last executing test programs:

18.719112826s ago: executing program 1 (id=1306):
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0)
capset(0x0, &(0x7f00000000c0))
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x0)
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000000), 0x12)
write$binfmt_misc(r3, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56})
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)

17.127823849s ago: executing program 1 (id=1307):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
listen(r1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400010027bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="7a555fc085316798a67ea768fdaec26f000000000000000000bb86dd00"/39], 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r5, 0x4, 0x80, 0x9, 0x3ff, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x8, 0x3, 0x400}})
recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x8090)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x28, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000400))
close_range(r6, 0xffffffffffffffff, 0x0)

14.96801959s ago: executing program 3 (id=1311):
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = inotify_init1(0x0)
prlimit64(0x0, 0xd, &(0x7f00000001c0)={0x0, 0x2}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
r3 = memfd_create(0x0, 0x4)
fallocate(r3, 0x0, 0x0, 0xff)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x20242, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x300000000)
write$vhost_msg_v2(r5, &(0x7f0000000500)={0x2, 0x0, {&(0x7f00000003c0)=""/71, 0x47, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000280)=""/131, 0x83, 0x0, 0x0, 0x3}}, 0x48)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
process_vm_writev(0x0, &(0x7f0000000400), 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1, 0x0)

14.504948131s ago: executing program 1 (id=1313):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101040)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x4, 0x2}, {0x10, 0x7}, 0x0, 0x5, 0x7})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d00000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb9547ed38704e9abaf9b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0100000000000000b70500000800000085000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)

13.959530945s ago: executing program 3 (id=1316):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

13.600764074s ago: executing program 4 (id=1317):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4008080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0xa8, r2, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x40, 0x60, 0xaf}}, @val={0x25, 0x3, {0x1, 0xb2, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0xa8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_getres(0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x4e, 0x1, 0xc, 0x5, 0x6, 0x81})
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000280))

13.531633784s ago: executing program 0 (id=1318):
socket$inet(0x2, 0x3, 0x6)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'})
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syslog(0x2, &(0x7f0000006900)=""/91, 0x5b)

12.908886388s ago: executing program 2 (id=1319):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=<r1=>0xffffffffffffffff, @ANYBLOB="01"], 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="68000000186ea478e392e3ee6d55b91df68910fc329cb42cc7d0389dc180f83a60c9185e1c99050000005c720fabd57205f3141529bf4909101a5c46dc131f3363683f7e7f9a1185140f92b6db78f9eaa2b397dd46a8b2715ff926afaf2471c06e95314e17cbde23eedd1c1d0f8d14796611ffc066284be164113319a8e79b914f0a76c5d34d000000003e80155f932cbf5dbf438b91f829eb92a94249568e9acb1f235493eb8fdca8faa687dd2889b0c3a51cdea23177d6d4bf26ea3f10d8f5ad1818766f2348607729fc153aa465f949dee1c7614a8cdf8b348f578e", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=r3], 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000003c0))
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r11 = socket$unix(0x1, 0x5, 0x0)
dup2(r11, r10)

11.861992927s ago: executing program 4 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000c2fc0)={0x0, [], 0x5, "0a4929ed2f1886"})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r8)

11.645306799s ago: executing program 0 (id=1321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000300)='./file0\x00', 0x8001420, 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0)
vmsplice(r4, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3)
splice(r2, 0x0, r3, 0x0, 0xffffffe1, 0x0)

10.907759533s ago: executing program 2 (id=1322):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4008080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0xa8, r1, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x40, 0x60, 0xaf}}, @val={0x25, 0x3, {0x1, 0xb2, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0xa8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_getres(0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000280))
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0)

10.870229815s ago: executing program 4 (id=1323):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101040)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000240)={{0x4, 0x2}, {0x10, 0x7}, 0x0, 0x5, 0x7})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d00000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb9547ed38704e9abaf9b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0100000000000000b70500000800000085000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)

10.497181574s ago: executing program 3 (id=1324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r6)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
prctl$PR_SET_MM(0x3e, 0x0, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_MCE_KILL(0x43724f53, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0)

9.545945352s ago: executing program 0 (id=1325):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x7, 0x0, 0x0, 0x0, [<r5=>0x0], [0xfd, 0x5, 0x40], [0x0, 0x0, 0xa, 0xfffffffd], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})

8.788672729s ago: executing program 2 (id=1326):
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = inotify_init1(0x0)
prlimit64(0x0, 0xd, &(0x7f00000001c0)={0x0, 0x2}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
r3 = memfd_create(0x0, 0x4)
fallocate(r3, 0x0, 0x0, 0xff)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x20242, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x300000000)
write$vhost_msg_v2(r5, &(0x7f0000000500)={0x2, 0x0, {&(0x7f00000003c0)=""/71, 0x47, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000280)=""/131, 0x83, 0x0, 0x0, 0x3}}, 0x48)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
process_vm_writev(0x0, &(0x7f0000000400), 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1, 0x0)

8.786688677s ago: executing program 3 (id=1327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10)

8.759438757s ago: executing program 1 (id=1328):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4008080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0xa8, r2, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x40, 0x60, 0xaf}}, @val={0x25, 0x3, {0x1, 0xb2, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0xa8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_getres(0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x4e, 0x1, 0xc, 0x5, 0x6, 0x81})
connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0)

8.569118304s ago: executing program 4 (id=1329):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x7, 0x0, 0x0, 0x0, [], [0xfd, 0x5, 0x40], [0x0, 0x0, 0xa, 0xfffffffd], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300))

4.04263018s ago: executing program 4 (id=1330):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4008080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0xa8, r2, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x40, 0x60, 0xaf}}, @val={0x25, 0x3, {0x1, 0xb2, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0xa8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_getres(0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x4e, 0x1, 0xc, 0x5, 0x6, 0x81})
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000280))

4.042077652s ago: executing program 0 (id=1331):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10)
connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483, 0x1}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40)

4.028164441s ago: executing program 1 (id=1332):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=<r1=>0xffffffffffffffff, @ANYBLOB="01"], 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="68000000186ea478e392e3ee6d55b91df68910fc329cb42cc7d0389dc180f83a60c9185e1c99050000005c720fabd57205f3141529bf4909101a5c46dc131f3363683f7e7f9a1185140f92b6db78f9eaa2b397dd46a8b2715ff926afaf2471c06e95314e17cbde23eedd1c1d0f8d14796611ffc066284be164113319a8e79b914f0a76c5d34d000000003e80155f932cbf5dbf438b91f829eb92a94249568e9acb1f235493eb8fdca8faa687dd2889b0c3a51cdea23177d6d4bf26ea3f10d8f5ad1818766f2348607729fc153aa465f949dee1c7614a8cdf8b348f578e", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=r3], 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000003c0))
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r11 = socket$unix(0x1, 0x5, 0x0)
dup2(r11, r10)

3.494484192s ago: executing program 3 (id=1333):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52", 0xc)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r4, &(0x7f0000000080)='=', 0x11}])
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

3.391967777s ago: executing program 0 (id=1334):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3.349866599s ago: executing program 2 (id=1335):
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c767056a982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf9943134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2eed44d69fe32b0142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000070000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6a04006bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17690158969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583584acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb4d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f8957727da5122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0ae500000000000000dc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6eada31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000d58c08acaf30235b918a31d2eca55f74a23641f6022d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7c48de61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb8434503680300383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718fd02cde45eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff1500000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9ab48620f144ff72ac579e4a5240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df651bc25070b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5500ff49d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e9611d2e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b08faa4bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef6853f35c28bc57665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b0504789d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000000000000000000000000070a45784f793e88e477e48f7d87acf12a6731eb5350831f500461ed55897f517923c73f731c139464c6383e580ce222a3250dd12ba25f71de8c94f56f418460dff5678c7c3f51ab4ddc29ffdf496bd8c579401c734fd5ac11a1008ce1d63f5b516d92bf5d718b267017b3ecd7200a7db0ef6b3a8e1f22186961f8c86c29b3144aa71d1623f9053dcf2a445c69d0f14b24884e83a94ad02647b8959c4eef7516546040c83e04484d7f2b65456e2da0dcc7f5a9024b8f4d35cbb03da118cb5f25b97894eafca8140fadcac67c5b17efea5a65b9a66cedb68619f2622733254650fe28f8233f40bed514bdfb199bf21cf421f2f70b1a285e86b542947cba56e23c3ae82d62e99d20d803bab995faae7389946ac0773194a5c2dcb3b57f6dcc6cb564e1dc7f0499df2b10bb50b470197ea7e8892c600"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_kthread_work_execute_end\x00', r0, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000f08933910900d246", @ANYRES16, @ANYBLOB="0706000000000000000001000000"], 0x14}}, 0x400c0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r5, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)

1.485393214s ago: executing program 2 (id=1336):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0)
listen(r1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = accept(r1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400010027bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="7a555fc085316798a67ea768fdaec26f000000000000000000bb86dd00"/39], 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r5, 0x4, 0x80, 0x9, 0x3ff, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x8, 0x3, 0x400}})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x8090)
close_range(r6, 0xffffffffffffffff, 0x0)

767.728866ms ago: executing program 0 (id=1337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r6)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, &(0x7f0000005280))
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
prctl$PR_SET_MM(0x3e, 0x0, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_MCE_KILL(0x43724f53, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0)

766.578905ms ago: executing program 4 (id=1338):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4008080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0xa8, r1, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x40, 0x60, 0xaf}}, @val={0x25, 0x3, {0x1, 0xb2, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0xa8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_getres(0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000280))
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, 0x0)

9.072782ms ago: executing program 1 (id=1339):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
listen(r1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400010027bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="7a555fc085316798a67ea768fdaec26f000000000000000000bb86dd00"/39], 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r5, 0x4, 0x80, 0x9, 0x3ff, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x8, 0x3, 0x400}})
recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x8090)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x28, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000400))
close_range(r6, 0xffffffffffffffff, 0x0)

7.530421ms ago: executing program 3 (id=1340):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x7, 0x0, 0x0, 0x0, [], [0xfd, 0x5, 0x40], [0x0, 0x0, 0xa, 0xfffffffd], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300))

0s ago: executing program 2 (id=1341):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x7, 0x0, 0x0, 0x0, [<r5=>0x0], [0xfd, 0x5, 0x40], [0x0, 0x0, 0xa, 0xfffffffd], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})

kernel console output (not intermixed with test programs):

