last executing test programs:

9.961112738s ago: executing program 0 (id=6754):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x2f89c49d, 0xd63a}}, './file0\x00'})
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0xa, 0x1, '^*}$^\x00'}, @NFTA_COMPAT_NAME={0x16, 0x1, '/dev/snd/midiC#D#\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044000}, 0x40)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b", @ANYRESOCT], 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000880))

6.780134338s ago: executing program 0 (id=6762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x1ed3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x5, 0x279}, 0x0, &(0x7f0000000140))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x519281, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
fchdir(r3)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680})
acct(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)={0x0})

6.245464882s ago: executing program 1 (id=6765):
syz_open_dev$sg(0x0, 0x0, 0x5)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB, @ANYRESHEX])

6.105836443s ago: executing program 0 (id=6767):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x1f, 0xf6, 0xfffff024}, {0x20, 0xf, 0xff, 0xfffff038}, {0x6, 0x80}]}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {0xf, 0xffe0}, {0xfffd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004805}, 0x44880)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400e5012abd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01000400ff01000000140000000000000000000100000000"], 0x38}}, 0x20000050)

5.808767949s ago: executing program 0 (id=6769):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0)
prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
inotify_init()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0)

4.790166194s ago: executing program 0 (id=6777):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1c, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x26, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fb"], 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x480b0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
socket(0x1e, 0x5, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1006, 0x2, {0x0}, 0x10000003})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000100)='jffs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='so\f\x85urc\x10\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000004c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UT\x13i?\xbe\xcd\xe8>}\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8)

3.964478728s ago: executing program 4 (id=6780):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

3.833013908s ago: executing program 4 (id=6781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

3.507029769s ago: executing program 4 (id=6782):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

3.387787863s ago: executing program 1 (id=6784):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x24, 0x0, &(0x7f0000000340)=0xc)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200010000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000cb7104837ec96c6b9eae5c79fc752c8afd0399add952f5149b63eeee945105175f7a978b0bdda2efc19a60d9f39505545b5b0c4ed52196652e4a7c84549a4283d6c50fe7ecc04fd4282aa94dce11f694c8d98f2afd9e154434064a18def117d1bc8b552a930221ce93168b48f49f66df48c7d2c606600812410c1936028d356239ff030000d1ae4581bb55308e0182a02728aa44aa90455ccf9b879aaeaf2783f21bb83d35f782bbdf131a87156f6bc1d859c31f644bf13613682ebe91863a8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c", 0x67}], 0x1}, 0x48000)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r4, &(0x7f00000002c0)=""/212, 0xd4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='io_uring_register\x00', r5, 0x0, 0x3}, 0x18)
r6 = io_uring_setup(0x774, &(0x7f0000000340)={0x0, 0xa8c3, 0x1000, 0x3, 0xba})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000000)=[{0x0}], 0x1)
tkill(r3, 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000040c0)={0x25c0, 0x12, 0x400, 0x70bd26, 0x25dfdbfc, {0xb, 0x2, 0x49, 0xe4, {0x4e21, 0x4e22, [0x2, 0x3ff, 0x4, 0x4], [0x3, 0x10001, 0x6, 0x7], 0x0, [0x0, 0x4]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "eaba6b142409c0f85adf6bf1154f5315612718a76d3047f74251abf68388411a2fb628d80ffab414f18c35980c7c8d6bdeaf5bb42e0c4a1767445ffe53690b02c6d7da8dff9d3fea0b4ee51212e1dc49a4809114ec5ac596a4d4d810d7c67b5728a787e56cdbf5ef0176f175ab509f3328423f19f4c8c21d3558b232c67424aa5614d052bb25fecd"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "8599b846ef1f44de35ceb0896136ced7fc68845831abd4dbcf61288b8be4fef1d3f829fc2986276556d08385ccaf9e2ffcb31c287dea633ff36cdc0b4bc45158790f7fe035e5deccad4113ee209ecde27e3972f630558465314758c5ef52484269a87b0b0c3318584c25ab0e04df4721b8dee74c26494cb62e5433616fb3e849b7a6c4cbf7735c714490a2a79accd2cc058ccf8955f129db7a5b0b982ab6d02220ba2bb593e692616903fb1b6cf5acfecb9152f6959448b2d3"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "18d0531990d76eb8faf6c10d7752e6a46b0428e51bb44e38f60e62c902af61f21ce4942c77041fb69d8452207bbdd09ec1e3edb931b991738c2e26b730b2f69dff4bf40df2139abc44252dfeca0ec806d81a6318d56837491b2debe08f4b2af9282e3b513bb6387b6e9215bbb7f042036cbbe2416a7bce237cdb1628d0b2e01a86cd513750ab7322f11c35e4f03f55c67f7d7bc8c4b98c4ae65719e647a7ca49d64f16e19246ebdff16ac9fd4a19b266686f7f8a3457a76049350396c8fd671f8f2e5561860a8a7ef5ea160f94d9df4d93302b3068fae80dcc8e1cccbd2ac34db4942802eb45"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "d87095bc7396089191356d5b017108c68e8c52b8a76e397ce4ac670de0f79fb10703518f75f356c3e90862f97c2db5ca7b584b39e9f4a4f80c4b2524bc9c60495138884b7d6c7343d2810ce90480dc977cc5db868b3a"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "53385c3426eeb9517b0ecdafba9f9dce3f4efde159874897f694663e252a2839d35f9b88412cc21a8a9d22833764192e7188d3bb433b1f452a24c4712149e73b7fa8d6329a9b6addd417e0c837778f3029d420a45f5d167398da9a52df5a35e9494ec076a94c0466be38a4f47dda6c2859dbf4a7ae938520863feb8497054f67671189c294cc93184b42d9b614445498c36775e552f3828a6dd5059901629935c3df5a2c8415451c62bbf9fe85832ef817301e85dcf4cced6257e65580807147cd72c462b42eb75bc8630857e32bb70a8d3a3e5de38d860169dfae14fe96380527bb9c103b48170f4e8cb2676f2052759a68cc28"}, @INET_DIAG_REQ_BYTECODE={0x1e0, 0x1, "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"}]}, 0x25c0}}, 0xc000)
pread64(r6, &(0x7f0000000ac0)=""/4096, 0x1000, 0xffffffff)
syz_clone3(&(0x7f00000000c0)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000005c0)={0x81, 0x80000005, 0x1, 'queue0\x00', 0xfffffffe})

3.387259649s ago: executing program 4 (id=6785):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0xffffffff)
r1 = syz_io_uring_setup(0x88b, &(0x7f0000000240)={0x0, 0xa5e6, 0x800, 0x2003, 0x275}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
read$eventfd(0xffffffffffffffff, &(0x7f0000000600), 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4004)
socket$nl_generic(0x10, 0x3, 0x10)

2.781745619s ago: executing program 0 (id=6786):
r0 = socket$phonet(0x23, 0x2, 0x1)
recvmsg(r0, &(0x7f0000001c80)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001b40)=[{&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/164, 0xa4}, {&(0x7f0000001880)=""/113, 0x71}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000001a40)=""/211, 0xd3}], 0xa, &(0x7f0000001c00)=""/125, 0x7d}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_usb_connect(0x5, 0x51, &(0x7f0000000180)=ANY=[@ANYBLOB="120101024cf1c5086307021a6cba0110845f0102030109023f0001000000e00804000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905078f5d3a80de60f4335437df45a2291119cfe73feb60fd8139f1b074f815616f3ec8eaae58cf33c368e56c8f0916a0f04e5e1cb84e86ef472df3ab83fe855bdc35330c6b9cd07c15fddc6c4781ed0f3eb566abcb7d7a81a25f502ea0f6c3b867bea01bef295ab041e8ec09"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xd1, &(0x7f0000000240)=@string={0xd1, 0x3, "8b9cde8a18d31632efd69e78db3a915a33fe1f26721661435e2ad3d7b13c4a6280ae34abccbed0efd988e75bb7bf865d077eb076830940248f71cb1e0828a40fd9175b665388cb3d84a183ddd9808d226024d425114836173dd39d7db04f6f9fcca29367c12fc02b816de2c5780fa99962d31dcfc70dc8bffb3f35ba8a33120d18408824dc9e387e323b4c7c6ae10010624285708c2206c210a7eaa39955cc84d2b4c4e6c8e860728d3f14d29bcd1919620d94f9b7b9d2aa145300b0b17907a4c22aabe966868addf0122e6865f63e"}}, {0x62, &(0x7f00000000c0)=@string={0x62, 0x3, "37d6ffa40ab9018fcd170091cafa58fed7d9a28cc139a0d554ac48b0f5883b32feb51b18c58f5122a5e91f513ae468041420eb0bc2da08c00747bab3a9a4ca041ba7f36189425b42f8caab77f2cdce6c1f6f9ee24ee25a2c8f5f1fe6cb5a3cb2"}}, {0x29, &(0x7f0000000040)=@string={0x29, 0x3, "6322e8ea3d0382e770dfc8e335d573d2b8b4d6c18eb5628e9a8e98d0d77618beb198652bae8406"}}, {0x77, &(0x7f0000000380)=@string={0x77, 0x3, "6ce87646637abf820bbc21a78b078545154e6cff25802aa9123847e547806eb23fda40346785eea286ac92312f5780c2dc10478952439e150e5e9fe1066aa65f7dbeee57223e825aac5a325f4d3a4b8268a7dd780045671eeb82fdaecc7f10b9e90ba08f2ec260f57cbac478a3e5845750738d26b2"}}, {0xb1, &(0x7f0000000400)=@string={0xb1, 0x3, "8a10a0980120529a103338b5868cbe8da296e8dcb135a1eb23085e66aea2c4e6d9ea2c58799aea9af140429e10fa22521787a56c752bdcaa00c22b8a6d61301ce73745e4ad12a6cf6bd9f2ae1d083e6dfb40ff6c24a66be60a66ef5c29749fbd09b7047ef9fbdf493ebeb1c3af4d793d26e639b0ee9ecdbd9672d9f2cc4385caf0e6a631c89d7de9aae1c1c9275ca12c5121c25f795b90c10d342de082417bebec72f1900af7139a80926399c437f8"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}]})

2.329382598s ago: executing program 3 (id=6789):
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=<r4=>r2], 0x0}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r6, 0x615, 0x101, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x44}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x81)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES64=r4, @ANYRESDEC=r8, @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYBLOB="ac6b5bb10e79918bfaa6b1c626544f450f03f7d9de24149ae6cf55c4c9ae6ebde2664051fec448949d78c5b8f4da7644163a1958761174ec5fc28b8e7daa899b971406cd0c2c96b7260fe7bf942e879471529f6e66579825f048a1d736cdce59d074f52ce5145a006a6a1d69744cbb6073d57371824db9db701dbdebaaf6a0a07a43afa9fe5341a5c08a0312abd2efa7b830802e65c470fb09c4381e0d1ada60d3d33d08f0665f47317293d79761fec232deae537ab349fe894d97e4365bfb743209c79e7055abbf578e845b999b30e2c5c5a6771bb06976", @ANYRES64=<r10=>r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="00080000fec21e55373f11d21fa8e72ea02396dcc5e0e305d498285927a11de28ec360747c4f75e6fc489a76dbacb3d0c65504d188b6ecc83b0400000028d0a2a73c25c38569fdc7fba045db0404b380e73d89278558918d3d49f4a9a710e8833c16dd46e89a1c48c98dad4901791e7ae61a374c43fcf84b6dcbfd2c39ac9b9b75187e3c17a6181ddf8207aac00a6414dac466f5e2ca85e7445193b1b12982f1cf05a6", @ANYRES16=r12, @ANYBLOB="010000000000000000002b000000180001801400020067656e65766530000000000000000000"], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004014)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x9, 0x40000, r2, 0x84, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r14}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4000, 0x0, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYRES64=r10], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg}, 0x94)

2.285695938s ago: executing program 1 (id=6790):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0)
prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
inotify_init()
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0069afba2632d0130000", @ANYRES16, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0)

2.090314181s ago: executing program 3 (id=6791):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

2.045518319s ago: executing program 3 (id=6792):
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499cc1838"], 0x58}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x1068, 0x30, 0xb, 0x70bd2d, 0x25dfdbfd}, 0x1068}, 0x1, 0x0, 0x0, 0x8890}, 0x41)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
getcwd(&(0x7f0000000140)=""/115, 0x73)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0203, 0x143)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0])

1.82069075s ago: executing program 4 (id=6793):
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x1068, 0x30, 0xb, 0x70bd2d, 0x25dfdbfd}, 0x1068}, 0x1, 0x0, 0x0, 0x8890}, 0x41)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
getcwd(&(0x7f0000000140)=""/115, 0x73)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$getflags(r2, 0x401)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0203, 0x143)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0])

1.228783768s ago: executing program 1 (id=6794):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x1f, 0xf6, 0xfffff024}, {0x20, 0xf, 0xff, 0xfffff038}, {0x6, 0x80}]}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {0xf, 0xffe0}, {0xfffd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004805}, 0x44880)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400e5012abd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01000400ff01000000140000000000000000000100000000"], 0x38}}, 0x20000050)

1.227355421s ago: executing program 2 (id=6795):
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499cc1838"], 0x58}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x1068, 0x30, 0xb, 0x70bd2d, 0x25dfdbfd}, 0x1068}, 0x1, 0x0, 0x0, 0x8890}, 0x41)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
getcwd(&(0x7f0000000140)=""/115, 0x73)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0203, 0x143)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0])

1.190290374s ago: executing program 4 (id=6796):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) (fail_nth: 1)

