2-1: device descriptor read/64, error -71
[  759.172432][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  759.255548][T16952] bond0: Invalid ad_actor_system MAC address.
[  759.261672][T16952] bond0: option ad_actor_system: invalid value (1)
[  759.269474][T16952] bond0 (unregistering): Released all slaves
[  759.289159][T16895] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.296433][T16895] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.303808][T16895] bridge_slave_1: entered allmulticast mode
[  759.310901][T16895] bridge_slave_1: entered promiscuous mode
[  759.361278][T15294] bridge_slave_1: left allmulticast mode
[  759.366936][T15294] bridge_slave_1: left promiscuous mode
[  759.370441][ T5915] usb 2-1: device descriptor read/64, error -71
[  759.390172][T15294] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.416951][T15294] bridge_slave_0: left allmulticast mode
[  759.424369][T15294] bridge_slave_0: left promiscuous mode
[  759.433752][T15294] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.483942][ T5915] usb usb2-port1: attempt power cycle
[  759.484099][   T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  759.646110][   T24] usb 4-1: Using ep0 maxpacket: 16
[  759.838208][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  759.855351][   T24] usb 4-1: config 1 has no interface number 1
[  759.872111][   T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  759.906835][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  759.919994][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  759.933312][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  759.942612][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.950605][   T24] usb 4-1: Product: syz
[  759.960562][   T24] usb 4-1: Manufacturer: syz
[  759.965264][   T24] usb 4-1: SerialNumber: syz
[  760.045704][ T5915] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  760.060488][T15294] bond1 (unregistering): (slave gretap1): Releasing active interface
[  760.074651][ T5915] usb 2-1: device descriptor read/8, error -71
[  760.089243][T15294] dvmrp9 (unregistering): left allmulticast mode
[  760.199128][T16897] Bluetooth: hci0: command tx timeout
[  760.210596][T15294] bond1 (unregistering): Released all slaves
[  760.231658][T15294] bond0 (unregistering): Released all slaves
[  760.253637][T15294] bond2 (unregistering): (slave veth3): Releasing backup interface
[  760.269204][T15294] bond2 (unregistering): Released all slaves
[  760.299581][T16895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.316491][ T5915] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  760.343689][T16895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.360018][ T5915] usb 2-1: device descriptor read/8, error -71
[  760.402567][   T24] usb 4-1: failed to enable PITCH for EP 0x82
[  760.411217][   T24] usb 4-1: 2:1: cannot set freq 11994917 to ep 0x82
[  760.469385][T15294] tipc: Disabling bearer <udp:syz2>
[  760.498498][T15294] tipc: Left network mode
[  760.502574][ T5915] usb usb2-port1: unable to enumerate USB device
[  760.562786][T16895] team0: Port device team_slave_0 added
[  760.581287][T16895] team0: Port device team_slave_1 added
[  760.588899][   T24] usb 4-1: USB disconnect, device number 67
[  760.813825][T16895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.821424][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.927230][T16895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.024086][T16895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.054999][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.138940][T16895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.216784][T16995] binder_alloc: binder_alloc_mmap_handler: 16994 200000fed000-200001000000 already mapped failed -16
[  761.228246][   T30] audit: type=1400 audit(1773349729.363:1121): avc:  denied  { setattr } for  pid=16994 comm="syz.3.3238" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  761.277292][T16999] vivid-002: disconnect
[  761.449736][   T30] audit: type=1400 audit(1773349729.605:1122): avc:  denied  { append } for  pid=16979 comm="syz.2.3234" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  761.488267][T15294] hsr_slave_0: left promiscuous mode
[  761.495850][T15294] hsr_slave_1: left promiscuous mode
[  761.501882][T15294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.543588][   T30] audit: type=1400 audit(1773349729.710:1123): avc:  denied  { map } for  pid=16979 comm="syz.2.3234" path="socket:[75333]" dev="sockfs" ino=75333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  761.569706][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'.
[  761.581425][T15294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.871521][T15294] team0 (unregistering): Port device team_slave_1 removed
[  761.891965][T15294] team0 (unregistering): Port device team_slave_0 removed
[  762.111272][T16895] hsr_slave_0: entered promiscuous mode
[  762.117610][T16895] hsr_slave_1: entered promiscuous mode
[  762.123896][T16998] vivid-002: reconnect
[  762.169754][T16897] Bluetooth: hci0: command tx timeout
[  763.624164][    C1] vcan0: j1939_tp_rxtimer: 0xffff888037eba000: rx timeout, send abort
[  764.100545][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880596c8400: rx timeout, send abort
[  764.108857][    C1] vcan0: j1939_tp_rxtimer: 0xffff888037eba000: abort rx timeout. Force session deactivation
[  764.303748][T16897] Bluetooth: hci0: command tx timeout
[  764.585019][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880596c8400: abort rx timeout. Force session deactivation
[  764.687329][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3251'.
[  764.817108][T17061] ipvlan2: entered promiscuous mode
[  765.255654][T16895] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  765.351421][   T30] audit: type=1400 audit(1773349733.699:1124): avc:  denied  { append } for  pid=17070 comm="syz.5.3255" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  765.769267][T16895] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  765.945846][T16895] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  766.098088][T16895] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  766.533092][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'.
[  766.545898][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'.
[  766.872071][T16895] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.920144][T16895] 8021q: adding VLAN 0 to HW filter on device team0
[  766.949283][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.956478][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.017405][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.024614][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.066420][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.119244][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.243202][ T5915] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  767.428722][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  767.439164][ T5915] usb 4-1: not running at top speed; connect to a high speed hub
[  767.504648][ T5915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  767.571470][ T5915] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  767.618920][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.728854][ T5915] usb 4-1: Product: syz
[  767.735923][ T5915] usb 4-1: Manufacturer: syz
[  767.740794][ T5915] usb 4-1: SerialNumber: syz
[  767.774587][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.067974][ T5915] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  768.095293][ T5915] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  768.113389][ T5915] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  768.131579][T17151] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3263'.
[  768.131897][T17152] FAULT_INJECTION: forcing a failure.
[  768.131897][T17152] name failslab, interval 1, probability 0, space 0, times 0
[  768.150654][ T5915] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  768.164921][T17152] CPU: 0 UID: 0 PID: 17152 Comm: syz.2.3264 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  768.164953][T17152] Tainted: [L]=SOFTLOCKUP
[  768.164960][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  768.164970][T17152] Call Trace:
[  768.164977][T17152]  <TASK>
[  768.164984][T17152]  dump_stack_lvl+0x100/0x190
[  768.165018][T17152]  should_fail_ex.cold+0x5/0xa
[  768.165043][T17152]  ? sock_kmalloc+0x111/0x170
[  768.165066][T17152]  should_failslab+0xc2/0x120
[  768.165083][T17152]  __kmalloc_noprof+0xe0/0x850
[  768.165111][T17152]  sock_kmalloc+0x111/0x170
[  768.165134][T17152]  ____sys_sendmsg+0x569/0xb70
[  768.165158][T17152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  768.165188][T17152]  ___sys_sendmsg+0x190/0x1e0
[  768.165213][T17152]  ? __pfx____sys_sendmsg+0x10/0x10
[  768.165264][T17152]  __sys_sendmsg+0x170/0x220
[  768.165282][T17152]  ? __pfx___sys_sendmsg+0x10/0x10
[  768.165313][T17152]  do_syscall_64+0x106/0xf80
[  768.165331][T17152]  ? clear_bhb_loop+0x40/0x90
[  768.165351][T17152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.165369][T17152] RIP: 0033:0x7f21bfd9c799
[  768.165382][T17152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.165398][T17152] RSP: 002b:00007f21c0bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  768.165416][T17152] RAX: ffffffffffffffda RBX: 00007f21c0015fa0 RCX: 00007f21bfd9c799
[  768.165427][T17152] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005
[  768.165437][T17152] RBP: 00007f21c0bc4090 R08: 0000000000000000 R09: 0000000000000000
[  768.165448][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.165458][T17152] R13: 00007f21c0016038 R14: 00007f21c0015fa0 R15: 00007ffead777bd8
[  768.165482][T17152]  </TASK>
[  768.416310][T16895] veth0_vlan: entered promiscuous mode
[  768.430020][T16895] veth1_vlan: entered promiscuous mode
[  768.450784][T17151] netlink: 'syz.5.3263': attribute type 13 has an invalid length.
[  768.458721][T17151] netlink: 'syz.5.3263': attribute type 17 has an invalid length.
[  768.466505][T16895] veth0_macvtap: entered promiscuous mode
[  768.472648][ T5915] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  768.497648][T17151] gretap0: refused to change device tx_queue_len
[  768.508144][T17151] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  768.562554][ T5915] usb 4-1: USB disconnect, device number 68
[  768.580078][T16895] veth1_macvtap: entered promiscuous mode
[  768.653326][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  768.726989][T10185] udevd[10185]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  768.792261][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  768.829794][ T1831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  768.854932][ T1831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  768.870811][T17172] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3267'.
[  768.891462][ T1831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  769.078171][ T1831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  769.133641][T15294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.141485][T15294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.492998][T15136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.501130][T15136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.604665][T17175] openvswitch: netlink: Message has 1 unknown bytes.
[  769.612408][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.625997][T17175] openvswitch: netlink: Message has 1 unknown bytes.
[  769.641419][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.654956][T17175] openvswitch: netlink: Message has 1 unknown bytes.
[  769.764273][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.839385][T17175] openvswitch: netlink: Message has 1 unknown bytes.
[  769.856073][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.892103][T17175] openvswitch: netlink: Message has 1 unknown bytes.
