last executing test programs:

5m5.679375095s ago: executing program 4 (id=2273):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000c7cf00000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b6574000014000280080002400000000308000140000007002400018080ffffff717565756500000014000280080004400000001006000340000200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000003c0)={@loopback}, &(0x7f0000000300)=0x14)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r6 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r6, 0x0, 0x0)
request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x687a7ad7)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000030900010073797a3100000000140000001100010000000000000000000000000abf0af28883a383a49ec19d"], 0x7c}}, 0x0)

5m5.122372239s ago: executing program 4 (id=2275):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x41, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x45, {0x45, 0x4, "54e5ab1efd8d2ca864613497802ecdcc59811554885b8aed890b78f14235a1ee88babbb2e97300a9c177c67764a3ad154af0bd782ff921817a59f465f959aeba51fddf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5m1.99109039s ago: executing program 4 (id=2287):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000340)='./file0\x00', r0}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

5m1.841356395s ago: executing program 4 (id=2289):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r3=>0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(r3, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x2c, 0x2, 0x0, @local}, 0x10)
recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
futex_waitv(&(0x7f0000002040)=[{0xaea1, &(0x7f0000000280)=0x7ff, 0x2}, {0xe, &(0x7f00000003c0)=0x1, 0x2}, {0x6, &(0x7f0000000300)=0xc0f, 0x2}, {0xef1d, &(0x7f0000001a80)=0xffff, 0x2}, {0x8, &(0x7f0000000400)=0xfffffffffffffffe, 0x2}, {0x16, &(0x7f0000000440)=0x8, 0xf160e33cb05b136b}, {0xb, &(0x7f00000004c0)=0x1f, 0x2}, {0x6, &(0x7f0000000500)=0x12bd, 0x82}, {0x0, &(0x7f0000000540)=0xfffffffffffffeff}, {0xfffffffffffffffd, &(0x7f0000000580)=0xfffffffffffff51a, 0x82}, {0xffffffffffffffff, &(0x7f0000000600)=0x7f, 0x2}, {0x85, &(0x7f0000000640)=0x4, 0x2}, {0x2, &(0x7f0000000680)=0x3, 0x82}, {0x10, &(0x7f00000006c0)=0x4, 0x2}, {0x5, &(0x7f0000000700)=0x81, 0x82}, {0x7, &(0x7f0000000740)=0x4, 0x2}, {0xa000000000000000, &(0x7f0000000780)=0x8, 0x2}, {0x0, &(0x7f00000007c0)=0x8, 0x82}, {0x38, &(0x7f0000000800)=0x4, 0x82}, {0x7, &(0x7f0000000a40)=0xf, 0x2}, {0x7fffffff, &(0x7f0000000a80), 0x82}, {0xfffffffffffffe00, &(0x7f0000000ac0)=0xb157, 0x82}, {0x9, &(0x7f0000000b00)=0x9, 0x2}, {0x0, &(0x7f0000000b40)=0x9, 0x82}, {0x200, &(0x7f0000000b80)=0x7, 0x82}, {0x400, &(0x7f0000000bc0), 0x2}, {0x3, &(0x7f0000000c00)=0x4, 0x82}, {0x3, &(0x7f0000000c40)=0xb, 0x82}, {0x50, &(0x7f0000000c80)=0x10, 0x82}, {0x2, &(0x7f0000000cc0)=0xa, 0x2}, {0x7, &(0x7f0000000d00)=0xcace, 0x2}, {0xffffffffffff7ec8, &(0x7f0000000d40)=0xffff, 0x2}, {0x4, &(0x7f0000000d80)=0xe, 0x2}, {0x5, &(0x7f0000000dc0)=0xbab, 0x82}, {0x101, &(0x7f0000000e00)=0x5, 0x2}, {0x3, &(0x7f0000000e40)=0x4, 0x82}, {0x6, &(0x7f0000000e80)=0x5, 0x2}, {0x5, &(0x7f0000000ec0)=0x7ff, 0x82}, {0x0, &(0x7f0000000f00)=0x8, 0x82}, {0x0, &(0x7f0000000f40)=0x8001, 0x82}, {0x2, &(0x7f0000000f80)=0x2bd0, 0x82}, {0x0, &(0x7f0000001080)=0x8001, 0x2}, {0xbf9c, &(0x7f00000010c0)=0x3, 0x82}, {0xa, &(0x7f0000001100)=0xac, 0x82}, {0x8, &(0x7f0000001140)=0x8, 0x82}, {0x7fffffffffffffff, &(0x7f0000001180)=0x1, 0x82}, {0x8, &(0x7f00000011c0)=0xc5, 0x82}, {0x8, &(0x7f0000001200), 0x82}, {0xfffffffffffffffb, &(0x7f0000001240)=0x1, 0x2}, {0x8, &(0x7f0000001280)=0x40, 0x82}, {0x3, &(0x7f00000012c0)=0x9, 0x2}, {0xffffffffffff261c, &(0x7f0000001300)=0x3, 0x82}, {0x7f, &(0x7f0000001340)=0x4, 0x82}, {0x9, &(0x7f0000001380)=0x4, 0xf5b10fde16805add}, {0x8, &(0x7f00000013c0)=0x8, 0x6d75b1f2483e83b9}, {0x5, &(0x7f0000001400)=0x4, 0x2}, {0x7f, &(0x7f0000001440)=0x3}, {0x1000, &(0x7f0000001480)=0x4, 0x2}, {0x9, &(0x7f00000014c0)=0x6, 0x82}, {0x6, &(0x7f0000001500)=0x82f6, 0x2}, {0xd81, &(0x7f0000001540)=0x8, 0x82}, {0x9, &(0x7f0000001580)=0x3, 0x2}, {0x8, &(0x7f00000015c0)=0x10000, 0x82}, {0x9, &(0x7f0000001600)=0x9, 0x82}, {0x9, &(0x7f0000001640)=0x10001, 0x2}, {0x200, &(0x7f00000016c0), 0x82}, {0x1, &(0x7f0000001700)=0x100, 0x82}, {0x5, &(0x7f0000001740)=0x5, 0x82}, {0x6, &(0x7f0000001780)=0x2, 0x2}, {0x9, &(0x7f00000017c0)=0x9, 0x2}, {0xfffffffffffffffa, &(0x7f0000001800)=0x100000001, 0x82}, {0xfffffffffffffffa, &(0x7f0000001840)=0x1, 0x2}, {0x800, &(0x7f0000001880)=0x1, 0x2}, {0x7, &(0x7f00000018c0)=0xadd, 0x2}, {0x5, &(0x7f0000001900)=0x5, 0x82}, {0x4, &(0x7f0000001940)=0xa, 0x2}, {0xa, &(0x7f0000001980)=0xd273, 0x2}, {0x800, &(0x7f00000019c0)=0x5, 0x82}, {0x0, &(0x7f0000001a00), 0x82}], 0x4f, 0x0, &(0x7f0000001a40)={0x0, 0x3938700}, 0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000480)={0x0, 0x0, {0xe, 0x4, 0x2, 0x3}})

5m0.171259024s ago: executing program 4 (id=2292):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x1000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x84020, 0x0)

4m59.934491197s ago: executing program 4 (id=2293):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80800)
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, 0xffffffffffffffff})
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x200400d0)

4m44.612557928s ago: executing program 32 (id=2293):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80800)
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, 0xffffffffffffffff})
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x200400d0)

2m39.940742723s ago: executing program 3 (id=2760):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020001000000c500fcff00000000850000009c000000955ada812e583309"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)

2m37.414613329s ago: executing program 3 (id=2767):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x0, &(0x7f0000000540), 0x0, 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2m36.467174518s ago: executing program 3 (id=2773):
r0 = memfd_create(0x0, 0x1)
fcntl$setlease(r0, 0x400, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_setup(0x7483, &(0x7f0000000400)={0x0, 0xabae, 0x1, 0xffffffff, 0x328}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='c 8:', @ANYRES16=r1], 0x9)
sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x20000840, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x1, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0x400000000ee, 0xff, 0x0, 0x5})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000140)={0x56, r6, 0x0, {0x401, 0x401}, 0x2}, 0x1)

2m35.765463136s ago: executing program 3 (id=2776):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x7, 0xfffffffb, 0xff, 0x835, 0xf, <r1=>0x0})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, 0x40}, 0x2, 0x3, 0x4, 0x0, 0x0, r1, 0x1})
r2 = getpgrp(0xffffffffffffffff)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

2m35.360319808s ago: executing program 3 (id=2778):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0)
mount$bind(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
ppoll(&(0x7f00000000c0), 0x2a, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1}, './file0/file0\x00'})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c)

2m35.214807461s ago: executing program 3 (id=2780):
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0xfffffffc)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unshare(0x42000000)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
fsetxattr$security_capability(r7, &(0x7f0000000580), 0x0, 0x0, 0x1)
listxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7})

2m19.613392163s ago: executing program 33 (id=2780):
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0xfffffffc)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unshare(0x42000000)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
fsetxattr$security_capability(r7, &(0x7f0000000580), 0x0, 0x0, 0x1)
listxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7})

14.625593639s ago: executing program 0 (id=3262):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff180600fc00000000000000000000000000000000000000aafffe400100"/50, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="6002334d900aa9afdf16dbe21ef6c719eb70c412bc59782000030200"], 0x0)
r2 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xa08d4}, 0x10)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, 0x0, 0x0)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x3}, &(0x7f00000002c0)=0x90)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

14.285029004s ago: executing program 0 (id=3264):
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x10001, 0x2001)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80001)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000180), 0x4003)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

12.70706718s ago: executing program 6 (id=3267):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
fallocate(r1, 0x0, 0x1000003, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x10, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102385, 0x18ff1)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
r2 = fanotify_init(0x202, 0x1000)
fanotify_mark(r2, 0x1, 0x48000013, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100fffffffd0000000008004a0000000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)

10.721152808s ago: executing program 6 (id=3272):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

9.562623985s ago: executing program 2 (id=3275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
socket$inet6(0xa, 0x3, 0x5)

9.416522157s ago: executing program 0 (id=3277):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8040)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841", 0x4, 0x8000}])

8.354536039s ago: executing program 2 (id=3278):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x7, 0xa33, &(0x7f0000000080)="d6784d690e8769c9f084a8dcdc476ff0a4d91c08849d1627f3957066be1376255afd1e6948b35b9fd8f64e", &(0x7f00000000c0)="de52c8e77b0535301a8fbd3617a3734d4080a01d185fd664c965123baa92964dd7d284e01015204462f1474766e68777630a1243430d3c1233306d49da4fb237d6b8345542899a3ce2553d743d8e5de4bd1c319a2ea0cdfc", 0x2b, 0x58})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x6, 0x77, 0x10, 0x65a, 0x9, 0x1f2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x6d, 0xae, 0x0, [], [{{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0)

7.94440461s ago: executing program 0 (id=3279):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e1f, 0x0, @loopback, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$caif_seqpacket(0x25, 0x5, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
madvise(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x9)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

7.899613453s ago: executing program 5 (id=3280):
r0 = memfd_create(0x0, 0x1)
fcntl$setlease(r0, 0x400, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_setup(0x7483, &(0x7f0000000400)={0x0, 0xabae, 0x1, 0xffffffff, 0x328}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48)
write$cgroup_devices(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='c 8:', @ANYRES16=r1], 0x9)
sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x20000840, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x1, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0x400000000ee, 0xff, 0x0, 0x5})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000140)={0x56, r6, 0x0, {0x401, 0x401}, 0x2}, 0x1)

7.442141604s ago: executing program 5 (id=3281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)

7.395178687s ago: executing program 6 (id=3282):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)
preadv(r5, &(0x7f0000000040), 0x0, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

6.614568506s ago: executing program 1 (id=3283):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r2=>r1, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb)

6.482985841s ago: executing program 5 (id=3284):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
setresuid(r5, r5, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000240))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7])
fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r5, r7, 0x800)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

4.954931157s ago: executing program 1 (id=3285):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb)

4.953509918s ago: executing program 2 (id=3286):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000700)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [<r6=>0x0, 0x0, 0x0, <r7=>0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r6, 0x0, 0x0, r7], [0x9], [0x0, 0x0, 0x8000]})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x7f, 0xfffffffe, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x4, [{@multicast2, 0x7}, {@loopback, 0x901}, {@local, 0x6}, {@rand_addr=0x64010100, 0x8}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @lsrr={0x83, 0xb, 0x22, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3f00})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r8, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(r9)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49})
write$sndseq(r10, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x1, 0x6, 0x2}, 0x4})
r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r12, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfc, @time={0x4, 0xfffffff9}, {}, {}, @result}], 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000070000000600000000000003", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.948252182s ago: executing program 5 (id=3287):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
fdatasync(0xffffffffffffffff)

