last executing test programs:

1m53.382062211s ago: executing program 1 (id=291):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0xa, 0x3, 0xf2c)
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x380002, @dev={0xfe, 0x80, '\x00', 0x34}, 0x692}, 0x1c)
sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054)
io_destroy(0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
socket(0x40000000015, 0x5, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="00000034347f3da3797a18fb6ad6ec9e0008d876e4eafc171f2e5100748aa9dafe67bc04dd0000000000000109022400010000a008090400fe01030001000921f100bd45fa"], 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000040)='statm\x00')
pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

1m50.081640615s ago: executing program 1 (id=302):
r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403060101040505072404050100"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfeffff7f, 0xae, 0xfffffff9, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010)
openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000002240), 0x80)
r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb3)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff)

1m46.316117493s ago: executing program 1 (id=313):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x1f4, 0x6, 0x8, 0x1b}, 0x9c)

1m45.147888314s ago: executing program 1 (id=316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1m44.851699291s ago: executing program 1 (id=319):
socket$packet(0x11, 0x3, 0x300)
r0 = timerfd_create(0x7, 0x0)
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0)
syz_open_procfs(0x0, 0x0)
fanotify_init(0xa00, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f856f5f62617461647600600064805c0003800c000180080001000000000030000180080001000ec5f4fffdf1cc3ece0000000c000200657468746f6f6c0004000300080002002d7d05000400030008000100080000001c0038800400030008000100040000000b000200"], 0x8c}}, 0x0)
r7 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000180)={0x990000, 0x7, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa20934, 0xfffffffb, '\x00', @p_u32=0x0}})

1m44.218349859s ago: executing program 1 (id=321):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)={[0x4]}, 0x8)

1m43.074872326s ago: executing program 32 (id=321):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)={[0x4]}, 0x8)

26.963903631s ago: executing program 5 (id=571):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000200)={0xfffffff8, [[0x5, 0x80000001, 0x40020, 0x0, 0x7fff, 0x3, 0xfffffffe, 0x206], [0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x940f, 0x0, 0x7], [0x2, 0x2, 0x5, 0x3, 0x900, 0x0, 0x1, 0x4571]], '\x00', [{0x0, 0x1, 0x1}, {0x2, 0x1}, {0x83, 0x80000}, {0x9, 0x4}, {0x2, 0xb}, {0x38}, {0xa5, 0x230d}, {}, {0x0, 0xbf2}, {0x4000000}, {0x80000000, 0x4}, {0x0, 0x1}], '\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5000000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0x18, 0x7, 0x81, 0xa9, 0x4, 0x0, 0x0, 0x40000002}, {0x8, 0x5, 0x0, 0x0, 0x41, 0xf8, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x11, 0x3, 0xfe, 0x80, 0xf6, 0x80000000007}], 0x205})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x20, 0xa00001, 0xffffffff, 0x8, 0x0, 0xfffffe0000000005, 0xfa11, 0x8000}, 0x0)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r10, 0x0, &(0x7f00000003c0), 0x180000)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e2c9", @ANYRES16=r9, @ANYBLOB="10002bbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x48010)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00000e0002006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

25.931167666s ago: executing program 5 (id=573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

24.772537154s ago: executing program 5 (id=576):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
io_setup(0x5, &(0x7f0000000180)=<r1=>0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", <r3=>0xffffffffffffffff})
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x1})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040))
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x18, 0x1410, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8090}, 0x10)

23.071358972s ago: executing program 5 (id=582):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000000)=0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7a000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c000280080003400000000608000240000000020800014000000009200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0xb429bbfafb29b82c)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x4, &(0x7f00000193c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630118000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
r4 = socket(0x1, 0x3, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@index_off}]})

21.128100663s ago: executing program 5 (id=590):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1})

20.721925081s ago: executing program 5 (id=591):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x10)
mkdir(0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x800, 0x4, 0xf0})
mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x20)
openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="189702a23805e4e2ee6a75a30000000038814eba8f5aafebfa00000000000061191800400000009500"/53], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="e03e03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bdc11c0fa33e0029f4efb72862b2d91861bb236fb60863b7d3a7f72ef49d8fbd12faa63e0c573a280abb1fa96da1e371f3fede615a876f5ded5a3879eda54869894313e35908450d6441f3b8216dffb9914cd463af31c76c650b8a3377a66347f1d4013b21d2d39c097a658575c096f77ab24f443500503bc41ae629f71303d47334e214bd47fc1f1ae415b66a56068929cd2355a70331eb72cba7caf19dbc6f564ef42aead00339caa38b33103c9caa03579a3bf2eed4ed205971ea4c", 0xea}, {&(0x7f00000005c0)="4e8359514276c359aea3a4de487fdd73972a45b271e4f5a00935bcb3f9ab42e93d9054567d694a0bf71e5d6273359a86c8faf414764cdf7523caa6b6383fcaf69717a67a82b813d818038ccd649ec4761d31c7c60854fb75e5ee56d30762a00d58efedb54cb386afbb1b3e43b3aea1a08d41adb43152c73a2254a03ea275e744de5f6d4a", 0x84}], 0x2}, 0x8865)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000006, 0xc276, 0x0, 0xfffffffffffffffb, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r7, 0x40187013, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/42)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x20, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0})

20.309471379s ago: executing program 33 (id=591):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x10)
mkdir(0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x800, 0x4, 0xf0})
mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x20)
openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="189702a23805e4e2ee6a75a30000000038814eba8f5aafebfa00000000000061191800400000009500"/53], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="e03e03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bdc11c0fa33e0029f4efb72862b2d91861bb236fb60863b7d3a7f72ef49d8fbd12faa63e0c573a280abb1fa96da1e371f3fede615a876f5ded5a3879eda54869894313e35908450d6441f3b8216dffb9914cd463af31c76c650b8a3377a66347f1d4013b21d2d39c097a658575c096f77ab24f443500503bc41ae629f71303d47334e214bd47fc1f1ae415b66a56068929cd2355a70331eb72cba7caf19dbc6f564ef42aead00339caa38b33103c9caa03579a3bf2eed4ed205971ea4c", 0xea}, {&(0x7f00000005c0)="4e8359514276c359aea3a4de487fdd73972a45b271e4f5a00935bcb3f9ab42e93d9054567d694a0bf71e5d6273359a86c8faf414764cdf7523caa6b6383fcaf69717a67a82b813d818038ccd649ec4761d31c7c60854fb75e5ee56d30762a00d58efedb54cb386afbb1b3e43b3aea1a08d41adb43152c73a2254a03ea275e744de5f6d4a", 0x84}], 0x2}, 0x8865)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000006, 0xc276, 0x0, 0xfffffffffffffffb, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r7, 0x40187013, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/42)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x20, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0})

11.786844814s ago: executing program 3 (id=613):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0, 0x70}, 0x1, 0x400000000000000}, 0x0)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000))
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa000800bc41d14286078bff0001907800000000ffffffffe0009078fffd000062c272fabd74b471b372"], 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
syz_open_dev$vivid(0x0, 0x1, 0x2)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r5 = dup2(r2, r2)
socket(0x29, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
futex(&(0x7f00000000c0)=0x1, 0x5, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, &(0x7f0000000080))
r7 = socket(0x2b, 0x1, 0x1)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c)
sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

10.45085024s ago: executing program 0 (id=616):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_create1(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40)
ftruncate(r5, 0x2007ffd)
sendfile(r3, r4, 0x0, 0x1000a3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000380), 0xb91, 0xc02)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f00000003c0)={0x1, 0x7, 0x1})
r8 = socket(0x22, 0x2, 0x5)
getpeername$inet6(r8, 0x0, 0x0)

9.909328081s ago: executing program 3 (id=620):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000"], 0x38}}, 0x48c0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fcntl$getown(r2, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x66, 0x0)
r4 = gettid()
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x10}, 0x8)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000300)={0xf, 0x1, 'client1\x00', 0x80000004, "48474196d75985e1", "b3dd5b714cee2c979551b28f37a4819119dc09b431e422253d95f73c29e7ca5f", 0x5, 0x5})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00000000d0a01080000000000000000070000000900010073797a31000000009400038090000080500007800800010066696200440002800800034000000001080003400000000608000340000000000800014000000001080001400000000208000140000000160800014000000008080003400000001a3c0001802000028008000180ffffffff08000340000000020900020073797a30007f000017000100c4a8916381f3a48f4a6bd19c533e8b6ade7044000900010073797a31000000df"], 0xc0}, 0x1, 0x0, 0x0, 0x400004c}, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000038000000138f31e3d99d5ddde2af77119a4001c00128009000100766c616e000000000c000280040004800400038014000300766c616e300000000000000004000000"], 0x50}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x4, r4})
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r9, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)

8.69390046s ago: executing program 0 (id=621):
syz_clone3(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x6, 0x82}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x1e, 0x0}, 0x4)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51b1", 0xf2}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859a", 0x35}], 0x3, &(0x7f0000000400)}, 0x4000042)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x34401)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
open$dir(&(0x7f0000000100)='./file1\x00', 0x604c2, 0x40)

7.822573966s ago: executing program 3 (id=624):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket(0x10, 0x803, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r6 = socket$kcm(0x29, 0x2, 0x0)
writev(r6, &(0x7f0000000480)=[{&(0x7f00000001c0)="13", 0x1}], 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4})
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.713557755s ago: executing program 2 (id=625):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5)

6.225712788s ago: executing program 2 (id=626):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r2 = syz_socket_connect_nvme_tcp()
recvfrom$inet_nvme(r2, &(0x7f00000002c0)=""/41, 0x29, 0x10100, &(0x7f0000000400)=@sco, 0x80)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01", 0xd4}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859a", 0x35}], 0x3, &(0x7f0000000400)}, 0x4000042)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3464)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x7fffffffffffffff, 0xf, 0x7})
r8 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000300)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x2c020400)
syz_io_uring_submit(r9, r10, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x5dd882})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100))
timer_create(0x0, 0x0, 0x0)
io_uring_enter(r8, 0x7277, 0x0, 0x0, 0x0, 0x0)

5.767793144s ago: executing program 0 (id=628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000003c0))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

4.737756785s ago: executing program 0 (id=629):
socket(0xf, 0x1, 0x7ff)
syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
r4 = socket$inet(0x10, 0x3, 0x40000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0400"/20, @ANYRESHEX=r6, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00c24700ac1180913766b7f17175b292c8393d5560c521151f1f14352d4be3de6645cecc9272c2c9781091b60de089c83e49df1489e3842619ca9ab197a5b41bbc315f16eab0491635134d89c1ee432f71806da239ccfc31a809ca35eb94df4e2ee17714fe53401732233de035dc2acab1fd28d7ae7ddae9d86e957e1e393716bb6ac5f8fd8f622db30e4063b617b03244d94dc07ec07acbdc0b606792a3b1b7e56754e06a9b6ef2eef36c57ba368b5a2d3cd75520b6bf893682f223827ed36ab48eeced0a4a024b7effe63dc57877061478945ce80bec3fb898f64e029a64e6652762cd195cfe5a6ef246a2707773", @ANYRES32=r11, @ANYBLOB], 0x54}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60040}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x30}}, 0x0)
accept4(r3, 0x0, 0x0, 0x800)

3.856285317s ago: executing program 2 (id=630):
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES64=<r0=>0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0)
close(0xffffffffffffffff)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r6])
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000540), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

3.705176944s ago: executing program 3 (id=631):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_create1(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40)
ftruncate(r4, 0x2007ffd)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000a3)

3.423929921s ago: executing program 2 (id=632):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x20}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) (fail_nth: 9)

3.042857795s ago: executing program 2 (id=634):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000400000001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r2, 0x11}, 0x38)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
readv(r0, &(0x7f0000001f40)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/50, 0x32}, {&(0x7f0000001b00)=""/12, 0xc}, {&(0x7f0000001b40)=""/247, 0xf7}, {&(0x7f0000001c40)=""/97, 0x61}, {&(0x7f0000001cc0)=""/151, 0x97}, {&(0x7f0000001d80)=""/159, 0x9f}, {&(0x7f0000001e40)=""/210, 0xd2}], 0xa)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x22, 0x34, {0x34, 0x23, "10df37263445c10697b87035de7bc5898ae6cd07fddc1ce8de134dc16eca2ad46ef0a53f9485835ec513f2a0cc204be2b85d"}}, &(0x7f00000002c0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "320978308f704c8e50096711aca44cf3041c3d950ed9546a7123cdbadffe7a5d3127c25025223e07b9ef39cb038f06e8d87e958d61f06711ef665c29dcdd8fce467c8fa7befb9f44e4f4455b26cc5ba6cd86f9d11d06628faebdf8d1119c1b68581bb2cf943348e1a925983da6f3d9f36cacb741d6f7db9cc22f14612c6feac3ffc13e9d50fbc266c1f81a6fcfcf4f07ab6ff1b71677613c6eaaab0cd187ffcc675276a7535ded8129ee3ea9"}}, &(0x7f0000000380)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xcc, "e2d66c99d9c57524340ed6502dd23c75"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x63, 0x5, '+\x00Z-', "df222d75"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x1, 0x5, 0xff, 0x8, 0x40, 0x6}}}, &(0x7f0000000880)={0x84, &(0x7f0000002040)={0x0, 0x3, 0xc2, "99e64885038e31e0955dbc70d59887baeb62f9f29fbfed00c3bdb54866327f1994cff4857d11f2ac8ffd99f596da4e539b0b11b94e3cb80b44d906537be1a05618f1aa03eea4788969a649719732bae64db6cb391f78620d0f8d75fee79239d959b4acd57c592c24c70daf9340574338a62b4571b961ef3f67356fc4ca31dffe27a0537ee30b579f0a57cf144cc0bd53f7cfa60b47baa50440ca4a53e5ddc83fe8c2f1a0e6371655794b35b9d64d5cd472dd6c634f659de8ae7026256767b553266f"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x7}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xff0f]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xab}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0xb, 0x2, "f6cb"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="5c4703335df7"}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "c454"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x59}})

2.967949094s ago: executing program 4 (id=635):
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0xdcc2, 0x100, 0x3, 0x6}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mremap(&(0x7f0000230000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x6}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0)
io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

2.915527254s ago: executing program 4 (id=636):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5)

2.841578993s ago: executing program 4 (id=637):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004081)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000000)=0x8)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e23, @local}})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2.749813525s ago: executing program 0 (id=638):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
r0 = socket$caif_stream(0x25, 0x1, 0x1)
mmap(&(0x7f00005d5000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x5c5e0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
migrate_pages(0x0, 0x4e, 0x0, 0x0)

2.507886269s ago: executing program 0 (id=639):
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
io_setup(0x5, &(0x7f0000000e80)=<r1=>0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}])
sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

