last executing test programs:

9m36.891942216s ago: executing program 3 (id=5564):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r2 = dup(r1)
io_setup(0x2017, &(0x7f00000009c0)=<r3=>0x0)
io_submit(r3, 0x0, &(0x7f0000000500))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x5)
read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020)
timerfd_create(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0)
syz_open_dev$dvb_demux(0x0, 0x5, 0x2a4000)

9m34.349074993s ago: executing program 3 (id=5575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad0000000160a01020000000000000000030000050900010073797a310000000008000740000000020c00054000000000000000020900020073797a3000000000080007400000000288000380080002400000000454000380140001006970766c616e300000000000000000001400010070696d3672656731000000000000000014000100766c616e300000000000000000000000140001006d6163766c616e30000000000000000018000380140001006970366772653000760000000000000008000140000000000800014000000000140000001100010000000000000000000900000a"], 0xf8}}, 0x4000080)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async)
io_setup(0x4, &(0x7f00000003c0)=<r2=>0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000600)})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0xc5) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000880)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x77, 0x3, 0xffff, 0x4, 0x8000, 0x400, "1d1e4913195cc2faad68e9bbd40f96cd38cb5a685dc43053e5d2283b519e1acee2d89fad1228e200061881f8374e495347ed42ecfd54f504e6b1797d4eb790960b841669bb6eb668e120db554cadb6a4e4946ee3bc7a09c2d58db388eedba331db1b92aa36752fbbbcc96da6771dd4bd0f0222de55ee57"}}, 0x18f)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000106fcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB='=\x00\x00\v3J}\x00'], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20000811) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000fedbdf2500000000080008000300000005000d001000000014000b00fe8000000000000000000000000000bb05000d001e00000008000700", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="06000600020000000800090000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000080) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x2280, 0x4)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000a40)={0x0, 0x8001, 0x7fff, 0x1}) (async)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r1, 0x0, 0x0, 0x3b0}])

9m33.952945318s ago: executing program 3 (id=5579):
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
r2 = fsmount(r0, 0x0, 0x3)
r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f00000034c0)=@vmx={0x5, 0x0, 0x2080, {0x0, 0x58000, {}, 0x0, 0x4000000000000000}})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x1000)
setresuid(0xee01, r8, r8)
r9 = openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)

9m32.760219591s ago: executing program 3 (id=5584):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2451}, 0x1c) (async)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000540)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x3, 0x40}]}, 0xc, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async)
r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@main=@item_012={0x1, 0x0, 0xc, "8b"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
ioctl$HIDIOCGNAME(r3, 0x80404806, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102fd"], 0x0) (async)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f000000a6c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="b11c", 0x2}], 0x1, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000841}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x4, 0x4000040) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x40002, 0x0, {0xd, @pix_mp={0x1, 0x803, 0x0, 0x0, 0xa, [{0xfffffffe}, {0x0, 0x400000}, {0x5}, {0xfffffffd}, {0x10005}, {0xc9, 0x100}, {0x100000, 0x8000002}, {0x3ff, 0xcfb}], 0x4, 0x0, 0x4, 0x0, 0x3}}})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x41)
socket$inet6_udplite(0xa, 0x2, 0x88)

9m32.393133474s ago: executing program 3 (id=5587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000206030a00000000000000000a00000605000400030000002c00078008000a40000000030800174000000009060004404e21000008000a400080000e08000a4000000101"], 0x48}, 0x1, 0x0, 0x0, 0x4804}, 0x804)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}], {0x14}}, 0x74}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0x4c000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="01040000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060009000000"], 0x30}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

9m30.776792851s ago: executing program 3 (id=5594):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xff01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sched_getparam(r3, &(0x7f0000000400))
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
close(0x3)
move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x267)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

9m30.364172677s ago: executing program 32 (id=5594):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xff01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sched_getparam(r3, &(0x7f0000000400))
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
close(0x3)
move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x267)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

1m24.837588138s ago: executing program 5 (id=7163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000250a00000008000300", @ANYRES32=r3, @ANYBLOB="08003700000000000800090005ac0f0018006e8004000200080002000470ac1800020004000100040002000a000a001582aa487da500000c000700f1d0951994627eeb82086600000034ef0e2cc5a7ccae10fc3774fa05de06caacc7504c23d88661f1eaa7d49454785ccc85a5c48bc35e9fd0edfa33981bfdabffdd34f8347a4a22d4fb"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008840)

1m24.79218207s ago: executing program 5 (id=7164):
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0xfd0})
r0 = socket$inet6(0xa, 0x5, 0xfffffff1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, '.\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xc}, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x1b, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r0}, r2, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x40000000000000, 0x8001, {0x10, 0x48000000000000, 0x0, 0x5, 0x5}, [0x7, 0x9, 0x1000, 0x9, 0x21, 0xc0]}}, @devid=r3})
r4 = getpid()
r5 = syz_open_dev$dvb_demux(&(0x7f0000001600), 0x0, 0x44800)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c814}, 0x4041)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001800)={&(0x7f0000001740)=""/131, 0x83})
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2)
ptrace$cont(0x18, r4, 0x100000001, 0x1)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840))
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001880)={r3, 0x8, 0x100, 0x1})
read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020)
r6 = open$dir(&(0x7f0000003cc0)='./file0\x00', 0x1000, 0xd7)
write(r6, &(0x7f0000003d00)="474166cdf27eaed747a965dfe2c5651b541c928c03320bfb30f774600558d195011d46438a84088d01ba76af8c4fbf43e220a84651f689a1e6eda58e71493c44e0b63d8ce7edb3201bed6515874ecd79771b341170dbc14a820df77c854a9f2bc430", 0x62)
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x903, 0x0)
ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000003dc0))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000003f00)={&(0x7f0000003e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003e40)=[0x0, 0x0], &(0x7f0000003e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003ec0)=[0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0x3})
sendmsg$nl_route_sched(r1, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f80)=@deltaction={0x88, 0x31, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x3c21d30ee5a50188)
syz_open_dev$dri(&(0x7f00000040c0), 0x800, 0xa801)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004100)={<r8=>0x0, 0xf, 0xfff, 0x7, 0x80000000, 0x6}, &(0x7f0000004140)=0x14)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004180)={r8, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x84)

1m24.718217175s ago: executing program 5 (id=7165):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

1m24.648274408s ago: executing program 5 (id=7167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, r3, 0x229, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2e490feedea9"}, @NL80211_ATTR_MAC={0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000057c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20)
r8 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a)
renameat(r8, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000001040)=0x9, 0x4)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0)
r11 = dup(r10)
write$UHID_INPUT(r11, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)

1m19.578893617s ago: executing program 5 (id=7188):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3ec2a965ee06c6b786"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b14, 0x0)

1m18.081394586s ago: executing program 5 (id=7194):
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0xfd0})
r0 = socket$inet6(0xa, 0x5, 0xfffffff1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, '.\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xc}, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x1b, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r0}, r2, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x40000000000000, 0x8001, {0x10, 0x48000000000000, 0x0, 0x5, 0x5}, [0x7, 0x9, 0x1000, 0x9, 0x21, 0xc0]}}, @devid=r3})
r4 = getpid()
r5 = syz_open_dev$dvb_demux(&(0x7f0000001600), 0x0, 0x44800)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c814}, 0x4041)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001800)={&(0x7f0000001740)=""/131, 0x83})
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2)
ptrace$cont(0x18, r4, 0x100000001, 0x1)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840))
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001880)={r3, 0x8, 0x100, 0x1})
read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020)
r6 = open$dir(&(0x7f0000003cc0)='./file0\x00', 0x1000, 0xd7)
write(r6, &(0x7f0000003d00)="474166cdf27eaed747a965dfe2c5651b541c928c03320bfb30f774600558d195011d46438a84088d01ba76af8c4fbf43e220a84651f689a1e6eda58e71493c44e0b63d8ce7edb3201bed6515874ecd79771b341170dbc14a820df77c854a9f2bc430", 0x62)
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x903, 0x0)
ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000003dc0))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000003f00)={&(0x7f0000003e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003e40)=[0x0, 0x0], &(0x7f0000003e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003ec0)=[0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0x3})
sendmsg$nl_route_sched(r1, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f80)=@deltaction={0x88, 0x31, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x3c21d30ee5a50188)
syz_open_dev$dri(&(0x7f00000040c0), 0x800, 0xa801)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004100)={<r8=>0x0, 0xf, 0xfff, 0x7, 0x80000000, 0x6}, &(0x7f0000004140)=0x14)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004180)={r8, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x84)

1m17.780808095s ago: executing program 33 (id=7194):
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0xfd0})
r0 = socket$inet6(0xa, 0x5, 0xfffffff1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, '.\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xc}, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x1b, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r0}, r2, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x40000000000000, 0x8001, {0x10, 0x48000000000000, 0x0, 0x5, 0x5}, [0x7, 0x9, 0x1000, 0x9, 0x21, 0xc0]}}, @devid=r3})
r4 = getpid()
r5 = syz_open_dev$dvb_demux(&(0x7f0000001600), 0x0, 0x44800)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c814}, 0x4041)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001800)={&(0x7f0000001740)=""/131, 0x83})
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2)
ptrace$cont(0x18, r4, 0x100000001, 0x1)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840))
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001880)={r3, 0x8, 0x100, 0x1})
read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020)
r6 = open$dir(&(0x7f0000003cc0)='./file0\x00', 0x1000, 0xd7)
write(r6, &(0x7f0000003d00)="474166cdf27eaed747a965dfe2c5651b541c928c03320bfb30f774600558d195011d46438a84088d01ba76af8c4fbf43e220a84651f689a1e6eda58e71493c44e0b63d8ce7edb3201bed6515874ecd79771b341170dbc14a820df77c854a9f2bc430", 0x62)
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x903, 0x0)
ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000003dc0))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000003f00)={&(0x7f0000003e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003e40)=[0x0, 0x0], &(0x7f0000003e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003ec0)=[0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0x3})
sendmsg$nl_route_sched(r1, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f80)=@deltaction={0x88, 0x31, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x3c21d30ee5a50188)
syz_open_dev$dri(&(0x7f00000040c0), 0x800, 0xa801)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004100)={<r8=>0x0, 0xf, 0xfff, 0x7, 0x80000000, 0x6}, &(0x7f0000004140)=0x14)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004180)={r8, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x84)

11.648411639s ago: executing program 1 (id=7389):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x25, 0x5, 0x0)
r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

8.944845711s ago: executing program 1 (id=7394):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, &(0x7f0000000180))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x80, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0xff}}]}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
syz_clone3(0x0, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000600)={@local, @broadcast, @void, {@generic={0x5, "c08e23dbea"}}}, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
setfsuid(0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r6, 0x1, r0, 0x4})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

7.823140023s ago: executing program 1 (id=7401):
mount(&(0x7f0000000000)=@sr0, 0x0, 0x0, 0x1000048, 0x0)
waitid(0x1, 0x0, 0x0, 0x1000008, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fchdir(r0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)={0x40, 0x11c, 0x10}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.700598885s ago: executing program 6 (id=7402):
mount(&(0x7f0000000000)=@sr0, 0x0, 0x0, 0x1000048, 0x0)
waitid(0x1, 0x0, 0x0, 0x1000008, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fchdir(r0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)={0x40, 0x11c, 0x10}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.695381296s ago: executing program 2 (id=7405):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="a6cc")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
eventfd2(0x8, 0x800)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x69a04c8e98d914be)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {}, 0x8, 0x2, &(0x7f0000000380)="51e0566bd66959f7c088761e3865b6f84390c64e086adf3d46d7479a192dc5c0de2f187fa4ee74053eefb20d7a743500fb2cbd2330e779242240bc39c571005925b78ce745cdf93976", 0x49, 0xfffffffd, 0x200, 0x0, 0x4, 0x4, &(0x7f0000000200)="ff7f72c249e109d5316d427a040d4c7943e53c07ece9fc698b35dcee0c9472c5c9f840"})
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000500)={0x800, 0xf0, 0xf0, 0x360, 0x1, 0x7f80, 0x1, 0x2, {0x1, 0x2, 0x1}, {0x100, 0xffffffb6, 0x1}, {0x5, 0xc5, 0x1}, {0x8, 0x80}, 0x3, 0x0, 0x8, 0x10000, 0x1, 0xfffffbff, 0x2, 0x1, 0x8, 0xd, 0xe4, 0x6, 0x10, 0x202, 0x1, 0x6})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
mount$9p_virtio(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x9c0031, 0x0)

6.20506409s ago: executing program 6 (id=7407):
r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002c0007012bad7000fcdbdf25087c0000080001"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

6.142529189s ago: executing program 2 (id=7408):
r0 = io_uring_setup(0x650c, &(0x7f0000000200)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
setgroups(0xefff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="02000000000000002400de816c617665000000000c00058005002b00"/39], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40880)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000000280)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8)
r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
close(r6)
r7 = epoll_create1(0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@my=0x0, 0x2}, @hyper, 0x4, 0xe52, 0x7fffffff, 0x8b, 0x4, 0x8001, 0x7})
close_range(r0, 0xffffffffffffffff, 0x0)

5.572513129s ago: executing program 6 (id=7412):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = socket(0x10, 0x2, 0x0)
write(r0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000085)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
setsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000000)=0xc31, 0x4)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

5.158387304s ago: executing program 6 (id=7415):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x1f, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4)
clock_gettime(0x6, &(0x7f0000000180))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000080))
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "93fe9713ee62803443afefe901f57fedef4539f203ad9c9a3d4064bf1a79a17a510b280dac0e0e61b95b3f3aad969ec483fad4a0b5978d6a5fd8fed05574ecc2941280ddb75a77509f7985eebe65648931604fb794501a51231d8cfd3b9f8fe8b471fe4e8f"}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0x128}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x24})
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})

5.117657202s ago: executing program 2 (id=7416):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
unshare(0x2a020400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 4)

5.09202462s ago: executing program 4 (id=7418):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x2, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
close(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="4017110000aac922c48f5cf19a000000005e9ccddd623b"], 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r4, 0x1)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000160000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f000012a000/0x4000)=nil, 0x4000, 0xc00000, 0x2, &(0x7f00003fe000/0xc00000)=nil)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xce, 0x52, 0xaf, 0x40, 0x67b, 0x1, 0xafd3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0x6a, 0xf, 0x2f, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x74, 0xbb}}]}}]}}]}}, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x11, 0x0, &(0x7f0000000100))

5.03111211s ago: executing program 1 (id=7419):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x54b7, 0x10100}, &(0x7f00000000c0), &(0x7f00000001c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getpeername(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18)
sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socket$caif_stream(0x25, 0x1, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
r5 = syz_open_pts(0xffffffffffffffff, 0x276900)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x432001, 0x100)
ioctl$TCSETSF(r5, 0x5404, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x40041, 0x0)

4.720404717s ago: executing program 2 (id=7420):
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0x1, 0x50, 0xf0, 0x2}, {0x1, 0xa, 0x6, 0x8}, {0x80, 0x5, 0xc0, 0xb00}]})
r4 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b883d2ec3f52d32b3110098644b8aa28fb68b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d5558ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea3", 0xa2, &(0x7f0000000100), &(0x7f0000000380), &(0x7f0000002900)="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")
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000015c0)={0x11f4, 0x1e, 0x400, 0x70bd28, 0x25dfdbfb, {0xf}, [@nested={0x4, 0x12e}, @generic="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", @generic="1d550bdaa8e72eafe6291b2dfebc83fb57c251bad314a9cf570642f5382c5bf8e650ebb75255f73bb31ea81f17008ed6e8e3a3f2737c5de492ed49a2ccf6a6f4193d790bd6f67610eeccf1a7e40b3872107fca40bbea1e0021f20c83d48bd444f160e57534c19b4fa2a667ea9889bd88ab125a45e9e36894c353c49d267a1e76420625d2361ffe", @nested={0x6a, 0x3b, 0x0, 0x1, [@typed={0x6, 0x9a, 0x0, 0x0, @str=')\x00'}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r4}, @generic="f40b72021ed77df534e8dff6feac10c4957969f86be3a92cafdfa6250f100e94888aa9651d46ec604b426be3fd9fb64253280b63d35f97769355debd718bf5d2a9757c997459baa7b53a209b7358dd140715f5a3c4f9"]}, @nested={0x77, 0x6e, 0x0, 0x1, [@generic="d07dd1d7c6c789ab39d31da1dd0586b2c3fc7617425394fc658a3b91d0fcbe262adb3a8cee6ac47c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfb63a7a050f9935e5563285451eacec7ed39a84a5298e70f37285255ebdba3b140b589bec", @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @fd=r2}, @generic, @typed={0x8, 0x10e, 0x0, 0x0, @uid=r5}]}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x32}]}, @generic="d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf", @generic="ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff"]}, 0x11f4}, 0x1, 0x0, 0x0, 0x4810}, 0x4)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})

3.682892316s ago: executing program 2 (id=7422):
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r5=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r5, 0x1})
ioprio_set$uid(0x3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x1, 0xfa11, 0xffffffff}, 0x0)

3.37384156s ago: executing program 0 (id=7424):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0xf23, 0x0, 0xc, 0x0, 0x0)

3.219083402s ago: executing program 0 (id=7425):
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xefff, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