3.839024224s ago: executing program 5 (id=3288):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000480)=0x9)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x11)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004801)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb080045000028006400e000000111009078e0000002000000020100000000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000040)}, 0x20000890)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="57c20102030109021b0001000010000904430001317d55000905020200020200"/45], 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0)

3.788424628s ago: executing program 1 (id=3289):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8040)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841", 0x4, 0x8000}])

3.756498504s ago: executing program 0 (id=3290):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000))
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1})
r5 = socket$inet(0x2, 0x3, 0x5)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_elf64(r5, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]})

3.749954666s ago: executing program 2 (id=3291):
r0 = memfd_create(0x0, 0x1)
fcntl$setlease(r0, 0x400, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_setup(0x7483, &(0x7f0000000400)={0x0, 0xabae, 0x1, 0xffffffff, 0x328}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48)
write$cgroup_devices(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='c 8:', @ANYRES16=r1], 0x9)
sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x20000840, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x1, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0x400000000ee, 0xff, 0x0, 0x5})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000140)={0x56, r6, 0x0, {0x401, 0x401}, 0x2}, 0x1)

2.67936188s ago: executing program 6 (id=3292):
socket(0x2, 0x80805, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
getpid()
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0)
sendto$packet(r1, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @local}, 0x14)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

2.61768481s ago: executing program 2 (id=3293):
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x10001, 0x2001)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80001)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c})
read(r3, &(0x7f0000000200)=""/145, 0x91)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

2.616307941s ago: executing program 1 (id=3294):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rtc_irq_set_state\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18)
r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0))
listen(r4, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10)

2.422265587s ago: executing program 0 (id=3295):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r2=>r1, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb)

1.803560292s ago: executing program 5 (id=3296):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setresuid(0xee00, 0xee00, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x1017, 0x7, 0x1}})
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

1.523760226s ago: executing program 1 (id=3297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000680)={{0x2, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x30, 0x80, 0x0, 0x3, 0x3, 'syz0\x00', &(0x7f0000000300)=['\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x31})
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xb52b9c7732f7d2c0}, 0x24014844)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x18}, 0x94)

1.519245583s ago: executing program 6 (id=3298):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="2f82276db014964a9894fd3462745faa6dfe1e5710f67c9034988c860787464062934988d9bfc1de98e5605bc5084056065cf20631fdb1605346abf825", 0x3d}, {&(0x7f0000000200)="5bd5ac806f28de5864fe7a261fcbf99ed4c384b6", 0x14}, {&(0x7f0000000240)="ac98bc7781c91b5b5e1ecbf53161b48fa2d20a5c570a192bdd7132fd2889d86e145272b612d2550ee863fe9231fc6168a65a63ecb2ec51571b360d222296ebdd3a2e8ed57e06bdcc375977c427f9b4c009501ba6209becf972a72c20ec98ecf721a50899", 0x64}, {&(0x7f00000002c0)="b9b65441f9a06f0737ed321842da9be85a1e8eefcd7b4a2058cde1b11f1a325b23029e71dd0b12bc269f75f3165cde09f639575bde965087f74bee321ef7a1e1eeb4326a44e8d1c47af70eea7563984221abc66be5a9cb2b0107d93bd29bd43ebceec210d4890c0e5d6a5aee1247d7bc0e73447997fcc9058ad40a1bfa2b3f457cfc5603", 0x84}, {&(0x7f00000003c0)="62ee156f91155bd4a754f67251965ed5f8a027a22b8c6b8fec639a8387cd6c1abc7c542e144348bc12e90a60aa7701362286139f4dbade7cc013ac151528d5da2431f40299ae91e2f76de8960d54de134ad28de5fbb41e4dc21cece3c919f76bcf5f5efe44c87744fc25fb3ac646aa5d838040f8870da0dd4f25359e4fe115e53e85ce31fc4909023a38ab0c79135f", 0x8f}], 0x5, &(0x7f0000000500)="ef11afd96f2ac6a85bbfae14a4f31875a27ccf1afd1726f1944560e55f795f111a6942", 0x23, 0x10000000}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(0x0, 0x2480, 0x1)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, 0x0, 0x4000080)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7})
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r5, r6, 0x0, 0x7)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f00000002c0)='./file0/file0\x00')

563.496752ms ago: executing program 6 (id=3299):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prlimit64(r2, 0x2, &(0x7f0000000080)={0x6, 0x8}, &(0x7f00000000c0))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x2)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

140.677738ms ago: executing program 2 (id=3300):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
fallocate(r1, 0x0, 0x1000003, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x10, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
r2 = fanotify_init(0x202, 0x1000)
fanotify_mark(r2, 0x1, 0x48000013, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100fffffffd0000000008004a0000000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)

0s ago: executing program 1 (id=3301):
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
r0 = socket$inet(0x10, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
prlimit64(r2, 0x5, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES64=r2], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r6], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
pidfd_send_signal(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4)
syz_open_pts(0xffffffffffffffff, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)="59c946287a5c8c2ab7ca72d4a0cab323c8cfe17f2ac2e676c6e16ef65346430966af87481812fa8f41afba20381bc981188e4818426b8a68d6b9390c60e92dd0d4cae530545f03bce58319c67a287bf2dc4763a04a6ae91e4506d4d5846bbbd45292489bd88f5b7377ed37e5b2963382803a7d76138a29a13c77442d77acdb104ea472c389227c71ef4904eed62692ba7416261c46631e3e21a60fdc2a359217fd224f9d67e90465b114114dc34e15cf2b370a88111ee404f89dc161b26ee9e0b2", 0xc1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioprio_set$pid(0x3, 0x0, 0x4000)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