2.094152004s ago: executing program 3 (id=640):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001f3f0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000750900005c0000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff74021000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
mq_notify(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x11, 0x0, r4, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@phonet={0x23, 0x0, 0x34, 0x10}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001480)="7f2925b1c89128cb23e13adab2b1d414b07ff068ce2595460d15d23580e833597d7de222a1910f728d518decdd0bbb5eee70635b5a206d7643dfca98ea8a755a9658037cfae209e418f60b591093e20f11a8f3117031ae66369f6c33268108adad568b9eca8d300ea4f1546af863ec9e1eac00a2c15882513649c8b48fdfad3e29af4515aa17d6175404c56d7f8b6341602897bf986ee782eea6109e5e1eeba2a3d981f490b665af1b3a465eb3919a285f9ef1ede5a7d68394e54174bdf1b3d1cfc59a2af80848a316e6417bf87dd8e65ee853b07df2e818c1daaba44e1fa438b16b5727ec1eac6f5e5cf796023c01f79905ef95a609a04a2434489fdb414f4b0c6b2a0e627a977c37e45d880f7c9e53c0bb8b7d94e9ab554b711bf11864bae0bfedbb7bdc70f273f1bbbd88f2a5515879ee86524b5e66ad695ccb76ee9712b7d77f9b4c8107d271d0ad29c1635b3a34f53076fabb5c2ae524b0a9ef9adde38d38aa6f34857e9f1b69cfb296a077f3eda98ba19bbdc74b6e37eec487ac888d2bc8ad6367f1bbfe2475146f2c8ed9aa284ca50a9df8889d37e678668c6b131a5d80b95f5324c1768468c5448e0f3733a6552ef2044347ee0bbdc6bc84107da86a843c2b3e5d9c760a1c9adaaf8bb1a431359c2c15d83f1e90201ca67ee58f4570e9e2b6e81417d9815867a5021c897632d1edbc54d98d2dde480dcc01e840f68dc27d2f5f00161bd17e34a12110d23ad4737e1fd63b6888caa70080281b452763f0130bdcdb576a7618bf4ad7b461d5e41750f60f4e3045b7a323ae26abf3caa7e4355be23f865cd861a9793fc1c1934c51e2ddb0d4ead623ce33690409487db95d1ae13e8ce3274dc65f8a5ba06ef1930d29133d5a1bc5ac313c05337fd3d1706b8bae422ccd3ad9bfc5dba19267e67b9c2c09be875e3142033fad5ab7033441815021057f016db52df2d276204d222c0573cacf85d228ac23d5f96b1018e4e1fce0ccbd92735692fc1130b4e7fd1bc71785dfed97e0edad54e54e698f39f0cde17ab2d62caf567394e58a260a48d1a69981a14f56fb9ac82868060421072c1a0c52e24d0b3e3d49198e6b7f938369552cb36b1507d699b0b7bfa95f13c4a309990da917de840c9fb0e87c79a5f42b854c43c389cec46f2b51c36398f7589a874f6e78e32efaa0a3149bb9b063acea63acd3cb02ecdfd0810ca9495581110c9fb87cf03f2b6c660d072bbb7880a79c3e75e8987627383972bfe150a2c05b4fb181c8a5efae4c8eb768eec5f7d8d12b4a5ff1defaa1937ba3358b3bca39a41ebdfa37788bc55ad002f02d0110b5f1372971f74add61aae79265d7e26c5403db5bd775a74f4e24ed917cd66c99e303058d6d9e7c8a84dde28d81c099dc3d7428e4757aecd0a8950463c1c411dc433a623d72ec18aa5fcae73decfb72f53a24a6515ff8d5c510cd80038e6df7153b54ad8148ff572595f949fa0fd5137cfd3ceded9258f2c8b17de1b64a916e3510b7f6d8a5c6238157fd142dbb57666109ea641468032bd7a1a845c893f6c680226e8b6b740cc351715bd9e8b0e19ca2f1593aace1dc32cb1807b14eb6adca5a27bbe5801dd7522ca8b3360e0e8853d7bea70b8c5180c573cd92ae513109b90504953f660178d8f320f30432da171570eaa2780f7fbad41d80fe6bdc4dafcbfd8bccf170a0d8e84c769c7d9f3559310a5933ab95445236d6c088f8adf1f03383db4597e884eab2016a13d01fce8109eb6cb47470191ce0a857beb6a2535c622b4423f0c5107e38742fd9d707a36f1fc8e0777be38d94f198accd801430be7193435c51acc52ac85a98397aa3d887d8072e1f36aa6215bce999ec8b460c3f8afb7918030472714589a89f2a359b98fbfe6e0085d853589c5031ae70a913457e71aada91fe950a5282d33b706e3199fae7874f8898be575acf90aea4f2761c6030265aaf67604cf13aa2b1b8680e5f0cdd1fcbc47f8ec6ef31b1b453e7f68a01f8cbe92d57d0150a94373dbe001595a2b15d9e1d8fd47a5b06edc09719ce93c8781dd50625e34abcc0fd507f778596044c0f986ba9ec911713b9dcaa85cbf1d2b2b2f571207eddc95d0efafbb78f4292f3de2af618b12ada604ef9ca380e9379e1bc98ffd362f816823cd262ec2d8f279bd062e1ebfc880afeceffdcc735a580d4ba18a1ecdad87153429460e6eb122bc5961eb828216d79167e86cbf67a4420bc0a33ada348de9f41c67b790d06a51cc76fa2fd787f5f42ed1fac02ecf9ad753e38d13ef7c46b03fc1a18ec5ca4853bb895502bf0f76bd0634f533efedb28af363b35d0d198157cf0c8daa8b3c78a985e6c134741bf5214a3b7836802fa7c941d9515a36a45b148472ec5e10e3e5dec0be330fe955bfbecab3c7d0651f6db15c51fe90a929c98cbcd61c6a848fa6b36b9d15881e7011616d4c8ae9f362550f12b07f41889813ebebfc7efebb90d1fc99059be82c2a1435097f0bd4c2cc0494796881d90f890891dfb54532ca44f2304648435a87e8d36169680a7aeb09cf88cb268c2d382c3e4d5809b4c9f122166b0d90865ade63f10af32dc3a4152d61e95060b2e073c13d36fe42a4ea59978842f8d707ea4c7bf2987f7007d1ecc6a69d160eb60670df7b8d471c7f7b4a65b187555b6b3b4cb8cb603b0c99a2d1c1a16197e14e7fcf11bbfc5689cc9f71685b42fdd5571df32e654ff15dc5420b5f3528511777018bab304dcbd42e1b9039bf57b031e1aedf6c3e2017af59f6ef454bcce96e5752e94a0ad7ec0e6adeb37ebf1c29c14a882c8e9f7675c7c05b81f645b9b5c1380bfe233f350b8868017ad95312e10f6cc73a75071706f731ad6e1440f189579871652d7abd788d5aebd61c263faa535a5ad6572ec8f0bbbec6dfa38179b21398a5a8bc949f713e7ff1f3446a0459b4bd36cbf14dbf78e5d46d16a04f31862ce79862cc3086ebd2cd7f2d194681174300246b866ee34beddf487b32cf166ec256f5106bfd6abc3c9636a4c5b9104a2c3cd4b639501b7a371a3bfe94bdbed2f6d58a08fa3fd0945442a81192e46dcb09dcc101e5e94d643ee67c0715aa6703911031527108696c6915661265a101af5b374e89819f5f2fc6945ceb3b11133b3d45c12b262c6de1c93e1fc137a8f7464e7116625ff7010ce1324acc75f9b27fed1e47a1ade65e7303625b980a9fdb907705bc27e354796073cee83112a2a4ec3269a37b95899b89f345529153f301afcc5771d714dc4561406dbffb43dd7281a8f3f3849fd3ebaf0d1643467656ed16d79bb715ca1df1ec0c28736458437cc4d90645ceefed29abf7e48ffde8acd837221503c276f14a05f7b7804b31adcff9a91c1fbd74184e989110a99d7d73055ea21cdeedf3dd56c2b6b78130644e8436c6596500f486a8252ef11b5e050fbb5f5951b3fe0a0522fe580867c5738c44ce7dea50923f1cd790192940138f68a33e1b8b5cad451977d9643af23cb902c7105551a81e050ee67b9f31eeb2acc2667ea6689279e686576a8b7c0fe1729930e894ce40281e5c4d8ad970a3a327b8f787d70b117606fdd7bc48456daacd22f0f3078891575831204d9e9f5f21f06a52e6cde1391fa9b5a13ae3ea3497ed20ec7ff71f40cbd1ecc853dc1f212eba5ff743cc211072140659a36f68a8399c200cae4ee399da44ff298a440d935cb77b248c319040bac5f6e420ed9542a43eda263fdf937a314d3479d750d39dac616158134403e266dc4d18fa4757e04d2ef73528e757c58b82935e9542b8bac59a68a848e40d15664ea40f9df98c17bbad4695e846f1b4702e90f105cbd735710c049387dea255d7011268b57f51a472d295c7759510abc8aaafc5b47f9adfb7f5c94ce35d3a17e17e20791d85db3083606b956d5420718cb9c72abbbd238da2d5d0543ac565c026116bc08c615587c95d8ecc88a8085d828e705a30c1ae67d34bcec24c2a461212f6a750e6e1eb7a9a3313a5903c8f0c6f3c07977a7903bb6c30d4673ae11d71a0b2d2f9a98616db97286cdfe46213c2be6862795d05baf0b2d967b083a3fb0b7d3ece6f9d493c4ea5ff6c5756e5d50bd6446180e7763036a6973089e287517a8f0d82a5ba4500ded179e3e2f1174788824ac7fc16109a9e66940c0e0cb4ae6d8fa9747f5abdc61d0309173d715f29dbf543785ff772897a0068757dc7fd5ab43b717896e8cd4c12772edbfe4ca3fe5fd9ff4fbaf9d618ff21f5e7f47982640e9fa601728c6c00cb44068a00133cb23b0c681645a81e913935931bbafecf181e7b91dcb572c414e8f12f1aaed2151607ff42e8fbd9b5a1690721f0cce81404b5a29c0649ce7bb3eb20d612ef27add2641721dd22e028d09e275ca9824c08cf08f2e5937212e688e52e0561cd0bf93145800d005dd32a29c9f3501ff4a6ef7389d9ac402ec1a27365bde5ca5ac80c355263ae5f1bfe3ca85e4f10525325482ef4b58bf59c64d1aac813c783b08101d81d4c7bd5d671d9663f89317127bf2227b9ac88a47b5b7ec8c42a86a0ba5cf04e78b28ec30eb3684112d47e3da36f119fe4a1fc37994d9cc52db8ea8ea55d6b778bf16ffb5fe7cc5af873d876ff425096653c27084a0241c6561e292b00ebc157ff8122f496c53516c665acaed2f420522889b067b44f34265cd68c290401e073984d0c82e28149f995f4f5b2a27d846aed0911abae7b3b6a243bace96651f8bfcd605261bac9695b6bd0fa22f63c61b5c3d247aaeaa8cb59640e82f216e67c7a5bb2ba104f3f46742bbb0e699c8271b95756fbdd8ccf28a1e327822ca89cbf4d06185a0670e0601a46a18ca816851e1e58491b0f360de9b7329152b5e28fb4448e30cd236005788d1708f83ebea19e7388d01f757f6c98b50d57f6015599c2f4e6220f020171167f7bad9247346e580bcba770ee6047efa6f70240d59489442d7629037d2f0f7dc36bc4e964713caed606998415a594e89b3c6267cb780689e918aff4132e5a9ce02cfa2a2737c58a2ee7a905924f448b5219df8cea20222dfc477bf2006f26d8ae36c55bf9e1015ca4af09c5936bafcd6c60c4c0f40f466bd434ec58cca584843a8c2a239152f8b6075f6361d4ee26ca349f725b0a4632fe9cc23bf88d430949f49ef72a3df0d5fe9ae5ed9f7f8303443f754ad5ad4bb19879b89a4fe7a7427081b905184f04bc9174ef921e93c4fca44b3b2cc46bdfb46772357a263dff6ede77de9f3ae501eb5ecd4773c43f46569e5dbb2c6ab54ab7d2d40385d07d48999662a86d77eab8350d5cde92623dc3a3f47c2d5177fd1f40a3aa6f7a069cec9cf04df61764940adca838d2f21e9fd1f0ba45e73358a9e58314cc12826f6a878efb18246dd39f7a9a2e438591546f7e9d23511ab3aad484280402e1667c0455b7959e36981d204931c2029e33b38b4dfbebf657114401574c78d8961ef5157b27fac5e0494bb0465fecc1105bf4a2cee74aea58a545248d1450b5887257f89a233d909a4c112dfe668517268293acdc773fa6db1b102e3fe14986d7f27071f0dd0cea247b0d781ac01c8582ca45ee52e2aca4cd55fe8e910d7c6ed53203d96d2e48002c354fbaa8317a2b447d2510e6bac83276518151cb8e65ba7ff184137e8ccaba18b9860747bc612a3b0f636d4c614b798a2a8a2087777203652898e31e33be4b2dba098e722d6efbf37a794c9ac65432df48dd5723cf21367990158ea54a7dd14edf62074b8406ad9c31f7eec7203408701a7f29294d8f1465949355e0951c9f0ebd0adf32dc23dfba625", 0x1000}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000480)="78e303a9b8dd7a44be6676a0ae193c91b11937f23f5135668c1a95a233a7eb87a66d649a21d1ba6dda7271b00a94e8857cbe72715ecb84046f22757e143e09d0f1baf8fa4d305ba89bad44f3f81bccf7fa83b97726f06d43edd6ad0f4843499eeab275c100cb51807a49537445b17dc59bca7b9139e4ce77883e905e2b317fc1fdedae75f591459d19f46aa50c1c6df145a1cc9d192765eb6430ec81fe", 0x9d}, {&(0x7f0000000100)="e3e17c036b629638dbd852b1e72a3d30497b2f621f29ab6f3dbe1ec62aefd6", 0x1f}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000000580)="805bde594b3ad517cfb7d1208da8e19f2368e00c7ca83c2fbe66cd2aac56177bcb77558649a735ecabe4feeda392894170b32c3e351cca4be5e39fe965c0a534c40fbc1dba6aea8dc40b7ec3ff969c1b11528930f151d1913af6d07fe60a30710fe1bd6673170c0837c1de1c0bfe7dc5d2b0e59651ecb49ad818c2d8b816b315f59a8d87bdf9fb49411ac3dcd4aa8a65a101117f819d98efbad08175daab0de6fb3d1ca199dbc40f", 0xa8}, {&(0x7f0000000640)="427c4bc67434fbd74670dc01f1d7f6ff7838ad4c0488852108af062edab90ddb4b846afca0a9b1759eb8f04bfc4fd3aaaec78fb8eb10e7cbbd5155075fee8f48ff532010f6aa5c0411d61194c96b7b2aa988f691b149e3af712a1aeb10f13bb2a5e1459ac158dd68b783ab9351c622d9906527cfdecf74094986352be71f7feae462e6632fd4f1749f04df7fe522a9dc82c44848d6c42096075108771802e7cf23db4e0f1e9d9e1f5291e4b611687943db6cc0ad9f9d74cff379e94b8054838fde1722b1c7da6a63c353eeba3ffce9708c01a41799c33880268264f349d0546479fed739efe11bf9fe32832ee6207cb6f1c1bbcb0160", 0xf6}, {&(0x7f0000000740)="87a31297674d34170f22532581e6240410ed32049b053ef544749031bcfaeaa8720778cbe8b12a35e360345a14e6108e1976fe310312453684c0ed6d8b9240eb4139e1a61bfc33d274405c3514781ea1f4197dcc5e5fd7d50e63641e96e97c49136443a09cac1c043403fe40d5f4ef6ec49f2a17eda6bc0eabf3ebe40a3c1b7647162905e8410d2eab5b808485f5523ed901248b3903c1d1043feb5d8002002670945a511f1b1d8d9517cd976acc16944166515624b44cbcff", 0xb9}, {&(0x7f00000009c0)="797cf76a8c67fb86c83999d1834d60d1087e814c9cb61809e622ae3c352e9d7d3f2ff0ac6a89db6524fad7131e8be5874cf077b6424cafd92d6f3dc93aa30cfeff9d39b3691c11f3f29f40b6885ed6dd54ea6ea60b58354c8e38cd1b213f9463063e4d971b1df569c5792249f3c23962e2a2913c9527a251e3ab89e24c967629f5a16dcd8814c03f4bc6ef1ae00f26", 0x8f}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000014010000070000007e822758723119b87cb8289730000000100000000000000000000000020000006e2fec2514551b969c2454b2810786c6f7fc9e75f279e325c8f1995d00000000000028008ce96efd0f017d9b5c6762a9a7e3f7c90000000000000e016fd2fd7845415ba092efd5be"], 0x78}, 0x0, 0x4008010})
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2)
readv(r10, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
write$char_usb(r0, 0x0, 0x0)