[  770.049291][T17196] bond0 (unregistering): Released all slaves
[  770.618854][  T792] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  770.770970][  T792] usb 3-1: device descriptor read/64, error -71
[  771.999162][T16897] Bluetooth: hci1: command 0x0406 tx timeout
[  772.012534][  T792] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  772.050010][   T30] audit: type=1400 audit(1773349740.261:1125): avc:  denied  { write } for  pid=17214 comm="syz.1.3278" name="file2" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  772.076061][T17217] rdma_op ffff888083a509f0 conn xmit_rdma 0000000000000000
[  772.570883][   T30] audit: type=1400 audit(1773349740.261:1126): avc:  denied  { open } for  pid=17214 comm="syz.1.3278" path="/70/file2" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  772.991459][  T792] usb 3-1: device descriptor read/64, error -71
[  773.218598][ T1815] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  773.284526][  T792] usb usb3-port1: attempt power cycle
[  773.470113][ T1815] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  773.484295][ T1815] usb 5-1: config 1 has no interface number 0
[  773.492107][ T1815] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  773.517755][ T1815] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  773.530205][ T1815] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  773.555479][ T1815] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  773.565482][ T1815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.576209][ T1815] usb 5-1: Product: syz
[  773.581757][ T1815] usb 5-1: Manufacturer: syz
[  773.586975][ T1815] usb 5-1: SerialNumber: syz
[  773.634092][T17225] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  774.036652][   T30] audit: type=1400 audit(1773349742.823:1127): avc:  denied  { connect } for  pid=17246 comm="syz.2.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  774.180989][T17248] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  774.622247][   T30] audit: type=1400 audit(1773349743.348:1128): avc:  denied  { write } for  pid=17246 comm="syz.2.3286" path="socket:[76803]" dev="sockfs" ino=76803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  775.229481][ T5819] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  775.490707][T17258] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3288'.
[  775.746832][T17257] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3288'.
[  775.818731][ T5819] usb 4-1: Using ep0 maxpacket: 16
[  775.829387][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.841636][T17261] binder: 17259:17261 ioctl 4018620d 0 returned -22
[  775.850136][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49863, setting to 1024
[  775.886435][ T5819] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  775.910979][ T5819] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  775.936781][T17267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3293'.
[  775.946977][ T5819] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  775.961489][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  775.970821][ T5819] usb 4-1: SerialNumber: syz
[  776.085884][T17270] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3292'.
[  776.103284][T17241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  776.115690][ T5819] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  776.609306][  T792] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  776.642897][ T5819] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  776.662649][ T5819] usb 4-1: USB disconnect, device number 69
[  776.831448][  T792] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  776.861720][  T792] usb 3-1: config 0 has no interface number 0
[  776.872206][ T1815] usb 5-1: Incompatible driver and firmware versions
[  776.895478][  T792] usb 3-1: config 0 interface 41 has no altsetting 0
[  776.911306][   T30] audit: type=1400 audit(1773349745.836:1129): avc:  denied  { read } for  pid=17275 comm="syz.3.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  776.933358][ T1815] usb 5-1: USB disconnect, device number 98
[  776.954365][  T792] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  776.971319][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.991059][  T792] usb 3-1: Product: syz
[  776.995249][  T792] usb 3-1: Manufacturer: syz
[  777.041014][  T792] usb 3-1: SerialNumber: syz
[  777.057754][  T792] usb 3-1: config 0 descriptor??
[  777.986511][  T792] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  778.200014][ T1815] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  778.210450][  T792] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  778.226700][  T792] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  778.237004][  T792] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  778.263405][  T792] usb 3-1: USB disconnect, device number 59
[  778.367069][ T1815] usb 2-1: Using ep0 maxpacket: 16
[  778.382500][ T1815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  778.413787][ T1815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49863, setting to 1024
[  778.464304][ T1815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  778.503195][ T1815] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  778.534316][ T1815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  778.553786][ T1815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  778.561883][ T1815] usb 2-1: SerialNumber: syz
[  778.681714][T17307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  778.789753][ T1815] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  779.196810][ T1815] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  779.243759][ T1815] usb 2-1: USB disconnect, device number 80
[  779.350779][T17320] netlink: 'syz.3.3308': attribute type 10 has an invalid length.
[  779.372372][T17318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.421714][T17318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.847650][ T1815] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  780.042399][ T1815] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  780.055511][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.078318][   T30] audit: type=1400 audit(1773349749.175:1130): avc:  denied  { read } for  pid=17331 comm="syz.2.3312" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  780.117697][ T1815] usb 4-1: config 0 descriptor??
[  780.141396][ T1815] gspca_main: cpia1-2.14.0 probing 0813:0001
[  780.163161][   T30] audit: type=1400 audit(1773349749.196:1131): avc:  denied  { open } for  pid=17331 comm="syz.2.3312" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  780.232946][   T30] audit: type=1400 audit(1773349749.196:1132): avc:  denied  { ioctl } for  pid=17331 comm="syz.2.3312" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  780.537343][ T1815] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  781.195487][ T1815] gspca_cpia1: usb_control_msg 02, error -71
[  781.213907][ T1815] gspca_cpia1: usb_control_msg 05, error -71
[  781.232779][ T1815] cpia1 4-1:0.0: unexpected systemstate: 00
[  781.259578][ T1815] usb 4-1: USB disconnect, device number 70
[  781.580029][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3320'.
[  782.005421][T17362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36277 sclass=netlink_route_socket pid=17362 comm=syz.1.3320
[  782.981868][ T5819] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  783.238312][ T5819] usb 2-1: Using ep0 maxpacket: 32
[  783.260417][ T5819] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[  783.288392][ T5819] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  783.450629][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.218559][T17372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3323'.
[  784.254795][T17372] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.264401][T17372] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.465191][T17382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3326'.
[  784.858523][ T5819] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  785.057603][ T5819] usb 5-1: Using ep0 maxpacket: 16
[  785.197472][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.252293][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  785.297747][ T5819] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  785.330894][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.469050][ T5819] usb 5-1: config 0 descriptor??
[  785.724586][ T5819] usbhid 5-1:0.0: can't add hid device: -71
[  785.730647][ T5819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  785.742874][ T1815] usb 2-1: USB disconnect, device number 81
[  785.797766][ T5819] usb 5-1: USB disconnect, device number 99
[  785.811504][   T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  785.992743][   T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  786.019658][   T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  786.057727][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  786.094359][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  786.137837][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  786.175622][   T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  786.200587][   T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  786.231349][   T24] usb 4-1: Product: syz
[  786.235542][   T24] usb 4-1: Manufacturer: syz
[  786.296965][   T24] cdc_wdm 4-1:1.0: skipping garbage
[  786.302225][   T24] cdc_wdm 4-1:1.0: skipping garbage
[  786.333353][   T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  786.352850][   T24] cdc_wdm 4-1:1.0: Unknown control protocol
[  787.320969][T17402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.329672][T17402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.369440][   T30] audit: type=1400 audit(1773349756.787:1133): avc:  denied  { read write } for  pid=17399 comm="syz.3.3330" name="cdc-wdm0" dev="devtmpfs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  787.438656][   T30] audit: type=1400 audit(1773349756.787:1134): avc:  denied  { open } for  pid=17399 comm="syz.3.3330" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  788.524128][ T5918] usb 4-1: USB disconnect, device number 71
[  788.651783][ T5819] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  789.290399][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'.
[  789.368808][T17444] : entered promiscuous mode
[  789.634787][ T5819] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  789.677157][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3339'.
[  789.713015][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.744562][ T5819] usb 2-1: config 0 descriptor??
[  789.986211][T17435] vcan0: entered allmulticast mode
[  790.038985][ T5819] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0e
[  790.120783][ T5819] hackrf 2-1:0.0: Could not detect board
[  790.154452][ T5819] hackrf 2-1:0.0: probe with driver hackrf failed with error -32
[  790.224347][ T5819] usb 2-1: USB disconnect, device number 82
[  791.051889][T16898] Bluetooth: hci3: command 0x0406 tx timeout
[  792.191581][ T5819] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  792.362952][ T5819] usb 5-1: Using ep0 maxpacket: 8
[  792.435966][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short
[  792.446769][ T5819] usb 5-1: config 3 has an invalid interface number: 92 but max is 1
[  792.456911][ T5819] usb 5-1: config 3 has an invalid interface number: 120 but max is 1
[  792.486741][ T5819] usb 5-1: config 3 has an invalid interface number: 92 but max is 1
[  792.525368][ T5819] usb 5-1: config 3 has no interface number 0
[  792.542039][ T5819] usb 5-1: config 3 has no interface number 1
[  792.582194][ T5819] usb 5-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0
[  792.610585][ T5819] usb 5-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  792.639192][ T5819] usb 5-1: config 3 interface 92 has no altsetting 0
[  792.658190][ T5819] usb 5-1: config 3 interface 92 has no altsetting 1
[  792.677552][ T5819] usb 5-1: config 3 interface 120 has no altsetting 0
[  792.687685][ T1842] usb 2-1: new low-speed USB device number 83 using dummy_hcd
[  792.739332][ T5819] usb 5-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7
[  792.773053][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.801817][ T5819] usb 5-1: Product: â ‰
[  792.820093][ T5819] usb 5-1: Manufacturer: �
[  792.825188][ T5819] usb 5-1: SerialNumber: ÑŠ
[  792.870941][ T1842] usb 2-1: unable to get BOS descriptor or descriptor too short
[  792.887659][ T1842] usb 2-1: unable to read config index 0 descriptor/start: -71
[  792.896396][ T1842] usb 2-1: can't read configurations, error -71
[  793.103178][ T5819] usb 5-1: selecting invalid altsetting 1
[  793.111338][ T5819] sierra 5-1:3.92: Sierra USB modem converter detected
[  793.135909][ T5819] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  793.175437][ T5819] sierra 5-1:3.120: Sierra USB modem converter detected
[  793.193757][ T5819] usb 5-1: Sierra USB modem converter now attached to ttyUSB1
[  793.210853][ T5819] usb 5-1: USB disconnect, device number 100
[  793.240414][ T5819] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  793.260955][ T5819] sierra 5-1:3.92: device disconnected
[  793.280737][ T5819] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  793.312868][ T5819] sierra 5-1:3.120: device disconnected
[  793.693181][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586acc00: rx timeout, send abort
[  793.973267][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  794.169496][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586ad800: rx timeout, send abort
[  794.182474][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586acc00: abort rx timeout. Force session deactivation
[  794.236164][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  794.245298][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.258486][   T24] usb 3-1: Product: syz
[  794.262883][   T24] usb 3-1: Manufacturer: syz
[  794.267476][   T24] usb 3-1: SerialNumber: syz
[  794.653996][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586ad800: abort rx timeout. Force session deactivation
[  795.184270][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  795.507396][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  795.810910][ T5882] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  796.066166][ T5918] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[  796.074262][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  796.084916][ T5882] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[  796.094660][ T5882] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  796.104581][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.358259][ T5918] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  797.370382][ T5918] usb 2-1: config 0 has no interface number 0
[  797.378948][ T5918] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  797.449118][   T30] audit: type=1326 audit(1773349767.401:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.478840][ T5918] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  797.490255][ T5918] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  797.508095][ T5918] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  797.518135][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  797.530858][   T30] audit: type=1326 audit(1773349767.401:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.559081][T17517] netlink: 'syz.3.3366': attribute type 39 has an invalid length.