text=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  280.897422][ T8408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  280.917708][ T8408] netlink: 'syz.4.620': attribute type 29 has an invalid length.
[  280.926032][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'.
[  281.802155][ T8414] hub 6-0:1.0: USB hub found
[  281.807196][ T8414] hub 6-0:1.0: 1 port detected
[  281.827203][   T29] audit: type=1400 audit(1730213628.560:322): avc:  denied  { write } for  pid=8413 comm="syz.4.623" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.849865][    C1] vkms_vblank_simulate: vblank timer overrun
[  282.554672][ T8433] FAULT_INJECTION: forcing a failure.
[  282.554672][ T8433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.570100][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.3.628 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  282.580730][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  282.590800][ T8433] Call Trace:
[  282.594081][ T8433]  <TASK>
[  282.597017][ T8433]  dump_stack_lvl+0x16c/0x1f0
[  282.601714][ T8433]  should_fail_ex+0x497/0x5b0
[  282.606400][ T8433]  _copy_to_user+0x32/0xd0
[  282.610831][ T8433]  simple_read_from_buffer+0xd0/0x160
[  282.616214][ T8433]  proc_fail_nth_read+0x198/0x270
[  282.621249][ T8433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  282.626805][ T8433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  282.632356][ T8433]  vfs_read+0x1df/0xbe0
[  282.636508][ T8433]  ? __fget_files+0x23a/0x3f0
[  282.641175][ T8433]  ? fdget_pos+0x24c/0x360
[  282.645582][ T8433]  ? __pfx_lock_release+0x10/0x10
[  282.650591][ T8433]  ? trace_lock_acquire+0x14a/0x1d0
[  282.655777][ T8433]  ? __pfx_vfs_read+0x10/0x10
[  282.660448][ T8433]  ? __pfx___mutex_lock+0x10/0x10
[  282.665470][ T8433]  ? __fget_files+0x244/0x3f0
[  282.670141][ T8433]  ksys_read+0x12f/0x260
[  282.674374][ T8433]  ? __pfx_ksys_read+0x10/0x10
[  282.679134][ T8433]  do_syscall_64+0xcd/0x250
[  282.683629][ T8433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.689513][ T8433] RIP: 0033:0x7fe163d7d15c
[  282.693912][ T8433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  282.713504][ T8433] RSP: 002b:00007fe164b40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  282.721902][ T8433] RAX: ffffffffffffffda RBX: 00007fe163f36058 RCX: 00007fe163d7d15c
[  282.729857][ T8433] RDX: 000000000000000f RSI: 00007fe164b400a0 RDI: 0000000000000003
[  282.737811][ T8433] RBP: 00007fe164b40090 R08: 0000000000000000 R09: 0000000000000000
[  282.745766][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.753721][ T8433] R13: 0000000000000001 R14: 00007fe163f36058 R15: 00007ffd88c24668
[  282.761684][ T8433]  </TASK>
[  282.764768][    C1] vkms_vblank_simulate: vblank timer overrun
[  283.411248][   T29] audit: type=1400 audit(1730213630.180:323): avc:  denied  { create } for  pid=8425 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  283.436991][   T29] audit: type=1400 audit(1730213630.180:324): avc:  denied  { ioctl } for  pid=8425 comm="syz.0.626" path="socket:[15799]" dev="sockfs" ino=15799 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  283.532264][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.707865][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.740018][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.770279][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.919899][   T29] audit: type=1400 audit(1730213630.680:325): avc:  denied  { append } for  pid=8444 comm="syz.0.634" name="vsock" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  285.978350][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.044845][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.047149][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  286.047162][   T29] audit: type=1400 audit(1730213632.810:328): avc:  denied  { search } for  pid=5181 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.083175][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.101215][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.133876][   T29] audit: type=1400 audit(1730213632.860:329): avc:  denied  { getopt } for  pid=8474 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  286.179982][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'.
[  286.191713][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.227702][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.271730][   T29] audit: type=1400 audit(1730213633.040:330): avc:  denied  { getopt } for  pid=8470 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  286.440132][ T5831] Bluetooth: hci0: unexpected event for opcode 0x0000
[  286.720394][ T7336] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  286.752821][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'.
[  286.772662][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.786511][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.889638][ T7336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.902385][ T7336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  286.919449][ T7336] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  286.934571][ T7336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  286.944689][ T7336] usb 4-1: SerialNumber: syz
[  287.290902][   T29] audit: type=1400 audit(1730213634.050:331): avc:  denied  { map } for  pid=8500 comm="syz.3.647" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  287.358307][ T7336] usb 4-1: 0:2 : does not exist
[  287.372575][ T8516] FAULT_INJECTION: forcing a failure.
[  287.372575][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.395973][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.0.652 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  287.406691][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  287.416761][ T8516] Call Trace:
[  287.420045][ T8516]  <TASK>
[  287.422983][ T8516]  dump_stack_lvl+0x16c/0x1f0
[  287.427680][ T8516]  should_fail_ex+0x497/0x5b0
[  287.432369][ T8516]  _copy_from_user+0x32/0x100
[  287.437231][ T8516]  ____sys_sendmsg+0x8d2/0xc90
[  287.442027][ T8516]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.447315][ T8516]  ? __pfx___lock_acquire+0x10/0x10
[  287.452498][ T8516]  ___sys_sendmsg+0x135/0x1e0
[  287.457176][ T8516]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.457924][ T7336] usb 4-1: USB disconnect, device number 10
[  287.462373][ T8516]  ? lock_acquire+0x2f/0xb0
[  287.462396][ T8516]  ? __fget_files+0x40/0x3f0
[  287.462429][ T8516]  ? fdget+0x176/0x210
[  287.462456][ T8516]  __sys_sendmmsg+0x1a1/0x450
[  287.462477][ T8516]  ? __pfx___sys_sendmmsg+0x10/0x10
[  287.462496][ T8516]  ? vfs_write+0x306/0x1150
[  287.495769][ T8516]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  287.501739][ T8516]  ? fput+0x30/0x390
[  287.505627][ T8516]  ? ksys_write+0x1ad/0x260
[  287.510107][ T8516]  ? __pfx_ksys_write+0x10/0x10
[  287.514949][ T8516]  __x64_sys_sendmmsg+0x9c/0x100
[  287.519879][ T8516]  ? lockdep_hardirqs_on+0x7c/0x110
[  287.525057][ T8516]  do_syscall_64+0xcd/0x250
[  287.529539][ T8516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.535411][ T8516] RIP: 0033:0x7f8d1797e719
[  287.539799][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.559384][ T8516] RSP: 002b:00007f8d186f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  287.567787][ T8516] RAX: ffffffffffffffda RBX: 00007f8d17b35f80 RCX: 00007f8d1797e719
[  287.575749][ T8516] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000003
[  287.583710][ T8516] RBP: 00007f8d186f5090 R08: 0000000000000000 R09: 0000000000000000
[  287.591662][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.599695][ T8516] R13: 0000000000000000 R14: 00007f8d17b35f80 R15: 00007ffdcef0a778
[  287.607738][ T8516]  </TASK>
[  287.626586][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.640415][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.667717][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.837064][ T8530] netlink: 'syz.1.656': attribute type 9 has an invalid length.
[  287.860690][ T8530] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.656'.
[  287.922416][   T29] audit: type=1400 audit(1730213634.680:332): avc:  denied  { execute } for  pid=8531 comm="syz.4.657" path="/128/cpu.stat" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  287.954655][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.988007][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.200946][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'.
[  288.225999][   T29] audit: type=1400 audit(1730213634.990:333): avc:  denied  { setopt } for  pid=8544 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  288.444870][ T8547] FAULT_INJECTION: forcing a failure.
[  288.444870][ T8547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.801282][ T8547] CPU: 0 UID: 0 PID: 8547 Comm: syz.3.663 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  288.811915][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  288.821957][ T8547] Call Trace:
[  288.825222][ T8547]  <TASK>
[  288.828141][ T8547]  dump_stack_lvl+0x16c/0x1f0
[  288.832823][ T8547]  should_fail_ex+0x497/0x5b0
[  288.837486][ T8547]  _copy_from_user+0x32/0x100
[  288.842152][ T8547]  move_addr_to_kernel+0x68/0x160
[  288.847166][ T8547]  __sys_connect+0xb4/0x180
[  288.851660][ T8547]  ? __pfx___sys_connect+0x10/0x10
[  288.856771][ T8547]  __x64_sys_connect+0x72/0xb0
[  288.861524][ T8547]  ? lockdep_hardirqs_on+0x7c/0x110
[  288.866712][ T8547]  do_syscall_64+0xcd/0x250
[  288.871294][ T8547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.877176][ T8547] RIP: 0033:0x7fe163d7e719
[  288.881574][ T8547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.901166][ T8547] RSP: 002b:00007fe164b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  288.909566][ T8547] RAX: ffffffffffffffda RBX: 00007fe163f35f80 RCX: 00007fe163d7e719
[  288.917526][ T8547] RDX: 000000000000001c RSI: 00000000200001c0 RDI: 0000000000000003
[  288.925478][ T8547] RBP: 00007fe164b61090 R08: 0000000000000000 R09: 0000000000000000
[  288.933434][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.941387][ T8547] R13: 0000000000000000 R14: 00007fe163f35f80 R15: 00007ffd88c24668
[  288.949351][ T8547]  </TASK>
[  289.448473][   T29] audit: type=1400 audit(1730213636.210:334): avc:  denied  { mount } for  pid=8552 comm="syz.3.667" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  289.553044][ T8564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.567333][ T8563] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.669'.
[  289.577279][ T8564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.597518][ T8563] net_ratelimit: 10 callbacks suppressed
[  289.597534][ T8563] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  289.624086][   T29] audit: type=1400 audit(1730213636.390:335): avc:  denied  { read write } for  pid=8561 comm="syz.2.669" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  289.648573][   T29] audit: type=1400 audit(1730213636.410:336): avc:  denied  { open } for  pid=8561 comm="syz.2.669" path="/141/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  289.707203][   T29] audit: type=1400 audit(1730213636.470:337): avc:  denied  { unmount } for  pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  290.499161][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  290.512946][ T5831] Bluetooth: hci0: Injecting HCI hardware error event
[  290.523812][ T5831] Bluetooth: hci0: hardware error 0x00
[  290.552545][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.575898][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.608565][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.801749][ T8577] Invalid ELF header type: 0 != 1
[  291.105731][ T8579] loop2: detected capacity change from 0 to 7
[  291.125888][ T8579] Dev loop2: unable to read RDB block 7
[  291.128559][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.144594][ T8579]  loop2: unable to read partition table
[  291.148747][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  291.148763][   T29] audit: type=1400 audit(1730213637.910:339): avc:  denied  { map } for  pid=8582 comm="syz.4.676" path="socket:[15092]" dev="sockfs" ino=15092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  291.181138][ T8579] loop2: partition table beyond EOD, truncated
[  291.187659][ T8579] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  291.197277][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.206371][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[  291.217747][ T8584] input: syz1 as /devices/virtual/input/input7
[  291.271432][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.309945][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.389265][   T29] audit: type=1400 audit(1730213638.150:340): avc:  denied  { bind } for  pid=8586 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  291.418663][   T29] audit: type=1400 audit(1730213638.180:341): avc:  denied  { listen } for  pid=8586 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  291.451072][   T29] audit: type=1400 audit(1730213638.180:342): avc:  denied  { read } for  pid=8586 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  291.753967][   T29] audit: type=1400 audit(1730213638.210:343): avc:  denied  { write } for  pid=8598 comm="syz.0.679" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  292.158366][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.172149][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.680053][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  293.262028][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.284568][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.294831][   T29] audit: type=1400 audit(1730213895.990:344): avc:  denied  { create } for  pid=8624 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  293.322465][   T29] audit: type=1400 audit(1730213895.990:345): avc:  denied  { write } for  pid=8624 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  293.343582][   T29] audit: type=1400 audit(1730213895.990:346): avc:  denied  { bind } for  pid=8624 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  294.393547][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.402998][   T29] audit: type=1400 audit(1730213897.160:347): avc:  denied  { mount } for  pid=8656 comm="syz.2.694" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  294.425234][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.640280][ T5942] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  294.754972][   T29] audit: type=1400 audit(1730213897.530:348): avc:  denied  { connect } for  pid=8654 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  294.808145][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.818406][ T5942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  294.827413][ T5942] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  294.836768][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.848738][ T5942] usb 4-1: config 0 descriptor??
[  296.008795][ T8676] io-wq is not configured for unbound workers
[  296.267192][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.683090][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.915436][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.938787][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.958991][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.973901][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.014620][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.050845][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.620546][ T5942] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  297.857710][ T5942] usb 5-1: Using ep0 maxpacket: 8
[  298.378270][ T5942] usb 5-1: config 0 has an invalid interface number: 86 but max is 0
[  298.386531][ T5942] usb 5-1: config 0 has no interface number 0
[  298.395457][ T5942] usb 5-1: too many endpoints for config 0 interface 86 altsetting 235: 246, using maximum allowed: 30
[  298.413127][ T5942] usb 5-1: config 0 interface 86 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[  298.426747][ T5942] usb 5-1: config 0 interface 86 has no altsetting 0
[  298.436446][ T5942] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  298.445676][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.460407][  T968] usb 4-1: USB disconnect, device number 11