1.01146015s ago: executing program 2 (id=6797):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "658e57", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x4, 0x0, 0x4, {[@mss={0x2, 0x4, 0xee93}]}}}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
accept4$netrom(r2, &(0x7f0000000100)={{0x3, @default}, [@remote, @remote, @rose, @rose, @bcast, @netrom, @null, @rose]}, &(0x7f0000000080)=0x48, 0x800)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000003d00)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000000440)="f4b4d9292c9aeef3d0f9c33003d14e05717a79f32144104018003710e04a63967f53c0d77ec5b977b10d9231e6736654784dd4d70b17b809f629f0033496f05722703c51cee21c64950a24423a6f06691f3c251a10ac69cc4300e0f8d312622934394bd1ffe23f5484a12308c0d2afac7c7293dc943e86b0fcaa1e7602b65c8d594dd836d281e822a0f52f367e3427882d252b1f1c1fa0b0b5e508678608a7c4fb6e473362c43ea52735b0904764d6c6478476b8c2de0c479b3526ba8487a2d5e60bab739a6bd696356e9b140edb2d6bcdcf87af993bcd456b488cc43d28a081f87f2f7a924fd17c80361efb19a4d9b0801ec6cf802774beb9583121d5e41327540a746c2b75ddc5aee522f555f409398205eebbbf8bdc2666d44134a312289097627158abccd9ae24229c6d4efdff6673586cd24cdd5502ed485bb6f24026851598080057da4e95228a791b5bac9e6b4024ccdf543c46cfc014f6ac4284ed55ac58206d7504db5566dfdbeb08026ec0d956c62f20dc70b570e35649e61e8a6a7c809cc4a7fdb73448a3b3e5b60d9d9db180f925974ed5db9d312601eb3de2553d68a787651ca9e9c1052e5e85d092502d18f6f38a8c7dcd7eec1a08fdf443145471f5f207d6c00fb5ec3f40f86532c2d5eff17d42a3303f9bbd5d63142071f2fce190724271e6458c504e022264df91bce0da3c62f5ca933f4e083ac5c1cd536a7cd6e167089aa460651592b7f6355567d19d89e8311607d17573a26afa5d3777259f2f39d5088c637741f756ad92d34399773835b325ee9ccba8ee7ee0ba394570507c844d576bb1e40884403c3892a1c434cdabc6123616d8db20d012b09220194df97a422f16c88345fa7d90895ed0254c41b18544f4559eefbc366b99ee149a2d45f4da5422c203153cbc4d7302b75157a8dc5f07ae5e39a7e87ca765bf0dedd1c708b4b26ae5c2736071f1a702926382b734cee9eceaa1fd0170e8f9c68a78e9f5d5cae0016ea2f4dadbada0bf86e74d89308e87bcb9d36341f754f38c10ad25c4ff2ac5d035caf4dc983ba89e172700ad92e2219c2b95b8d50bca28dbff04133d00a09bf1c9efde4f9f9b8715d8e13599c0734f35da861f9a1a59cb1c60124537f4bec84c766c89827e97652b07ffd5386b061a74d5f03b7e20f72e8b52731309880630a525bbc6c29258913b580c3fd0a3f80c11c4e306de6954648d9d15315f43888bc01c39ce3014d94b33970fd50d85576995eb0ab8e90da62121c0427ef70e8b346816f20c3db935d10c46806c7a2249dd416a1eb9077de3d3889bbf51ae822af42938d75402941a12a5e4dacd26044f83737fdc6eb5e45e47535ab2d0f8bb102450cbc68c0604dfa9d31c50a80ad2457f51e5c5ebdbf965171c3f23abf487e8c2cf606db91a4f94f2a40c0ad3bd12d40663015bccdf1a7a91e606beaf65ca3bcce3a159f43ea59d1a55f3f6f89ec97d6d1adde3f8dc44e2b0dc86ced33d6f8083052219c718ff4c1ba10c529087db25fe630ad4d09da2ef89620c987118aa514ba7c524f25ee30088eb6b2daf76ff529a6ff32ef68b835fabfbb72eeea7d83e9d6c77d975bdd49fa9cb5e3a9e19915a8f5d358fdc382b7211c359373e0fe28ee3cd0c2d010e969f7965ba387ab3ab337ad133bfe08a1e736e177c96fdf1c87ab58f2673a2fa44b576744dcf8dfd7495610b0214f8251544ac33bf32d3476834654cf6c4d7ec456ebd1879a6f3827d00047aeebb83c3719dcebd6e4a969ce526674154fb01a8296c68cf6d96cb88548e962109075535c1b554ff92ded2dc71c53eeb2574bc3dd1c17c23498976e434b427b7849f5b65269f64a4ceddeccd68aa7fdcbcd2bed38ae4a136c3d35704cbf73d3cd9855bbf6df2d92b4e32168fb2a1f6332efeb068d94b8da18a0d4503fbcced763d7ef9fe280bdb88f07f6bb0169b43635fd27e95270b7484dcecc7ae1b277378f396748f16a0bb09dda37293d859a606c9bf125ad0919e18c22f6fa915fd02b8bd48ac2206c52accd9ce4202b9dcd99f8cfa8172e2afafc623bc67a0ead48c79722c510c4fa942138a7e2fd08500557d44d0450dff61784443953f589fd2ca5156afade492678f7d5af79e010db2681b6dfbf83df843aa143edbc4b8e6c267d25f0e037e8cfcf5048ebf454eb249b8cff95d0ae94fd45a38d96004d62bf538bec89329a19c1914d7d61a8132f45904f37e11a55f44d07381f576e8be13e7fb64a1a8adb739a201e15a6fc8dfed8dc69eaa92a0ab535f97e63522ef2863b804f78ffadecae36a31945f3a720f3fc8af8fd031bc9f9b4361cf7fe81e352e84b6214758afc278d8e7fa52b02a372f9e2d9691bbaf74dc3241c75b6d2b4eb9d6bdb1da9a5cb44959f3abb034471afb61a5c7ddafa68f228fb196f988444155534ccdcd828605d28eab66f512643fdf88410353e8ea25acf874a14d2997c02b155d8b0d2109707f1024d17b81a422e6829fd67f58bd44830ccc49b6d5aa4a3587849cda4d8516b1675b26ab3bcc8c339c518e4502094834027142d31bbdbae31354bbe3f1831f2efc071a6bada86d0a91412f839f7f6f0f59328d7dc99cff32f9d3f3ae01d417fd128ee1cb8b13cde57a29505fa350d624a2716f7725f71d6e83afd0a6ffc86160a85f2ac407fe60eda2a4296c4b38b08b608e7b1dd61ea7c3667f342e2b96e33f00e730ad6bb586dfad6072f3052c39a7190eabceaab4f52e6cdb061ced7a1c66b65d90fa72fdddefaf0aebaf8b033600d7fb7eb8f53842e6e8d7e246d6adce9afe17a11664395bdd98b7ac9f4b18ae1046128853bdc080675300349ac87801c567025244c0bd6f1ad21c274b1f7bd9021e28e700ea2bb91fe93b5c1f2b7bc309aed8a517f8d864270e2710965cc067c6602d7fe312dcb760bf16c4bb970f58f17615fcc002ec42bb3991998b29fe8280a7404aafab06473fd5e398de308312d69ed78c841ccbaab29b1440eea73ecd5ba727ccbd9044fa904d4d895f6321ddd319a6ff2fbd74a9662652a82db1e91835bbe1398ac9de295526616cbd96edd4c9a03764959f081200c85afe45d48adbb3b281dda6962ac86edb12021ba1bc66dca9fa691a9789a283f50b8698bc98ce7cfe9c93b2e99a6096f3a799e58e56e7a1316c5ab82a05770a9677a81402754911fccd968a349967df93bafe044f0e9086f84165387df4ef1f94e992f0493c5433062f5ec0700e7646d883f6c2a8d4c533f6c9d91b4805271bc5b1180cc5ba9d53bb44d22e5c3a2db873dcf5931d6192f571c723914852bc3fa1c26aaca5bcbb516518622557c3175819c59eba95997e92a578bbcc54cdedcadeab62f09b75071fa2e88d622f6701323638ef8e74bdf034b7cdd208891c7796e2db938b68ab55df455b791bec7757bdbbe1369ab1d018143dd54ce63337e9bb9755e40b3c06fc2dfc2db52e329e3a0bd4bb09ff1aeb87ed41944d69ba640f43972b72a56c78e0084d18728f12b4f82532c5b185611ef876db28619bb14a88033a1d13e51e3ee14730ac8a30d6d2c8de8acaa6d3abe6b549f92c7b023fba79154006ad033088b5aa95a3100fed73235bfa9a067f6b65a20b909629d0bd4dfd2650c33381c6ded59d2e7481ce548beb0ff2a7f7efba94559c6a5c5a3767b717c56f207b41abcb72d908f91ae051c8ba0f3fd65c3224a6812353b85c23e2c7dde9744010be366e9b9dbb8c79a6f80eedd6063bcb8d6b5f7fb5f84800863a938e105946cf4b4edb83506236b1e5e5417d36ada6962a9bc19cccf4411c7c082f32914e546d5f993351bf558885f7ec7a76be9e2f33148e4fdc9b0588b2d2fadd50d61f15aab03ee7472e150e51ddadb4f45c91208ad5c7494bf9af4d482f03bc1a1e78dbf3626f7953b35814b32a79da9fae64a6daaad3f207827e94422938e9d2913888107a5e869967cbd7d3112c0828542842214fbf96645ea5febea7998ff619678133c31839e1a1a72449136b1de4f1cdeaa9c1d8ad7f0609892dacd4cb9682879bbcfa6503a5516a01e68ed1cf97aa7f6e24ca4f3c516b1b6d3298d541e74ef9d1c7a56e79d98853b178cc31590db56d6b03b993fca2926694a8c1ab1f29b2881f47904809b23af9cb765cc0674c02ec4fdaecade1d1f51785c8f937a1801ff917523ce7561202e55766733f1f884b56ec0f02f918c6f7371055d9c5da44556a001fcf89956e7f8393eae139fc0f860e0fa31e6d2e1bfefce717dbfa244bd63825acf3801d289155296835a75a79d500af75a433878e9189a4fbe6616296370348b117b0cf2004af33c375c873f4a64d41882b66e574dbfc18408d753c4cc07f9ae88dc7a09fb277188dd05b91b528de190695e111b0bdc908bffa5df3211e0ee1d0c7ffb9f4afb394b9037e9ca9204c2d6e68e01a4d9f7ee50426494ae5d7b02d71555304e6e60e2b7c200bf89de2e9ff50320b11846a1f7d82351a2e7f5e79a0edc997689ad106e863fd4c972f1c5a7f0e01259ea61d965402de13d72cbc22689086b720badaef32651ac1f1b1bff6554977e2687966ba417a493b1d09fc8c67ab467195b58184b1b74de8b2b04b90358e8b2f094b67c784192475c80c69cddd5af2faf17f7e35aecdfc1c785bf87dce5047b41cea1dd271a57164daecc72a6e0e0fd88546e3190e9ce861d8203466375d40668c6b258c6206be52184914bbf7f1c712ad148aea4ef5ee426a99dee00a70afd7139a4effbf48908c75b02e04d27c760e35c508d17d3338d5fda285c5e88ba3ba073c7344f6bdf2ec512ee1a95da8ccee7a82197651f7312f729f0d1ad27c31ecb8628be4ccd216af011204631dc2696cedb22b8e6890ed53ff1f4c492261c576176fa45a339437c8e319b7b716797405cbf0101f7de2d4adaa82ac2a4733dfc2088bd64721cb3a5ba940aa91befbb8f0bcf1cc17320eaba249d376688f203e4314271c162d72636d1164386ad7c6d795e14344323ee0d98cc1caf9b8a7c908d3cce69603fda8059e9d975410d00a379dc61fcf7539e5e590ed2643b43a7108279e7d7ef46fe861c2a62d8b358606e6d6d50ceeb877433fba619f58235f155ff52eac11720129f0128d41d1048cfdf0ccffa4ef7868f5efeb064bb1de7977affd9cc64eadcd64959b6b34a5cd77ff3b73da0beba7086b8566e1f77b2331880eb263567e31b7df6d6d7c321ea8026044d28b6bdaa4729d2da7652af01d6ab2a37a1daa7c344d63ede1751d2d2e19ea607f6bc72238143713d4710466e5257e5a8e536a6ef623a42c1f928233da9c9c87e4a8ee9901c441d633f88b2aa9e2f106ca7526104a9a6829da22a74c165559b8a6dde52e04792abffb9c2dbfb878d9eb753bffda98341cf4b0b97eed61492e80288ea6d5c968186af64f5c8ea95a47eda0172cd910ef8220029aeab2aa6080e39ddc20012facbcd01473f1bdc0c31235f0213cd472d19cb907c7cb6d357e52105174ace2bf3ffe46686e86bea054d3b10db61d77611dd959c9d7ce751fed884f354480e05d4ab5c56dbb9f9bdc2ab866c8de00974dadc7bd9eb0f6b37215f99bbcc7ed40cc27a522d7065a122918b137586cda6a99ec022aa358942fc399e0c1d93f267cf9678638eb83fae316b9bca467bbdf0c18f50624640253adc38df16dd4116ce1c0ed54d49ebea09c0557ce893f4734d366d3daf1d845fdee476c4b5df47ca1b578da88bc28f96ff06f771ad0cf15813f6199b0f2a31453e4d532eddeb6654b1e587b08ca9f3265a8349528f088b465edf794a3", 0x1000}, {&(0x7f0000000200)="f9ed4ca51238a991e4440c1f9b256ad5105242cb9ec4f7c5f8362ea20f2ae279ac5b95869aa71733666e1253aa287bd2c08415fe8726dc", 0x37}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000300)="5330ee56070c2614d1965589b869f4c1a580818e38d6bb7dde8ef19afe7f1339275049ebf8ef1a5d7528b9e9b58f33b493bf71680067f9fbe5bc7ec9caa116f025c8d0f6e6cc081a954a359e83ae624721d74aa29998965bfe92913a21c3a6be4b400f794c0cb5e03f75accfeb1b047311b12b7daff05f3926563827453372befeaaa6860506bafdd3dbd43e976ee5ed3b2f31d2785fc5978cb7a5478f4fdc4df7630be20ec35aab15accc6de11a9fccd746e7d968ad1ac4c6c2842c916cbda84ef002400fbc13f38623604d363b719b03cae0f115239229b5ceecca44c9587a5ea216cb5cca67864a71c873458bc90e6e436fa0ea8d254bae", 0xf9}, {&(0x7f0000002440)="c7b3d42e191ece556209bb6749ad3513d288d6fb1918d932c8d96d2d8e44a355b6f30ada90898029a37b67a2d381bd6d6ab1cad1a93d7cb368bd362f1ca992d2d6f782a9344e8764b28828a32ccdf03f358646e3f38adddf370801102ce5b6a98e1cd41e8ce61bd09053e0bd38b4a5a471d7f44e9d7fd2dd213af1329a5a991c9097e50abbe9e6f8e9fbf1372fc5e392f3991490dd2f", 0x96}, {&(0x7f0000002500)="1689ba6e7bb9abdbf6939ea024eba07c4c4fd1d52e9d7e8d684513f9452795b04485632c15caf28d34653c7301255fa440c745a125e862880f20f522b036a1b64fc37866445de69e0ba2aa3e1cba9201c5a8db809375169febe274a2e882fa264e1a5b8893331f273cfc5c6f82679a2d9e605323dfb8c8077f051c76768b6f7544b3f20080fea254543522a87af2fc0108dc6611a8d8e0ae61", 0x99}, {&(0x7f00000025c0)="ed630843af1ab698d25c44cd75067b97405d5fc2de3d078df48ecdd4f76a02641d4155d5182c9efdce567f39827f9914e1e1e4eb5e1cd2a6816f6e1382dd7a9f0d7453a74bd1be4b294fa32484111b9ee76acacc3b97665b53434eabc44c78ca2d51e660e3f6d6f4ad8fae34098a3958ad26ca29a1301f04a31a3c5a3e3db476eac6843913a84e646768bf423427905409bf74a16524c5d8d9e5b50d92a777ed9f7fd450037aee9cd94c2d96face1e9fc8373ba8714c96543b", 0xb9}, {&(0x7f0000000240)="83f8deda6fee32f1c75c349226db05667b39dad8aeca91bd80fa30085500143ac708d4a2565cd04747622615a70b4a35c528530d78b79a2c89373a1561cd34ddc5ef39ec886b082093319135fd731caa06dbabe7", 0x54}, {&(0x7f0000002680)="d2ab3664286145a1d0968374bf06e048ede729eca4138b5580a82584213272a45e917f764c32e12908107d99b2ed14a9be598bab1649d625621e5c6e031f3717cf0feea4400997b955ef56bb581b9ad387026bb310ed261a452d6d81c75192046f888623a3e4ecc4347aed7dc3368d5ed32ab15c04ba4da8592e5dca9b91bb56d819d0e002090bd9963682c51026e6e0ae9398bf1f71f5754cf39c6360d49769cf413ba9b47f6c3fc7aa8bab4e8425d051322bbb120ee75eebe8229802c5106a", 0xc0}, {&(0x7f0000002740)="326230a4696eab8f322000437bd542e42745d2478e49a0037cd5c8b600100e8d034cfe0a945955ba4b04431a6ee9f0029e7e73476c3f80702e55a71b6dcdc86eb225ab1412088d7b7e9469cadf0fed07bef85c816ddecdf3f3f727a00de64d3a4dcb5ddc92d585c59bfaaca2e8e8118380f64ad4367d3d322613a4ea15b19ac09c53ef2a8487af63155b67287bc7e9c687769c4e642e5c6bed", 0x99}], 0xa, &(0x7f00000028c0)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0xc23a}}, @mark={{0x14, 0x1, 0x24, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x90}}, {{&(0x7f0000002980)=@x25, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002a00)="a9d81c0a51ad305ea85121ac7bf0b31c46f9f31262c0a13a996c6791b2bbf74cc6172f56432da04951e4e458744f4f728151305e2c4a419c299c9883c949497d268ffd99cbefe79d953ce33cdf75e4e1fa08bc002a885520f117f11b559c06048afc29dd982ba18e27735a143c7ec3df368656da01689cef385e4a9e43da0d342afd01d901b07a8e4167542c5ffa8860091d0f13f970bb34e6a1964953f7e8554974", 0xa2}, {&(0x7f0000002ac0)="a71158fed9d214b247cf72204b99e1c47eb2fb6d771faf7fad0ba8e32bf59ac60cd48b625b4be51527fa26fd4eeee8bc3d1ffbb2d12bf3dbff6844dbb1af0c33f43ba33734520410ac05f99c1273b6d3236b36c44cc6ef734ed8d2479b14a2b5998b8087a6ac1b0f28b472914d1825a10b0320b463aa3d474f78b687fa0ae1397c06cfa81a33b823b72a7fd3e9bb144308621b36cfa81ae5d2227924de56ebacd5a470f9f4382a3e1f21634d079207a5a5861d205b4c0923bf23777ab9272df6a0d548bd5577c5b2be6b474034b0a949d7f34c1ad2c1de", 0xd7}, {&(0x7f0000002bc0)="f50bf19965c25f548412d16010aeae594ecd5d60317e6a1e261d7487546fdad0cb443163e15b87ba5b3863775e005407f6e34dc04eff6b01661249de162f2031bf74beca0d2930be326c9cccc7caec7ad3179651a0afd8146207e1efb5b0f436e82dbc474a6a291ceceea5c85294e9e6b67e287c0ce9c6c9c168d22fffa7f994167d1c09bd8b09a1a968ea606bd989007392e4ef03cc3a203be39d0113448bef9e3818c4b47405395f8ca15e61b9a4003dc080a2a89c348eb6ff7ab83c5e8cd4c6a657dbb578694f1630382e4d355f8e12777cbdca140e00db18f5cc480fa1c2cb3b6911e4b4d6032e6e4207c8fad6dc6a716ecc8aee97da6eb524e62a80aa0b325f6f8bf4d7ea204530fe2b362d897f51473b50c6af04fb7e21ab542959f72b80decbf62c206508b46201b067c954bccad300318e69b0a8ac73297fcdfa065892f30d2a587aa1fa28d96d5d1b95f2ff6746cb99cb75c520f790b73a10a1d721a5d1187052502a6755c95c0d4eb0385540053dd040bb265e038e84ef1b4a7c3e2f2acf1d53b4fa1ec79b3be7e146766bb46216fecd3c3d050f208899df18e431e49e877fb510a1c683962f83173b3eb1edec270180f29301ec30b7953a6021e8dcee6f8dd69cd7d7c5eb527fc9e9638571d91a0eaed8e3a01462f627a29c0e31d6ae8b1e7264a08e8781c511dc70c4145318538fb2efb8f6b89219804e17728c63647b4f0507f4668288e8dc0ae1aa2adf1b1a83cefd39055714d91811085002a32f9d26fd9b5474f57259d593497b5a798770d29bd1a682290faf0bd327edcc3684fa2e282e3ff96601ebee318b664e98c6a4b774306eee14fb9b4c972865e80a59df305c2aca4a33c8f1c7e9befb25ef02314aeebd6f5085c951b17d2881039971691e2bc87681966606e2ef705273227ceb1d1dbfb5603111795116017735e0732c2328fefb7071abed4f64cc93b8487bf0282e8e2404ce6485e5330b7226dfa934716ba90e80ef92f80a2a2346d867046a7c769d66983f981b5126c27e7a028ee2d799b77a8d09ffc362002b9c81c4ba9d8eebad85db722483d8556760624d6bdc0803b82917825af07a39f218b04de40724eb3a95ab66fd40243b96b571d137f6d0fc384d50358f43264e7096637a20ec673b0c9c2f8deb3ea2e5350c4696e398548771d5d5f16c177705a903573ea450841cbf09adae8be8156fdc9798ad0851998e5f51b31f1226d17a20a8b62f46a9a6e06026486bde1d1b20e0ea7b04baf95d6b53c623b2867ab97bd2e54bd799a3f788dc7022f5bfe5d3ddf6c8e4662fa74498bfb9de3a9f6e94e70901df7bab0df899ed1ff20128e6fef03bee398961eb437958f57ace2a72d4956b60b32c1c7a742d9107110e74811454a66276033622be3170bb2d347a7ffd979d2e33dd198caf14d7bc89ae9199a37be55d81204b39529f8d730872a2a79a1494194d4f746c5dfb97b915483aef2adb5bdbf49ebc72ddc1c3115a97b87c090e9f1c264aeb45a5a9dfd861b32cb6e6c25ca26c11053f5fccdb9b23b152fc1b13a949605fea734b433f688d670bec658f783667bcbaf3568b10258c359668f3f61a0676b4c88c2096c865a8c8f82b38d9ca234ce6cd6ca74134d51cbbc5b4b0659c3b6403748d942f12d6f03361914ee0689e1bd0d1c8cc26c8d5d724e0ae175f434461ab0be61c7506adced9d5eb06bd4cf20c385bdc6923643852bbf2efcfbcec61de3bbbabd901e8a87a441fdbeffd166ffa24963ba53ca3139e7814577184a71984f3ee54407ee7d1ed3eadcc96ff0fd30fa60a3cb4ae0f472e359be0fd700e9da6fc107468e1c391416df887dba686bbf8f783e5d8060a17a9a741451a4e223342f90939e97a275c51f3b209a3cc8c1a1fb42cc3df5d236de160768fb7125fdd6627af942b0c51b70d48342b5282730c96cb3cf277046d57ebe758852558a728834bc3dedf9021bc8b8976bba38aac8bd7adab998858e4199b380c1e7aa8702e9d6cd335a7b3dd636207fa6799e571e3d1489cc8140604e7c85c4ad997f8e4c0dcbf2156e48b2f7583620df51df3f6dcf26afca4757bc6b9cce100a7652765032152e201bcc94aaca430d80e10b0a76865993419162dc70c5b01bed956c1e2624694c88dc481adc5085e5de734674d8b80b39b33ec0037c50b8cad42b3a000ee4ebbb402d6a2ce0248561b99d1395e482707e753edc0d73e5f6cdfcc1d470739e81571f812690e1b261e29569ac0b09836791cc86b59365590cb73afa140fbbff73841dcd7b61aad1b72f9190a9c70e0fdb2610233b8805a2ab0f0cf40e79bc15b0a3899ee0ebe829f25d7836180339cc740bea0a0a2a27c5344067fc943a7d3d6c2f35042683045ccc7eef2e1d64add40a3ab3201834e0114b504157a432fd143bbbbe80c546e914ed348b068102e4b7c97b377e2f5b1bcab1aca01eb38fa6d90baf61d3b3ee06f82c40d3881304ab1e9efbe8a43f09f666869e48873adeb0c6bda26c9482804b840bd920cbabf60fd32185c95b38c5684eae80c754777acaf378b9ab7a8f3ad069fe177b40000920c27aa971d263adb20bd3b46eb56bd9a3d83e3b3c155d66952827f47cfca34b6025e7e501734b67cad943b759ada41da348c25cd5c46522b23943e980aaeb0140a650175f68be6fe48e2b752f78a193a16dd0e26c9e3f74ac1c72237cb75c6a394b9dff011a0f826672ae16af1d183b47695d07aa71bc7fff36f054da94c565dc6880385d2ae66d512a64257a50540b4b105ef38d63f523b5c4949e15798ee50c59d80ae33ec79ab5979a7596e091039b2973f75920803b13d4521d66d8b98c3d11b3b547f751f577ba78ee387e1f15ee81ebd24663d2154026d62d17e6ee490bd5408a23bd04d10cd148b972a059e803dbc536f4020e302dae7f7dd2a693d539e19343010336fad7ae7a088dddb6603b45f0aab53e770e77f519549579bfe2500d6b8fdcaef1ce3c55341599e90ac96fd96270c1598e27b850bf122a90228cc5be82758ba5c7e1836af42814caaaf9f62c51a034b9959e9479ffe512430e861621ec462148aba35aa2ea7ef55127d008ba92bd7037aaf144c86543704b2811ceaefb198e501511d8fbfe2b5eeea471554fec9df5d89c813f185a05c61427520b16366f16b8fbfad650c3918213e33b0abcfd6199c42aafc4b7f502abbef3cac00f356e01635aa7f04814ca0a0b1326b9a940e8c96e7a66523439681c45d2ccf9e8cc9f025ea8c2269b772784bc29db6d47810f0af8f3edf5ea15d3b003a33eafcd46fcb5135d29fadf5b1f8c96263aae35910516b4f13df2f3ef4d8090e2518eda41e94ee4486d64fe8361ebd04870a91dafc8246f2f3d42382e54e135ef0a9c916f2bcc0a2ef67666d18676921afd704e783df01ae0a84b71727f6814c3dbcc60d5c372a85747aa682e6e9a8e1ca26e545d286b7eaf40db82a7676b989c97f5e0afa420cb9f75ca887fbee12468cb5a80fbd0ede372c75b1cd57ec649eff527b5673bf6b448711f6a9d797e67a7d8cfdc08930d463da81758744058ee8e1c7698bc0e7ba946812272cea42fb3ea3b342d16dfdfbde349def0acff6edf60ef9f39d1ae13afdbdb80b669a3c860411ddd48ec4a02f7825e86cb299c9103a126253542643dd293a985806fbcc441073e6823c4902d455e610e5cecb1f84612635c51fad8fc68ba78f87bd227bbafb6d0e36aac885d210988844b2b9b58da195445f997d38529303c1e9ae191053b1de2d661d8533dda4a4ca4e5e4a42d0a7744df138179312705b846b57a005d1e74ff21bd0b8b01f9a6df3cb3ccc3d84a706cbfc9d429c75d4cdb960fa8314076520c715861610dbee357c6799aaa5f13a13e89ed068786b5d4f6224f34ea397133e6117955abe58c52dceb0f4fbfcc7cfdcdfabc2229dbb8f9884af1c7799170be86d719462c36269a8b5987b63eff47c5a8ea2f36952fe4dfbc45dd2bfbde1340b63f7bc7d776a0211af3dabc2fc7efc25c3403a7f302fee268af5a6cabb0744eabe322a6ec38687268618a930b6bb81bd73d9d81c60377ed5eb91316f6cd0b7ccc0c9d4ac44776df0cbd21d3ee6d9e7ca0c9a009aee6f5e320140b62a05782b576abc6f8a2dc79172626246ea1a4a879cdb01d6e9d769b04451bfff5614a5345258a7018983e3264f8ac36030a913f7ff3d963965a7f4a571bcdb025b89420cb197a6f920888f69a9f03c46499673f70feadd0843d7b2cb569bea800114c6a01217cf21b0692675e1077a4ce9d0f0d5d0046f74cc8444cd3fd35197dea3dd92f5c1257d49da88af9d51af25923022e18b47776cd66e7c5ac6503d946a75358131039e6001488a2ac2ad91b4be245ce08786b96b7ce8bcf11407581542a976fb892384ca6b549309709b1239ab59a3e90c5349f3122857ef9a4db202eb2bf45f34ff4546d5183e6c1cc4f561285c62dfb0c05ee4b5e6423425fb316c59c5ebeac59e9a5fa0c96794479fb3da7f3b3f8a8eabbee3b367560229ca685d132e2abd6d1e174bd8bd2c50c029208b1edb75cb69187855904f0e8ab5d648e5dceba4800535e75fbe37b88d2eb56f95b7e82bd85011312331721c922a929f56569d4851257608633c207b5695a4f934c2d1bc3aee034fe7b5c2d981f94d5f1b52bbb840c7ebd52825eb1eb1c00b101ed5634ae35df25f6819beae5568fd4c323a999642a8a0cd8e7cb25db1d72eeae8395cb04869d0d307d86ca5da8de7a0e05856389a429f1b1329d5aee9c0c4fc5311097953db34e5a66826e42c8e1fb789d2c3648b567de8acb6749200a433c916f1dfa74feed7f2af99d46539307996b51e09916d42a87cdc5c1fe953e363a7f468d8c210ae06d9198fd0b88d1e3c467e95877f2a49c1d52ca639ef7c8841739813cfb0e73146f734ab103c013b525b8ff7ef92428c33ec249a07bcff5687f487ccb5d26f8da036814e2e95eb8e6f6c999a2f1483420c80bb50f8038ef48cd98970a024e52c274cf13aa5d0bfa855a4504867050e939605d86a98e9290cbdad90c465b2b77d5e253ad01a918f6e9c0d6ba8186ffc7b03eb7ff1a9285746a54495c9ad91a62d85a910652e7db34dc1aeebfdfffcc35f38f18370fee287e208338ab1482b089fb114e8976ea2edbd115cdaf7ef9b6e1400b12f81f0d5817e3d444ab9f5a4efd3cee9bf1a33cf5951e2c7338c2660d9528d37f4f723ff27e6c22e55d97be918f4fc13f9c51810fd5b3c79e99edfd44b3432d0446e22da28293075f1d738708b7d93b4e855fe2989ca3b445ec3082ee4e7768ccd4cea7d59c631b383ec59ce4302eb18a20adc3ce2fa87f44e4cb7a0970d27ffd64bb5c2dc8a4249ecd4dabaa22f01ef3423a7fa2d595ceaecb89a5e9203447325af66f691e9c8e0c32cbe336f270bec962879239e0054a2897b69e6b8ed64bde47288a7c045dd31c554d3f1bf0dac271cf10d3b52eae5fb9a3312feb71c35e8e531e085125847f671bdb93aebc6ae1fa6464a80dcd4412385466989f2f474d939d4b61f63f9ce30313d41d3f9607368cbed2f453e7fca707fe44f384c90a05c657178e4a6873cca018f3d6fcaa925940f619dfd8d0e87a387ab12152bb810103dcf7302d1c257908bf31732af7f1ad9396a524f6848e0b948b53cc4c70966406a5ce7ffcdbd9351353e6a571dbbd92525a1b223aed35ce6d28c7dc711eb7fc774c1f4302046a17c5d260ec84e9de7418fa70443e119d0c1de7354040463052d966e1224836fccf4fdbb68828fd9fb781f", 0x1000}, {&(0x7f0000003bc0)="31e34457d7b2bf00c0a2132f869de4787926f4dc6f3f4ed9735823e60b120773362fb277ccf5685733cb8e687815f59b2fdfc36e6b3b58f72bdf6927238b02a02d67fc973fd9c3c8cd81cc868a3f2f748d9982d1e8ebf82106511aafa95365468eff073ad849ac3e", 0x68}], 0x4, &(0x7f0000003c80)=[@txtime={{0x18, 0x1, 0x3d, 0x9d6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x78}}], 0x2, 0x4801)
ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1})