1.101933859s ago: executing program 3 (id=641):
r0 = socket(0x200000000000011, 0x2, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
tkill(0x0, 0xb)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_notify(r4, &(0x7f0000000200)={0x0, 0x8, 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

690.538525ms ago: executing program 4 (id=642):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000104010200000000000000000300000605000100010000000a000200000000fdf8"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x40040)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)

423.003951ms ago: executing program 2 (id=643):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
epoll_create(0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x4d5, 0x32}, 0x0, @in6=@remote, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0xe, 0x32, {0x32, 0x30, "1769628696b160a859e2e5c6f941b880d824d730c42773f11dda73d2b0798ff77d932c863a27ec2ac83264a15f3b5f78"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
socketpair(0x1d, 0x2ed035ffa2069931, 0x74, &(0x7f0000000100))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4c, &(0x7f0000000340)=0x63ba, 0x4)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0)
write$char_usb(r5, &(0x7f0000000800)="4eed8a00204b", 0x6)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x118)
socket$kcm(0x2, 0xa, 0x2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)

168.355098ms ago: executing program 4 (id=644):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x500, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

0s ago: executing program 4 (id=645):
syz_open_dev$vim2m(0x0, 0x7, 0x2)
sysinfo(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) (fail_nth: 9)

kernel console output (not intermixed with test programs):