29][T16166] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  875.539694][T16166] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  875.565775][   T30] audit: type=1400 audit(1765054638.522:1851): avc:  denied  { relabelfrom } for  pid=16272 comm="syz.0.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  875.572776][T16273] sp0: Synchronizing with TNC
[  875.585785][T16166] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  875.605132][   T30] audit: type=1400 audit(1765054638.522:1852): avc:  denied  { relabelto } for  pid=16272 comm="syz.0.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  875.657765][T16272] [U] è
[  875.684368][ T5826] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  875.724168][T16166] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.764562][T16166] 8021q: adding VLAN 0 to HW filter on device team0
[  875.778679][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.785837][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.800522][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.807629][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.846219][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.876790][ T5826] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  875.904296][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.927396][ T5826] usb 3-1: config 0 descriptor??
[  875.937998][ T5826] pwc: Askey VC010 type 2 USB webcam detected.
[  876.071086][T16166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  876.223728][   T24] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  876.359303][ T5826] pwc: recv_control_msg error -32 req 02 val 2b00
[  876.367323][ T5826] pwc: recv_control_msg error -32 req 02 val 2700
[  876.379765][ T5826] pwc: recv_control_msg error -32 req 02 val 2c00
[  876.391202][   T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  876.408796][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.417628][ T5826] pwc: recv_control_msg error -32 req 04 val 1000
[  876.429297][T16166] veth0_vlan: entered promiscuous mode
[  876.436839][   T24] usb 1-1: config 0 descriptor??
[  876.446132][ T5826] pwc: recv_control_msg error -32 req 04 val 1300
[  876.514763][ T5826] pwc: recv_control_msg error -32 req 04 val 1400
[  876.581590][ T5826] pwc: recv_control_msg error -32 req 02 val 2000
[  876.602582][T16166] veth1_vlan: entered promiscuous mode
[  876.622694][ T5826] pwc: recv_control_msg error -32 req 02 val 2100
[  876.653294][ T5826] pwc: recv_control_msg error -32 req 04 val 1500
[  876.668950][ T5826] pwc: recv_control_msg error -32 req 02 val 2500
[  876.685984][ T5826] pwc: recv_control_msg error -32 req 02 val 2400
[  876.697615][ T5826] pwc: recv_control_msg error -32 req 02 val 2600
[  876.865389][ T5826] pwc: recv_control_msg error -32 req 02 val 2900
[  877.199974][T16166] veth0_macvtap: entered promiscuous mode
[  877.208183][ T5814] Bluetooth: hci1: command tx timeout
[  877.247607][T16166] veth1_macvtap: entered promiscuous mode
[  877.671791][T16166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.702725][ T5826] pwc: recv_control_msg error -71 req 04 val 1100
[  877.746570][ T5826] pwc: recv_control_msg error -71 req 04 val 1200
[  877.756988][T16326] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2871'.
[  877.793615][ T5826] pwc: Registered as video103.
[  877.936999][T16166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.945804][ T5826] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input113
[  878.066078][ T5826] usb 3-1: USB disconnect, device number 80
[  878.095526][T14547] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.111301][T14547] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.302225][T14547] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.424057][   T30] audit: type=1326 audit(1765054641.362:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16309 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056698f749 code=0x7fc00000
[  878.447689][T14547] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.485815][   T30] audit: type=1326 audit(1765054641.362:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16309 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056698f749 code=0x7fc00000
[  878.536535][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.537978][   T30] audit: type=1326 audit(1765054641.362:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16309 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056698f749 code=0x7fc00000
[  878.546248][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.593487][T16271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.626187][T16271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.247548][   T24] usb 1-1: Cannot read MAC address
[  880.265616][   T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  880.291206][   T24] usb 1-1: USB disconnect, device number 106
[  880.295722][T16342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2875'.
[  881.270379][T16350] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2877'.
[  881.700459][T13009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  881.712613][T13009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  881.722733][T13009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  881.732385][T13009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  881.739927][T13009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  881.832870][  T935] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  882.460564][  T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  882.506171][T16373] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2882'.
[  882.520902][  T935] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  882.739703][  T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.841422][  T935] usb 1-1: config 0 descriptor??
[  883.552566][  T935] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor
[  883.573178][  T935] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input114
[  883.677370][  T935] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  883.982764][T13009] Bluetooth: hci6: command tx timeout
[  884.328560][ T5928] usb 1-1: USB disconnect, device number 107
[  885.659100][T16363] chnl_net:caif_netlink_parms(): no params data found
[  886.044118][T13009] Bluetooth: hci6: command tx timeout
[  886.526912][T16363] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.863782][T16363] bridge0: port 1(bridge_slave_0) entered disabled state
[  886.872142][T16363] bridge_slave_0: entered allmulticast mode
[  886.881127][T16363] bridge_slave_0: entered promiscuous mode
[  886.889906][T16363] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.912585][T16363] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.920000][T16363] bridge_slave_1: entered allmulticast mode
[  886.970748][T16363] bridge_slave_1: entered promiscuous mode
[  887.116462][T16363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.149877][T16363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.244194][T16363] team0: Port device team_slave_0 added
[  887.256550][T16363] team0: Port device team_slave_1 added
[  887.496043][T16363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.631687][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.693644][T16363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.720379][T16363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.740775][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.798976][T16363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.433849][T13009] Bluetooth: hci6: command tx timeout
[  888.469185][T16363] hsr_slave_0: entered promiscuous mode
[  888.484871][T16363] hsr_slave_1: entered promiscuous mode
[  888.498726][T16363] debugfs: 'hsr0' already exists in 'hsr'
[  888.512430][T16363] Cannot create hsr debugfs directory
[  889.277902][ T5927] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  889.379893][T16363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  889.399169][T16363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.454545][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  889.466213][ T5927] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  889.475688][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.607773][ T5927] usb 1-1: config 0 descriptor??
[  889.892513][T16330] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  890.062953][T16330] usb 7-1: Using ep0 maxpacket: 32
[  890.073872][T16330] usb 7-1: config index 0 descriptor too short (expected 12799, got 27)
[  890.085399][ T5927] pwc: Askey VC010 type 2 USB webcam detected.
[  890.107191][T16467] syz_tun: entered allmulticast mode
[  890.107614][T16330] usb 7-1: config 52 has too many interfaces: 56, using maximum allowed: 32
[  890.114374][T16465] syz_tun: left allmulticast mode
[  890.121840][T16330] usb 7-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config
[  890.155471][T16330] usb 7-1: config 52 has 0 interfaces, different from the descriptor's value: 56
[  890.178736][T16330] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  890.179940][T16363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.193424][T16330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.200611][T16363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.207889][T16330] usb 7-1: Product: syz
[  890.225905][T16330] usb 7-1: Manufacturer: syz
[  890.256064][T16330] usb 7-1: SerialNumber: syz
[  890.288300][T16363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.303384][T16363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.462365][T13009] Bluetooth: hci6: command tx timeout
[  890.503168][T16471] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2904'.
[  890.575770][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00
[  890.600260][ T5927] pwc: recv_control_msg error -32 req 02 val 2700
[  890.718702][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00
[  890.741593][T16363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.759136][ T5927] pwc: recv_control_msg error -32 req 04 val 1000
[  890.782217][T16363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.794640][T16330] usb 7-1: USB disconnect, device number 2
[  890.813075][ T5927] pwc: recv_control_msg error -32 req 04 val 1300
[  890.825738][ T5927] pwc: recv_control_msg error -32 req 04 val 1400
[  890.902509][ T5927] pwc: recv_control_msg error -32 req 02 val 2000
[  890.933917][ T5927] pwc: recv_control_msg error -32 req 02 val 2100
[  891.083827][ T5927] pwc: recv_control_msg error -32 req 04 val 1500
[  891.096602][ T5927] pwc: recv_control_msg error -32 req 02 val 2500
[  891.121363][ T5927] pwc: recv_control_msg error -32 req 02 val 2400
[  891.148507][ T5927] pwc: recv_control_msg error -32 req 02 val 2600
[  891.165254][ T5927] pwc: recv_control_msg error -32 req 02 val 2900
[  891.234193][T16363] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  891.248950][T16363] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  891.266677][T16363] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  891.290738][T16363] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  891.397449][ T5927] pwc: recv_control_msg error -71 req 04 val 1100
[  891.411053][T16489] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2908'.
[  891.585124][ T5927] pwc: recv_control_msg error -71 req 04 val 1200
[  891.619205][ T5927] pwc: Registered as video103.
[  891.637525][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input115
[  891.677714][T16363] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.685765][ T5927] usb 1-1: USB disconnect, device number 108
[  891.721153][T16363] 8021q: adding VLAN 0 to HW filter on device team0
[  891.748214][T14465] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.755295][T14465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.819053][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.826203][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.979890][T16330] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  892.118072][T16363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.166671][T16330] usb 7-1: Using ep0 maxpacket: 16
[  892.669273][T16330] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  892.704301][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'.
[  892.757421][T16330] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  892.805944][T16330] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  892.808805][T16363] veth0_vlan: entered promiscuous mode
[  892.893822][T16513] vim2m vim2m.0: vidioc_s_fmt queue busy
[  892.920994][T16330] usb 7-1: config 0 interface 0 has no altsetting 0
[  893.031485][T16330] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  893.047726][T16363] veth1_vlan: entered promiscuous mode
[  894.179672][T16330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.102161][T16330] usb 7-1: Product: syz
[  895.112100][T16330] usb 7-1: Manufacturer: syz
[  895.116712][T16330] usb 7-1: SerialNumber: syz
[  895.135757][T16330] usb 7-1: config 0 descriptor??
[  895.144668][T16330] usb 7-1: can't set config #0, error -71
[  895.553066][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2915'.
[  895.570893][T16330] usb 7-1: USB disconnect, device number 3
[  895.694248][T16363] veth0_macvtap: entered promiscuous mode
[  895.778212][T16363] veth1_macvtap: entered promiscuous mode
[  895.987569][T16363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  896.046727][T16363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.109934][ T3532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.122293][ T3532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.165668][ T3532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.183999][ T3532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.193110][   T30] audit: type=1400 audit(1765054659.143:1856): avc:  denied  { create } for  pid=16532 comm="syz.1.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  896.216425][   T30] audit: type=1400 audit(1765054659.143:1857): avc:  denied  { write } for  pid=16532 comm="syz.1.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  896.661221][T16537] kernel read not supported for file /¡sxt (pid: 16537 comm: syz.5.2919)
[  896.674428][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.700279][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  896.717339][T16538] SELinux:  policydb string length 1886744434 does not match expected length 8
[  896.727850][   T30] audit: type=1800 audit(1765054659.673:1858): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2919" name=A17378741A dev="mqueue" ino=60462 res=0 errno=0
[  896.764879][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.775138][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  896.788029][T16538] SELinux: failed to load policy
[  897.432078][T16330] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  897.458349][T14644] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  897.604892][T16551] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2922'.
[  897.713320][T16330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  897.714572][T14644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  897.745317][T14644] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  897.754905][T14644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.782543][T16330] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  897.821986][T16330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.836896][T14644] usb 3-1: config 0 descriptor??
[  897.874011][T16330] usb 2-1: config 0 descriptor??
[  897.899243][T16330] pwc: Askey VC010 type 2 USB webcam detected.
[  897.990505][T16555] 
: renamed from bridge_slave_0
[  898.379695][T16330] pwc: recv_control_msg error -32 req 02 val 2b00
[  898.417793][T16330] pwc: recv_control_msg error -32 req 02 val 2700
[  898.432037][T16330] pwc: recv_control_msg error -32 req 02 val 2c00
[  898.443855][T16330] pwc: recv_control_msg error -32 req 04 val 1000
[  898.455670][T16330] pwc: recv_control_msg error -32 req 04 val 1300
[  898.480420][T16330] pwc: recv_control_msg error -32 req 04 val 1400
[  898.493185][T16330] pwc: recv_control_msg error -32 req 02 val 2000
[  898.508435][T16330] pwc: recv_control_msg error -32 req 02 val 2100
[  898.521674][T16330] pwc: recv_control_msg error -32 req 04 val 1500
[  898.541019][T16330] pwc: recv_control_msg error -32 req 02 val 2500
[  898.553452][T16330] pwc: recv_control_msg error -32 req 02 val 2400
[  898.651979][ T5929] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  898.662956][T14644] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor
[  898.669066][T16330] pwc: recv_control_msg error -32 req 02 val 2600
[  898.680940][T16330] pwc: recv_control_msg error -32 req 02 val 2900
[  898.684314][T14644] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002C/input/input116
[  898.812105][ T5929] usb 6-1: Using ep0 maxpacket: 16
[  898.848419][ T5929] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  898.868360][ T5929] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  898.981092][ T5929] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  898.990507][T14644] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  898.991035][T16330] pwc: recv_control_msg error -71 req 04 val 1100
[  899.013552][T14644] usb 3-1: USB disconnect, device number 81
[  899.026142][ T5929] usb 6-1: config 0 interface 0 has no altsetting 0
[  899.033242][T16330] pwc: recv_control_msg error -71 req 04 val 1200
[  899.041650][ T5929] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  899.056650][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.064870][T16330] pwc: Registered as video103.
[  899.082535][T16330] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input117
[  899.096225][ T5929] usb 6-1: Product: syz
[  899.100395][ T5929] usb 6-1: Manufacturer: syz
[  899.113647][ T5929] usb 6-1: SerialNumber: syz
[  899.120510][T16330] usb 2-1: USB disconnect, device number 82