824.426238ms ago: executing program 3 (id=6798):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x197, 0x88}}, 0x50)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60)

821.56453ms ago: executing program 1 (id=6799):
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}]}}}]}, 0x3c}}, 0x4000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x6, 0x4})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@nat={'nat\x00', 0x19, 0x3, 0x1ec, [0x200000000580, 0x0, 0x0, 0x200000000766, 0x2000000009b2], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000900000055"]}, 0xad)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x14, 0x1, 0x100, &(0x7f0000000040)="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"})

780.165277ms ago: executing program 3 (id=6800):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="030000000000000015090000000000000e0000000000000077070000000000fdffffffffffffffddfbc3e765f23dde880aa1"]) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x8, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb8}, {0x0, 0x7, 0x50, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x7}, {0x7, 0x6, 0x4}]}}) (async)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 32)
io_setup(0x3fe, &(0x7f00000001c0)=<r4=>0x0) (rerun: 32)
io_getevents(r4, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) (async)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])

489.67407ms ago: executing program 3 (id=6801):
socket(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

354.117045ms ago: executing program 2 (id=6802):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

307.667791ms ago: executing program 2 (id=6803):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xfd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffff3b, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="3b010000e3ffffff"], 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001820000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004970000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES16=r3, @ANYRES32=r3, @ANYRES64], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r4}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c814}, 0x4004090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000004c00)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e})
close_range(r0, r1, 0x0)

163.848853ms ago: executing program 2 (id=6804):
syz_emit_ethernet(0x4a, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbmon(0x0, 0xba, 0x280802)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@nfs_export_on}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel}]})
read$hidraw(0xffffffffffffffff, &(0x7f0000000040)=""/62, 0x3e)
read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39)
mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

123.212128ms ago: executing program 2 (id=6805):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0)
prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
inotify_init()
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0069afba2632d0130000", @ANYRES16, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0)

0s ago: executing program 1 (id=6806):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x1ed3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x5, 0x279}, 0x0, &(0x7f0000000140))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x519281, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000400000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680})
acct(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