64, error -71
[  139.511223][ T5983] usb usb2-port1: attempt power cycle
[  139.574075][ T1216] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  139.751072][ T5987] usb 5-1: USB disconnect, device number 5
[  139.757682][ T1216] usb 1-1: Using ep0 maxpacket: 8
[  139.767023][ T1216] usb 1-1: config 162 has an invalid interface number: 84 but max is 2
[  139.778502][ T1216] usb 1-1: config 162 has an invalid interface number: 3 but max is 2
[  139.788235][ T1216] usb 1-1: config 162 has no interface number 0
[  139.798678][ T1216] usb 1-1: config 162 has no interface number 1
[  139.811484][ T1216] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  139.827021][ T1216] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  139.838013][ T1216] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  139.852143][ T1216] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  139.852335][ T5983] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  139.865566][ T7167] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  139.887584][ T1216] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  139.900079][ T1216] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  139.915527][ T1216] usb 1-1: config 162 interface 84 has no altsetting 0
[  139.915967][ T5983] usb 2-1: device descriptor read/8, error -71
[  139.922789][ T1216] usb 1-1: config 162 interface 2 has no altsetting 0
[  139.943012][ T1216] usb 1-1: config 162 interface 3 has no altsetting 0
[  139.952286][ T1216] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  139.961399][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.969406][ T1216] usb 1-1: Product: syz
[  139.973817][ T1216] usb 1-1: Manufacturer: syz
[  139.978426][ T1216] usb 1-1: SerialNumber: syz
[  140.180226][ T5983] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  140.201441][ T5983] usb 2-1: device descriptor read/8, error -71
[  140.322323][ T5983] usb usb2-port1: unable to enumerate USB device
[  140.472259][ T1216] usb 1-1: USB disconnect, device number 8
[  141.331179][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[  141.983761][ T5983] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  141.994296][ T3092] usb 3-1: USB disconnect, device number 9
[  142.310251][ T5983] usb 2-1: Using ep0 maxpacket: 8
[  142.326519][ T5983] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  142.350844][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  142.350863][   T30] audit: type=1326 audit(1758002247.763:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869758eba9 code=0x7ffc0000
[  142.404485][ T5983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.443654][ T5983] usb 2-1: config 0 has no interface number 0
[  142.479513][ T5983] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  142.491284][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.500698][   T30] audit: type=1326 audit(1758002247.763:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869758eba9 code=0x7ffc0000
[  142.527309][ T5983] usb 2-1: Product: syz
[  142.531866][ T5983] usb 2-1: Manufacturer: syz
[  142.560296][ T5983] usb 2-1: SerialNumber: syz
[  142.584052][ T5983] usb 2-1: config 0 descriptor??
[  142.605017][ T5983] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  142.611983][ T5983] usb 2-1: No valid video chain found.
[  142.817543][ T7218] FAULT_INJECTION: forcing a failure.
[  142.817543][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.839312][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) 
[  142.839338][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  142.839348][ T7218] Call Trace:
[  142.839354][ T7218]  <TASK>
[  142.839361][ T7218]  dump_stack_lvl+0x16c/0x1f0
[  142.839389][ T7218]  should_fail_ex+0x512/0x640
[  142.839415][ T7218]  _copy_from_user+0x2e/0xd0
[  142.839441][ T7218]  copy_msghdr_from_user+0x98/0x160
[  142.839465][ T7218]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  142.839497][ T7218]  ___sys_sendmsg+0xfe/0x1d0
[  142.839519][ T7218]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.839572][ T7218]  __sys_sendmsg+0x16d/0x220
[  142.839594][ T7218]  ? __pfx___sys_sendmsg+0x10/0x10
[  142.839632][ T7218]  do_syscall_64+0xcd/0x4e0
[  142.839655][ T7218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.839672][ T7218] RIP: 0033:0x7f187b18eba9
[  142.839686][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.839703][ T7218] RSP: 002b:00007f187bf5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.839719][ T7218] RAX: ffffffffffffffda RBX: 00007f187b3d5fa0 RCX: 00007f187b18eba9
[  142.839730][ T7218] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  142.839739][ T7218] RBP: 00007f187bf5c090 R08: 0000000000000000 R09: 0000000000000000
[  142.839749][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.839758][ T7218] R13: 00007f187b3d6038 R14: 00007f187b3d5fa0 R15: 00007ffc52090958
[  142.839781][ T7218]  </TASK>
[  143.000865][   T92] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  143.162213][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.175536][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.225341][ T7229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  143.241458][   T30] audit: type=1400 audit(1758002248.623:432): avc:  denied  { remount } for  pid=7226 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  143.287485][   T92] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  143.381369][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.532378][   T92] usb 4-1: config 0 descriptor??
[  143.714536][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'.
[  144.067455][   T30] audit: type=1400 audit(1758002249.143:433): avc:  denied  { write } for  pid=7231 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  144.893735][ T5983] usb 2-1: USB disconnect, device number 17
[  145.964026][   T30] audit: type=1400 audit(1758002251.383:434): avc:  denied  { sqpoll } for  pid=7244 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  146.052701][   T92] usbhid 4-1:0.0: can't add hid device: -71
[  146.058640][   T92] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  146.073676][ T7251] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  146.095444][   T30] audit: type=1400 audit(1758002251.523:435): avc:  denied  { bind } for  pid=7244 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  146.116740][   T92] usb 4-1: USB disconnect, device number 9
[  146.172445][   T30] audit: type=1400 audit(1758002251.523:436): avc:  denied  { connect } for  pid=7244 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  146.598349][ T7261] serio: Serial port ptm0
[  148.333477][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'.
[  148.343770][   T30] audit: type=1400 audit(1758002253.763:437): avc:  denied  { create } for  pid=7283 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  148.411367][ T3585] bridge_slave_1: left allmulticast mode
[  148.437463][   T30] audit: type=1400 audit(1758002253.763:438): avc:  denied  { write } for  pid=7283 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  148.457988][ T3585] bridge_slave_1: left promiscuous mode
[  148.495062][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.578923][ T3585] bridge_slave_0: left allmulticast mode
[  148.590764][ T7292] random: crng reseeded on system resumption
[  148.600236][   T30] audit: type=1400 audit(1758002254.023:439): avc:  denied  { write } for  pid=7287 comm="syz.3.327" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  148.603536][ T3585] bridge_slave_0: left promiscuous mode
[  148.753534][   T30] audit: type=1400 audit(1758002254.023:440): avc:  denied  { open } for  pid=7287 comm="syz.3.327" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  149.058006][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.384081][   T30] audit: type=1400 audit(1758002254.783:441): avc:  denied  { bind } for  pid=7303 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.403207][    C1] vkms_vblank_simulate: vblank timer overrun
[  149.410396][   T92] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  149.521137][   T30] audit: type=1400 audit(1758002254.783:442): avc:  denied  { setopt } for  pid=7303 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.615608][   T92] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e
[  149.643574][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.644157][   T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.683483][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.691472][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.699980][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.745711][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.777492][   T30] audit: type=1400 audit(1758002255.203:443): avc:  denied  { mounton } for  pid=7318 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  149.793009][   T92] usb 4-1: Product: syz
[  149.876452][   T92] usb 4-1: Manufacturer: syz
[  149.980303][   T92] usb 4-1: SerialNumber: syz
[  150.028734][   T92] usb 4-1: config 0 descriptor??
[  150.149795][ T7327] serio: Serial port ptm0
[  150.435560][   T92] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  150.646285][   T92] pwc: Failed to set LED on/off time (-71)
[  150.669240][   T92] pwc: send_video_command error -71
[  150.700091][   T92] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  150.718046][   T92] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  150.760981][   T92] usb 4-1: USB disconnect, device number 10
[  150.773366][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.956431][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.092350][ T3585] bond0 (unregistering): Released all slaves
[  151.187359][ T3585] tipc: Left network mode
[  151.356073][   T30] audit: type=1400 audit(1758002256.783:444): avc:  denied  { setattr } for  pid=7348 comm="syz.0.337" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  151.655420][ T7359] FAULT_INJECTION: forcing a failure.
[  151.655420][ T7359] name failslab, interval 1, probability 0, space 0, times 0
[  151.668116][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.0.339 Not tainted syzkaller #0 PREEMPT(full) 
[  151.668141][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  151.668152][ T7359] Call Trace:
[  151.668159][ T7359]  <TASK>
[  151.668166][ T7359]  dump_stack_lvl+0x16c/0x1f0
[  151.668193][ T7359]  should_fail_ex+0x512/0x640
[  151.668220][ T7359]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  151.668242][ T7359]  should_failslab+0xc2/0x120
[  151.668263][ T7359]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  151.668280][ T7359]  ? __might_fault+0xe3/0x190
[  151.668296][ T7359]  ? __might_fault+0x13b/0x190
[  151.668312][ T7359]  ? getname_flags.part.0+0x4c/0x550
[  151.668342][ T7359]  getname_flags.part.0+0x4c/0x550
[  151.668370][ T7359]  getname_flags+0x93/0xf0
[  151.668388][ T7359]  user_path_at+0x24/0x60
[  151.668407][ T7359]  __x64_sys_mount+0x1fc/0x310
[  151.668431][ T7359]  ? __pfx___x64_sys_mount+0x10/0x10
[  151.668460][ T7359]  do_syscall_64+0xcd/0x4e0
[  151.668485][ T7359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.668503][ T7359] RIP: 0033:0x7efc1e78eba9
[  151.668517][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.668533][ T7359] RSP: 002b:00007efc1f548038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  151.668550][ T7359] RAX: ffffffffffffffda RBX: 00007efc1e9d6180 RCX: 00007efc1e78eba9
[  151.668562][ T7359] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000140
[  151.668573][ T7359] RBP: 00007efc1f548090 R08: 0000000000000000 R09: 0000000000000000
[  151.668583][ T7359] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[  151.668594][ T7359] R13: 00007efc1e9d6218 R14: 00007efc1e9d6180 R15: 00007ffd7b97eb28
[  151.668617][ T7359]  </TASK>
[  151.844103][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.853524][ T5173] Bluetooth: hci0: command tx timeout
[  152.037708][ T7367] sp0: Synchronizing with TNC
[  152.086319][ T7367] [U] è
[  152.091200][ T3585] hsr_slave_0: left promiscuous mode
[  152.102586][ T3585] hsr_slave_1: left promiscuous mode
[  152.120311][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.142571][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.845760][ T3585] team0 (unregistering): Port device team_slave_1 removed
[  152.912429][ T3585] team0 (unregistering): Port device team_slave_0 removed
[  152.952647][   T30] audit: type=1400 audit(1758002258.383:445): avc:  denied  { name_connect } for  pid=7383 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  153.002931][   T30] audit: type=1400 audit(1758002258.433:446): avc:  denied  { listen } for  pid=7383 comm="syz.4.343" lport=55529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  153.457115][ T7318] chnl_net:caif_netlink_parms(): no params data found
[  153.510305][   T92] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  153.675958][   T92] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  153.694004][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  153.705515][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  153.713247][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.725000][   T92] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  153.738518][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.738834][   T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.755936][   T92] usb 1-1: Product: syz
[  153.761229][   T92] usb 1-1: Manufacturer: syz
[  153.764291][ T7318] bridge_slave_0: entered allmulticast mode
[  153.791560][   T92] usb 1-1: SerialNumber: syz
[  153.812520][   T92] usb 1-1: config 0 descriptor??
[  153.817652][ T7318] bridge_slave_0: entered promiscuous mode
[  153.831937][   T92] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  153.856184][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.890454][ T5173] Bluetooth: hci0: command tx timeout
[  153.907959][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.940642][ T7318] bridge_slave_1: entered allmulticast mode
[  153.956111][ T7318] bridge_slave_1: entered promiscuous mode
[  154.041365][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.115672][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.262234][ T7318] team0: Port device team_slave_0 added
[  154.747778][ T7318] team0: Port device team_slave_1 added
[  154.851892][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.858853][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.902228][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.918345][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.927034][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.952929][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.056312][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.143346][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  155.143365][   T30] audit: type=1400 audit(1758002260.563:448): avc:  denied  { read } for  pid=7413 comm="syz.4.347" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  155.145679][ T7318] hsr_slave_0: entered promiscuous mode
[  155.172139][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.252968][ T7318] hsr_slave_1: entered promiscuous mode
[  155.265873][ T7318] debugfs: 'hsr0' already exists in 'hsr'
[  155.277395][ T7318] Cannot create hsr debugfs directory
[  155.342059][ T7421] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  155.359758][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  155.547799][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  155.707634][ T7421] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  155.720742][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  155.840883][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  155.970271][ T5173] Bluetooth: hci0: command tx timeout
[  155.981728][ T5899] usb 1-1: USB disconnect, device number 9
[  156.040108][ T7421] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  156.056597][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.144910][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.180919][ T7318] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.193281][ T7318] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.200794][ T7421] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  156.213134][ T7318] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.230387][ T7421] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  156.238923][ T7421] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  156.255038][ T7318] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.296316][ T7421] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.317265][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.356775][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.486381][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.532672][ T5899] libceph: connect (1)[c::]:6789 error -101
[  156.533605][ T7318] 8021q: adding VLAN 0 to HW filter on device team0
[  156.554153][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.561345][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.571385][ T5899] libceph: mon0 (1)[c::]:6789 connect error
[  156.586333][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.593497][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.606662][ T7459] ceph: No mds server is up or the cluster is laggy
[  156.625981][   T30] audit: type=1400 audit(1758002262.033:449): avc:  denied  { lock } for  pid=7458 comm="syz.0.354" path="socket:[14270]" dev="sockfs" ino=14270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  156.654111][   T92] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  156.700264][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  156.862612][   T92] usb 4-1: config 2 has an invalid interface number: 32 but max is 0
[  156.871021][   T92] usb 4-1: config 2 has an invalid descriptor of length 116, skipping remainder of the config
[  156.899296][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.912011][   T10] usb 3-1: config 1 has no interface number 0
[  156.918179][   T92] usb 4-1: config 2 has no interface number 0
[  156.928690][   T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.940786][   T92] usb 4-1: config 2 interface 32 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  156.960631][   T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  156.969851][   T92] usb 4-1: config 2 interface 32 has no altsetting 0
[  156.989612][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  157.012322][   T92] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  157.023018][   T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.039095][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.067466][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.074781][   T92] usb 4-1: Product: syz
[  157.086185][   T92] usb 4-1: Manufacturer: syz
[  157.093656][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.102198][   T92] usb 4-1: SerialNumber: syz
[  157.117663][   T10] usb 3-1: Product: syz
[  157.126018][   T10] usb 3-1: Manufacturer: syz
[  157.131773][   T10] usb 3-1: SerialNumber: syz
[  157.440789][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.508798][   T92] usb 4-1: USB disconnect, device number 11
[  158.031534][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.058345][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  158.282868][ T5849] Bluetooth: hci4: command 0x0419 tx timeout
[  158.289373][   T10] cdc_ncm 3-1:1.1: bind() failure
[  158.365991][   T30] audit: type=1400 audit(1758002263.783:450): avc:  denied  { append } for  pid=7490 comm="syz.4.359" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.371757][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'.
[  158.399663][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.495323][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'.
[  158.510699][ T5912] usb 3-1: USB disconnect, device number 10
[  158.521783][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'.
[  158.548172][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'.
[  158.672834][   T30] audit: type=1400 audit(1758002264.093:451): avc:  denied  { read write } for  pid=7501 comm="syz.3.361" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  158.745468][ T5927] hid_parser_main: 73 callbacks suppressed
[  158.745489][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  158.759297][ T7506] FAULT_INJECTION: forcing a failure.
[  158.759297][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.802185][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  158.809750][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(full) 
[  158.809774][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  158.809785][ T7506] Call Trace:
[  158.809791][ T7506]  <TASK>
[  158.809798][ T7506]  dump_stack_lvl+0x16c/0x1f0
[  158.809825][ T7506]  should_fail_ex+0x512/0x640
[  158.809851][ T7506]  _copy_to_user+0x32/0xd0
[  158.809879][ T7506]  simple_read_from_buffer+0xcb/0x170
[  158.809900][ T7506]  proc_fail_nth_read+0x197/0x240
[  158.809922][ T7506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.809944][ T7506]  ? rw_verify_area+0xcf/0x6c0
[  158.809971][ T7506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.809991][ T7506]  vfs_read+0x1e4/0xcf0
[  158.810012][ T7506]  ? __pfx___mutex_lock+0x10/0x10
[  158.810035][ T7506]  ? __pfx_vfs_read+0x10/0x10
[  158.810060][ T7506]  ? __fget_files+0x20e/0x3c0
[  158.810087][ T7506]  ksys_read+0x12a/0x250
[  158.810104][ T7506]  ? __pfx_ksys_read+0x10/0x10
[  158.810132][ T7506]  do_syscall_64+0xcd/0x4e0
[  158.810155][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.810172][ T7506] RIP: 0033:0x7f187b18d5bc
[  158.810184][ T7506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  158.810199][ T7506] RSP: 002b:00007f187bf5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  158.810215][ T7506] RAX: ffffffffffffffda RBX: 00007f187b3d5fa0 RCX: 00007f187b18d5bc
[  158.810226][ T7506] RDX: 000000000000000f RSI: 00007f187bf5c0a0 RDI: 0000000000000004
[  158.810236][ T7506] RBP: 00007f187bf5c090 R08: 0000000000000000 R09: 0000000000000000