2.864071859s ago: executing program 0 (id=7426):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffd, 0xb, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a01, 0x0)
ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000040)={0x0, 0x1, 0x4, 0xb81b, 0x12, 0xb54, 0x1, 0x6, 0xffffffff, 0xa, 0x0, 0x8, &(0x7f00000000c0)=[0x5], 0x1, 0x0})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = fanotify_init(0x0, 0x8000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_generic(r2, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x634, 0x22, 0x2, 0x70bd29, 0x25dfdbff, {0x6}, [@typed={0x8, 0x1e, 0x0, 0x0, @pid=r3}, @nested={0xb9, 0x120, 0x0, 0x1, [@generic="91a96dbd8ca1a58480d146ea4e0c5a428bea4243ff711653371a595cd5107744bb91f24baaa6b45033e93565238f16364353f254c9cedc29d274ee8a81af9a87d7f6891d5c857c0cbd44161f9de30a3729216d491db7622a999fc9fcb7e14f3d40abbb8e298a6974f0e3763d6b6483da5cba63084071d765332a20ce7795fe84a387709506d8928d4b09802adf73f52598666c8380a54bee51b5f01df5cfa05d9e08de0740255a9fa720ae7641a5ac4b9a", @nested={0x4, 0xde}]}, @nested={0x5d, 0x120, 0x0, 0x1, [@generic="88417c5b83a90a90f22e1256d35b3f4ad0667bd04e6b56e53637d4931994e856dac78b8e0d375eda806dcbbbfaf2bdd281662a99c8bddea37b5267147f7c605280ca3c5a567246ba62453b8fb7375c44e9f5ca227e8f9a7f81"]}, @generic="41ed2f0b75f0ee191c55034d03d46d3d7b93f3f4086dbcfe3c5a9a6656de1ab8fc078e2665a4d3c9122961e4e3f15f5170e8b51990a0ce1464b5eab3a4a66bd870271d7b813c546394e685c3c4e2c68516ac86ef3f211aca44e58ca181d81afbbd9f5e39c76076eb34e563a2f273249d715c54e1e69e40703f60ededd73cc634d10d25cdd21c4aab004253ffebc6d25880fd0f18e36e3be895bf5326b154df1f389bf346ea6084a8688139f34a07d9bc33e61cefa312c859a6a9139f50eee3dff257059aad3ac5da8f44f2ce1a03b2682ca9c92b5e74b1ead617c8a3afe0db5e63a4", @nested={0x149, 0x20, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @u32=0x8}, @generic="6321acd2cbc76dfff4c62b4ab0b80371ca407d4075e79bcc9f035e2838e02b88c593652f73d72b29c92087186e1237a6291579a3b920d0d261606bb8aee2b529dbad5ecb2b4104d3e4cd867b0922cefd0340e8e76bd90d7387ff094837b9adfa47e9152ce3ca433276e498210e5e156f629caa5727362f507ed371b1f121e60992c1807b937e0254e85e28a18b868da0387e15204b66798daa733669b643e262033dbc04d76cd347767c596d248751d22256b5361f96ce5bf58b81fb0e84fdca31b830280cb556109549fef2976555400bd9af92b4a3", @nested={0x4, 0x125}, @nested={0x4, 0xd5}, @generic='_', @generic="2516bbd90b94880c3a500b3c9dd17d351fe9b45ab14e10ecd34f0d0ad515adf2124d9b15d856d9fd631f44d2975a211a45cb04f5d32b7984ccf3f3db1e459814cb590c9fe8076c9bd97f8391b3067c9544e0137642181cc2b0f3", @nested={0x4, 0xe7}]}, @nested={0x74, 0x2e, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @pid=r4}, @generic="1cf7259196c540e480bf15c39fa93e67b471e31a97203d174b2fcba3a1b982377452563c11c0160671c270cb8e768939024634d8bc66ec2b7586fb2b2fa0289bb93e348a52095cfebbf7a536c6928055b11f4d8847fbcb6582792a92e09a0696a2fa046fcafc1667"]}, @generic="10b6fc83dc4a0b0c727a1a9770b24c0253f0655afa0f91b0cf64c7e2c14b3fd311ef651e721a5c9e8f95bb5c149ef944aab955a926baf2a311162ee85e5d695500c300918fd627bd6ec18c319934fecb974b7c5558de447bd101f557a286d459156238cf01f27d980788eaa77eadc5d5b82c79a1b81729d67b6760718a36964867e57feab12c1f2e234cc9d787912a85f8e6798fb60ebe8e0a72597dad84068da1ca15b066e995adad15a32199e232e3536476ded6e315be33fe7dac", @typed={0x8, 0x15b, 0x0, 0x0, @u32=0x5}, @generic="cd72c837a9b7db9c517f732a092c6eb412936da0631ba8cad823eef98767b727db7062f3b9d85ce8baf15edc6930152a63bb1443bf2662b06aa6dc6c694a3fe98921e9b96426b166b9ae5d570663b3af73532dbc9fc74cc5946ac02ce64aa27fadca8dfe77e98c37cae1270a1b3c4325df16b3fe59b60d80862d5763253742fe6755c37925bc6c7084cca90d27fbbe04da60b0dceb60f6bbb0f9b7c2b455cbebf3e84eaccdc0fb1b069c65c773aaa5d46609ee83e08e9bb6a1a56d6d6c33ea2269f6b6435d1c64f8ba4ecf229cdfb039b1b7b4a4752432b56d6a", @nested={0xba, 0x108, 0x0, 0x1, [@nested={0x4, 0x16}, @generic="085007ffb4df62f0eca8c27f5e33ac3d11e3c591ba6fc6ca3851425636a699cad1af5fcd987f7b304f580137acd6bca1be339ffb8a9889ad3f8f18076fb99c2a56d01ad717649cf2f308f709aa0c35d4b7e4e6f289961563747080ac4d2fda16cd5f135beb0099ff6dcda6d9d2de018ee34f9befe7fbd3529ecef0697b248b8169112e1f3f1dc571d4339647a98445ce24bfe5ac55f95d26d87c9c95d08729b4afba780cbffc0206777df646c4a497ad0b07"]}]}, 0x634}}, 0x8000)
fsync(r2)
ioctl(r1, 0x8b2c, &(0x7f0000000040))

2.560756357s ago: executing program 0 (id=7427):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffa0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="7400000000000000000000040000000000000000c16c892ff4587282d5b50adec9d7697585ea10072f441a2883ba6a57881b57876eb22583a03bddb911fc4ecb85e27d8fd0599b66b3479acde7a24c379ad89f69bdf0a79134542b", @ANYRES32=0x0, @ANYBLOB="0003000000000000540012800b0001006272696467650000440002800c001f000200000000000000050016000000000005002b00fa00000005002900000000000c001e00a00000000000000008001b00fbffffff05002a0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5da}, 0x94)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5435, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"})
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000"], 0x4c}}, 0x0)

2.426152102s ago: executing program 4 (id=7428):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
syz_open_dev$vbi(&(0x7f0000003540), 0x1, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r6=>0x0})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), 0x0)
sendto$packet(r4, 0x0, 0x0, 0x48841, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0xc, 0x0, &(0x7f0000002080))
recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1}, 0xffffefff}], 0x1, 0x42, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r9 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_STD(r9, 0x80085617, 0x0)

2.222797138s ago: executing program 4 (id=7429):
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0xfd0})
r0 = socket$inet6(0xa, 0x5, 0xfffffff1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, '.\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xc}, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x1b, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r0}, r2, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x40000000000000, 0x8001, {0x10, 0x48000000000000, 0x0, 0x5, 0x5}, [0x7, 0x9, 0x1000, 0x9, 0x21, 0xc0]}}, @devid=r3})
r4 = getpid()
r5 = syz_open_dev$dvb_demux(&(0x7f0000001600), 0x0, 0x44800)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c814}, 0x4041)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001800)={&(0x7f0000001740)=""/131, 0x83})
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2)
ptrace$cont(0x18, r4, 0x100000001, 0x1)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840))
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001880)={r3, 0x8, 0x100, 0x1})
read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020)
r6 = open$dir(&(0x7f0000003cc0)='./file0\x00', 0x1000, 0xd7)
write(r6, &(0x7f0000003d00)="474166cdf27eaed747a965dfe2c5651b541c928c03320bfb30f774600558d195011d46438a84088d01ba76af8c4fbf43e220a84651f689a1e6eda58e71493c44e0b63d8ce7edb3201bed6515874ecd79771b341170dbc14a820df77c854a9f2bc430", 0x62)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x903, 0x0)
ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000003dc0))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000003f00)={&(0x7f0000003e00), &(0x7f0000003e40)=[0x0, 0x0], 0x0, &(0x7f0000003ec0)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x3})
sendmsg$nl_route_sched(r1, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f80)=@deltaction={0x88, 0x31, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x3c21d30ee5a50188)
syz_open_dev$dri(&(0x7f00000040c0), 0x800, 0xa801)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004100)={<r8=>0x0, 0xf, 0xfff, 0x7, 0x80000000, 0x6}, &(0x7f0000004140)=0x14)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004180)={r8, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x84)

2.194795512s ago: executing program 4 (id=7430):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x1, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x1}}]}}]}}]}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mprotect(&(0x7f000009a000/0x1000)=nil, 0x1000, 0x8)
munmap(&(0x7f000005f000/0x4000)=nil, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0xc, 0xfffc, 0x360, 0x7}, 0x8, 0x7, 0x60000000, 0x0, 0x80000004, 0x101, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={r4, 0x1000, &(0x7f0000002a80)=""/4096})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2.020649373s ago: executing program 1 (id=7431):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x1, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x1}}]}}]}}]}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mprotect(&(0x7f000009a000/0x1000)=nil, 0x1000, 0x8)
munmap(&(0x7f000005f000/0x4000)=nil, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0xc, 0xfffc, 0x360, 0x7}, 0x8, 0x7, 0x60000000, 0x0, 0x80000004, 0x101, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={r4, 0x1000, &(0x7f0000002a80)=""/4096})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1.842465243s ago: executing program 6 (id=7432):
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) (async, rerun: 32)
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) (async, rerun: 32)
r0 = userfaultfd(0x801)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
remap_file_pages(&(0x7f00006e8000/0x2000)=nil, 0x2000, 0x200000a, 0x8, 0x40000) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x678, 0x2, {<r3=>0x0}, {}, 0xe1, 0x829}) (async)
write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x4a38, 0x80602)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000680)=ANY=[@ANYRES16=r3]) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x6261, &(0x7f0000000140)={0x0, 0x9164, 0x40, 0x1, 0x359}, &(0x7f00000000c0), &(0x7f0000ff4000))
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, @broadcast, @rand_addr, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {}]}, @cipso={0x86, 0x6}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}]}]}}}}}}}, 0x0)

1.598524935s ago: executing program 0 (id=7433):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000052000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x8}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

1.300504036s ago: executing program 6 (id=7434):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x4c}}, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd500000001"], 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000200)={[{0xfffffffffffffd3d}, {0x9, 0x4e00, "990595b7acff1a24d6"}, {}]})
close_range(r2, 0xffffffffffffffff, 0x0)

685.355046ms ago: executing program 4 (id=7435):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x30}}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffd48, &(0x7f00000002c0)=0x80000001)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140000000000000000000001fcdbdf250400f280"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)
read$msr(r2, &(0x7f0000005d40)=""/102378, 0xffffffffffffff99)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0)
r4 = socket$inet6(0xa, 0x1, 0xfffffffd)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r6, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000})
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r8, 0x0, 0x0, 0x80800)
sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0x81a14d0a7df9ca27, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000000b05002bbd7000fbdbdf250700000008005c00", @ANYRES32=r7, @ANYBLOB="e7096f46d81c8957b34701b5a8e3a7d6cb30a9cf94c46e83ff6c41a9f429085e92c9fdc66f423c381785b5431bcbd69973fd20bbb126f9bcfe59f9dea52693a9ce16c26304858780de576d9a50f5086fcd21a4a53f7fdecab2d69f7b0d8e7c003680ae3a1f26a50cfad49ac33255a2d6efd7d1c0f6a93b08ec2f0341efdf5f066a36a079645364af7ba2fd02d32478e37ebfd6b2a20e444a71c483cf105b3d2e0cd0eb8e4d6d8912dd8f3d5c7ce025ccc7aee924c18876ae27ecf012b391c7f6b85cd27a63a5320ec6aa70d9b58341a41622dc14d67504003c80000018f9e2bd7c955b4b0190c4cc276013815c54e31a3837783be96f25"], 0xf8}, 0x1, 0x0, 0x0, 0x20008840}, 0x20008040)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r1, 0x0)

624.960576ms ago: executing program 4 (id=7436):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r3 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0xdb4, 0xd070, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
setresgid(0xee00, 0xee01, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000900))
setuid(0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

603.306124ms ago: executing program 0 (id=7437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000400)={0x2, 0x1e475a93})
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x3f, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r2 = socket$packet(0x11, 0xa, 0x300)
getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r3, 0x8cee000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0xbcaf, 0x400, 0x1, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x3f, 0x0, 0x0)

512.197109ms ago: executing program 1 (id=7438):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000380)})
getpid()
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)=0x10001, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, 0x2b)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010426bd7000ffdbdf2503000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x44000080)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}], 0x1, 0x60010000, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffdc, 0x4}, 0x6)
write$bt_hci(r8, 0x0, 0xe)
rseq(&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2280)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000280)={0x2, 0x2000000, 0x81, 0x0, 0x11})
timer_settime(r0, 0x0, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000008, 0x8010, r4, 0x1bf66000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140))

0s ago: executing program 2 (id=7439):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043)
r5 = dup(r3)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)

kernel console output (not intermixed with test programs):