[  899.127627][ T5929] usb 6-1: config 0 descriptor??
[  899.135222][   T30] audit: type=1326 audit(1765054662.083:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16570 comm="syz.6.2929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5c058f749 code=0x0
[  899.265902][   T30] audit: type=1400 audit(1765054662.223:1860): avc:  denied  { ioctl } for  pid=16567 comm="syz.0.2928" path="socket:[60677]" dev="sockfs" ino=60677 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  899.647131][   T30] audit: type=1326 audit(1765054662.603:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  899.678416][   T30] audit: type=1326 audit(1765054662.603:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  899.682140][ T5929] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input118
[  899.712420][   T30] audit: type=1326 audit(1765054662.603:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  899.738528][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  899.750670][   T30] audit: type=1326 audit(1765054662.603:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  899.782145][   T30] audit: type=1326 audit(1765054662.633:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77758f34b code=0x7ffc0000
[  899.807881][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  899.822800][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  899.831931][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  899.974190][T16563] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  900.236994][T16586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  900.563242][T16586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  900.606357][   T10] usb 6-1: USB disconnect, device number 15
[  900.780766][T16597] kAFS: unable to lookup cell ''
[  902.193650][T16616] input: syz1 as /devices/virtual/input/input119
[  902.208928][T16616] FAULT_INJECTION: forcing a failure.
[  902.208928][T16616] name failslab, interval 1, probability 0, space 0, times 0
[  902.221711][T16616] CPU: 1 UID: 0 PID: 16616 Comm: syz.5.2941 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  902.221739][T16616] Tainted: [L]=SOFTLOCKUP
[  902.221745][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  902.221755][T16616] Call Trace:
[  902.221762][T16616]  <TASK>
[  902.221768][T16616]  dump_stack_lvl+0x16c/0x1f0
[  902.221796][T16616]  should_fail_ex+0x512/0x640
[  902.221818][T16616]  ? fs_reclaim_acquire+0xae/0x150
[  902.221840][T16616]  should_failslab+0xc2/0x120
[  902.221861][T16616]  __kmalloc_noprof+0xeb/0x910
[  902.221884][T16616]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  902.221909][T16616]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  902.221927][T16616]  tomoyo_realpath_from_path+0xc2/0x6e0
[  902.221948][T16616]  ? tomoyo_profile+0x47/0x60
[  902.221972][T16616]  tomoyo_path_number_perm+0x245/0x580
[  902.221998][T16616]  ? tomoyo_path_number_perm+0x237/0x580
[  902.222028][T16616]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  902.222058][T16616]  ? find_held_lock+0x2b/0x80
[  902.222102][T16616]  ? find_held_lock+0x2b/0x80
[  902.222122][T16616]  ? hook_file_ioctl_common+0x144/0x410
[  902.222151][T16616]  ? __fget_files+0x20e/0x3c0
[  902.222181][T16616]  security_file_ioctl+0x9b/0x240
[  902.222202][T16616]  __x64_sys_ioctl+0xb7/0x210
[  902.222223][T16616]  do_syscall_64+0xcd/0xf80
[  902.222249][T16616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.222267][T16616] RIP: 0033:0x7fd77758f749
[  902.222282][T16616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  902.222300][T16616] RSP: 002b:00007fd7784f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  902.222318][T16616] RAX: ffffffffffffffda RBX: 00007fd7777e5fa0 RCX: 00007fd77758f749
[  902.222330][T16616] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[  902.222341][T16616] RBP: 00007fd7784f6090 R08: 0000000000000000 R09: 0000000000000000
[  902.222352][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  902.222362][T16616] R13: 00007fd7777e6038 R14: 00007fd7777e5fa0 R15: 00007ffdeb526998
[  902.222388][T16616]  </TASK>
[  902.222395][T16616] ERROR: Out of memory at tomoyo_realpath_from_path.
[  902.441000][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  902.441015][   T30] audit: type=1400 audit(1765054665.143:1880): avc:  denied  { setopt } for  pid=16614 comm="syz.5.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  902.470033][T16621] tmpfs: Unknown parameter 'grpquotaòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ./file0/file0'
[  904.282508][   T30] audit: type=1400 audit(1765054667.233:1881): avc:  denied  { append } for  pid=16637 comm="syz.6.2949" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  904.543894][T14644] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  904.721747][   T30] audit: type=1400 audit(1765054667.283:1882): avc:  denied  { ioctl } for  pid=16637 comm="syz.6.2949" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4b6b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  905.022597][T14644] usb 6-1: Using ep0 maxpacket: 16
[  905.029262][T14644] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  905.201698][T14644] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  905.220285][T14644] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  905.232261][T14644] usb 6-1: config 0 interface 0 has no altsetting 0
[  905.241087][T14644] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  905.252018][T14644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.270304][T14644] usb 6-1: Product: syz
[  905.280814][T14644] usb 6-1: Manufacturer: syz
[  905.285931][T14644] usb 6-1: SerialNumber: syz
[  905.331232][T14644] usb 6-1: config 0 descriptor??
[  905.576097][T14644] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input120
[  905.591478][   T30] audit: type=1326 audit(1765054668.523:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  905.644381][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  905.670022][T16660] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  905.691542][   T30] audit: type=1326 audit(1765054668.523:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  905.725442][T16660] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  905.732139][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  905.781023][   T30] audit: type=1326 audit(1765054668.523:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77758f749 code=0x7ffc0000
[  905.838059][T16636] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  905.869401][T16660] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  905.907155][   T30] audit: type=1326 audit(1765054668.523:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77758f34b code=0x7ffc0000
[  905.962667][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  906.013254][T16660] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  906.071628][ T5171] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  906.462293][T16660] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  906.468255][   T30] audit: type=1326 audit(1765054668.523:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77758f34b code=0x7ffc0000
[  906.511041][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'.
[  906.524937][T16671] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.533758][T16671] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.553854][T16660] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  906.560877][T16660] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  906.575224][T16660] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  906.583969][T16660] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  906.593980][   T30] audit: type=1326 audit(1765054668.523:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77758f34b code=0x7ffc0000
[  906.624938][   T30] audit: type=1326 audit(1765054668.523:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.5.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77758f34b code=0x7ffc0000
[  906.654843][T16660] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  906.672041][T16660] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  906.689988][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.699246][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.714341][  T935] usb 6-1: USB disconnect, device number 16
[  907.227910][T14644] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  907.412861][T14644] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.490526][T14644] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  907.768466][T13009] Bluetooth: hci2: command 0x0406 tx timeout
[  907.891655][T13009] Bluetooth: hci3: command 0x0406 tx timeout
[  908.041407][T13009] Bluetooth: hci5: command 0x0405 tx timeout
[  908.516864][T16674] Set syz1 is full, maxelem 65536 reached
[  908.552026][T14644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.603432][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  908.609452][T13009] Bluetooth: hci6: command 0x0c1a tx timeout
[  908.617342][T14644] usb 2-1: config 0 descriptor??
[  908.644003][T14644] pwc: Askey VC010 type 2 USB webcam detected.
[  908.989734][ T5928] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  909.110681][T14644] pwc: recv_control_msg error -32 req 02 val 2b00
[  909.329624][T14644] pwc: recv_control_msg error -32 req 02 val 2700
[  909.356875][T14644] pwc: recv_control_msg error -32 req 02 val 2c00
[  909.376425][T14644] pwc: recv_control_msg error -32 req 04 val 1000
[  909.385062][T14644] pwc: recv_control_msg error -32 req 04 val 1300
[  909.427319][T14644] pwc: recv_control_msg error -32 req 04 val 1400
[  909.435555][T14644] pwc: recv_control_msg error -32 req 02 val 2000
[  909.449748][T14644] pwc: recv_control_msg error -32 req 02 val 2100
[  909.458790][T14644] pwc: recv_control_msg error -32 req 04 val 1500
[  909.466867][T14644] pwc: recv_control_msg error -32 req 02 val 2500
[  909.474195][ T5928] usb 1-1: device descriptor read/64, error -71
[  909.483940][T14644] pwc: recv_control_msg error -32 req 02 val 2400
[  909.491489][T14644] pwc: recv_control_msg error -32 req 02 val 2600
[  909.498571][T14644] pwc: recv_control_msg error -32 req 02 val 2900
[  909.728178][T14644] pwc: recv_control_msg error -71 req 04 val 1100
[  909.735688][ T5928] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  909.743766][T14644] pwc: recv_control_msg error -71 req 04 val 1200
[  909.752570][T14644] pwc: Registered as video103.
[  909.783213][T14644] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input121
[  909.805512][T13009] Bluetooth: hci2: command 0x0406 tx timeout
[  909.822050][T14644] usb 2-1: USB disconnect, device number 83
[  909.871559][ T5928] usb 1-1: device descriptor read/64, error -71
[  909.922588][ T5900] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  910.000060][ T5928] usb usb1-port1: attempt power cycle
[  910.161269][T13009] Bluetooth: hci5: command 0x0405 tx timeout
[  910.202951][ T5900] usb 6-1: Using ep0 maxpacket: 16
[  910.327575][ T5900] usb 6-1: config 1 has an invalid interface number: 3 but max is 2
[  910.350826][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  910.371599][ T5928] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  910.410159][ T5900] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  910.421853][ T5900] usb 6-1: config 1 has no interface number 1
[  910.428971][ T5900] usb 6-1: config 1 interface 0 has no altsetting 0
[  910.442802][ T5928] usb 1-1: device descriptor read/8, error -71
[  910.464013][ T5900] usb 6-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb
[  910.481213][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.498880][ T5900] usb 6-1: Product: syz
[  910.507756][ T5900] usb 6-1: Manufacturer: syz
[  910.681283][T13009] Bluetooth: hci6: command 0x0c1a tx timeout
[  910.681294][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  910.796845][ T5900] usb 6-1: SerialNumber: syz
[  910.837809][ T5928] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  910.880811][ T5928] usb 1-1: device descriptor read/8, error -71
[  910.903506][T16695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  910.996044][ T5928] usb usb1-port1: unable to enumerate USB device
[  911.023685][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2969'.
[  911.062535][T16689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.111557][T16689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.097493][ T5900] usb 6-1: unknown number of interfaces: 2
[  912.117385][ T5900] usb 6-1: USB disconnect, device number 17
[  912.571324][T16723] FAULT_INJECTION: forcing a failure.
[  912.571324][T16723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.585139][T16723] CPU: 1 UID: 0 PID: 16723 Comm: syz.6.2974 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  912.585165][T16723] Tainted: [L]=SOFTLOCKUP
[  912.585171][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  912.585181][T16723] Call Trace:
[  912.585188][T16723]  <TASK>
[  912.585194][T16723]  dump_stack_lvl+0x16c/0x1f0
[  912.585220][T16723]  should_fail_ex+0x512/0x640
[  912.585245][T16723]  _copy_from_user+0x2e/0xd0
[  912.585267][T16723]  do_sock_getsockopt+0x3a1/0x410
[  912.585285][T16723]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  912.585301][T16723]  ? __fget_files+0x204/0x3c0
[  912.585336][T16723]  __sys_getsockopt+0x12f/0x260
[  912.585365][T16723]  __x64_sys_getsockopt+0xbd/0x160
[  912.585388][T16723]  ? do_syscall_64+0x91/0xf80
[  912.585410][T16723]  ? lockdep_hardirqs_on+0x7c/0x110
[  912.585432][T16723]  do_syscall_64+0xcd/0xf80
[  912.585456][T16723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.585473][T16723] RIP: 0033:0x7fc5c058f749
[  912.585488][T16723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  912.585505][T16723] RSP: 002b:00007fc5c14af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  912.585522][T16723] RAX: ffffffffffffffda RBX: 00007fc5c07e6090 RCX: 00007fc5c058f749
[  912.585533][T16723] RDX: 0000000000000050 RSI: 0000000000000029 RDI: 0000000000000005
[  912.585544][T16723] RBP: 00007fc5c14af090 R08: 00002000000003c0 R09: 0000000000000000
[  912.585555][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.585565][T16723] R13: 00007fc5c07e6128 R14: 00007fc5c07e6090 R15: 00007fff5f891588
[  912.585588][T16723]  </TASK>
[  912.761231][T13009] Bluetooth: hci1: command 0x0c1a tx timeout
[  912.762937][ T5814] Bluetooth: hci6: command 0x0c1a tx timeout
[  912.951860][   T10] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  913.142637][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.155715][   T10] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  913.166660][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.198029][   T10] usb 1-1: config 0 descriptor??
[  913.610160][   T10] cherry 0003:046A:0023.002D: unbalanced delimiter at end of report description
[  913.632207][   T10] cherry 0003:046A:0023.002D: probe with driver cherry failed with error -22
[  913.681147][ T5900] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  913.789455][T16746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2980'.
[  913.843349][ T5900] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  913.853573][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.015763][ T5900] usb 6-1: config 0 descriptor??
[  914.052407][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  914.448269][ T5900] gp8psk: usb out operation failed.
[  914.454171][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  914.467486][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  914.501509][ T5900] usb 6-1: USB disconnect, device number 18
[  914.768918][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'.
[  914.994376][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  915.605673][ T5928] usb 1-1: USB disconnect, device number 113
[  915.788025][ T5900] usb 7-1: Using ep0 maxpacket: 32
[  915.841335][T16774] xt_ecn: cannot match TCP bits for non-tcp packets
[  915.910169][ T5900] usb 7-1: config 0 has an invalid interface number: 230 but max is 0
[  915.920920][ T5900] usb 7-1: config 0 has no interface number 0
[  915.927819][ T5900] usb 7-1: config 0 interface 230 has no altsetting 0
[  916.140924][ T5929] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  916.598516][ T5900] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  916.615285][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.627777][ T5900] usb 7-1: Product: syz
[  916.633653][ T5900] usb 7-1: Manufacturer: syz
[  916.683791][ T5928] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  916.692494][ T5900] usb 7-1: SerialNumber: syz
[  916.700690][ T5900] usb 7-1: config 0 descriptor??
[  916.709096][ T5900] ums-usbat 7-1:0.230: USB Mass Storage device detected
[  916.722240][ T5900] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  916.840892][ T5929] usb 2-1: Using ep0 maxpacket: 16
[  916.850627][ T5929] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  916.860834][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  916.861409][ T5929] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  916.877590][ T5929] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  916.888101][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.888116][ T5928] usb 1-1: config 1 has an invalid interface number: 3 but max is 2
[  916.903879][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  916.906690][ T5929] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  916.934146][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.942356][ T5928] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  916.951435][ T5928] usb 1-1: config 1 has no interface number 1
[  916.957591][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0
[  916.968609][ T5928] usb 1-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb
[  916.977993][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.986124][ T5929] usb 2-1: Product: syz
[  916.998562][ T5928] usb 1-1: Product: syz