5][ T5942] logitech 0003:046D:C29C.00C0: unknown main item tag 0x0
[ 1878.222574][T27904] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1878.401311][ T5942] logitech 0003:046D:C29C.00C0: unknown main item tag 0x0
[ 1878.434825][T28051] FAULT_INJECTION: forcing a failure.
[ 1878.434825][T28051] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.466439][ T5942] logitech 0003:046D:C29C.00C0: unknown main item tag 0x0
[ 1878.535519][T27904] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1878.597674][ T5942] logitech 0003:046D:C29C.00C0: unknown main item tag 0x0
[ 1878.614981][T28051] CPU: 0 UID: 0 PID: 28051 Comm: syz.2.6182 Not tainted syzkaller #0 PREEMPT(full) 
[ 1878.614999][T28051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1878.615006][T28051] Call Trace:
[ 1878.615010][T28051]  <TASK>
[ 1878.615015][T28051]  dump_stack_lvl+0x16c/0x1f0
[ 1878.615037][T28051]  should_fail_ex+0x512/0x640
[ 1878.615064][T28051]  ? fs_reclaim_acquire+0xae/0x150
[ 1878.615088][T28051]  should_failslab+0xc2/0x120
[ 1878.615110][T28051]  __kmalloc_noprof+0xdd/0x880
[ 1878.615129][T28051]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1878.615146][T28051]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1878.615159][T28051]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1878.615174][T28051]  ? tomoyo_profile+0x47/0x60
[ 1878.615190][T28051]  tomoyo_path_number_perm+0x245/0x580
[ 1878.615201][T28051]  ? tomoyo_path_number_perm+0x237/0x580
[ 1878.615213][T28051]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1878.615225][T28051]  ? find_held_lock+0x2b/0x80
[ 1878.615253][T28051]  ? find_held_lock+0x2b/0x80
[ 1878.615268][T28051]  ? hook_file_ioctl_common+0x145/0x410
[ 1878.615286][T28051]  ? __fget_files+0x20e/0x3c0
[ 1878.615301][T28051]  security_file_ioctl+0x9b/0x240
[ 1878.615317][T28051]  __x64_sys_ioctl+0xb7/0x210
[ 1878.615339][T28051]  do_syscall_64+0xcd/0x4e0
[ 1878.615354][T28051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.615365][T28051] RIP: 0033:0x7ff11078eec9
[ 1878.615375][T28051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1878.615386][T28051] RSP: 002b:00007ff1116f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1878.615397][T28051] RAX: ffffffffffffffda RBX: 00007ff1109e5fa0 RCX: 00007ff11078eec9
[ 1878.615405][T28051] RDX: 0000200000000e00 RSI: 00000000000089e1 RDI: 0000000000000003
[ 1878.615411][T28051] RBP: 00007ff1116f3090 R08: 0000000000000000 R09: 0000000000000000
[ 1878.615417][T28051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1878.615424][T28051] R13: 00007ff1109e6038 R14: 00007ff1109e5fa0 R15: 00007ffd2ec0cd08
[ 1878.615438][T28051]  </TASK>
[ 1878.615454][T28051] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1878.839890][T28054] comedi comedi0: Minor 3 could not be opened
[ 1878.850636][ T5942] logitech 0003:046D:C29C.00C0: unknown main item tag 0x0
[ 1879.038328][T28063] netlink: 'syz.0.6183': attribute type 4 has an invalid length.
[ 1879.206345][T27904] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1879.234954][ T5942] logitech 0003:046D:C29C.00C0: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0
[ 1879.320367][T27904] 8021q: adding VLAN 0 to HW filter on device team0
[ 1879.446320][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1879.453500][ T8903] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1879.503168][T27904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1879.527187][T27904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1879.619820][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1879.626975][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1880.088504][T28080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6187'.
[ 1880.180236][   T30] audit: type=1400 audit(1759639622.564:4393): avc:  denied  { execute } for  pid=28076 comm="syz.0.6188" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=150739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1880.294744][T27904] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1880.474213][T27904] veth0_vlan: entered promiscuous mode
[ 1880.530501][T27904] veth1_vlan: entered promiscuous mode
[ 1880.628795][T27904] veth0_macvtap: entered promiscuous mode
[ 1880.661695][T27904] veth1_macvtap: entered promiscuous mode
[ 1880.757619][T27904] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1880.770565][T27904] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1880.783487][T24590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1880.801837][T24590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1881.081551][ T5942] logitech 0003:046D:C29C.00C0: no inputs found
[ 1881.095251][ T5942] usb 2-1: USB disconnect, device number 80
[ 1881.125480][T24590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1881.155695][T24590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1881.200593][   T30] audit: type=1400 audit(1759639623.624:4394): avc:  denied  { write } for  pid=28092 comm="syz.2.6192" path="socket:[150212]" dev="sockfs" ino=150212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1881.934598][T21001] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[ 1882.228620][T24590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1882.284443][T24590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1882.327603][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1882.336204][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1883.290008][T16621] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1883.321460][T28132] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6198'.
[ 1883.638061][T16621] usb 4-1: Using ep0 maxpacket: 32
[ 1883.645136][T16621] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1883.653348][T16621] usb 4-1: config 0 has no interface number 0
[ 1883.748427][T28140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6201'.
[ 1883.802350][T16621] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1883.840003][T16621] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1883.871453][T16621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.916058][T16621] usb 4-1: Product: syz
[ 1883.920218][T16621] usb 4-1: Manufacturer: syz
[ 1884.115192][T21001] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1884.139094][T16621] usb 4-1: SerialNumber: syz
[ 1884.155854][T16621] usb 4-1: config 0 descriptor??
[ 1884.161043][T28145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6202'.
[ 1884.191030][T16621] smsc75xx v1.0.0
[ 1884.305132][T21001] usb 3-1: Using ep0 maxpacket: 32
[ 1884.406640][T21001] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1884.522923][T21001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1884.630009][T21001] usb 3-1: config 0 descriptor??
[ 1884.729836][T15400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1884.740181][T15400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1884.749234][T15400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1884.760167][T15400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1884.772353][T15400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1884.782780][T16621] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1884.865171][T16621] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1885.075598][T16621] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[ 1885.103820][T16621] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[ 1885.184982][T16621] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1885.264989][T16621] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[ 1885.320275][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.368885][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.393888][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.449806][T28169] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1885.478407][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6206'.
[ 1885.696145][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.713530][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.735396][T21001] logitech 0003:046D:C29C.00C1: unknown main item tag 0x0
[ 1885.757052][T21001] logitech 0003:046D:C29C.00C1: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[ 1885.775912][T28156] chnl_net:caif_netlink_parms(): no params data found
[ 1885.919506][T28177] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1886.024282][T28139] comedi comedi0: Minor 3 could not be opened
[ 1886.256918][T28177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6207'.
[ 1886.294527][T12559] usb 4-1: USB disconnect, device number 43
[ 1886.335858][T28188] FAULT_INJECTION: forcing a failure.
[ 1886.335858][T28188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1886.349183][T28188] CPU: 1 UID: 0 PID: 28188 Comm: syz.3.6209 Not tainted syzkaller #0 PREEMPT(full) 
[ 1886.349207][T28188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1886.349219][T28188] Call Trace:
[ 1886.349225][T28188]  <TASK>
[ 1886.349232][T28188]  dump_stack_lvl+0x16c/0x1f0
[ 1886.349259][T28188]  should_fail_ex+0x512/0x640
[ 1886.349284][T28188]  strncpy_from_user+0x3b/0x2e0
[ 1886.349302][T28188]  ? __local_bh_enable_ip+0xa4/0x120
[ 1886.349329][T28188]  mptcp_setsockopt+0x1564/0x3220
[ 1886.349353][T28188]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[ 1886.349379][T28188]  ? __pfx_mptcp_setsockopt+0x10/0x10
[ 1886.349406][T28188]  ? find_held_lock+0x2b/0x80
[ 1886.349437][T28188]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1886.349454][T28188]  ? sock_common_setsockopt+0x2e/0xf0
[ 1886.349480][T28188]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1886.349507][T28188]  do_sock_setsockopt+0xf0/0x1d0
[ 1886.349534][T28188]  __sys_setsockopt+0x1a0/0x230
[ 1886.349560][T28188]  __x64_sys_setsockopt+0xbd/0x160
[ 1886.349579][T28188]  ? do_syscall_64+0x91/0x4e0
[ 1886.349601][T28188]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1886.349621][T28188]  do_syscall_64+0xcd/0x4e0
[ 1886.349644][T28188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1886.349661][T28188] RIP: 0033:0x7fce8418eec9
[ 1886.349676][T28188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1886.349694][T28188] RSP: 002b:00007fce823f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1886.349712][T28188] RAX: ffffffffffffffda RBX: 00007fce843e5fa0 RCX: 00007fce8418eec9
[ 1886.349724][T28188] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003
[ 1886.349734][T28188] RBP: 00007fce823f6090 R08: 0000000000000003 R09: 0000000000000000
[ 1886.349744][T28188] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[ 1886.349755][T28188] R13: 00007fce843e6038 R14: 00007fce843e5fa0 R15: 00007fff93110058
[ 1886.349778][T28188]  </TASK>
[ 1886.943645][T15400] Bluetooth: hci4: command tx timeout
[ 1886.991644][T28156] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1887.008366][T28156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1887.016945][T28156] bridge_slave_0: entered allmulticast mode
[ 1887.033583][T28156] bridge_slave_0: entered promiscuous mode
[ 1887.057710][T28156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1887.064832][T28156] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1887.072431][T28156] bridge_slave_1: entered allmulticast mode
[ 1887.081043][T28156] bridge_slave_1: entered promiscuous mode
[ 1887.101229][T12150] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.420039][T12559] libceph: connect (1)[c::]:6789 error -101
[ 1887.426541][T12559] libceph: mon0 (1)[c::]:6789 connect error
[ 1887.503301][ T5942] libceph: connect (1)[b::]:6789 error -101
[ 1887.512664][ T5942] libceph: mon0 (1)[b::]:6789 connect error
[ 1887.737418][ T5903] libceph: connect (1)[c::]:6789 error -101
[ 1887.823810][T21001] logitech 0003:046D:C29C.00C1: no inputs found
[ 1887.824828][T12150] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.835142][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[ 1887.841231][ T5942] libceph: connect (1)[b::]:6789 error -101
[ 1887.865435][T21001] usb 3-1: USB disconnect, device number 60
[ 1887.902817][ T5942] libceph: mon0 (1)[b::]:6789 connect error
[ 1888.031427][T28195] ceph: No mds server is up or the cluster is laggy
[ 1888.045468][T28197] ceph: No mds server is up or the cluster is laggy
[ 1888.117231][T28156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1888.407252][T12559] libceph: connect (1)[c::]:6789 error -101
[ 1888.521532][T28156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1888.567516][T12559] libceph: mon0 (1)[c::]:6789 connect error
[ 1888.739347][T12150] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1888.780368][T28156] team0: Port device team_slave_0 added
[ 1888.832017][T28218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6216'.
[ 1888.898499][T28156] team0: Port device team_slave_1 added
[ 1888.945086][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6217'.
[ 1889.088024][T15400] Bluetooth: hci4: command tx timeout
[ 1889.268252][T28217] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1889.289939][T12150] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1889.458009][T28156] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1889.477341][T28156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1889.604965][T28156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1889.635075][T28156] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1889.733271][T28156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1889.760460][T28156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1889.771574][T28230] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1889.776915][T28233] FAULT_INJECTION: forcing a failure.
[ 1889.776915][T28233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1889.792660][T28233] CPU: 1 UID: 0 PID: 28233 Comm: syz.0.6220 Not tainted syzkaller #0 PREEMPT(full) 
[ 1889.792682][T28233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1889.792691][T28233] Call Trace:
[ 1889.792696][T28233]  <TASK>
[ 1889.792703][T28233]  dump_stack_lvl+0x16c/0x1f0
[ 1889.792728][T28233]  should_fail_ex+0x512/0x640
[ 1889.792750][T28233]  _copy_from_user+0x2e/0xd0
[ 1889.792770][T28233]  copy_msghdr_from_user+0x98/0x160
[ 1889.792790][T28233]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1889.792820][T28233]  ___sys_sendmsg+0xfe/0x1d0
[ 1889.792839][T28233]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1889.792882][T28233]  __sys_sendmsg+0x16d/0x220
[ 1889.792901][T28233]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1889.792933][T28233]  do_syscall_64+0xcd/0x4e0
[ 1889.792954][T28233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1889.792971][T28233] RIP: 0033:0x7f3a4d38eec9
[ 1889.793027][T28233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1889.793041][T28233] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1889.793057][T28233] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 1889.793067][T28233] RDX: 0000000020048080 RSI: 0000200000000180 RDI: 0000000000000003
[ 1889.793076][T28233] RBP: 00007f3a4e20f090 R08: 0000000000000000 R09: 0000000000000000
[ 1889.793085][T28233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1889.793094][T28233] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 1889.793115][T28233]  </TASK>
[ 1890.544641][T28156] hsr_slave_0: entered promiscuous mode
[ 1890.572747][T28156] hsr_slave_1: entered promiscuous mode
[ 1890.592153][T28156] debugfs: 'hsr0' already exists in 'hsr'
[ 1890.608959][T28156] Cannot create hsr debugfs directory
[ 1891.069126][T28246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6224'.
[ 1891.098612][T12150] batadv1: left allmulticast mode
[ 1891.106838][T12150] batadv1: left promiscuous mode
[ 1891.119400][T12150] bridge0: port 3(batadv1) entered disabled state
[ 1891.136952][T15400] Bluetooth: hci4: command tx timeout
[ 1891.159726][T12150] bridge_slave_1: left allmulticast mode
[ 1891.166604][T12150] bridge_slave_1: left promiscuous mode
[ 1891.223217][T12150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1891.302247][T28256] comedi comedi0: Minor 47 could not be opened
[ 1891.325270][T17808] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1891.333224][T12150] bridge_slave_0: left allmulticast mode
[ 1891.340661][T12150] bridge_slave_0: left promiscuous mode
[ 1891.346964][T12150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1891.524987][T17808] usb 4-1: Using ep0 maxpacket: 32
[ 1891.916799][T17808] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1891.943398][T17808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1891.975431][T17808] usb 4-1: config 0 descriptor??
[ 1892.256875][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6229'.
[ 1892.580831][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.599372][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.613760][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.645036][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.654833][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.664513][T17808] logitech 0003:046D:C29C.00C2: unknown main item tag 0x0
[ 1892.695101][T17808] logitech 0003:046D:C29C.00C2: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[ 1892.950966][T28246] comedi comedi0: Minor 3 could not be opened
[ 1893.178908][T12150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1893.189441][T12150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1893.200083][T12150] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1893.209359][T12150] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1893.219251][T15400] Bluetooth: hci4: command tx timeout
[ 1893.229340][T12150] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[ 1893.244456][T12150] bond0 (unregistering): Released all slaves
[ 1893.258021][T12150] bond1 (unregistering): Released all slaves
[ 1893.270470][T12150] bond2 (unregistering): Released all slaves
[ 1893.282883][T12150] bond3 (unregistering): Released all slaves
[ 1893.298885][T12150] bond4 (unregistering): Released all slaves
[ 1893.311406][T12150] bond5 (unregistering): Released all slaves
[ 1893.327084][T12150] bond6 (unregistering): Released all slaves
[ 1893.338874][T12150] bond7 (unregistering): Released all slaves
[ 1893.352127][T12150] bond8 (unregistering): Released all slaves
[ 1893.370124][T12150] bond9 (unregistering): Released all slaves
[ 1893.382679][T12150] bond10 (unregistering): Released all slaves
[ 1893.500438][T12150] bond11 (unregistering): Released all slaves
[ 1893.628643][T12150] bond12 (unregistering): Released all slaves
[ 1893.749902][T28270] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1893.812671][T28285] Bluetooth: MGMT ver 1.23
[ 1894.408912][T28287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6231'.
[ 1894.421542][T28287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6231'.
[ 1894.445972][T28287] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[ 1894.483271][T17808] logitech 0003:046D:C29C.00C2: no inputs found
[ 1894.520471][T17808] usb 4-1: USB disconnect, device number 44
[ 1894.739977][T28299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6235'.
[ 1894.749108][T28299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6235'.
[ 1895.288334][T28299] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1895.925605][T28314] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1896.780870][T12150] hsr_slave_0: left promiscuous mode
[ 1896.833932][T12150] hsr_slave_1: left promiscuous mode
[ 1896.841916][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1896.869771][T12150] batadv0: mtu less than device minimum
[ 1896.890585][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1896.902360][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1896.913831][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1896.925275][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1896.936727][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1896.948186][T12150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1897.250254][T12150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1897.285817][T12150] batman_adv: batadv0: Interface deactivated: dummy0
[ 1897.292529][T12150] batman_adv: batadv0: Removing interface: dummy0
[ 1897.452672][T12150] veth1_macvtap: left promiscuous mode
[ 1897.503920][T12150] veth0_macvtap: left promiscuous mode
[ 1897.555663][T12150] veth1_vlan: left promiscuous mode
[ 1897.608885][T12150] veth0_vlan: left promiscuous mode
[ 1897.971174][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'.
[ 1899.593243][T28366] netlink: 'syz.4.6244': attribute type 5 has an invalid length.
[ 1901.587807][T12150] team0 (unregistering): Port device team_slave_1 removed
[ 1901.640115][T12150] team0 (unregistering): Port device team_slave_0 removed
[ 1902.375342][T28343] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1902.379778][T28366] ip6erspan0: entered promiscuous mode
[ 1902.714546][   T30] audit: type=1400 audit(1759639645.134:4395): avc:  denied  { watch } for  pid=28372 comm="syz.0.6248" path="/48/bus/file1" dev="overlay" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1902.716662][ T5903] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1902.820553][T28156] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1902.857820][T28156] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1902.943193][T28156] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1902.988038][ T5903] usb 3-1: Using ep0 maxpacket: 16
[ 1903.065033][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1903.135613][T28156] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1903.215726][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1903.286093][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1903.318878][ T5903] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1903.348749][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1903.361846][ T5903] usb 3-1: config 0 descriptor??
[ 1903.506430][T12150] dummy0: left allmulticast mode
[ 1903.518734][T12150] bridge0: port 4(dummy0) entered disabled state
[ 1903.545953][T12150] bridge0: port 3(team0) entered disabled state
[ 1903.554321][T12150] bridge_slave_1: left allmulticast mode
[ 1903.563575][T12150] bridge_slave_1: left promiscuous mode
[ 1903.573138][T12150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1903.598878][T12150] bridge_slave_0: left allmulticast mode
[ 1903.604634][T12150] bridge_slave_0: left promiscuous mode
[ 1903.617131][T12150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1903.705184][   T30] audit: type=1400 audit(1759639646.114:4396): avc:  denied  { ioctl } for  pid=28411 comm="syz.4.6255" path="/105/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1903.769858][T28415] md: superblock version 12389 not known
[ 1903.842942][ T5903] microsoft 0003:045E:07DA.00C3: ignoring exceeding usage max
[ 1903.869771][T28415] md: couldn't set array info. -22
[ 1903.959814][ T5903] microsoft 0003:045E:07DA.00C3: unknown main item tag 0x0
[ 1904.017843][ T5903] microsoft 0003:045E:07DA.00C3: unknown main item tag 0x0
[ 1904.053833][ T5903] microsoft 0003:045E:07DA.00C3: unknown main item tag 0x0
[ 1904.138961][ T5903] microsoft 0003:045E:07DA.00C3: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1904.237407][ T5903] microsoft 0003:045E:07DA.00C3: no inputs found
[ 1904.284201][ T5903] microsoft 0003:045E:07DA.00C3: could not initialize ff, continuing anyway
[ 1905.457298][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6257'.
[ 1905.475424][T28435] net_ratelimit: 13 callbacks suppressed
[ 1905.475446][T28435] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1905.487842][T28435] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1906.356261][T12150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1906.399528][T12150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1906.433907][T12150] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1906.463465][T12150] bond0 (unregistering): Released all slaves
[ 1906.510291][T12150] bond1 (unregistering): Released all slaves
[ 1906.562190][T12150] bond2 (unregistering): Released all slaves
[ 1906.616654][T12150] bond3 (unregistering): Released all slaves
[ 1906.642870][T12150] bond4 (unregistering): Released all slaves
[ 1906.668237][T12150] bond5 (unregistering): Released all slaves
[ 1906.689305][T12150] bond6 (unregistering): Released all slaves
[ 1906.704324][T12150] bond7 (unregistering): Released all slaves
[ 1906.723134][T12150] bond8 (unregistering): Released all slaves
[ 1906.763298][T12150] bond9 (unregistering): Released all slaves
[ 1906.794161][T12150] bond10 (unregistering): Released all slaves
[ 1906.817037][T12150] bond11 (unregistering): Released all slaves
[ 1906.902401][T28469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6261'.
[ 1906.912139][T12150] bond12 (unregistering): Released all slaves