[  158.810245][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.810254][ T7506] R13: 00007f187b3d6038 R14: 00007f187b3d5fa0 R15: 00007ffc52090958
[  158.810276][ T7506]  </TASK>
[  158.811917][ T7318] veth0_vlan: entered promiscuous mode
[  158.849560][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.056913][   T30] audit: type=1400 audit(1758002264.093:452): avc:  denied  { open } for  pid=7501 comm="syz.3.361" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  159.154205][ T7318] veth1_vlan: entered promiscuous mode
[  159.220235][ T5899] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  159.220468][ T7318] veth0_macvtap: entered promiscuous mode
[  159.268996][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.280900][ T7318] veth1_macvtap: entered promiscuous mode
[  159.286741][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.301205][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.315472][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.329969][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.331619][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.350221][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.366192][ T5927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.381294][ T5899] usb 4-1: not running at top speed; connect to a high speed hub
[  159.391441][ T5899] usb 4-1: config 0 has too many interfaces: 77, using maximum allowed: 32
[  159.391825][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.403710][ T5899] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 77
[  159.419249][ T5927] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.43 Device [syz1] on syz1
[  159.491072][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.498937][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.535885][ T5927] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.43 Device [syz1] on syz1
[  159.548258][ T5899] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  159.594612][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.603336][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.619729][ T5899] usb 4-1: Product: syz
[  159.625891][ T5899] usb 4-1: Manufacturer: syz
[  159.630534][ T5899] usb 4-1: SerialNumber: syz
[  159.645772][ T5899] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  159.661690][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.687377][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.690278][   T30] audit: type=1400 audit(1758002265.113:453): avc:  denied  { mount } for  pid=7517 comm="syz.2.365" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  159.699348][ T5899] usb 4-1: no configuration chosen from 1 choice
[  159.728978][ T7514] fido_id[7514]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  159.807527][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'.
[  159.816774][ T7522] netlink: 'syz.2.365': attribute type 30 has an invalid length.
[  159.842591][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  159.843661][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.980410][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.099710][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  160.130784][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  160.139054][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.184587][   T30] audit: type=1400 audit(1758002265.603:454): avc:  denied  { read } for  pid=7517 comm="syz.2.365" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  160.217354][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.257382][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.277862][   T30] audit: type=1400 audit(1758002265.613:455): avc:  denied  { open } for  pid=7517 comm="syz.2.365" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  160.290330][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  160.306353][ T5849] Bluetooth: hci4: command 0x0419 tx timeout
[  160.317681][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short
[  160.319760][   T30] audit: type=1400 audit(1758002265.743:456): avc:  denied  { mounton } for  pid=7318 comm="syz-executor" path="/root/syzkaller.XGrQfM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  160.353228][ T5899] usb 5-1: config index 0 descriptor too short (expected 16420, got 36)
[  160.361719][ T5899] usb 5-1: config 7 has an invalid interface number: 6 but max is 0
[  160.451058][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.478787][ T5899] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  160.489012][ T5899] usb 5-1: config 7 has no interface number 0
[  160.526010][ T5899] usb 5-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.570415][ T5899] usb 5-1: config 7 interface 6 has no altsetting 0
[  160.604768][ T5899] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e
[  160.617772][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.626032][ T5899] usb 5-1: Product: syz
[  160.631825][ T5899] usb 5-1: Manufacturer: syz
[  160.730557][ T5899] usb 5-1: SerialNumber: syz
[  160.820370][   T30] audit: type=1400 audit(1758002266.033:457): avc:  denied  { unmount } for  pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  160.964363][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'.
[  160.987468][ T5899] option 5-1:7.6: GSM modem (1-port) converter detected
[  161.016018][ T5899] usb 5-1: USB disconnect, device number 6
[  161.041200][ T5899] option 5-1:7.6: device disconnected
[  161.312714][ T5987] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  161.659855][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  161.672706][   T30] audit: type=1400 audit(1758002267.013:458): avc:  denied  { getopt } for  pid=7536 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.750264][ T5987] usb 6-1: Using ep0 maxpacket: 8
[  161.761130][ T5987] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  161.770270][ T5987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.780791][ T5987] usb 6-1: config 0 has no interface number 0
[  161.788702][ T5987] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  161.798105][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.812564][ T5987] usb 6-1: Product: syz
[  161.818988][ T5987] usb 6-1: Manufacturer: syz
[  161.831694][ T5987] usb 6-1: SerialNumber: syz
[  161.832150][ T5899] usb 4-1: USB disconnect, device number 12
[  161.982626][ T5987] usb 6-1: config 0 descriptor??
[  162.021018][ T5987] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  162.027411][ T5987] usb 6-1: No valid video chain found.
[  162.134688][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.153295][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.371'.
[  162.291671][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  162.543813][ T5849] Bluetooth: hci4: command 0x0419 tx timeout
[  162.549927][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.923182][ T7559] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  162.969556][   T30] audit: type=1400 audit(1758002268.393:459): avc:  denied  { bind } for  pid=7556 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.017030][   T30] audit: type=1326 audit(1758002268.393:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  163.046137][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'.
[  163.061193][   T30] audit: type=1326 audit(1758002268.393:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  163.140651][ T7558] syzkaller0: entered promiscuous mode
[  163.148238][ T7558] syzkaller0: entered allmulticast mode
[  163.231128][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  163.861375][   T30] audit: type=1326 audit(1758002268.393:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  163.940699][   T30] audit: type=1326 audit(1758002268.393:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  163.988667][ T5987] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  164.037560][ T3092] usb 6-1: USB disconnect, device number 2
[  164.230255][ T5987] usb 3-1: Using ep0 maxpacket: 16
[  164.250992][ T5987] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  164.266775][ T5987] usb 3-1: config 0 has no interfaces?
[  164.383334][ T5987] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  164.477892][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.525751][ T5987] usb 3-1: config 0 descriptor??
[  165.436207][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  165.436239][   T30] audit: type=1400 audit(1758002270.853:472): avc:  denied  { append } for  pid=7589 comm="syz.4.379" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  166.036711][ T5987] usb 3-1: string descriptor 0 read error: -71
[  166.089244][ T5987] usb 3-1: USB disconnect, device number 11
[  166.242600][ T7602] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.349607][   T30] audit: type=1400 audit(1758002271.733:473): avc:  denied  { accept } for  pid=7595 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  166.400303][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  166.495093][ T7614] netlink: 'syz.5.387': attribute type 10 has an invalid length.
[  166.606733][ T7610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.654008][   T30] audit: type=1400 audit(1758002272.043:474): avc:  denied  { ioctl } for  pid=7603 comm="syz.2.383" path="socket:[16615]" dev="sockfs" ino=16615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  166.682610][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  166.707759][ T7615] netlink: 'syz.2.383': attribute type 4 has an invalid length.
[  166.839907][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  166.972594][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  166.989342][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  167.107157][ T5987] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  167.215831][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  167.230511][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.248021][ T5912] usb 1-1: config 0 descriptor??
[  167.326087][ T3585] tipc: Resetting bearer <eth:syzkaller0>
[  167.335693][ T7603] tipc: Resetting bearer <eth:syzkaller0>
[  167.454213][ T5987] usb 6-1: New USB device found, idVendor=1779, idProduct=8b4d, bcdDevice=d3.43
[  167.469674][   T30] audit: type=1400 audit(1758002272.893:475): avc:  denied  { connect } for  pid=7627 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.489467][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.494051][   T30] audit: type=1400 audit(1758002272.923:476): avc:  denied  { listen } for  pid=7627 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.519820][ T5987] usb 6-1: config 0 descriptor??
[  167.633566][ T5899] tipc: Node number set to 157708699
[  168.538329][   T30] audit: type=1400 audit(1758002273.953:477): avc:  denied  { mount } for  pid=7620 comm="syz.5.389" name="/" dev="autofs" ino=16626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  169.549034][ T5912] usbhid 1-1:0.0: can't add hid device: -71
[  169.560671][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  169.599545][ T5912] usb 1-1: USB disconnect, device number 10
[  169.941138][   T30] audit: type=1400 audit(1758002275.373:478): avc:  denied  { unmount } for  pid=7318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  169.966832][ T5912] usb 6-1: USB disconnect, device number 3
[  170.708365][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'.
[  170.812505][ T7653] openvswitch: netlink: Flow actions attr not present in new flow.
[  171.253115][ T7603] tipc: Disabling bearer <eth:syzkaller0>
[  171.464066][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.397'.
[  171.583510][ T7674] FAULT_INJECTION: forcing a failure.
[  171.583510][ T7674] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  171.614409][ T7672] bridge0: entered promiscuous mode
[  171.620295][ T7672] macsec1: entered promiscuous mode
[  171.661061][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) 
[  171.661085][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  171.661096][ T7674] Call Trace:
[  171.661102][ T7674]  <TASK>
[  171.661108][ T7674]  dump_stack_lvl+0x16c/0x1f0
[  171.661134][ T7674]  should_fail_ex+0x512/0x640
[  171.661160][ T7674]  should_fail_alloc_page+0xe7/0x130
[  171.661183][ T7674]  prepare_alloc_pages+0x3c2/0x610
[  171.661218][ T7674]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  171.661240][ T7674]  ? __lock_acquire+0x62e/0x1ce0
[  171.661278][ T7674]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  171.661298][ T7674]  ? find_held_lock+0x2b/0x80
[  171.661323][ T7674]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  171.661348][ T7674]  ? is_bpf_text_address+0x94/0x1a0
[  171.661368][ T7674]  ? kernel_text_address+0x8d/0x100
[  171.661389][ T7674]  ? __kernel_text_address+0xd/0x40
[  171.661407][ T7674]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  171.661429][ T7674]  ? policy_nodemask+0xea/0x4e0
[  171.661451][ T7674]  alloc_pages_mpol+0x1fb/0x550
[  171.661471][ T7674]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  171.661495][ T7674]  ? __lock_acquire+0x62e/0x1ce0
[  171.661523][ T7674]  folio_alloc_mpol_noprof+0x36/0x2f0
[  171.661550][ T7674]  vma_alloc_folio_noprof+0xed/0x1e0
[  171.661573][ T7674]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  171.661606][ T7674]  do_pte_missing+0x2230/0x3ba0
[  171.661634][ T7674]  ? find_held_lock+0x2b/0x80
[  171.661662][ T7674]  __handle_mm_fault+0x152a/0x2a50
[  171.661692][ T7674]  ? mt_find+0x3ef/0xa30
[  171.661718][ T7674]  ? __pfx___handle_mm_fault+0x10/0x10
[  171.661743][ T7674]  ? __pfx_mt_find+0x10/0x10
[  171.661782][ T7674]  ? find_vma+0xbf/0x140
[  171.661803][ T7674]  ? __pfx_find_vma+0x10/0x10
[  171.661826][ T7674]  handle_mm_fault+0x589/0xd10
[  171.661854][ T7674]  ? trace_raw_output_exceptions+0x131/0x150
[  171.661885][ T7674]  do_user_addr_fault+0x7a6/0x1370
[  171.661906][ T7674]  ? rcu_is_watching+0x12/0xc0
[  171.661932][ T7674]  exc_page_fault+0x5c/0xb0
[  171.661953][ T7674]  asm_exc_page_fault+0x26/0x30
[  171.661969][ T7674] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  171.661988][ T7674] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  171.662004][ T7674] RSP: 0018:ffffc9000462f9b8 EFLAGS: 00050206
[  171.662019][ T7674] RAX: 0000000000000001 RBX: 00000000000000f7 RCX: 00000000000000f7
[  171.662030][ T7674] RDX: ffffed100df3bc1f RSI: ffff88806f9de000 RDI: 00002000000034c0
[  171.662041][ T7674] RBP: 00000000000000f7 R08: 0000000000000000 R09: ffffed100df3bc1e
[  171.662051][ T7674] R10: ffff88806f9de0f6 R11: 0000000000000000 R12: 0000000000000000
[  171.662061][ T7674] R13: ffffc9000462fbd0 R14: ffff88806f9de000 R15: 00002000000034c0
[  171.662085][ T7674]  _copy_to_iter+0x4eb/0x1710
[  171.662116][ T7674]  ? __pfx__copy_to_iter+0x10/0x10
[  171.662138][ T7674]  ? print_binder_stats+0x1fe/0x410
[  171.662166][ T7674]  ? stats_show+0x579/0x650
[  171.662193][ T7674]  seq_read_iter+0xcf8/0x12c0
[  171.662227][ T7674]  seq_read+0x3a3/0x570
[  171.662245][ T7674]  ? __pfx_seq_read+0x10/0x10
[  171.662280][ T7674]  full_proxy_read+0x12e/0x1a0
[  171.662297][ T7674]  ? __pfx_full_proxy_read+0x10/0x10
[  171.662311][ T7674]  vfs_read+0x1e4/0xcf0
[  171.662329][ T7674]  ? __pfx___mutex_lock+0x10/0x10
[  171.662347][ T7674]  ? __pfx_vfs_read+0x10/0x10
[  171.662366][ T7674]  ? __fget_files+0x20e/0x3c0
[  171.662387][ T7674]  ksys_read+0x12a/0x250
[  171.662401][ T7674]  ? __pfx_ksys_read+0x10/0x10
[  171.662420][ T7674]  do_syscall_64+0xcd/0x4e0
[  171.662440][ T7674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.662454][ T7674] RIP: 0033:0x7efc1e78eba9
[  171.662466][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.662479][ T7674] RSP: 002b:00007efc1f58a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  171.662491][ T7674] RAX: ffffffffffffffda RBX: 00007efc1e9d5fa0 RCX: 00007efc1e78eba9
[  171.662501][ T7674] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000003
[  171.662510][ T7674] RBP: 00007efc1f58a090 R08: 0000000000000000 R09: 0000000000000000
[  171.662520][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.662530][ T7674] R13: 00007efc1e9d6038 R14: 00007efc1e9d5fa0 R15: 00007ffd7b97eb28
[  171.662554][ T7674]  </TASK>
[  172.156695][ T7679] syzkaller0: entered promiscuous mode
[  172.162274][ T7679] syzkaller0: entered allmulticast mode
[  172.274451][ T5987] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  172.490199][ T5987] usb 6-1: Using ep0 maxpacket: 8
[  172.496457][ T5987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.506224][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  172.515982][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  172.525870][ T5987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.538807][ T5987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  172.560218][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.593092][   T30] audit: type=1400 audit(1758002278.023:479): avc:  denied  { ioctl } for  pid=7683 comm="syz.0.402" path="socket:[16169]" dev="sockfs" ino=16169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  172.831262][ T5987] usb 6-1: usb_control_msg returned -32
[  172.836872][ T5987] usbtmc 6-1:16.0: can't read capabilities
[  173.520462][ T5987] usb 6-1: USB disconnect, device number 4
[  175.345102][ T1216] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  175.500405][ T1216] usb 3-1: Using ep0 maxpacket: 32
[  175.511674][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.620442][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.690477][   T30] audit: type=1400 audit(1758002281.073:480): avc:  denied  { create } for  pid=7723 comm="syz.5.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  175.696541][ T7727] netlink: 'syz.5.409': attribute type 4 has an invalid length.
[  175.721334][ T1216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  175.766313][ T7727] netlink: 152 bytes leftover after parsing attributes in process `syz.5.409'.
[  175.833537][ T1216] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  176.058195][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.102165][ T7727] : renamed from bond0 (while UP)
[  176.137339][ T1216] usb 3-1: config 0 descriptor??
[  176.240225][   T30] audit: type=1400 audit(1758002281.663:481): avc:  denied  { setattr } for  pid=7732 comm="syz.4.411" name="KEY" dev="sockfs" ino=16244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  176.568041][ T1216] usbhid 3-1:0.0: can't add hid device: -71
[  176.618570][ T1216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  176.958060][ T1216] usb 3-1: USB disconnect, device number 12
[  179.406748][   T30] audit: type=1326 audit(1758002284.813:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  179.608901][   T30] audit: type=1326 audit(1758002284.823:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  179.826230][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'.
[  180.372070][   T30] audit: type=1326 audit(1758002284.823:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  180.521567][   T30] audit: type=1326 audit(1758002284.823:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  180.627929][   T30] audit: type=1326 audit(1758002284.833:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  180.830954][   T30] audit: type=1326 audit(1758002284.833:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  181.145387][   T30] audit: type=1326 audit(1758002284.833:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  181.272528][ T1216] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.344528][ T5849] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  181.447804][   T30] audit: type=1326 audit(1758002284.833:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  181.484447][ T1216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.522063][ T1216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.691061][ T1216] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  181.743030][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.764460][   T30] audit: type=1326 audit(1758002284.833:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  181.881056][ T1216] usb 5-1: config 0 descriptor??
[  181.918038][   T30] audit: type=1326 audit(1758002284.833:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  182.197065][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.426'.
[  183.285655][ T1216] usbhid 5-1:0.0: can't add hid device: -71
[  183.291982][ T1216] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  183.330525][ T1216] usb 5-1: USB disconnect, device number 7
[  183.600640][ T7836] sit1: entered promiscuous mode
[  183.850298][ T5987] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  184.001866][ T5987] usb 1-1: Using ep0 maxpacket: 8
[  184.008481][ T5987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.032141][ T5987] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  184.041333][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.054531][ T5987] usb 1-1: Product: syz
[  184.064328][ T5987] usb 1-1: Manufacturer: syz
[  184.068987][ T5987] usb 1-1: SerialNumber: syz
[  184.081989][ T5987] usb 1-1: config 0 descriptor??
[  184.098621][ T5987] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  184.131430][ T7672] Set syz1 is full, maxelem 65536 reached
[  184.618277][ T5899] usb 1-1: USB disconnect, device number 11
[  185.780267][ T7855] ptrace attach of "./syz-executor exec"[5852] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  186.756482][ T5912] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  186.981644][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  186.981660][   T30] audit: type=1400 audit(1758002292.403:512): avc:  denied  { append } for  pid=7865 comm="syz.5.438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  187.100196][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  187.110732][ T5912] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  187.134325][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.164775][ T5912] usb 3-1: config 0 has no interface number 0