[  916.999809][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  917.013120][ T5928] usb 1-1: Manufacturer: syz
[  917.014343][ T5929] usb 2-1: Manufacturer: syz
[  917.040616][ T5929] usb 2-1: SerialNumber: syz
[  917.040618][ T5928] usb 1-1: SerialNumber: syz
[  917.081478][ T5929] usb 2-1: config 0 descriptor??
[  917.131476][T16790] netlink: del zone limit has 4 unknown bytes
[  917.580197][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.588828][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.950239][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  917.950254][   T30] audit: type=1326 audit(1765054680.904:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056698f749 code=0x7ffc0000
[  918.000704][ T5928] usb 1-1: unknown number of interfaces: 2
[  918.010636][ T5929] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input122
[  918.050656][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  918.065107][   T30] audit: type=1326 audit(1765054680.944:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056698f749 code=0x7ffc0000
[  918.070374][ T5928] usb 1-1: USB disconnect, device number 114
[  918.209587][   T30] audit: type=1326 audit(1765054680.964:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f056698f749 code=0x7ffc0000
[  918.234199][   T30] audit: type=1326 audit(1765054680.964:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056698f749 code=0x7ffc0000
[  918.285308][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  918.295209][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  918.340366][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  918.370339][ T5900] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5
[  918.378955][   T30] audit: type=1326 audit(1765054680.964:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.404402][T16795] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  918.407779][ T5900] usb 7-1: USB disconnect, device number 4
[  918.413934][   T30] audit: type=1326 audit(1765054680.964:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.413976][   T30] audit: type=1326 audit(1765054680.964:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.414019][   T30] audit: type=1326 audit(1765054680.964:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.414053][   T30] audit: type=1326 audit(1765054680.964:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.445418][   T30] audit: type=1326 audit(1765054680.964:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056698f34b code=0x7ffc0000
[  918.547500][T16802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.588474][T16802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  919.252214][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'.
[  919.927742][ T5900] usb 2-1: USB disconnect, device number 84
[  920.344153][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'.
[  920.363235][T16835] vim2m vim2m.0: vidioc_s_fmt queue busy
[  920.725686][T16839] gfs2: error -5 reading superblock
[  921.111679][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'.
[  921.158618][T16846] vim2m vim2m.0: vidioc_s_fmt queue busy
[  921.835713][T16856] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002
[  921.923897][T16858] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  921.964964][T16858] syzkaller0: entered promiscuous mode
[  921.982334][T16858] syzkaller0: entered allmulticast mode
[  922.290892][   T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  922.340575][T16330] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  922.404613][T16864] vlan0: entered promiscuous mode
[  922.442430][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.453845][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  922.469497][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.490786][T16330] usb 1-1: Using ep0 maxpacket: 16
[  922.497597][T16330] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  922.528857][   T24] usb 2-1: config 0 descriptor??
[  922.535799][T16330] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  922.556895][T16330] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  922.567427][T16330] usb 1-1: config 0 interface 0 has no altsetting 0
[  922.579151][T16330] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  922.593518][T16330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.606040][T16330] usb 1-1: Product: syz
[  922.622857][T16330] usb 1-1: Manufacturer: syz
[  922.660583][T16330] usb 1-1: SerialNumber: syz
[  922.687374][T16330] usb 1-1: config 0 descriptor??
[  922.788850][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'.
[  922.922167][T16876] vim2m vim2m.0: vidioc_s_fmt queue busy
[  922.966948][   T24] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor
[  922.976818][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  922.976833][   T30] audit: type=1326 audit(1765054685.934:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  922.980235][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002E/input/input123
[  922.983572][   T30] audit: type=1326 audit(1765054685.934:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  922.983611][   T30] audit: type=1326 audit(1765054685.934:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  922.983647][   T30] audit: type=1326 audit(1765054685.934:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  923.007761][ T5929] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  923.122570][T16330] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input124
[  923.162789][   T30] audit: type=1326 audit(1765054685.934:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  923.187333][   T30] audit: type=1326 audit(1765054686.054:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  923.212605][   T30] audit: type=1326 audit(1765054686.054:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  923.236398][   T30] audit: type=1326 audit(1765054686.054:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  923.300631][T16877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.309182][T16877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.323622][   T30] audit: type=1326 audit(1765054686.054:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  923.348816][   T30] audit: type=1326 audit(1765054686.054:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.0.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  923.382972][   T24] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  923.401384][ T5929] usb 7-1: Using ep0 maxpacket: 32
[  923.561345][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  923.578390][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  923.588834][   T24] usb 2-1: USB disconnect, device number 85
[  923.630135][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.685346][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  923.699186][ T5929] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  923.717909][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.720754][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  923.765426][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  923.783361][ T5929] usb 7-1: config 0 descriptor??
[  923.792101][ T5929] hub 7-1:0.0: USB hub found
[  923.984162][T16883] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3016'.
[  924.003422][ T5929] hub 7-1:0.0: 1 port detected
[  924.035514][T16884] autofs: Unknown parameter 'ªªªªª9ªªªªªb�'
[  924.250592][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3014'.
[  924.539520][T16894] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3020'.
[  924.763887][ T5929] hub 7-1:0.0: activate --> -90
[  925.177429][T16900] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3021'.
[  925.434615][ T5929] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  925.435138][T14644] usb 7-1: USB disconnect, device number 5
[  925.681990][ T5928] usb 1-1: USB disconnect, device number 115
[  925.726065][T16908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3023'.
[  925.810721][T16910] 8021q: adding VLAN 0 to HW filter on device bond1
[  927.187871][T16931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3030'.
[  928.677389][T16952] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3036'.
[  929.881170][T16961] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3038'.
[  930.649244][T16974] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3042'.
[  931.006253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  932.308071][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  932.308086][   T30] audit: type=1400 audit(1765054695.265:1947): avc:  denied  { setopt } for  pid=16991 comm="syz.5.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  932.734493][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'.
[  933.515790][T17013] binder_alloc: 17011: pid 17011 spamming oneway? 1 buffers allocated for a total size of 4096
[  933.585489][T17016] mkiss: ax0: crc mode is auto.
[  934.363107][T17028] SELinux:  Context Ï is not valid (left unmapped).
[  935.356932][T17041] FAULT_INJECTION: forcing a failure.
[  935.356932][T17041] name failslab, interval 1, probability 0, space 0, times 0
[  935.372479][T17041] CPU: 0 UID: 0 PID: 17041 Comm: syz.5.3059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  935.372509][T17041] Tainted: [L]=SOFTLOCKUP
[  935.372516][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  935.372527][T17041] Call Trace:
[  935.372534][T17041]  <TASK>
[  935.372541][T17041]  dump_stack_lvl+0x16c/0x1f0
[  935.372570][T17041]  should_fail_ex+0x512/0x640
[  935.372593][T17041]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  935.372624][T17041]  should_failslab+0xc2/0x120
[  935.372648][T17041]  kmem_cache_alloc_node_noprof+0x86/0x800
[  935.372675][T17041]  ? __alloc_skb+0x156/0x410
[  935.372704][T17041]  ? __alloc_skb+0x156/0x410
[  935.372738][T17041]  __alloc_skb+0x156/0x410
[  935.372759][T17041]  ? __alloc_skb+0x35d/0x410
[  935.372781][T17041]  ? __pfx___alloc_skb+0x10/0x10
[  935.372806][T17041]  ? netlink_autobind.isra.0+0x158/0x370
[  935.372835][T17041]  netlink_alloc_large_skb+0x69/0x140
[  935.372857][T17041]  netlink_sendmsg+0x698/0xdd0
[  935.372881][T17041]  ? __pfx_netlink_sendmsg+0x10/0x10
[  935.372912][T17041]  ____sys_sendmsg+0xa5d/0xc30
[  935.372934][T17041]  ? copy_msghdr_from_user+0x10a/0x160
[  935.372962][T17041]  ? __pfx_____sys_sendmsg+0x10/0x10
[  935.372981][T17041]  ? __lock_acquire+0x433/0x22f0
[  935.373024][T17041]  ___sys_sendmsg+0x134/0x1d0
[  935.373053][T17041]  ? __pfx____sys_sendmsg+0x10/0x10
[  935.373079][T17041]  ? __lock_acquire+0x433/0x22f0
[  935.373135][T17041]  __sys_sendmsg+0x16d/0x220
[  935.373164][T17041]  ? __pfx___sys_sendmsg+0x10/0x10
[  935.373207][T17041]  do_syscall_64+0xcd/0xf80
[  935.373234][T17041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.373253][T17041] RIP: 0033:0x7fd77758f749
[  935.373269][T17041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  935.373286][T17041] RSP: 002b:00007fd7784f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  935.373305][T17041] RAX: ffffffffffffffda RBX: 00007fd7777e5fa0 RCX: 00007fd77758f749
[  935.373317][T17041] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003
[  935.373328][T17041] RBP: 00007fd7784f6090 R08: 0000000000000000 R09: 0000000000000000
[  935.373339][T17041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  935.373350][T17041] R13: 00007fd7777e6038 R14: 00007fd7777e5fa0 R15: 00007ffdeb526998
[  935.373376][T17041]  </TASK>
[  936.028355][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3062'.
[  936.049462][T17048] netlink: 'syz.5.3062': attribute type 5 has an invalid length.
[  936.061535][T17048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3062'.
[  937.243283][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  937.255786][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  937.264598][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  937.272718][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  937.281324][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  937.549773][T14644] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  937.593521][T17071] netlink: 'syz.6.3063': attribute type 3 has an invalid length.
[  937.779694][T14644] usb 6-1: Using ep0 maxpacket: 16
[  937.836926][T14644] usb 6-1: config 0 interface 0 has no altsetting 0
[  937.942444][T14644] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  938.222487][T14644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.233687][T14644] usb 6-1: config 0 descriptor??
[  938.774322][T14644] hid (null): unknown global tag 0xd
[  938.791671][T14644] hid (null): unknown global tag 0xc
[  938.835002][T14644] hid (null): unknown global tag 0xc
[  939.323785][T13009] Bluetooth: hci4: command tx timeout
[  939.347446][T14644] usb 6-1: USB disconnect, device number 19
[  939.987091][   T30] audit: type=1400 audit(1765054702.925:1948): avc:  denied  { bind } for  pid=17090 comm="syz.0.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  940.028900][T17063] chnl_net:caif_netlink_parms(): no params data found
[  940.129421][   T30] audit: type=1400 audit(1765054702.945:1949): avc:  denied  { setopt } for  pid=17090 comm="syz.0.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  940.946010][T17063] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.956792][T17063] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.015196][T17063] bridge_slave_0: entered allmulticast mode
[  941.321069][T17120] FAULT_INJECTION: forcing a failure.
[  941.321069][T17120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  941.344383][T17063] bridge_slave_0: entered promiscuous mode
[  941.380446][T17063] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.396199][T17120] CPU: 1 UID: 0 PID: 17120 Comm: syz.2.3081 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  941.396222][T17120] Tainted: [L]=SOFTLOCKUP
[  941.396226][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  941.396233][T17120] Call Trace:
[  941.396237][T17120]  <TASK>
[  941.396242][T17120]  dump_stack_lvl+0x16c/0x1f0
[  941.396260][T17120]  should_fail_ex+0x512/0x640
[  941.396276][T17120]  _copy_from_user+0x2e/0xd0
[  941.396291][T17120]  copy_msghdr_from_user+0x98/0x160
[  941.396308][T17120]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  941.396324][T17120]  ? __lock_acquire+0x433/0x22f0
[  941.396347][T17120]  ___sys_sendmsg+0xfe/0x1d0
[  941.396363][T17120]  ? __pfx____sys_sendmsg+0x10/0x10
[  941.396379][T17120]  ? __lock_acquire+0x433/0x22f0
[  941.396411][T17120]  __sys_sendmsg+0x16d/0x220
[  941.396427][T17120]  ? __pfx___sys_sendmsg+0x10/0x10
[  941.396452][T17120]  do_syscall_64+0xcd/0xf80
[  941.396467][T17120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.396478][T17120] RIP: 0033:0x7f8c06d8f749
[  941.396487][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  941.396497][T17120] RSP: 002b:00007f8c07bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  941.396508][T17120] RAX: ffffffffffffffda RBX: 00007f8c06fe5fa0 RCX: 00007f8c06d8f749
[  941.396515][T17120] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003
[  941.396522][T17120] RBP: 00007f8c07bd7090 R08: 0000000000000000 R09: 0000000000000000
[  941.396528][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  941.396534][T17120] R13: 00007f8c06fe6038 R14: 00007f8c06fe5fa0 R15: 00007ffcb61004c8
[  941.396549][T17120]  </TASK>
[  941.583595][T17063] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.590791][T17063] bridge_slave_1: entered allmulticast mode
[  941.597708][T17063] bridge_slave_1: entered promiscuous mode
[  941.679510][T13009] Bluetooth: hci4: command tx timeout
[  942.037402][T17123] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3083'.
[  942.073430][T17063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.102286][T17063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.162960][T17063] team0: Port device team_slave_0 added
[  942.197058][T17063] team0: Port device team_slave_1 added
[  942.352184][T17137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  942.394599][T17137] block device autoloading is deprecated and will be removed.
[  942.579262][T17063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  942.612825][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.733643][T17063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.779863][T17063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  942.796970][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.912194][T17063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.983383][T17150] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3091'.
[  943.171938][T17063] hsr_slave_0: entered promiscuous mode
[  943.177965][T17063] hsr_slave_1: entered promiscuous mode
[  943.206777][T17063] debugfs: 'hsr0' already exists in 'hsr'
[  943.220899][T17063] Cannot create hsr debugfs directory
[  943.961609][T13009] Bluetooth: hci4: command tx timeout
[  944.209746][T16330] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  944.782163][T16330] usb 3-1: Using ep0 maxpacket: 16
[  944.911595][T16330] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  944.954946][T16330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  945.031340][T16330] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  945.066692][T16330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.095995][T16330] usb 3-1: Product: syz
[  945.126999][T16330] usb 3-1: Manufacturer: syz
[  945.136125][T16330] usb 3-1: SerialNumber: syz
[  945.246265][T16330] usb 3-1: config 0 descriptor??