[ 1906.955387][T12150] bond13 (unregistering): Released all slaves
[ 1907.076494][T12150] bond14 (unregistering): Released all slaves
[ 1907.140098][T12150] bond15 (unregistering): Released all slaves
[ 1907.193536][T12150] bond16 (unregistering): Released all slaves
[ 1907.224145][T12150] bond17 (unregistering): Released all slaves
[ 1907.262944][T28380] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1907.317914][T12559] usb 3-1: USB disconnect, device number 61
[ 1907.714730][T28156] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1907.798181][T28156] 8021q: adding VLAN 0 to HW filter on device team0
[ 1907.835043][T28478] input: syz1 as /devices/virtual/input/input59
[ 1907.860556][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1907.868233][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1907.912788][T12150] IPVS: stopping master sync thread 25457 ...
[ 1908.218108][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1908.225297][ T8898] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1908.607846][T28488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6265'.
[ 1908.929502][T28491] input: syz1 as /devices/virtual/input/input60
[ 1909.107527][T12150] hsr_slave_0: left promiscuous mode
[ 1909.114102][T12150] hsr_slave_1: left promiscuous mode
[ 1909.124031][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1909.132051][T12150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1909.162548][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1909.172479][T12150] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1909.204717][T12150] veth1_macvtap: left promiscuous mode
[ 1909.214391][   T30] audit: type=1400 audit(1759639651.634:4397): avc:  denied  { audit_write } for  pid=28489 comm="syz.4.6268" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1909.237951][T12150] veth0_macvtap: left promiscuous mode
[ 1909.243713][T12150] veth1_vlan: left promiscuous mode
[ 1909.250560][T12150] veth0_vlan: left promiscuous mode
[ 1909.256188][   T30] audit: type=1107 audit(1759639651.634:4398): pid=28489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='õ¢TjÁ¶Ÿä/D'
[ 1910.295674][T12150] team_slave_1 (unregistering): left promiscuous mode
[ 1910.355305][T12150] team_slave_1 (unregistering): left allmulticast mode
[ 1910.518168][T12150] team0 (unregistering): Port device team_slave_1 removed
[ 1910.671079][T12150] team_slave_0 (unregistering): left promiscuous mode
[ 1910.679422][T12150] team_slave_0 (unregistering): left allmulticast mode
[ 1910.689736][T12150] team0 (unregistering): Port device team_slave_0 removed
[ 1911.765775][T28520] FAULT_INJECTION: forcing a failure.
[ 1911.765775][T28520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1911.782909][T28520] CPU: 1 UID: 0 PID: 28520 Comm: syz.4.6275 Not tainted syzkaller #0 PREEMPT(full) 
[ 1911.782935][T28520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1911.782946][T28520] Call Trace:
[ 1911.782953][T28520]  <TASK>
[ 1911.782961][T28520]  dump_stack_lvl+0x16c/0x1f0
[ 1911.782989][T28520]  should_fail_ex+0x512/0x640
[ 1911.783015][T28520]  _copy_from_user+0x2e/0xd0
[ 1911.783038][T28520]  copy_msghdr_from_user+0x98/0x160
[ 1911.783062][T28520]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1911.783097][T28520]  ___sys_sendmsg+0xfe/0x1d0
[ 1911.783120][T28520]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1911.783173][T28520]  __sys_sendmsg+0x16d/0x220
[ 1911.783196][T28520]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1911.783234][T28520]  do_syscall_64+0xcd/0x4e0
[ 1911.783258][T28520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1911.783277][T28520] RIP: 0033:0x7f355ff8eec9
[ 1911.783292][T28520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1911.783309][T28520] RSP: 002b:00007f3560d52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1911.783327][T28520] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8eec9
[ 1911.783338][T28520] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003
[ 1911.783349][T28520] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 1911.783360][T28520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1911.783370][T28520] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 1911.783394][T28520]  </TASK>
[ 1912.041398][T28524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6277'.
[ 1912.205067][T17808] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1912.414293][T28528] netlink: 'syz.4.6278': attribute type 4 has an invalid length.
[ 1912.455070][T17808] usb 1-1: Using ep0 maxpacket: 16
[ 1912.539480][T17808] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[ 1912.664967][T17808] usb 1-1: config 0 has no interface number 0
[ 1912.682293][T17808] usb 1-1: New USB device found, idVendor=0572, idProduct=1340, bcdDevice=15.06
[ 1912.693831][T28532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6279'.
[ 1912.704984][T17808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1912.725025][T17808] usb 1-1: Product: syz
[ 1912.729421][T17808] usb 1-1: Manufacturer: syz
[ 1912.734249][T17808] usb 1-1: SerialNumber: syz
[ 1912.774436][T17808] usb 1-1: config 0 descriptor??
[ 1913.227830][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6276'.
[ 1913.253533][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6276'.
[ 1913.781951][T17808] usb 1-1: USB disconnect, device number 79
[ 1914.296341][T28156] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1914.364843][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.372927][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.385658][T28156] veth0_vlan: entered promiscuous mode
[ 1914.414101][T28156] veth1_vlan: entered promiscuous mode
[ 1914.896846][T28156] veth0_macvtap: entered promiscuous mode
[ 1914.918070][T28156] veth1_macvtap: entered promiscuous mode
[ 1914.965159][T28156] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1915.256317][T28156] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1915.296924][T28557] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1915.322461][T26932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.333219][T28563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6289'.
[ 1915.347871][T26932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.357262][T26932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.368489][T28557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6287'.
[ 1915.395361][T28568] netlink: 'syz.3.6290': attribute type 1 has an invalid length.
[ 1915.511394][T26932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.660585][   T30] audit: type=1400 audit(1759639658.084:4399): avc:  denied  { read append } for  pid=28571 comm="syz.2.6291" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1915.769158][   T30] audit: type=1400 audit(1759639658.114:4400): avc:  denied  { open } for  pid=28571 comm="syz.2.6291" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1915.856275][T28575] overlayfs: missing 'lowerdir'
[ 1916.035665][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1916.066164][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1916.089104][ T8898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1916.097293][ T8898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1917.344790][T28595] FAULT_INJECTION: forcing a failure.
[ 1917.344790][T28595] name failslab, interval 1, probability 0, space 0, times 0
[ 1917.368830][T28595] CPU: 0 UID: 0 PID: 28595 Comm: syz.2.6297 Not tainted syzkaller #0 PREEMPT(full) 
[ 1917.368857][T28595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1917.368867][T28595] Call Trace:
[ 1917.368874][T28595]  <TASK>
[ 1917.368882][T28595]  dump_stack_lvl+0x16c/0x1f0
[ 1917.368909][T28595]  should_fail_ex+0x512/0x640
[ 1917.368931][T28595]  ? fs_reclaim_acquire+0xae/0x150
[ 1917.368956][T28595]  should_failslab+0xc2/0x120
[ 1917.368979][T28595]  __kmalloc_noprof+0xdd/0x880
[ 1917.369005][T28595]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1917.369032][T28595]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1917.369053][T28595]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1917.369076][T28595]  ? tomoyo_profile+0x47/0x60
[ 1917.369102][T28595]  tomoyo_path_number_perm+0x245/0x580
[ 1917.369119][T28595]  ? tomoyo_path_number_perm+0x237/0x580
[ 1917.369139][T28595]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1917.369158][T28595]  ? find_held_lock+0x2b/0x80
[ 1917.369207][T28595]  ? find_held_lock+0x2b/0x80
[ 1917.369231][T28595]  ? hook_file_ioctl_common+0x145/0x410
[ 1917.369261][T28595]  ? __fget_files+0x20e/0x3c0
[ 1917.369286][T28595]  security_file_ioctl+0x9b/0x240
[ 1917.369309][T28595]  __x64_sys_ioctl+0xb7/0x210
[ 1917.369338][T28595]  do_syscall_64+0xcd/0x4e0
[ 1917.369363][T28595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1917.369381][T28595] RIP: 0033:0x7ff11078eec9
[ 1917.369396][T28595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1917.369414][T28595] RSP: 002b:00007ff1116f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1917.369433][T28595] RAX: ffffffffffffffda RBX: 00007ff1109e5fa0 RCX: 00007ff11078eec9
[ 1917.369445][T28595] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003
[ 1917.369456][T28595] RBP: 00007ff1116f3090 R08: 0000000000000000 R09: 0000000000000000
[ 1917.369466][T28595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1917.369477][T28595] R13: 00007ff1109e6038 R14: 00007ff1109e5fa0 R15: 00007ffd2ec0cd08
[ 1917.369502][T28595]  </TASK>
[ 1917.369510][T28595] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1917.524606][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1917.667669][T28598] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1917.719847][T28602] FAULT_INJECTION: forcing a failure.
[ 1917.719847][T28602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1917.748168][T28602] CPU: 0 UID: 0 PID: 28602 Comm: syz.0.6299 Not tainted syzkaller #0 PREEMPT(full) 
[ 1917.748194][T28602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1917.748205][T28602] Call Trace:
[ 1917.748212][T28602]  <TASK>
[ 1917.748219][T28602]  dump_stack_lvl+0x16c/0x1f0
[ 1917.748248][T28602]  should_fail_ex+0x512/0x640
[ 1917.748271][T28602]  _copy_from_user+0x2e/0xd0
[ 1917.748294][T28602]  copy_msghdr_from_user+0x98/0x160
[ 1917.748318][T28602]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1917.748351][T28602]  ___sys_sendmsg+0xfe/0x1d0
[ 1917.748375][T28602]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1917.748428][T28602]  __sys_sendmsg+0x16d/0x220
[ 1917.748451][T28602]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1917.748490][T28602]  do_syscall_64+0xcd/0x4e0
[ 1917.748515][T28602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1917.748532][T28602] RIP: 0033:0x7f3a4d38eec9
[ 1917.748546][T28602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1917.748562][T28602] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1917.748578][T28602] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 1917.748589][T28602] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[ 1917.748601][T28602] RBP: 00007f3a4e20f090 R08: 0000000000000000 R09: 0000000000000000
[ 1917.748611][T28602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1917.748622][T28602] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 1917.748647][T28602]  </TASK>
[ 1917.910209][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1917.959462][T28608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6301'.
[ 1918.683123][T28619] netlink: 'syz.4.6305': attribute type 10 has an invalid length.
[ 1918.728811][T28619] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1920.871068][T28647] netlink: 'syz.0.6311': attribute type 4 has an invalid length.
[ 1921.213684][T28650] FAULT_INJECTION: forcing a failure.
[ 1921.213684][T28650] name failslab, interval 1, probability 0, space 0, times 0
[ 1921.237667][T28644] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1921.254203][T28650] CPU: 0 UID: 0 PID: 28650 Comm: syz.4.6313 Not tainted syzkaller #0 PREEMPT(full) 
[ 1921.254230][T28650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1921.254241][T28650] Call Trace:
[ 1921.254247][T28650]  <TASK>
[ 1921.254255][T28650]  dump_stack_lvl+0x16c/0x1f0
[ 1921.254283][T28650]  should_fail_ex+0x512/0x640
[ 1921.254303][T28650]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 1921.254334][T28650]  should_failslab+0xc2/0x120
[ 1921.254357][T28650]  kmem_cache_alloc_noprof+0x75/0x6e0
[ 1921.254385][T28650]  ? getname_flags.part.0+0x4c/0x550
[ 1921.254416][T28650]  ? getname_flags.part.0+0x4c/0x550
[ 1921.254440][T28650]  getname_flags.part.0+0x4c/0x550
[ 1921.254469][T28650]  getname_flags+0x93/0xf0
[ 1921.254487][T28650]  do_sys_openat2+0xb8/0x1d0
[ 1921.254512][T28650]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1921.254545][T28650]  ? __fget_files+0x20e/0x3c0
[ 1921.254571][T28650]  __x64_sys_openat+0x174/0x210
[ 1921.254596][T28650]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1921.254619][T28650]  ? ksys_write+0x1ac/0x250
[ 1921.254648][T28650]  do_syscall_64+0xcd/0x4e0
[ 1921.254673][T28650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1921.254692][T28650] RIP: 0033:0x7f355ff8d710
[ 1921.254707][T28650] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1921.254725][T28650] RSP: 002b:00007f3560d51b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1921.254744][T28650] RAX: ffffffffffffffda RBX: 0000000000004e02 RCX: 00007f355ff8d710
[ 1921.254756][T28650] RDX: 0000000000004e02 RSI: 00007f3560d51c10 RDI: 00000000ffffff9c
[ 1921.254767][T28650] RBP: 00007f3560d51c10 R08: 0000000000000000 R09: 0000000000000000
[ 1921.254778][T28650] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1921.254789][T28650] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 1921.254813][T28650]  </TASK>
[ 1921.440186][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1922.110796][T28656] raw_sendmsg: syz.2.6315 forgot to set AF_INET. Fix it!
[ 1922.434982][   T30] audit: type=1326 audit(1759639664.853:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.6318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a4d38eec9 code=0x0
[ 1922.905757][T28674] input: syz1 as /devices/virtual/input/input61
[ 1923.714951][T16621] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1923.799227][ T5904] kernel write not supported for file /404/attr/exec (pid: 5904 comm: kworker/0:6)
[ 1924.015964][T28688] netlink: 'syz.4.6326': attribute type 4 has an invalid length.
[ 1924.025072][T16621] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1924.232830][T16621] usb 4-1: config 0 has no interface number 0
[ 1924.244951][T16621] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1924.275772][T16621] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1924.292495][T16621] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1924.306953][T16621] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[ 1924.316852][T16621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1924.339667][T16621] usb 4-1: config 0 descriptor??
[ 1924.408592][T28692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6327'.
[ 1924.665054][T14714] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1924.923575][T16621] uclogic 0003:28BD:0934.00C4: Interface probing failed: -22
[ 1924.938216][T16621] uclogic 0003:28BD:0934.00C4: interface is invalid, ignoring
[ 1924.945927][T28694] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1925.061231][T14714] usb 2-1: Using ep0 maxpacket: 32
[ 1925.145548][T28676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1925.248509][T14714] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1925.253291][T28676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1925.266664][T14714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1925.454830][T14714] usb 2-1: config 0 descriptor??
[ 1925.531081][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6322'.
[ 1926.593296][T28713] overlayfs: workdir and upperdir must be separate subtrees
[ 1927.291315][T28710] overlayfs: failed to resolve './file0': -2
[ 1927.603576][T14714] usbhid 2-1:0.0: can't add hid device: -71
[ 1927.620306][T14714] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1927.646228][T14714] usb 2-1: USB disconnect, device number 81
[ 1927.948099][ T5904] usb 4-1: USB disconnect, device number 45
[ 1928.362338][T14714] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1928.434513][T28729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'.
[ 1928.527438][T14714] usb 2-1: no configurations
[ 1928.532140][T14714] usb 2-1: can't read configurations, error -22
[ 1928.685098][T14714] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1928.690984][T28728] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1928.865544][T14714] usb 2-1: no configurations
[ 1928.876019][T14714] usb 2-1: can't read configurations, error -22
[ 1929.114441][T14714] usb usb2-port1: attempt power cycle
[ 1929.784963][T14714] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1929.815980][T14714] usb 2-1: no configurations
[ 1929.824939][T14714] usb 2-1: can't read configurations, error -22
[ 1929.975686][T14714] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1929.996890][T28754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6344'.
[ 1930.037537][T14714] usb 2-1: no configurations
[ 1930.102407][T14714] usb 2-1: can't read configurations, error -22
[ 1930.151069][T14714] usb usb2-port1: unable to enumerate USB device
[ 1930.985170][T28763] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1932.125432][T16621] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1932.474305][T16621] usb 1-1: device descriptor read/64, error -71
[ 1933.125322][T28802] netlink: 'syz.1.6356': attribute type 1 has an invalid length.
[ 1933.255533][T16621] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1933.394992][T16621] usb 1-1: device descriptor read/64, error -71
[ 1933.545589][T16621] usb usb1-port1: attempt power cycle
[ 1933.546515][T22580] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1933.622104][T28809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6360'.
[ 1933.638463][T28809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6360'.
[ 1933.648223][T28809] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1933.705606][T22580] usb 5-1: no configurations
[ 1933.710425][T22580] usb 5-1: can't read configurations, error -22
[ 1933.845077][T22580] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1933.885233][T16621] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1933.926753][T16621] usb 1-1: device descriptor read/8, error -71
[ 1933.996833][T22580] usb 5-1: no configurations
[ 1934.014729][T22580] usb 5-1: can't read configurations, error -22
[ 1934.239287][   T30] audit: type=1400 audit(1759639676.673:4402): avc:  denied  { write } for  pid=28816 comm="syz.1.6363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1934.286039][T28824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6363'.
[ 1934.295271][T22580] usb usb5-port1: attempt power cycle
[ 1934.325010][T16621] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1934.390121][T16621] usb 1-1: device descriptor read/8, error -71
[ 1934.519081][T16621] usb usb1-port1: unable to enumerate USB device
[ 1934.655171][T22580] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1934.686073][T22580] usb 5-1: no configurations
[ 1934.690690][T22580] usb 5-1: can't read configurations, error -22
[ 1934.831043][T22580] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1934.937782][T22580] usb 5-1: no configurations
[ 1934.942505][T22580] usb 5-1: can't read configurations, error -22
[ 1934.952441][T22580] usb usb5-port1: unable to enumerate USB device
[ 1935.195889][T28824] netlink: 'syz.1.6363': attribute type 10 has an invalid length.
[ 1935.265957][T28834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6366'.
[ 1935.379927][T28824] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1935.812043][T28837] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1936.185340][T16621] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1936.251415][T28848] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6371'.
[ 1936.347007][T16621] usb 2-1: Using ep0 maxpacket: 8
[ 1936.415843][T16621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1936.445436][T16621] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[ 1936.454694][T16621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1936.468285][T16621] usb 2-1: config 0 descriptor??
[ 1936.681464][T28843] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1936.717044][T16621] usbhid 2-1:0.0: can't add hid device: -71
[ 1936.746766][T16621] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1936.778443][T16621] usb 2-1: USB disconnect, device number 86
[ 1936.850815][   T30] audit: type=1400 audit(1759639679.273:4403): avc:  denied  { create } for  pid=28854 comm="syz.2.6374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1936.986499][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6376'.
[ 1937.683580][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6378'.
[ 1938.611285][T28879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6382'.
[ 1938.787085][T28891] netlink: 'syz.4.6385': attribute type 4 has an invalid length.
[ 1939.203853][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6387'.
[ 1939.312708][T28903] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1939.411183][T28906] binder_alloc: 28905: binder_alloc_buf, no vma
[ 1940.125345][T28913] FAULT_INJECTION: forcing a failure.
[ 1940.125345][T28913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1940.154056][T28913] CPU: 0 UID: 0 PID: 28913 Comm: syz.4.6394 Not tainted syzkaller #0 PREEMPT(full) 
[ 1940.154082][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1940.154092][T28913] Call Trace:
[ 1940.154098][T28913]  <TASK>
[ 1940.154105][T28913]  dump_stack_lvl+0x16c/0x1f0
[ 1940.154131][T28913]  should_fail_ex+0x512/0x640
[ 1940.154155][T28913]  _copy_from_user+0x2e/0xd0
[ 1940.154178][T28913]  copy_msghdr_from_user+0x98/0x160
[ 1940.154200][T28913]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1940.154231][T28913]  ___sys_sendmsg+0xfe/0x1d0
[ 1940.154253][T28913]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1940.154302][T28913]  __sys_sendmsg+0x16d/0x220
[ 1940.154323][T28913]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1940.154358][T28913]  do_syscall_64+0xcd/0x4e0
[ 1940.154382][T28913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.154408][T28913] RIP: 0033:0x7f355ff8eec9
[ 1940.154424][T28913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1940.154441][T28913] RSP: 002b:00007f3560d52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1940.154458][T28913] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8eec9
[ 1940.154470][T28913] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003
[ 1940.154481][T28913] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 1940.154492][T28913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1940.154502][T28913] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 1940.154526][T28913]  </TASK>
[ 1940.365174][T28917] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1940.470793][T28920] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1940.488670][T28920] FAULT_INJECTION: forcing a failure.
[ 1940.488670][T28920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1940.510932][T28920] CPU: 0 UID: 0 PID: 28920 Comm: syz.4.6397 Not tainted syzkaller #0 PREEMPT(full) 
[ 1940.510959][T28920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1940.510970][T28920] Call Trace:
[ 1940.510977][T28920]  <TASK>
[ 1940.510984][T28920]  dump_stack_lvl+0x16c/0x1f0
[ 1940.511013][T28920]  should_fail_ex+0x512/0x640
[ 1940.511038][T28920]  _copy_from_user+0x2e/0xd0
[ 1940.511062][T28920]  copy_msghdr_from_user+0x98/0x160
[ 1940.511086][T28920]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1940.511120][T28920]  ___sys_sendmsg+0xfe/0x1d0
[ 1940.511143][T28920]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1940.511196][T28920]  __sys_sendmsg+0x16d/0x220
[ 1940.511219][T28920]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1940.511257][T28920]  do_syscall_64+0xcd/0x4e0
[ 1940.511283][T28920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.511301][T28920] RIP: 0033:0x7f355ff8eec9
[ 1940.511323][T28920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1940.511340][T28920] RSP: 002b:00007f3560d52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1940.511359][T28920] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8eec9
[ 1940.511371][T28920] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003