[  298.468503][ T5942] usb 5-1: Product: syz
[  298.490244][ T5942] usb 5-1: Manufacturer: syz
[  298.494880][ T5942] usb 5-1: SerialNumber: syz
[  298.516675][ T5942] usb 5-1: config 0 descriptor??
[  299.348048][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  299.348088][   T29] audit: type=1400 audit(1730213901.680:351): avc:  denied  { read } for  pid=8718 comm="syz.2.713" name="mouse0" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  299.377479][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.509926][   T29] audit: type=1400 audit(1730213901.680:352): avc:  denied  { open } for  pid=8718 comm="syz.2.713" path="/dev/input/mouse0" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  299.533977][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.555087][   T29] audit: type=1400 audit(1730213901.690:353): avc:  denied  { append } for  pid=8718 comm="syz.2.713" name="event3" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  299.578423][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.585155][   T29] audit: type=1400 audit(1730213902.100:354): avc:  denied  { setopt } for  pid=8718 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  299.587613][ T5942] msi2500 5-1:0.86: Registered as swradio24
[  299.730139][ T5942] msi2500 5-1:0.86: SDR API is still slightly experimental and functionality changes may follow
[  299.825225][ T5942] usb 5-1: USB disconnect, device number 10
[  300.189459][   T29] audit: type=1400 audit(1730213902.960:355): avc:  denied  { mount } for  pid=8734 comm="syz.4.717" name="/" dev="hugetlbfs" ino=17414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  300.212278][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.072791][ T8757] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  301.082459][ T8757] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  301.116794][   T29] audit: type=1400 audit(1730213903.880:356): avc:  denied  { ioctl } for  pid=8751 comm="syz.1.722" path="socket:[17494]" dev="sockfs" ino=17494 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  301.330522][   T29] audit: type=1326 audit(1730213904.110:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8765 comm="syz.4.727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07437e719 code=0x0
[  301.341807][ T8758] infiniband syz1: set active
[  301.361904][ T8758] infiniband syz1: added bond_slave_1
[  301.401152][ T8758] RDS/IB: syz1: added
[  301.410611][ T8758] smc: adding ib device syz1 with port count 1
[  301.417231][ T8758] smc:    ib device syz1 port 1 has pnetid 
[  301.603391][ T5942] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  301.771907][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short
[  301.780062][ T5942] usb 4-1: not running at top speed; connect to a high speed hub
[  301.789672][ T5942] usb 4-1: config 81 has an invalid interface number: 106 but max is 0
[  301.811616][ T5942] usb 4-1: config 81 has no interface number 0
[  301.825231][ T5942] usb 4-1: config 81 interface 106 altsetting 196 endpoint 0x1 has invalid wMaxPacketSize 0
[  301.836149][ T5942] usb 4-1: config 81 interface 106 altsetting 196 has an endpoint descriptor with address 0x99, changing to 0x89
[  301.848935][ T5942] usb 4-1: config 81 interface 106 has no altsetting 0
[  301.858031][ T5942] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=30.63
[  301.890162][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.929880][ T5942] usb 4-1: Product: syz
[  301.947207][ T5942] usb 4-1: Manufacturer: syz
[  301.960904][ T5942] usb 4-1: SerialNumber: syz
[  302.262993][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.371864][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.695040][   T29] audit: type=1400 audit(1730213905.380:358): avc:  denied  { create } for  pid=8761 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  303.093559][   T29] audit: type=1400 audit(1730213905.840:359): avc:  denied  { getopt } for  pid=8787 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  303.389326][ T5942] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  303.513861][ T5942] usb 4-1: selecting invalid altsetting 0
[  303.553362][ T2317] pvrusb2: Failed to submit write-control URB status=-90
[  303.561751][ T2317] pvrusb2: Device being rendered inoperable
[  303.568084][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  303.578992][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  303.731638][ T5942] usb 4-1: USB disconnect, device number 12
[  303.957707][ T5942] libceph: connect (1)[c::]:6789 error -101
[  303.969748][ T5942] libceph: mon0 (1)[c::]:6789 connect error
[  303.991218][ T5942] libceph: connect (1)[c::]:6789 error -101
[  304.016260][ T5942] libceph: mon0 (1)[c::]:6789 connect error
[  304.168916][   T29] audit: type=1326 audit(1730213906.940:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.3.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x0
[  304.209044][ T8820] ceph: No mds server is up or the cluster is laggy
[  304.267281][ T8837] xt_SECMARK: invalid mode: 0
[  304.282630][ T5938] libceph: connect (1)[c::]:6789 error -101
[  304.290331][ T5938] libceph: mon0 (1)[c::]:6789 connect error
[  304.980144][ T8848] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  305.838588][ T8864] syz.0.749: attempt to access beyond end of device
[  305.838588][ T8864] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  305.852024][ T8864] SQUASHFS error: Failed to read block 0x0: -5
[  305.858216][ T8864] unable to read squashfs_super_block
[  306.176692][   T29] audit: type=1400 audit(1730213908.610:361): avc:  denied  { connect } for  pid=8855 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.437425][   T29] audit: type=1400 audit(1730213909.150:362): avc:  denied  { read } for  pid=8871 comm="syz.4.751" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  306.460656][    C1] vkms_vblank_simulate: vblank timer overrun
[  306.491851][   T29] audit: type=1400 audit(1730213909.150:363): avc:  denied  { open } for  pid=8871 comm="syz.4.751" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  306.515532][    C1] vkms_vblank_simulate: vblank timer overrun
[  306.743394][ T5942] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  306.837152][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.934985][ T8884] FAULT_INJECTION: forcing a failure.
[  306.934985][ T8884] name failslab, interval 1, probability 0, space 0, times 0
[  306.937340][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.952594][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.4.755 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  306.965966][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  306.976033][ T8884] Call Trace:
[  306.979321][ T8884]  <TASK>
[  306.982251][ T8884]  dump_stack_lvl+0x16c/0x1f0
[  306.986925][ T8884]  should_fail_ex+0x497/0x5b0
[  306.991593][ T8884]  ? fs_reclaim_acquire+0xae/0x150
[  306.996690][ T8884]  should_failslab+0xc2/0x120
[  307.001360][ T8884]  __kmalloc_noprof+0xcb/0x400
[  307.006113][ T8884]  tomoyo_encode2+0x100/0x3e0
[  307.010779][ T8884]  tomoyo_encode+0x29/0x50
[  307.015187][ T8884]  tomoyo_realpath_from_path+0x19d/0x720
[  307.020808][ T8884]  ? tomoyo_path_number_perm+0x232/0x590
[  307.026456][ T8884]  tomoyo_path_number_perm+0x245/0x590
[  307.031907][ T8884]  ? tomoyo_path_number_perm+0x232/0x590
[  307.037532][ T8884]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  307.043521][ T8884]  ? trace_lock_acquire+0x14a/0x1d0
[  307.048711][ T8884]  ? lock_acquire+0x2f/0xb0
[  307.053203][ T8884]  ? __fget_files+0x40/0x3f0
[  307.057789][ T8884]  ? __fget_files+0x244/0x3f0
[  307.062458][ T8884]  security_file_ioctl+0x9b/0x240
[  307.067467][ T8884]  __x64_sys_ioctl+0xbb/0x220
[  307.072136][ T8884]  do_syscall_64+0xcd/0x250
[  307.076633][ T8884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.082528][ T8884] RIP: 0033:0x7fc07437e719
[  307.086926][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.106603][ T8884] RSP: 002b:00007fc07508f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  307.115015][ T8884] RAX: ffffffffffffffda RBX: 00007fc074535f80 RCX: 00007fc07437e719
[  307.122969][ T8884] RDX: 0000000020000080 RSI: 000000000000aea2 RDI: 0000000000000004
[  307.130925][ T8884] RBP: 00007fc07508f090 R08: 0000000000000000 R09: 0000000000000000
[  307.138968][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.146923][ T8884] R13: 0000000000000000 R14: 00007fc074535f80 R15: 00007ffec09dae68
[  307.154904][ T8884]  </TASK>
[  307.163737][ T8884] ERROR: Out of memory at tomoyo_realpath_from_path.
[  307.176794][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.179145][ T8882] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  307.193622][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.194955][ T5942] usb 4-1: Using ep0 maxpacket: 32
[  307.218216][ T5942] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  307.221877][ T8882] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  307.227424][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.242794][ T5942] usb 4-1: Product: syz
[  307.246972][ T5942] usb 4-1: Manufacturer: syz
[  307.252046][ T5942] usb 4-1: SerialNumber: syz
[  307.268571][ T5942] usb 4-1: config 0 descriptor??
[  307.274812][   T29] audit: type=1400 audit(1730213910.050:364): avc:  denied  { create } for  pid=8887 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  307.283203][ T5942] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  307.294158][    C1] vkms_vblank_simulate: vblank timer overrun
[  307.383253][ T8889] ebtables: ebtables: counters copy to user failed while replacing table
[  307.432330][ T8882] ebtables: ebtables: counters copy to user failed while replacing table
[  307.465387][ T8898] sp0: Synchronizing with TNC
[  307.474743][ T8898] sp0: Found TNC
[  307.570581][   T29] audit: type=1400 audit(1730213910.340:365): avc:  denied  { getopt } for  pid=8897 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  307.868455][ T8899] [U] è`
[  308.190352][ T5873] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  308.212519][   T29] audit: type=1400 audit(1730213910.990:366): avc:  denied  { setopt } for  pid=8856 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  308.239502][ T5942] gspca_stk1135: reg_w 0x5 err -71
[  308.246023][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.254872][ T5942] gspca_stk1135: Sensor write failed
[  308.268612][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.276627][ T5942] gspca_stk1135: Sensor write failed
[  308.282840][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.291255][ T5942] gspca_stk1135: Sensor read failed
[  308.296549][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.304056][ T5942] gspca_stk1135: Sensor read failed
[  308.309940][ T5942] gspca_stk1135: Detected sensor type unknown (0x0)
[  308.320357][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.326720][ T5942] gspca_stk1135: Sensor read failed
[  308.332156][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.338488][ T5942] gspca_stk1135: Sensor read failed
[  308.343942][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.350885][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.351020][ T5942] gspca_stk1135: Sensor write failed
[  308.361775][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.371413][ T5942] gspca_stk1135: serial bus timeout: status=0x00
[  308.378040][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.399624][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.407806][ T5873] usb 5-1: Product: syz
[  308.412124][ T5873] usb 5-1: Manufacturer: syz
[  308.416764][ T5873] usb 5-1: SerialNumber: syz
[  308.898051][ T5873] usb 5-1: 0:2 : does not exist
[  308.909991][ T5873] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  308.974533][ T5873] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  309.140081][ T5942] gspca_stk1135: Sensor write failed
[  309.145504][ T5942] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  309.161172][ T5942] usb 4-1: USB disconnect, device number 13
[  309.409439][ T5873] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  309.420382][ T5873] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  309.477533][ T5873] usb 5-1: USB disconnect, device number 11
[  310.298570][   T29] audit: type=1400 audit(1730213913.070:367): avc:  denied  { read } for  pid=8919 comm="syz.4.765" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  310.332469][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.416387][   T29] audit: type=1400 audit(1730213913.070:368): avc:  denied  { open } for  pid=8919 comm="syz.4.765" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  311.002849][   T29] audit: type=1400 audit(1730213913.780:369): avc:  denied  { ioctl } for  pid=8929 comm="syz.3.767" path="socket:[17117]" dev="sockfs" ino=17117 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  311.209343][   T29] audit: type=1400 audit(1730213913.980:370): avc:  denied  { ioctl } for  pid=8937 comm="syz.4.768" path="socket:[17970]" dev="sockfs" ino=17970 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  311.235487][ T8938] IPVS: length: 95 != 24
[  311.455274][   T29] audit: type=1400 audit(1730213914.010:371): avc:  denied  { getopt } for  pid=8937 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  312.713496][ T8960] dvmrp5: entered allmulticast mode
[  313.120119][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.440094][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.475000][   T29] audit: type=1400 audit(1730213916.250:372): avc:  denied  { remount } for  pid=8979 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  313.485476][ T8980] hugetlbfs: Bad value 'g' for mount option 'nr_inodes'
[  313.485476][ T8980] 
[  314.494054][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.540405][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.549435][ T5831] Bluetooth: hci2: Malformed Event: 0x13
[  314.728564][ T8970] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  314.736299][ T8970] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  314.840383][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  315.235487][ T9000] Invalid option length (1025206) for dns_resolver key
[  315.276680][   T29] audit: type=1400 audit(1730213917.970:373): avc:  denied  { create } for  pid=8993 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  315.537750][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  315.549345][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  315.560725][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  315.564954][ T9002] input: syz0 as /devices/virtual/input/input8
[  315.594644][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  315.603873][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'.
[  315.714623][   T29] audit: type=1400 audit(1730213918.370:374): avc:  denied  { nlmsg_read } for  pid=8997 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  315.770949][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  315.797979][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.901426][ T5873] usb 5-1: config 0 descriptor??
[  315.997575][   T29] audit: type=1400 audit(1730213918.770:375): avc:  denied  { unmount } for  pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  316.728883][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.554182][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.608940][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.038416][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.071387][ T5873] usbhid 5-1:0.0: can't add hid device: -71
[  318.077410][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  318.112767][ T5873] usb 5-1: USB disconnect, device number 12
[  318.189404][   T29] audit: type=1400 audit(1730213920.960:376): avc:  denied  { setopt } for  pid=9010 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  318.267026][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.283346][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.302568][ T9024] binder: 9023:9024 ioctl 4018620d 0 returned -22