[  945.283508][T14644] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  945.310433][T16330] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  945.323140][T16330] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  945.466270][T14644] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  945.498590][T14644] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  945.527444][T14644] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  945.552554][T14644] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  945.566806][T14644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.612832][T17063] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  945.627326][T17063] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  945.647067][T14644] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  945.649718][T17063] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  945.686939][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  945.697852][T14644] usb 1-1: invalid MIDI out EP 0
[  945.716846][T17063] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  945.760778][T14644] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  945.849829][ T5929] usb 7-1: Using ep0 maxpacket: 16
[  945.869321][ T5929] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  945.870535][T14644] usb 1-1: USB disconnect, device number 116
[  945.886357][ T5929] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  945.897722][T16330] em28xx 3-1:0.0: unknown em28xx chip ID (232)
[  945.912154][ T5929] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  945.930156][T17063] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.945892][ T5929] usb 7-1: config 0 interface 0 has no altsetting 0
[  945.970635][ T5929] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  945.982907][T17063] 8021q: adding VLAN 0 to HW filter on device team0
[  945.996542][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.018275][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.019349][ T5929] usb 7-1: Product: syz
[  946.025481][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.030152][ T5929] usb 7-1: Manufacturer: syz
[  946.050218][T13009] Bluetooth: hci4: command tx timeout
[  946.050444][ T5929] usb 7-1: SerialNumber: syz
[  946.090570][ T5929] usb 7-1: config 0 descriptor??
[  946.092658][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3098'.
[  946.096649][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.111595][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.122018][T16330] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  946.340889][   T30] audit: type=1326 audit(1765054709.286:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  946.370681][   T30] audit: type=1326 audit(1765054709.286:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  946.371784][ T5929] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input125
[  946.394815][   T30] audit: type=1326 audit(1765054709.286:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  946.394866][   T30] audit: type=1326 audit(1765054709.286:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.394908][   T30] audit: type=1326 audit(1765054709.286:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.394947][   T30] audit: type=1326 audit(1765054709.286:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.394986][   T30] audit: type=1326 audit(1765054709.286:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.395027][   T30] audit: type=1326 audit(1765054709.286:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.395069][   T30] audit: type=1326 audit(1765054709.326:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c058f34b code=0x7ffc0000
[  946.476520][   T30] audit: type=1326 audit(1765054709.436:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.6.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c05c2005 code=0x7ffc0000
[  947.028909][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  947.110417][T16330] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  947.126864][T16330] em28xx 3-1:0.0: No AC97 audio processor
[  947.133119][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  947.135764][T16330] usb 3-1: USB disconnect, device number 82
[  947.152770][T16330] em28xx 3-1:0.0: Disconnecting em28xx
[  947.165119][T16330] em28xx 3-1:0.0: Freeing device
[  947.189323][T17180] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  947.202711][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  947.206607][T17063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.223393][T17200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.247797][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  947.344345][T17200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.455364][T17063] veth0_vlan: entered promiscuous mode
[  947.467741][T17063] veth1_vlan: entered promiscuous mode
[  947.490898][T14644] usb 7-1: USB disconnect, device number 6
[  947.580054][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'.
[  947.991564][T17063] veth0_macvtap: entered promiscuous mode
[  948.015175][T17063] veth1_macvtap: entered promiscuous mode
[  948.133640][T17063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  948.148375][T17063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  948.182148][T14868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.204899][T14868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.233965][T14868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.256689][T14868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.439866][T14868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.450106][ T5944] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  948.470143][T14868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.531322][T17217] Invalid source name
[  948.535681][T17217] UBIFS error (pid: 17217): cannot open "./file0", error -22
[  948.555703][T17217] overlayfs: failed to get inode (-116)
[  948.571326][T17217] overlayfs: failed to get inode (-116)
[  948.584444][T17217] overlayfs: failed to get inode (-116)
[  948.591260][T17217] overlayfs: failed to get inode (-116)
[  948.770460][ T5944] usb 3-1: device descriptor read/64, error -71
[  948.912059][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.926789][T17220] syzkaller0: entered promiscuous mode
[  948.933066][T17220] syzkaller0: entered allmulticast mode
[  948.937301][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.983501][T17220] tipc: Started in network mode
[  948.999608][T17220] tipc: Node identity 867f991a7c08, cluster identity 4711
[  949.022578][T17220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  949.050287][ T5944] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  949.235631][T17226] block nbd0: NBD_DISCONNECT
[  949.241868][ T5944] usb 3-1: device descriptor read/64, error -71
[  949.251344][T17226] block nbd0: Send disconnect failed -32
[  949.300664][ T5929] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  949.360745][ T5944] usb usb3-port1: attempt power cycle
[  949.449624][T17232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3112'.
[  949.922361][ T5929] usb 7-1: config 0 has an invalid interface number: 156 but max is 0
[  949.935457][ T5929] usb 7-1: config 0 has no interface number 0
[  949.952045][ T5929] usb 7-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  949.967511][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.980021][ T5929] usb 7-1: Product: syz
[  949.980355][ T5944] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  949.984239][ T5929] usb 7-1: Manufacturer: syz
[  949.996988][ T5929] usb 7-1: SerialNumber: syz
[  950.004372][ T5929] usb 7-1: config 0 descriptor??
[  950.012652][ T5929] go7007 7-1:0.156: The Lifeview TV Walker Ultra is not supported. Sorry!
[  950.021780][ T5944] usb 3-1: device descriptor read/8, error -71
[  950.031359][ T5900] tipc: Node number set to 4202141978
[  950.322679][ T5929] usb 7-1: USB disconnect, device number 7
[  950.333905][ T5944] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  950.344420][T17219] tipc: Resetting bearer <eth:syzkaller0>
[  950.364960][T17219] tipc: Disabling bearer <eth:syzkaller0>
[  950.374415][ T5944] usb 3-1: device descriptor read/8, error -71
[  950.616186][T17250] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3117'.
[  950.699235][ T5944] usb usb3-port1: unable to enumerate USB device
[  950.730604][ T5900] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  950.910227][ T5900] usb 1-1: Using ep0 maxpacket: 16
[  950.916928][ T5900] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  950.931579][ T5900] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  950.945328][ T5900] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  950.955400][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0
[  950.963842][ T5900] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  950.975925][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.984027][ T5900] usb 1-1: Product: syz
[  950.988366][ T5900] usb 1-1: Manufacturer: syz
[  950.994091][ T5900] usb 1-1: SerialNumber: syz
[  951.016620][ T5900] usb 1-1: config 0 descriptor??
[  951.274180][ T5900] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input126
[  951.304092][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  951.334631][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  951.360502][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  951.371779][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  951.483982][T17269] block nbd2: NBD_DISCONNECT
[  951.488826][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  951.497493][T17248] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  951.509164][   T30] audit: type=1326 audit(1765054714.446:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  951.516028][T17269] block nbd2: Send disconnect failed -32
[  951.541857][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.596009][   T30] audit: type=1326 audit(1765054714.456:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d1cb8df90 code=0x7ffc0000
[  951.630387][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.809076][ T5929] usb 1-1: USB disconnect, device number 117
[  952.064286][   T30] audit: type=1326 audit(1765054714.466:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  952.129299][   T30] audit: type=1326 audit(1765054714.476:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  952.249303][   T30] audit: type=1326 audit(1765054714.506:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d1cb8df90 code=0x7ffc0000
[  952.319457][   T30] audit: type=1326 audit(1765054714.506:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  952.391573][   T30] audit: type=1326 audit(1765054714.506:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  952.511551][T17278] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3126'.
[  952.531330][   T30] audit: type=1326 audit(1765054714.696:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  952.613172][   T30] audit: type=1326 audit(1765054714.726:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1cb8f34b code=0x7ffc0000
[  952.643232][   T30] audit: type=1326 audit(1765054714.736:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1cb8f749 code=0x7ffc0000
[  954.030267][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  954.169184][ T5900] usb 6-1: device descriptor read/64, error -71
[  954.529217][ T5900] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  954.690255][ T5900] usb 6-1: device descriptor read/64, error -71
[  954.859543][ T5900] usb usb6-port1: attempt power cycle
[  955.260661][ T5900] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  955.298787][ T5900] usb 6-1: device descriptor read/8, error -71
[  955.538732][ T5900] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  955.571067][ T5900] usb 6-1: device descriptor read/8, error -71
[  955.709690][ T5900] usb usb6-port1: unable to enumerate USB device
[  956.269359][T14644] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  956.438689][T14644] usb 2-1: Using ep0 maxpacket: 16
[  956.618641][T14644] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  956.636194][T14644] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  956.678466][T14644] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  956.714230][T14644] usb 2-1: config 0 interface 0 has no altsetting 0
[  956.776045][T14644] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  956.808299][T14644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.839900][T17332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3141'.
[  956.947924][T14644] usb 2-1: Product: syz
[  957.100523][T14644] usb 2-1: Manufacturer: syz
[  957.113523][T14644] usb 2-1: SerialNumber: syz
[  957.142906][T14644] usb 2-1: config 0 descriptor??
[  957.268624][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  957.489652][T14644] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input127
[  957.503073][ T5900] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  957.526662][ T5900] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  957.527038][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  957.562512][ T5900] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  957.581043][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  957.581056][   T30] audit: type=1326 audit(1765054720.426:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e6d8f749 code=0x7ffc0000
[  957.824016][ T5900] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  957.869395][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.909986][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.938870][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.975360][ T5900] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  958.211528][   T30] audit: type=1326 audit(1765054720.426:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e6d8f749 code=0x7ffc0000
[  958.235746][ T5900] usb 6-1: invalid MIDI out EP 0
[  958.275497][   T30] audit: type=1326 audit(1765054720.426:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f56e6d8f749 code=0x7ffc0000
[  958.310719][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  958.328588][   T30] audit: type=1326 audit(1765054720.426:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e6d8f749 code=0x7ffc0000
[  958.357901][ T5900] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  958.390205][ T5900] usb 6-1: USB disconnect, device number 24
[  958.458745][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  958.503066][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  958.529339][   T30] audit: type=1326 audit(1765054720.426:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e6d8f749 code=0x7ffc0000
[  958.553932][ T5884] usb 2-1: USB disconnect, device number 86
[  958.579620][   T30] audit: type=1326 audit(1765054720.426:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e6d8f34b code=0x7ffc0000
[  958.603568][   T30] audit: type=1326 audit(1765054720.426:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e6d8f34b code=0x7ffc0000
[  958.627948][   T30] audit: type=1326 audit(1765054720.426:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e6d8f34b code=0x7ffc0000
[  958.629160][T17328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3142'.
[  958.652952][   T30] audit: type=1326 audit(1765054720.426:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e6d8f34b code=0x7ffc0000
[  958.790459][   T30] audit: type=1326 audit(1765054720.426:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17314 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e6d8f34b code=0x7ffc0000
[  959.123927][T17346] gfs2: error -5 reading superblock
[  959.196185][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  959.239661][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  959.250817][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  959.267467][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  959.275111][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  960.148571][ T5884] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  960.150784][T17347] chnl_net:caif_netlink_parms(): no params data found
[  960.316990][T17347] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.325930][T17347] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.328499][ T5884] usb 6-1: Using ep0 maxpacket: 32
[  960.342616][T17347] bridge_slave_0: entered allmulticast mode
[  960.363096][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.384327][T17347] bridge_slave_0: entered promiscuous mode
[  960.428775][ T5884] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[  960.447474][T17347] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.459893][T17347] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.467243][T17347] bridge_slave_1: entered allmulticast mode
[  960.473383][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.493559][ T5884] usb 6-1: config 0 descriptor??
[  960.507890][T17347] bridge_slave_1: entered promiscuous mode
[  960.583400][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input128
[  960.620681][T17369] evm: overlay not supported
[  961.047976][T17347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  961.122775][T17373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.134477][T17373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.160262][T17347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.244199][T17347] team0: Port device team_slave_0 added
[  961.267619][T17347] team0: Port device team_slave_1 added
[  961.322679][T13009] Bluetooth: hci2: command tx timeout
[  961.363863][T17347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  961.379871][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.526692][T17347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.779621][T17347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.906291][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.933247][T17347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  962.465581][T17347] hsr_slave_0: entered promiscuous mode
[  962.480510][T17347] hsr_slave_1: entered promiscuous mode
[  962.488064][T17385] netlink: 'syz.6.3154': attribute type 10 has an invalid length.
[  962.497896][T17347] debugfs: 'hsr0' already exists in 'hsr'
[  962.506019][T17347] Cannot create hsr debugfs directory