xt=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1538.306421][T20389] usb 1-1: Using ep0 maxpacket: 8
[ 1538.332928][T20389] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1538.343931][T20389] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1538.355120][T20389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1538.363392][ T5883] usb 2-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92
[ 1538.367984][T20389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1538.384073][T20389] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1538.386031][   T30] audit: type=1400 audit(1771807581.537:12905): avc:  denied  { ioctl } for  pid=30368 comm="syz.5.7056" path="socket:[125160]" dev="sockfs" ino=125160 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1538.423049][T20389] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1538.423049][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.423077][ T5883] usb 2-1: Product: syz
[ 1538.444453][T20389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.451803][ T5883] usb 2-1: Manufacturer: syz
[ 1538.457608][ T5883] usb 2-1: SerialNumber: syz
[ 1538.470621][ T5883] usb 2-1: config 0 descriptor??
[ 1538.486713][ T5883] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029
[ 1538.702071][ T5883] gspca_sn9c20x: Write register 1000 failed -71
[ 1538.709434][ T5883] gspca_sn9c20x: Device initialization failed
[ 1538.717023][ T5883] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[ 1538.729298][ T5883] usb 2-1: USB disconnect, device number 110
[ 1539.350948][T30385] syzkaller0: entered promiscuous mode
[ 1539.356784][T30385] syzkaller0: entered allmulticast mode
[ 1539.376149][T30385] FAULT_INJECTION: forcing a failure.
[ 1539.376149][T30385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1539.403590][T30385] CPU: 0 UID: 0 PID: 30385 Comm: syz.1.7062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1539.403619][T30385] Tainted: [L]=SOFTLOCKUP
[ 1539.403625][T30385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1539.403636][T30385] Call Trace:
[ 1539.403642][T30385]  <TASK>
[ 1539.403649][T30385]  dump_stack_lvl+0x100/0x190
[ 1539.403687][T30385]  should_fail_ex.cold+0x5/0xa
[ 1539.403711][T30385]  _copy_from_user+0x2e/0xd0
[ 1539.403737][T30385]  move_addr_to_kernel+0x65/0x170
[ 1539.403762][T30385]  copy_msghdr_from_user+0x417/0x4f0
[ 1539.403786][T30385]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1539.403822][T30385]  ___sys_sendmsg+0x106/0x1e0
[ 1539.403846][T30385]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1539.403900][T30385]  __sys_sendmsg+0x170/0x220
[ 1539.403918][T30385]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1539.403951][T30385]  do_syscall_64+0x106/0xf80
[ 1539.403969][T30385]  ? clear_bhb_loop+0x40/0x90
[ 1539.403991][T30385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1539.404009][T30385] RIP: 0033:0x7f610279c629
[ 1539.404024][T30385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1539.404041][T30385] RSP: 002b:00007f610372a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1539.404058][T30385] RAX: ffffffffffffffda RBX: 00007f6102a15fa0 RCX: 00007f610279c629
[ 1539.404070][T30385] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008
[ 1539.404081][T30385] RBP: 00007f610372a090 R08: 0000000000000000 R09: 0000000000000000
[ 1539.404091][T30385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1539.404102][T30385] R13: 00007f6102a16038 R14: 00007f6102a15fa0 R15: 00007ffca4b0a778
[ 1539.404127][T30385]  </TASK>
[ 1539.652881][T20389] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1539.719169][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7061'.
[ 1539.728231][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7061'.
[ 1539.819872][T20389] usb 5-1: Using ep0 maxpacket: 8
[ 1539.860846][T20389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1539.936200][T20389] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1539.980847][T20389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.072718][T20389] usb 5-1: config 0 descriptor??
[ 1540.792551][T30396] overlayfs: failed to resolve './file0': -2
[ 1541.227554][T20389] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1541.361983][T20389] usb 5-1: USB disconnect, device number 112
[ 1541.374531][ T5883] usb 1-1: USB disconnect, device number 127
[ 1541.560218][   T30] audit: type=1400 audit(1771807584.522:12906): avc:  denied  { read write } for  pid=30406 comm="syz.1.7067" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1541.578954][T30414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.624166][T30414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.632194][   T30] audit: type=1400 audit(1771807584.522:12907): avc:  denied  { open } for  pid=30406 comm="syz.1.7067" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1541.703793][   T30] audit: type=1400 audit(1771807584.550:12908): avc:  denied  { ioctl } for  pid=30406 comm="syz.1.7067" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1542.795536][   T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1542.974842][   T30] audit: type=1400 audit(1771807585.842:12909): avc:  denied  { read write } for  pid=30431 comm="syz.0.7076" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1542.999739][   T24] usb 5-1: config 0 has no interfaces?
[ 1543.005230][   T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1543.022692][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.034273][T30433] 9p: Bad value for 'rfdno'
[ 1543.045103][   T30] audit: type=1400 audit(1771807585.842:12910): avc:  denied  { open } for  pid=30431 comm="syz.0.7076" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1543.083758][   T24] usb 5-1: config 0 descriptor??
[ 1543.088894][   T30] audit: type=1400 audit(1771807585.889:12911): avc:  denied  { ioctl } for  pid=30431 comm="syz.0.7076" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1543.124231][   T30] audit: type=1400 audit(1771807585.926:12912): avc:  denied  { ioctl } for  pid=30431 comm="syz.0.7076" path="socket:[124836]" dev="sockfs" ino=124836 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1543.338924][   T24] usb 5-1: USB disconnect, device number 113
[ 1543.390029][   T30] audit: type=1400 audit(1771807586.225:12913): avc:  denied  { create } for  pid=30439 comm="syz.2.7080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1543.644989][T30455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.657430][T30455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.483203][   T24] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1544.728839][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 1544.765918][   T24] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[ 1544.819398][   T24] usb 5-1: config 4 has no interface number 0
[ 1544.913385][   T24] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1544.935193][   T24] usb 5-1: config 4 interface 9 has no altsetting 0
[ 1544.954807][   T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1544.981479][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.000709][   T24] usb 5-1: Product: syz
[ 1545.004877][   T24] usb 5-1: Manufacturer: syz
[ 1545.022266][   T24] usb 5-1: SerialNumber: syz
[ 1545.038085][T30463] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1545.054053][T30471] FAULT_INJECTION: forcing a failure.
[ 1545.054053][T30471] name failslab, interval 1, probability 0, space 0, times 0
[ 1545.067128][T30471] CPU: 1 UID: 0 PID: 30471 Comm: syz.0.7089 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1545.067154][T30471] Tainted: [L]=SOFTLOCKUP
[ 1545.067161][T30471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1545.067171][T30471] Call Trace:
[ 1545.067178][T30471]  <TASK>
[ 1545.067185][T30471]  dump_stack_lvl+0x100/0x190
[ 1545.067220][T30471]  should_fail_ex.cold+0x5/0xa
[ 1545.067243][T30471]  should_failslab+0xc2/0x120
[ 1545.067270][T30471]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1545.067295][T30471]  ? __alloc_skb+0x140/0x710
[ 1545.067325][T30471]  __alloc_skb+0x140/0x710
[ 1545.067348][T30471]  ? __alloc_skb+0x5b7/0x710
[ 1545.067374][T30471]  ? __pfx___alloc_skb+0x10/0x10
[ 1545.067406][T30471]  netlink_alloc_large_skb+0x69/0x150
[ 1545.067428][T30471]  netlink_sendmsg+0x680/0xda0
[ 1545.067452][T30471]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1545.067471][T30471]  ? __might_fault+0x20/0x140
[ 1545.067502][T30471]  ____sys_sendmsg+0xa54/0xc30
[ 1545.067526][T30471]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1545.067559][T30471]  ___sys_sendmsg+0x190/0x1e0
[ 1545.067589][T30471]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1545.067642][T30471]  __sys_sendmsg+0x170/0x220
[ 1545.067659][T30471]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1545.067693][T30471]  do_syscall_64+0x106/0xf80
[ 1545.067709][T30471]  ? clear_bhb_loop+0x40/0x90
[ 1545.067731][T30471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1545.067749][T30471] RIP: 0033:0x7f492a59c629
[ 1545.067765][T30471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1545.067781][T30471] RSP: 002b:00007f492b477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1545.067798][T30471] RAX: ffffffffffffffda RBX: 00007f492a815fa0 RCX: 00007f492a59c629
[ 1545.067810][T30471] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1545.067820][T30471] RBP: 00007f492b477090 R08: 0000000000000000 R09: 0000000000000000
[ 1545.067830][T30471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1545.067840][T30471] R13: 00007f492a816038 R14: 00007f492a815fa0 R15: 00007ffd4f6b71f8
[ 1545.067866][T30471]  </TASK>
[ 1545.103737][ T5883] usb 6-1: new low-speed USB device number 43 using dummy_hcd
[ 1545.222809][   T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1545.377306][T30463] overlay: filesystem on ./bus not supported as upperdir
[ 1545.398115][ T1105] usb 5-1: Failed to submit usb control message: -71
[ 1545.405324][ T1105] usb 5-1: unable to send the bmi data to the device: -71
[ 1545.421666][   T24] usb 5-1: USB disconnect, device number 114
[ 1545.437780][ T1105] usb 5-1: unable to get target info from device
[ 1545.561191][ T1105] usb 5-1: could not get target info (-71)
[ 1545.588978][ T1105] usb 5-1: could not probe fw (-71)
[ 1545.719854][ T5883] usb 6-1: device descriptor read/64, error -71
[ 1545.728271][T30482] tipc: Started in network mode
[ 1545.740223][T30482] tipc: Node identity 8203e1bbd505, cluster identity 4711
[ 1545.776037][T30482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1545.823749][T30486] syzkaller0: entered promiscuous mode
[ 1545.829482][T30486] syzkaller0: entered allmulticast mode
[ 1545.835606][T30486] tipc: Resetting bearer <eth:syzkaller0>
[ 1545.859197][T30481] tipc: Resetting bearer <eth:syzkaller0>
[ 1546.001541][ T5883] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[ 1546.023922][ T8686] lec:lec_start_xmit: lec0:No lecd attached
[ 1546.225447][ T5883] usb 6-1: device descriptor read/64, error -71
[ 1546.373796][ T5883] usb usb6-port1: attempt power cycle
[ 1546.800934][T30495] netlink: 'syz.1.7096': attribute type 1 has an invalid length.
[ 1546.855359][ T5883] usb 6-1: new low-speed USB device number 45 using dummy_hcd
[ 1547.525789][ T5883] usb 6-1: device descriptor read/8, error -71
[ 1547.655061][T30507] netlink: 'syz.0.7097': attribute type 1 has an invalid length.
[ 1551.115361][T30481] tipc: Disabling bearer <eth:syzkaller0>
[ 1551.123239][T21486] tipc: Node number set to 1460068795
[ 1551.254759][T30531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1551.289241][T30531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1551.301177][T30533] syzkaller0: entered promiscuous mode
[ 1551.306650][T30533] syzkaller0: entered allmulticast mode
[ 1551.374289][T30539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7103'.
[ 1551.383418][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1551.383445][    C1] lec:lec_tx_timeout: lec0
[ 1551.582224][T21486] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1551.793833][T21486] usb 6-1: Using ep0 maxpacket: 32
[ 1551.834526][T21486] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1551.861976][T21486] usb 6-1: config 0 has no interface number 0
[ 1551.916500][T21486] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1551.959025][T21486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.066725][T21486] usb 6-1: Product: syz
[ 1552.109984][T21486] usb 6-1: Manufacturer: syz
[ 1552.179224][T21486] usb 6-1: SerialNumber: syz
[ 1552.532916][T21486] usb 6-1: config 0 descriptor??
[ 1552.577128][   T30] audit: type=1400 audit(1771807594.825:12914): avc:  denied  { recv } for  pid=2872 comm="kworker/0:1H" saddr=10.128.0.169 src=38996 daddr=10.128.0.251 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1552.730919][T21486] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1552.793985][T21486] usb 6-1: selecting invalid altsetting 1
[ 1552.869215][T21486] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1553.156773][T21486] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1553.282175][T21486] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1553.373569][T21486] usb 6-1: media controller created
[ 1553.481818][T21486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1553.517615][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1553.527249][ T1295] lec:lec_start_xmit: lec0:No lecd attached
[ 1553.568347][T30555] netlink: 'syz.4.7109': attribute type 1 has an invalid length.
[ 1553.814444][   T30] audit: type=1400 audit(1771807595.873:12915): avc:  denied  { read write } for  pid=30547 comm="syz.1.7108" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1554.282887][T30554] sg_write: data in/out 3505/14 bytes for SCSI command 0x2-- guessing data in;
[ 1554.282887][T30554]    program syz.1.7108 not setting count and/or reply_len properly
[ 1554.308882][   T30] audit: type=1400 audit(1771807595.873:12916): avc:  denied  { open } for  pid=30547 comm="syz.1.7108" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1554.482220][   T30] audit: type=1400 audit(1771807595.883:12917): avc:  denied  { ioctl } for  pid=30547 comm="syz.1.7108" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1554.837524][T30562] FAULT_INJECTION: forcing a failure.
[ 1554.837524][T30562] name failslab, interval 1, probability 0, space 0, times 0
[ 1554.850265][T30562] CPU: 1 UID: 0 PID: 30562 Comm: syz.5.7111 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1554.850293][T30562] Tainted: [L]=SOFTLOCKUP
[ 1554.850299][T30562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1554.850310][T30562] Call Trace:
[ 1554.850317][T30562]  <TASK>
[ 1554.850324][T30562]  dump_stack_lvl+0x100/0x190
[ 1554.850356][T30562]  should_fail_ex.cold+0x5/0xa
[ 1554.850380][T30562]  should_failslab+0xc2/0x120
[ 1554.850408][T30562]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1554.850438][T30562]  ? __alloc_skb+0x140/0x710
[ 1554.850470][T30562]  __alloc_skb+0x140/0x710
[ 1554.850494][T30562]  ? __alloc_skb+0x5b7/0x710
[ 1554.850519][T30562]  ? __pfx___alloc_skb+0x10/0x10
[ 1554.850552][T30562]  netlink_alloc_large_skb+0x69/0x150
[ 1554.850574][T30562]  netlink_sendmsg+0x680/0xda0
[ 1554.850598][T30562]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1554.850616][T30562]  ? __might_fault+0x20/0x140
[ 1554.850647][T30562]  ____sys_sendmsg+0xa54/0xc30
[ 1554.850671][T30562]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1554.850691][T30562]  ? kvm_sched_clock_read+0x11/0x20
[ 1554.850723][T30562]  ? lock_acquire+0x1cf/0x380
[ 1554.850755][T30562]  ___sys_sendmsg+0x190/0x1e0
[ 1554.850780][T30562]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1554.850802][T30562]  ? sched_clock_cpu+0x6c/0x570
[ 1554.850858][T30562]  __sys_sendmsg+0x170/0x220
[ 1554.850875][T30562]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1554.850901][T30562]  ? rcu_is_watching+0x12/0xc0
[ 1554.850928][T30562]  do_syscall_64+0x106/0xf80
[ 1554.850944][T30562]  ? clear_bhb_loop+0x40/0x90
[ 1554.850966][T30562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1554.850984][T30562] RIP: 0033:0x7f311c99c629
[ 1554.850999][T30562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1554.851016][T30562] RSP: 002b:00007f311d7a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1554.851034][T30562] RAX: ffffffffffffffda RBX: 00007f311cc16180 RCX: 00007f311c99c629
[ 1554.851046][T30562] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000009
[ 1554.851057][T30562] RBP: 00007f311d7a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1554.851068][T30562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1554.851078][T30562] R13: 00007f311cc16218 R14: 00007f311cc16180 R15: 00007ffc0622c0e8
[ 1554.851103][T30562]  </TASK>
[ 1555.192816][T21486] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1555.200772][T21486] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1555.209932][T21486] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1555.377815][T21486] usb 6-1: USB disconnect, device number 47
[ 1556.211964][T30576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7116'.
[ 1556.366008][T30590] syzkaller0: entered promiscuous mode
[ 1556.372051][T30590] syzkaller0: entered allmulticast mode
[ 1556.610265][T30598] overlayfs: missing 'lowerdir'
[ 1556.993006][T30603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1557.019327][T30603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1557.264278][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1557.845213][T30610] netlink: 'syz.4.7125': attribute type 10 has an invalid length.
[ 1557.856015][T30610] ipvlan1: entered promiscuous mode
[ 1557.871632][T30610] team0: Device ipvlan1 failed to register rx_handler
[ 1557.905614][ T5875] usb 1-1: Using ep0 maxpacket: 8
[ 1557.920720][ T5875] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1557.939245][ T5875] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.976423][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1558.002835][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.021171][T30627] FAULT_INJECTION: forcing a failure.
[ 1558.021171][T30627] name failslab, interval 1, probability 0, space 0, times 0
[ 1558.052003][T30627] CPU: 0 UID: 0 PID: 30627 Comm: syz.4.7131 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1558.052032][T30627] Tainted: [L]=SOFTLOCKUP
[ 1558.052038][T30627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1558.052047][T30627] Call Trace:
[ 1558.052053][T30627]  <TASK>
[ 1558.052059][T30627]  dump_stack_lvl+0x100/0x190
[ 1558.052091][T30627]  should_fail_ex.cold+0x5/0xa
[ 1558.052122][T30627]  should_failslab+0xc2/0x120
[ 1558.052149][T30627]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1558.052174][T30627]  ? __alloc_skb+0x140/0x710
[ 1558.052204][T30627]  __alloc_skb+0x140/0x710
[ 1558.052227][T30627]  ? __alloc_skb+0x5b7/0x710
[ 1558.052251][T30627]  ? __pfx___alloc_skb+0x10/0x10
[ 1558.052284][T30627]  netlink_alloc_large_skb+0x69/0x150
[ 1558.052306][T30627]  netlink_sendmsg+0x680/0xda0
[ 1558.052330][T30627]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1558.052349][T30627]  ? __might_fault+0x20/0x140
[ 1558.052378][T30627]  ____sys_sendmsg+0xa54/0xc30
[ 1558.052403][T30627]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1558.052437][T30627]  ___sys_sendmsg+0x190/0x1e0
[ 1558.052462][T30627]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1558.052513][T30627]  __sys_sendmsg+0x170/0x220
[ 1558.052530][T30627]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1558.052562][T30627]  do_syscall_64+0x106/0xf80
[ 1558.052579][T30627]  ? clear_bhb_loop+0x40/0x90
[ 1558.052601][T30627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1558.052618][T30627] RIP: 0033:0x7fe98d79c629
[ 1558.052633][T30627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1558.052650][T30627] RSP: 002b:00007fe98e736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1558.052666][T30627] RAX: ffffffffffffffda RBX: 00007fe98da15fa0 RCX: 00007fe98d79c629
[ 1558.052677][T30627] RDX: 0000000000048080 RSI: 0000200000000880 RDI: 0000000000000004
[ 1558.052688][T30627] RBP: 00007fe98e736090 R08: 0000000000000000 R09: 0000000000000000
[ 1558.052698][T30627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1558.052708][T30627] R13: 00007fe98da16038 R14: 00007fe98da15fa0 R15: 00007ffe6a8d3cc8
[ 1558.052732][T30627]  </TASK>
[ 1558.306026][T30629] syzkaller0: entered promiscuous mode
[ 1558.314054][T30629] syzkaller0: entered allmulticast mode