[ 1940.511381][T28920] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 1940.511392][T28920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1940.511402][T28920] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 1940.511426][T28920]  </TASK>
[ 1941.689099][T28931] overlayfs: missing 'lowerdir'
[ 1942.095063][T11828] Bluetooth: hci5: command 0x0406 tx timeout
[ 1942.231400][T28951] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1942.279982][T28952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1942.303548][T28952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1942.316437][T28952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1942.387646][T28952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1942.839001][   T30] audit: type=1400 audit(1759639685.233:4404): avc:  denied  { bind } for  pid=28954 comm="syz.3.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1942.868074][   T30] audit: type=1400 audit(1759639685.233:4405): avc:  denied  { connect } for  pid=28954 comm="syz.3.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1943.523583][T28980] netdevsim netdevsim4: Direct firmware load for .
[ 1943.523583][T28980]  failed with error -2
[ 1943.574598][   T30] audit: type=1400 audit(1759639685.993:4406): avc:  denied  { firmware_load } for  pid=28979 comm="syz.4.6413" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1943.715862][T28980] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[ 1943.715862][T28980] 
[ 1943.983994][T28984] netlink: 'syz.4.6413': attribute type 1 has an invalid length.
[ 1943.995184][T28987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6414'.
[ 1944.037251][T28992] FAULT_INJECTION: forcing a failure.
[ 1944.037251][T28992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1944.052272][T28992] CPU: 1 UID: 0 PID: 28992 Comm: syz.3.6416 Not tainted syzkaller #0 PREEMPT(full) 
[ 1944.052297][T28992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1944.052308][T28992] Call Trace:
[ 1944.052315][T28992]  <TASK>
[ 1944.052323][T28992]  dump_stack_lvl+0x16c/0x1f0
[ 1944.052350][T28992]  should_fail_ex+0x512/0x640
[ 1944.052374][T28992]  _copy_from_user+0x2e/0xd0
[ 1944.052398][T28992]  move_addr_to_kernel+0x65/0x170
[ 1944.052427][T28992]  __sys_sendto+0x1be/0x520
[ 1944.052448][T28992]  ? __pfx___sys_sendto+0x10/0x10
[ 1944.052488][T28992]  ? ksys_write+0x1ac/0x250
[ 1944.052507][T28992]  ? __pfx_ksys_write+0x10/0x10
[ 1944.052533][T28992]  __x64_sys_sendto+0xe0/0x1c0
[ 1944.052553][T28992]  ? do_syscall_64+0x91/0x4e0
[ 1944.052575][T28992]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1944.052596][T28992]  do_syscall_64+0xcd/0x4e0
[ 1944.052618][T28992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.052637][T28992] RIP: 0033:0x7fce8418eec9
[ 1944.052652][T28992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1944.052669][T28992] RSP: 002b:00007fce823f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1944.052688][T28992] RAX: ffffffffffffffda RBX: 00007fce843e5fa0 RCX: 00007fce8418eec9
[ 1944.052700][T28992] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1944.052711][T28992] RBP: 00007fce823f6090 R08: 0000200000000140 R09: 0000000000000014
[ 1944.052722][T28992] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1944.052732][T28992] R13: 00007fce843e6038 R14: 00007fce843e5fa0 R15: 00007fff93110058
[ 1944.052756][T28992]  </TASK>
[ 1944.332813][T28999] FAULT_INJECTION: forcing a failure.
[ 1944.332813][T28999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1944.348536][T28999] CPU: 1 UID: 0 PID: 28999 Comm: syz.0.6420 Not tainted syzkaller #0 PREEMPT(full) 
[ 1944.348562][T28999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1944.348579][T28999] Call Trace:
[ 1944.348585][T28999]  <TASK>
[ 1944.348593][T28999]  dump_stack_lvl+0x16c/0x1f0
[ 1944.348622][T28999]  should_fail_ex+0x512/0x640
[ 1944.348647][T28999]  _copy_from_user+0x2e/0xd0
[ 1944.348671][T28999]  copy_msghdr_from_user+0x98/0x160
[ 1944.348694][T28999]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1944.348729][T28999]  ___sys_sendmsg+0xfe/0x1d0
[ 1944.348752][T28999]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1944.348805][T28999]  __sys_sendmsg+0x16d/0x220
[ 1944.348828][T28999]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1944.348866][T28999]  do_syscall_64+0xcd/0x4e0
[ 1944.348891][T28999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.348909][T28999] RIP: 0033:0x7f3a4d38eec9
[ 1944.348925][T28999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1944.348942][T28999] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1944.348960][T28999] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 1944.348972][T28999] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1944.348983][T28999] RBP: 00007f3a4e20f090 R08: 0000000000000000 R09: 0000000000000000
[ 1944.348994][T28999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1944.349004][T28999] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 1944.349029][T28999]  </TASK>
[ 1944.811201][T22580] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1944.846811][T29003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6421'.
[ 1944.868948][T29003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6421'.
[ 1944.917191][T29007] comedi comedi3: comedi_config --init_data is deprecated
[ 1944.925641][T29009] netlink: 'syz.1.6424': attribute type 5 has an invalid length.
[ 1944.938588][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6424'.
[ 1944.991715][T29012] netlink: 'syz.1.6424': attribute type 7 has an invalid length.
[ 1945.114054][T22580] usb 4-1: Using ep0 maxpacket: 8
[ 1945.120745][T22580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1945.131902][T22580] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[ 1945.229451][T22580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1945.246510][T22580] usb 4-1: config 0 descriptor??
[ 1945.487173][T28995] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1945.945315][T22580] usbhid 4-1:0.0: can't add hid device: -71
[ 1945.951364][T22580] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1945.987946][T22580] usb 4-1: USB disconnect, device number 46
[ 1946.164798][   T30] audit: type=1400 audit(1759639688.593:4407): avc:  denied  { append } for  pid=29033 comm="syz.0.6430" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1946.384967][ T5942] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1946.525032][T12559] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1946.535003][ T5942] usb 2-1: Using ep0 maxpacket: 8
[ 1946.556431][ T5942] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1946.567047][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1946.577615][ T5942] usb 2-1: Product: syz
[ 1946.581841][ T5942] usb 2-1: Manufacturer: syz
[ 1946.586605][ T5942] usb 2-1: SerialNumber: syz
[ 1946.601702][ T5942] usb 2-1: config 0 descriptor??
[ 1946.709185][T12559] usb 1-1: Using ep0 maxpacket: 8
[ 1946.709694][ T5942] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1946.734613][T12559] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1946.744757][T12559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1946.767059][T12559] usb 1-1: config 0 descriptor??
[ 1947.025273][T12559] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1947.341185][T29054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6437'.
[ 1947.465584][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6438'.
[ 1947.865829][ T5942] gspca_sonixj: reg_w1 err -110
[ 1947.872106][T12559] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1947.872357][ T5942] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[ 1947.913567][T12559] asix 1-1:0.0: probe with driver asix failed with error -61
[ 1947.947390][T29035] netlink: 'syz.1.6431': attribute type 1 has an invalid length.
[ 1947.964490][   T30] audit: type=1400 audit(1759639690.393:4408): avc:  denied  { connect } for  pid=29047 comm="syz.4.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1948.159961][ T5904] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1948.312131][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6439'.
[ 1948.805046][ T5904] usb 4-1: Using ep0 maxpacket: 32
[ 1948.812122][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1948.821447][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1948.831731][ T5904] usb 4-1: config 0 descriptor??
[ 1949.662755][T22580] usb 2-1: USB disconnect, device number 87
[ 1949.844319][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.745018][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.752990][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.760985][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.768915][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.777477][ T5904] logitech 0003:046D:C29C.00C5: unknown main item tag 0x0
[ 1950.786547][ T5904] logitech 0003:046D:C29C.00C5: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[ 1950.824180][ T5942] usb 1-1: USB disconnect, device number 84
[ 1951.059002][ T5904] logitech 0003:046D:C29C.00C5: no inputs found
[ 1951.095235][ T5904] usb 4-1: USB disconnect, device number 47
[ 1952.495825][T14714] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1952.548262][T29102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6450'.
[ 1952.561504][T29102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6450'.
[ 1952.588619][T29102] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1952.689295][   T30] audit: type=1400 audit(1759639695.123:4409): avc:  denied  { write } for  pid=29113 comm="syz.1.6454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1952.717291][T14714] usb 5-1: Using ep0 maxpacket: 16
[ 1952.724035][T29116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6456'.
[ 1952.736193][T14714] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1952.745677][T14714] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[ 1952.749702][T29114] tipc: Started in network mode
[ 1952.753874][T14714] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[ 1952.753898][T14714] usb 5-1: config 13 has no interface number 0
[ 1952.759340][T29114] tipc: Node identity 2a38e36f5836, cluster identity 4711
[ 1952.779975][T14714] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[ 1952.814013][T14714] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1952.830805][T14714] usb 5-1: config 13 interface 50 has no altsetting 0
[ 1952.838641][T29114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1952.847284][T29118] syzkaller0: entered promiscuous mode
[ 1952.847647][T14714] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1952.852896][T29118] syzkaller0: entered allmulticast mode
[ 1952.862006][T22580] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1952.876871][T14714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1952.884050][T29114] tipc: Resetting bearer <eth:syzkaller0>
[ 1952.885218][T14714] usb 5-1: Product: syz
[ 1952.896078][T29113] tipc: Resetting bearer <eth:syzkaller0>
[ 1952.924425][T29113] tipc: Disabling bearer <eth:syzkaller0>
[ 1952.952654][T14714] usb 5-1: Manufacturer: syz
[ 1952.960123][T29122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6457'.
[ 1952.960192][T14714] usb 5-1: SerialNumber: syz
[ 1953.071529][T29096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1953.135218][T22580] usb 4-1: Using ep0 maxpacket: 32
[ 1953.151844][T22580] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1953.162855][T22580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1953.219416][T22580] usb 4-1: config 0 descriptor??
[ 1953.341784][T29096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29096 comm=syz.4.6449
[ 1953.350610][T22580] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1953.467276][T29096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29096 comm=syz.4.6449
[ 1953.952463][T22580] gspca_vc032x: reg_w err -71
[ 1953.986726][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1953.992162][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.009015][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.023050][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.032802][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.038759][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.044317][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.051744][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.097668][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.103850][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.128537][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.305052][ T5942] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1954.572715][T14714] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1954.749911][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.755460][T14714] usb 5-1: MIDIStreaming interface descriptor not found
[ 1954.762529][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.771000][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.777212][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.783175][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.793040][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.799933][T22580] gspca_vc032x: I2c Bus Busy Wait 00
[ 1954.993281][ T5942] usb 2-1: Using ep0 maxpacket: 32
[ 1955.020753][ T5942] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1955.029159][T14714] usb 5-1: USB disconnect, device number 47
[ 1955.050162][ T5942] usb 2-1: config 0 has no interface number 0
[ 1955.062163][T22580] gspca_vc032x: Unknown sensor...
[ 1955.151631][T29140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6462'.
[ 1955.163097][ T5942] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1955.207200][T22580] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[ 1955.273661][ T5942] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1955.294460][T22580] usb 4-1: USB disconnect, device number 48
[ 1955.305941][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.335983][T28375] udevd[28375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1955.338320][ T5942] usb 2-1: Product: syz
[ 1955.446193][T29146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6463'.
[ 1955.680928][ T5942] usb 2-1: Manufacturer: syz
[ 1955.694667][ T5942] usb 2-1: SerialNumber: syz
[ 1955.750270][ T5942] usb 2-1: config 0 descriptor??
[ 1955.778602][ T5942] smsc75xx v1.0.0
[ 1956.000799][T29151] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1956.092973][T29153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6465'.
[ 1956.130061][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6464'.
[ 1956.362372][   T30] audit: type=1326 audit(1759639698.793:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29156 comm="syz.0.6467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a4d38eec9 code=0x0
[ 1956.386364][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1956.400404][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1956.512384][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1956.523830][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1956.614647][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1956.644665][ T5942] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1956.655812][ T5942] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61
[ 1956.657716][   T30] audit: type=1400 audit(1759639699.093:4411): avc:  denied  { create } for  pid=29162 comm="syz.3.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1956.825072][   T30] audit: type=1400 audit(1759639699.243:4412): avc:  denied  { write } for  pid=29162 comm="syz.3.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1957.167665][T29172] IPVS: length: 24 != 67608
[ 1957.317477][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6472'.
[ 1957.328499][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6473'.
[ 1957.353266][   T30] audit: type=1400 audit(1759639699.783:4413): avc:  denied  { ioctl } for  pid=29173 comm="syz.3.6473" path="socket:[155924]" dev="sockfs" ino=155924 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1957.355570][T29176] FAULT_INJECTION: forcing a failure.
[ 1957.355570][T29176] name failslab, interval 1, probability 0, space 0, times 0
[ 1957.400415][T29176] CPU: 1 UID: 0 PID: 29176 Comm: syz.4.6472 Not tainted syzkaller #0 PREEMPT(full) 
[ 1957.400441][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1957.400452][T29176] Call Trace:
[ 1957.400458][T29176]  <TASK>
[ 1957.400466][T29176]  dump_stack_lvl+0x16c/0x1f0
[ 1957.400493][T29176]  should_fail_ex+0x512/0x640
[ 1957.400514][T29176]  ? fs_reclaim_acquire+0xae/0x150
[ 1957.400538][T29176]  should_failslab+0xc2/0x120
[ 1957.400561][T29176]  __kmalloc_noprof+0xdd/0x880
[ 1957.400588][T29176]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1957.400615][T29176]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1957.400635][T29176]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1957.400659][T29176]  ? tomoyo_profile+0x47/0x60
[ 1957.400685][T29176]  tomoyo_path_number_perm+0x245/0x580
[ 1957.400702][T29176]  ? tomoyo_path_number_perm+0x237/0x580
[ 1957.400722][T29176]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1957.400742][T29176]  ? find_held_lock+0x2b/0x80
[ 1957.400792][T29176]  ? find_held_lock+0x2b/0x80
[ 1957.400816][T29176]  ? hook_file_ioctl_common+0x145/0x410
[ 1957.400846][T29176]  ? __fget_files+0x20e/0x3c0
[ 1957.400870][T29176]  security_file_ioctl+0x9b/0x240
[ 1957.400893][T29176]  __x64_sys_ioctl+0xb7/0x210
[ 1957.400922][T29176]  do_syscall_64+0xcd/0x4e0
[ 1957.400948][T29176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1957.400966][T29176] RIP: 0033:0x7f355ff8eec9
[ 1957.400980][T29176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1957.400998][T29176] RSP: 002b:00007f3560d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1957.401016][T29176] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8eec9
[ 1957.401028][T29176] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 000000000000000b
[ 1957.401039][T29176] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 1957.401049][T29176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1957.401059][T29176] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 1957.401085][T29176]  </TASK>
[ 1957.401092][T29176] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1957.765404][T27963] usb 2-1: USB disconnect, device number 88
[ 1957.931635][T29194] __nla_validate_parse: 2 callbacks suppressed
[ 1957.931652][T29194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6476'.
[ 1958.016553][ T5942] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[ 1958.052455][T29188] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1958.986189][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A
[ 1959.027955][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4
[ 1959.042778][ T5942] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1959.054570][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1959.069716][ T5942] usb 4-1: Product: syz
[ 1959.155586][T29208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6481'.
[ 1959.202905][ T5942] usb 4-1: Manufacturer: syz
[ 1959.240118][ T5942] usb 4-1: SerialNumber: syz
[ 1959.268819][ T5942] usb 4-1: config 0 descriptor??
[ 1959.920479][ T5942] usb 4-1: USB disconnect, device number 49
[ 1960.438250][   T30] audit: type=1326 audit(1759639702.863:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a4d38eec9 code=0x0
[ 1961.505192][T16621] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1961.785726][T16621] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[ 1961.832356][T16621] usb 4-1: config 0 has no interface number 0
[ 1961.900176][T16621] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1961.927736][T16621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1961.952692][T16621] usb 4-1: Product: syz
[ 1961.970289][T16621] usb 4-1: Manufacturer: syz
[ 1961.987279][T16621] usb 4-1: SerialNumber: syz
[ 1962.012700][T16621] usb 4-1: config 0 descriptor??
[ 1962.040044][T29238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6489'.
[ 1962.366242][T16621] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[ 1962.676034][T11828] Bluetooth: hci0: command 0x0419 tx timeout
[ 1963.349809][T16621] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[ 1963.357878][T16621] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[ 1963.366753][T16621] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[ 1963.380539][T16621] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1963.700021][T27963] usb 4-1: USB disconnect, device number 50
[ 1963.718697][T27963] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1963.745673][T27963] keyspan 4-1:0.133: device disconnected
[ 1964.505811][T29263] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1964.867740][T29270] FAULT_INJECTION: forcing a failure.
[ 1964.867740][T29270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1964.880890][T29270] CPU: 1 UID: 0 PID: 29270 Comm: syz.3.6495 Not tainted syzkaller #0 PREEMPT(full) 
[ 1964.880914][T29270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1964.880925][T29270] Call Trace:
[ 1964.880934][T29270]  <TASK>
[ 1964.880943][T29270]  dump_stack_lvl+0x16c/0x1f0
[ 1964.880971][T29270]  should_fail_ex+0x512/0x640
[ 1964.880997][T29270]  _copy_from_user+0x2e/0xd0
[ 1964.881020][T29270]  copy_msghdr_from_user+0x98/0x160
[ 1964.881043][T29270]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1964.881063][T29270]  ? trace_sched_exit_tp+0xd1/0x120
[ 1964.881099][T29270]  ___sys_sendmsg+0xfe/0x1d0
[ 1964.881122][T29270]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1964.881168][T29270]  ? __sys_sendmmsg+0x2c7/0x420
[ 1964.881193][T29270]  __sys_sendmmsg+0x200/0x420
[ 1964.881218][T29270]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1964.881265][T29270]  ? fput+0x9b/0xd0
[ 1964.881290][T29270]  ? ksys_write+0x1ac/0x250
[ 1964.881315][T29270]  __x64_sys_sendmmsg+0x9c/0x100
[ 1964.881338][T29270]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1964.881360][T29270]  do_syscall_64+0xcd/0x4e0
[ 1964.881385][T29270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1964.881403][T29270] RIP: 0033:0x7fce8418eec9
[ 1964.881418][T29270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1964.881435][T29270] RSP: 002b:00007fce823b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1964.881453][T29270] RAX: ffffffffffffffda RBX: 00007fce843e6180 RCX: 00007fce8418eec9
[ 1964.881464][T29270] RDX: 0000000000006c00 RSI: 0000200000007e40 RDI: 0000000000000005
[ 1964.881475][T29270] RBP: 00007fce823b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1964.881486][T29270] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001
[ 1964.881496][T29270] R13: 00007fce843e6218 R14: 00007fce843e6180 R15: 00007fff93110058
[ 1964.881521][T29270]  </TASK>
[ 1965.331398][T29275] netfs: Couldn't get user pages (rc=-14)
[ 1965.343583][T29275] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6497'.
[ 1965.603328][T29286] sctp: [Deprecated]: syz.3.6501 (pid 29286) Use of int in maxseg socket option.
[ 1965.603328][T29286] Use struct sctp_assoc_value instead
[ 1965.948001][T29291] FAULT_INJECTION: forcing a failure.
[ 1965.948001][T29291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1965.965224][T29291] CPU: 1 UID: 0 PID: 29291 Comm: syz.1.6500 Not tainted syzkaller #0 PREEMPT(full) 
[ 1965.965248][T29291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1965.965255][T29291] Call Trace:
[ 1965.965259][T29291]  <TASK>
[ 1965.965264][T29291]  dump_stack_lvl+0x16c/0x1f0
[ 1965.965282][T29291]  should_fail_ex+0x512/0x640
[ 1965.965299][T29291]  _copy_to_user+0x32/0xd0
[ 1965.965315][T29291]  simple_read_from_buffer+0xcb/0x170
[ 1965.965328][T29291]  proc_fail_nth_read+0x197/0x240
[ 1965.965342][T29291]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1965.965357][T29291]  ? rw_verify_area+0xcf/0x6c0
[ 1965.965375][T29291]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1965.965388][T29291]  vfs_read+0x1e1/0xcf0
[ 1965.965401][T29291]  ? __pfx___mutex_lock+0x10/0x10
[ 1965.965416][T29291]  ? __pfx_vfs_read+0x10/0x10
[ 1965.965430][T29291]  ? __fget_files+0x20e/0x3c0
[ 1965.965446][T29291]  ksys_read+0x12a/0x250
[ 1965.965457][T29291]  ? __pfx_ksys_read+0x10/0x10
[ 1965.965473][T29291]  do_syscall_64+0xcd/0x4e0
[ 1965.965488][T29291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1965.965499][T29291] RIP: 0033:0x7f8de078d8dc
[ 1965.965509][T29291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1965.965520][T29291] RSP: 002b:00007f8de15f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1965.965531][T29291] RAX: ffffffffffffffda RBX: 00007f8de09e6090 RCX: 00007f8de078d8dc
[ 1965.965538][T29291] RDX: 000000000000000f RSI: 00007f8de15f00a0 RDI: 0000000000000005