[  318.323592][   T29] audit: type=1400 audit(1730213921.100:377): avc:  denied  { setopt } for  pid=9013 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  318.526714][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.537697][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.801486][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'.
[  319.408264][   T29] audit: type=1400 audit(1730213922.180:378): avc:  denied  { getopt } for  pid=9022 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  319.784390][ T9045] capability: warning: `syz.1.795' uses deprecated v2 capabilities in a way that may be insecure
[  319.870290][ T7292] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  320.052825][ T7292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.071277][ T7292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  320.089153][ T7292] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  320.123102][ T7292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.149022][ T7292] usb 5-1: config 0 descriptor??
[  320.192961][ T9055] kvm: emulating exchange as write
[  322.690802][   T29] audit: type=1400 audit(1730213925.450:379): avc:  denied  { name_bind } for  pid=9067 comm="syz.3.802" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  322.692050][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  322.997391][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  323.122805][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  323.582026][ T7292] usb 5-1: USB disconnect, device number 13
[  326.494702][ T9108] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[9108]
[  326.740669][   T29] audit: type=1400 audit(1730213929.500:380): avc:  denied  { mounton } for  pid=9107 comm="syz.0.813" path="/proc/574/task" dev="proc" ino=18346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  326.788795][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.809362][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.946194][ T9108] trusted_key: encrypted_key: insufficient parameters specified
[  327.592997][ T7336] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  327.601862][ T7292] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  327.786370][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  327.796708][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'.
[  327.818633][ T9131] vivid-000: disconnect
[  327.838406][ T9131] netlink: 'syz.0.820': attribute type 9 has an invalid length.
[  327.841428][ T7292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.858378][ T9131] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.820'.
[  327.872719][   T29] audit: type=1400 audit(1730213930.650:381): avc:  denied  { read } for  pid=9132 comm="syz.1.821" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  327.895978][ T7292] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  327.896016][ T7292] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  327.921571][ T7336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.952616][ T7336] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  327.980031][ T7336] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  327.997625][   T29] audit: type=1400 audit(1730213930.650:382): avc:  denied  { open } for  pid=9132 comm="syz.1.821" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  327.999225][ T7292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.020921][    C1] vkms_vblank_simulate: vblank timer overrun
[  328.035669][ T7336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.042117][   T29] audit: type=1400 audit(1730213930.740:383): avc:  denied  { create } for  pid=9132 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  328.064271][ T7336] usb 5-1: config 0 descriptor??
[  328.094316][ T7292] usb 4-1: config 0 descriptor??
[  328.104797][   T29] audit: type=1400 audit(1730213930.770:384): avc:  denied  { read } for  pid=9137 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  328.306177][ T9130] vivid-000: reconnect
[  328.908574][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.917371][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.108329][   T29] audit: type=1400 audit(1730213933.870:385): avc:  denied  { ioctl } for  pid=9157 comm="syz.2.826" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  331.275372][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.328208][    T8] usb 4-1: USB disconnect, device number 14
[  331.344883][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.509444][   T29] audit: type=1400 audit(1730213934.280:386): avc:  denied  { read } for  pid=9176 comm="syz.2.831" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  331.539272][   T29] audit: type=1400 audit(1730213934.310:387): avc:  denied  { open } for  pid=9176 comm="syz.2.831" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  331.566946][   T29] audit: type=1400 audit(1730213934.310:388): avc:  denied  { write } for  pid=9176 comm="syz.2.831" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  331.711858][  T966] usb 5-1: USB disconnect, device number 14
[  331.748809][ T9180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  332.730351][ T9197] sock: sock_set_timeout: `syz.3.836' (pid 9197) tries to set negative timeout
[  332.730359][   T29] audit: type=1400 audit(1730213935.510:389): avc:  denied  { setopt } for  pid=9194 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  333.660400][ T5942] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  333.820263][ T5942] usb 4-1: device descriptor read/64, error -71
[  334.350281][ T5942] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  334.491497][ T5942] usb 4-1: device descriptor read/64, error -71
[  334.683030][ T5942] usb usb4-port1: attempt power cycle
[  334.831475][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.841017][   T29] audit: type=1400 audit(1730213937.620:390): avc:  denied  { create } for  pid=9214 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  334.868507][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.902947][ T9218] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  334.904924][   T29] audit: type=1400 audit(1730213937.620:391): avc:  denied  { connect } for  pid=9214 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  334.962508][   T29] audit: type=1400 audit(1730213937.680:392): avc:  denied  { write } for  pid=9214 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  335.147280][ T5942] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  335.378769][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.496413][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.510994][ T5942] usb 4-1: device descriptor read/8, error -71
[  335.657716][ T9232] netlink: 'syz.3.845': attribute type 10 has an invalid length.
[  335.674583][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.683277][ T9232] team0: Port device batadv0 added
[  336.220348][   T29] audit: type=1400 audit(1730213938.990:393): avc:  denied  { execute } for  pid=9240 comm="syz.1.849" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  336.359416][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'.
[  336.706547][   T29] audit: type=1400 audit(1730213939.480:394): avc:  denied  { read } for  pid=9247 comm="syz.3.851" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  336.729735][   T29] audit: type=1400 audit(1730213939.480:395): avc:  denied  { open } for  pid=9247 comm="syz.3.851" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  336.871862][ T9248] warning: `syz.3.851' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  337.060977][   T29] audit: type=1400 audit(1730213939.830:396): avc:  denied  { ioctl } for  pid=9253 comm="syz.1.852" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  337.118412][   T29] audit: type=1400 audit(1730213939.890:397): avc:  denied  { read } for  pid=9253 comm="syz.1.852" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  337.883631][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.933538][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.964447][ T9255] syz.1.852 (9255) used greatest stack depth: 21024 bytes left
[  339.229084][ T9292] netlink: 'syz.0.863': attribute type 9 has an invalid length.
[  339.237014][ T9292] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.863'.
[  339.294049][ T9293] FAULT_INJECTION: forcing a failure.
[  339.294049][ T9293] name failslab, interval 1, probability 0, space 0, times 0
[  339.307860][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.4.864 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  339.318454][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  339.328488][ T9293] Call Trace:
[  339.331762][ T9293]  <TASK>
[  339.334667][ T9293]  dump_stack_lvl+0x16c/0x1f0
[  339.339374][ T9293]  should_fail_ex+0x497/0x5b0
[  339.344047][ T9293]  ? fs_reclaim_acquire+0xae/0x150
[  339.349144][ T9293]  should_failslab+0xc2/0x120
[  339.353821][ T9293]  __kmalloc_cache_noprof+0x6b/0x300
[  339.359085][ T9293]  ? snd_pcm_oss_change_params_locked+0x1d6/0x3a60
[  339.365575][ T9293]  snd_pcm_oss_change_params_locked+0x1d6/0x3a60
[  339.371886][ T9293]  ? trace_contention_end+0xea/0x140
[  339.377144][ T9293]  ? __mutex_lock+0x1a6/0x9c0
[  339.381811][ T9293]  ? __pfx___lock_acquire+0x10/0x10
[  339.387068][ T9293]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  339.393809][ T9293]  ? snd_pcm_oss_make_ready+0xc4/0x1b0
[  339.399245][ T9293]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  339.404861][ T9293]  ? __pfx___mutex_lock+0x10/0x10
[  339.409865][ T9293]  ? snd_pcm_stream_unlock_irq+0x90/0xb0
[  339.415477][ T9293]  snd_pcm_oss_make_ready+0xe6/0x1b0
[  339.420743][ T9293]  snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0
[  339.426807][ T9293]  ? lockdep_hardirqs_on+0x7c/0x110
[  339.431986][ T9293]  snd_pcm_oss_poll+0x99a/0xb80
[  339.436905][ T9293]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  339.442276][ T9293]  ? __fget_files+0x244/0x3f0
[  339.446935][ T9293]  do_select+0xc9a/0x17b0
[  339.451250][ T9293]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  339.456609][ T9293]  ? __pfx_do_select+0x10/0x10
[  339.461361][ T9293]  ? hlock_class+0x4e/0x130
[  339.465841][ T9293]  ? mark_lock+0xb5/0xc60
[  339.470143][ T9293]  ? mark_lock+0xb5/0xc60
[  339.474444][ T9293]  ? hlock_class+0x4e/0x130
[  339.478921][ T9293]  ? __pfx___pollwait+0x10/0x10
[  339.483751][ T9293]  ? __pfx_pollwake+0x10/0x10
[  339.488405][ T9293]  ? __pfx_pollwake+0x10/0x10
[  339.493061][ T9293]  ? __pfx_pollwake+0x10/0x10
[  339.497721][ T9293]  ? __pfx_pollwake+0x10/0x10
[  339.502421][ T9293]  ? lock_acquire+0x2f/0xb0
[  339.506911][ T9293]  ? __might_fault+0xe3/0x190
[  339.511568][ T9293]  ? __might_fault+0xe3/0x190
[  339.516227][ T9293]  ? core_sys_select+0x459/0xb80
[  339.521144][ T9293]  core_sys_select+0x459/0xb80
[  339.525891][ T9293]  ? __pfx_core_sys_select+0x10/0x10
[  339.531164][ T9293]  ? get_pid_task+0xfc/0x250
[  339.535759][ T9293]  ? set_user_sigmask+0x217/0x2a0
[  339.540767][ T9293]  ? __pfx_set_user_sigmask+0x10/0x10
[  339.546131][ T9293]  do_pselect.constprop.0+0x1a0/0x1f0
[  339.551489][ T9293]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  339.557381][ T9293]  __x64_sys_pselect6+0x183/0x240
[  339.562395][ T9293]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  339.567934][ T9293]  do_syscall_64+0xcd/0x250
[  339.572428][ T9293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.578301][ T9293] RIP: 0033:0x7fc07437e719
[  339.582698][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.602282][ T9293] RSP: 002b:00007fc07508f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  339.610675][ T9293] RAX: ffffffffffffffda RBX: 00007fc074535f80 RCX: 00007fc07437e719
[  339.618623][ T9293] RDX: 0000000000000000 RSI: 00000000200045c0 RDI: 0000000000000040
[  339.626570][ T9293] RBP: 00007fc07508f090 R08: 0000000000000000 R09: 0000000000000000
[  339.634515][ T9293] R10: 0000000020004640 R11: 0000000000000246 R12: 0000000000000001
[  339.642459][ T9293] R13: 0000000000000000 R14: 00007fc074535f80 R15: 00007ffec09dae68
[  339.650412][ T9293]  </TASK>
[  340.542180][ T7336] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  340.700295][  T966] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  340.716612][ T7336] usb 5-1: Invalid ep0 maxpacket: 64
[  340.795869][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.805875][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.860420][ T7336] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  340.882051][  T966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.897261][  T966] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  340.918277][  T966] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  340.927881][  T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.946093][  T966] usb 4-1: config 0 descriptor??
[  341.010805][ T7336] usb 5-1: Invalid ep0 maxpacket: 64
[  341.019255][ T7336] usb usb5-port1: attempt power cycle
[  341.067969][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'.
[  341.079553][   T29] audit: type=1400 audit(1730213943.850:398): avc:  denied  { map } for  pid=9310 comm="syz.2.870" path="/dev/video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  341.108238][   T29] audit: type=1400 audit(1730213943.870:399): avc:  denied  { setopt } for  pid=9310 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  341.195415][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  341.206761][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.871'.
[  341.218329][ T9314] vivid-004: disconnect
[  341.223549][ T9314] netlink: 'syz.2.871': attribute type 9 has an invalid length.
[  341.231426][ T9314] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.871'.
[  341.360364][ T7336] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  341.410336][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  341.424474][ T7336] usb 5-1: Invalid ep0 maxpacket: 64
[  341.442240][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'.
[  341.460116][ T9317] vivid-002: disconnect
[  341.467017][ T9317] netlink: 'syz.1.872': attribute type 9 has an invalid length.
[  341.477385][ T9317] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.872'.
[  341.586934][ T7336] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  341.637639][ T9313] vivid-004: reconnect
[  341.656293][ T7336] usb 5-1: Invalid ep0 maxpacket: 64
[  341.705483][ T7336] usb usb5-port1: unable to enumerate USB device
[  341.825174][ T9321] FAULT_INJECTION: forcing a failure.
[  341.825174][ T9321] name failslab, interval 1, probability 0, space 0, times 0
[  341.838273][ T9321] CPU: 0 UID: 0 PID: 9321 Comm: syz.2.873 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  341.848850][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  341.858883][ T9321] Call Trace:
[  341.862140][ T9321]  <TASK>
[  341.865049][ T9321]  dump_stack_lvl+0x16c/0x1f0
[  341.869709][ T9321]  should_fail_ex+0x497/0x5b0
[  341.874361][ T9321]  ? fs_reclaim_acquire+0xae/0x150
[  341.879446][ T9321]  should_failslab+0xc2/0x120
[  341.884103][ T9321]  kmem_cache_alloc_noprof+0x6e/0x2f0
[  341.889449][ T9321]  ? vm_area_alloc+0x1f/0x230
[  341.894105][ T9321]  vm_area_alloc+0x1f/0x230
[  341.898595][ T9321]  mmap_region+0xee7/0x2a50
[  341.903081][ T9321]  ? __pfx_mmap_region+0x10/0x10
[  341.908091][ T9321]  ? avc_has_perm_noaudit+0x61/0x3a0
[  341.913379][ T9321]  ? bpf_lsm_mmap_addr+0x9/0x10
[  341.918225][ T9321]  ? security_mmap_addr+0x6c/0x1e0
[  341.923314][ T9321]  ? __get_unmapped_area+0x26b/0x3a0
[  341.928578][ T9321]  do_mmap+0xc00/0xfc0
[  341.932630][ T9321]  vm_mmap_pgoff+0x1ba/0x360
[  341.937200][ T9321]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  341.942294][ T9321]  ? __fget_files+0x244/0x3f0
[  341.946953][ T9321]  ksys_mmap_pgoff+0x32c/0x5c0
[  341.951706][ T9321]  ? __pfx_ksys_write+0x10/0x10
[  341.956542][ T9321]  __x64_sys_mmap+0x125/0x190
[  341.961199][ T9321]  do_syscall_64+0xcd/0x250
[  341.965687][ T9321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.971572][ T9321] RIP: 0033:0x7f381cb7e719
[  341.975963][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.995548][ T9321] RSP: 002b:00007f381d93b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  342.003943][ T9321] RAX: ffffffffffffffda RBX: 00007f381cd35f80 RCX: 00007f381cb7e719
[  342.011891][ T9321] RDX: 000000000280000b RSI: 00000000000e1000 RDI: 0000000020000000