[  962.514078][T17385] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  962.527272][T17385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  962.589325][   T30] kauditd_printk_skb: 496 callbacks suppressed
[  962.589340][   T30] audit: type=1326 audit(1765054725.557:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  962.700194][   T30] audit: type=1326 audit(1765054725.557:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  962.742216][   T30] audit: type=1326 audit(1765054725.557:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.034612][   T30] audit: type=1326 audit(1765054725.557:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.059395][   T30] audit: type=1326 audit(1765054725.557:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.398628][T13009] Bluetooth: hci2: command tx timeout
[  963.446149][   T30] audit: type=1326 audit(1765054725.557:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.468243][ T5929] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  963.471463][   T30] audit: type=1326 audit(1765054725.557:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.513992][   T30] audit: type=1326 audit(1765054725.557:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.539778][   T30] audit: type=1326 audit(1765054725.567:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.564541][   T30] audit: type=1326 audit(1765054725.567:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7775c2005 code=0x7ffc0000
[  963.607655][ T5171] bcm5974 6-1:0.0: could not read from device
[  963.623627][ T5171] bcm5974 6-1:0.0: could not read from device
[  963.627319][ T5884] usb 6-1: USB disconnect, device number 25
[  963.649045][ T5929] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  963.666078][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.686169][ T5929] usb 3-1: Product: syz
[  963.691390][ T5929] usb 3-1: Manufacturer: syz
[  963.696195][ T5929] usb 3-1: SerialNumber: syz
[  964.169252][T17406] netlink: 'syz.1.3159': attribute type 10 has an invalid length.
[  964.229143][T17408] FAULT_INJECTION: forcing a failure.
[  964.229143][T17408] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  964.242735][T17408] CPU: 1 UID: 0 PID: 17408 Comm: syz.2.3155 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  964.242765][T17408] Tainted: [L]=SOFTLOCKUP
[  964.242772][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  964.242783][T17408] Call Trace:
[  964.242794][T17408]  <TASK>
[  964.242801][T17408]  dump_stack_lvl+0x16c/0x1f0
[  964.242830][T17408]  should_fail_ex+0x512/0x640
[  964.242858][T17408]  _copy_to_user+0x32/0xd0
[  964.242883][T17408]  simple_read_from_buffer+0xcb/0x170
[  964.242910][T17408]  proc_fail_nth_read+0x197/0x240
[  964.242931][T17408]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  964.242953][T17408]  ? rw_verify_area+0xcf/0x6c0
[  964.242972][T17408]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  964.242991][T17408]  vfs_read+0x1e4/0xcf0
[  964.243014][T17408]  ? __pfx___mutex_lock+0x10/0x10
[  964.243042][T17408]  ? __pfx_vfs_read+0x10/0x10
[  964.243071][T17408]  ? __fget_files+0x20e/0x3c0
[  964.243104][T17408]  ksys_read+0x12a/0x250
[  964.243125][T17408]  ? __pfx_ksys_read+0x10/0x10
[  964.243155][T17408]  do_syscall_64+0xcd/0xf80
[  964.243180][T17408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.243199][T17408] RIP: 0033:0x7f8c06d8e15c
[  964.243214][T17408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  964.243232][T17408] RSP: 002b:00007f8c07bb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  964.243250][T17408] RAX: ffffffffffffffda RBX: 00007f8c06fe6090 RCX: 00007f8c06d8e15c
[  964.243263][T17408] RDX: 000000000000000f RSI: 00007f8c07bb60a0 RDI: 000000000000000b
[  964.243274][T17408] RBP: 00007f8c07bb6090 R08: 0000000000000000 R09: 0000000000000000
[  964.243285][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.243296][T17408] R13: 00007f8c06fe6128 R14: 00007f8c06fe6090 R15: 00007ffcb61004c8
[  964.243324][T17408]  </TASK>
[  964.455030][T17406] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  964.466722][T17406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  964.548607][ T5929] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[  964.558042][ T5929] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  964.682606][ T5929] usb 3-1: USB disconnect, device number 87
[  965.014038][T17347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  965.128430][T17347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  965.183143][T17347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  965.659854][T13009] Bluetooth: hci2: command tx timeout
[  966.039983][T17347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  966.264435][T17347] 8021q: adding VLAN 0 to HW filter on device bond0
[  966.342060][T17347] 8021q: adding VLAN 0 to HW filter on device team0
[  966.364598][T16446] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.371762][T16446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  966.422375][T16446] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.429568][T16446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  967.009614][T17433] futex_wake_op: syz.1.3169 tries to shift op by -1; fix this program
[  967.597642][T17456] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3172'.
[  967.723663][T13009] Bluetooth: hci2: command tx timeout
[  968.254206][T17347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  968.469422][T17347] veth0_vlan: entered promiscuous mode
[  968.585113][T17347] veth1_vlan: entered promiscuous mode
[  968.957747][T17347] veth0_macvtap: entered promiscuous mode
[  968.973554][T17347] veth1_macvtap: entered promiscuous mode
[  968.994318][T17347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  969.010334][T17347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  969.027119][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.057790][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.593596][T14644] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  969.607741][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.917881][T14644] usb 3-1: Using ep0 maxpacket: 16
[  969.924760][T14644] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  969.964440][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.973852][T14644] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  970.187866][T14644] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  970.197611][T14644] usb 3-1: config 0 interface 0 has no altsetting 0
[  970.281286][T14644] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  970.296147][T14644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.308361][T17481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.328117][T14644] usb 3-1: Product: syz
[  970.332292][T17481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.341175][T14644] usb 3-1: Manufacturer: syz
[  970.360001][T14644] usb 3-1: SerialNumber: syz
[  970.367159][T14644] usb 3-1: config 0 descriptor??
[  970.407313][T17481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.415399][T17481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.826450][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  970.826466][   T30] audit: type=1326 audit(1765054733.787:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06d8f749 code=0x7ffc0000
[  970.864333][T14644] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input130
[  970.882984][ T5171] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  970.913796][   T30] audit: type=1326 audit(1765054733.827:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8c06d8f749 code=0x7ffc0000
[  970.980238][ T5171] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  970.991630][   T30] audit: type=1326 audit(1765054733.827:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06d8f749 code=0x7ffc0000
[  971.027929][ T5171] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  971.044673][ T5171] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  971.054045][   T30] audit: type=1326 audit(1765054733.827:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.449891][T17476] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  971.484151][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.514718][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.534707][   T24] usb 3-1: USB disconnect, device number 88
[  971.547430][   T30] audit: type=1326 audit(1765054733.827:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.629236][   T30] audit: type=1326 audit(1765054733.827:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.707875][   T30] audit: type=1326 audit(1765054733.827:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.755682][   T30] audit: type=1326 audit(1765054733.827:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.810069][   T30] audit: type=1326 audit(1765054733.827:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c06d8f34b code=0x7ffc0000
[  971.865234][   T30] audit: type=1326 audit(1765054733.827:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c06dc2005 code=0x7ffc0000
[  972.161140][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'.
[  972.178690][T17525] netlink: 'syz.0.3191': attribute type 10 has an invalid length.
[  972.189965][T17525] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  972.213476][T17525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  972.240485][T17506] futex_wake_op: syz.5.3186 tries to shift op by -1; fix this program
[  972.258302][   T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  972.397901][   T24] usb 2-1: device descriptor read/64, error -71
[  972.657777][   T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  972.787943][   T24] usb 2-1: device descriptor read/64, error -71
[  972.798160][ T5884] usb 3-1: new full-speed USB device number 89 using dummy_hcd
[  972.900019][   T24] usb usb2-port1: attempt power cycle
[  972.942278][T17535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=17535 comm=syz.5.3193
[  972.965507][ T5884] usb 3-1: config 2 has an invalid interface number: 219 but max is 0
[  973.036543][ T5884] usb 3-1: config 2 has no interface number 0
[  973.070700][ T5884] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76
[  973.095760][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.127591][ T5884] gspca_main: pac7311-2.14.0 probing 093a:2601
[  973.141414][T17533] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.148738][T17533] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.258317][   T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  973.288186][   T24] usb 2-1: device descriptor read/8, error -71
[  973.310624][T17533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  973.321293][T17533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  973.425054][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  973.459175][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  973.500552][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  973.630449][T17488] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  973.648580][ T5884] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  974.112513][   T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  974.168251][ T5884] pac7311 3-1:2.219: probe with driver pac7311 failed with error -110
[  974.169088][T13009] Bluetooth: hci5: unexpected event for opcode 0x1003
[  974.184548][T13009] Bluetooth: hci5: SCO packet for unknown connection handle 200
[  974.189431][   T24] usb 2-1: device descriptor read/8, error -71
[  974.317978][   T24] usb usb2-port1: unable to enumerate USB device
[  974.336413][T17546] 8021q: adding VLAN 0 to HW filter on device bond1
[  974.500964][T14644] usb 3-1: USB disconnect, device number 89
[  975.287806][  T935] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  975.354489][T17569] FAULT_INJECTION: forcing a failure.
[  975.354489][T17569] name failslab, interval 1, probability 0, space 0, times 0
[  975.384117][T17569] CPU: 1 UID: 0 PID: 17569 Comm: syz.2.3204 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.384140][T17569] Tainted: [L]=SOFTLOCKUP
[  975.384144][T17569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  975.384151][T17569] Call Trace:
[  975.384155][T17569]  <TASK>
[  975.384160][T17569]  dump_stack_lvl+0x16c/0x1f0
[  975.384183][T17569]  should_fail_ex+0x512/0x640
[  975.384198][T17569]  ? fs_reclaim_acquire+0xae/0x150
[  975.384212][T17569]  should_failslab+0xc2/0x120
[  975.384226][T17569]  __kmalloc_noprof+0xeb/0x910
[  975.384241][T17569]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  975.384256][T17569]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  975.384268][T17569]  tomoyo_realpath_from_path+0xc2/0x6e0
[  975.384281][T17569]  ? tomoyo_profile+0x47/0x60
[  975.384296][T17569]  tomoyo_path_number_perm+0x245/0x580
[  975.384313][T17569]  ? tomoyo_path_number_perm+0x237/0x580
[  975.384331][T17569]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  975.384349][T17569]  ? find_held_lock+0x2b/0x80
[  975.384374][T17569]  ? find_held_lock+0x2b/0x80
[  975.384386][T17569]  ? hook_file_ioctl_common+0x144/0x410
[  975.384403][T17569]  ? __fget_files+0x20e/0x3c0
[  975.384420][T17569]  security_file_ioctl+0x9b/0x240
[  975.384434][T17569]  __x64_sys_ioctl+0xb7/0x210
[  975.384448][T17569]  do_syscall_64+0xcd/0xf80
[  975.384464][T17569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.384475][T17569] RIP: 0033:0x7f8c06d8f749
[  975.384485][T17569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  975.384495][T17569] RSP: 002b:00007f8c07bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  975.384506][T17569] RAX: ffffffffffffffda RBX: 00007f8c06fe5fa0 RCX: 00007f8c06d8f749
[  975.384513][T17569] RDX: 0000200000000140 RSI: 0000000040085112 RDI: 0000000000000003
[  975.384520][T17569] RBP: 00007f8c07bd7090 R08: 0000000000000000 R09: 0000000000000000
[  975.384526][T17569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.384533][T17569] R13: 00007f8c06fe6038 R14: 00007f8c06fe5fa0 R15: 00007ffcb61004c8
[  975.384547][T17569]  </TASK>
[  975.384551][T17569] ERROR: Out of memory at tomoyo_realpath_from_path.
[  975.608300][T14644] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  975.617606][  T935] usb 1-1: Using ep0 maxpacket: 16
[  975.627157][  T935] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  975.641241][  T935] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  975.655965][  T935] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  975.669005][  T935] usb 1-1: config 0 interface 0 has no altsetting 0
[  975.687278][  T935] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  975.710510][  T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.730703][  T935] usb 1-1: Product: syz
[  975.740795][  T935] usb 1-1: Manufacturer: syz
[  975.745384][  T935] usb 1-1: SerialNumber: syz
[  975.761401][  T935] usb 1-1: config 0 descriptor??
[  975.789858][T14644] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  975.801945][T14644] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  975.827132][T14644] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  975.840726][T17559] futex_wake_op: syz.5.3200 tries to shift op by -1; fix this program
[  975.873264][T14644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  975.881781][T14644] usb 2-1: SerialNumber: syz
[  976.282609][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  976.282645][   T30] audit: type=1326 audit(1765054739.247:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243b8f749 code=0x7ffc0000
[  976.387129][  T935] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input131
[  976.408866][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  976.421479][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  976.430399][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  976.444782][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  976.888643][   T30] audit: type=1326 audit(1765054739.287:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243b8f749 code=0x7ffc0000
[  976.915560][   T30] audit: type=1326 audit(1765054739.337:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8243b8f749 code=0x7ffc0000
[  976.946703][   T30] audit: type=1326 audit(1765054739.337:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243b8f749 code=0x7ffc0000
[  976.948417][T17561] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  976.970257][   T30] audit: type=1326 audit(1765054739.337:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243b8f749 code=0x7ffc0000
[  976.970300][   T30] audit: type=1326 audit(1765054739.337:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243b8f34b code=0x7ffc0000
[  976.970358][   T30] audit: type=1326 audit(1765054739.337:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243b8f34b code=0x7ffc0000
[  977.041976][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  977.136459][   T30] audit: type=1326 audit(1765054739.337:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243b8f34b code=0x7ffc0000
[  977.161913][   T30] audit: type=1326 audit(1765054739.337:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243b8f34b code=0x7ffc0000
[  977.278816][   T30] audit: type=1326 audit(1765054739.337:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.0.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243b8f34b code=0x7ffc0000
[  977.348259][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  977.416185][T17592] netlink: 'syz.5.3210': attribute type 10 has an invalid length.
[  977.424139][T17592] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  977.434980][T17592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  977.851095][  T935] usb 1-1: USB disconnect, device number 118
[  978.157673][ T5928] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  978.249196][T13009] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  978.264803][T13009] Bluetooth: hci5: Injecting HCI hardware error event
[  978.282195][T13009] Bluetooth: hci5: hardware error 0x00