[  187.760809][   T30] audit: type=1400 audit(1758002292.943:513): avc:  denied  { ioctl } for  pid=7865 comm="syz.5.438" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  188.810567][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  188.826714][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.943265][ T5912] usb 3-1: Product: syz
[  188.947816][ T5912] usb 3-1: Manufacturer: syz
[  188.953054][ T5912] usb 3-1: SerialNumber: syz
[  188.959841][ T5912] usb 3-1: config 0 descriptor??
[  189.518845][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'.
[  189.559912][ T5912] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  189.572406][ T5912] usb 3-1: No valid video chain found.
[  189.604552][ T5912] usb 3-1: USB disconnect, device number 13
[  189.867690][   T30] audit: type=1400 audit(1758002295.283:514): avc:  denied  { create } for  pid=7897 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  190.079731][ T7906] syzkaller0: entered promiscuous mode
[  190.094922][ T7906] syzkaller0: entered allmulticast mode
[  190.111814][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.450'.
[  190.290502][   T30] audit: type=1400 audit(1758002295.703:515): avc:  denied  { map } for  pid=7908 comm="syz.4.449" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  190.680274][   T30] audit: type=1400 audit(1758002295.703:516): avc:  denied  { execute } for  pid=7908 comm="syz.4.449" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  191.442356][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  191.600358][   T24] usb 1-1: Using ep0 maxpacket: 16
[  191.624371][   T24] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.642765][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  191.664197][   T24] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40
[  191.681278][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.689413][   T24] usb 1-1: Product: য路㲢㙇�ຩ�際ᮖ柵�축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔�╹儀舾�쯻�鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á
[  191.707241][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.723438][   T24] usb 1-1: Manufacturer: à°š
[  191.728097][   T24] usb 1-1: SerialNumber: �럘者ݓ蓥�⬱岸㠚ꪠ��侚㧷�힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ�胅苟쯋�䞥ﬤ었橾㓵砾욷�◲朑霴
[  193.051188][ T5899] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  193.222586][ T5899] usb 3-1: Using ep0 maxpacket: 8
[  193.244452][ T5899] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  193.268869][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.285121][ T5899] usb 3-1: config 0 has no interface number 0
[  193.295205][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  193.305130][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.318313][ T5899] usb 3-1: Product: syz
[  193.322835][ T5899] usb 3-1: Manufacturer: syz
[  193.328455][ T5899] usb 3-1: SerialNumber: syz
[  193.362253][ T5899] usb 3-1: config 0 descriptor??
[  193.695862][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'.
[  193.712082][ T7930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  193.794751][ T5899] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  193.820602][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  193.826879][ T5899] usb 3-1: No valid video chain found.
[  193.832982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  193.839726][ T5899] usb 3-1: USB disconnect, device number 14
[  193.896372][   T24] usbhid 1-1:1.0: can't add hid device: -71
[  193.932019][   T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  193.947555][   T24] usb 1-1: USB disconnect, device number 12
[  194.027452][   T30] audit: type=1400 audit(1758002299.453:517): avc:  denied  { watch } for  pid=7937 comm="syz.4.454" path="/96" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  194.110241][ T5987] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  194.261219][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  194.267725][ T5987] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  194.276874][ T5987] usb 4-1: config 0 has no interface number 0
[  194.286653][ T5987] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  194.291086][ T5983] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  194.296480][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.313696][ T5987] usb 4-1: Product: syz
[  194.317927][ T5987] usb 4-1: Manufacturer: syz
[  194.328032][ T5987] usb 4-1: SerialNumber: syz
[  194.335144][ T5987] usb 4-1: config 0 descriptor??
[  194.351622][ T5987] smsc95xx v2.0.0
[  194.375101][ T7941] syz_tun: entered allmulticast mode
[  194.583095][ T5983] usb 5-1: Using ep0 maxpacket: 8
[  194.591860][ T5983] usb 5-1: config 162 has an invalid interface number: 84 but max is 2
[  194.623410][ T5983] usb 5-1: config 162 has an invalid interface number: 3 but max is 2
[  194.794552][   T30] audit: type=1400 audit(1758002300.123:518): avc:  denied  { write } for  pid=7943 comm="syz.0.458" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  194.929286][ T5983] usb 5-1: config 162 has no interface number 0
[  195.032223][ T5983] usb 5-1: config 162 has no interface number 1
[  195.051860][ T5983] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  195.106342][ T5983] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  195.118360][ T5983] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  195.130809][ T5983] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  195.142356][ T5983] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  195.160263][ T5983] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  195.190228][ T5983] usb 5-1: config 162 interface 84 has no altsetting 0
[  195.202770][ T5983] usb 5-1: config 162 interface 2 has no altsetting 0
[  195.209728][ T5983] usb 5-1: config 162 interface 3 has no altsetting 0
[  195.221776][ T5983] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  195.233882][ T7940] syz_tun: left allmulticast mode
[  195.239645][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.258873][ T5983] usb 5-1: Product: syz
[  195.263289][ T5983] usb 5-1: Manufacturer: syz
[  195.267881][ T5983] usb 5-1: SerialNumber: syz
[  195.510505][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'.
[  195.532016][ T5849] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  195.552828][ T5983] usb 5-1: USB disconnect, device number 8
[  195.600399][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  195.760533][ T5987] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  195.777489][ T5987] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  195.850182][   T10] usb 3-1: Using ep0 maxpacket: 8
[  195.859710][   T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[  195.868894][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.889929][   T10] usb 3-1: config 0 has no interface number 0
[  195.896236][   T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  195.907562][   T10] usb 3-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  195.923356][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  195.932546][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.940675][   T10] usb 3-1: Product: syz
[  195.945189][   T10] usb 3-1: Manufacturer: syz
[  195.949826][   T10] usb 3-1: SerialNumber: syz
[  195.958225][   T10] usb 3-1: config 0 descriptor??
[  195.972262][   T10] iowarrior 3-1:0.186: no interrupt-in endpoint found
[  196.016338][ T5987] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  196.044081][ T5987] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  196.189755][ T7953] netlink: 'syz.2.460': attribute type 1 has an invalid length.
[  196.199571][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.210427][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.234331][ T5983] usb 3-1: USB disconnect, device number 15
[  196.644421][ T7969] netlink: 29464 bytes leftover after parsing attributes in process `syz.4.463'.
[  197.342677][ T5983] usb 4-1: USB disconnect, device number 13
[  197.452839][ T7981] sp0: Synchronizing with TNC
[  197.467506][ T7981] [U] è
[  198.729351][   T30] audit: type=1400 audit(1758002304.153:519): avc:  denied  { setopt } for  pid=7994 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  199.304809][ T8009] syz_tun: entered allmulticast mode
[  199.315094][ T8011] capability: warning: `syz.4.473' uses 32-bit capabilities (legacy support in use)
[  199.330874][ T8010] FAULT_INJECTION: forcing a failure.
[  199.330874][ T8010] name failslab, interval 1, probability 0, space 0, times 0
[  199.403454][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.2.474 Not tainted syzkaller #0 PREEMPT(full) 
[  199.403480][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  199.403491][ T8010] Call Trace:
[  199.403497][ T8010]  <TASK>
[  199.403504][ T8010]  dump_stack_lvl+0x16c/0x1f0
[  199.403529][ T8010]  should_fail_ex+0x512/0x640
[  199.403549][ T8010]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  199.403571][ T8010]  should_failslab+0xc2/0x120
[  199.403590][ T8010]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  199.403609][ T8010]  ? __alloc_skb+0x2b2/0x380
[  199.403633][ T8010]  __alloc_skb+0x2b2/0x380
[  199.403652][ T8010]  ? __pfx___alloc_skb+0x10/0x10
[  199.403674][ T8010]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  199.403702][ T8010]  netlink_alloc_large_skb+0x69/0x130
[  199.403727][ T8010]  netlink_sendmsg+0x6a1/0xdd0
[  199.403754][ T8010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.403785][ T8010]  ____sys_sendmsg+0xa95/0xc70
[  199.403812][ T8010]  ? copy_msghdr_from_user+0x10a/0x160
[  199.403830][ T8010]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.403866][ T8010]  ___sys_sendmsg+0x134/0x1d0
[  199.403890][ T8010]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.403951][ T8010]  __sys_sendmsg+0x16d/0x220
[  199.403974][ T8010]  ? __pfx___sys_sendmsg+0x10/0x10
[  199.404012][ T8010]  do_syscall_64+0xcd/0x4e0
[  199.404037][ T8010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.404054][ T8010] RIP: 0033:0x7fa18398eba9
[  199.404068][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.404084][ T8010] RSP: 002b:00007fa184854038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.404100][ T8010] RAX: ffffffffffffffda RBX: 00007fa183bd5fa0 RCX: 00007fa18398eba9
[  199.404110][ T8010] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  199.404120][ T8010] RBP: 00007fa184854090 R08: 0000000000000000 R09: 0000000000000000
[  199.404130][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.404140][ T8010] R13: 00007fa183bd6038 R14: 00007fa183bd5fa0 R15: 00007ffcc95edf68
[  199.404162][ T8010]  </TASK>
[  199.970598][ T5987] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  200.210400][ T5987] usb 5-1: Using ep0 maxpacket: 8
[  200.403203][ T8021] syzkaller1: entered promiscuous mode
[  200.408813][ T8021] syzkaller1: entered allmulticast mode
[  200.545899][ T5987] usb 5-1: unable to get BOS descriptor or descriptor too short
[  200.555476][ T5987] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  200.563611][ T5987] usb 5-1: config 0 has no interface number 0
[  200.570015][ T5987] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  200.581157][ T5987] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  200.599396][ T5987] usb 5-1: config 0 interface 88 has no altsetting 0
[  200.613438][ T5987] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  200.696956][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  200.949241][ T5987] usb 5-1: Product: syz
[  200.998155][ T5987] usb 5-1: SerialNumber: syz
[  201.022233][ T5987] usb 5-1: config 0 descriptor??
[  201.063944][ T8026] syz_tun: left allmulticast mode
[  201.258578][ T8005] netlink: 68 bytes leftover after parsing attributes in process `syz.4.473'.
[  201.272484][ T8005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8005 comm=syz.4.473
[  201.285287][   T30] audit: type=1400 audit(1758002306.703:520): avc:  denied  { ioctl } for  pid=8004 comm="syz.4.473" path="socket:[17253]" dev="sockfs" ino=17253 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  201.315702][ T8005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=8005 comm=syz.4.473
[  201.375576][ T5987] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input13
[  201.406134][ T5987] usb 5-1: USB disconnect, device number 9
[  201.930256][ T5983] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  202.452206][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.463227][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.478025][ T5983] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  202.488785][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.618082][   T30] audit: type=1400 audit(1758002307.993:521): avc:  denied  { read write } for  pid=8049 comm="syz.3.486" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  202.889253][ T5983] usb 3-1: config 0 descriptor??
[  202.950274][   T30] audit: type=1400 audit(1758002307.993:522): avc:  denied  { open } for  pid=8049 comm="syz.3.486" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  202.975860][   T30] audit: type=1400 audit(1758002308.003:523): avc:  denied  { ioctl } for  pid=8049 comm="syz.3.486" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  203.057878][   T30] audit: type=1400 audit(1758002308.483:524): avc:  denied  { create } for  pid=8053 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.111315][   T30] audit: type=1400 audit(1758002308.483:525): avc:  denied  { write } for  pid=8053 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.370218][ T5987] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  203.623522][   T30] audit: type=1400 audit(1758002309.053:526): avc:  denied  { create } for  pid=8034 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  204.212971][ T5987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.334358][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.448457][ T5987] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  204.462355][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  204.470817][ T5987] usb 5-1: SerialNumber: syz
[  204.755404][ T5987] usb 5-1: 0:2 : does not exist
[  204.790012][ T5987] usb 5-1: unit 5: unexpected type 0x0a
[  204.929656][ T5987] usb 5-1: USB disconnect, device number 10
[  205.000024][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.363853][   T30] audit: type=1400 audit(1758002310.743:527): avc:  denied  { mount } for  pid=8075 comm="syz.0.493" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  205.427853][ T5173] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  205.444769][ T5983] usbhid 3-1:0.0: can't add hid device: -71
[  205.450834][ T5983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  205.461045][ T5983] usb 3-1: USB disconnect, device number 16
[  205.643311][   T30] audit: type=1400 audit(1758002310.763:528): avc:  denied  { search } for  pid=8075 comm="syz.0.493" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  205.671994][   T30] audit: type=1400 audit(1758002310.773:529): avc:  denied  { unmount } for  pid=8075 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  205.705197][ T8082] fuse: Unknown parameter 'fd-0x0000000000000003'
[  205.723323][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[  205.936370][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'.
[  206.012065][ T8086] ubi31: attaching mtd0
[  206.068037][ T8086] ubi31: scanning is finished
[  206.075598][ T8086] ubi31: empty MTD device detected
[  206.396579][ T8086] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  206.404352][ T8086] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  206.428115][ T8086] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  206.587512][ T8086] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  206.609160][ T8086] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  206.650219][ T1216] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  206.672374][ T8086] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  206.831699][ T8086] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3124306043
[  206.881593][ T8086] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  206.912458][ T1216] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  207.005414][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  207.005430][   T30] audit: type=1400 audit(1758002312.423:543): avc:  denied  { accept } for  pid=8100 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  207.040678][ T1216] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  207.052208][ T1216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024
[  207.065559][ T1216] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024
[  207.086462][ T8099] ubi31: background thread "ubi_bgt31d" started, PID 8099
[  207.087903][ T1216] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  207.106840][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.116704][ T1216] usb 6-1: Product: syz
[  207.123926][ T1216] usb 6-1: Manufacturer: syz
[  207.129779][ T1216] usb 6-1: SerialNumber: syz
[  207.197701][ T1216] usb 6-1: config 0 descriptor??
[  207.216852][ T8097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  207.225275][ T8097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  207.234481][ T1216] usb 6-1: ucan: probing device on interface #0
[  207.622851][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'.
[  208.314491][ T1216] usb 6-1: ucan: could not read protocol version, ret=-110
[  208.360485][ T1216] usb 6-1: ucan: probe failed; try to update the device firmware
[  208.745946][   T30] audit: type=1400 audit(1758002314.173:544): avc:  denied  { append } for  pid=8123 comm="syz.0.507" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  209.985995][   T30] audit: type=1400 audit(1758002315.413:545): avc:  denied  { write } for  pid=8123 comm="syz.0.507" path="socket:[18179]" dev="sockfs" ino=18179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  210.056806][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[  210.084855][   T30] audit: type=1400 audit(1758002315.463:546): avc:  denied  { read } for  pid=8123 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  210.104503][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[  210.282591][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'.
[  210.301695][   T30] audit: type=1326 audit(1758002315.473:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  210.352982][   T30] audit: type=1326 audit(1758002315.483:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  210.537555][ T5987] usb 6-1: USB disconnect, device number 5
[  210.559064][   T30] audit: type=1326 audit(1758002315.483:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  210.696888][   T30] audit: type=1326 audit(1758002315.483:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  210.752235][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'.
[  210.820712][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.857847][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.865769][   T30] audit: type=1326 audit(1758002315.483:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  210.938003][ T8152] loop6: detected capacity change from 0 to 63
[  210.953602][ T8152] Buffer I/O error on dev loop6, logical block 2, async page read
[  210.967181][ T5866] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.977788][   T30] audit: type=1326 audit(1758002315.483:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f187b18eba9 code=0x7ffc0000
[  211.002868][ T8152] Buffer I/O error on dev loop6, logical block 2, async page read
[  211.013081][ T5866] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.025394][ T8152] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.034265][ T5866] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.060209][ T5987] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  211.099186][ T5866] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.108104][ T8152] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.118541][ T8153] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.166365][ T5866] Buffer I/O error on dev loop6, logical block 0, async page read
[  211.222417][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.233300][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  211.273537][ T5987] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  211.283104][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.301797][ T5987] usb 3-1: config 0 descriptor??
[  211.490357][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  211.670379][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  212.567840][ T5987] usbhid 3-1:0.0: can't add hid device: -71
[  212.575257][ T5987] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  212.587554][ T5987] usb 3-1: USB disconnect, device number 17
[  212.590940][ T5899] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  212.816240][ T5899] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  212.913642][ T5899] usb 6-1: config 0 has no interface number 0
[  212.921991][ T5899] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  213.073918][ T5899] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  213.113280][ T5899] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  213.129609][ T5899] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  213.140258][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  213.159581][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'.
[  213.169133][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  213.169147][   T30] audit: type=1400 audit(1758002318.593:561): avc:  denied  { module_request } for  pid=8162 comm="syz.0.519" kmod=72746E6C2D6C696E6B2D76657468C1A5A0AA scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  213.169479][ T5899] usb 6-1: Product: syz
[  213.221943][ T5899] usb 6-1: config 0 descriptor??
[  213.228900][ T8157] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  213.468693][ T8188] =======================================================
[  213.468693][ T8188] WARNING: The mand mount option has been deprecated and
[  213.468693][ T8188]          and is ignored by this kernel. Remove the mand