[  342.019852][ T9321] RBP: 00007f381d93b090 R08: 0000000000000003 R09: 0000000000000000
[  342.027799][ T9321] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001
[  342.035757][ T9321] R13: 0000000000000000 R14: 00007f381cd35f80 R15: 00007ffda011cb48
[  342.043728][ T9321]  </TASK>
[  342.123888][   T29] audit: type=1400 audit(1730213944.900:400): avc:  denied  { read } for  pid=9322 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  342.174281][ T9324] ieee802154 phy0 wpan0: encryption failed: -22
[  342.184453][   T29] audit: type=1400 audit(1730213944.960:401): avc:  denied  { create } for  pid=9322 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  342.248473][   T29] audit: type=1400 audit(1730213944.980:402): avc:  denied  { ioctl } for  pid=9322 comm="syz.2.874" path="socket:[18848]" dev="sockfs" ino=18848 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  342.295962][ T9316] vivid-002: reconnect
[  343.208579][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.421405][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.486988][   T29] audit: type=1400 audit(1730213946.230:403): avc:  denied  { create } for  pid=9336 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  343.548965][   T29] audit: type=1400 audit(1730213946.260:404): avc:  denied  { bind } for  pid=9336 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  343.592422][   T29] audit: type=1400 audit(1730213946.290:405): avc:  denied  { write } for  pid=9336 comm="syz.2.877" path="socket:[18872]" dev="sockfs" ino=18872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  343.823483][ T9347] ubi0: attaching mtd0
[  343.832356][ T9347] ubi0: scanning is finished
[  343.837013][ T9347] ubi0: empty MTD device detected
[  344.530583][ T9337] Process accounting resumed
[  344.766219][ T9347] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  344.817467][ T7336] usb 4-1: USB disconnect, device number 19
[  346.081470][   T29] audit: type=1400 audit(1730213948.860:406): avc:  denied  { write } for  pid=9355 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  346.131773][ T9365] infiniband syz2: set active
[  346.136477][ T9365] infiniband syz2: added team_slave_1
[  346.143269][ T9365] syz2: rxe_create_cq: returned err = -12
[  346.149073][ T9365] infiniband syz2: Couldn't create ib_mad CQ
[  346.155340][ T9365] infiniband syz2: Couldn't open port 1
[  346.180856][ T9365] RDS/IB: syz2: added
[  346.184898][ T9365] smc: adding ib device syz2 with port count 1
[  346.191162][ T9365] smc:    ib device syz2 port 1 has pnetid 
[  346.845445][   T29] audit: type=1400 audit(1730213949.620:407): avc:  denied  { create } for  pid=9383 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  347.016290][   T29] audit: type=1400 audit(1730213949.780:408): avc:  denied  { map } for  pid=9383 comm="syz.2.888" path="socket:[19842]" dev="sockfs" ino=19842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  347.338121][   T29] audit: type=1400 audit(1730213950.000:409): avc:  denied  { read } for  pid=9390 comm="syz.3.890" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  347.657217][   T29] audit: type=1400 audit(1730213950.000:410): avc:  denied  { open } for  pid=9390 comm="syz.3.890" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  347.698891][   T29] audit: type=1400 audit(1730213950.110:411): avc:  denied  { ioctl } for  pid=9390 comm="syz.3.890" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  347.866104][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.879108][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.019303][   T29] audit: type=1400 audit(1730213950.790:412): avc:  denied  { setopt } for  pid=9400 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.169163][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.222146][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.294711][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.376006][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.682571][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.897'.
[  351.723385][ T9420] netlink: 172 bytes leftover after parsing attributes in process `syz.1.897'.
[  352.042368][ T9429] FAULT_INJECTION: forcing a failure.
[  352.042368][ T9429] name failslab, interval 1, probability 0, space 0, times 0
[  352.060503][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.1.900 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  352.071126][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  352.081194][ T9429] Call Trace:
[  352.084476][ T9429]  <TASK>
[  352.087413][ T9429]  dump_stack_lvl+0x16c/0x1f0
[  352.092118][ T9429]  should_fail_ex+0x497/0x5b0
[  352.096803][ T9429]  ? fs_reclaim_acquire+0xae/0x150
[  352.101917][ T9429]  should_failslab+0xc2/0x120
[  352.106603][ T9429]  __kmalloc_noprof+0xcb/0x400
[  352.111367][ T9429]  ? avc_has_perm_noaudit+0x143/0x3a0
[  352.116752][ T9429]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  352.123872][ T9429]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  352.130119][ T9429]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  352.135570][ T9429]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  352.142321][ T9429]  ? bpf_lsm_capable+0x9/0x10
[  352.146988][ T9429]  ? security_capable+0x7e/0x260
[  352.151930][ T9429]  genl_rcv_msg+0x565/0x800
[  352.156424][ T9429]  ? __pfx_genl_rcv_msg+0x10/0x10
[  352.161435][ T9429]  ? __pfx_netlbl_calipso_add+0x10/0x10
[  352.166975][ T9429]  ? __pfx___lock_acquire+0x10/0x10
[  352.172169][ T9429]  netlink_rcv_skb+0x16b/0x440
[  352.176938][ T9429]  ? __pfx_genl_rcv_msg+0x10/0x10
[  352.181948][ T9429]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  352.187236][ T9429]  ? down_read+0xc9/0x330
[  352.191566][ T9429]  ? __pfx_down_read+0x10/0x10
[  352.196324][ T9429]  ? netlink_deliver_tap+0x1ae/0xd90
[  352.201701][ T9429]  ? selinux_nlmsg_lookup+0x265/0x4b0
[  352.207081][ T9429]  genl_rcv+0x28/0x40
[  352.211055][ T9429]  netlink_unicast+0x53c/0x7f0
[  352.215824][ T9429]  ? __pfx_netlink_unicast+0x10/0x10
[  352.221110][ T9429]  netlink_sendmsg+0x8b8/0xd70
[  352.225870][ T9429]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.231153][ T9429]  ____sys_sendmsg+0xaaf/0xc90
[  352.235908][ T9429]  ? copy_msghdr_from_user+0x10b/0x160
[  352.241358][ T9429]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.246635][ T9429]  ? find_held_lock+0x2d/0x110
[  352.251393][ T9429]  ___sys_sendmsg+0x135/0x1e0
[  352.256059][ T9429]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.261262][ T9429]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  352.267079][ T9429]  ? fdget+0x176/0x210
[  352.271148][ T9429]  __sys_sendmsg+0x117/0x1f0
[  352.275724][ T9429]  ? __pfx___sys_sendmsg+0x10/0x10
[  352.280823][ T9429]  ? __fget_files+0x244/0x3f0
[  352.285505][ T9429]  do_syscall_64+0xcd/0x250
[  352.290002][ T9429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.295890][ T9429] RIP: 0033:0x7fd46c77e719
[  352.300294][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.319892][ T9429] RSP: 002b:00007fd46d639038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.328298][ T9429] RAX: ffffffffffffffda RBX: 00007fd46c935f80 RCX: 00007fd46c77e719
[  352.336255][ T9429] RDX: 0000000000040000 RSI: 0000000020000100 RDI: 0000000000000004
[  352.344213][ T9429] RBP: 00007fd46d639090 R08: 0000000000000000 R09: 0000000000000000
[  352.352169][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.360124][ T9429] R13: 0000000000000000 R14: 00007fd46c935f80 R15: 00007fff99076a88
[  352.368092][ T9429]  </TASK>
[  352.371125][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.283110][ T9442] netlink: 'syz.3.904': attribute type 9 has an invalid length.
[  353.294200][ T9442] affs: No valid root block on device loop3
[  353.364456][ T9444] FAULT_INJECTION: forcing a failure.
[  353.364456][ T9444] name failslab, interval 1, probability 0, space 0, times 0
[  353.396788][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.2.903 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  353.407399][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  353.417443][ T9444] Call Trace:
[  353.420709][ T9444]  <TASK>
[  353.423627][ T9444]  dump_stack_lvl+0x16c/0x1f0
[  353.428303][ T9444]  should_fail_ex+0x497/0x5b0
[  353.432969][ T9444]  ? fs_reclaim_acquire+0xae/0x150
[  353.438086][ T9444]  should_failslab+0xc2/0x120
[  353.442762][ T9444]  __kmalloc_noprof+0xcb/0x400
[  353.447519][ T9444]  ? avc_has_perm_noaudit+0x143/0x3a0
[  353.452891][ T9444]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  353.459990][ T9444]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  353.466219][ T9444]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  353.472189][ T9444]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.478249][ T9444]  ? bpf_lsm_capable+0x9/0x10
[  353.482913][ T9444]  ? security_capable+0x7e/0x260
[  353.487848][ T9444]  genl_rcv_msg+0x565/0x800
[  353.492340][ T9444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.497358][ T9444]  ? __pfx_netlbl_calipso_add+0x10/0x10
[  353.502893][ T9444]  ? __pfx___lock_acquire+0x10/0x10
[  353.508081][ T9444]  netlink_rcv_skb+0x16b/0x440
[  353.512839][ T9444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.517849][ T9444]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.523134][ T9444]  ? down_read+0xc9/0x330
[  353.527447][ T9444]  ? __pfx_down_read+0x10/0x10
[  353.532213][ T9444]  ? netlink_deliver_tap+0x1ae/0xd90
[  353.537487][ T9444]  ? selinux_nlmsg_lookup+0x265/0x4b0
[  353.542866][ T9444]  genl_rcv+0x28/0x40
[  353.546850][ T9444]  netlink_unicast+0x53c/0x7f0
[  353.551627][ T9444]  ? __pfx_netlink_unicast+0x10/0x10
[  353.556925][ T9444]  netlink_sendmsg+0x8b8/0xd70
[  353.561784][ T9444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.567063][ T9444]  ? __might_fault+0xe3/0x190
[  353.571750][ T9444]  ____sys_sendmsg+0xaaf/0xc90
[  353.576506][ T9444]  ? copy_msghdr_from_user+0x10b/0x160
[  353.582038][ T9444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.587665][ T9444]  ? __pfx___lock_acquire+0x10/0x10
[  353.592852][ T9444]  ___sys_sendmsg+0x135/0x1e0
[  353.597514][ T9444]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.602706][ T9444]  ? lock_acquire+0x2f/0xb0
[  353.607207][ T9444]  ? __fget_files+0x40/0x3f0
[  353.611804][ T9444]  ? fdget+0x176/0x210
[  353.615867][ T9444]  __sys_sendmsg+0x117/0x1f0
[  353.620453][ T9444]  ? __pfx___sys_sendmsg+0x10/0x10
[  353.625550][ T9444]  ? __fget_files+0x244/0x3f0
[  353.630235][ T9444]  do_syscall_64+0xcd/0x250
[  353.634733][ T9444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.640622][ T9444] RIP: 0033:0x7f381cb7e719
[  353.645019][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.664612][ T9444] RSP: 002b:00007f381d93b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.673013][ T9444] RAX: ffffffffffffffda RBX: 00007f381cd35f80 RCX: 00007f381cb7e719
[  353.680967][ T9444] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004
[  353.689182][ T9444] RBP: 00007f381d93b090 R08: 0000000000000000 R09: 0000000000000000
[  353.697224][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.705179][ T9444] R13: 0000000000000000 R14: 00007f381cd35f80 R15: 00007ffda011cb48
[  353.713145][ T9444]  </TASK>
[  353.895818][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.908'.
[  353.966866][ T9450] usb usb8: usbfs: process 9450 (syz.3.908) did not claim interface 0 before use
[  353.975114][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.020867][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.645465][ T9458] 
@ÿ: renamed from veth0_vlan (while UP)
[  356.284278][ T9480] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  356.290831][ T9480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  356.346043][ T9480] vhci_hcd vhci_hcd.0: Device attached
[  356.483977][ T9488] process 'syz.1.916' launched '/dev/fd/7' with NULL argv: empty string added
[  356.492225][ T9486] kvm: pic: non byte read
[  356.508625][ T9486] kvm: pic: level sensitive irq not supported
[  356.508685][ T9486] kvm: pic: non byte read
[  356.567721][   T29] audit: type=1400 audit(1730213959.340:413): avc:  denied  { execute_no_trans } for  pid=9479 comm="syz.1.916" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  356.661570][ T9481] vhci_hcd: connection closed
[  356.662225][   T12] vhci_hcd: stop threads
[  356.684857][   T12] vhci_hcd: release socket
[  356.695562][   T12] vhci_hcd: disconnect device
[  356.766498][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.917'.
[  357.052975][ T7292] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  357.220404][ T7292] usb 4-1: Using ep0 maxpacket: 8
[  357.424992][ T7292] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  357.436638][ T7292] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.465539][ T7292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  357.476464][ T7292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.500285][ T7292] usb 4-1: Product: syz
[  357.506736][ T7292] usb 4-1: Manufacturer: syz
[  357.518182][ T7292] usb 4-1: SerialNumber: syz
[  357.540546][ T9496] raw-gadget.8 gadget.3: fail, usb_ep_enable returned -22
[  357.655462][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.922'.
[  357.797858][   T29] audit: type=1326 audit(1730213960.570:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.0.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d1797e719 code=0x0
[  358.028694][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.092214][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.585103][ T7292] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  359.599172][ T7292] usb 4-1: USB disconnect, device number 20
[  363.439824][ T9561] mmap: syz.4.936 (9561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  363.571917][   T29] audit: type=1400 audit(1730213966.340:415): avc:  denied  { read write } for  pid=9559 comm="syz.0.935" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  363.597304][   T29] audit: type=1400 audit(1730213966.340:416): avc:  denied  { open } for  pid=9559 comm="syz.0.935" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  363.630617][   T29] audit: type=1400 audit(1730213966.370:417): avc:  denied  { write } for  pid=9559 comm="syz.0.935" path="socket:[20192]" dev="sockfs" ino=20192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  364.492400][ T9567] vivid-000: kernel_thread() failed
[  364.603729][ T7336] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  365.221582][ T7336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.348134][ T7336] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  365.378328][ T7336] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  365.538576][ T7336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.562080][ T7336] usb 4-1: config 0 descriptor??
[  366.871036][ T9594] ubi0: attaching mtd0
[  366.894185][ T9594] ubi0: scanning is finished
[  367.791677][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  367.931524][ T9594] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  368.092636][  T968] usb 4-1: USB disconnect, device number 21
[  370.465703][   T29] audit: type=1400 audit(1730213972.740:418): avc:  denied  { ioctl } for  pid=9619 comm="syz.2.948" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  370.490141][    C1] vkms_vblank_simulate: vblank timer overrun
[  372.379319][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  372.754196][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  376.215476][   T29] audit: type=1400 audit(1730213978.990:419): avc:  denied  { unmount } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  376.329419][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  377.074083][ T9704] netlink: 'syz.1.971': attribute type 2 has an invalid length.
[  377.138840][ T9704] : entered promiscuous mode
[  377.830414][ T9723] capability: warning: `syz.1.978' uses 32-bit capabilities (legacy support in use)
[  377.848788][ T9719] 9pnet_fd: Insufficient options for proto=fd
[  378.153559][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.159889][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  380.807658][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.817354][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.843128][ T9758] dccp_close: ABORT with 32 bytes unread