[  978.424279][T14644] usb 2-1: 0:2 : does not exist
[  978.430657][T14644] usb 2-1: unit 5 not found!
[  978.442837][T14644] usb 2-1: USB disconnect, device number 91
[  978.449126][ T5928] usb 7-1: device descriptor read/64, error -71
[  978.758557][ T5928] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  978.914980][ T5928] usb 7-1: device descriptor read/64, error -71
[  979.055848][ T5928] usb usb7-port1: attempt power cycle
[  979.672051][T17624] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3218'.
[  979.798535][ T5928] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  979.927907][ T5928] usb 7-1: device descriptor read/8, error -71
[  980.178007][ T5928] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  980.257061][ T5928] usb 7-1: device descriptor read/8, error -71
[  980.357417][T13009] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  980.397466][ T5928] usb usb7-port1: unable to enumerate USB device
[  981.975771][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'.
[  984.987735][T17694] netlink: 'syz.2.3237': attribute type 10 has an invalid length.
[  984.997024][T17694] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.004123][T17694] bridge0: port 2(bridge_slave_1) entered listening state
[  985.011388][T17694] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.018462][T17694] bridge0: port 1(bridge_slave_0) entered listening state
[  985.053388][T17694] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  985.696864][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  985.696879][   T30] audit: type=1400 audit(1765054748.648:2621): avc:  denied  { setopt } for  pid=17706 comm="syz.1.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  986.603487][   T30] audit: type=1400 audit(1765054749.558:2622): avc:  denied  { ioctl } for  pid=17720 comm="syz.0.3246" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  986.874922][   T30] audit: type=1400 audit(1765054749.828:2623): avc:  denied  { bind } for  pid=17722 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  987.015860][   T30] audit: type=1800 audit(1765054749.968:2624): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3243" name="file0" dev="fuse" ino=0 res=0 errno=0
[  987.540589][T17739] Invalid source name
[  987.544890][T17739] UBIFS error (pid: 17739): cannot open "./file0", error -22
[  988.298318][   T30] audit: type=1400 audit(1765054751.248:2625): avc:  denied  { read } for  pid=17743 comm="syz.6.3251" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  988.329283][   T30] audit: type=1400 audit(1765054751.248:2626): avc:  denied  { open } for  pid=17743 comm="syz.6.3251" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  988.527701][  T182] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  988.738041][  T182] usb 3-1: Using ep0 maxpacket: 8
[  988.754592][  T182] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  988.767462][  T182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.795713][  T182] pvrusb2: Hardware description: Terratec Grabster AV400
[  988.803504][  T182] pvrusb2: **********
[  988.808643][  T182] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  988.819818][  T182] pvrusb2: Important functionality might not be entirely working.
[  988.829005][  T182] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  988.872758][  T182] pvrusb2: **********
[  988.995741][ T2336] pvrusb2: Invalid write control endpoint
[  989.095995][ T2336] pvrusb2: Invalid write control endpoint
[  989.109565][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  989.130458][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  989.144933][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  989.146099][T17757] tc_dump_action: action bad kind
[  989.189103][ T2336] pvrusb2: Device being rendered inoperable
[  989.220576][   T24] usb 3-1: USB disconnect, device number 90
[  989.228782][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  989.600307][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  989.662361][ T2336] pvrusb2: Attached sub-driver cx25840
[  989.678749][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  989.716582][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  990.000028][T17762] futex_wake_op: syz.1.3258 tries to shift op by -1; fix this program
[  990.150063][  T182] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  990.548586][  T182] usb 7-1: Using ep0 maxpacket: 16
[  990.555748][  T182] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  990.566223][  T182] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  990.736788][  T182] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  990.746509][  T182] usb 7-1: config 0 interface 0 has no altsetting 0
[  990.838320][  T182] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  990.903560][  T182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.936924][  T182] usb 7-1: Product: syz
[  990.941327][  T182] usb 7-1: Manufacturer: syz
[  990.979439][  T182] usb 7-1: SerialNumber: syz
[  991.037142][  T182] usb 7-1: config 0 descriptor??
[  991.323611][   T30] audit: type=1326 audit(1765054754.248:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  991.400768][  T182] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input132
[  991.411297][   T30] audit: type=1326 audit(1765054754.248:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  991.630299][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  991.741714][   T30] audit: type=1326 audit(1765054754.348:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  991.818052][T17803] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3261'.
[  991.828895][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.846884][   T30] audit: type=1326 audit(1765054754.348:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  991.867029][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.871568][   T30] audit: type=1326 audit(1765054754.728:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c058df90 code=0x7ffc0000
[  991.924724][T17766] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  991.972359][ T5171] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  992.009047][   T30] audit: type=1326 audit(1765054754.968:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  992.039426][T14644] usb 7-1: USB disconnect, device number 12
[  992.063493][   T30] audit: type=1326 audit(1765054754.988:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  992.107745][   T30] audit: type=1326 audit(1765054754.998:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5c05865e7 code=0x7ffc0000
[  992.243751][   T30] audit: type=1326 audit(1765054754.998:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5c052b829 code=0x7ffc0000
[  992.284233][   T30] audit: type=1326 audit(1765054754.998:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.6.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c058f749 code=0x7ffc0000
[  992.569017][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  994.540945][T17844] SELinux: failed to load policy
[  994.809896][T17844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  995.719178][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  996.117631][   T10] usb 7-1: device descriptor read/64, error -71
[  996.397476][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  996.449170][T17869] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3276'.
[  996.586563][   T10] usb 7-1: device descriptor read/64, error -71
[  996.674169][T17872] netlink: 'syz.2.3275': attribute type 10 has an invalid length.
[  996.682322][T17872] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  996.693910][T17872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  997.119279][   T10] usb usb7-port1: attempt power cycle
[  997.629654][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  997.676525][   T10] usb 7-1: device descriptor read/8, error -71
[  997.918617][   T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  997.966451][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  998.135752][   T24] usb 3-1: Using ep0 maxpacket: 16
[  998.183076][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  998.202552][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0
[  998.256375][   T24] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e
[  998.265431][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.310872][   T24] usb 3-1: Product: syz
[  998.315121][   T24] usb 3-1: Manufacturer: syz
[  998.325163][   T10] usb 7-1: device descriptor read/8, error -71
[  998.377330][   T24] usb 3-1: SerialNumber: syz
[  998.458922][   T10] usb usb7-port1: unable to enumerate USB device
[  998.477055][   T24] usb 3-1: config 0 descriptor??
[  998.580320][T17893] netlink: 'syz.5.3281': attribute type 10 has an invalid length.
[  998.588394][T17893] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  998.598223][T17893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  999.188671][   T24] opticon 3-1:0.0: opticon converter detected
[  999.422448][   T24] usb 3-1: opticon converter now attached to ttyUSB0
[ 1000.065328][   T24] usb 3-1: USB disconnect, device number 91
[ 1000.208380][   T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[ 1000.224863][   T24] opticon 3-1:0.0: device disconnected
[ 1003.209577][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3292'.
[ 1004.525324][T17951] Invalid source name
[ 1004.529633][T17951] UBIFS error (pid: 17951): cannot open "./file0", error -22
[ 1004.534584][T17951] overlayfs: failed lookup in lower (newroot/77, name='file0', err=-40): overlapping layers
[ 1004.995187][T17953] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3297'.
[ 1006.565687][   T31] INFO: task syz.3.1880:12641 blocked for more than 143 seconds.
[ 1006.600901][   T31]       Tainted: G             L      syzkaller #0
[ 1006.630419][   T31]       Blocked by coredump.
[ 1006.637433][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1006.658775][   T31] task:syz.3.1880      state:D stack:26120 pid:12641 tgid:12641 ppid:5809   task_flags:0x40044c flags:0x00080003
[ 1006.724225][   T31] Call Trace:
[ 1006.738098][   T31]  <TASK>
[ 1006.757016][   T31]  ? __schedule+0x10b9/0x6150
[ 1006.774320][   T31]  __schedule+0x1139/0x6150
[ 1006.803921][   T31]  ? __pfx___schedule+0x10/0x10
[ 1006.929556][   T31]  ? find_held_lock+0x2b/0x80
[ 1006.957575][   T31]  ? schedule+0x2d7/0x3a0
[ 1006.985809][   T31]  schedule+0xe7/0x3a0
[ 1006.997914][   T31]  schedule_timeout+0x257/0x290
[ 1007.020881][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1007.043728][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1007.073155][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1007.100353][   T31]  do_wait_for_common+0x2d7/0x4c0
[ 1007.122228][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1007.148117][   T31]  ? __pfx_do_wait_for_common+0x10/0x10
[ 1007.170855][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1007.185824][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1007.191413][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1007.647378][   T31]  ? __flush_work+0x4d0/0xcc0
[ 1007.668864][   T31]  wait_for_completion+0x49/0x60
[ 1007.692136][   T31]  __flush_work+0x7d7/0xcc0
[ 1007.705074][   T31]  ? __pfx___flush_work+0x10/0x10
[ 1007.733317][   T31]  ? try_to_grab_pending+0x450/0x850
[ 1007.744207][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1007.755586][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1007.800451][   T31]  __cancel_work_sync+0x10c/0x130
[ 1007.814641][   T31]  hci_cmd_sync_clear+0x33/0x100
[ 1007.834685][   T31]  hci_unregister_dev+0x1cc/0x640
[ 1007.846755][   T31]  vhci_release+0x17d/0x230
[ 1007.852170][   T31]  ? __pfx_vhci_release+0x10/0x10
[ 1007.858336][   T31]  __fput+0x402/0xb70
[ 1007.863466][   T31]  task_work_run+0x150/0x240
[ 1007.870276][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1007.876619][   T31]  do_exit+0x87f/0x2bd0
[ 1007.881946][   T31]  ? __pfx_do_exit+0x10/0x10
[ 1007.942605][   T31]  ? cgroup_update_frozen_flag+0x107/0x210
[ 1007.960066][   T31]  ? find_held_lock+0x2b/0x80
[ 1007.977531][   T31]  do_group_exit+0xd3/0x2a0
[ 1007.989408][   T31]  get_signal+0x2671/0x26d0
[ 1008.000167][   T31]  ? __pfx_get_signal+0x10/0x10
[ 1008.015139][   T31]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 1008.027884][   T31]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1008.056990][   T31]  ? get_timespec64+0x147/0x240
[ 1008.062340][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1008.071085][   T31]  ? __x64_sys_clock_nanosleep+0x35e/0x4a0
[ 1008.078190][   T31]  exit_to_user_mode_loop+0x8c/0x540
[ 1008.083700][   T31]  do_syscall_64+0x4ee/0xf80
[ 1008.089450][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.095523][   T31] RIP: 0033:0x7f4c607c2005
[ 1008.150905][   T31] RSP: 002b:00007f4c5e9f5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 1008.169515][   T31] RAX: fffffffffffffdfc RBX: 00007f4c609e5fa0 RCX: 00007f4c607c2005
[ 1008.189164][   T31] RDX: 00007f4c5e9f5fc0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1008.205761][   T31] RBP: 00007f4c60813f91 R08: 0000000000000000 R09: 0000000000000000
[ 1008.223121][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1008.243156][   T31] R13: 00007f4c609e6038 R14: 00007f4c609e5fa0 R15: 00007ffef94d93a8
[ 1008.262762][   T31]  </TASK>
[ 1008.283294][   T31] 
[ 1008.283294][   T31] Showing all locks held in the system:
[ 1008.311946][   T31] 1 lock held by khungtaskd/31:
[ 1008.329892][   T31]  #0: ffffffff8e3c9460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1008.342700][   T31] 2 locks held by getty/5574:
[ 1008.360027][   T31]  #0: ffff888036b110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1008.378826][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1008.397249][   T31] 3 locks held by kworker/u9:4/5817:
[ 1008.406269][   T31]  #0: ffff888029d0c948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[ 1008.424837][   T31]  #1: ffffc90003e97c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[ 1008.446351][   T31]  #2: ffff888029290ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[ 1008.456792][   T31] 3 locks held by syz.6.3299/17957:
[ 1008.463175][   T31] 
[ 1008.474116][   T31] =============================================
[ 1008.474116][   T31] 
[ 1008.491272][   T31] NMI backtrace for cpu 1
[ 1008.491284][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1008.491300][   T31] Tainted: [L]=SOFTLOCKUP
[ 1008.491304][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1008.491310][   T31] Call Trace:
[ 1008.491314][   T31]  <TASK>
[ 1008.491318][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1008.491337][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1008.491356][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1008.491370][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1008.491398][   T31]  watchdog+0xf14/0x1140
[ 1008.491425][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1008.491446][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1008.491466][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1008.491489][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1008.491508][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1008.491529][   T31]  kthread+0x3c5/0x780
[ 1008.491553][   T31]  ? __pfx_kthread+0x10/0x10
[ 1008.491580][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1008.491601][   T31]  ? __pfx_kthread+0x10/0x10
[ 1008.491626][   T31]  ret_from_fork+0x983/0xb10
[ 1008.491649][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1008.491681][   T31]  ? __switch_to+0x7af/0x10d0
[ 1008.491705][   T31]  ? __pfx_kthread+0x10/0x10
[ 1008.491732][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1008.491772][   T31]  </TASK>
[ 1008.491780][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1008.629490][    C0] NMI backtrace for cpu 0
[ 1008.629506][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1008.629526][    C0] Tainted: [L]=SOFTLOCKUP
[ 1008.629531][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1008.629539][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1008.629561][    C0] Code: c6 6e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 38 22 00 fb f4 <e9> cc 2f 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1008.629574][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1008.629586][    C0] RAX: 0000000005d8f003 RBX: 0000000000000000 RCX: ffffffff8b6826d9
[ 1008.629595][    C0] RDX: 0000000000000000 RSI: ffffffff8dac0c73 RDI: ffffffff8bf22a80
[ 1008.629604][    C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed101708673d
[ 1008.629613][    C0] R10: ffff8880b84339eb R11: 00000000ffffffff R12: 0000000000000000
[ 1008.629622][    C0] R13: ffffffff8e097a80 R14: ffffffff908750d0 R15: 0000000000000000
[ 1008.629631][    C0] FS:  0000000000000000(0000) GS:ffff888124956000(0000) knlGS:0000000000000000
[ 1008.629646][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1008.629655][    C0] CR2: 0000001b2f201ff8 CR3: 000000003495a000 CR4: 00000000003526f0
[ 1008.629664][    C0] Call Trace:
[ 1008.629670][    C0]  <TASK>
[ 1008.629675][    C0]  default_idle+0x13/0x20
[ 1008.629694][    C0]  default_idle_call+0x6c/0xb0
[ 1008.629720][    C0]  do_idle+0x38d/0x510
[ 1008.629738][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1008.629755][    C0]  cpu_startup_entry+0x4f/0x60
[ 1008.629770][    C0]  rest_init+0x16b/0x2b0
[ 1008.629782][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1008.629798][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1008.629814][    C0]  start_kernel+0x3f6/0x4d0
[ 1008.629828][    C0]  x86_64_start_reservations+0x18/0x30
[ 1008.629842][    C0]  x86_64_start_kernel+0x130/0x190
[ 1008.629857][    C0]  common_startup_64+0x13e/0x148
[ 1008.629880][    C0]  </TASK>
[ 1015.477323][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1015.485140][    C1] bridge0: port 2(bridge_slave_1) entered learning state