[  213.468693][ T8188]          option from the mount to silence this warning.
[  213.468693][ T8188] =======================================================
[  213.530261][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.548493][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.579593][ T8191] overlayfs: overlapping lowerdir path
[  213.598264][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.524'.
[  213.644140][ T5899] usb 6-1: USB disconnect, device number 6
[  213.709865][ T8190] geneve2: entered promiscuous mode
[  213.822340][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'.
[  213.907485][ T8206] sctp: [Deprecated]: syz.2.529 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.907485][ T8206] Use struct sctp_sack_info instead
[  213.909988][ T5983] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  214.189257][   T30] audit: type=1400 audit(1758002319.333:562): avc:  denied  { write } for  pid=8203 comm="syz.2.529" lport=39228 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  214.244032][   T30] audit: type=1400 audit(1758002319.333:563): avc:  denied  { getopt } for  pid=8203 comm="syz.2.529" lport=39228 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  214.285445][   T30] audit: type=1400 audit(1758002319.703:564): avc:  denied  { mounton } for  pid=8209 comm="syz.2.530" path="/117/file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  214.353105][   T30] audit: type=1400 audit(1758002319.773:565): avc:  denied  { read write } for  pid=8209 comm="syz.2.530" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  214.475752][   T30] audit: type=1400 audit(1758002319.773:566): avc:  denied  { open } for  pid=8209 comm="syz.2.530" path="/117/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  214.497835][ T5983] usb 1-1: device descriptor read/64, error -71
[  214.571396][   T30] audit: type=1400 audit(1758002319.873:567): avc:  denied  { unmount } for  pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  215.091347][ T5983] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  215.153814][   T30] audit: type=1326 audit(1758002320.583:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18398eba9 code=0x7ffc0000
[  215.684605][   T30] audit: type=1326 audit(1758002321.103:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18398eba9 code=0x7ffc0000
[  215.749168][   T30] audit: type=1326 audit(1758002321.103:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa18398eba9 code=0x7ffc0000
[  215.778116][ T5983] usb 1-1: device descriptor read/64, error -71
[  216.254756][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[  216.330599][ T5983] usb usb1-port1: attempt power cycle
[  216.648640][ T8237] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  217.347351][ T8242] nbd: must specify at least one socket
[  218.248756][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'.
[  218.298197][ T8247] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  218.307465][ T8247] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  218.333173][ T8247] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  218.339988][ T8247] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  218.359456][ T8247] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  218.373229][ T8247] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  218.381884][ T8247] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  218.391962][ T8247] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  218.403621][ T8247] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  218.582800][ T8267] FAULT_INJECTION: forcing a failure.
[  218.582800][ T8267] name failslab, interval 1, probability 0, space 0, times 0
[  218.598333][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: syz.5.549 Not tainted syzkaller #0 PREEMPT(full) 
[  218.598358][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  218.598369][ T8267] Call Trace:
[  218.598374][ T8267]  <TASK>
[  218.598381][ T8267]  dump_stack_lvl+0x16c/0x1f0
[  218.598408][ T8267]  should_fail_ex+0x512/0x640
[  218.598431][ T8267]  ? __kmalloc_noprof+0xbf/0x510
[  218.598452][ T8267]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  218.598485][ T8267]  should_failslab+0xc2/0x120
[  218.598506][ T8267]  __kmalloc_noprof+0xd2/0x510
[  218.598530][ T8267]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  218.598559][ T8267]  ? cred_has_capability.isra.0+0x190/0x310
[  218.598589][ T8267]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  218.598616][ T8267]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  218.598651][ T8267]  ? bpf_lsm_capable+0x9/0x10
[  218.598675][ T8267]  ? security_capable+0x7e/0x260
[  218.598702][ T8267]  genl_rcv_msg+0x55c/0x800
[  218.598730][ T8267]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.598756][ T8267]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  218.598771][ T8267]  ? __pfx_nl802154_stop_beacons+0x10/0x10
[  218.598787][ T8267]  ? __pfx_nl802154_post_doit+0x10/0x10
[  218.598815][ T8267]  ? __lock_acquire+0x62e/0x1ce0
[  218.598846][ T8267]  netlink_rcv_skb+0x158/0x420
[  218.598869][ T8267]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.598894][ T8267]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  218.598927][ T8267]  ? netlink_deliver_tap+0x1ae/0xd30
[  218.598946][ T8267]  ? selinux_netlink_send+0x578/0x830
[  218.598967][ T8267]  ? is_vmalloc_addr+0x86/0xa0
[  218.598988][ T8267]  genl_rcv+0x28/0x40
[  218.599011][ T8267]  netlink_unicast+0x5a7/0x870
[  218.599037][ T8267]  ? __pfx_netlink_unicast+0x10/0x10
[  218.599061][ T8267]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  218.599091][ T8267]  netlink_sendmsg+0x8d1/0xdd0
[  218.599119][ T8267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.599152][ T8267]  ____sys_sendmsg+0xa95/0xc70
[  218.599180][ T8267]  ? copy_msghdr_from_user+0x10a/0x160
[  218.599201][ T8267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.599239][ T8267]  ___sys_sendmsg+0x134/0x1d0
[  218.599261][ T8267]  ? __pfx____sys_sendmsg+0x10/0x10
[  218.599315][ T8267]  __sys_sendmsg+0x16d/0x220
[  218.599337][ T8267]  ? __pfx___sys_sendmsg+0x10/0x10
[  218.599375][ T8267]  do_syscall_64+0xcd/0x4e0
[  218.599400][ T8267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.599417][ T8267] RIP: 0033:0x7f7e9bb8eba9
[  218.599431][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.599447][ T8267] RSP: 002b:00007f7e99df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.599463][ T8267] RAX: ffffffffffffffda RBX: 00007f7e9bdd5fa0 RCX: 00007f7e9bb8eba9
[  218.599480][ T8267] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000006
[  218.599490][ T8267] RBP: 00007f7e99df6090 R08: 0000000000000000 R09: 0000000000000000
[  218.599500][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.599511][ T8267] R13: 00007f7e9bdd6038 R14: 00007f7e9bdd5fa0 R15: 00007ffc4a8ab3b8
[  218.599535][ T8267]  </TASK>
[  218.649523][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  218.649537][   T30] audit: type=1400 audit(1758002324.073:582): avc:  denied  { listen } for  pid=8265 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  218.759978][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'.
[  218.801411][   T30] audit: type=1400 audit(1758002324.183:583): avc:  denied  { accept } for  pid=8265 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  219.421507][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.550'.
[  219.427896][ T8251] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.444850][ T8276] netlink: 60 bytes leftover after parsing attributes in process `syz.5.550'.
[  219.457847][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.550'.
[  219.493275][ T8281] kernel read not supported for file /!sel (pid: 8281 comm: syz.4.552)
[  219.505820][   T30] audit: type=1800 audit(1758002324.933:584): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.552" name="!sel" dev="mqueue" ino=18856 res=0 errno=0
[  219.557339][ T5927] kernel read not supported for file /!sel (pid: 5927 comm: kworker/1:6)
[  219.651219][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  219.799499][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  219.807132][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  219.829487][ T8291] block nbd4: Attempted send on invalid socket
[  219.836607][ T8291] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.850284][ T5983] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  220.001911][   T24] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  220.010333][ T5899] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.024560][   T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  220.038903][ T5899] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  220.050216][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  220.056951][ T5899] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12288, setting to 1024
[  220.122934][ T5983] usb 4-1: Using ep0 maxpacket: 32
[  220.166045][ T5983] usb 4-1: config 0 has no interfaces?
[  220.178585][ T5899] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  220.385026][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  220.385053][ T5173] Bluetooth: hci2: command 0x0c1a tx timeout
[  220.394362][ T5983] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  220.408051][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.416509][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  220.425841][ T5983] usb 4-1: Product: syz
[  220.430261][   T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  220.438731][ T5983] usb 4-1: Manufacturer: syz
[  220.443454][ T5983] usb 4-1: SerialNumber: syz
[  220.448218][ T5899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  220.459051][ T5173] Bluetooth: hci0: command 0x0c1a tx timeout
[  220.459194][ T5849] Bluetooth: hci4: command 0x0419 tx timeout
[  220.471780][   T24] usb 3-1: Product: syz
[  220.477717][   T24] usb 3-1: Manufacturer: syz
[  220.483182][ T5983] usb 4-1: config 0 descriptor??
[  220.488214][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.496304][   T24] usb 3-1: SerialNumber: syz
[  220.503663][ T5899] usb 6-1: Product: syz
[  220.508652][ T5899] usb 6-1: Manufacturer: syz
[  220.514057][   T24] usb 3-1: config 0 descriptor??
[  220.519238][ T5899] usb 6-1: SerialNumber: syz
[  220.525390][   T24] hub 3-1:0.0: bad descriptor, ignoring hub
[  220.532591][   T24] hub 3-1:0.0: probe with driver hub failed with error -5
[  220.545518][ T5899] cdc_mbim 6-1:1.0: skipping garbage
[  220.552344][   T24] usb 3-1: selecting invalid altsetting 0
[  220.710022][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'.
[  220.719142][ T8283] bond0: entered promiscuous mode
[  220.724230][ T8283] bond_slave_0: entered promiscuous mode
[  220.730100][ T8283] bond_slave_1: entered promiscuous mode
[  220.825011][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'.
[  220.847540][ T8276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  220.879042][   T10] usb 4-1: USB disconnect, device number 14
[  221.764541][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  221.935201][ T8276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  221.950562][ T5899] cdc_mbim 6-1:1.0: setting tx_max = 48
[  221.964106][ T5899] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  221.979906][ T5899] wwan wwan0: port wwan0mbim0 attached
[  221.998976][ T5899] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 02:a3:03:17:9a:db
[  222.257418][ T8321] sp0: Synchronizing with TNC
[  222.266747][ T8317] [U] è
[  222.376534][ T8319] overlayfs: missing 'workdir'
[  222.456100][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  222.515946][   T30] audit: type=1400 audit(1758002327.783:585): avc:  denied  { mount } for  pid=8318 comm="syz.3.565" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  222.559941][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.566200][ T5849] Bluetooth: hci4: command 0x0419 tx timeout
[  222.654339][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.708506][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.716649][   T30] audit: type=1400 audit(1758002328.133:586): avc:  denied  { unmount } for  pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  222.783756][   T24] usb 6-1: USB disconnect, device number 7
[  222.791067][   T24] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  222.806387][   T30] audit: type=1400 audit(1758002328.233:587): avc:  denied  { write } for  pid=8328 comm="syz.3.566" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  222.874872][   T30] audit: type=1400 audit(1758002328.233:588): avc:  denied  { open } for  pid=8328 comm="syz.3.566" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  222.982519][   T24] wwan wwan0: port wwan0mbim0 disconnected
[  223.016913][   T30] audit: type=1400 audit(1758002328.263:589): avc:  denied  { ioctl } for  pid=8328 comm="syz.3.566" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x534b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  223.352391][ T8342] netlink: 'syz.0.567': attribute type 10 has an invalid length.
[  223.373003][ T8342] veth0_vlan: left promiscuous mode
[  223.380770][ T8342] veth0_vlan: entered promiscuous mode
[  223.395018][ T8342] team0: Device veth0_vlan failed to register rx_handler
[  223.603125][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'.
[  223.732476][ T8351] ubi: mtd0 is already attached to ubi31
[  224.392534][ T8370] No source specified
[  224.399563][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.571'.
[  226.304390][ T1216] usb 3-1: USB disconnect, device number 18
[  226.802376][ T8403] serio: Serial port ptm0
[  227.864271][ T8416] netlink: 'syz.4.580': attribute type 39 has an invalid length.
[  228.626197][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'.
[  228.673958][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'.
[  229.190563][ T5987] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  229.442654][ T5987] usb 5-1: device descriptor read/64, error -71
[  229.475255][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  229.621351][ T8432] netlink: 2 bytes leftover after parsing attributes in process `syz.5.582'.
[  229.645504][ T8432] overlayfs: missing 'lowerdir'
[  229.659446][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  229.669685][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  229.690474][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  229.772761][ T5987] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  229.814415][ T5899] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  229.830180][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.838192][ T5899] usb 1-1: Product: syz
[  229.844680][ T5899] usb 1-1: Manufacturer: syz
[  229.860890][ T5899] usb 1-1: SerialNumber: syz
[  229.884865][ T5899] usb 1-1: config 0 descriptor??
[  229.890482][ T8440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.901558][ T8440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.944916][ T5987] usb 5-1: device descriptor read/64, error -71
[  229.953604][ T5899] usb 1-1: ucan: probing device on interface #0
[  230.091657][ T5987] usb usb5-port1: attempt power cycle
[  230.154580][   T30] audit: type=1400 audit(1758002335.583:590): avc:  denied  { ioctl } for  pid=8439 comm="syz.0.586" path="net:[4026533098]" dev="nsfs" ino=4026533098 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  230.299543][ T8454] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  230.451141][ T5987] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  230.467313][ T8454] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.482730][ T5987] usb 5-1: device descriptor read/8, error -71
[  230.581710][ T5899] ucan 1-1:0.0: probe with driver ucan failed with error -71
[  230.607860][ T5899] usb 1-1: USB disconnect, device number 16
[  230.638031][ T8456] veth3: entered promiscuous mode
[  230.664155][ T8456] bond1: (slave veth3): Enslaving as an active interface with a down link
[  230.785619][ T5987] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  230.812852][ T5987] usb 5-1: device descriptor read/8, error -71
[  231.000400][ T5987] usb usb5-port1: unable to enumerate USB device
[  231.072730][ T1164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.692037][ T1164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.851488][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  231.860906][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  231.870800][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  231.881365][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  231.891346][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.900994][   T30] audit: type=1400 audit(1758002337.313:591): avc:  denied  { setopt } for  pid=8465 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  231.974488][   T30] audit: type=1400 audit(1758002337.313:592): avc:  denied  { accept } for  pid=8465 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  232.083016][ T8477] netlink: 'syz.4.597': attribute type 10 has an invalid length.
[  232.100616][ T1164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.293373][ T8478] qrtr: Invalid version 0
[  232.338472][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.354636][ T1097] Bluetooth: hci5: Frame reassembly failed (-84)
[  232.383307][ T8477] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  232.684086][ T1164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.720356][ T1216] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  232.934843][ T1216] usb 1-1: Using ep0 maxpacket: 8
[  232.946165][ T1216] usb 1-1: config 180 has an invalid interface number: 69 but max is 3
[  232.956999][ T1216] usb 1-1: config 180 has an invalid interface number: 164 but max is 3
[  232.986686][ T1216] usb 1-1: config 180 has an invalid interface number: 5 but max is 3
[  233.118350][ T1216] usb 1-1: config 180 contains an unexpected descriptor of type 0x2, skipping
[  233.174224][ T1216] usb 1-1: config 180 has an invalid interface number: 119 but max is 3
[  233.219305][ T1216] usb 1-1: config 180 contains an unexpected descriptor of type 0x1, skipping
[  233.248753][ T1216] usb 1-1: config 180 contains an unexpected descriptor of type 0x1, skipping
[  233.318053][ T1216] usb 1-1: config 180 has no interface number 0
[  233.330344][ T1216] usb 1-1: config 180 has no interface number 1
[  233.346965][ T1216] usb 1-1: config 180 has no interface number 2
[  233.367234][ T1216] usb 1-1: config 180 has no interface number 3
[  233.492979][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  233.588085][ T1216] usb 1-1: config 180 interface 69 altsetting 4 bulk endpoint 0xC has invalid maxpacket 1024
[  233.676427][ T1216] usb 1-1: config 180 interface 69 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  233.777807][ T8468] chnl_net:caif_netlink_parms(): no params data found
[  233.793350][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has a duplicate endpoint with address 0xB, skipping
[  233.854880][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  233.931645][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[  233.970597][ T5849] Bluetooth: hci0: command tx timeout
[  233.998468][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has an endpoint descriptor with address 0xA7, changing to 0x87
[  234.022749][ T1216] usb 1-1: config 180 interface 69 altsetting 4 endpoint 0x87 has an invalid bInterval 26, changing to 8
[  234.045018][ T1164] bridge_slave_1: left allmulticast mode
[  234.051471][ T1164] bridge_slave_1: left promiscuous mode
[  234.058113][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.067522][ T1216] usb 1-1: config 180 interface 69 altsetting 4 endpoint 0x87 has invalid maxpacket 26405, setting to 1024
[  234.081275][ T1216] usb 1-1: config 180 interface 69 altsetting 4 endpoint 0xF has invalid maxpacket 512, setting to 64
[  234.092778][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  234.104382][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[  234.115481][ T1216] usb 1-1: config 180 interface 69 altsetting 4 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[  234.129225][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  234.180826][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  234.192282][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  234.205238][ T1216] usb 1-1: config 180 interface 164 altsetting 1 bulk endpoint 0xA has invalid maxpacket 16
[  234.226409][ T1164] bridge_slave_0: left allmulticast mode
[  234.235701][ T1164] bridge_slave_0: left promiscuous mode
[  234.266780][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.282908][ T1216] usb 1-1: config 180 interface 164 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  234.290236][ T5849] Bluetooth: hci5: command 0x1003 tx timeout
[  234.295638][ T5173] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  234.330197][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  234.373691][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  234.411075][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  234.429807][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x87, skipping
[  234.481363][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  234.501468][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  234.552722][ T1216] usb 1-1: config 180 interface 164 altsetting 1 endpoint 0x8 has an invalid bInterval 207, changing to 7
[  234.589363][ T1216] usb 1-1: config 180 interface 164 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  234.632832][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  234.853256][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.602'.