[ 1965.965545][T29291] RBP: 00007f8de15f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1965.965551][T29291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1965.965557][T29291] R13: 00007f8de09e6128 R14: 00007f8de09e6090 R15: 00007ffda743c8b8
[ 1965.965571][T29291]  </TASK>
[ 1967.391399][   T30] audit: type=1400 audit(1759639709.823:4415): avc:  denied  { getopt } for  pid=29309 comm="syz.1.6509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1967.617750][ T5904] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[ 1967.671172][T29317] FAULT_INJECTION: forcing a failure.
[ 1967.671172][T29317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1967.686700][T29317] CPU: 0 UID: 0 PID: 29317 Comm: syz.0.6512 Not tainted syzkaller #0 PREEMPT(full) 
[ 1967.686725][T29317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1967.686735][T29317] Call Trace:
[ 1967.686742][T29317]  <TASK>
[ 1967.686749][T29317]  dump_stack_lvl+0x16c/0x1f0
[ 1967.686777][T29317]  should_fail_ex+0x512/0x640
[ 1967.686801][T29317]  _copy_from_user+0x2e/0xd0
[ 1967.686825][T29317]  move_addr_to_kernel+0x65/0x170
[ 1967.686854][T29317]  __sys_sendto+0x1be/0x520
[ 1967.686873][T29317]  ? __pfx___sys_sendto+0x10/0x10
[ 1967.686914][T29317]  ? ksys_write+0x1ac/0x250
[ 1967.686932][T29317]  ? __pfx_ksys_write+0x10/0x10
[ 1967.686954][T29317]  __x64_sys_sendto+0xe0/0x1c0
[ 1967.686972][T29317]  ? do_syscall_64+0x91/0x4e0
[ 1967.686993][T29317]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1967.687019][T29317]  do_syscall_64+0xcd/0x4e0
[ 1967.687043][T29317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1967.687060][T29317] RIP: 0033:0x7f3a4d38eec9
[ 1967.687076][T29317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1967.687093][T29317] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1967.687110][T29317] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 1967.687122][T29317] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000005
[ 1967.687133][T29317] RBP: 00007f3a4e20f090 R08: 0000200000000140 R09: 0000000000000014
[ 1967.687144][T29317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1967.687154][T29317] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 1967.687179][T29317]  </TASK>
[ 1968.096857][T29322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6513'.
[ 1968.354197][T29320] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1968.518731][ T5904] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[ 1968.526976][ T5904] usb 4-1: config 0 has no interface number 0
[ 1968.558485][ T5904] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1968.587160][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1968.634438][ T5904] usb 4-1: Product: syz
[ 1968.732315][ T5904] usb 4-1: Manufacturer: syz
[ 1968.783878][ T5904] usb 4-1: SerialNumber: syz
[ 1968.963430][ T5904] usb 4-1: config 0 descriptor??
[ 1969.144962][T22580] usb 1-1: new low-speed USB device number 85 using dummy_hcd
[ 1969.325267][T22580] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1969.333464][T22580] usb 1-1: config 0 has no interface number 0
[ 1969.347806][T22580] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1969.360519][T22580] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1969.383304][T22580] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1969.392664][T22580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1969.431072][T22580] usb 1-1: config 0 descriptor??
[ 1969.438513][T29324] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1969.519676][T22580] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1969.611514][T29308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1969.715753][T29308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1969.736394][T29341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6519'.
[ 1970.153885][ T5904] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1970.189702][ T5904] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[ 1970.194068][T22580] usb 1-1: USB disconnect, device number 85
[ 1970.201724][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1970.281687][ T5904] asix 4-1:0.251: probe with driver asix failed with error -71
[ 1970.447093][ T5904] usb 4-1: USB disconnect, device number 51
[ 1970.578267][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6520'.
[ 1972.196909][T29367] FAULT_INJECTION: forcing a failure.
[ 1972.196909][T29367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1972.210335][T29367] CPU: 0 UID: 0 PID: 29367 Comm: syz.3.6526 Not tainted syzkaller #0 PREEMPT(full) 
[ 1972.210362][T29367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1972.210373][T29367] Call Trace:
[ 1972.210380][T29367]  <TASK>
[ 1972.210388][T29367]  dump_stack_lvl+0x16c/0x1f0
[ 1972.210416][T29367]  should_fail_ex+0x512/0x640
[ 1972.210441][T29367]  _copy_from_user+0x2e/0xd0
[ 1972.210466][T29367]  copy_msghdr_from_user+0x98/0x160
[ 1972.210489][T29367]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1972.210523][T29367]  ___sys_sendmsg+0xfe/0x1d0
[ 1972.210546][T29367]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1972.210600][T29367]  __sys_sendmsg+0x16d/0x220
[ 1972.210623][T29367]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1972.210662][T29367]  do_syscall_64+0xcd/0x4e0
[ 1972.210686][T29367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1972.210705][T29367] RIP: 0033:0x7fce8418eec9
[ 1972.210720][T29367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1972.210741][T29367] RSP: 002b:00007fce823f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1972.210759][T29367] RAX: ffffffffffffffda RBX: 00007fce843e5fa0 RCX: 00007fce8418eec9
[ 1972.210772][T29367] RDX: 000000000004c000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1972.210783][T29367] RBP: 00007fce823f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1972.210793][T29367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1972.210803][T29367] R13: 00007fce843e6038 R14: 00007fce843e5fa0 R15: 00007fff93110058
[ 1972.210828][T29367]  </TASK>
[ 1972.901493][T29380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6530'.
[ 1973.051681][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'.
[ 1973.951635][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6528'.
[ 1974.729907][T29395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1974.926610][   T30] audit: type=1400 audit(1759639717.363:4416): avc:  denied  { read } for  pid=29396 comm="syz.0.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1974.948105][T29398] 9pnet_virtio: no channels available for device syz
[ 1975.785395][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1975.791707][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.980792][T29426] IPVS: length: 24 != 67608
[ 1977.777842][T29437] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 1978.162300][T29447] kvm: pic: level sensitive irq not supported
[ 1978.162486][T29447] kvm: pic: single mode not supported
[ 1978.168797][T29447] kvm: pic: level sensitive irq not supported
[ 1978.174569][T29447] kvm: pic: single mode not supported
[ 1978.180671][T29447] kvm: pic: level sensitive irq not supported
[ 1978.186892][T29447] kvm: pic: single mode not supported
[ 1978.192978][T29447] kvm: pic: level sensitive irq not supported
[ 1978.193159][T29447] kvm: pic: level sensitive irq not supported
[ 1979.765188][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6556'.
[ 1979.765618][T15400] Bluetooth: hci0: unexpected event for opcode 0x0c1b
[ 1981.979350][T29507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'.
[ 1982.388649][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6568'.
[ 1983.444283][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6581'.
[ 1984.599264][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6583'.
[ 1986.454579][   T30] audit: type=1326 audit(1759639728.883:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.566116][   T30] audit: type=1326 audit(1759639728.933:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.683595][   T30] audit: type=1326 audit(1759639728.943:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.811132][   T30] audit: type=1326 audit(1759639728.943:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.860973][   T30] audit: type=1326 audit(1759639728.943:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.901409][   T30] audit: type=1326 audit(1759639728.943:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.954931][   T30] audit: type=1326 audit(1759639728.943:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1986.978821][   T30] audit: type=1326 audit(1759639728.943:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1987.018354][T29595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6601'.
[ 1987.098749][   T30] audit: type=1326 audit(1759639728.943:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1987.125387][   T30] audit: type=1326 audit(1759639728.943:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29584 comm="syz.2.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11078eec9 code=0x7ffc0000
[ 1990.446150][T29649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6615'.
[ 1991.667586][ T5904] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1992.566362][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1992.585042][ T5904] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[ 1992.703622][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1992.730573][ T5904] usb 4-1: config 0 descriptor??
[ 1993.222498][T15400] Bluetooth: hci1: command 0x0406 tx timeout
[ 1993.781311][T29692] FAULT_INJECTION: forcing a failure.
[ 1993.781311][T29692] name failslab, interval 1, probability 0, space 0, times 0
[ 1993.794211][T29692] CPU: 1 UID: 0 PID: 29692 Comm: syz.0.6628 Not tainted syzkaller #0 PREEMPT(full) 
[ 1993.794236][T29692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1993.794246][T29692] Call Trace:
[ 1993.794258][T29692]  <TASK>
[ 1993.794264][T29692]  dump_stack_lvl+0x16c/0x1f0
[ 1993.794292][T29692]  should_fail_ex+0x512/0x640
[ 1993.794312][T29692]  ? fs_reclaim_acquire+0xae/0x150
[ 1993.794335][T29692]  should_failslab+0xc2/0x120
[ 1993.794355][T29692]  __kmalloc_noprof+0xdd/0x880
[ 1993.794372][T29692]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1993.794389][T29692]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1993.794402][T29692]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1993.794420][T29692]  ? tomoyo_profile+0x47/0x60
[ 1993.794445][T29692]  tomoyo_path_number_perm+0x245/0x580
[ 1993.794462][T29692]  ? tomoyo_path_number_perm+0x237/0x580
[ 1993.794480][T29692]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1993.794497][T29692]  ? find_held_lock+0x2b/0x80
[ 1993.794527][T29692]  ? find_held_lock+0x2b/0x80
[ 1993.794541][T29692]  ? hook_file_ioctl_common+0x145/0x410
[ 1993.794562][T29692]  ? __fget_files+0x20e/0x3c0
[ 1993.794586][T29692]  security_file_ioctl+0x9b/0x240
[ 1993.794607][T29692]  __x64_sys_ioctl+0xb7/0x210
[ 1993.794634][T29692]  do_syscall_64+0xcd/0x4e0
[ 1993.794651][T29692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1993.794663][T29692] RIP: 0033:0x7f3a4d38eec9
[ 1993.794678][T29692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1993.794690][T29692] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1993.794701][T29692] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 1993.794711][T29692] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005
[ 1993.794722][T29692] RBP: 00007f3a4e20f090 R08: 0000000000000000 R09: 0000000000000000
[ 1993.794732][T29692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1993.794741][T29692] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 1993.794764][T29692]  </TASK>
[ 1993.795196][T29692] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1994.026814][ T5904] playstation 0003:054C:0CE6.00C6: report_id 0 is invalid
[ 1994.033961][ T5904] playstation 0003:054C:0CE6.00C6: item 0 0 1 8 parsing failed
[ 1994.065436][ T5904] playstation 0003:054C:0CE6.00C6: Parse failed
[ 1994.071801][ T5904] playstation 0003:054C:0CE6.00C6: probe with driver playstation failed with error -22
[ 1995.424912][T27963] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1995.613112][T14714] usb 4-1: USB disconnect, device number 52
[ 1995.624917][T27963] usb 2-1: Using ep0 maxpacket: 32
[ 1996.100291][T27963] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1996.115065][T27963] usb 2-1: config 0 has no interface number 0
[ 1996.121318][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1996.121332][   T30] audit: type=1326 audit(1759639738.553:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29720 comm="syz.3.6637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8418eec9 code=0x0
[ 1996.152865][T27963] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1996.224693][T27963] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1996.234282][T27963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1996.244025][T27963] usb 2-1: Product: syz
[ 1996.259732][T27963] usb 2-1: Manufacturer: syz
[ 1996.273704][T27963] usb 2-1: SerialNumber: syz
[ 1996.665670][T27963] usb 2-1: config 0 descriptor??
[ 1996.705488][T27963] smsc75xx v1.0.0
[ 1996.709186][T27963] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1996.749555][T27963] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[ 1996.804539][T29732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6638'.
[ 1997.196354][T29744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6644'.
[ 1997.411698][T29749] input: syz1 as /devices/virtual/input/input62
[ 1999.741219][T12559] usb 2-1: USB disconnect, device number 89
[ 2001.789625][T29781] 9pnet_fd: Insufficient options for proto=fd
[ 2002.149777][T29794] netlink: 'syz.0.6657': attribute type 1 has an invalid length.
[ 2002.246385][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6659'.
[ 2005.295884][T22580] usb 4-1: new low-speed USB device number 53 using dummy_hcd
[ 2005.539613][T22580] usb 4-1: device descriptor read/64, error -71
[ 2005.541236][T29832] 9pnet_fd: Insufficient options for proto=fd
[ 2005.974995][T22580] usb 4-1: new low-speed USB device number 54 using dummy_hcd
[ 2006.114909][T22580] usb 4-1: device descriptor read/64, error -71
[ 2006.239129][T22580] usb usb4-port1: attempt power cycle
[ 2006.615172][T22580] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[ 2006.647056][T22580] usb 4-1: device descriptor read/8, error -71
[ 2007.045084][T22580] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[ 2007.124968][T29855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6679'.
[ 2007.157848][T29851] l2tp_ppp: sess 2/0: no socket in recv
[ 2007.274258][T22580] usb 4-1: device descriptor read/8, error -71
[ 2007.491713][T22580] usb usb4-port1: unable to enumerate USB device
[ 2007.575858][T29875] 9pnet_fd: Insufficient options for proto=fd
[ 2009.005033][T11828] Bluetooth: hci4: command 0x0406 tx timeout
[ 2010.285086][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6692'.
[ 2011.121360][T29911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6697'.
[ 2011.238237][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6693'.
[ 2011.247260][T29907] bridge_slave_1: left allmulticast mode
[ 2011.253100][T29907] bridge_slave_1: left promiscuous mode
[ 2011.275133][T29907] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2011.315093][T29907] bridge_slave_0: left allmulticast mode
[ 2011.320989][T29907] bridge_slave_0: left promiscuous mode
[ 2011.352353][T29907] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2012.529231][T29936] FAULT_INJECTION: forcing a failure.
[ 2012.529231][T29936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2012.579296][T29936] CPU: 1 UID: 0 PID: 29936 Comm: syz.4.6700 Not tainted syzkaller #0 PREEMPT(full) 
[ 2012.579324][T29936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2012.579335][T29936] Call Trace:
[ 2012.579342][T29936]  <TASK>
[ 2012.579349][T29936]  dump_stack_lvl+0x16c/0x1f0
[ 2012.579377][T29936]  should_fail_ex+0x512/0x640
[ 2012.579403][T29936]  _copy_from_user+0x2e/0xd0
[ 2012.579427][T29936]  copy_msghdr_from_user+0x98/0x160
[ 2012.579450][T29936]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2012.579491][T29936]  ___sys_sendmsg+0xfe/0x1d0
[ 2012.579514][T29936]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2012.579566][T29936]  __sys_sendmsg+0x16d/0x220
[ 2012.579587][T29936]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2012.579625][T29936]  do_syscall_64+0xcd/0x4e0
[ 2012.579650][T29936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2012.579669][T29936] RIP: 0033:0x7f355ff8eec9
[ 2012.579684][T29936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2012.579703][T29936] RSP: 002b:00007f355e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2012.579721][T29936] RAX: ffffffffffffffda RBX: 00007f35601e6090 RCX: 00007f355ff8eec9
[ 2012.579734][T29936] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000007
[ 2012.579746][T29936] RBP: 00007f355e1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2012.579757][T29936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2012.579768][T29936] R13: 00007f35601e6128 R14: 00007f35601e6090 R15: 00007ffc35273dc8
[ 2012.579793][T29936]  </TASK>
[ 2012.875062][T22580] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2013.014965][T12559] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 2013.040432][T22580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2013.051922][T22580] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2013.061177][T22580] usb 1-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f
[ 2013.072618][T22580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2013.270901][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6709'.
[ 2013.326266][T22580] usb 1-1: config 0 descriptor??
[ 2013.365790][T12559] usb 4-1: Using ep0 maxpacket: 32
[ 2013.516436][T12559] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 2013.524678][T12559] usb 4-1: config 0 has no interface number 0
[ 2013.531222][T12559] usb 4-1: config 0 interface 184 has no altsetting 0
[ 2013.540356][T12559] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2013.550340][T12559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2013.692315][T12559] usb 4-1: Product: syz
[ 2013.985483][T12559] usb 4-1: Manufacturer: syz
[ 2013.993640][T12559] usb 4-1: SerialNumber: syz
[ 2014.034758][T12559] usb 4-1: config 0 descriptor??
[ 2014.041580][T12559] smsc75xx v1.0.0
[ 2014.331036][T29961] netlink: 'syz.2.6714': attribute type 1 has an invalid length.
[ 2014.497171][ T5942] usb 1-1: USB disconnect, device number 86
[ 2014.763301][T12559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2014.800186][T12559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2015.143982][   T30] audit: type=1400 audit(1759639757.573:4459): avc:  denied  { nlmsg_write } for  pid=29966 comm="syz.4.6716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 2015.238943][T12559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[ 2015.258135][T12559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[ 2015.284309][T12559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 2015.309562][T12559] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[ 2016.503217][ T5904] usb 4-1: USB disconnect, device number 57
[ 2017.184903][ T5942] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2017.213205][T30013] netlink: 'syz.4.6730': attribute type 1 has an invalid length.
[ 2017.496341][ T5942] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[ 2017.506884][ T5942] usb 4-1: config 0 has no interface number 0
[ 2017.520524][ T5942] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 2017.548119][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2017.579906][T30020] binder: BINDER_SET_CONTEXT_MGR already set
[ 2017.588522][ T5942] usb 4-1: config 0 descriptor??
[ 2017.624298][T30020] binder: 30019:30020 ioctl 4018620d 200000000040 returned -16
[ 2017.838542][T15400] Bluetooth: hci1: Unknown advertising packet type: 0x78
[ 2017.838586][T15400] Bluetooth: hci1: Malformed LE Event: 0x0d
[ 2017.904954][T22580] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 2017.913719][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6727'.
[ 2017.922709][T30000] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6727'.
[ 2017.933593][T30000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2017.942540][T30000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2017.972030][ T5942] usb 4-1: string descriptor 0 read error: -71
[ 2017.980832][ T5942] usb-storage 4-1:0.168: USB Mass Storage device detected
[ 2017.991784][ T5942] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[ 2018.021665][ T5942] usb 4-1: USB disconnect, device number 58
[ 2018.065218][T22580] usb 2-1: Using ep0 maxpacket: 16
[ 2018.072255][T22580] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2018.086552][T22580] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 2018.095854][T22580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.103879][T22580] usb 2-1: Product: syz
[ 2018.110053][T22580] usb 2-1: Manufacturer: syz
[ 2018.114691][T22580] usb 2-1: SerialNumber: syz
[ 2018.121893][T22580] usb 2-1: config 0 descriptor??
[ 2018.133168][T22580] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 2018.330104][T30023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2018.339163][T30023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2018.349712][T30023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2018.360213][T30023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2018.381322][T22580] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[ 2018.399258][T22580] usb 2-1: USB disconnect, device number 90
[ 2018.435671][T12559] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2018.608166][T12559] usb 5-1: Using ep0 maxpacket: 8
[ 2018.827159][T12559] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 2018.844926][T12559] usb 5-1: config 0 has no interface number 0
[ 2018.851171][T12559] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2018.851201][T12559] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2018.851225][T12559] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2018.851247][T12559] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2018.851283][T12559] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2018.851304][T12559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2018.854421][T12559] usb 5-1: config 0 descriptor??
[ 2018.966003][T12559] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2019.026803][T30049] overlayfs: failed to clone lowerpath
[ 2019.059496][T30034] FAULT_INJECTION: forcing a failure.
[ 2019.059496][T30034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2019.059553][T30034] CPU: 1 UID: 0 PID: 30034 Comm: syz.4.6737 Not tainted syzkaller #0 PREEMPT(full) 
[ 2019.059574][T30034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2019.059585][T30034] Call Trace:
[ 2019.059592][T30034]  <TASK>
[ 2019.059599][T30034]  dump_stack_lvl+0x16c/0x1f0
[ 2019.059627][T30034]  should_fail_ex+0x512/0x640
[ 2019.059653][T30034]  _copy_to_user+0x32/0xd0
[ 2019.059678][T30034]  simple_read_from_buffer+0xcb/0x170
[ 2019.059699][T30034]  proc_fail_nth_read+0x197/0x240
[ 2019.059724][T30034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2019.059748][T30034]  ? rw_verify_area+0xcf/0x6c0
[ 2019.059774][T30034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2019.059796][T30034]  vfs_read+0x1e1/0xcf0
[ 2019.059818][T30034]  ? __pfx___mutex_lock+0x10/0x10
[ 2019.059840][T30034]  ? __pfx_vfs_read+0x10/0x10
[ 2019.059865][T30034]  ? __fget_files+0x20e/0x3c0
[ 2019.059891][T30034]  ksys_read+0x12a/0x250
[ 2019.059909][T30034]  ? __pfx_ksys_read+0x10/0x10
[ 2019.059935][T30034]  do_syscall_64+0xcd/0x4e0
[ 2019.059959][T30034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2019.059978][T30034] RIP: 0033:0x7f355ff8d8dc
[ 2019.059993][T30034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2019.060010][T30034] RSP: 002b:00007f3560d52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2019.060027][T30034] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8d8dc
[ 2019.060039][T30034] RDX: 000000000000000f RSI: 00007f3560d520a0 RDI: 0000000000000005
[ 2019.060050][T30034] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 2019.060060][T30034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2019.060070][T30034] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 2019.060095][T30034]  </TASK>
[ 2019.078422][T30050] trusted_key: encrypted_key: insufficient parameters specified
[ 2019.080504][T30050] trusted_key: encrypted_key: insufficient parameters specified