[  797.566947][ T5918] usb 2-1: Product: syz
[  797.566969][ T5918] usb 2-1: SerialNumber: syz
[  797.577397][ T5918] usb 2-1: config 0 descriptor??
[  797.577997][   T30] audit: type=1326 audit(1773349767.401:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.587322][ T5918] cm109 2-1:0.8: invalid payload size 0, expected 4
[  797.657886][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input33
[  797.668341][   T30] audit: type=1326 audit(1773349767.401:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.693135][   T30] audit: type=1326 audit(1773349767.401:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.721745][   T30] audit: type=1326 audit(1773349767.401:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.747630][   T30] audit: type=1326 audit(1773349767.454:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.772397][   T30] audit: type=1326 audit(1773349767.454:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.812678][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.821914][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.829119][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.836230][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.843328][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.850437][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.857559][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.868379][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.872370][   T30] audit: type=1326 audit(1773349767.454:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.875508][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.900161][   T30] audit: type=1326 audit(1773349767.454:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.3.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09bd9c799 code=0x7ffc0000
[  797.906634][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  797.943707][ T5918] usb 2-1: USB disconnect, device number 85
[  797.949714][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  797.970764][ T5918] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  798.174483][   T24] cdc_ncm 3-1:1.0: bind() failure
[  798.194718][   T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  798.209175][   T24] cdc_ncm 3-1:1.1: bind() failure
[  798.236381][   T24] usb 3-1: USB disconnect, device number 60
[  798.426027][ T1842] usb 5-1: USB disconnect, device number 101
[  799.124991][T17530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3373'.
[  799.306878][T17536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3373'.
[  799.402162][   T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  799.547846][   T24] usb 3-1: device descriptor read/64, error -71
[  799.560079][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'.
[  799.632990][T17543] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3377'.
[  799.642226][T17543] net_ratelimit: 43 callbacks suppressed
[  799.642241][T17543] openvswitch: netlink: Flow key attr not present in new flow.
[  799.784703][   T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  799.944660][   T24] usb 3-1: device descriptor read/64, error -71
[  800.078946][   T24] usb usb3-port1: attempt power cycle
[  800.163435][T17559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.259342][T17559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.564873][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  800.775926][   T24] usb 3-1: device descriptor read/8, error -71
[  801.040489][   T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  801.073434][   T24] usb 3-1: device descriptor read/8, error -71
[  801.192955][   T24] usb usb3-port1: unable to enumerate USB device
[  801.221180][ T1842] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  801.544876][ T1842] usb 5-1: Using ep0 maxpacket: 8
[  801.561244][ T1842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  801.754730][ T1842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  801.972412][ T1842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  801.983523][ T1842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  802.009562][ T1842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  802.048632][ T1842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.599582][ T1842] usb 5-1: GET_CAPABILITIES returned 0
[  802.631513][ T1842] usbtmc 5-1:16.0: can't read capabilities
[  802.678548][   T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  802.840663][   T24] usb 2-1: Using ep0 maxpacket: 8
[  802.891735][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  802.909016][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  803.621183][   T24] usb 2-1: config 0 has no interfaces?
[  803.666315][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[  803.680721][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.706335][   T24] usb 2-1: Product: syz
[  803.710962][   T24] usb 2-1: Manufacturer: syz
[  803.721922][   T24] usb 2-1: SerialNumber: syz
[  803.751110][   T24] usb 2-1: config 0 descriptor??
[  803.856506][ T5915] usb 5-1: USB disconnect, device number 102
[  804.294509][   T24] usb 2-1: USB disconnect, device number 86
[  804.763044][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3395'.
[  804.858589][T17602] ipvlan4: entered promiscuous mode
[  804.996564][T17608] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  805.003113][T17608] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  805.011341][T17608] vhci_hcd vhci_hcd.0: Device attached
[  805.153438][T17609] vhci_hcd: connection closed
[  805.157524][ T1831] vhci_hcd vhci_hcd.3: stop threads
[  805.173801][ T1831] vhci_hcd vhci_hcd.3: release socket
[  805.206134][ T1831] vhci_hcd vhci_hcd.3: disconnect device
[  805.998448][T17624] binder: 17623:17624 ioctl 4018620d 0 returned -22
[  806.630970][ T5915] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  808.242863][ T5915] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  808.259595][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.298468][ T5915] usb 2-1: config 0 descriptor??
[  808.527397][ T5915] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0e
[  808.628331][ T5915] hackrf 2-1:0.0: Could not detect board
[  808.662037][ T5915] hackrf 2-1:0.0: probe with driver hackrf failed with error -32
[  808.729638][ T5915] usb 2-1: USB disconnect, device number 87
[  808.799554][T17652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.836402][T17652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.888600][   T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  809.060149][   T24] usb 4-1: Using ep0 maxpacket: 8
[  809.085385][   T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  809.121632][   T24] usb 4-1: config 179 has no interface number 0
[  809.143978][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  809.174706][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  809.202621][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  809.241262][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  809.280523][   T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  809.317098][   T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  809.336386][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.353669][T17650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  810.005746][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34
[  810.183715][T17650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.275367][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'.
[  810.317369][T17650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.369909][   T24] usb 4-1: USB disconnect, device number 72
[  810.376076][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  810.376122][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  812.442909][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'.
[  812.590469][T17689] wlan0 speed is unknown, defaulting to 1000
[  812.597345][T17689] wlan0 speed is unknown, defaulting to 1000
[  812.613663][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.307344][T17689] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  813.481952][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  813.481970][   T30] audit: type=1400 audit(1773349784.242:1209): avc:  denied  { ioctl } for  pid=17691 comm="syz.1.3419" path="socket:[77676]" dev="sockfs" ino=77676 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  813.517326][ T5915] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  813.582170][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.634604][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.676626][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.690535][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.699660][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  813.718340][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.724735][ T5915] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  813.743749][T17689] wlan0 speed is unknown, defaulting to 1000
[  813.750196][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.013676][   T30] audit: type=1400 audit(1773349784.620:1210): avc:  denied  { bind } for  pid=17700 comm="syz.5.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  814.034140][ T5915] usb 3-1: config 0 descriptor??
[  814.049397][ T5915] pwc: Askey VC010 type 2 USB webcam detected.
[  814.240209][   T30] audit: type=1400 audit(1773349785.029:1211): avc:  denied  { write } for  pid=17705 comm="syz.5.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  814.323829][ T5915] pwc: send_video_command error -71
[  815.290478][ T5915] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  815.298018][ T5915] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  815.528651][T17712] 9p: Bad value for 'rfdno'
[  815.537792][ T5915] usb 3-1: USB disconnect, device number 65
[  818.651607][   T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  818.659546][  T792] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  819.156047][  T792] usb 5-1: Using ep0 maxpacket: 32
[  819.164965][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.262679][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.273311][  T792] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  819.282941][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.302220][   T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  819.312077][  T792] usb 5-1: config 0 descriptor??
[  819.319957][   T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  819.328260][   T24] usb 2-1: Manufacturer: syz
[  819.335235][   T24] usb 2-1: config 0 descriptor??
[  819.347790][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.361608][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.446359][T17750] sg_write: data in/out 926365459/1199 bytes for SCSI command 0x0-- guessing data in;
[  819.446359][T17750]    program syz.5.3434 not setting count and/or reply_len properly
[  819.512488][  T792] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  819.542934][  T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  819.563616][  T792] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  819.571145][  T792] usb 5-1: media controller created
[  819.592233][  T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  819.636285][T17754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.645847][T17754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.804343][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3430'.
[  819.975564][ T1841] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  820.071227][   T30] audit: type=1400 audit(1773349791.150:1212): avc:  denied  { mounton } for  pid=17763 comm="syz.3.3438" path="/114/file0" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  820.123422][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.169016][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  820.317641][ T1841] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  820.375548][ T1841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.398451][ T1841] usb 3-1: config 0 descriptor??