[  381.490117][   T29] audit: type=1326 audit(1730213984.250:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.513725][   T29] audit: type=1326 audit(1730213984.250:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.536897][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.543092][   T29] audit: type=1326 audit(1730213984.270:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.566188][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.572600][   T29] audit: type=1326 audit(1730213984.270:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.596230][   T29] audit: type=1326 audit(1730213984.270:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.619414][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.626044][   T29] audit: type=1326 audit(1730213984.270:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.657162][   T29] audit: type=1326 audit(1730213984.270:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.680794][   T29] audit: type=1326 audit(1730213984.270:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.703977][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.711332][   T29] audit: type=1326 audit(1730213984.320:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.3.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe163d7e719 code=0x7ffc0000
[  381.734461][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.791551][ T9797] syz.4.997: attempt to access beyond end of device
[  383.791551][ T9797] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0
[  383.805153][ T9797] VFS: unable to read V7 FS superblock on device nbd4.
[  383.812112][ T9797] VFS: could not find a valid V7 on nbd4.
[  384.344852][ T9796] FAULT_INJECTION: forcing a failure.
[  384.344852][ T9796] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.358035][ T9796] CPU: 0 UID: 0 PID: 9796 Comm: syz.3.996 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  384.368629][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  384.378697][ T9796] Call Trace:
[  384.381971][ T9796]  <TASK>
[  384.384914][ T9796]  dump_stack_lvl+0x16c/0x1f0
[  384.389611][ T9796]  should_fail_ex+0x497/0x5b0
[  384.391810][   T29] audit: type=1400 audit(1730213986.550:429): avc:  denied  { connect } for  pid=9793 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  384.394285][ T9796]  _copy_from_user+0x32/0x100
[  384.394312][ T9796]  move_addr_to_kernel+0x68/0x160
[  384.423739][ T9796]  __sys_bind+0xc4/0x220
[  384.427987][ T9796]  ? __pfx___sys_bind+0x10/0x10
[  384.432864][ T9796]  __x64_sys_bind+0x72/0xb0
[  384.437393][ T9796]  do_syscall_64+0xcd/0x250
[  384.441894][ T9796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.447780][ T9796] RIP: 0033:0x7fe163d7e719
[  384.452195][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.471801][ T9796] RSP: 002b:00007fe164b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  384.480201][ T9796] RAX: ffffffffffffffda RBX: 00007fe163f36058 RCX: 00007fe163d7e719
[  384.488157][ T9796] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003
[  384.496113][ T9796] RBP: 00007fe164b40090 R08: 0000000000000000 R09: 0000000000000000
[  384.504068][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.512024][ T9796] R13: 0000000000000000 R14: 00007fe163f36058 R15: 00007ffd88c24668
[  384.519988][ T9796]  </TASK>
[  384.808370][ T9801] input: syz0 as /devices/virtual/input/input9
[  388.118417][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'.
[  388.146017][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1006'.
[  388.633597][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'.
[  388.746083][ T9835] vivid-006: disconnect
[  388.754183][ T9835] netlink: 'syz.3.1006': attribute type 9 has an invalid length.
[  388.762233][ T9835] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1006'.
[  388.784713][ T9843] vivid-008: disconnect
[  388.784881][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'.
[  388.821970][ T9834] vivid-006: reconnect
[  389.011098][ T9839] netlink: 'syz.4.1008': attribute type 9 has an invalid length.
[  389.018842][ T9839] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1008'.
[  389.321520][ T9838] vivid-008: reconnect
[  390.952726][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  391.410366][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  391.410398][   T29] audit: type=1400 audit(1730213994.110:431): avc:  denied  { write } for  pid=9863 comm="syz.2.1014" name="fd" dev="proc" ino=20967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  391.569131][   T29] audit: type=1400 audit(1730213994.120:432): avc:  denied  { add_name } for  pid=9863 comm="syz.2.1014" name="0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  391.645891][   T29] audit: type=1400 audit(1730213994.170:433): avc:  denied  { create } for  pid=9863 comm="syz.2.1014" name="0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  392.601740][   T29] audit: type=1400 audit(1730213994.180:434): avc:  denied  { associate } for  pid=9863 comm="syz.2.1014" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  392.622310][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.972034][   T29] audit: type=1400 audit(1730213994.370:435): avc:  denied  { write } for  pid=5181 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.993636][   T29] audit: type=1400 audit(1730213994.370:436): avc:  denied  { remove_name } for  pid=5181 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.016203][   T29] audit: type=1400 audit(1730213994.370:437): avc:  denied  { add_name } for  pid=5181 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.231797][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  393.327180][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'.
[  393.988372][ T9894] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1020'.
[  394.023353][ T9890] vivid-006: disconnect
[  394.263311][ T9896] netlink: 'syz.3.1019': attribute type 9 has an invalid length.
[  394.297590][ T9896] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1019'.
[  394.392752][ T9885] vivid-006: reconnect
[  395.423360][ T9914] mkiss: ax0: crc mode is auto.
[  395.454223][ T9914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1026'.
[  395.923581][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  395.980390][ T7336] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  396.055821][   T29] audit: type=1400 audit(1730213998.230:438): avc:  denied  { bind } for  pid=9908 comm="syz.0.1026" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  396.132870][   T29] audit: type=1400 audit(1730213998.230:439): avc:  denied  { name_bind } for  pid=9908 comm="syz.0.1026" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  396.140350][ T7336] usb 4-1: device descriptor read/64, error -71
[  396.153836][   T29] audit: type=1400 audit(1730213998.230:440): avc:  denied  { node_bind } for  pid=9908 comm="syz.0.1026" saddr=fe80::32 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  399.090276][ T7336] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  399.220257][ T7336] usb 4-1: device descriptor read/64, error -71
[  400.090491][ T7336] usb usb4-port1: attempt power cycle
[  400.430262][ T7336] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  400.883767][   T29] audit: type=1400 audit(1730214003.560:441): avc:  denied  { map } for  pid=9931 comm="syz.1.1030" path="socket:[21714]" dev="sockfs" ino=21714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  401.178491][ T7336] usb 4-1: device descriptor read/8, error -71
[  401.761511][ T9956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1036'.
[  401.827752][ T9954] overlay: ./file0 is not a directory
[  401.842266][   T29] audit: type=1400 audit(1730214004.620:442): avc:  denied  { bind } for  pid=9951 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  402.614250][ T9978] Invalid option length (1025206) for dns_resolver key
[  404.633556][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  404.881340][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.975557][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.001995][   T29] audit: type=1400 audit(1730214007.550:443): avc:  denied  { connect } for  pid=9994 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  405.137010][ T2961] tipc: Subscription rejected, illegal request
[  405.608267][T10006] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR
[  405.634801][   T29] audit: type=1400 audit(1730214007.920:444): avc:  denied  { read } for  pid=9994 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  405.709550][   T29] audit: type=1400 audit(1730214007.920:445): avc:  denied  { ioctl } for  pid=9994 comm="syz.2.1047" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  406.084914][   T29] audit: type=1400 audit(1730214008.860:446): avc:  denied  { setopt } for  pid=10011 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  406.110696][   T29] audit: type=1400 audit(1730214008.880:447): avc:  denied  { set_context_mgr } for  pid=10011 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  406.367954][    T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  406.785647][    T8] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  406.795771][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.807929][    T8] usb 5-1: config 0 has no interface number 0
[  406.814124][    T8] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  406.825054][    T8] usb 5-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  406.920493][    T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28
[  406.929573][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.940475][    T8] usb 5-1: Product: syz
[  406.944666][    T8] usb 5-1: Manufacturer: syz
[  406.949273][    T8] usb 5-1: SerialNumber: syz
[  406.983518][    T8] usb 5-1: config 0 descriptor??
[  407.533928][T10032] block nbd2: NBD_DISCONNECT
[  407.539082][T10032] block nbd2: Disconnected due to user request.
[  407.561985][T10032] block nbd2: shutting down sockets
[  407.917386][   T29] audit: type=1400 audit(1730214010.690:448): avc:  denied  { map } for  pid=10011 comm="syz.4.1048" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  408.059768][   T29] audit: type=1400 audit(1730214010.700:449): avc:  denied  { write } for  pid=10011 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  408.059918][    T8] usb 5-1: Found UVC 0.00 device syz (05ac:8600)
[  408.163907][    T8] usb 5-1: No valid video chain found.
[  408.226909][    T8] usb 5-1: USB disconnect, device number 19
[  409.489484][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'.
[  409.503182][T10070] ebtables: ebtables: counters copy to user failed while replacing table
[  410.778895][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'.
[  411.000418][ T7336] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  411.178935][ T7336] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice= 0.00
[  411.197120][T10090] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1071'.
[  411.208849][ T7336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.267207][ T7336] usb 4-1: config 0 descriptor??
[  411.952181][ T7336] gs_usb 4-1:0.0: Couldn't get device config: (err=-121)
[  411.959309][ T7336] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  412.174206][T10113] syz.2.1076: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  412.176180][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.2.1076 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  412.176206][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  412.176219][T10113] Call Trace:
[  412.176225][T10113]  <TASK>
[  412.176234][T10113]  dump_stack_lvl+0x16c/0x1f0
[  412.176271][T10113]  warn_alloc+0x24d/0x3a0
[  412.176297][T10113]  ? __pfx_warn_alloc+0x10/0x10
[  412.176320][T10113]  ? __pfx_stack_trace_save+0x10/0x10
[  412.176354][T10113]  ? kasan_save_stack+0x42/0x60
[  412.176375][T10113]  ? kasan_save_stack+0x33/0x60
[  412.176394][T10113]  ? kasan_save_track+0x14/0x30
[  412.176413][T10113]  ? __kasan_kmalloc+0xaa/0xb0
[  412.176432][T10113]  ? xskq_create+0x52/0x1d0
[  412.176460][T10113]  ? do_sock_setsockopt+0x222/0x480
[  412.176486][T10113]  ? __sys_setsockopt+0x1a4/0x270
[  412.176505][T10113]  ? __x64_sys_setsockopt+0xbd/0x160
[  412.176530][T10113]  __vmalloc_node_range_noprof+0x11a7/0x15a0
[  412.176567][T10113]  ? xskq_create+0xfb/0x1d0
[  412.176599][T10113]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  412.176628][T10113]  ? xskq_create+0xfb/0x1d0
[  412.176656][T10113]  vmalloc_user_noprof+0x6b/0x90
[  412.176677][T10113]  ? xskq_create+0xfb/0x1d0
[  412.176705][T10113]  xskq_create+0xfb/0x1d0
[  412.176735][T10113]  xsk_setsockopt+0x757/0xa10
[  412.176764][T10113]  ? __pfx_xsk_setsockopt+0x10/0x10
[  412.176800][T10113]  ? selinux_socket_setsockopt+0x6a/0x80
[  412.176832][T10113]  ? __pfx_xsk_setsockopt+0x10/0x10
[  412.176859][T10113]  do_sock_setsockopt+0x222/0x480
[  412.176884][T10113]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  412.176919][T10113]  ? fdget+0x176/0x210
[  412.176949][T10113]  __sys_setsockopt+0x1a4/0x270
[  412.176971][T10113]  ? __pfx___sys_setsockopt+0x10/0x10
[  412.176992][T10113]  ? lock_acquire+0x2f/0xb0
[  412.177019][T10113]  __x64_sys_setsockopt+0xbd/0x160
[  412.177038][T10113]  ? do_syscall_64+0x91/0x250
[  412.177067][T10113]  ? lockdep_hardirqs_on+0x7c/0x110
[  412.177094][T10113]  do_syscall_64+0xcd/0x250
[  412.177125][T10113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.177152][T10113] RIP: 0033:0x7f381cb7e719
[  412.177168][T10113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.177187][T10113] RSP: 002b:00007f381d91a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  412.177206][T10113] RAX: ffffffffffffffda RBX: 00007f381cd36058 RCX: 00007f381cb7e719
[  412.177220][T10113] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  412.177232][T10113] RBP: 00007f381cbf132e R08: 0000000000000020 R09: 0000000000000000
[  412.177244][T10113] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[  412.177257][T10113] R13: 0000000000000001 R14: 00007f381cd36058 R15: 00007ffda011cb48
[  412.177283][T10113]  </TASK>
[  412.177291][T10113] Mem-Info:
[  412.177299][T10113] active_anon:9085 inactive_anon:0 isolated_anon:0
[  412.177299][T10113]  active_file:21041 inactive_file:38568 isolated_file:0
[  412.177299][T10113]  unevictable:768 dirty:363 writeback:0
[  412.177299][T10113]  slab_reclaimable:11624 slab_unreclaimable:104152
[  412.177299][T10113]  mapped:25082 shmem:4267 pagetables:1219
[  412.177299][T10113]  sec_pagetables:0 bounce:0
[  412.177299][T10113]  kernel_misc_reclaimable:0
[  412.177299][T10113]  free:1316065 free_pcp:3931 free_cma:0
[  412.177349][T10113] Node 0 active_anon:36340kB inactive_anon:0kB active_file:84164kB inactive_file:154196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100328kB dirty:1452kB writeback:0kB shmem:15532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11832kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no
[  412.177397][T10113] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  412.177442][T10113] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  412.177497][T10113] lowmem_reserve[]: 0 2461 2461 0 0
[  412.177545][T10113] Node 0 DMA32 free:1351716kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:36308kB inactive_anon:0kB active_file:84164kB inactive_file:153868kB unevictable:1536kB writepending:1452kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:2852kB local_pcp:2044kB free_cma:0kB
[  412.177598][T10113] lowmem_reserve[]: 0 0 0 0 0
[  412.177632][T10113] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  412.177675][T10113] lowmem_reserve[]: 0 0 0 0 0
[  412.177710][T10113] Node 1 Normal free:3897184kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12868kB local_pcp:1172kB free_cma:0kB
[  412.177758][T10113] lowmem_reserve[]: 0 0 0 0 0
[  412.177795][T10113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  412.177967][T10113] Node 0 DMA32: 2*4kB (UM) 1*8kB (U) 483*16kB (UME) 548*32kB (UME) 196*64kB (UME) 69*128kB (UM) 58*256kB (UM) 56*512kB (UME) 16*1024kB (UME) 4*2048kB (UM) 302*4096kB (UM) = 1351744kB