[ 1558.351768][T30631] overlayfs: missing 'lowerdir'
[ 1558.898553][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1558.906612][    C1] lec:lec_tx_timeout: lec0
[ 1559.034676][T30648] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 1559.052181][   T30] audit: type=1400 audit(1771807600.889:12918): avc:  denied  { create } for  pid=30641 comm="syz.4.7136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1559.101740][T30648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1559.133871][ T5951] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1559.272466][ T5951] usb 2-1: device descriptor read/64, error -71
[ 1559.528939][ T5951] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1559.689264][ T5951] usb 2-1: device descriptor read/64, error -71
[ 1559.820166][ T5951] usb usb2-port1: attempt power cycle
[ 1559.875949][   T30] audit: type=1400 audit(1771807601.657:12919): avc:  denied  { create } for  pid=30652 comm="syz.5.7139" name="#153" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1559.897414][   T30] audit: type=1400 audit(1771807601.657:12920): avc:  denied  { link } for  pid=30652 comm="syz.5.7139" name="#153" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1559.920004][   T30] audit: type=1400 audit(1771807601.657:12921): avc:  denied  { rename } for  pid=30652 comm="syz.5.7139" name="#154" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1560.181004][ T5951] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1560.253672][T21486] usb 1-1: USB disconnect, device number 2
[ 1560.266699][ T5951] usb 2-1: device descriptor read/8, error -71
[ 1560.626353][   T30] audit: type=1400 audit(1771807602.359:12922): avc:  denied  { setopt } for  pid=30661 comm="syz.0.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1560.661805][ T5951] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1560.686079][ T5951] usb 2-1: device descriptor read/8, error -71
[ 1560.823027][ T5951] usb usb2-port1: unable to enumerate USB device
[ 1560.890398][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7144'.
[ 1560.900023][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7144'.
[ 1561.054866][T30665] FAULT_INJECTION: forcing a failure.
[ 1561.054866][T30665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1561.069443][T30665] CPU: 1 UID: 0 PID: 30665 Comm: syz.2.7143 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1561.069474][T30665] Tainted: [L]=SOFTLOCKUP
[ 1561.069481][T30665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1561.069491][T30665] Call Trace:
[ 1561.069498][T30665]  <TASK>
[ 1561.069506][T30665]  dump_stack_lvl+0x100/0x190
[ 1561.069540][T30665]  should_fail_ex.cold+0x5/0xa
[ 1561.069563][T30665]  _copy_from_user+0x2e/0xd0
[ 1561.069589][T30665]  kstrtouint_from_user+0xd6/0x1d0
[ 1561.069608][T30665]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1561.069625][T30665]  ? __lock_acquire+0x4a5/0x2630
[ 1561.069657][T30665]  ? lock_acquire+0x1cf/0x380
[ 1561.069690][T30665]  proc_fail_nth_write+0x83/0x220
[ 1561.069714][T30665]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1561.069745][T30665]  vfs_write+0x2aa/0x1070
[ 1561.069772][T30665]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1561.069798][T30665]  ? __pfx_vfs_write+0x10/0x10
[ 1561.069820][T30665]  ? __fget_files+0x215/0x3d0
[ 1561.069844][T30665]  ? __fget_files+0x21f/0x3d0
[ 1561.069868][T30665]  ksys_write+0x12a/0x250
[ 1561.069891][T30665]  ? __pfx_ksys_write+0x10/0x10
[ 1561.069923][T30665]  do_syscall_64+0x106/0xf80
[ 1561.069942][T30665]  ? clear_bhb_loop+0x40/0x90
[ 1561.069965][T30665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.069983][T30665] RIP: 0033:0x7f865615cece
[ 1561.069999][T30665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1561.070016][T30665] RSP: 002b:00007f8657111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1561.070034][T30665] RAX: ffffffffffffffda RBX: 00007f86571126c0 RCX: 00007f865615cece
[ 1561.070046][T30665] RDX: 0000000000000001 RSI: 00007f86571120a0 RDI: 0000000000000007
[ 1561.070056][T30665] RBP: 00007f8657112090 R08: 0000000000000000 R09: 0000000000000000
[ 1561.070073][T30665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1561.070083][T30665] R13: 00007f8656416038 R14: 00007f8656415fa0 R15: 00007ffe37664d98
[ 1561.070109][T30665]  </TASK>
[ 1561.399460][T30675] overlayfs: missing 'lowerdir'
[ 1561.871127][T30679] tipc: Started in network mode
[ 1561.876027][T30679] tipc: Node identity 6a4bea7dae6e, cluster identity 4711
[ 1561.883394][T30679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1561.961789][T30678] tipc: Disabling bearer <eth:syzkaller0>
[ 1562.360752][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1562.449106][T30703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1562.459770][T30703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1562.482181][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7155'.
[ 1562.498936][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7155'.
[ 1562.608339][T15010] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1562.702787][ T5896] usb 1-1: Using ep0 maxpacket: 16
[ 1562.713225][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1562.725269][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1562.756696][ T5896] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1562.770172][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.778839][T15010] usb 2-1: Using ep0 maxpacket: 8
[ 1562.838605][ T5896] usb 1-1: config 0 descriptor??
[ 1562.982431][T15010] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1562.991974][T15010] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.008304][T15010] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1563.022619][T15010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.387026][T30690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1563.511089][T30690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1563.572642][ T5896] apple 0003:05AC:024B.001B: unknown global tag 0xe
[ 1563.595451][ T5896] apple 0003:05AC:024B.001B: item 0 1 1 14 parsing failed
[ 1563.630880][ T5896] apple 0003:05AC:024B.001B: parse failed
[ 1563.833695][ T5896] apple 0003:05AC:024B.001B: probe with driver apple failed with error -22
[ 1564.484582][ T5896] usb 1-1: USB disconnect, device number 3
[ 1564.711649][   T30] audit: type=1400 audit(1771807606.177:12923): avc:  denied  { append } for  pid=30709 comm="syz.5.7157" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1564.802325][   T30] audit: type=1400 audit(1771807606.186:12924): avc:  denied  { create } for  pid=30709 comm="syz.5.7157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1564.893340][ T5896] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1565.085873][ T5896] usb 5-1: Using ep0 maxpacket: 32
[ 1565.098216][ T5896] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1565.126033][T30734] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7163'.
[ 1565.133400][ T5896] usb 5-1: config 0 has no interface number 0
[ 1565.146148][ T5896] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1565.160446][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.179341][ T5896] usb 5-1: Product: syz
[ 1565.190066][ T5896] usb 5-1: Manufacturer: syz
[ 1565.200843][ T5896] usb 5-1: SerialNumber: syz
[ 1565.213740][ T5896] usb 5-1: config 0 descriptor??
[ 1565.233832][ T5896] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1565.264921][ T5896] usb 5-1: selecting invalid altsetting 1
[ 1565.270859][ T5896] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1565.281305][ T5896] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1565.300220][ T5896] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1565.322137][ T5896] usb 5-1: media controller created
[ 1565.344617][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1565.363925][T15010] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1565.376840][T30740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1565.385691][T30740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1565.441396][ T5896] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1565.448463][ T5896] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1565.457943][ T5896] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1565.479934][ T5896] usb 5-1: USB disconnect, device number 115
[ 1565.513138][T15010] usb 1-1: device descriptor read/64, error -71
[ 1565.555501][ T5883] usb 2-1: USB disconnect, device number 115
[ 1565.591123][T15686] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1565.705642][T30747] netlink: 'syz.1.7169': attribute type 1 has an invalid length.
[ 1565.714480][T30747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7169'.
[ 1565.780231][T15686] usb 6-1: Using ep0 maxpacket: 8
[ 1566.165897][T15010] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1566.558705][T15686] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1566.582595][T15686] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[ 1566.603743][T15686] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1566.622944][T15686] usb 6-1: config 250 has no interface number 0
[ 1566.640215][T15686] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1566.662810][T15686] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1566.678009][T15010] usb 1-1: device descriptor read/64, error -71
[ 1566.697936][T15686] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1566.719190][T15686] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1566.757680][T15686] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1566.784128][T15686] usb 6-1: config 250 interface 228 has no altsetting 0
[ 1566.795940][T15010] usb usb1-port1: attempt power cycle
[ 1566.914548][T15686] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1567.024460][T15686] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1567.066143][T15686] usb 6-1: Product: syz
[ 1567.076892][T15686] usb 6-1: SerialNumber: syz
[ 1567.095517][T15686] hub 6-1:250.228: bad descriptor, ignoring hub
[ 1567.101796][T15686] hub 6-1:250.228: probe with driver hub failed with error -5
[ 1567.360794][T15686] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1567.436775][T15010] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1567.474251][T30767] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1567.493695][T15010] usb 1-1: device descriptor read/8, error -71
[ 1567.638462][   T30] audit: type=1400 audit(1771807608.919:12925): avc:  denied  { read write } for  pid=30741 comm="syz.5.7167" name="lp0" dev="devtmpfs" ino=5068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1567.708478][   T30] audit: type=1400 audit(1771807608.919:12926): avc:  denied  { open } for  pid=30741 comm="syz.5.7167" path="/dev/usb/lp0" dev="devtmpfs" ino=5068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1567.759036][T15010] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1567.814870][T30773] syzkaller0: entered promiscuous mode
[ 1567.820336][T30773] syzkaller0: entered allmulticast mode
[ 1567.832543][T15010] usb 1-1: device descriptor read/8, error -71
[ 1567.949745][T15010] usb usb1-port1: unable to enumerate USB device
[ 1567.966561][T30776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1568.004407][T30776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1568.439706][T30742] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 1568.501760][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7180'.
[ 1568.537589][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7180'.
[ 1568.571318][   T30] audit: type=1400 audit(1771807609.789:12927): avc:  denied  { write } for  pid=30778 comm="syz.0.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1568.660278][   T30] audit: type=1400 audit(1771807609.798:12928): avc:  denied  { nlmsg_write } for  pid=30778 comm="syz.0.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1568.674484][T30788] FAULT_INJECTION: forcing a failure.
[ 1568.674484][T30788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1568.722509][T30788] CPU: 0 UID: 0 PID: 30788 Comm: syz.1.7181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1568.722540][T30788] Tainted: [L]=SOFTLOCKUP
[ 1568.722547][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1568.722558][T30788] Call Trace:
[ 1568.722564][T30788]  <TASK>
[ 1568.722572][T30788]  dump_stack_lvl+0x100/0x190
[ 1568.722605][T30788]  should_fail_ex.cold+0x5/0xa
[ 1568.722629][T30788]  _copy_from_user+0x2e/0xd0
[ 1568.722655][T30788]  binder_ioctl+0x4f5/0x7610
[ 1568.722685][T30788]  ? tomoyo_path_number_perm+0x188/0x580
[ 1568.722716][T30788]  ? __pfx_binder_ioctl+0x10/0x10
[ 1568.722738][T30788]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1568.722761][T30788]  ? do_vfs_ioctl+0x226/0x13e0
[ 1568.722782][T30788]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1568.722802][T30788]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1568.722828][T30788]  ? hook_file_ioctl_common+0x146/0x410
[ 1568.722855][T30788]  ? selinux_file_ioctl+0x139/0x290
[ 1568.722871][T30788]  ? selinux_file_ioctl+0xb4/0x290
[ 1568.722890][T30788]  ? __pfx_binder_ioctl+0x10/0x10
[ 1568.722909][T30788]  __x64_sys_ioctl+0x18e/0x210
[ 1568.722933][T30788]  do_syscall_64+0x106/0xf80
[ 1568.722947][T30788]  ? clear_bhb_loop+0x40/0x90
[ 1568.722966][T30788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1568.722982][T30788] RIP: 0033:0x7f610279c629
[ 1568.722998][T30788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1568.723013][T30788] RSP: 002b:00007f610372a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1568.723031][T30788] RAX: ffffffffffffffda RBX: 00007f6102a15fa0 RCX: 00007f610279c629
[ 1568.723043][T30788] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000003
[ 1568.723054][T30788] RBP: 00007f610372a090 R08: 0000000000000000 R09: 0000000000000000
[ 1568.723064][T30788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1568.723074][T30788] R13: 00007f6102a16038 R14: 00007f6102a15fa0 R15: 00007ffca4b0a778
[ 1568.723099][T30788]  </TASK>
[ 1568.723108][T30788] binder: 30787:30788 ioctl c0306201 200000000040 returned -14
[ 1569.288783][T30742] netlink: 'syz.5.7167': attribute type 2 has an invalid length.
[ 1569.335387][T30742] ‚#{6c: entered promiscuous mode
[ 1569.359462][   T30] audit: type=1400 audit(1771807610.528:12929): avc:  denied  { setopt } for  pid=30741 comm="syz.5.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1569.447078][   T30] audit: type=1400 audit(1771807610.603:12930): avc:  denied  { write } for  pid=30741 comm="syz.5.7167" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1569.447127][   T30] audit: type=1400 audit(1771807610.603:12931): avc:  denied  { open } for  pid=30741 comm="syz.5.7167" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1569.513168][T30770] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7167'.
[ 1569.573869][ T5951] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1569.759155][ T5951] usb 1-1: Using ep0 maxpacket: 16
[ 1569.787867][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[ 1569.845116][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1569.880145][ T5951] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 1569.915788][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1569.950400][ T5951] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1570.005960][ T5951] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1570.025685][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.054727][ T5951] usb 1-1: Product: syz
[ 1570.079582][ T5951] usb 1-1: Manufacturer: syz
[ 1570.181561][ T5951] usb 1-1: SerialNumber: syz
[ 1570.198914][T30800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1570.224054][ T5951] usb 1-1: config 0 descriptor??
[ 1570.236945][T30800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.256422][ T5951] port100 1-1:0.0: NFC: Could not get supported command types
[ 1570.469930][ T5875] usb 1-1: USB disconnect, device number 8
[ 1570.546935][T30813] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000)
[ 1570.824439][   T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1570.984388][   T24] usb 2-1: device descriptor read/64, error -71
[ 1571.258662][   T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1571.298012][T21486] usb 6-1: USB disconnect, device number 48
[ 1571.319388][T14984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1571.331716][T21486] usblp0: removed
[ 1571.360105][T14984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1571.422550][   T24] usb 2-1: device descriptor read/64, error -71
[ 1571.569110][   T24] usb usb2-port1: attempt power cycle
[ 1571.777994][ T5883] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1571.795383][T14984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1571.851072][T14984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1571.967569][ T5883] usb 5-1: Using ep0 maxpacket: 16
[ 1571.980775][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1571.981345][   T24] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1572.017075][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1572.063425][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1572.078393][T14984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1572.083326][ T5883] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1572.088891][   T24] usb 2-1: device descriptor read/8, error -71
[ 1572.099530][T14984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.127909][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.150895][ T5883] usb 5-1: config 0 descriptor??
[ 1572.278790][T14984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1572.322953][T14984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.352295][   T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1572.387556][   T24] usb 2-1: device descriptor read/8, error -71
[ 1572.466149][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1572.517379][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1572.529940][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1572.545639][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1572.556992][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1572.630915][T15010] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1572.747791][   T30] audit: type=1400 audit(1771807613.654:12932): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1572.863889][   T24] usb usb2-port1: unable to enumerate USB device
[ 1573.727634][T15010] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1573.808372][T15010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.987534][T15010] usb 1-1: config 0 descriptor??
[ 1574.401654][   T30] audit: type=1400 audit(1771807615.254:12933): avc:  denied  { getopt } for  pid=30831 comm="syz.0.7197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1574.435784][T30833] lo speed is unknown, defaulting to 1000
[ 1574.535322][T15010] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1574.677790][T15010] [drm:udl_init] *ERROR* Selecting channel failed
[ 1574.914744][T25713] Bluetooth: hci0: command tx timeout
[ 1574.994582][   T30] audit: type=1400 audit(1771807615.806:12934): avc:  denied  { read } for  pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1575.042655][T15010] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1575.073523][T15010] [drm] Initialized udl on minor 2
[ 1575.078869][ T5883] usbhid 5-1:0.0: can't add hid device: -71
[ 1575.085113][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1575.139647][T15010] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1575.162599][   T30] audit: type=1400 audit(1771807615.937:12935): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1575.229131][ T5883] usb 5-1: USB disconnect, device number 116
[ 1575.239562][T15010] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1575.296088][T15686] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1575.340545][   T30] audit: type=1400 audit(1771807615.937:12936): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1575.390615][T15010] usb 1-1: USB disconnect, device number 9
[ 1575.399610][T14984] bridge_slave_1: left allmulticast mode
[ 1575.405284][T14984] bridge_slave_1: left promiscuous mode
[ 1575.420656][T15686] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1575.446736][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'.
[ 1575.465756][T15686] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1575.493977][T14984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1575.514907][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'.