[  820.461050][   T30] audit: type=1400 audit(1773349791.570:1213): avc:  denied  { unmount } for  pid=15763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  820.825129][ T1841] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  820.830972][T17770] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  820.832635][ T1841] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  820.851514][ T1841] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  820.859072][ T1841] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  820.869077][ T1841] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  821.002514][ T1841] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  821.026363][   T24] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71
[  821.064794][   T24] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71
[  821.160164][   T24] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71
[  821.169333][ T1841] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 20 got 0
[  821.178937][ T1841] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22
[  821.527078][   T24] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  821.535676][ T1841] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense
[  821.556448][ T1841] playstation 0003:054C:0DF2.000A: Failed to create dualsense.
[  821.564730][   T24] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71
[  821.587071][ T1841] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22
[  821.607371][   T24] usb 2-1: USB disconnect, device number 88
[  821.615096][  T792] az6027: usb out operation failed. (-110)
[  821.634262][  T792] az6027: usb out operation failed. (-32)
[  821.664965][ T1841] usb 3-1: USB disconnect, device number 66
[  821.697030][  T792] stb0899_attach: Driver disabled by Kconfig
[  821.737218][  T792] az6027: no front-end attached
[  821.737218][  T792] 
[  821.737749][T17781] fido_id[17781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  821.785553][  T792] az6027: usb out operation failed. (-71)
[  821.792267][  T792] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  821.833567][  T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35
[  821.903630][  T792] dvb-usb: schedule remote query interval to 400 msecs.
[  821.979674][  T792] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  822.059940][  T792] usb 5-1: USB disconnect, device number 103
[  823.114748][  T792] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  823.218799][ T5819] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  823.379772][T17801] 9p: Bad value for 'rfdno'
[  823.386051][T17801] 9p: Bad value for 'rfdno'
[  823.392084][T17801] 9p: Bad value for 'rfdno'
[  823.398191][T17801] 9p: Bad value for 'rfdno'
[  823.404277][T17801] 9p: Bad value for 'rfdno'
[  823.410146][T17801] 9p: Bad value for 'rfdno'
[  823.416152][T17801] 9p: Bad value for 'rfdno'
[  823.422153][T17801] 9p: Bad value for 'rfdno'
[  823.428178][T17801] 9p: Bad value for 'rfdno'
[  823.433908][T17801] 9p: Bad value for 'rfdno'
[  823.440022][T17801] 9p: Bad value for 'rfdno'
[  823.446102][T17801] 9p: Bad value for 'rfdno'
[  823.453170][T17801] 9p: Bad value for 'rfdno'
[  823.458020][T17801] 9p: Bad value for 'rfdno'
[  823.462837][T17801] 9p: Bad value for 'rfdno'
[  823.467480][T17801] 9p: Bad value for 'rfdno'
[  823.472157][T17801] 9p: Bad value for 'rfdno'
[  823.476791][T17801] 9p: Bad value for 'rfdno'
[  823.481460][T17801] 9p: Bad value for 'rfdno'
[  823.486102][T17801] 9p: Bad value for 'rfdno'
[  823.491500][T17801] 9p: Bad value for 'rfdno'
[  823.496211][T17801] 9p: Bad value for 'rfdno'
[  823.500887][T17801] 9p: Bad value for 'rfdno'
[  823.505528][T17801] 9p: Bad value for 'rfdno'
[  823.510189][T17801] 9p: Bad value for 'rfdno'
[  823.514839][T17801] 9p: Bad value for 'rfdno'
[  823.519498][T17801] 9p: Bad value for 'rfdno'
[  823.524139][T17801] 9p: Bad value for 'rfdno'
[  823.528834][T17801] 9p: Bad value for 'rfdno'
[  823.533730][T17801] 9p: Bad value for 'rfdno'
[  823.538425][T17801] 9p: Bad value for 'rfdno'
[  823.543088][T17801] 9p: Bad value for 'rfdno'
[  823.548086][T17801] 9p: Bad value for 'rfdno'
[  823.720594][ T5819] usb 4-1: device descriptor read/64, error -71
[  823.962855][   T30] audit: type=1400 audit(1773349795.077:1214): avc:  denied  { remount } for  pid=17775 comm="syz.5.3441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  824.166599][ T5819] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  824.356731][ T5819] usb 4-1: device descriptor read/64, error -71
[  824.472203][ T5819] usb usb4-port1: attempt power cycle
[  824.731399][T17818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  824.762590][T17818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  824.842110][ T5819] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  824.881287][ T5819] usb 4-1: device descriptor read/8, error -71
[  824.890174][   T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  824.947209][  T792] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  825.054264][   T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  825.063620][ T1815] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  825.072290][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.092106][   T24] usb 2-1: config 0 descriptor??
[  825.109002][  T792] usb 3-1: Using ep0 maxpacket: 16
[  825.118547][ T5819] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  825.120870][  T792] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  825.147731][  T792] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  825.151073][ T5819] usb 4-1: device descriptor read/8, error -71
[  825.157368][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.182407][  T792] usb 3-1: config 0 descriptor??
[  825.195990][  T792] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  825.224664][ T1815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  825.244732][ T1815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  825.262779][ T1815] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  825.280572][ T5819] usb usb4-port1: unable to enumerate USB device
[  825.281868][ T1815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  825.296542][ T1815] usb 5-1: SerialNumber: syz
[  825.304403][   T24] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0e
[  825.319547][   T24] hackrf 2-1:0.0: Could not detect board
[  825.328210][   T24] hackrf 2-1:0.0: probe with driver hackrf failed with error -32
[  825.382265][ T5819] usb 2-1: USB disconnect, device number 89
[  826.328171][ T1815] usb 5-1: 0:2 : does not exist
[  826.334030][  T792] usb 3-1: USB disconnect, device number 67
[  826.348898][ T1815] usb 5-1: unit 5 not found!
[  826.858811][ T1815] usb 5-1: USB disconnect, device number 104
[  826.922743][T10557] udevd[10557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  827.305938][T17846] netlink: 'syz.4.3462': attribute type 3 has an invalid length.
[  827.341487][T17846] netlink: 'syz.4.3462': attribute type 1 has an invalid length.
[  827.675307][T17850] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  827.681854][T17850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  827.733017][T17850] vhci_hcd vhci_hcd.0: Device attached
[  827.743772][   T30] audit: type=1400 audit(1773349799.213:1215): avc:  denied  { mounton } for  pid=17853 comm="syz.2.3464" path="/proc/395/task" dev="proc" ino=80185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  827.919558][ T5915] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  828.033502][ T5819] usb 44-1: SetAddress Request (14) to port 0
[  828.033970][ T5819] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd
[  828.061333][T17855] vivid-001: disconnect
[  828.140141][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.152074][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  828.163341][ T5915] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  828.173001][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  828.181385][ T5915] usb 5-1: SerialNumber: syz
[  828.613981][ T5918] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  828.659271][T17824] vivid-001: reconnect
[  828.676865][T17851] vhci_hcd: connection reset by peer
[  828.682923][T10602] vhci_hcd vhci_hcd.5: stop threads
[  828.688138][T10602] vhci_hcd vhci_hcd.5: release socket
[  828.705500][T10602] vhci_hcd vhci_hcd.5: disconnect device
[  828.883151][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  828.894696][ T5918] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  828.909410][ T1815] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  828.937272][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0
[  828.956431][ T5918] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  828.969620][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.992342][ T5918] usb 3-1: config 0 descriptor??
[  829.062996][ T1815] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  829.076844][ T1815] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  829.091953][ T1815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.106752][ T1815] usb 2-1: Product: syz
[  829.119255][ T1815] usb 2-1: Manufacturer: syz
[  829.127290][ T1815] usb 2-1: SerialNumber: syz
[  829.175945][  T792] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  829.318802][  T792] usb 4-1: Using ep0 maxpacket: 32
[  829.325518][  T792] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  829.361365][ T1815] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  829.370013][ T1815] command write [95] error -22
[  829.380782][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.393851][ T1815] usb 2-1: USB disconnect, device number 90
[  829.404288][  T792] usb 4-1: config 0 descriptor??
[  829.419533][ T5915] usb 5-1: 0:2 : does not exist
[  829.425305][ T5915] usb 5-1: unit 5 not found!
[  829.447684][  T792] as10x_usb: device has been detected
[  829.462332][  T792] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  829.530175][  T792] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  829.583483][ T5918] usbhid 3-1:0.0: can't add hid device: -71
[  829.609625][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  829.628202][ T5915] usb 5-1: USB disconnect, device number 105
[  829.657442][ T5918] usb 3-1: USB disconnect, device number 68
[  829.659879][  T792] as10x_usb: error during firmware upload part1
[  829.702897][  T792] Registered device nBox DVB-T Dongle
[  829.716627][  T792] usb 4-1: USB disconnect, device number 77
[  829.769074][  T792] Unregistered device nBox DVB-T Dongle
[  829.770343][  T792] as10x_usb: device has been disconnected
[  829.793453][T17882] FAULT_INJECTION: forcing a failure.