[  412.178132][T10113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  412.178234][T10113] Node 1 Normal: 2*4kB (ME) 1*8kB (E) 9*16kB (ME) 10*32kB (ME) 6*64kB (ME) 26*128kB (UME) 17*256kB (UME) 13*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3897184kB
[  412.178403][T10113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.178419][T10113] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.178433][T10113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.178448][T10113] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.178462][T10113] 63876 total pagecache pages
[  412.178469][T10113] 0 pages in swap cache
[  412.178476][T10113] Free swap  = 124796kB
[  412.178483][T10113] Total swap = 124996kB
[  412.178491][T10113] 2097051 pages RAM
[  412.178499][T10113] 0 pages HighMem/MovableOnly
[  412.178506][T10113] 428037 pages reserved
[  412.178513][T10113] 0 pages cma reserved
[  412.190523][ T7336] usb 4-1: USB disconnect, device number 26
[  412.225981][   T29] audit: type=1400 audit(1730214014.990:450): avc:  denied  { setopt } for  pid=10112 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  412.560367][   T29] audit: type=1400 audit(1730214015.330:451): avc:  denied  { getopt } for  pid=10116 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  415.006952][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  415.052426][T10143] xt_limit: Overflow, try lower: 0/0
[  416.355976][   T29] audit: type=1400 audit(1730214019.100:452): avc:  denied  { bind } for  pid=10150 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  416.375460][   T29] audit: type=1400 audit(1730214019.100:453): avc:  denied  { name_bind } for  pid=10150 comm="syz.4.1087" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  416.397006][   T29] audit: type=1400 audit(1730214019.100:454): avc:  denied  { node_bind } for  pid=10150 comm="syz.4.1087" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  416.487574][   T29] audit: type=1400 audit(1730214019.260:455): avc:  denied  { getopt } for  pid=10158 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  418.970006][T10188] Bluetooth: MGMT ver 1.23
[  418.980408][   T29] audit: type=1400 audit(1730214021.740:456): avc:  denied  { write } for  pid=10185 comm="syz.4.1097" path="socket:[22217]" dev="sockfs" ino=22217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  419.727741][T10204] netlink: 134652 bytes leftover after parsing attributes in process `syz.3.1103'.
[  419.764645][T10199] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  419.929928][   T29] audit: type=1400 audit(1730214022.590:457): avc:  denied  { bind } for  pid=10198 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  421.571940][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.592024][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.866011][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'.
[  424.063256][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.435168][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.476493][T10237] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.502113][   T29] audit: type=1400 audit(1730214028.280:458): avc:  denied  { read } for  pid=10236 comm="syz.4.1111" path="socket:[22696]" dev="sockfs" ino=22696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  425.655911][   T29] audit: type=1400 audit(1730214028.430:459): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  426.073317][  T968] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  426.186088][T10252] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1117'.
[  426.198239][T10252] openvswitch: netlink: Message has 4 unknown bytes.
[  426.374623][  T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.384938][  T968] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  426.394083][  T968] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  426.403195][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.419362][  T968] usb 4-1: config 0 descriptor??
[  427.106845][ T7336] IPVS: starting estimator thread 0...
[  427.120675][   T29] audit: type=1400 audit(1730214029.870:460): avc:  denied  { setopt } for  pid=10256 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  427.191337][T10257] mkiss: ax0: crc mode is auto.
[  427.310406][T10263] IPVS: using max 49 ests per chain, 117600 per kthread
[  427.408222][T10269] qnx4: no qnx4 filesystem (no root dir).
[  432.455363][T10281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  432.718763][ T5938] usb 4-1: USB disconnect, device number 27
[  433.121972][T10287] FAULT_INJECTION: forcing a failure.
[  433.121972][T10287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.170255][T10287] CPU: 0 UID: 0 PID: 10287 Comm: syz.0.1124 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  433.181033][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  433.191086][T10287] Call Trace:
[  433.194341][T10287]  <TASK>
[  433.197250][T10287]  dump_stack_lvl+0x16c/0x1f0
[  433.201913][T10287]  should_fail_ex+0x497/0x5b0
[  433.206568][T10287]  _copy_to_user+0x32/0xd0
[  433.210962][T10287]  simple_read_from_buffer+0xd0/0x160
[  433.216315][T10287]  proc_fail_nth_read+0x198/0x270
[  433.221332][T10287]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.226874][T10287]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.232397][T10287]  vfs_read+0x1df/0xbe0
[  433.236532][T10287]  ? __fget_files+0x23a/0x3f0
[  433.241188][T10287]  ? fdget_pos+0x24c/0x360
[  433.245580][T10287]  ? __pfx_lock_release+0x10/0x10
[  433.250582][T10287]  ? trace_lock_acquire+0x14a/0x1d0
[  433.255759][T10287]  ? __pfx_vfs_read+0x10/0x10
[  433.260431][T10287]  ? __pfx___mutex_lock+0x10/0x10
[  433.265437][T10287]  ? __fget_files+0x244/0x3f0
[  433.270095][T10287]  ksys_read+0x12f/0x260
[  433.274317][T10287]  ? __pfx_ksys_read+0x10/0x10
[  433.279062][T10287]  do_syscall_64+0xcd/0x250
[  433.283560][T10287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.289434][T10287] RIP: 0033:0x7f8d1797d15c
[  433.293838][T10287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  433.313451][T10287] RSP: 002b:00007f8d186f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  433.321846][T10287] RAX: ffffffffffffffda RBX: 00007f8d17b35f80 RCX: 00007f8d1797d15c
[  433.329804][T10287] RDX: 000000000000000f RSI: 00007f8d186f50a0 RDI: 0000000000000006
[  433.337760][T10287] RBP: 00007f8d186f5090 R08: 0000000000000000 R09: 0000000000000000
[  433.345707][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.353656][T10287] R13: 0000000000000000 R14: 00007f8d17b35f80 R15: 00007ffdcef0a778
[  433.361610][T10287]  </TASK>
[  433.409655][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  433.418665][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'.
[  434.621907][T10291] vivid-004: disconnect
[  435.509154][   T29] audit: type=1400 audit(1730214038.280:461): avc:  denied  { lock } for  pid=10295 comm="syz.1.1127" path="socket:[22374]" dev="sockfs" ino=22374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  437.188560][T10290] vivid-004: reconnect
[  438.052478][T10307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  438.214019][T10319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.371769][T10319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.538755][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.547607][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.558039][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.566685][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.750280][ T5938] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  438.770344][  T968] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  438.836052][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.845743][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.920295][ T5938] usb 4-1: Using ep0 maxpacket: 8
[  438.925473][  T968] usb 5-1: Using ep0 maxpacket: 16
[  438.933045][ T5938] usb 4-1: config 0 has an invalid interface number: 198 but max is 0
[  438.941651][ T5938] usb 4-1: config 0 has no interface number 0
[  438.947843][  T968] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  438.958827][ T5938] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=28.b2
[  438.968136][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.976258][ T5938] usb 4-1: Product: syz
[  438.980672][ T5938] usb 4-1: Manufacturer: syz
[  438.985304][ T5938] usb 4-1: SerialNumber: syz
[  438.990033][  T968] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  438.999178][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.007941][  T968] usb 5-1: Product: syz
[  439.012902][ T5938] usb 4-1: config 0 descriptor??
[  439.017986][  T968] usb 5-1: Manufacturer: syz
[  439.022744][  T968] usb 5-1: SerialNumber: syz
[  439.033750][  T968] usb 5-1: config 0 descriptor??
[  439.053725][  T968] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  439.054675][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.064402][  T968] usb 5-1: Detected FT232R
[  439.083360][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.116538][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.126879][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.159974][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.176737][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.455828][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.500579][  T968] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  439.519324][  T968] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  439.528065][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.556136][ T5938] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  439.569155][  T968] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  439.582172][ T5938] dvb-usb: bulk message failed: -22 (3/0)
[  439.595486][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  439.603524][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  439.609908][  T968] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  439.628867][  T968] usb 5-1: USB disconnect, device number 20
[  439.646343][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  439.726192][ T5938] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  439.776710][  T968] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  440.375705][ T5938] usb 4-1: media controller created
[  440.422488][  T968] ftdi_sio 5-1:0.0: device disconnected
[  440.630278][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  440.682944][ T5938] dvb-usb: bulk message failed: -22 (6/0)
[  440.721830][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'.
[  440.753567][ T5938] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  440.793754][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  440.817646][T10349] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1144'.
[  441.626354][ T5938] dvb-usb: schedule remote query interval to 150 msecs.
[  441.633411][ T5938] dvb-usb: bulk message failed: -22 (3/0)
[  441.670228][ T5938] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  441.689276][ T5938] usb 4-1: USB disconnect, device number 28
[  442.708650][T10373] vivid-002: kernel_thread() failed
[  442.892746][ T5938] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  443.254224][T10384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  443.591609][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'.
[  443.603121][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'.
[  443.732266][T10388] vivid-004: disconnect
[  443.737662][T10388] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1153'.
[  444.320213][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  444.345582][ T5938] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  444.446687][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.487240][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.675545][ T5938] usb 4-1: device descriptor read/all, error -71
[  444.754986][T10386] vivid-004: reconnect
[  445.020249][ T5938] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  445.142994][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.174050][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.192433][ T5938] usb 4-1: Using ep0 maxpacket: 32
[  445.213086][ T5938] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  445.231881][ T5938] usb 4-1: config 0 has no interface number 0
[  445.245900][ T5938] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.257485][ T5938] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.267632][ T5938] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  445.277886][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.288169][ T5938] usb 4-1: config 0 descriptor??
[  446.544936][ T5938] uclogic 0003:28BD:0094.0002: pen parameters not found
[  446.549826][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.551959][ T5938] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring
[  446.607451][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.574314][  T968] usb 4-1: USB disconnect, device number 30
[  447.634136][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.665765][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.691734][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  447.797588][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1170'.
[  447.812386][T10440] netlink: 'syz.4.1170': attribute type 9 has an invalid length.
[  447.820310][T10440] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1170'.
[  448.909646][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.011626][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'.
[  449.034364][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.058418][T10456] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1173'.
[  449.100022][   T29] audit: type=1400 audit(1730214051.870:462): avc:  denied  { nlmsg_write } for  pid=10452 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  449.760616][   T29] audit: type=1400 audit(1730214052.460:463): avc:  denied  { mounton } for  pid=10462 comm="syz.4.1177" path="/223/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  450.902379][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  453.140706][ T5903] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  454.354565][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1187'.
[  454.485576][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  455.140385][ T7336] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  455.223243][ T5903] usb 5-1: unable to read config index 0 descriptor/start: -71
[  455.231047][ T5903] usb 5-1: can't read configurations, error -71
[  455.752955][ T5903] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  455.998985][    C0] raw-gadget.7 gadget.4: ignoring, device is not running
[  456.023196][ T7336] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  456.032442][ T7336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.048175][ T7336] usb 4-1: Product: syz
[  456.052667][ T7336] usb 4-1: Manufacturer: syz
[  456.092750][ T7336] usb 4-1: SerialNumber: syz
[  456.210952][ T5903] usb 5-1: device descriptor read/64, error -32
[  456.336672][ T7336] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  456.493778][ T5903] usb usb5-port1: attempt power cycle
[  456.731429][T10531] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1196'.
[  457.399972][   T44] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  457.560331][ T5903] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  457.583435][ T5938] usb 4-1: USB disconnect, device number 31
[  457.598271][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.610422][ T5903] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  457.769794][ T5903] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  457.780728][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.582335][   T44] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  458.589841][   T44] ath9k_htc: Failed to initialize the device
[  458.603435][ T5903] usb 5-1: config 0 descriptor??
[  458.608500][ T5938] usb 4-1: ath9k_htc: USB layer deinitialized
[  459.109806][ T5938] usb 5-1: USB disconnect, device number 23
[  460.040483][ T5938] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  460.279312][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  460.352668][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.542864][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.553049][ T5938] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  460.562276][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.735748][ T5938] usb 5-1: config 0 descriptor??