[  235.214319][   T30] audit: type=1400 audit(1758002340.133:593): avc:  denied  { listen } for  pid=8509 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  235.337463][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  235.413127][   T30] audit: type=1400 audit(1758002340.133:594): avc:  denied  { accept } for  pid=8509 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  235.469679][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  235.566355][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  235.599475][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  235.680441][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  235.693285][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  235.716208][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  235.853260][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  235.905097][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  235.930873][ T1216] usb 1-1: config 180 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  236.082842][ T5173] Bluetooth: hci0: command tx timeout
[  236.099212][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[  236.110581][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[  236.121800][ T1216] usb 1-1: config 180 interface 119 altsetting 10 bulk endpoint 0x7 has invalid maxpacket 64
[  236.139411][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xC, skipping
[  236.166553][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[  236.177778][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[  236.190929][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  236.202869][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xB, skipping
[  236.245492][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0x5, skipping
[  236.286612][   T30] audit: type=1400 audit(1758002341.703:595): avc:  denied  { bind } for  pid=8536 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  236.288369][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0x2, skipping
[  236.379942][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xA, skipping
[  236.394549][   T30] audit: type=1400 audit(1758002341.703:596): avc:  denied  { setopt } for  pid=8536 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  236.464156][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0x8, skipping
[  236.515908][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0x1, skipping
[  236.538986][ T1216] usb 1-1: config 180 interface 119 altsetting 10 has a duplicate endpoint with address 0xD, skipping
[  236.550702][ T1216] usb 1-1: config 180 interface 69 has no altsetting 0
[  236.557616][ T1216] usb 1-1: config 180 interface 164 has no altsetting 0
[  236.565057][ T1216] usb 1-1: config 180 interface 5 has no altsetting 0
[  236.573165][ T1216] usb 1-1: config 180 interface 119 has no altsetting 0
[  236.593968][ T1216] usb 1-1: string descriptor 0 read error: -71
[  236.600290][ T1216] usb 1-1: New USB device found, idVendor=12d1, idProduct=842d, bcdDevice=d5.b1
[  236.609411][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.654339][ T1164]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.655640][ T1216] usb 1-1: can't set config #180, error -71
[  236.677134][ T1164]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.693699][ T1216] usb 1-1: USB disconnect, device number 17
[  236.694390][ T1164]  (unregistering): Released all slaves
[  236.838400][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.854258][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.861804][ T8468] bridge_slave_0: entered allmulticast mode
[  236.870443][ T8468] bridge_slave_0: entered promiscuous mode
[  237.096288][ T8550] FAULT_INJECTION: forcing a failure.
[  237.096288][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.109464][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.4.607 Not tainted syzkaller #0 PREEMPT(full) 
[  237.109487][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.109497][ T8550] Call Trace:
[  237.109503][ T8550]  <TASK>
[  237.109510][ T8550]  dump_stack_lvl+0x16c/0x1f0
[  237.109538][ T8550]  should_fail_ex+0x512/0x640
[  237.109564][ T8550]  _copy_to_user+0x32/0xd0
[  237.109591][ T8550]  simple_read_from_buffer+0xcb/0x170
[  237.109612][ T8550]  proc_fail_nth_read+0x197/0x240
[  237.109633][ T8550]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.109656][ T8550]  ? rw_verify_area+0xcf/0x6c0
[  237.109682][ T8550]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.109703][ T8550]  vfs_read+0x1e4/0xcf0
[  237.109723][ T8550]  ? __pfx___mutex_lock+0x10/0x10
[  237.109747][ T8550]  ? __pfx_vfs_read+0x10/0x10
[  237.109772][ T8550]  ? __fget_files+0x20e/0x3c0
[  237.109799][ T8550]  ksys_read+0x12a/0x250
[  237.109816][ T8550]  ? __pfx_ksys_read+0x10/0x10
[  237.109842][ T8550]  do_syscall_64+0xcd/0x4e0
[  237.109866][ T8550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.109884][ T8550] RIP: 0033:0x7f187b18d5bc
[  237.109899][ T8550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  237.109915][ T8550] RSP: 002b:00007f18793f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.109932][ T8550] RAX: ffffffffffffffda RBX: 00007f187b3d6180 RCX: 00007f187b18d5bc
[  237.109944][ T8550] RDX: 000000000000000f RSI: 00007f18793f60a0 RDI: 0000000000000005
[  237.109955][ T8550] RBP: 00007f18793f6090 R08: 0000000000000000 R09: 0000000000000000
[  237.109965][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.109975][ T8550] R13: 00007f187b3d6218 R14: 00007f187b3d6180 R15: 00007ffc52090958
[  237.110000][ T8550]  </TASK>
[  237.371555][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.434809][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.442560][ T8468] bridge_slave_1: entered allmulticast mode
[  237.449750][ T8468] bridge_slave_1: entered promiscuous mode
[  237.726379][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.756733][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.977691][   T30] audit: type=1400 audit(1758002343.403:597): avc:  denied  { write } for  pid=8562 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  238.136248][ T5173] Bluetooth: hci0: command tx timeout
[  238.323281][   T30] audit: type=1400 audit(1758002343.753:598): avc:  denied  { setopt } for  pid=8552 comm="syz.4.608" lport=54661 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  238.673914][ T1164] hsr_slave_0: left promiscuous mode
[  238.707760][ T1164] hsr_slave_1: left promiscuous mode
[  238.714752][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.728317][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.805641][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.850272][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.920197][   T30] audit: type=1400 audit(1758002344.323:599): avc:  denied  { create } for  pid=8554 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  239.013945][ T1164] veth1_macvtap: left promiscuous mode
[  239.117787][ T1164] veth0_macvtap: left promiscuous mode
[  239.143693][ T1164] veth1_vlan: left promiscuous mode
[  239.199868][ T1164] veth0_vlan: left promiscuous mode
[  239.295416][ T8585] can: request_module (can-proto-0) failed.
[  240.156382][ T8597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  240.210392][ T5173] Bluetooth: hci0: command tx timeout
[  240.411056][ T1164] team0 (unregistering): Port device team_slave_1 removed
[  240.517257][ T1164] team0 (unregistering): Port device team_slave_0 removed
[  241.559221][ T8620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'.
[  241.785242][   T30] audit: type=1400 audit(1758002347.193:600): avc:  denied  { lock } for  pid=8615 comm="syz.3.620" path="socket:[20104]" dev="sockfs" ino=20104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  241.987287][ T8468] team0: Port device team_slave_0 added
[  242.082619][ T8468] team0: Port device team_slave_1 added
[  242.742055][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.769343][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.081596][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.135990][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.143083][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.394342][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.703163][ T8468] hsr_slave_0: entered promiscuous mode
[  244.741210][ T8468] hsr_slave_1: entered promiscuous mode
[  244.748241][ T8468] debugfs: 'hsr0' already exists in 'hsr'
[  244.754236][ T8468] Cannot create hsr debugfs directory
[  244.796159][ T8651] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  244.819515][ T8651] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  246.203861][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'.
[  246.584508][ T8468] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  246.631312][ T8468] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  246.772021][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'.
[  247.031173][ T8468] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  247.102921][ T8670] openvswitch: netlink: Flow actions attr not present in new flow.
[  247.330195][ T8468] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  247.811417][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.864290][ T8704] macvlan0: entered promiscuous mode
[  247.871463][ T8704] netlink: 'syz.2.632': attribute type 2 has an invalid length.
[  247.888956][ T8468] 8021q: adding VLAN 0 to HW filter on device team0
[  247.970076][   T30] audit: type=1400 audit(1758002353.393:601): avc:  denied  { setattr } for  pid=8706 comm="syz.4.633" name="RXRPC" dev="sockfs" ino=21091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  247.972737][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.992881][    C1] vkms_vblank_simulate: vblank timer overrun
[  248.005931][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.148777][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.155920][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.329696][ T8717] overlayfs: missing 'lowerdir'
[  248.453116][ T1216] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  248.542243][   T30] audit: type=1400 audit(1758002353.973:602): avc:  denied  { map } for  pid=8723 comm="syz.0.638" path="socket:[20315]" dev="sockfs" ino=20315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  248.677337][   T30] audit: type=1400 audit(1758002353.993:603): avc:  denied  { read } for  pid=8723 comm="syz.0.638" path="socket:[20315]" dev="sockfs" ino=20315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  248.730189][ T1216] usb 3-1: Using ep0 maxpacket: 16
[  248.815051][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.827225][   T30] audit: type=1400 audit(1758002354.093:604): avc:  denied  { firmware_load } for  pid=8719 comm="syz.4.637" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  248.842723][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.923026][ T8731] netlink: 'syz.0.639': attribute type 9 has an invalid length.
[  248.948272][ T1216] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  248.964664][ T8731] netlink: 'syz.0.639': attribute type 7 has an invalid length.
[  248.984593][ T8731] netlink: 'syz.0.639': attribute type 8 has an invalid length.
[  248.994583][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.041755][ T1216] usb 3-1: config 0 descriptor??
[  249.250402][   T92] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  249.352503][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.435724][ T8740] serio: Serial port ptm0
[  249.809805][ T1216] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[  249.860266][   T92] usb 1-1: Using ep0 maxpacket: 8
[  249.878021][   T92] usb 1-1: config 0 interface 0 has no altsetting 0
[  249.937024][ T8725] syz.4.637 (8725) used greatest stack depth: 17288 bytes left
[  249.942323][   T92] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  249.970560][   T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.988526][   T92] usb 1-1: Product: syz
[  249.996436][   T92] usb 1-1: Manufacturer: syz
[  250.026413][   T92] usb 1-1: SerialNumber: syz
[  250.128686][   T92] usb 1-1: config 0 descriptor??
[  250.161193][   T92] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  250.239314][ T5983] usb 3-1: USB disconnect, device number 19
[  250.244383][ T8751] syzkaller0: entered promiscuous mode
[  250.257840][ T8751] syzkaller0: entered allmulticast mode
[  250.412290][   T92] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  250.438605][   T92] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  250.639637][ T5987] usb 1-1: USB disconnect, device number 18
[  251.081163][ T5983] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  251.239263][ T8764] random: crng reseeded on system resumption
[  251.246522][ T8764] FAULT_INJECTION: forcing a failure.
[  251.246522][ T8764] name failslab, interval 1, probability 0, space 0, times 0
[  251.259418][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) 
[  251.259435][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  251.259441][ T8764] Call Trace:
[  251.259445][ T8764]  <TASK>
[  251.259449][ T8764]  dump_stack_lvl+0x16c/0x1f0
[  251.259468][ T8764]  should_fail_ex+0x512/0x640
[  251.259484][ T8764]  should_failslab+0xc2/0x120
[  251.259498][ T8764]  __kmalloc_cache_noprof+0x6a/0x3e0
[  251.259518][ T8764]  ? do_raw_spin_lock+0x12c/0x2b0
[  251.259531][ T8764]  ? find_held_lock+0x2b/0x80
[  251.259544][ T8764]  ? async_schedule_node_domain+0x54/0x120
[  251.259562][ T8764]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  251.259575][ T8764]  async_schedule_node_domain+0x54/0x120
[  251.259593][ T8764]  dev_cache_fw_image+0x38e/0x490
[  251.259605][ T8764]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  251.259619][ T8764]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  251.259630][ T8764]  dpm_for_each_dev+0x5d/0xb0
[  251.259648][ T8764]  fw_pm_notify+0x81/0x150
[  251.259658][ T8764]  notifier_call_chain+0xb9/0x410
[  251.259675][ T8764]  ? __pfx_fw_pm_notify+0x10/0x10
[  251.259689][ T8764]  blocking_notifier_call_chain_robust+0xc8/0x160
[  251.259708][ T8764]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  251.259731][ T8764]  pm_notifier_call_chain_robust+0x27/0x60
[  251.259749][ T8764]  snapshot_open+0x218/0x2b0
[  251.259765][ T8764]  ? __pfx_snapshot_open+0x10/0x10
[  251.259781][ T8764]  misc_open+0x35a/0x420
[  251.259792][ T8764]  ? __pfx_misc_open+0x10/0x10
[  251.259801][ T8764]  chrdev_open+0x234/0x6a0
[  251.259816][ T8764]  ? __pfx_chrdev_open+0x10/0x10
[  251.259830][ T8764]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  251.259846][ T8764]  do_dentry_open+0x97f/0x1530
[  251.259859][ T8764]  ? __pfx_chrdev_open+0x10/0x10
[  251.259875][ T8764]  vfs_open+0x82/0x3f0
[  251.259891][ T8764]  path_openat+0x1de4/0x2cb0
[  251.259908][ T8764]  ? __pfx_path_openat+0x10/0x10
[  251.259925][ T8764]  do_filp_open+0x20b/0x470
[  251.259937][ T8764]  ? __pfx_do_filp_open+0x10/0x10
[  251.259960][ T8764]  ? alloc_fd+0x471/0x7d0
[  251.259976][ T8764]  do_sys_openat2+0x11b/0x1d0
[  251.259995][ T8764]  ? __pfx_do_sys_openat2+0x10/0x10
[  251.260014][ T8764]  ? __fget_files+0x20e/0x3c0
[  251.260032][ T8764]  __x64_sys_openat+0x174/0x210
[  251.260053][ T8764]  ? __pfx___x64_sys_openat+0x10/0x10
[  251.260068][ T8764]  ? ksys_write+0x1ac/0x250
[  251.260101][ T8764]  do_syscall_64+0xcd/0x4e0
[  251.260125][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.260141][ T8764] RIP: 0033:0x7f187b18eba9
[  251.260163][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.260179][ T8764] RSP: 002b:00007f187bf5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  251.260191][ T8764] RAX: ffffffffffffffda RBX: 00007f187b3d5fa0 RCX: 00007f187b18eba9
[  251.260198][ T8764] RDX: 0000000000020001 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  251.260204][ T8764] RBP: 00007f187bf5c090 R08: 0000000000000000 R09: 0000000000000000
[  251.260211][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.260217][ T8764] R13: 00007f187b3d6038 R14: 00007f187b3d5fa0 R15: 00007ffc52090958
[  251.260232][ T8764]  </TASK>
[  251.574932][ T8764] 
[  251.577257][ T8764] ============================================
[  251.583391][ T8764] WARNING: possible recursive locking detected
[  251.589510][ T8764] syzkaller #0 Not tainted
[  251.593891][ T8764] --------------------------------------------
[  251.600008][ T8764] syz.4.645/8764 is trying to acquire lock:
[  251.605882][ T8764] ffffffff8f51a128 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640
[  251.613779][ T8764] 
[  251.613779][ T8764] but task is already holding lock:
[  251.621112][ T8764] ffffffff8f51a128 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150
[  251.629252][ T8764] 
[  251.629252][ T8764] other info that might help us debug this:
[  251.637280][ T8764]  Possible unsafe locking scenario:
[  251.637280][ T8764] 
[  251.644701][ T8764]        CPU0
[  251.647955][ T8764]        ----
[  251.651223][ T8764]   lock(fw_lock);
[  251.654917][ T8764]   lock(fw_lock);
[  251.658629][ T8764] 
[  251.658629][ T8764]  *** DEADLOCK ***
[  251.658629][ T8764] 
[  251.666744][ T8764]  May be due to missing lock nesting notation
[  251.666744][ T8764] 
[  251.675038][ T8764] 5 locks held by syz.4.645/8764:
[  251.680033][ T8764]  #0: ffffffff8f3045a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  251.688449][ T8764]  #1: ffffffff8e484d08 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0
[  251.698772][ T8764]  #2: ffffffff8e4c5170 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160
[  251.710567][ T8764]  #3: ffffffff8f51a128 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150
[  251.719156][ T8764]  #4: ffffffff8f514b28 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0
[  251.728433][ T8764] 
[  251.728433][ T8764] stack backtrace:
[  251.734293][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) 
[  251.734308][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  251.734315][ T8764] Call Trace:
[  251.734319][ T8764]  <TASK>
[  251.734324][ T8764]  dump_stack_lvl+0x116/0x1f0
[  251.734340][ T8764]  print_deadlock_bug+0x1e9/0x240
[  251.734356][ T8764]  __lock_acquire+0x1133/0x1ce0
[  251.734374][ T8764]  ? kasan_save_track+0x14/0x30
[  251.734387][ T8764]  lock_acquire+0x179/0x350
[  251.734396][ T8764]  ? assign_fw+0x4e/0x640
[  251.734406][ T8764]  ? __pfx___might_resched+0x10/0x10
[  251.734420][ T8764]  ? path_openat+0x1de4/0x2cb0
[  251.734432][ T8764]  ? do_filp_open+0x20b/0x470
[  251.734443][ T8764]  ? do_sys_openat2+0x11b/0x1d0
[  251.734459][ T8764]  ? assign_fw+0x4e/0x640
[  251.734469][ T8764]  __mutex_lock+0x193/0x1060
[  251.734483][ T8764]  ? assign_fw+0x4e/0x640
[  251.734495][ T8764]  ? __pfx___mutex_lock+0x10/0x10
[  251.734511][ T8764]  ? kasan_quarantine_put+0x10a/0x240
[  251.734522][ T8764]  ? lockdep_hardirqs_on+0x7c/0x110
[  251.734535][ T8764]  ? assign_fw+0x4e/0x640
[  251.734545][ T8764]  assign_fw+0x4e/0x640
[  251.734556][ T8764]  ? _request_firmware+0x957/0x1470
[  251.734568][ T8764]  _request_firmware+0x988/0x1470
[  251.734581][ T8764]  ? __pfx__request_firmware+0x10/0x10
[  251.734593][ T8764]  ? mark_held_locks+0x49/0x80
[  251.734609][ T8764]  ? irqentry_exit+0x3b/0x90
[  251.734622][ T8764]  ? lockdep_hardirqs_on+0x7c/0x110
[  251.734635][ T8764]  __async_dev_cache_fw_image+0xb1/0x340
[  251.734648][ T8764]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  251.734662][ T8764]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  251.734675][ T8764]  async_schedule_node_domain+0xd4/0x120
[  251.734691][ T8764]  dev_cache_fw_image+0x38e/0x490
[  251.734703][ T8764]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  251.734715][ T8764]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  251.734731][ T8764]  dpm_for_each_dev+0x5d/0xb0
[  251.734756][ T8764]  fw_pm_notify+0x81/0x150
[  251.734767][ T8764]  notifier_call_chain+0xb9/0x410
[  251.734784][ T8764]  ? __pfx_fw_pm_notify+0x10/0x10
[  251.734795][ T8764]  blocking_notifier_call_chain_robust+0xc8/0x160
[  251.734813][ T8764]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  251.734833][ T8764]  pm_notifier_call_chain_robust+0x27/0x60
[  251.734850][ T8764]  snapshot_open+0x218/0x2b0
[  251.734866][ T8764]  ? __pfx_snapshot_open+0x10/0x10
[  251.734882][ T8764]  misc_open+0x35a/0x420
[  251.734892][ T8764]  ? __pfx_misc_open+0x10/0x10
[  251.734901][ T8764]  chrdev_open+0x234/0x6a0
[  251.734914][ T8764]  ? __pfx_chrdev_open+0x10/0x10
[  251.734927][ T8764]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  251.734941][ T8764]  do_dentry_open+0x97f/0x1530
[  251.734952][ T8764]  ? __pfx_chrdev_open+0x10/0x10
[  251.734966][ T8764]  vfs_open+0x82/0x3f0
[  251.734981][ T8764]  path_openat+0x1de4/0x2cb0
[  251.734995][ T8764]  ? __pfx_path_openat+0x10/0x10
[  251.735008][ T8764]  do_filp_open+0x20b/0x470
[  251.735020][ T8764]  ? __pfx_do_filp_open+0x10/0x10
[  251.735036][ T8764]  ? alloc_fd+0x471/0x7d0
[  251.735048][ T8764]  do_sys_openat2+0x11b/0x1d0
[  251.735063][ T8764]  ? __pfx_do_sys_openat2+0x10/0x10
[  251.735078][ T8764]  ? __fget_files+0x20e/0x3c0
[  251.735091][ T8764]  __x64_sys_openat+0x174/0x210
[  251.735106][ T8764]  ? __pfx___x64_sys_openat+0x10/0x10
[  251.735125][ T8764]  ? ksys_write+0x1ac/0x250
[  251.735137][ T8764]  do_syscall_64+0xcd/0x4e0
[  251.735152][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.735164][ T8764] RIP: 0033:0x7f187b18eba9
[  251.735173][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.735184][ T8764] RSP: 002b:00007f187bf5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  251.735194][ T8764] RAX: ffffffffffffffda RBX: 00007f187b3d5fa0 RCX: 00007f187b18eba9
[  251.735201][ T8764] RDX: 0000000000020001 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  251.735208][ T8764] RBP: 00007f187bf5c090 R08: 0000000000000000 R09: 0000000000000000
[  251.735215][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.735221][ T8764] R13: 00007f187b3d6038 R14: 00007f187b3d5fa0 R15: 00007ffc52090958
[  251.735231][ T8764]  </TASK>
[  252.158609][ T5983] usb 3-1: Using ep0 maxpacket: 8
[  252.164872][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.174675][ T5983] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  252.183964][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.252476][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.258756][ T1300] ieee802154 phy1 wpan1: encryption failed: -22