[  829.793453][T17882] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  829.814608][T17882] CPU: 1 UID: 0 PID: 17882 Comm: syz.5.3472 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  829.814635][T17882] Tainted: [L]=SOFTLOCKUP
[  829.814639][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  829.814646][T17882] Call Trace:
[  829.814650][T17882]  <TASK>
[  829.814654][T17882]  dump_stack_lvl+0x100/0x190
[  829.814676][T17882]  should_fail_ex.cold+0x5/0xa
[  829.814697][T17882]  ? prepare_alloc_pages+0x16d/0x5f0
[  829.814719][T17882]  should_fail_alloc_page+0xeb/0x140
[  829.814738][T17882]  prepare_alloc_pages+0x1f0/0x5f0
[  829.814756][T17882]  ? stack_depot_save_flags+0x27/0x9d0
[  829.814781][T17882]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  829.814797][T17882]  ? kasan_save_stack+0x30/0x50
[  829.814817][T17882]  ? __lock_acquire+0x4a5/0x2630
[  829.814836][T17882]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  829.814875][T17882]  ? __lock_acquire+0x4a5/0x2630
[  829.814901][T17882]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  829.814923][T17882]  ? policy_nodemask+0xed/0x4f0
[  829.814935][T17882]  alloc_pages_mpol+0x1fb/0x550
[  829.814946][T17882]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  829.814956][T17882]  ? find_held_lock+0x2b/0x80
[  829.814969][T17882]  ? is_bpf_text_address+0x8a/0x1a0
[  829.814987][T17882]  ? is_bpf_text_address+0x8a/0x1a0
[  829.815016][T17882]  folio_alloc_mpol_noprof+0x36/0x340
[  829.815037][T17882]  shmem_alloc_folio+0x135/0x160
[  829.815058][T17882]  shmem_alloc_and_add_folio+0x371/0xd40
[  829.815077][T17882]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  829.815094][T17882]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  829.815112][T17882]  shmem_get_folio_gfp+0x6ab/0x1900
[  829.815137][T17882]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  829.815162][T17882]  ? filemap_map_pages+0xe69/0x2020
[  829.815189][T17882]  shmem_fault+0x1f9/0xa20
[  829.815208][T17882]  ? __lock_acquire+0x4a5/0x2630
[  829.815225][T17882]  ? __pfx_shmem_fault+0x10/0x10
[  829.815242][T17882]  ? __pfx_filemap_map_pages+0x10/0x10
[  829.815260][T17882]  __do_fault+0x10d/0x550
[  829.815288][T17882]  do_fault+0xabb/0x1990
[  829.815310][T17882]  __handle_mm_fault+0x180f/0x2b60
[  829.815334][T17882]  ? mt_find+0x45e/0x8e0
[  829.815352][T17882]  ? __pfx___handle_mm_fault+0x10/0x10
[  829.815364][T17882]  ? __pfx_mt_find+0x10/0x10
[  829.815384][T17882]  ? find_vma+0xbf/0x140
[  829.815400][T17882]  ? __pfx_find_vma+0x10/0x10
[  829.815424][T17882]  handle_mm_fault+0x36d/0xa20
[  829.815451][T17882]  do_user_addr_fault+0x74c/0x12f0
[  829.815478][T17882]  exc_page_fault+0x6f/0xd0
[  829.815494][T17882]  asm_exc_page_fault+0x26/0x30
[  829.815505][T17882] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  829.815521][T17882] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  829.815531][T17882] RSP: 0018:ffffc90003287ab0 EFLAGS: 00050206
[  829.815540][T17882] RAX: 0000000000000001 RBX: 0000200000001a00 RCX: 0000000000000ab8
[  829.815547][T17882] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88808d7e4600
[  829.815557][T17882] RBP: 00000000000010b8 R08: 0000000000000001 R09: ffffed1011afca16
[  829.815568][T17882] R10: ffff88808d7e50b7 R11: 0000000000000000 R12: 0000000000000000
[  829.815578][T17882] R13: ffff88808d7e4000 R14: 1ffff92000650f61 R15: ffffc90003287e64
[  829.815601][T17882]  _copy_from_user+0x98/0xd0
[  829.815627][T17882]  ____sys_sendmsg+0x1d1/0xb70
[  829.815646][T17882]  ? __pfx_____sys_sendmsg+0x10/0x10
[  829.815666][T17882]  ___sys_sendmsg+0x190/0x1e0
[  829.815682][T17882]  ? __pfx____sys_sendmsg+0x10/0x10
[  829.815738][T17882]  __sys_sendmsg+0x170/0x220
[  829.815757][T17882]  ? __pfx___sys_sendmsg+0x10/0x10
[  829.815783][T17882]  do_syscall_64+0x106/0xf80
[  829.815795][T17882]  ? clear_bhb_loop+0x40/0x90
[  829.815808][T17882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.815819][T17882] RIP: 0033:0x7f80fe99c799
[  829.815827][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  829.815839][T17882] RSP: 002b:00007f80ff805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  829.815854][T17882] RAX: ffffffffffffffda RBX: 00007f80fec16090 RCX: 00007f80fe99c799
[  829.815865][T17882] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004
[  829.815875][T17882] RBP: 00007f80ff805090 R08: 0000000000000000 R09: 0000000000000000
[  829.815885][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  829.815894][T17882] R13: 00007f80fec16128 R14: 00007f80fec16090 R15: 00007fff5c59e6f8
[  829.815918][T17882]  </TASK>
[  829.821183][T10557] udevd[10557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  830.553571][T17888] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  830.769416][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  832.871553][ T1841] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  832.890908][ T5819] usb 44-1: device descriptor read/8, error -110
[  833.005332][ T1841] usb 3-1: device descriptor read/64, error -71
[  833.214395][ T5918] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  833.233870][ T1841] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  833.293336][ T5819] usb usb44-port1: attempt power cycle
[  833.357252][ T5918] usb 5-1: Using ep0 maxpacket: 16
[  833.499661][ T1841] usb 3-1: device descriptor read/64, error -71
[  833.502434][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.209500][ T1841] usb usb3-port1: attempt power cycle
[  834.464670][ T5819] usb usb44-port1: unable to enumerate USB device
[  834.477854][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49863, setting to 1024
[  834.513455][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  834.534081][ T5918] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  834.560949][ T1841] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  834.576234][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  834.586367][ T1841] usb 3-1: device descriptor read/8, error -71
[  834.596726][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  834.719219][ T5918] usb 5-1: SerialNumber: syz
[  834.731874][T17941] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  834.740605][ T5918] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  834.833678][   T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  834.843130][ T1841] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  834.872196][ T1841] usb 3-1: device descriptor read/8, error -71
[  834.946399][ T5918] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  834.976705][   T24] usb 2-1: Using ep0 maxpacket: 16
[  834.981950][ T1841] usb usb3-port1: unable to enumerate USB device
[  834.990298][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  835.000125][ T5918] usb 5-1: USB disconnect, device number 106
[  835.008706][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  835.039467][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  835.050752][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.068509][   T24] usb 2-1: Product: syz
[  835.080430][   T24] usb 2-1: Manufacturer: syz
[  835.093527][   T24] usb 2-1: SerialNumber: syz
[  835.310195][   T24] usb 2-1: 0:2 : does not exist
[  835.372600][   T24] usb 2-1: USB disconnect, device number 91
[  835.954363][T17968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  835.964978][T17968] xt_TPROXY: Can be used only with -p tcp or -p udp
[  837.285833][T17987] syzkaller0: entered promiscuous mode
[  837.296070][T17987] syzkaller0: entered allmulticast mode
[  837.424297][ T5819] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  838.907052][ T5819] usb 2-1: Using ep0 maxpacket: 8
[  838.930610][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.997938][ T5819] usb 2-1: config 0 has no interfaces?
[  839.017010][ T5819] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  839.100327][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802c000800: rx timeout, send abort
[  839.131852][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'.
[  839.448818][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.477239][ T5819] usb 2-1: Product: syz
[  839.505482][ T5819] usb 2-1: Manufacturer: syz
[  839.525978][ T5819] usb 2-1: SerialNumber: syz
[  839.548305][ T5882] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  839.571965][ T5819] usb 2-1: config 0 descriptor??
[  839.758236][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  839.786249][ T5882] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  839.843444][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.903200][ T5882] gspca_main: nw80x-2.14.0 probing 055f:d001
[  840.357361][ T5882] gspca_nw80x: reg_r err -32
[  840.366056][ T1841] usb 2-1: USB disconnect, device number 92
[  840.384383][ T5882] nw80x 4-1:3.0: probe with driver nw80x failed with error -32
[  841.061001][ T1841] usb 4-1: USB disconnect, device number 78
[  841.167820][T18029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3514'.
[  841.182036][T18029] geneve2: entered allmulticast mode
[  844.844041][ T1841] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  844.946273][T18064] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  844.998442][ T1841] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  845.039744][ T1841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.102575][ T1841] usb 2-1: Product: syz
[  845.106772][ T1841] usb 2-1: Manufacturer: syz
[  845.160080][ T1841] usb 2-1: SerialNumber: syz
[  845.240775][   T30] audit: type=1326 audit(1773349817.576:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.329791][   T30] audit: type=1326 audit(1773349817.576:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.496066][   T30] audit: type=1326 audit(1773349817.576:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.579997][   T30] audit: type=1326 audit(1773349817.576:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.655812][   T30] audit: type=1326 audit(1773349817.576:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.748418][ T1841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  845.773928][T18056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.782556][T18056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.806031][ T1841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  845.829636][   T30] audit: type=1326 audit(1773349817.576:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  845.922922][   T30] audit: type=1326 audit(1773349817.576:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bfd9c799 code=0x7ffc0000
[  846.031069][T18077] SET target dimension over the limit!
[  846.846200][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  846.857856][ T1841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  846.886768][ T1841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  846.920906][ T1841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  847.187378][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.222956][ T1841] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  847.270708][ T1841] usb 2-1: USB disconnect, device number 93
[  847.576121][T18093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3534'.
[  850.484341][T18122] xt_cgroup: path and classid specified
[  851.178746][   T30] audit: type=1400 audit(1773349823.813:1223): avc:  denied  { create } for  pid=18125 comm="syz.4.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  851.381129][T18130] lo speed is unknown, defaulting to 1000
[  851.414829][T18130] wlan0 speed is unknown, defaulting to 1000
[  851.591894][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3547'.