[ 1575.531133][   T30] audit: type=1400 audit(1771807615.937:12937): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1575.563722][   T30] audit: type=1400 audit(1771807615.937:12938): avc:  denied  { read } for  pid=5472 comm="dhcpcd" name="n125" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1575.592817][T14984] bridge_slave_0: left allmulticast mode
[ 1575.603694][T14984] bridge_slave_0: left promiscuous mode
[ 1575.613282][T14984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.641510][   T30] audit: type=1400 audit(1771807615.937:12939): avc:  denied  { open } for  pid=5472 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1575.667262][   T30] audit: type=1400 audit(1771807615.937:12940): avc:  denied  { getattr } for  pid=5472 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1575.691718][T30857] netlink: 'syz.4.7202': attribute type 1 has an invalid length.
[ 1575.746659][T30858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7202'.
[ 1575.982338][T15010] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1576.907736][T15010] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1576.916967][T15010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.925026][T15010] usb 1-1: Product: syz
[ 1576.930792][T15010] usb 1-1: Manufacturer: syz
[ 1576.935432][T15010] usb 1-1: SerialNumber: syz
[ 1576.956764][T15010] usb 1-1: config 0 descriptor??
[ 1576.971318][T15010] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1577.118944][T25713] Bluetooth: hci0: command tx timeout
[ 1577.339215][T30876] netlink: 'syz.4.7203': attribute type 1 has an invalid length.
[ 1577.402797][T30877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7203'.
[ 1577.702417][   T30] audit: type=1400 audit(1771807618.230:12941): avc:  denied  { remount } for  pid=30868 comm="syz.1.7204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1578.378521][T30874] overlayfs: missing 'lowerdir'
[ 1579.017569][   T30] audit: type=1400 audit(1771807619.437:12942): avc:  denied  { mount } for  pid=30853 comm="syz.0.7201" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1579.228660][T14984] : left promiscuous mode
[ 1579.248939][   T30] audit: type=1400 audit(1771807619.755:12943): avc:  denied  { read open } for  pid=30882 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.298158][   T30] audit: type=1400 audit(1771807619.755:12944): avc:  denied  { getattr } for  pid=30882 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.359060][   T30] audit: type=1400 audit(1771807619.858:12945): avc:  denied  { unmount } for  pid=27778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1579.379341][T25713] Bluetooth: hci0: command tx timeout
[ 1579.379405][ T5883] usb 1-1: USB disconnect, device number 10
[ 1579.830500][T30833] chnl_net:caif_netlink_parms(): no params data found
[ 1579.879604][T14984] : left promiscuous mode
[ 1579.942817][T14984] ‚#{6c: left promiscuous mode
[ 1579.955665][   T30] audit: type=1400 audit(1771807620.448:12946): avc:  denied  { add_name } for  pid=30871 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.988115][   T30] audit: type=1400 audit(1771807620.466:12947): avc:  denied  { create } for  pid=30871 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1580.046115][   T30] audit: type=1400 audit(1771807620.466:12948): avc:  denied  { write } for  pid=30871 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=14260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1580.097911][T14984] tipc: Left network mode
[ 1580.131928][T30899] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1580.238975][   T30] audit: type=1400 audit(1771807620.476:12949): avc:  denied  { append } for  pid=30871 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=14260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1580.441634][T30899] usb 1-1: device descriptor read/64, error -71
[ 1580.504809][T30833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1580.522603][T30833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1580.540957][T30833] bridge_slave_0: entered allmulticast mode
[ 1580.557432][T30833] bridge_slave_0: entered promiscuous mode
[ 1580.573411][   T30] audit: type=1400 audit(1771807620.981:12950): avc:  denied  { remove_name } for  pid=30916 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=14260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1580.643964][T30833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1580.665128][T30833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1580.693909][   T30] audit: type=1400 audit(1771807621.028:12951): avc:  denied  { unlink } for  pid=30916 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=14260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1580.737497][T30899] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1580.769602][T30833] bridge_slave_1: entered allmulticast mode
[ 1580.821115][T30833] bridge_slave_1: entered promiscuous mode
[ 1580.911882][T30899] usb 1-1: device descriptor read/64, error -71
[ 1581.040616][T30833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1581.041562][T30899] usb usb1-port1: attempt power cycle
[ 1581.123025][T30833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.249468][T30922] binder: 30921:30922 ioctl c0306201 200000000040 returned -14
[ 1581.350763][T30833] team0: Port device team_slave_0 added
[ 1581.422893][T14984] hsr_slave_0: left promiscuous mode
[ 1581.495001][T14984] hsr_slave_1: left promiscuous mode
[ 1581.501120][T30899] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1581.511217][T30936] netlink: 'syz.2.7213': attribute type 1 has an invalid length.
[ 1581.557491][T25713] Bluetooth: hci0: command tx timeout
[ 1581.566320][T30937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7213'.
[ 1581.577279][T30899] usb 1-1: device descriptor read/8, error -71
[ 1581.597637][T14984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1581.652894][T14984] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1581.816627][T14984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1582.137103][T14984] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1582.349036][T30899] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1582.486243][T14984] veth1_macvtap: left promiscuous mode
[ 1582.492789][T14984] veth0_macvtap: left promiscuous mode
[ 1582.498751][T14984] veth1_vlan: left promiscuous mode
[ 1582.578714][T30899] usb 1-1: device descriptor read/8, error -71
[ 1582.739149][T30899] usb usb1-port1: unable to enumerate USB device
[ 1582.852519][T14984] veth0_vlan: left promiscuous mode
[ 1583.854803][T14984] team0 (unregistering): Port device team_slave_1 removed
[ 1583.889405][T14984] team0 (unregistering): Port device team_slave_0 removed
[ 1584.107947][T30833] team0: Port device team_slave_1 added
[ 1584.248964][T30833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1584.256024][T30833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1584.334279][T30833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1584.375035][T30833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1584.382197][T30833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1584.417283][T30833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1584.649228][T30996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7220'.
[ 1585.111486][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1585.167069][T30833] hsr_slave_0: entered promiscuous mode
[ 1585.180184][T30833] hsr_slave_1: entered promiscuous mode
[ 1585.203407][T30833] debugfs: 'hsr0' already exists in 'hsr'
[ 1585.219879][T30833] Cannot create hsr debugfs directory
[ 1585.303677][   T24] usb 1-1: Using ep0 maxpacket: 8
[ 1585.322185][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1585.334525][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.366910][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1585.390149][   T24] pvrusb2: **********
[ 1585.402633][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1585.437147][   T24] pvrusb2: Important functionality might not be entirely working.
[ 1585.472122][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1585.509992][   T24] pvrusb2: **********
[ 1585.733460][ T2338] pvrusb2: Invalid write control endpoint
[ 1585.905610][T30899] usb 1-1: USB disconnect, device number 15
[ 1585.969212][ T2338] pvrusb2: Invalid write control endpoint
[ 1585.994050][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1586.027376][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1586.049398][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1586.065256][T30833] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1586.097301][ T2338] pvrusb2: Device being rendered inoperable
[ 1586.127673][T30833] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1586.130230][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1586.183873][T30833] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1586.190812][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d)
[ 1586.238270][ T2338] pvrusb2: Attached sub-driver cx25840
[ 1586.243045][T30833] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1586.293638][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1586.372116][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1586.579541][T30833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1586.647887][T30833] 8021q: adding VLAN 0 to HW filter on device team0
[ 1586.692957][ T5883] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1586.703542][T14984] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1586.710628][T14984] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1586.776449][T12617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1586.783542][T12617] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1586.874513][ T5883] usb 5-1: device descriptor read/64, error -71
[ 1586.981439][T30899] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1587.152505][T30899] usb 1-1: Using ep0 maxpacket: 8
[ 1587.157600][ T5883] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1587.180977][T30899] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[ 1587.207573][T30899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1587.228777][T30899] usb 1-1: Product: syz
[ 1587.239577][T30899] usb 1-1: Manufacturer: syz
[ 1587.254319][T30899] usb 1-1: SerialNumber: syz
[ 1587.277379][T30899] usb 1-1: config 0 descriptor??
[ 1587.305157][T30899] usbtest 1-1:0.0: FX2 device
[ 1587.323710][T30899] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[ 1587.334192][ T5883] usb 5-1: device descriptor read/64, error -71
[ 1587.385512][T30833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1587.462595][ T5883] usb usb5-port1: attempt power cycle
[ 1587.857720][ T5883] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1587.888253][T31065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1587.909458][ T5883] usb 5-1: device descriptor read/8, error -71
[ 1587.975471][T31065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1587.986493][T31067] syzkaller0: entered promiscuous mode
[ 1587.991945][T31067] syzkaller0: entered allmulticast mode
[ 1588.219427][ T5883] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1588.255404][ T5883] usb 5-1: device descriptor read/8, error -71
[ 1588.392774][ T5883] usb usb5-port1: unable to enumerate USB device
[ 1588.909670][T30833] veth0_vlan: entered promiscuous mode
[ 1589.180349][T30833] veth1_vlan: entered promiscuous mode
[ 1589.364981][T30833] veth0_macvtap: entered promiscuous mode
[ 1589.391355][T30833] veth1_macvtap: entered promiscuous mode
[ 1589.641647][T30833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1589.679596][T30833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1589.730269][ T7612] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.797112][ T7612] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.866791][ T7612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.916466][ T7612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.995125][   T30] audit: type=1400 audit(1771807629.852:12952): avc:  denied  { listen } for  pid=31092 comm="syz.4.7233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1590.037232][T30893] usb 1-1: USB disconnect, device number 16
[ 1590.046428][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1590.097008][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1590.106306][   T30] audit: type=1400 audit(1771807629.852:12953): avc:  denied  { accept } for  pid=31092 comm="syz.4.7233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1590.170272][ T7612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1590.190449][ T7612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1590.211818][   T30] audit: type=1400 audit(1771807630.049:12954): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/root/syzkaller.Nlt8Vu/syz-tmp" dev="sda1" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1590.253129][T31091] syzkaller0: entered promiscuous mode
[ 1590.258962][T31091] syzkaller0: entered allmulticast mode
[ 1590.282850][   T30] audit: type=1400 audit(1771807630.049:12955): avc:  denied  { mount } for  pid=30833 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1590.795674][   T30] audit: type=1400 audit(1771807630.049:12956): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/root/syzkaller.Nlt8Vu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1590.909733][   T30] audit: type=1400 audit(1771807630.049:12957): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/root/syzkaller.Nlt8Vu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=129327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1590.940344][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1591.048050][T30893] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1591.103921][   T30] audit: type=1400 audit(1771807630.068:12958): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1591.255749][T30893] usb 1-1: Using ep0 maxpacket: 16
[ 1591.279285][   T30] audit: type=1400 audit(1771807630.068:12959): avc:  denied  { mount } for  pid=30833 comm="syz-executor" name="/" dev="gadgetfs" ino=7345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1591.397927][T30893] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 1591.443486][T30893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.496695][   T30] audit: type=1400 audit(1771807630.068:12960): avc:  denied  { mount } for  pid=30833 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1591.534674][T30893] usb 1-1: Product: syz
[ 1591.566563][T30893] usb 1-1: Manufacturer: syz
[ 1591.619235][T30893] usb 1-1: SerialNumber: syz
[ 1591.712041][T30893] usb 1-1: config 0 descriptor??
[ 1591.731342][   T30] audit: type=1400 audit(1771807630.068:12961): avc:  denied  { mounton } for  pid=30833 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1591.797444][T30893] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 1592.103868][T30893] pwc: Warning: more than 1 configuration available.
[ 1592.121402][ T5875] usb 7-1: Using ep0 maxpacket: 8
[ 1592.151363][T30893] pwc: Failed to set LED on/off time (-71)
[ 1592.161847][ T5875] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1592.170781][ T5875] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.194282][T30893] pwc: send_video_command error -71
[ 1592.205002][T30893] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1592.249620][T30893] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 1592.267028][T31119] syzkaller0: entered promiscuous mode
[ 1592.277163][T31119] syzkaller0: entered allmulticast mode
[ 1592.297427][T30893] usb 1-1: USB disconnect, device number 17
[ 1592.542042][ T5875] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1592.592933][T31127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7242'.
[ 1592.604163][T31127] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7242'.
[ 1592.614450][T31127] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7242'.
[ 1592.658027][ T5875] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1592.667434][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.677990][T31129] usb usb1: usbfs: process 31129 (syz.1.7241) did not claim interface 5 before use
[ 1592.913846][ T5875] usbtmc 7-1:16.0: bulk endpoints not found
[ 1593.464858][T31142] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7246'.
[ 1594.507104][T31157] netlink: 'syz.0.7249': attribute type 1 has an invalid length.
[ 1594.517557][T31157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7249'.
[ 1595.463604][T30893] usb 7-1: USB disconnect, device number 2
[ 1595.505231][ T5883] hid-generic 0003:0004:FFFFFFFE.001C: unknown main item tag 0x0
[ 1595.513833][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1595.513844][   T30] audit: type=1400 audit(1771807634.981:12967): avc:  denied  { read write } for  pid=31159 comm="syz.4.7245" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1595.568493][ T5883] hid-generic 0003:0004:FFFFFFFE.001C: unknown main item tag 0x0
[ 1595.590822][T31166] syzkaller0: entered promiscuous mode
[ 1595.596532][ T5883] hid-generic 0003:0004:FFFFFFFE.001C: unknown main item tag 0x0
[ 1595.615350][T31166] syzkaller0: entered allmulticast mode
[ 1595.680178][T31170] fuse: Unknown parameter 'f'
[ 1595.697665][   T30] audit: type=1400 audit(1771807634.981:12968): avc:  denied  { open } for  pid=31159 comm="syz.4.7245" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1595.738027][ T5883] hid-generic 0003:0004:FFFFFFFE.001C: hidraw0: USB HID v4.00 Device [syz0] on syz1
[ 1595.890351][T31169] fido_id[31169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1595.969230][   T30] audit: type=1400 audit(1771807635.430:12969): avc:  denied  { unmount } for  pid=25119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1596.035143][ T5875] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1596.064520][T20389] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1597.261337][ T5875] usb 1-1: Using ep0 maxpacket: 32
[ 1597.268820][T20389] usb 2-1: Using ep0 maxpacket: 32
[ 1597.277595][ T5875] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1597.287211][ T5875] usb 1-1: config 0 has no interface number 0
[ 1597.299402][ T5875] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1597.348175][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.356523][ T5875] usb 1-1: Product: syz
[ 1597.362882][ T5875] usb 1-1: Manufacturer: syz
[ 1597.367508][ T5875] usb 1-1: SerialNumber: syz
[ 1597.395018][ T5875] usb 1-1: config 0 descriptor??
[ 1597.449420][ T5875] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1597.474819][ T5875] usb 1-1: selecting invalid altsetting 1
[ 1597.505974][ T5875] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1597.513824][T20389] usb 2-1: device descriptor read/all, error -71
[ 1597.549164][   T30] audit: type=1400 audit(1771807636.908:12970): avc:  denied  { create } for  pid=31185 comm="syz.6.7255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1597.574363][ T5875] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1597.596783][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1597.646250][ T5875] usb 1-1: media controller created
[ 1597.672217][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1598.250024][T31192] FAULT_INJECTION: forcing a failure.
[ 1598.250024][T31192] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1598.263366][T31192] CPU: 0 UID: 0 PID: 31192 Comm: syz.2.7250 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1598.263391][T31192] Tainted: [L]=SOFTLOCKUP
[ 1598.263396][T31192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1598.263402][T31192] Call Trace:
[ 1598.263407][T31192]  <TASK>
[ 1598.263411][T31192]  dump_stack_lvl+0x100/0x190
[ 1598.263431][T31192]  should_fail_ex.cold+0x5/0xa
[ 1598.263443][T31192]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1598.263455][T31192]  should_fail_alloc_page+0xeb/0x140
[ 1598.263473][T31192]  prepare_alloc_pages+0x1f0/0x5f0
[ 1598.263484][T31192]  ? rcu_is_watching+0x12/0xc0
[ 1598.263499][T31192]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[ 1598.263516][T31192]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1598.263531][T31192]  ? kvm_sched_clock_read+0x11/0x20
[ 1598.263547][T31192]  ? sched_clock+0x38/0x60
[ 1598.263563][T31192]  ? sched_clock_cpu+0x6c/0x570