[  461.301226][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.645086][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.725688][T10585] 9pnet_fd: Insufficient options for proto=fd
[  461.935912][ T5938] wacom 0003:056A:00D0.0003: unknown main item tag 0x0
[  462.463678][ T5938] wacom 0003:056A:00D0.0003: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  462.495920][ T5938] wacom 0003:056A:00D0.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0
[  462.499338][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.527324][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.527662][ T5938] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0003/input/input12
[  462.551869][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.631018][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.777459][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'.
[  462.805761][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1214'.
[  463.304482][ T5938] usb 5-1: USB disconnect, device number 24
[  463.364432][T10597] netlink: 'syz.3.1214': attribute type 9 has an invalid length.
[  463.376182][T10597] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1214'.
[  463.960525][ T5938] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  464.850312][ T5938] usb 4-1: Using ep0 maxpacket: 16
[  465.030893][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.052721][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.114453][ T5938] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  465.129803][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.436195][ T5938] usb 4-1: config 0 descriptor??
[  465.597411][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1222'.
[  467.980335][ T5938] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0004/input/input15
[  468.062294][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.104268][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.180789][ T5938] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  469.050268][ T7336] usb 4-1: USB disconnect, device number 32
[  469.058357][T10658] 9pnet_fd: Insufficient options for proto=fd
[  469.188298][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.535062][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.690250][ T5903] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  471.195853][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.221992][ T5903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  471.256222][ T5903] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  471.318375][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.381436][ T5903] usb 4-1: config 0 descriptor??
[  471.600293][ T5938] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  472.341651][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.351915][ T5938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  472.361568][ T5938] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  472.370900][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.452436][ T5938] usb 5-1: config 0 descriptor??
[  473.286337][T10697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  473.367782][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[  473.429089][ T7336] usb 4-1: USB disconnect, device number 33
[  473.442766][T10699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'.
[  473.936150][T10699] vivid-000: disconnect
[  475.719231][    C1] sd 0:0:1:0: [sda] tag#3690 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  475.729610][    C1] sd 0:0:1:0: [sda] tag#3690 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  475.826914][T10698] vivid-000: reconnect
[  477.034297][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.045342][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.048979][ T5903] usb 5-1: USB disconnect, device number 25
[  477.310288][   T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  477.483358][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.570601][   T44] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  477.682827][   T44] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01
[  477.805658][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.944304][   T44] usb 4-1: config 0 descriptor??
[  480.025189][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  480.654940][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  480.664495][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'.
[  481.733718][ T5942] usb 4-1: USB disconnect, device number 34
[  481.769200][T10761] vivid-004: disconnect
[  482.336386][T10760] vivid-004: reconnect
[  482.605215][T10787] Invalid option length (1025206) for dns_resolver key
[  485.570229][ T7336] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  485.770048][ T7336] usb 5-1: Using ep0 maxpacket: 16
[  485.936040][ T7336] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B
[  486.186616][ T7336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  486.267203][ T7336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  486.285417][ T7336] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  486.307146][ T7336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.328302][ T7336] usb 5-1: Product: syz
[  486.333108][ T7336] usb 5-1: Manufacturer: syz
[  486.337952][ T7336] usb 5-1: SerialNumber: syz
[  486.349364][ T7336] usb 5-1: config 0 descriptor??
[  487.259712][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  487.474907][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1272'.
[  487.476667][T10835] vivid-004: disconnect
[  488.411323][ T7336] usb 5-1: USB disconnect, device number 26
[  488.641707][T10846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  488.655952][T10823] vivid-004: reconnect
[  490.539363][   T29] audit: type=1400 audit(1730214093.120:464): avc:  denied  { module_request } for  pid=10849 comm="syz.3.1278" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  492.159695][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  494.269234][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'.
[  494.289295][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1291'.
[  494.939044][T10909] vivid-006: disconnect
[  494.955523][T10909] netlink: 'syz.3.1291': attribute type 9 has an invalid length.
[  495.019361][T10909] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1291'.
[  495.104018][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'.
[  495.124830][T10910] Invalid option length (1025206) for dns_resolver key
[  495.131889][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1292'.
[  495.205607][T10916] vivid-002: disconnect
[  495.318451][T10905] vivid-006: reconnect
[  496.049591][T10915] vivid-002: reconnect
[  497.729358][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.755288][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.936299][T10943] 9pnet_fd: Insufficient options for proto=fd
[  500.932657][T10969] vivid-002: kernel_thread() failed
[  501.070717][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.071863][T10959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.077033][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  502.971358][T10981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  503.990644][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.017681][   T30] INFO: task kworker/1:4:5873 blocked for more than 143 seconds.
[  519.174168][   T30]       Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  519.181925][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.196261][   T30] task:kworker/1:4     state:D stack:22624 pid:5873  tgid:5873  ppid:2      flags:0x00004000
[  519.206821][   T30] Workqueue: usb_hub_wq hub_event
[  519.212609][   T30] Call Trace:
[  519.215927][   T30]  <TASK>
[  519.219081][   T30]  __schedule+0xe55/0x5730
[  519.223648][   T30]  ? __pfx___schedule+0x10/0x10
[  519.228602][   T30]  ? schedule+0x298/0x350
[  519.232993][   T30]  ? __pfx_lock_release+0x10/0x10
[  519.238031][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.243499][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  519.250262][   T30]  schedule+0xe7/0x350
[  519.255092][   T30]  schedule_preempt_disabled+0x13/0x30
[  519.265759][   T30]  __mutex_lock+0x5b8/0x9c0
[  519.270395][   T30]  ? hub_event+0x2815/0x4e10
[  519.284254][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  519.293166][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  519.317838][   T30]  ? hub_ext_port_status+0x1fa/0x670
[  519.325498][T11108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.344296][   T30]  ? hub_event+0x2815/0x4e10
[  519.350439][   T30]  hub_event+0x2815/0x4e10
[  519.370157][   T30]  ? __pfx_hub_event+0x10/0x10
[  519.381879][   T30]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  519.390359][   T30]  ? rcu_is_watching+0x12/0xc0
[  519.397236][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[  519.408703][   T30]  ? process_one_work+0x921/0x1ba0
[  519.438429][   T30]  ? lock_acquire+0x2f/0xb0
[  519.455969][   T30]  ? process_one_work+0x921/0x1ba0
[  519.471191][   T30]  process_one_work+0x9c5/0x1ba0
[  519.480333][   T30]  ? __pfx_hcd_resume_work+0x10/0x10
[  519.485673][   T30]  ? __pfx_process_one_work+0x10/0x10
[  519.491955][   T30]  ? assign_work+0x1a0/0x250
[  519.497115][   T30]  worker_thread+0x6c8/0xf00
[  519.570268][   T30]  ? __pfx_worker_thread+0x10/0x10
[  519.584798][   T30]  kthread+0x2c1/0x3a0
[  519.595666][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.626801][   T30]  ? __pfx_kthread+0x10/0x10
[  519.631491][   T30]  ret_from_fork+0x45/0x80
[  519.635971][   T30]  ? __pfx_kthread+0x10/0x10
[  519.642056][   T30]  ret_from_fork_asm+0x1a/0x30
[  519.648708][   T30]  </TASK>
[  519.654389][   T30] 
[  519.654389][   T30] Showing all locks held in the system:
[  519.662267][   T30] 5 locks held by kworker/0:1/9:
[  519.667241][   T30]  #0: ffff888020ef0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  519.678152][   T30]  #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  519.691550][   T30]  #2: ffff88802a13b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  519.700672][   T30]  #3: ffff88802a13e510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10
[  519.710704][   T30]  #4: ffff8881447cc568 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10
[  519.720556][   T30] 1 lock held by khungtaskd/30:
[  519.725491][   T30]  #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390
[  519.735408][   T30] 2 locks held by kworker/u8:8/3571:
[  519.740789][   T30]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  519.752179][   T30]  #1: ffffc9000c85fd80 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  519.762628][   T30] 2 locks held by getty/5586:
[  519.767334][   T30]  #0: ffff8880319d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  519.778041][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480
[  519.788252][   T30] 5 locks held by kworker/1:4/5873:
[  519.793599][   T30]  #0: ffff888020ef0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  519.804754][   T30]  #1: ffffc90003ea7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  519.817107][   T30]  #2: ffff88802a110190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  519.829037][   T30]  #3: ffff88802a113510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10
[  519.839069][   T30]  #4: ffff888029a52968 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10
[  519.848826][   T30] 5 locks held by kworker/0:4/5874:
[  519.854113][   T30]  #0: ffff888020ef0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  519.865076][   T30]  #1: ffffc90003997d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  519.876852][   T30]  #2: ffff888144b66190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  519.885808][   T30]  #3: ffff888144b79510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10
[  519.895816][   T30]  #4: ffff888029930468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10
[  519.905592][   T30] 5 locks held by kworker/0:5/5876:
[  519.912615][   T30]  #0: ffff888020ef0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  519.930328][   T30]  #1: ffffc90003fe7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  519.941661][   T30]  #2: ffff888144bbe190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  519.950664][   T30]  #3: ffff888144bd1510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10
[  519.960637][   T30]  #4: ffff888029a52968 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10
[  519.970403][   T30] 
[  519.972781][   T30] =============================================
[  519.972781][   T30] 
[  519.981348][   T30] NMI backtrace for cpu 0
[  519.985676][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  519.996162][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  520.006219][   T30] Call Trace:
[  520.009480][   T30]  <TASK>
[  520.012411][   T30]  dump_stack_lvl+0x116/0x1f0
[  520.017178][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  520.022107][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  520.028088][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  520.034058][   T30]  watchdog+0xf0c/0x1240
[  520.038290][   T30]  ? __pfx_watchdog+0x10/0x10
[  520.042963][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  520.048153][   T30]  ? __kthread_parkme+0x148/0x220
[  520.053178][   T30]  ? __pfx_watchdog+0x10/0x10
[  520.057840][   T30]  kthread+0x2c1/0x3a0
[  520.061897][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.067083][   T30]  ? __pfx_kthread+0x10/0x10
[  520.071660][   T30]  ret_from_fork+0x45/0x80
[  520.076074][   T30]  ? __pfx_kthread+0x10/0x10
[  520.080651][   T30]  ret_from_fork_asm+0x1a/0x30
[  520.085411][   T30]  </TASK>
[  520.088676][   T30] Sending NMI from CPU 0 to CPUs 1:
[  520.094311][    C1] NMI backtrace for cpu 1
[  520.094321][    C1] CPU: 1 UID: 0 PID: 11104 Comm: syz.1.1339 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  520.094338][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  520.094345][    C1] RIP: 0033:0x7fd46c6557c4
[  520.094357][    C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48
[  520.094369][    C1] RSP: 002b:00007fff99076b10 EFLAGS: 00000287
[  520.094380][    C1] RAX: 00007fd46be150a8 RBX: 00007fd46be04710 RCX: ffffffff8132b718
[  520.094389][    C1] RDX: ffffffff8132b718 RSI: ffffffff81359fb5 RDI: 00007fd46be18290
[  520.094397][    C1] RBP: 00007fd46be01010 R08: 00007fd46be0c948 R09: 00007fd46c922000
[  520.094406][    C1] R10: 000000008b23dfa7 R11: 0000000000000005 R12: 00007fd46be01008
[  520.094414][    C1] R13: 0000000000000019 R14: 00007fd46be01008 R15: ffffffffffffffff
[  520.094427][    C1] FS:  000055557cb44500 GS:  0000000000000000
[  520.096820][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  520.204442][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  520.214923][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  520.224968][   T30] Call Trace:
[  520.228238][   T30]  <TASK>
[  520.231155][   T30]  dump_stack_lvl+0x3d/0x1f0
[  520.235744][   T30]  panic+0x71d/0x800
[  520.239627][   T30]  ? __pfx_panic+0x10/0x10
[  520.244029][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  520.249387][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  520.255358][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  520.260714][   T30]  ? watchdog+0xd76/0x1240
[  520.265111][   T30]  ? watchdog+0xd69/0x1240
[  520.269511][   T30]  watchdog+0xd87/0x1240
[  520.273739][   T30]  ? __pfx_watchdog+0x10/0x10
[  520.278399][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  520.283588][   T30]  ? __kthread_parkme+0x148/0x220
[  520.288612][   T30]  ? __pfx_watchdog+0x10/0x10
[  520.293270][   T30]  kthread+0x2c1/0x3a0
[  520.297338][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.302524][   T30]  ? __pfx_kthread+0x10/0x10
[  520.307102][   T30]  ret_from_fork+0x45/0x80
[  520.311503][   T30]  ? __pfx_kthread+0x10/0x10
[  520.316098][   T30]  ret_from_fork_asm+0x1a/0x30
[  520.320861][   T30]  </TASK>
[  520.324053][   T30] Kernel Offset: disabled
[  520.328368][   T30] Rebooting in 86400 seconds..