[  851.601637][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3547'.
[  851.713924][ T5819] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  851.901830][ T5819] usb 2-1: Using ep0 maxpacket: 16
[  851.948300][ T5819] usb 2-1: config 0 has no interfaces?
[  851.967896][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  851.986500][ T5819] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  851.995112][ T5819] usb 2-1: Manufacturer: syz
[  852.003588][ T5819] usb 2-1: config 0 descriptor??
[  852.007704][T18145] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3549'.
[  852.106533][T18145] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  852.206915][ T1841] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  852.435435][ T1815] usb 2-1: USB disconnect, device number 94
[  852.607018][ T1841] usb 5-1: Using ep0 maxpacket: 16
[  852.627604][ T1841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.644747][ T1841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49863, setting to 1024
[  852.662808][ T1841] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  852.680628][ T1841] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  852.710893][T18156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  852.717689][ T1841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  852.740645][ T1841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  852.759093][ T1841] usb 5-1: SerialNumber: syz
[  852.802242][T18142] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  852.813902][ T1841] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  853.019708][ T1841] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  853.040818][ T1841] usb 5-1: USB disconnect, device number 108
[  854.035372][ T5819] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  854.035802][ T5817] Bluetooth: Unexpected start frame (len 16)
[  854.209968][ T5819] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  854.232071][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.237852][T18171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3558'.
[  854.275240][ T5819] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  854.310880][ T5819] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  854.341380][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'.
[  854.362743][ T5882] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[  854.377407][ T5819] usb 2-1: Manufacturer: syz
[  854.386399][ T5819] usb 2-1: config 0 descriptor??
[  854.798281][ T5882] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  854.798917][T18165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  854.818434][ T5882] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  854.829261][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.838630][T18165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  854.874235][ T5882] usb 5-1: Product: syz
[  854.894471][ T5882] usb 5-1: Manufacturer: syz
[  854.908387][ T5819] rc_core: IR keymap rc-hauppauge not found
[  854.918185][ T5882] usb 5-1: SerialNumber: syz
[  854.923865][ T5819] Registered IR keymap rc-empty
[  854.935377][ T5819] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[  854.969075][ T5819] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input36
[  855.013172][ T5819] usb 2-1: USB disconnect, device number 95
[  855.092297][T18184] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3561'.
[  855.137444][ T5882] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  855.150248][ T5882] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  855.254722][ T5882] usb 5-1: USB disconnect, device number 109
[  855.305405][T10557] udevd[10557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  856.561044][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3569'.
[  858.688098][T18246] Bluetooth: MGMT ver 1.23
[  858.743498][T18242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  858.787376][T18242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  858.866432][   T30] audit: type=1400 audit(1773349831.886:1224): avc:  denied  { write } for  pid=18237 comm="syz.4.3580" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  858.936633][T18242] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  859.027216][ T5819] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  859.254902][ T5819] usb 3-1: Using ep0 maxpacket: 16
[  859.265113][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  859.278403][ T5819] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  859.287930][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.290275][ T5819] usb 3-1: config 0 descriptor??
[  859.294321][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  859.344354][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'.
[  859.446443][T18255] syzkaller1: entered promiscuous mode
[  859.454895][T18255] syzkaller1: entered allmulticast mode
[  860.465753][ T5882] usb 3-1: USB disconnect, device number 73
[  861.748041][T18274] sit1: entered allmulticast mode
[  862.069315][T18286] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  862.080815][T18286] SELinux: failed to load policy
[  862.543866][ T5882] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[  862.742961][ T5882] usb 5-1: not running at top speed; connect to a high speed hub
[  862.775289][ T5882] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  862.808666][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  862.830962][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.156981][ T5882] usb 5-1: Product: syz
[  863.167968][ T5882] usb 5-1: Manufacturer: syz
[  863.173382][ T5882] usb 5-1: SerialNumber: syz
[  863.336669][T18311] netlink: 'syz.1.3604': attribute type 4 has an invalid length.
[  863.370254][T18311] netlink: 'syz.1.3604': attribute type 32 has an invalid length.
[  863.378095][T18311] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3604'.
[  863.493930][  T792] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  863.513786][T18290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  863.521009][T18290] IPv6: NLM_F_CREATE should be set when creating new route
[  863.694686][  T792] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  864.050830][  T792] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  864.085411][  T792] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  864.101005][  T792] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  864.110637][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.128983][  T792] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  864.823840][T10173] udevd[10173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  864.830518][  T792] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  865.383766][   T30] audit: type=1400 audit(1773349838.721:1225): avc:  denied  { map } for  pid=18306 comm="syz.3.3602" path="socket:[83089]" dev="sockfs" ino=83089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  865.521624][ T5882] usb 5-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[  865.534450][ T5882] usb 5-1: incorrect wMaxPacketSize 0x3ff for BADD profile
[  865.651223][T18346] geneve2: entered promiscuous mode
[  865.656531][T18346] geneve2: entered allmulticast mode
[  866.799807][ T5882] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  866.852008][ T5882] usb 5-1: USB disconnect, device number 110
[  866.891170][T18356] syzkaller0: entered promiscuous mode
[  866.917175][ T5819] usb 4-1: USB disconnect, device number 79
[  866.928614][T18356] syzkaller0: entered allmulticast mode
[  866.931391][T10557] udevd[10557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  867.865259][ T5819] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  868.065282][ T5819] usb 4-1: device descriptor read/64, error -71
[  868.594844][ T5819] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  868.800734][ T5819] usb 4-1: device descriptor read/64, error -71
[  868.956128][ T5819] usb usb4-port1: attempt power cycle
[  869.218443][T18401] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3630'.
[  869.284417][ T5819] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  869.342712][ T5819] usb 4-1: device descriptor read/8, error -71
[  869.542940][   T30] audit: type=1400 audit(1773349843.089:1226): avc:  denied  { write } for  pid=18413 comm="syz.4.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  870.046418][ T5819] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  870.099874][ T5819] usb 4-1: device descriptor read/8, error -71
[  870.769022][ T5819] usb usb4-port1: unable to enumerate USB device
[  872.913347][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3640'.
[  873.966346][ T5817] Bluetooth: hci0: command 0x0406 tx timeout
[  874.033466][T18449] siw: device registration error -23
[  875.150835][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'.
[  875.236532][T18454] ipvlan2: entered promiscuous mode
[  876.388993][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'.
[  883.644549][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3657'.
[  883.709593][T18497] block nbd0: Unsupported socket: should be TCP or UNIX.
[  883.744341][T18499] FAULT_INJECTION: forcing a failure.
[  883.744341][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  883.857290][T18499] CPU: 0 UID: 0 PID: 18499 Comm: syz.4.3658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  883.857321][T18499] Tainted: [L]=SOFTLOCKUP
[  883.857329][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  883.857339][T18499] Call Trace:
[  883.857345][T18499]  <TASK>
[  883.857353][T18499]  dump_stack_lvl+0x100/0x190
[  883.857390][T18499]  should_fail_ex.cold+0x5/0xa
[  883.857414][T18499]  _copy_from_iter+0x1f4/0x1690
[  883.857446][T18499]  ? alloc_pages_mpol+0x25a/0x550
[  883.857464][T18499]  ? __pfx__copy_from_iter+0x10/0x10
[  883.857489][T18499]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  883.857516][T18499]  copy_page_from_iter+0xde/0x180
[  883.857545][T18499]  tun_build_skb.constprop.0+0x2ea/0x15d0
[  883.857578][T18499]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  883.857600][T18499]  ? unwind_get_return_address+0x59/0xa0
[  883.857621][T18499]  ? arch_stack_walk+0xa6/0xf0
[  883.857654][T18499]  ? _kstrtoull+0x13c/0x1f0
[  883.857673][T18499]  ? __pfx__kstrtoull+0x10/0x10
[  883.857694][T18499]  tun_get_user+0x16d0/0x3e10
[  883.857728][T18499]  ? __pfx_tun_get_user+0x10/0x10
[  883.857754][T18499]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  883.857791][T18499]  ? find_held_lock+0x2b/0x80
[  883.857813][T18499]  ? tun_get+0x191/0x370
[  883.857833][T18499]  ? tun_get+0x191/0x370
[  883.857860][T18499]  tun_chr_write_iter+0xdc/0x200
[  883.857887][T18499]  vfs_write+0x6ac/0x1070
[  883.857915][T18499]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  883.857939][T18499]  ? __pfx_vfs_write+0x10/0x10
[  883.857964][T18499]  ? find_held_lock+0x2b/0x80
[  883.858002][T18499]  ksys_write+0x12a/0x250
[  883.858029][T18499]  ? __pfx_ksys_write+0x10/0x10
[  883.858062][T18499]  do_syscall_64+0x106/0xf80
[  883.858083][T18499]  ? clear_bhb_loop+0x40/0x90
[  883.858105][T18499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.858124][T18499] RIP: 0033:0x7f584b95cfce
[  883.858139][T18499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  883.858156][T18499] RSP: 002b:00007f584c8cdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  883.858196][T18499] RAX: ffffffffffffffda RBX: 00007f584c8ce6c0 RCX: 00007f584b95cfce
[  883.858208][T18499] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8
[  883.858219][T18499] RBP: 00007f584c8ce090 R08: 0000000000000000 R09: 0000000000000000
[  883.858229][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.858240][T18499] R13: 00007f584bc16038 R14: 00007f584bc15fa0 R15: 00007ffca42a7958
[  883.858264][T18499]  </TASK>
[  887.073076][   T30] audit: type=1400 audit(1773349861.430:1227): avc:  denied  { map } for  pid=18525 comm="syz.4.3669" path="socket:[82918]" dev="sockfs" ino=82918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  887.128766][T18532] loop6: detected capacity change from 0 to 7
[  887.182492][T18534] 9pnet_fd: Insufficient options for proto=fd
[  887.226938][   T30] audit: type=1400 audit(1773349861.462:1228): avc:  denied  { write } for  pid=18525 comm="syz.4.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  887.403726][T18532] Dev loop6: unable to read RDB block 7
[  887.432322][T18532]  loop6: unable to read partition table
[  887.530120][T18532] loop6: partition table beyond EOD, truncated
[  887.536494][T18532] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  887.574040][ T5915] usb 4-1: new full-speed USB device number 84 using dummy_hcd
[  887.894908][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  887.921744][ T5915] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  887.976194][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.164296][ T5915] usb 4-1: config 0 descriptor??