[ 1598.263580][T31192]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1598.263595][T31192]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1598.263611][T31192]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1598.263624][T31192]  ? find_held_lock+0x2b/0x80
[ 1598.263636][T31192]  ? __schedule+0x2fa6/0x60e0
[ 1598.263654][T31192]  ? rcu_is_watching+0x12/0xc0
[ 1598.263666][T31192]  ? trace_sched_exit_tp+0x13a/0x180
[ 1598.263683][T31192]  ? __schedule+0x1000/0x60e0
[ 1598.263699][T31192]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1598.263716][T31192]  ? policy_nodemask+0xed/0x4f0
[ 1598.263733][T31192]  alloc_pages_mpol+0x1fb/0x550
[ 1598.263751][T31192]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1598.263767][T31192]  ? __pfx___schedule+0x10/0x10
[ 1598.263786][T31192]  alloc_pages_noprof+0x131/0x390
[ 1598.263804][T31192]  get_free_pages_noprof+0x10/0xb0
[ 1598.263825][T31192]  __kasan_populate_vmalloc+0xa0/0x210
[ 1598.263843][T31192]  alloc_vmap_area+0x95d/0x2bd0
[ 1598.263865][T31192]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1598.263886][T31192]  __get_vm_area_node+0x1ca/0x330
[ 1598.263898][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.263913][T31192]  __vmalloc_node_range_noprof+0x213/0x1530
[ 1598.263925][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.263943][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.263961][T31192]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1598.263979][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.263993][T31192]  vmalloc_user_noprof+0x9e/0xe0
[ 1598.264004][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.264019][T31192]  xskq_create+0xfb/0x1d0
[ 1598.264034][T31192]  xsk_setsockopt+0x743/0xab0
[ 1598.264050][T31192]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1598.264064][T31192]  ? find_held_lock+0x2b/0x80
[ 1598.264076][T31192]  ? __fget_files+0x215/0x3d0
[ 1598.264089][T31192]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1598.264107][T31192]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1598.264122][T31192]  do_sock_setsockopt+0xf3/0x1d0
[ 1598.264137][T31192]  __sys_setsockopt+0x195/0x220
[ 1598.264156][T31192]  __x64_sys_setsockopt+0xbd/0x160
[ 1598.264172][T31192]  ? do_syscall_64+0x9b/0xf80
[ 1598.264183][T31192]  do_syscall_64+0x106/0xf80
[ 1598.264193][T31192]  ? clear_bhb_loop+0x40/0x90
[ 1598.264206][T31192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1598.264217][T31192] RIP: 0033:0x7f865619c629
[ 1598.264226][T31192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1598.264236][T31192] RSP: 002b:00007f86570d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1598.264247][T31192] RAX: ffffffffffffffda RBX: 00007f8656416180 RCX: 00007f865619c629
[ 1598.264254][T31192] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[ 1598.264261][T31192] RBP: 00007f86570d0090 R08: 0000000000000004 R09: 0000000000000000
[ 1598.264267][T31192] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1598.264273][T31192] R13: 00007f8656416218 R14: 00007f8656416180 R15: 00007ffe37664d98
[ 1598.264288][T31192]  </TASK>
[ 1598.264404][T31192] syz.2.7250: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1598.656488][T31192] CPU: 0 UID: 0 PID: 31192 Comm: syz.2.7250 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1598.656514][T31192] Tainted: [L]=SOFTLOCKUP
[ 1598.656519][T31192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1598.656527][T31192] Call Trace:
[ 1598.656531][T31192]  <TASK>
[ 1598.656536][T31192]  dump_stack_lvl+0x100/0x190
[ 1598.656556][T31192]  warn_alloc.cold+0x95/0x1c1
[ 1598.656575][T31192]  ? __pfx_warn_alloc+0x10/0x10
[ 1598.656588][T31192]  ? lockdep_hardirqs_on+0x78/0x100
[ 1598.656602][T31192]  ? __get_vm_area_node+0x2c5/0x330
[ 1598.656616][T31192]  ? __get_vm_area_node+0x208/0x330
[ 1598.656629][T31192]  __vmalloc_node_range_noprof+0xbf4/0x1530
[ 1598.656645][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.656664][T31192]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1598.656682][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.656697][T31192]  vmalloc_user_noprof+0x9e/0xe0
[ 1598.656708][T31192]  ? xskq_create+0xfb/0x1d0
[ 1598.656723][T31192]  xskq_create+0xfb/0x1d0
[ 1598.656739][T31192]  xsk_setsockopt+0x743/0xab0
[ 1598.656754][T31192]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1598.656768][T31192]  ? find_held_lock+0x2b/0x80
[ 1598.656781][T31192]  ? __fget_files+0x215/0x3d0
[ 1598.656793][T31192]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1598.656817][T31192]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1598.656832][T31192]  do_sock_setsockopt+0xf3/0x1d0
[ 1598.656846][T31192]  __sys_setsockopt+0x195/0x220
[ 1598.656866][T31192]  __x64_sys_setsockopt+0xbd/0x160
[ 1598.656882][T31192]  ? do_syscall_64+0x9b/0xf80
[ 1598.656893][T31192]  do_syscall_64+0x106/0xf80
[ 1598.656903][T31192]  ? clear_bhb_loop+0x40/0x90
[ 1598.656916][T31192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1598.656927][T31192] RIP: 0033:0x7f865619c629
[ 1598.656937][T31192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1598.656947][T31192] RSP: 002b:00007f86570d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1598.656957][T31192] RAX: ffffffffffffffda RBX: 00007f8656416180 RCX: 00007f865619c629
[ 1598.656964][T31192] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[ 1598.656971][T31192] RBP: 00007f86570d0090 R08: 0000000000000004 R09: 0000000000000000
[ 1598.656977][T31192] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1598.656983][T31192] R13: 00007f8656416218 R14: 00007f8656416180 R15: 00007ffe37664d98
[ 1598.656998][T31192]  </TASK>
[ 1598.657016][T31192] Mem-Info:
[ 1598.898458][T31192] active_anon:36893 inactive_anon:0 isolated_anon:0
[ 1598.898458][T31192]  active_file:18809 inactive_file:52057 isolated_file:0
[ 1598.898458][T31192]  unevictable:768 dirty:347 writeback:11
[ 1598.898458][T31192]  slab_reclaimable:14066 slab_unreclaimable:139450
[ 1598.898458][T31192]  mapped:43773 shmem:27562 pagetables:1687
[ 1598.898458][T31192]  sec_pagetables:0 bounce:0
[ 1598.898458][T31192]  kernel_misc_reclaimable:0
[ 1598.898458][T31192]  free:1196448 free_pcp:11513 free_cma:0
[ 1598.944635][T31192] Node 0 active_anon:147572kB inactive_anon:0kB active_file:75236kB inactive_file:208028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:175092kB dirty:1384kB writeback:44kB shmem:108712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15772kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1598.977186][T31192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1599.007196][T31192] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[ 1599.037336][T31192] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1599.043267][T31192] Node 0 DMA32 free:832152kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:147572kB inactive_anon:0kB active_file:75236kB inactive_file:208028kB unevictable:1536kB writepending:1428kB zspages:0kB present:3129332kB managed:2537236kB mlocked:0kB bounce:0kB free_pcp:45992kB local_pcp:8164kB free_cma:0kB
[ 1599.077164][T31192] lowmem_reserve[]: 0 0 1 1 1
[ 1599.082082][T31192] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1599.112050][T31192] lowmem_reserve[]: 0 0 0 0 0
[ 1599.116886][T31192] Node 1 Normal free:3938300kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1599.148596][T31192] lowmem_reserve[]: 0 0 0 0 0
[ 1599.153507][T31192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[ 1599.170358][T31192] Node 0 DMA32: 3110*4kB (UME) 4873*8kB (UE) 2867*16kB (UE) 361*32kB (UME) 1096*64kB (UME) 999*128kB (UM) 482*256kB (UM) 219*512kB (UM) 37*1024kB (UM) 17*2048kB (UM) 53*4096kB (M) = 832176kB
[ 1599.189696][T31192] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 1599.202347][T31192] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 12*16kB (UME) 7*32kB (UME) 8*64kB (UME) 8*128kB (UME) 4*256kB (ME) 2*512kB (ME) 2*1024kB (UM) 4*2048kB (UME) 958*4096kB (UM) = 3938300kB
[ 1599.220492][T31192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1599.230901][T31192] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=3 hugepages_size=2048kB
[ 1599.240274][T31192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1599.250094][T31192] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1599.259483][T31192] 98458 total pagecache pages
[ 1599.264671][T31192] 0 pages in swap cache
[ 1599.268860][T31192] Free swap  = 124996kB
[ 1599.273110][T31192] Total swap = 124996kB
[ 1599.277290][T31192] 2097051 pages RAM
[ 1599.281185][T31192] 0 pages HighMem/MovableOnly
[ 1599.285899][T31192] 430864 pages reserved
[ 1599.290093][T31192] 0 pages cma reserved
[ 1600.006060][ T5875] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1600.047304][ T5875] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1600.068859][ T5875] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1600.208280][   T30] audit: type=1400 audit(1771807639.379:12971): avc:  denied  { getopt } for  pid=31197 comm="syz.4.7256" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1600.295050][ T5875] usb 1-1: USB disconnect, device number 18
[ 1600.316027][   T30] audit: type=1400 audit(1771807639.379:12972): avc:  denied  { bind } for  pid=31197 comm="syz.4.7256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1600.875289][T31220] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7261'.
[ 1603.670200][T31246] usb usb1: usbfs: process 31246 (syz.2.7258) did not claim interface 5 before use
[ 1604.741623][ T5875] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1604.827501][   T30] audit: type=1400 audit(1771807643.721:12973): avc:  denied  { write } for  pid=31273 comm="syz.4.7272" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1604.932912][   T30] audit: type=1400 audit(1771807643.768:12974): avc:  denied  { getopt } for  pid=31273 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1604.987909][ T5875] usb 1-1: Using ep0 maxpacket: 16
[ 1605.015438][ T5875] usb 1-1: config 4 has an invalid interface number: 9 but max is 0
[ 1605.040155][   T30] audit: type=1400 audit(1771807643.768:12975): avc:  denied  { create } for  pid=31273 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1605.099984][ T5875] usb 1-1: config 4 has no interface number 0
[ 1605.127001][ T5875] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1605.156079][   T30] audit: type=1400 audit(1771807643.768:12976): avc:  denied  { bind } for  pid=31273 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1605.211781][ T5875] usb 1-1: config 4 interface 9 has no altsetting 0
[ 1605.256317][ T5875] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1605.286515][   T30] audit: type=1400 audit(1771807643.768:12977): avc:  denied  { name_bind } for  pid=31273 comm="syz.4.7272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1605.341209][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.378294][ T5875] usb 1-1: Product: syz
[ 1605.396308][ T5875] usb 1-1: Manufacturer: syz
[ 1605.409130][ T5875] usb 1-1: SerialNumber: syz
[ 1605.456815][T31260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1605.503786][ T5875] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1606.367816][T13193] usb 1-1: Failed to submit usb control message: -71
[ 1606.393941][ T5875] usb 1-1: USB disconnect, device number 19
[ 1606.400447][T13193] usb 1-1: unable to send the bmi data to the device: -71
[ 1606.462926][T13193] usb 1-1: unable to get target info from device
[ 1606.501411][T13193] usb 1-1: could not get target info (-71)
[ 1606.547814][T13193] usb 1-1: could not probe fw (-71)
[ 1606.612056][T31313] overlayfs: missing 'lowerdir'
[ 1607.729505][T31325] netlink: 'syz.6.7281': attribute type 1 has an invalid length.
[ 1607.744655][T31325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7281'.
[ 1608.745321][T31325] mac80211_hwsim hwsim104 wlan0: entered promiscuous mode
[ 1610.441619][   T30] audit: type=1400 audit(1771807648.980:12978): avc:  denied  { setopt } for  pid=31369 comm="syz.2.7290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1610.956264][T31390] lo speed is unknown, defaulting to 1000
[ 1611.601984][T25713] Bluetooth: hci0: command tx timeout
[ 1611.604813][T31391] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1
[ 1611.623771][   T30] audit: type=1804 audit(1771807649.532:12979): pid=31391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.7293" name="/newroot/14/file0" dev="tmpfs" ino=98 res=1 errno=0
[ 1611.663183][T31391] ref_ctr increment failed for inode: 0x62 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888020744980
[ 1611.798766][T31391] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1
[ 1611.854091][T31391] ref_ctr decrement failed for inode: 0x62 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888020744980
[ 1611.871989][T31391] uprobe: syz.6.7293:31391 failed to unregister, leaking uprobe
[ 1613.155873][T31414] netlink: 'syz.4.7295': attribute type 1 has an invalid length.
[ 1613.966241][   T30] audit: type=1400 audit(1771807652.284:12980): avc:  denied  { ioctl } for  pid=31418 comm="syz.0.7298" path="socket:[131350]" dev="sockfs" ino=131350 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1614.220105][T30899] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1614.335144][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1614.487572][T30899] usb 1-1: device descriptor read/64, error -32
[ 1614.556987][ T8686] lec:lec_start_xmit: lec0:No lecd attached
[ 1614.631908][ T7612] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1614.686296][T31421] mkiss: ax0: crc mode is auto.
[ 1614.765885][T30899] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1614.882617][T30893] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1614.947684][T30899] usb 1-1: Using ep0 maxpacket: 32
[ 1614.954297][T30899] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1614.963232][T30899] usb 1-1: config 0 has no interface number 0
[ 1615.942234][T30899] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1615.951483][T30899] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1615.960510][T30899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.968658][T30893] usb 2-1: Using ep0 maxpacket: 16
[ 1615.979781][T30899] usb 1-1: Product: syz
[ 1615.984890][T30899] usb 1-1: Manufacturer: syz
[ 1615.990423][T30893] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[ 1616.132901][T30893] usb 2-1: config 4 has no interface number 0
[ 1616.139033][T30893] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1616.148901][T30899] usb 1-1: SerialNumber: syz
[ 1616.156963][T30899] usb 1-1: config 0 descriptor??
[ 1616.162689][T30893] usb 2-1: config 4 interface 9 has no altsetting 0
[ 1616.177287][T30893] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1616.193963][T30893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.202052][T30893] usb 2-1: Product: syz
[ 1616.207743][T30893] usb 2-1: Manufacturer: syz
[ 1616.215964][T30893] usb 2-1: SerialNumber: syz
[ 1616.246033][T31423] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1616.264773][T30893] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1616.786037][ T5821] Bluetooth: hci2: command 0x1003 tx timeout
[ 1616.786097][T25713] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1616.886980][   T30] audit: type=1400 audit(1771807654.997:12981): avc:  denied  { read } for  pid=31444 comm="syz.4.7304" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1616.931322][T31419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1616.997670][T31419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1617.055360][   T30] audit: type=1400 audit(1771807654.997:12982): avc:  denied  { open } for  pid=31444 comm="syz.4.7304" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1617.111686][ T5875] usb 2-1: USB disconnect, device number 122
[ 1617.126728][ T7612] usb 2-1: Failed to submit usb control message: -71
[ 1617.141974][ T7612] usb 2-1: unable to send the bmi data to the device: -71
[ 1617.159062][   T30] audit: type=1400 audit(1771807655.007:12983): avc:  denied  { ioctl } for  pid=31444 comm="syz.4.7304" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1617.185865][ T7612] usb 2-1: unable to get target info from device
[ 1617.192478][ T7612] usb 2-1: could not get target info (-71)
[ 1617.198447][ T7612] usb 2-1: could not probe fw (-71)
[ 1617.518524][T31450] mmap: syz.4.7306 (31450): VmData 37855232 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[ 1617.671696][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1617.724181][T31419] tmpfs: Bad value for 'grpquota_block_hardlimit'
[ 1617.780617][T31461] overlay: Unknown parameter 'func'
[ 1617.844944][ T5875] usb 7-1: Using ep0 maxpacket: 16
[ 1617.872697][T30899] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1617.949021][ T5875] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1618.124945][T30899] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[ 1618.159442][T30899] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1618.173930][T30899] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[ 1618.205979][T30899] usb 1-1: USB disconnect, device number 21
[ 1618.264834][ T5875] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1618.282357][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1618.302166][ T5875] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1618.311568][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1618.320167][T25713] Bluetooth: hci4: unexpected cc 0x2010 length: 69 > 1
[ 1618.327946][T25713] Bluetooth: hci4: unexpected event for opcode 0x2010
[ 1618.361102][ T5875] usb 7-1: config 0 descriptor??
[ 1618.475033][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7308'.
[ 1618.485369][T31462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7308'.
[ 1618.522535][   T30] audit: type=1400 audit(1771807656.523:12984): avc:  denied  { getopt } for  pid=31460 comm="syz.1.7308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1618.737167][ T5875] usbhid 7-1:0.0: can't add hid device: -71
[ 1618.769203][ T5875] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1618.784598][ T5875] usb 7-1: USB disconnect, device number 3
[ 1618.857169][T31473] netlink: 'syz.2.7311': attribute type 1 has an invalid length.
[ 1619.707711][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1619.821195][   T30] audit: type=1400 audit(1771807657.758:12985): avc:  denied  { read } for  pid=31481 comm="syz.1.7314" path="socket:[131503]" dev="sockfs" ino=131503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1619.914678][T31486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7315'.
[ 1619.923675][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1619.923702][    C1] lec:lec_tx_timeout: lec0
[ 1619.923771][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1620.102135][   T30] audit: type=1400 audit(1771807658.020:12986): avc:  denied  { ioctl } for  pid=31481 comm="syz.1.7314" path="socket:[131503]" dev="sockfs" ino=131503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1621.409485][T31508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1621.546348][T31514] usb usb1: usbfs: process 31514 (syz.1.7321) did not claim interface 5 before use
[ 1623.071181][   T30] audit: type=1400 audit(1771807660.790:12987): avc:  denied  { create } for  pid=31521 comm="syz.2.7324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1623.092258][T31522] syzkaller1: entered promiscuous mode
[ 1623.105446][T31522] syzkaller1: entered allmulticast mode
[ 1623.807914][T31526] 9pnet_fd: p9_fd_create_tcp (31526): problem connecting socket to 127.0.0.1
[ 1623.827120][   T30] audit: type=1400 audit(1771807661.482:12988): avc:  denied  { mounton } for  pid=31525 comm="syz.1.7325" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[ 1625.087966][T30893] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1625.258941][T30893] usb 5-1: Using ep0 maxpacket: 32
[ 1625.269517][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1625.278238][    C1] lec:lec_tx_timeout: lec0
[ 1625.296613][T30893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1625.333622][T30893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1625.369853][T30893] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1625.397455][T30893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.438793][T30893] usb 5-1: config 0 descriptor??
[ 1625.471812][T30893] hub 5-1:0.0: USB hub found
[ 1625.696732][T30893] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1625.838381][T31571] usb usb1: usbfs: process 31571 (syz.2.7336) did not claim interface 5 before use
[ 1625.912692][   T30] audit: type=1400 audit(1771807663.457:12989): avc:  denied  { name_bind } for  pid=31548 comm="syz.4.7332" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1625.935021][T31549] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7332'.
[ 1625.957276][T31549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7332'.
[ 1626.135140][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1626.455637][   T24] usb 7-1: Using ep0 maxpacket: 16
[ 1626.479084][   T24] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[ 1626.520360][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1626.551362][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1626.588088][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.611235][   T24] usb 7-1: Product: syz
[ 1626.621112][   T24] usb 7-1: Manufacturer: syz
[ 1626.631225][   T24] usb 7-1: SerialNumber: syz
[ 1626.666731][   T30] audit: type=1400 audit(1771807664.159:12990): avc:  denied  { setopt } for  pid=31583 comm="syz.1.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1626.739291][   T30] audit: type=1400 audit(1771807664.187:12991): avc:  denied  { append } for  pid=31583 comm="syz.1.7341" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1626.774975][   T30] audit: type=1400 audit(1771807664.187:12992): avc:  denied  { open } for  pid=31583 comm="syz.1.7341" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1628.304528][T31573] smc: net device bond0 applied user defined pnetid SYZ2
[ 1628.313219][T31573] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7338'.
[ 1628.360283][T30893] usbhid 5-1:0.0: can't add hid device: -71
[ 1628.362595][T31573] smc: removing net device bond0 with user defined pnetid SYZ2
[ 1628.366268][T30893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1628.411398][ T5883] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1628.458894][T31573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1628.459750][T31592] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1628.498750][T30893] usb 5-1: USB disconnect, device number 121
[ 1628.568411][T31573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1628.591379][   T30] audit: type=1400 audit(1771807665.956:12993): avc:  denied  { create } for  pid=31593 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1628.617552][T31594] nbd: must specify a device to reconfigure
[ 1628.623984][   T30] audit: type=1400 audit(1771807665.984:12994): avc:  denied  { setopt } for  pid=31593 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1628.635566][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1628.646999][T31573] bond0 (unregistering): Released all slaves
[ 1628.652032][ T5883] usb 2-1: Using ep0 maxpacket: 32
[ 1628.689430][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1628.699254][ T5883] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1628.710814][T31591] ip6gretap0: refused to change device tx_queue_len
[ 1628.721199][ T5883] usb 2-1: can't read configurations, error -61
[ 1628.865165][T31573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1628.881565][T31573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1628.902808][ T5883] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1628.914195][   T24] usb 7-1: 0:2 : does not exist
[ 1628.942602][   T24] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1629.006866][   T24] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1629.013330][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7346'.
[ 1629.037157][   T24] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1629.041660][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7346'.
[ 1629.063566][   T24] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[ 1629.117158][ T5883] usb 2-1: Using ep0 maxpacket: 32
[ 1629.125314][ T5883] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1629.141440][ T5883] usb 2-1: can't read configurations, error -61
[ 1629.159587][ T5883] usb usb2-port1: attempt power cycle
[ 1629.206710][   T24] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1629.517042][   T30] audit: type=1400 audit(1771807666.826:12995): avc:  denied  { read } for  pid=31611 comm="syz.2.7349" path="socket:[131749]" dev="sockfs" ino=131749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1629.532303][   T24] usb 7-1: USB disconnect, device number 4
[ 1629.561378][ T5883] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1629.601482][ T5883] usb 2-1: Using ep0 maxpacket: 32
[ 1629.638934][ T5883] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1629.668330][ T5883] usb 2-1: can't read configurations, error -61
[ 1629.677562][T31615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1629.698291][T31617] syzkaller0: entered promiscuous mode
[ 1629.713974][T31617] syzkaller0: entered allmulticast mode
[ 1629.741550][T31617] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[ 1629.843160][ T5883] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1630.037267][T31623] usb usb1: usbfs: process 31623 (syz.1.7352) did not claim interface 5 before use
[ 1630.099621][ T5883] usb 2-1: device not accepting address 126, error -71
[ 1630.128980][ T5883] usb usb2-port1: unable to enumerate USB device
[ 1630.302991][T30908] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1630.494890][T30908] usb 7-1: Using ep0 maxpacket: 8
[ 1630.512448][T30908] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1630.532841][T30908] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1630.569739][T30908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1630.603698][T30908] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1630.639767][T30908] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1630.679957][T30908] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1630.701758][T30908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.731858][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1630.738592][T30908] usbtmc 7-1:16.0: bulk endpoints not found
[ 1630.812576][   T30] audit: type=1400 audit(1771807668.042:12996): avc:  denied  { write } for  pid=31633 comm="syz.2.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1630.933029][ T5875] usb 1-1: Using ep0 maxpacket: 16
[ 1630.946551][ T5875] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1630.956538][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.986473][ T5875] usb 1-1: Product: syz
[ 1631.004853][ T5875] usb 1-1: Manufacturer: syz
[ 1631.030781][ T5875] usb 1-1: SerialNumber: syz
[ 1631.074643][ T5875] usb 1-1: config 0 descriptor??
[ 1631.103324][ T5875] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1631.136891][ T5875] usb 1-1: Detected FT-X
[ 1631.341160][ T5875] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1631.583729][T31625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7353'.
[ 1631.587138][   T30] audit: type=1400 audit(1771807668.763:12997): avc:  denied  { write } for  pid=31624 comm="syz.0.7353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1631.782788][T31652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1631.791521][T31652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1631.806282][   T30] audit: type=1400 audit(1771807668.969:12998): avc:  denied  { ioctl } for  pid=31640 comm="syz.2.7357" path="cgroup:[4026534415]" dev="nsfs" ino=4026534415 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1631.810120][T31641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7357'.
[ 1631.901163][ T5875] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1631.947691][   T30] audit: type=1400 audit(1771807669.100:12999): avc:  denied  { mount } for  pid=31653 comm="syz.1.7360" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1631.949052][T31654] overlay: Bad value for 'metacopy'
[ 1631.977293][   T30] audit: type=1400 audit(1771807669.109:13000): avc:  denied  { mounton } for  pid=31653 comm="syz.1.7360" path="/231/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[ 1631.978179][T31654] xt_TCPMSS: Only works on TCP SYN packets
[ 1632.013081][T31654] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7360'.
[ 1632.034462][T30908] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1632.055282][   T30] audit: type=1400 audit(1771807669.212:13001): avc:  denied  { unmount } for  pid=26641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1632.138976][ T5883] usb 1-1: USB disconnect, device number 22
[ 1632.152632][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1632.162738][ T5883] ftdi_sio 1-1:0.0: device disconnected
[ 1632.207831][T30908] usb 5-1: no configurations
[ 1632.212446][T30908] usb 5-1: can't read configurations, error -22
[ 1632.319297][T31659] netlink: 'syz.1.7361': attribute type 23 has an invalid length.
[ 1632.373467][T30908] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1632.591270][T30908] usb 5-1: no configurations
[ 1632.602707][T30908] usb 5-1: can't read configurations, error -22
[ 1632.648169][T30908] usb usb5-port1: attempt power cycle
[ 1632.972030][T31665] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1633.027562][T30908] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1633.049900][T30908] usb 5-1: no configurations
[ 1633.054596][T30908] usb 5-1: can't read configurations, error -22
[ 1633.209570][T30908] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1633.231558][T30908] usb 5-1: no configurations
[ 1633.236212][T30908] usb 5-1: can't read configurations, error -22
[ 1633.243996][T30908] usb usb5-port1: unable to enumerate USB device
[ 1633.246254][ T5875] usb 7-1: USB disconnect, device number 5
[ 1633.632368][T31679] vxcan1: entered promiscuous mode
[ 1633.663127][T31679] team0: Device vxcan1 is of different type
[ 1634.397654][T31689] hfsplus: unable to find HFS+ superblock
[ 1634.631454][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1634.868086][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1635.109527][T31700] FAULT_INJECTION: forcing a failure.
[ 1635.109527][T31700] name failslab, interval 1, probability 0, space 0, times 0
[ 1635.143448][T31700] CPU: 0 UID: 0 PID: 31700 Comm: syz.4.7374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1635.143477][T31700] Tainted: [L]=SOFTLOCKUP
[ 1635.143483][T31700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1635.143493][T31700] Call Trace:
[ 1635.143499][T31700]  <TASK>
[ 1635.143506][T31700]  dump_stack_lvl+0x100/0x190
[ 1635.143538][T31700]  should_fail_ex.cold+0x5/0xa
[ 1635.143560][T31700]  should_failslab+0xc2/0x120
[ 1635.143586][T31700]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1635.143605][T31700]  ? vkms_plane_duplicate_state+0x87/0x130
[ 1635.143631][T31700]  vkms_plane_duplicate_state+0x87/0x130
[ 1635.143652][T31700]  drm_atomic_get_plane_state+0x279/0x760
[ 1635.143671][T31700]  ? __lock_acquire+0x4a5/0x2630
[ 1635.143690][T31700]  drm_atomic_set_property+0x72f/0x3d30
[ 1635.143709][T31700]  ? __pfx_drm_atomic_set_property+0x10/0x10
[ 1635.143726][T31700]  ? find_held_lock+0x2b/0x80
[ 1635.143739][T31700]  ? __might_fault+0xc5/0x140
[ 1635.143751][T31700]  ? __might_fault+0xc5/0x140
[ 1635.143770][T31700]  drm_mode_atomic_ioctl+0x6c5/0x2680
[ 1635.143793][T31700]  ? avc_has_extended_perms+0x484/0x1080
[ 1635.143810][T31700]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1635.143826][T31700]  ? __lock_acquire+0x4a5/0x2630
[ 1635.143852][T31700]  ? drm_is_current_master+0x2c/0x40
[ 1635.143867][T31700]  ? drm_is_current_master+0x2c/0x40
[ 1635.143885][T31700]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1635.143899][T31700]  drm_ioctl_kernel+0x1f3/0x3e0
[ 1635.143913][T31700]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1635.143930][T31700]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1635.143949][T31700]  drm_ioctl+0x5e6/0xc60
[ 1635.143965][T31700]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1635.143982][T31700]  ? __pfx_drm_ioctl+0x10/0x10
[ 1635.144003][T31700]  ? selinux_file_ioctl+0x139/0x290
[ 1635.144015][T31700]  ? selinux_file_ioctl+0xb4/0x290
[ 1635.144027][T31700]  ? __pfx_drm_ioctl+0x10/0x10
[ 1635.144042][T31700]  __x64_sys_ioctl+0x18e/0x210
[ 1635.144059][T31700]  do_syscall_64+0x106/0xf80
[ 1635.144070][T31700]  ? clear_bhb_loop+0x40/0x90
[ 1635.144084][T31700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1635.144100][T31700] RIP: 0033:0x7fe98d79c629
[ 1635.144110][T31700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1635.144121][T31700] RSP: 002b:00007fe98e736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1635.144132][T31700] RAX: ffffffffffffffda RBX: 00007fe98da15fa0 RCX: 00007fe98d79c629
[ 1635.144139][T31700] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f
[ 1635.144146][T31700] RBP: 00007fe98e736090 R08: 0000000000000000 R09: 0000000000000000
[ 1635.144152][T31700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1635.144158][T31700] R13: 00007fe98da16038 R14: 00007fe98da15fa0 R15: 00007ffe6a8d3cc8
[ 1635.144173][T31700]  </TASK>
[ 1635.609356][T31711] netlink: 'syz.1.7375': attribute type 1 has an invalid length.
[ 1636.109341][T31719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1636.760221][   T30] audit: type=1400 audit(1771807673.610:13002): avc:  denied  { create } for  pid=31722 comm="syz.1.7381" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1636.785455][T31730] FAT-fs (loop3): unable to read boot sector
[ 1637.255772][   T30] audit: type=1400 audit(1771807673.629:13003): avc:  denied  { mounton } for  pid=31722 comm="syz.1.7381" path="/238/file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1637.497510][T31741] overlayfs: missing 'lowerdir'
[ 1637.729481][T30908] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1637.937270][   T30] audit: type=1400 audit(1771807674.696:13004): avc:  denied  { open } for  pid=31746 comm="syz.2.7388" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1638.017944][   T30] audit: type=1400 audit(1771807674.705:13005): avc:  denied  { ioctl } for  pid=31746 comm="syz.2.7388" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1638.053546][T31749] netlink: 'syz.2.7388': attribute type 1 has an invalid length.
[ 1638.092672][T30908] usb 1-1: Using ep0 maxpacket: 32
[ 1638.099213][T30908] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1638.114057][T30908] usb 1-1: config 0 has no interface number 0
[ 1638.143663][T30908] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1638.154685][T31749] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1638.161489][T30908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.171316][T30908] usb 1-1: Product: syz
[ 1638.175476][T30908] usb 1-1: Manufacturer: syz
[ 1638.180265][T30908] usb 1-1: SerialNumber: syz
[ 1638.187806][T30908] usb 1-1: config 0 descriptor??
[ 1638.210450][T30908] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1638.230242][T30908] usb 1-1: selecting invalid altsetting 1
[ 1638.236221][T30908] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1638.246714][   T30] audit: type=1400 audit(1771807674.995:13006): avc:  denied  { unlink } for  pid=26641 comm="syz-executor" name="file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1638.271007][T30908] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1638.282561][T30908] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1638.292134][T30908] usb 1-1: media controller created
[ 1638.305889][T30908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1638.313772][T31751] bond1: (slave geneve2): making interface the new active one
[ 1638.329348][T31751] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1639.016387][T30908] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1639.972544][T30908] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1639.980224][T30908] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1640.020011][T30908] usb 1-1: USB disconnect, device number 23
[ 1641.093074][   T30] audit: type=1400 audit(1771807677.662:13007): avc:  denied  { read } for  pid=31771 comm="syz.2.7395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1641.170028][   T30] audit: type=1400 audit(1771807677.728:13008): avc:  denied  { append } for  pid=31771 comm="syz.2.7395" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1641.196441][T31773] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1641.342389][   T30] audit: type=1400 audit(1771807677.887:13009): avc:  denied  { read } for  pid=31771 comm="syz.2.7395" path="socket:[132041]" dev="sockfs" ino=132041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1642.414848][T31798] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1642.482247][T30908] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1642.922781][T30908] usb 5-1: Using ep0 maxpacket: 32
[ 1642.930761][T30908] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1642.945419][T30908] usb 5-1: config 0 has no interface number 0
[ 1642.974941][T30908] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1643.102812][T30908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1643.151638][T30908] usb 5-1: Product: syz
[ 1643.168811][T30908] usb 5-1: Manufacturer: syz
[ 1643.204344][T30908] usb 5-1: SerialNumber: syz
[ 1643.247818][T30908] usb 5-1: config 0 descriptor??
[ 1643.308106][T30908] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1643.328875][T30908] usb 5-1: selecting invalid altsetting 1
[ 1643.350265][T30908] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1643.650775][T30908] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1643.703041][T30908] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1643.747368][T30908] usb 5-1: media controller created
[ 1643.775292][T30908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1643.852799][T30908] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1643.868768][T30908] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1643.895345][T30908] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1644.199169][T30908] usb 5-1: USB disconnect, device number 126
[ 1644.273309][T31822] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1644.409734][T31834] overlayfs: missing 'lowerdir'
[ 1644.920359][   T30] audit: type=1400 audit(1771807681.228:13010): avc:  denied  { map } for  pid=31841 comm="syz.0.7417" path="socket:[133334]" dev="sockfs" ino=133334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1644.947601][T31845] FAULT_INJECTION: forcing a failure.
[ 1644.947601][T31845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1644.961826][T31845] CPU: 0 UID: 0 PID: 31845 Comm: syz.2.7416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1644.961854][T31845] Tainted: [L]=SOFTLOCKUP
[ 1644.961860][T31845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1644.961870][T31845] Call Trace:
[ 1644.961877][T31845]  <TASK>
[ 1644.961884][T31845]  dump_stack_lvl+0x100/0x190
[ 1644.961917][T31845]  should_fail_ex.cold+0x5/0xa
[ 1644.961946][T31845]  core_sys_select+0x938/0xbb0
[ 1644.961980][T31845]  ? __pfx_core_sys_select+0x10/0x10
[ 1644.962006][T31845]  ? find_held_lock+0x2b/0x80
[ 1644.962028][T31845]  ? get_pid_task+0xfc/0x250
[ 1644.962081][T31845]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1644.962102][T31845]  ? read_tsc+0x9/0x20
[ 1644.962124][T31845]  ? ktime_get_ts64+0x256/0x3f0
[ 1644.962156][T31845]  do_pselect.constprop.0+0x238/0x270
[ 1644.962187][T31845]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[ 1644.962219][T31845]  ? ksys_write+0x1ac/0x250
[ 1644.962249][T31845]  __x64_sys_pselect6+0x149/0x1c0
[ 1644.962280][T31845]  do_syscall_64+0x106/0xf80
[ 1644.962298][T31845]  ? clear_bhb_loop+0x40/0x90
[ 1644.962320][T31845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1644.962338][T31845] RIP: 0033:0x7f865619c629
[ 1644.962353][T31845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1644.962370][T31845] RSP: 002b:00007f8657112028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1644.962387][T31845] RAX: ffffffffffffffda RBX: 00007f8656415fa0 RCX: 00007f865619c629
[ 1644.962398][T31845] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040
[ 1644.962408][T31845] RBP: 00007f8657112090 R08: 0000200000000280 R09: 0000000000000000
[ 1644.962419][T31845] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[ 1644.962429][T31845] R13: 00007f8656416038 R14: 00007f8656415fa0 R15: 00007ffe37664d98
[ 1644.962455][T31845]  </TASK>