[  888.264823][ T5915] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  888.445470][T18545] syzkaller1: entered promiscuous mode
[  888.509202][T18545] syzkaller1: entered allmulticast mode
[  888.593126][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.627018][T18547] 9p: Bad value for 'rfdno'
[  888.661931][T18531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.678061][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.734333][T18531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.829735][T18549] FAULT_INJECTION: forcing a failure.
[  888.829735][T18549] name failslab, interval 1, probability 0, space 0, times 0
[  888.849147][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'.
[  888.902149][T18549] CPU: 0 UID: 0 PID: 18549 Comm: syz.1.3675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  888.902182][T18549] Tainted: [L]=SOFTLOCKUP
[  888.902189][T18549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  888.902199][T18549] Call Trace:
[  888.902205][T18549]  <TASK>
[  888.902213][T18549]  dump_stack_lvl+0x100/0x190
[  888.902247][T18549]  should_fail_ex.cold+0x5/0xa
[  888.902273][T18549]  should_failslab+0xc2/0x120
[  888.902292][T18549]  __kmalloc_cache_noprof+0x7a/0x6f0
[  888.902313][T18549]  ? vhost_task_create+0xee/0x370
[  888.902335][T18549]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  888.902361][T18549]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  888.902390][T18549]  vhost_task_create+0xee/0x370
[  888.902411][T18549]  ? __pfx_vhost_task_create+0x10/0x10
[  888.902432][T18549]  ? trace_contention_end+0x140/0x180
[  888.902458][T18549]  ? __pfx_vhost_task_fn+0x10/0x10
[  888.902481][T18549]  ? __pfx___mutex_lock+0x10/0x10
[  888.902501][T18549]  ? kasan_quarantine_put+0x104/0x240
[  888.902526][T18549]  ? lockdep_hardirqs_on+0x78/0x100
[  888.902552][T18549]  kvm_mmu_post_init_vm+0x1b3/0x370
[  888.902575][T18549]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[  888.902596][T18549]  ? kvm_vcpu_ioctl+0x155c/0x1730
[  888.902628][T18549]  kvm_vcpu_ioctl+0x730/0x1730
[  888.902656][T18549]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  888.902683][T18549]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  888.902709][T18549]  ? do_vfs_ioctl+0x226/0x13e0
[  888.902737][T18549]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  888.902763][T18549]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  888.902794][T18549]  ? __fget_files+0x215/0x3d0
[  888.902811][T18549]  ? hook_file_ioctl_common+0x146/0x410
[  888.902851][T18549]  ? selinux_file_ioctl+0x139/0x290
[  888.902872][T18549]  ? selinux_file_ioctl+0xb4/0x290
[  888.902895][T18549]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  888.902923][T18549]  __x64_sys_ioctl+0x18e/0x210
[  888.902951][T18549]  do_syscall_64+0x106/0xf80
[  888.902970][T18549]  ? clear_bhb_loop+0x40/0x90
[  888.902993][T18549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.903012][T18549] RIP: 0033:0x7f75f719c799
[  888.903028][T18549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.903045][T18549] RSP: 002b:00007f75f80a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  888.903062][T18549] RAX: ffffffffffffffda RBX: 00007f75f7416090 RCX: 00007f75f719c799
[  888.903074][T18549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d
[  888.903085][T18549] RBP: 00007f75f80a3090 R08: 0000000000000000 R09: 0000000000000000
[  888.903095][T18549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.903106][T18549] R13: 00007f75f7416128 R14: 00007f75f7416090 R15: 00007fff5b94cd68
[  888.903132][T18549]  </TASK>
[  889.881348][T18531] vlan2: entered allmulticast mode
[  890.920640][T18531] team0: entered allmulticast mode
[  891.323638][T18531] team_slave_0: entered allmulticast mode
[  891.385555][T18531] team_slave_1: entered allmulticast mode
[  893.544382][   T30] audit: type=1400 audit(1773349868.297:1229): avc:  denied  { attach_queue } for  pid=18544 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  893.837345][ T5915] usb 4-1: USB disconnect, device number 84
[  894.665563][T18576] lo speed is unknown, defaulting to 1000
[  894.741614][T18579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  894.822338][T18579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  894.927371][T18576] wlan0 speed is unknown, defaulting to 1000
[  895.026983][T18583] 9p: Bad value for 'rfdno'
[  895.251602][ T5882] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  895.410723][ T5817] Bluetooth: hci2: command 0x0406 tx timeout
[  895.521610][T18588] netlink: 'syz.4.3685': attribute type 1 has an invalid length.
[  895.635303][ T5882] usb 4-1: Using ep0 maxpacket: 16
[  895.660542][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.671418][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  895.701723][ T5882] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  895.746354][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.828102][T18588] 8021q: adding VLAN 0 to HW filter on device bond1
[  896.064200][ T5882] usb 4-1: config 0 descriptor??
[  896.074295][ T5882] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  906.947425][ T1841] usb 4-1: USB disconnect, device number 85
[  907.205769][T18625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  907.240299][T18625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.440672][ T5915] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  913.567752][T18651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.577412][T18651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.774652][T18668] lo speed is unknown, defaulting to 1000
[  915.782006][T18668] wlan0 speed is unknown, defaulting to 1000
[  924.946889][ T5819] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  925.721391][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'.
[  926.220791][ T5819] usb 4-1: Using ep0 maxpacket: 16
[  926.814227][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short
[  926.822808][ T5819] usb 4-1: config 8 has an invalid interface number: 46 but max is 0
[  926.852112][ T5819] usb 4-1: config 8 has no interface number 0
[  926.858762][ T5819] usb 4-1: config 8 interface 46 has no altsetting 0
[  926.898638][T18692] syzkaller0: entered promiscuous mode
[  926.919260][T18692] syzkaller0: entered allmulticast mode
[  926.932690][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db
[  927.243168][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=117, SerialNumber=3
[  927.275885][ T5819] usb 4-1: Product: syz
[  927.363569][ T5819] usb 4-1: Manufacturer: syz
[  927.418117][ T5819] usb 4-1: SerialNumber: syz
[  927.509203][ T5819] usb 4-1: can't set config #8, error -71
[  927.601690][ T5819] usb 4-1: USB disconnect, device number 87
[  928.529951][T18705] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  928.587857][T18705] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1067.989805][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1067.996780][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P18718/1:b..l
[ 1068.005347][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=89545, q=833 ncpus=2)
[ 1068.013061][    C1] task:syz-executor    state:R  running task     stack:28440 pid:18718 tgid:18718 ppid:8595   task_flags:0x400040 flags:0x00080002
[ 1068.027955][    C1] Call Trace:
[ 1068.031241][    C1]  <TASK>
[ 1068.034172][    C1]  __schedule+0xfee/0x6120
[ 1068.038588][    C1]  ? is_bpf_text_address+0x8a/0x1a0
[ 1068.043789][    C1]  ? bpf_ksym_find+0x128/0x1c0
[ 1068.048564][    C1]  ? __kernel_text_address+0xd/0x30
[ 1068.053769][    C1]  ? __pfx___schedule+0x10/0x10
[ 1068.058623][    C1]  ? mark_held_locks+0x40/0x70
[ 1068.063395][    C1]  preempt_schedule_irq+0x50/0x90
[ 1068.068419][    C1]  irqentry_exit+0x17b/0x670
[ 1068.073009][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1068.078986][    C1] RIP: 0010:rcu_read_lock_held+0x1e/0x50
[ 1068.084620][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 87 16 a3 09 ba 01 00 00 00 85 c0 75 07 89 d0 c3 cc cc cc cc e8 d2 c8 00 00 <84> c0 74 1a e8 d9 09 01 00 84 c0 74 11 be ff ff ff ff 48 c7 c7 20
[ 1068.104226][    C1] RSP: 0018:ffffc90004ccf938 EFLAGS: 00000286
[ 1068.110294][    C1] RAX: 0000000000000001 RBX: 000000000008c534 RCX: 1ffff11027fe3446
[ 1068.118261][    C1] RDX: 0000000000000000 RSI: ffffffff8c1afb20 RDI: ffffffff8e1268e0
[ 1068.126230][    C1] RBP: ffff88801d180000 R08: 0000000000000006 R09: 0000000000001000
[ 1068.134194][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[ 1068.142157][    C1] R13: 0000000002ae02bb R14: 0000000000000002 R15: 0000000005140683
[ 1068.150135][    C1]  ? rcu_read_lock_held+0x1e/0x50
[ 1068.155163][    C1]  lookup_page_ext+0x6e/0x100
[ 1068.159844][    C1]  __update_page_owner_free_handle.isra.0+0xa4/0x4d0
[ 1068.166534][    C1]  __reset_page_owner+0x93/0x190