[ 1645.049727][   T30] audit: type=1400 audit(1771807681.368:13011): avc:  denied  { bind } for  pid=31849 comm="syz.1.7419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1646.173930][T30908] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1646.182026][ T5875] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1646.195384][   T30] audit: type=1400 audit(1771807682.435:13012): avc:  denied  { read } for  pid=31849 comm="syz.1.7419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1646.345344][T30908] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1646.354465][T30908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.362461][T30908] usb 5-1: Product: syz
[ 1646.366890][T30908] usb 5-1: Manufacturer: syz
[ 1646.371474][T30908] usb 5-1: SerialNumber: syz
[ 1646.385552][T30908] usb 5-1: config 0 descriptor??
[ 1646.406608][ T5875] usb 7-1: Using ep0 maxpacket: 16
[ 1646.419219][ T5875] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1646.438549][ T5875] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1646.448312][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1646.459887][ T5875] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1646.468918][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.487856][ T5875] usb 7-1: config 0 descriptor??
[ 1646.621728][T30908] usb-storage 5-1:0.0: USB Mass Storage device detected
[ 1646.687843][T31867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1646.700910][T31867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1646.905720][T31870] openvswitch: netlink: Flow key attr not present in new flow.
[ 1647.000548][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.028110][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.044864][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.071838][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.088631][   T30] audit: type=1400 audit(1771807683.268:13013): avc:  denied  { create } for  pid=31873 comm="syz.0.7426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1647.097436][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.131266][   T30] audit: type=1400 audit(1771807683.305:13014): avc:  denied  { ioctl } for  pid=31873 comm="syz.0.7426" path="socket:[133397]" dev="sockfs" ino=133397 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1647.140160][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.203680][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.231710][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.252357][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.264566][ T5875] kye 0003:0458:0138.001D: unknown main item tag 0x0
[ 1647.271825][ T5875] kye 0003:0458:0138.001D: unexpected long global item
[ 1647.280614][ T5875] kye 0003:0458:0138.001D: parse failed
[ 1647.287070][ T5875] kye 0003:0458:0138.001D: probe with driver kye failed with error -22
[ 1647.463617][T30908] usb 5-1: USB disconnect, device number 127
[ 1647.503107][T31879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31879 comm=syz.0.7427
[ 1647.544813][T30899] usb 7-1: USB disconnect, device number 6
[ 1647.576505][T31882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7427'.
[ 1647.662120][   T30] audit: type=1400 audit(1771807683.811:13015): avc:  denied  { getopt } for  pid=31880 comm="syz.4.7428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1647.683845][T31883] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7428'.
[ 1647.697221][T31881] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7428'.
[ 1648.009353][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1648.153175][T30899] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1648.170138][ T5875] usb 5-1: Using ep0 maxpacket: 16
[ 1648.183821][ T5875] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[ 1648.200833][ T5875] usb 5-1: config 4 has no interface number 0
[ 1648.213151][ T5875] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1648.233786][ T5875] usb 5-1: config 4 interface 9 has no altsetting 0
[ 1648.251730][ T5875] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1648.330078][T30899] usb 2-1: Using ep0 maxpacket: 16
[ 1648.336969][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.348928][T30899] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[ 1648.351282][ T5875] usb 5-1: Product: syz
[ 1648.371590][T30899] usb 2-1: config 4 has no interface number 0
[ 1648.371592][ T5875] usb 5-1: Manufacturer: syz
[ 1648.371629][T30899] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1648.385215][ T5875] usb 5-1: SerialNumber: syz
[ 1648.415076][T31889] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1648.433538][T30899] usb 2-1: config 4 interface 9 has no altsetting 0
[ 1648.455329][T30899] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1648.461283][ T5875] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1648.480447][T30899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.499337][T30899] usb 2-1: Product: syz
[ 1648.516124][T30899] usb 2-1: Manufacturer: syz
[ 1648.528744][T30899] usb 2-1: SerialNumber: syz
[ 1648.541288][T31891] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1648.559731][T30899] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1648.707586][T12908] usb 5-1: Failed to submit usb control message: -71
[ 1648.710535][T30899] usb 5-1: USB disconnect, device number 2
[ 1648.714826][T12908] usb 5-1: unable to send the bmi data to the device: -71
[ 1648.728947][T12908] usb 5-1: unable to get target info from device
[ 1648.735285][T12908] usb 5-1: could not get target info (-71)
[ 1648.741200][T12908] usb 5-1: could not probe fw (-71)
[ 1648.834112][T13193] usb 2-1: Failed to submit usb control message: -71
[ 1648.834279][T30908] usb 2-1: USB disconnect, device number 127
[ 1648.841212][T13193] usb 2-1: unable to send the bmi data to the device: -71
[ 1648.854511][T13193] usb 2-1: unable to get target info from device
[ 1648.860849][T13193] usb 2-1: could not get target info (-71)
[ 1648.867117][T13193] usb 2-1: could not probe fw (-71)
[ 1648.880150][ T5883] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1649.047516][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1649.055219][ T5883] usb 7-1: can't read configurations, error -61
[ 1649.195498][ T5883] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1649.279386][T31916] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1649.289506][T31916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=31916 comm=syz.4.7435
[ 1649.359998][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1649.367817][T31920] usb usb8: usbfs: process 31920 (syz.0.7437) did not claim interface 2 before use
[ 1649.377777][ T5883] usb 7-1: can't read configurations, error -61
[ 1649.385752][ T5883] usb usb7-port1: attempt power cycle
[ 1649.496733][   T30] audit: type=1400 audit(1771807685.523:13016): avc:  denied  { bind } for  pid=31923 comm="syz.1.7438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1649.579477][   T30] audit: type=1400 audit(1771807685.523:13017): avc:  denied  { read } for  pid=31923 comm="syz.1.7438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1649.629924][   T30] audit: type=1400 audit(1771807685.579:13018): avc:  denied  { write } for  pid=31923 comm="syz.1.7438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1649.751193][ T5883] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1649.827529][   T24] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[ 1649.842619][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1649.851922][ T5883] usb 7-1: can't read configurations, error -61
[ 1649.996950][   T24] usb 2-1: device descriptor read/64, error -71
[ 1650.057008][ T5883] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1650.089837][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1650.100415][ T5883] usb 7-1: can't read configurations, error -61
[ 1650.113826][ T5883] usb usb7-port1: unable to enumerate USB device
[ 1650.628994][   T31] INFO: task kworker/0:7:5911 blocked for more than 144 seconds.
[ 1651.307529][   T24] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[ 1651.315397][   T31]       Tainted: G             L      syzkaller #0
[ 1651.328686][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1651.346758][   T31] task:kworker/0:7     state:D stack:22392 pid:5911  tgid:5911  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1651.386104][   T31] Workqueue: usb_hub_wq hub_event
[ 1651.391352][   T31] Call Trace:
[ 1651.394869][   T31]  <TASK>
[ 1651.398233][   T31]  __schedule+0xfee/0x60e0
[ 1651.402699][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1651.408015][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1651.413007][   T31]  ? __pfx___schedule+0x10/0x10
[ 1651.417907][   T31]  ? find_held_lock+0x2b/0x80
[ 1651.423445][   T31]  ? schedule+0x2bf/0x390
[ 1651.427823][   T31]  schedule+0xdd/0x390
[ 1651.439913][   T31]  schedule_timeout+0x1b2/0x280
[ 1651.445258][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1651.450998][   T31]  ? mark_held_locks+0x40/0x70
[ 1651.455810][   T31]  __wait_for_common+0x2e7/0x4c0
[ 1651.461228][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1651.466683][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1651.472422][   T31]  ? __pfx_device_del+0x10/0x10
[ 1651.477324][   T31]  ? kobject_put+0xb9/0x640
[ 1651.481907][   T31]  i2c_del_adapter+0x62d/0x820
[ 1651.487690][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1651.493109][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1651.498433][   T31]  ? dvb_usbv2_exit.isra.0+0x3e1/0xb40
[ 1651.504510][   T31]  ? kfree+0x1f6/0x6b0
[ 1651.508614][   T31]  ? media_device_unregister+0x446/0x610
[ 1651.514371][   T24] usb 2-1: device descriptor read/64, error -71
[ 1651.525109][   T31]  dvb_usbv2_exit.isra.0+0x47f/0xb40
[ 1651.530442][   T31]  dvb_usbv2_probe+0x669/0x970
[ 1651.536452][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 1651.541780][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1651.547971][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1651.553204][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1651.559319][   T31]  ? __pm_runtime_set_status+0x13c/0x970
[ 1651.564995][   T31]  usb_probe_interface+0x303/0x8f0
[ 1651.570594][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1651.576275][   T31]  really_probe+0x241/0xa60
[ 1651.581140][   T31]  __driver_probe_device+0x1de/0x400
[ 1651.586472][   T31]  driver_probe_device+0x4c/0x1b0
[ 1651.591939][   T31]  __device_attach_driver+0x1ff/0x3e0
[ 1651.597357][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1651.603679][   T31]  bus_for_each_drv+0x159/0x1e0
[ 1651.608573][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1651.614352][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1651.619596][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1651.626415][   T31]  __device_attach+0x1e4/0x4d0
[ 1651.631238][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1651.636951][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1651.642195][   T31]  device_initial_probe+0xaf/0xd0
[ 1651.647563][   T31]  bus_probe_device+0x64/0x160
[ 1651.652391][   T31]  device_add+0x11d9/0x1950
[ 1651.653432][   T24] usb usb2-port1: attempt power cycle
[ 1651.657603][   T31]  ? __pfx_device_add+0x10/0x10
[ 1651.667491][   T31]  ? kfree+0x1f6/0x6b0
[ 1651.671619][   T31]  usb_set_configuration+0xd97/0x1c60
[ 1651.681737][   T31]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 1651.687930][   T31]  usb_generic_driver_probe+0xa1/0xe0
[ 1651.693299][   T31]  usb_probe_device+0xef/0x400
[ 1651.698112][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1651.703486][   T31]  really_probe+0x241/0xa60
[ 1651.708013][   T31]  __driver_probe_device+0x1de/0x400
[ 1651.713288][   T31]  ? usb_driver_applicable+0x1c7/0x220
[ 1651.718943][   T31]  driver_probe_device+0x4c/0x1b0
[ 1651.723964][   T31]  __device_attach_driver+0x1ff/0x3e0
[ 1651.729427][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1651.735328][   T31]  bus_for_each_drv+0x159/0x1e0
[ 1651.740620][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1651.745993][   T31]  ? _raw_spin_unlock_irqrestore+0x31/0x80
[ 1651.751851][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1651.757680][   T31]  __device_attach+0x1e4/0x4d0
[ 1651.762527][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1651.767807][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1651.773135][   T31]  device_initial_probe+0xaf/0xd0
[ 1651.778153][   T31]  bus_probe_device+0x64/0x160
[ 1651.782967][   T31]  device_add+0x11d9/0x1950
[ 1651.787572][   T31]  ? __pfx_device_add+0x10/0x10
[ 1651.792489][   T31]  ? usb_detect_static_quirks+0x335/0x3e0
[ 1651.798211][   T31]  ? kfree+0x1f6/0x6b0
[ 1651.802268][   T31]  usb_new_device.cold+0x685/0x115c
[ 1651.807527][   T31]  ? do_raw_spin_lock+0x128/0x260
[ 1651.812544][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1651.817764][   T31]  ? mark_held_locks+0x40/0x70
[ 1651.822525][   T31]  hub_event+0x314d/0x4af0
[ 1651.834935][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1651.839696][   T31]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1651.845316][   T31]  ? sched_core_enqueue+0x320/0xc00
[ 1651.859677][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1651.864470][   T31]  process_one_work+0x9d7/0x1920
[ 1651.869473][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1651.874844][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1651.879638][   T31]  worker_thread+0x5da/0xe40
[ 1651.884221][   T31]  ? kthread+0x13a/0x450
[ 1651.888567][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1651.893666][   T31]  kthread+0x370/0x450
[ 1651.897802][   T31]  ? __pfx_kthread+0x10/0x10
[ 1651.902447][   T31]  ret_from_fork+0x754/0xd80
[ 1651.907032][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1651.912674][   T31]  ? __switch_to+0x7b4/0x1120
[ 1651.917341][   T31]  ? __pfx_kthread+0x10/0x10
[ 1651.921988][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1651.926749][   T31]  </TASK>
[ 1651.929824][   T31] 
[ 1651.929824][   T31] Showing all locks held in the system:
[ 1651.937989][   T31] 6 locks held by kworker/1:0/24:
[ 1651.943038][   T31]  #0: ffff8880226f1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1651.953869][   T31]  #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1651.967666][   T31]  #2: ffff88802aa91198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1651.978017][   T31]  #3: ffff88802aa96518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0
[ 1651.988012][   T31]  #4: ffff88802a846068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0
[ 1651.998715][   T31]  #5: ffffffff8fbb0010 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60
[ 1652.009404][   T31] 1 lock held by khungtaskd/31:
[ 1652.014227][   T31]  #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1652.024117][   T31] 2 locks held by getty/5565:
[ 1652.028822][   T31]  #0: ffff888033f910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1652.038595][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1652.048725][   T31] 5 locks held by kworker/0:7/5911:
[ 1652.049006][   T24] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[ 1652.053902][   T31]  #0: ffff8880226f1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1652.072224][   T31]  #1: ffffc900045afd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1652.083759][   T31]  #2: ffff88802aaa9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1652.093748][   T31]  #3: ffff88802fbfa198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1652.102642][   T24] usb 2-1: device descriptor read/8, error -71
[ 1652.103594][   T31]  #4: ffff88807a620160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1652.118507][   T31] 
[ 1652.120816][   T31] =============================================
[ 1652.120816][   T31] 
[ 1652.136423][   T31] NMI backtrace for cpu 0
[ 1652.136439][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1652.136460][   T31] Tainted: [L]=SOFTLOCKUP
[ 1652.136464][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1652.136470][   T31] Call Trace:
[ 1652.136474][   T31]  <TASK>
[ 1652.136478][   T31]  dump_stack_lvl+0x100/0x190
[ 1652.136498][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1652.136510][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1652.136528][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1652.136545][   T31]  sys_info+0x141/0x190
[ 1652.136557][   T31]  watchdog+0xd25/0x1050
[ 1652.136576][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1652.136592][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1652.136609][   T31]  ? kthread+0x13a/0x450
[ 1652.136618][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1652.136631][   T31]  kthread+0x370/0x450
[ 1652.136640][   T31]  ? __pfx_kthread+0x10/0x10
[ 1652.136651][   T31]  ret_from_fork+0x754/0xd80
[ 1652.136662][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1652.136674][   T31]  ? __switch_to+0x7b4/0x1120
[ 1652.136686][   T31]  ? __pfx_kthread+0x10/0x10
[ 1652.136697][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1652.136716][   T31]  </TASK>
[ 1652.136720][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1652.262158][    C1] NMI backtrace for cpu 1
[ 1652.262173][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1652.262193][    C1] Tainted: [L]=SOFTLOCKUP
[ 1652.262198][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1652.262206][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1652.262232][    C1] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0c 1c 00 fb f4 <e9> bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1652.262245][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[ 1652.262258][    C1] RAX: 000000000690b3cf RBX: ffff88801e6b2480 RCX: ffffffff8b8f7c75
[ 1652.262268][    C1] RDX: 0000000000000000 RSI: ffffffff8de71ed4 RDI: ffffffff8c1aefa0
[ 1652.262277][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[ 1652.262286][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6490
[ 1652.262295][    C1] R13: 0000000000000001 R14: ffffffff90d96410 R15: 0000000000000000
[ 1652.262305][    C1] FS:  0000000000000000(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000
[ 1652.262321][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1652.262332][    C1] CR2: 00007f9eef7e82f8 CR3: 00000000556f6000 CR4: 00000000003526f0
[ 1652.262343][    C1] Call Trace:
[ 1652.262347][    C1]  <TASK>
[ 1652.262352][    C1]  default_idle+0x9/0x10
[ 1652.262368][    C1]  default_idle_call+0x6c/0xb0
[ 1652.262382][    C1]  do_idle+0x35b/0x4b0
[ 1652.262400][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1652.262419][    C1]  cpu_startup_entry+0x4f/0x60
[ 1652.262435][    C1]  start_secondary+0x21d/0x2d0
[ 1652.262454][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1652.262475][    C1]  common_startup_64+0x13e/0x148
[ 1652.262496][    C1]  </TASK>
[ 1652.263290][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1652.263303][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1652.263324][   T31] Tainted: [L]=SOFTLOCKUP
[ 1652.263330][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1652.263339][   T31] Call Trace:
[ 1652.263344][   T31]  <TASK>
[ 1652.263351][   T31]  dump_stack_lvl+0x100/0x190
[ 1652.263378][   T31]  vpanic+0x552/0x970
[ 1652.263394][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1652.263411][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1652.263433][   T31]  panic+0xd1/0xe0
[ 1652.263448][   T31]  ? __pfx_panic+0x10/0x10
[ 1652.263465][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1652.263486][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1652.263506][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1652.263526][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1652.263542][   T31]  ? watchdog+0xd35/0x1050
[ 1652.263564][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1652.263588][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1652.263609][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1652.263633][   T31]  ? kthread+0x13a/0x450
[ 1652.263646][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1652.263665][   T31]  kthread+0x370/0x450
[ 1652.263678][   T31]  ? __pfx_kthread+0x10/0x10
[ 1652.263694][   T31]  ret_from_fork+0x754/0xd80
[ 1652.263711][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1652.263728][   T31]  ? __switch_to+0x7b4/0x1120
[ 1652.263747][   T31]  ? __pfx_kthread+0x10/0x10
[ 1652.263763][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1652.263792][   T31]  </TASK>
[ 1652.581253][   T31] Kernel Offset: disabled
[ 1652.585547][   T31] Rebooting in 86400 seconds..