[ 1068.171480][    C1]  __free_frozen_pages+0x7e1/0x10d0
[ 1068.176684][    C1]  qlist_free_all+0x47/0xe0
[ 1068.181221][    C1]  kasan_quarantine_reduce+0x1a0/0x1f0
[ 1068.186683][    C1]  __kasan_slab_alloc+0x69/0x90
[ 1068.191536][    C1]  __kvmalloc_node_noprof+0x316/0xa00
[ 1068.196908][    C1]  ? simple_xattr_alloc+0x4a/0xa0
[ 1068.201932][    C1]  ? shmem_initxattrs+0x3a0/0x570
[ 1068.206955][    C1]  simple_xattr_alloc+0x4a/0xa0
[ 1068.211808][    C1]  shmem_initxattrs+0x225/0x570
[ 1068.216666][    C1]  security_inode_init_security+0x242/0x370
[ 1068.222562][    C1]  ? __pfx_shmem_initxattrs+0x10/0x10
[ 1068.227928][    C1]  ? __pfx_security_inode_init_security+0x10/0x10
[ 1068.234353][    C1]  shmem_symlink+0x15f/0xa00
[ 1068.238941][    C1]  ? __pfx_may_create+0x10/0x10
[ 1068.243793][    C1]  ? __pfx_shmem_symlink+0x10/0x10
[ 1068.248922][    C1]  ? inode_permission+0x374/0x620
[ 1068.253947][    C1]  ? tomoyo_path_symlink+0x97/0xe0
[ 1068.259065][    C1]  vfs_symlink+0x178/0x4d0
[ 1068.263485][    C1]  filename_symlinkat+0x2a6/0x560
[ 1068.268513][    C1]  ? __pfx_filename_symlinkat+0x10/0x10
[ 1068.274056][    C1]  ? strncpy_from_user+0x19d/0x2d0
[ 1068.279173][    C1]  ? do_getname+0x191/0x390
[ 1068.283676][    C1]  __x64_sys_symlinkat+0x9c/0xe0
[ 1068.288618][    C1]  do_syscall_64+0x106/0xf80
[ 1068.293201][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1068.297876][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1068.303769][    C1] RIP: 0033:0x7f80fe99b857
[ 1068.308184][    C1] RSP: 002b:00007fff5c59ea58 EFLAGS: 00000202 ORIG_RAX: 000000000000010a
[ 1068.316589][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80fe99b857
[ 1068.324553][    C1] RDX: 00007f80fea33c52 RSI: 00000000ffffff9c RDI: 00007fff5c59eaf0
[ 1068.332517][    C1] RBP: 00007fff5c59ea9c R08: 0000000000000001 R09: 00000000ffffffff
[ 1068.340479][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000232
[ 1068.348441][    C1] R13: 00000000000927c0 R14: 00000000000eca01 R15: 00007fff5c59eaf0
[ 1068.356418][    C1]  </TASK>
[ 1068.359433][    C1] rcu: rcu_preempt kthread starved for 1291 jiffies! g89545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1068.370556][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1068.380515][    C1] rcu: RCU grace-period kthread stack dump:
[ 1068.386394][    C1] task:rcu_preempt     state:R  running task     stack:27832 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1068.399881][    C1] Call Trace:
[ 1068.403151][    C1]  <TASK>
[ 1068.406078][    C1]  __schedule+0xfee/0x6120
[ 1068.410494][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1068.415444][    C1]  ? __pfx___schedule+0x10/0x10
[ 1068.420285][    C1]  ? find_held_lock+0x2b/0x80
[ 1068.424959][    C1]  ? schedule+0x2bf/0x390
[ 1068.429284][    C1]  schedule+0xdd/0x390
[ 1068.433345][    C1]  schedule_timeout+0x127/0x280
[ 1068.438193][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1068.443567][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1068.448852][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1068.454650][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[ 1068.460115][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[ 1068.464885][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1068.470174][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1068.475117][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[ 1068.480319][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1068.485084][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1068.490888][    C1]  rcu_gp_kthread+0x179/0x230
[ 1068.495564][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1068.500760][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1068.506565][    C1]  ? __kthread_parkme+0x18c/0x230
[ 1068.511592][    C1]  ? kthread+0x13a/0x450
[ 1068.515826][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1068.521022][    C1]  kthread+0x370/0x450
[ 1068.525082][    C1]  ? __pfx_kthread+0x10/0x10
[ 1068.529665][    C1]  ret_from_fork+0x754/0xd80
[ 1068.534249][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1068.539354][    C1]  ? __switch_to+0x7b4/0x1120
[ 1068.544029][    C1]  ? __pfx_kthread+0x10/0x10
[ 1068.548611][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1068.553386][    C1]  </TASK>
[ 1068.556396][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1068.562714][    C1] CPU: 1 UID: 0 PID: 15291 Comm: kworker/u8:19 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1068.573901][    C1] Tainted: [L]=SOFTLOCKUP
[ 1068.578216][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1068.588263][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1068.595026][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20
[ 1068.601790][    C1] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9
[ 1068.621398][    C1] RSP: 0018:ffffc90000a08798 EFLAGS: 00000246
[ 1068.627464][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a5058ea
[ 1068.635427][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1068.643394][    C1] RBP: ffff88805a61e040 R08: 0000000000000007 R09: 0000000000000000
[ 1068.651362][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805a61e0c4
[ 1068.659330][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[ 1068.667298][    C1] FS:  0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000
[ 1068.676226][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1068.682815][    C1] CR2: 0000555570ea2a28 CR3: 0000000034b90000 CR4: 00000000003526f0
[ 1068.690787][    C1] Call Trace:
[ 1068.694066][    C1]  <IRQ>
[ 1068.696900][    C1]  ip6t_do_table+0x613/0x1c90
[ 1068.701589][    C1]  ? __local_bh_enable_ip+0x9e/0x120
[ 1068.706877][    C1]  ? ip6t_do_table+0xc1d/0x1c90
[ 1068.711727][    C1]  ? __pfx_ip6t_do_table+0x10/0x10
[ 1068.716847][    C1]  ip6table_mangle_hook+0xc3/0x770
[ 1068.721959][    C1]  ? __pfx_nf_conntrack_in+0x10/0x10
[ 1068.727242][    C1]  ? __netif_receive_skb_core.constprop.0+0xd4d/0x3550
[ 1068.734094][    C1]  ? __do_replace+0x8b0/0x990
[ 1068.738771][    C1]  ? __pfx_ip6table_mangle_hook+0x10/0x10
[ 1068.744503][    C1]  nf_hook_slow+0xbf/0x220
[ 1068.748923][    C1]  nf_hook.constprop.0+0x2a6/0x750
[ 1068.754037][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1068.759246][    C1]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[ 1068.764885][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1068.770088][    C1]  ? __pfx_ipv6_rcv+0x10/0x10
[ 1068.774789][    C1]  ipv6_rcv+0xa4/0x3d0
[ 1068.778866][    C1]  ? __pfx_ipv6_rcv+0x10/0x10
[ 1068.783539][    C1]  __netif_receive_skb_one_core+0x12d/0x1e0
[ 1068.789436][    C1]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[ 1068.795866][    C1]  ? lock_acquire+0x1cf/0x380
[ 1068.800547][    C1]  ? process_backlog+0x32a/0x1580
[ 1068.805574][    C1]  ? process_backlog+0x32a/0x1580
[ 1068.810599][    C1]  __netif_receive_skb+0x1f/0x120
[ 1068.815627][    C1]  process_backlog+0x37a/0x1580
[ 1068.820483][    C1]  __napi_poll.constprop.0+0xaf/0x450
[ 1068.825863][    C1]  net_rx_action+0xa40/0xf20
[ 1068.830462][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1068.835579][    C1]  ? mark_held_locks+0x40/0x70
[ 1068.840345][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[ 1068.845538][    C1]  ? tmigr_handle_remote+0x132/0x380
[ 1068.850836][    C1]  ? mark_held_locks+0x40/0x70
[ 1068.855626][    C1]  handle_softirqs+0x1eb/0x9e0
[ 1068.860399][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1068.865684][    C1]  ? irqtime_account_irq+0x176/0x2d0
[ 1068.870968][    C1]  ? __alloc_skb+0x5b7/0x710
[ 1068.875558][    C1]  do_softirq+0xac/0xe0
[ 1068.879711][    C1]  </IRQ>
[ 1068.882632][    C1]  <TASK>
[ 1068.885990][    C1]  __local_bh_enable_ip+0xf8/0x120
[ 1068.891103][    C1]  __alloc_skb+0x5db/0x710
[ 1068.895509][    C1]  ? __alloc_skb+0x5b7/0x710
[ 1068.900092][    C1]  ? __pfx___alloc_skb+0x10/0x10
[ 1068.905034][    C1]  ? kfree_skbmem+0x19f/0x210
[ 1068.909727][    C1]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1068.915376][    C1]  process_one_work+0x9d7/0x1920
[ 1068.920329][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1068.925708][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[ 1068.931862][    C1]  worker_thread+0x5da/0xe40
[ 1068.936471][    C1]  ? kthread+0x13a/0x450
[ 1068.940707][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1068.945811][    C1]  kthread+0x370/0x450
[ 1068.949873][    C1]  ? __pfx_kthread+0x10/0x10
[ 1068.954464][    C1]  ret_from_fork+0x754/0xd80
[ 1068.959048][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1068.964158][    C1]  ? __switch_to+0x7b4/0x1120
[ 1068.968832][    C1]  ? __pfx_kthread+0x10/0x10
[ 1068.973417][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1068.978190][    C1]  </TASK>