[ 2019.239280][T22580] usb 5-1: USB disconnect, device number 48
[ 2019.521352][T22580] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 2019.586959][T30060] binder: BINDER_SET_CONTEXT_MGR already set
[ 2019.592821][   T30] audit: type=1400 audit(1759639762.013:4460): avc:  denied  { execute } for  pid=30058 comm="syz.0.6746" path="/selinux/access" dev="selinuxfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[ 2019.785511][T30060] binder: 30057:30060 ioctl 4018620d 200000000040 returned -16
[ 2019.833657][T30068] FAULT_INJECTION: forcing a failure.
[ 2019.833657][T30068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2019.873667][T30068] CPU: 1 UID: 0 PID: 30068 Comm: syz.0.6747 Not tainted syzkaller #0 PREEMPT(full) 
[ 2019.873693][T30068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2019.873704][T30068] Call Trace:
[ 2019.873712][T30068]  <TASK>
[ 2019.873719][T30068]  dump_stack_lvl+0x16c/0x1f0
[ 2019.873746][T30068]  should_fail_ex+0x512/0x640
[ 2019.873772][T30068]  _copy_from_user+0x2e/0xd0
[ 2019.873795][T30068]  copy_msghdr_from_user+0x98/0x160
[ 2019.873819][T30068]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2019.873854][T30068]  ___sys_sendmsg+0xfe/0x1d0
[ 2019.873876][T30068]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2019.873928][T30068]  __sys_sendmsg+0x16d/0x220
[ 2019.873952][T30068]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2019.873989][T30068]  do_syscall_64+0xcd/0x4e0
[ 2019.874015][T30068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2019.874034][T30068] RIP: 0033:0x7f3a4d38eec9
[ 2019.874050][T30068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2019.874067][T30068] RSP: 002b:00007f3a4e20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2019.874085][T30068] RAX: ffffffffffffffda RBX: 00007f3a4d5e5fa0 RCX: 00007f3a4d38eec9
[ 2019.874098][T30068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2019.874109][T30068] RBP: 00007f3a4e20f090 R08: 0000000000000000 R09: 0000000000000000
[ 2019.874120][T30068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2019.874130][T30068] R13: 00007f3a4d5e6038 R14: 00007f3a4d5e5fa0 R15: 00007ffc0db62e88
[ 2019.874154][T30068]  </TASK>
[ 2020.164200][T30072] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 2020.861292][T30084] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 2020.872886][T30084] overlayfs: missing 'lowerdir'
[ 2020.903777][   T30] audit: type=1400 audit(1759639763.313:4461): avc:  denied  { getopt } for  pid=30081 comm="syz.2.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2021.249367][T30089] input: syz1 as /devices/virtual/input/input63
[ 2021.834957][T12559] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2022.455479][   T30] audit: type=1400 audit(1759639764.033:4462): avc:  denied  { name_bind } for  pid=30093 comm="syz.0.6754" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 2022.755994][T12559] usb 1-1: Using ep0 maxpacket: 8
[ 2022.771309][T12559] usb 1-1: config index 0 descriptor too short (expected 12315, got 27)
[ 2022.780371][T12559] usb 1-1: config 55 has too many interfaces: 49, using maximum allowed: 32
[ 2022.792600][T12559] usb 1-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config
[ 2022.832415][T12559] usb 1-1: config 55 has 0 interfaces, different from the descriptor's value: 49
[ 2022.861515][T12559] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2023.076725][T12559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2023.388290][T12559] usb 1-1: string descriptor 0 read error: -71
[ 2023.478190][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6758'.
[ 2023.856206][T12559] usb 1-1: USB disconnect, device number 87
[ 2024.264960][ T5942] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 2024.415074][ T5942] usb 5-1: Using ep0 maxpacket: 8
[ 2024.439974][ T5942] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 2024.461059][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2024.499941][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2024.572666][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2024.630637][ T5942] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 2024.640360][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2024.648790][ T5942] usb 5-1: Product: syz
[ 2024.653104][ T5942] usb 5-1: Manufacturer: syz
[ 2024.665023][ T5942] usb 5-1: SerialNumber: syz
[ 2024.681673][ T5942] usb 5-1: config 0 descriptor??
[ 2024.693041][T30118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2025.065322][ T5942] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[ 2025.092564][ T5942] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input64
[ 2025.135857][    C1] powermate: config urb returned -71
[ 2025.141328][    C1] powermate: config urb returned -71
[ 2025.146835][    C1] powermate: config urb returned -71
[ 2025.152219][    C1] powermate: config urb returned -71
[ 2025.185333][ T5942] usb 5-1: USB disconnect, device number 49
[ 2025.185385][    C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 2025.503458][T27963] libceph: connect (1)[c::]:6789 error -101
[ 2025.509691][T27963] libceph: mon0 (1)[c::]:6789 connect error
[ 2025.874524][T27963] libceph: connect (1)[c::]:6789 error -101
[ 2025.902658][T30151] 9pnet: Could not find request transport: fd0xffffffffffffffff
[ 2025.910645][T27963] libceph: mon0 (1)[c::]:6789 connect error
[ 2026.066733][T30138] ceph: No mds server is up or the cluster is laggy
[ 2026.154876][T27963] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[ 2026.176144][T30161] FAULT_INJECTION: forcing a failure.
[ 2026.176144][T30161] name failslab, interval 1, probability 0, space 0, times 0
[ 2026.212166][T30161] CPU: 1 UID: 0 PID: 30161 Comm: syz.4.6774 Not tainted syzkaller #0 PREEMPT(full) 
[ 2026.212186][T30161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2026.212196][T30161] Call Trace:
[ 2026.212200][T30161]  <TASK>
[ 2026.212205][T30161]  dump_stack_lvl+0x16c/0x1f0
[ 2026.212224][T30161]  should_fail_ex+0x512/0x640
[ 2026.212238][T30161]  ? fs_reclaim_acquire+0xae/0x150
[ 2026.212253][T30161]  should_failslab+0xc2/0x120
[ 2026.212268][T30161]  __kmalloc_noprof+0xdd/0x880
[ 2026.212285][T30161]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 2026.212302][T30161]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 2026.212315][T30161]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 2026.212330][T30161]  ? tomoyo_profile+0x47/0x60
[ 2026.212346][T30161]  tomoyo_path_number_perm+0x245/0x580
[ 2026.212357][T30161]  ? tomoyo_path_number_perm+0x237/0x580
[ 2026.212373][T30161]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2026.212392][T30161]  ? find_held_lock+0x2b/0x80
[ 2026.212440][T30161]  ? find_held_lock+0x2b/0x80
[ 2026.212464][T30161]  ? hook_file_ioctl_common+0x145/0x410
[ 2026.212495][T30161]  ? __fget_files+0x20e/0x3c0
[ 2026.212521][T30161]  security_file_ioctl+0x9b/0x240
[ 2026.212543][T30161]  __x64_sys_ioctl+0xb7/0x210
[ 2026.212572][T30161]  do_syscall_64+0xcd/0x4e0
[ 2026.212598][T30161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2026.212616][T30161] RIP: 0033:0x7f355ff8eec9
[ 2026.212636][T30161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2026.212654][T30161] RSP: 002b:00007f3560d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2026.212671][T30161] RAX: ffffffffffffffda RBX: 00007f35601e5fa0 RCX: 00007f355ff8eec9
[ 2026.212683][T30161] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 2026.212693][T30161] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 0000000000000000
[ 2026.212704][T30161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2026.212714][T30161] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 2026.212740][T30161]  </TASK>
[ 2026.417716][T30161] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2026.507402][T27963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2026.517590][T27963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2026.529252][T27963] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2026.538514][T27963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2026.547508][T27963] usb 4-1: Product: syz
[ 2026.551704][T27963] usb 4-1: Manufacturer: syz
[ 2026.556413][T27963] usb 4-1: SerialNumber: syz
[ 2026.969611][T27963] usb 4-1: 0:2 : does not exist
[ 2027.276483][   T30] audit: type=1400 audit(1759639769.693:4463): avc:  denied  { name_bind } for  pid=30169 comm="syz.0.6777" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 2027.398901][T30157] binder: BINDER_SET_CONTEXT_MGR already set
[ 2027.405076][T30157] binder: 30156:30157 ioctl 4018620d 200000004a80 returned -16
[ 2028.560850][T30199] netlink: 'syz.1.6784': attribute type 39 has an invalid length.
[ 2028.566879][   T30] audit: type=1400 audit(1759639770.993:4464): avc:  denied  { read } for  pid=30201 comm="syz.0.6786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2028.885207][T27963] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2028.896849][T30209] tc_dump_action: action bad kind
[ 2028.959921][T22580] usb 4-1: USB disconnect, device number 59
[ 2029.034914][T27963] usb 1-1: Using ep0 maxpacket: 8
[ 2029.042230][T27963] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2029.060392][T27963] usb 1-1: too many configurations: 95, using maximum allowed: 8
[ 2029.072397][T27963] usb 1-1: config index 0 descriptor too short (expected 259, got 63)
[ 2029.081127][T27963] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[ 2029.090513][T27963] usb 1-1: can't read configurations, error -22
[ 2029.101690][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'.
[ 2029.142695][T30213] sp0: Synchronizing with TNC
[ 2029.183196][T30213] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6789'.
[ 2029.224916][T27963] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 2029.374960][T27963] usb 1-1: Using ep0 maxpacket: 8
[ 2029.387807][T27963] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2029.396521][T27963] usb 1-1: too many configurations: 95, using maximum allowed: 8
[ 2029.407985][T27963] usb 1-1: config index 0 descriptor too short (expected 259, got 63)
[ 2029.423394][T27963] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[ 2029.432527][T27963] usb 1-1: can't read configurations, error -22
[ 2029.435066][T30222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6792'.
[ 2029.440055][T27963] usb usb1-port1: attempt power cycle
[ 2029.795413][T27963] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2029.819181][T27963] usb 1-1: Using ep0 maxpacket: 8
[ 2029.854742][T27963] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2029.885451][T27963] usb 1-1: too many configurations: 95, using maximum allowed: 8
[ 2029.975216][T27963] usb 1-1: config index 0 descriptor too short (expected 259, got 63)
[ 2030.093362][T27963] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[ 2030.132007][T27963] usb 1-1: can't read configurations, error -22
[ 2030.210139][T30230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6795'.
[ 2030.334963][T27963] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 2030.383276][T27963] usb 1-1: Using ep0 maxpacket: 8
[ 2030.420372][T27963] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2030.429252][T27963] usb 1-1: too many configurations: 95, using maximum allowed: 8
[ 2030.448511][T27963] usb 1-1: config index 0 descriptor too short (expected 259, got 63)
[ 2030.450416][T30237] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 2030.458308][T27963] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[ 2030.480027][   T30] audit: type=1400 audit(1759639772.913:4465): avc:  denied  { accept } for  pid=30236 comm="syz.2.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 2030.480379][T27963] usb 1-1: can't read configurations, error -22
[ 2030.508854][T27963] usb usb1-port1: unable to enumerate USB device
[ 2030.635354][T16621] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2030.652233][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'.
[ 2030.668830][T30243] kvm: Disabled LAPIC found during irq injection
[ 2030.808274][T16621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2030.819839][T16621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2030.830278][T16621] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2030.854953][T16621] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2030.865382][T16621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2030.878848][T16621] usb 5-1: config 0 descriptor??
[ 2031.147015][T12559] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2031.305207][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.316091][T12559] usb 4-1: Using ep0 maxpacket: 8
[ 2031.322577][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.331166][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.338774][T12559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2031.350288][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.357941][T12559] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[ 2031.368440][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.376165][T12559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2031.385336][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.394047][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.403249][T12559] usb 4-1: config 0 descriptor??
[ 2031.422793][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.444472][T16621] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0
[ 2031.505746][T16621] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2031.550468][T30235] FAULT_INJECTION: forcing a failure.
[ 2031.550468][T30235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2031.552278][T30235] 
[ 2031.552287][T30235] ======================================================
[ 2031.552293][T30235] WARNING: possible circular locking dependency detected
[ 2031.552299][T30235] syzkaller #0 Not tainted
[ 2031.552307][T30235] ------------------------------------------------------
[ 2031.552314][T30235] syz.4.6796/30235 is trying to acquire lock:
[ 2031.552323][T30235] ffffffff8e0cf5c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[ 2031.552370][T30235] 
[ 2031.552370][T30235] but task is already holding lock:
[ 2031.552375][T30235] ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 2031.552414][T30235] 
[ 2031.552414][T30235] which lock already depends on the new lock.
[ 2031.552414][T30235] 
[ 2031.552419][T30235] 
[ 2031.552419][T30235] the existing dependency chain (in reverse order) is:
[ 2031.552424][T30235] 
[ 2031.552424][T30235] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 2031.552444][T30235]        _raw_spin_lock_nested+0x31/0x40
[ 2031.552462][T30235]        raw_spin_rq_lock_nested+0x29/0x130
[ 2031.552484][T30235]        task_rq_lock+0xcf/0x490
[ 2031.552504][T30235]        cgroup_move_task+0x81/0x2a0
[ 2031.552528][T30235]        css_set_move_task+0x288/0x5f0
[ 2031.552553][T30235]        cgroup_post_fork+0x201/0x9d0
[ 2031.552575][T30235]        copy_process+0x602d/0x76a0
[ 2031.552599][T30235]        kernel_clone+0xfc/0x930
[ 2031.552621][T30235]        user_mode_thread+0xc8/0x110
[ 2031.552644][T30235]        rest_init+0x23/0x2b0
[ 2031.552667][T30235]        start_kernel+0x3f3/0x4e0
[ 2031.552682][T30235]        x86_64_start_reservations+0x18/0x30
[ 2031.552698][T30235]        x86_64_start_kernel+0x130/0x190
[ 2031.552713][T30235]        common_startup_64+0x13e/0x148
[ 2031.552733][T30235] 
[ 2031.552733][T30235] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 2031.552753][T30235]        _raw_spin_lock_irqsave+0x3a/0x60
[ 2031.552770][T30235]        try_to_wake_up+0xb7/0x1870
[ 2031.552790][T30235]        __wake_up_common+0x132/0x1f0
[ 2031.552806][T30235]        __wake_up+0x31/0x60
[ 2031.552830][T30235]        tty_port_default_wakeup+0x2a/0x40
[ 2031.552851][T30235]        serial8250_tx_chars+0x68e/0x860
[ 2031.552871][T30235]        serial8250_handle_irq+0x761/0xcb0
[ 2031.552892][T30235]        serial8250_default_handle_irq+0x9a/0x250
[ 2031.552914][T30235]        serial8250_interrupt+0xf5/0x1b0
[ 2031.552935][T30235]        __handle_irq_event_percpu+0x233/0x920
[ 2031.552957][T30235]        handle_irq_event+0xab/0x1e0
[ 2031.552979][T30235]        handle_edge_irq+0x3ca/0x9e0
[ 2031.553000][T30235]        __common_interrupt+0xcd/0x2f0
[ 2031.553022][T30235]        common_interrupt+0xba/0xe0
[ 2031.553045][T30235]        asm_common_interrupt+0x26/0x40
[ 2031.553061][T30235]        pv_native_safe_halt+0xf/0x20
[ 2031.553077][T30235]        default_idle+0x13/0x20
[ 2031.553096][T30235]        default_idle_call+0x6c/0xb0
[ 2031.553117][T30235]        do_idle+0x38d/0x500
[ 2031.553138][T30235]        cpu_startup_entry+0x4f/0x60
[ 2031.553159][T30235]        start_secondary+0x21d/0x2b0
[ 2031.553173][T30235]        common_startup_64+0x13e/0x148
[ 2031.553192][T30235] 
[ 2031.553192][T30235] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[ 2031.553213][T30235]        _raw_spin_lock_irqsave+0x3a/0x60
[ 2031.553229][T30235]        __wake_up+0x1c/0x60
[ 2031.553251][T30235]        tty_port_default_wakeup+0x2a/0x40
[ 2031.553271][T30235]        serial8250_tx_chars+0x68e/0x860
[ 2031.553292][T30235]        serial8250_handle_irq+0x761/0xcb0
[ 2031.553314][T30235]        serial8250_default_handle_irq+0x9a/0x250
[ 2031.553337][T30235]        serial8250_interrupt+0xf5/0x1b0
[ 2031.553360][T30235]        __handle_irq_event_percpu+0x233/0x920
[ 2031.553382][T30235]        handle_irq_event+0xab/0x1e0
[ 2031.553403][T30235]        handle_edge_irq+0x3ca/0x9e0
[ 2031.553423][T30235]        __common_interrupt+0xcd/0x2f0
[ 2031.553446][T30235]        common_interrupt+0xba/0xe0
[ 2031.553469][T30235]        asm_common_interrupt+0x26/0x40
[ 2031.553484][T30235]        pv_native_safe_halt+0xf/0x20
[ 2031.553500][T30235]        default_idle+0x13/0x20
[ 2031.553520][T30235]        default_idle_call+0x6c/0xb0
[ 2031.553541][T30235]        do_idle+0x38d/0x500
[ 2031.553569][T30235]        cpu_startup_entry+0x4f/0x60
[ 2031.553591][T30235]        start_secondary+0x21d/0x2b0
[ 2031.553604][T30235]        common_startup_64+0x13e/0x148
[ 2031.553623][T30235] 
[ 2031.553623][T30235] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 2031.553643][T30235]        _raw_spin_lock_irqsave+0x3a/0x60
[ 2031.553659][T30235]        serial8250_console_write+0x181/0x1890
[ 2031.553682][T30235]        console_flush_all+0x801/0xc60
[ 2031.553704][T30235]        console_unlock+0xd8/0x210
[ 2031.553724][T30235]        vprintk_emit+0x3d7/0x680
[ 2031.553746][T30235]        _printk+0xc7/0x100
[ 2031.553762][T30235]        register_console+0xc2d/0x11b0
[ 2031.553785][T30235]        univ8250_console_init+0x5f/0x90
[ 2031.553803][T30235]        console_init+0x14f/0x680
[ 2031.553819][T30235]        start_kernel+0x29f/0x4e0
[ 2031.553832][T30235]        x86_64_start_reservations+0x18/0x30
[ 2031.553849][T30235]        x86_64_start_kernel+0x130/0x190
[ 2031.553863][T30235]        common_startup_64+0x13e/0x148
[ 2031.553882][T30235] 
[ 2031.553882][T30235] -> #0 (console_owner){-.-.}-{0:0}:
[ 2031.553901][T30235]        __lock_acquire+0x12a6/0x1ce0
[ 2031.553918][T30235]        lock_acquire+0x179/0x350
[ 2031.553933][T30235]        console_lock_spinning_enable+0x72/0x80
[ 2031.553954][T30235]        console_flush_all+0x7aa/0xc60
[ 2031.553976][T30235]        console_unlock+0xd8/0x210
[ 2031.553996][T30235]        vprintk_emit+0x3d7/0x680
[ 2031.554018][T30235]        _printk+0xc7/0x100
[ 2031.554034][T30235]        should_fail_ex+0x4e7/0x640
[ 2031.554053][T30235]        strncpy_from_user+0x3b/0x2e0
[ 2031.554069][T30235]        strncpy_from_user_nofault+0x7f/0x180
[ 2031.554086][T30235]        bpf_bprintf_prepare+0xe90/0x13f0
[ 2031.554105][T30235]        bpf_trace_printk+0xda/0x190
[ 2031.554124][T30235]        bpf_prog_930ede9872f2967c+0x3e/0x44
[ 2031.554137][T30235]        bpf_trace_run2+0x236/0x590
[ 2031.554156][T30235]        __bpf_trace_contention_begin+0xc9/0x110
[ 2031.554173][T30235]        trace_contention_begin.constprop.0+0xde/0x160
[ 2031.554194][T30235]        __pv_queued_spin_lock_slowpath+0x109/0xcf0
[ 2031.554214][T30235]        do_raw_spin_lock+0x20e/0x2b0
[ 2031.554232][T30235]        raw_spin_rq_lock_nested+0x7e/0x130
[ 2031.554253][T30235]        __schedule+0x307/0x5de0
[ 2031.554267][T30235]        preempt_schedule_irq+0x51/0x90
[ 2031.554284][T30235]        irqentry_exit+0x36/0x90
[ 2031.554300][T30235]        asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2031.554315][T30235]        exit_to_user_mode_loop+0x64/0x130
[ 2031.554334][T30235]        do_syscall_64+0x419/0x4e0
[ 2031.554351][T30235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2031.554365][T30235] 
[ 2031.554365][T30235] other info that might help us debug this:
[ 2031.554365][T30235] 
[ 2031.554369][T30235] Chain exists of:
[ 2031.554369][T30235]   console_owner --> &p->pi_lock --> &rq->__lock
[ 2031.554369][T30235] 
[ 2031.554391][T30235]  Possible unsafe locking scenario:
[ 2031.554391][T30235] 
[ 2031.554395][T30235]        CPU0                    CPU1
[ 2031.554400][T30235]        ----                    ----
[ 2031.554404][T30235]   lock(&rq->__lock);
[ 2031.554413][T30235]                                lock(&p->pi_lock);
[ 2031.554423][T30235]                                lock(&rq->__lock);
[ 2031.554433][T30235]   lock(console_owner);
[ 2031.554444][T30235] 
[ 2031.554444][T30235]  *** DEADLOCK ***
[ 2031.554444][T30235] 
[ 2031.554448][T30235] 4 locks held by syz.4.6796/30235:
[ 2031.554457][T30235]  #0: ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 2031.554497][T30235]  #1: ffffffff8e1c23a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590
[ 2031.554536][T30235]  #2: ffffffff8e1afa00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100
[ 2031.554578][T30235]  #3: ffffffff8e1afa70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60
[ 2031.554619][T30235] 
[ 2031.554619][T30235] stack backtrace:
[ 2031.554627][T30235] CPU: 0 UID: 0 PID: 30235 Comm: syz.4.6796 Not tainted syzkaller #0 PREEMPT(full) 
[ 2031.554648][T30235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2031.554658][T30235] Call Trace:
[ 2031.554664][T30235]  <TASK>
[ 2031.554671][T30235]  dump_stack_lvl+0x116/0x1f0
[ 2031.554693][T30235]  print_circular_bug+0x275/0x350
[ 2031.554711][T30235]  check_noncircular+0x14c/0x170
[ 2031.554732][T30235]  __lock_acquire+0x12a6/0x1ce0
[ 2031.554754][T30235]  lock_acquire+0x179/0x350
[ 2031.554771][T30235]  ? console_lock_spinning_enable+0x61/0x80
[ 2031.554793][T30235]  ? console_lock_spinning_enable+0x4a/0x80
[ 2031.554817][T30235]  console_lock_spinning_enable+0x72/0x80
[ 2031.554838][T30235]  ? console_lock_spinning_enable+0x61/0x80
[ 2031.554858][T30235]  console_flush_all+0x7aa/0xc60
[ 2031.554884][T30235]  ? __pfx_console_flush_all+0x10/0x10
[ 2031.554911][T30235]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 2031.554937][T30235]  console_unlock+0xd8/0x210
[ 2031.554959][T30235]  ? __pfx_console_unlock+0x10/0x10
[ 2031.554981][T30235]  ? do_raw_spin_unlock+0x140/0x230
[ 2031.555003][T30235]  ? _printk+0xc7/0x100
[ 2031.555021][T30235]  ? __down_trylock_console_sem+0xb0/0x140
[ 2031.555043][T30235]  vprintk_emit+0x3d7/0x680
[ 2031.555067][T30235]  ? __pfx_vprintk_emit+0x10/0x10
[ 2031.555094][T30235]  _printk+0xc7/0x100
[ 2031.555111][T30235]  ? __pfx__printk+0x10/0x10
[ 2031.555130][T30235]  ? rb_read_data_buffer.constprop.0+0x18c/0x430
[ 2031.555150][T30235]  ? __pfx____ratelimit+0x10/0x10
[ 2031.555172][T30235]  should_fail_ex+0x4e7/0x640
[ 2031.555192][T30235]  ? __pfx_check_buffer+0x10/0x10
[ 2031.555211][T30235]  strncpy_from_user+0x3b/0x2e0
[ 2031.555230][T30235]  strncpy_from_user_nofault+0x7f/0x180
[ 2031.555248][T30235]  bpf_bprintf_prepare+0xe90/0x13f0
[ 2031.555270][T30235]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 2031.555294][T30235]  ? bpf_trace_run2+0x3e1/0x590
[ 2031.555314][T30235]  bpf_trace_printk+0xda/0x190
[ 2031.555334][T30235]  ? __pfx_bpf_trace_printk+0x10/0x10
[ 2031.555356][T30235]  ? bpf_trace_run2+0x3e1/0x590
[ 2031.555381][T30235]  bpf_prog_930ede9872f2967c+0x3e/0x44
[ 2031.555395][T30235]  bpf_trace_run2+0x236/0x590
[ 2031.555417][T30235]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 2031.555439][T30235]  ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260
[ 2031.555463][T30235]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[ 2031.555489][T30235]  __bpf_trace_contention_begin+0xc9/0x110
[ 2031.555507][T30235]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[ 2031.555529][T30235]  ? _parse_integer_limit+0x17f/0x1d0
[ 2031.555564][T30235]  trace_contention_begin.constprop.0+0xde/0x160
[ 2031.555587][T30235]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[ 2031.555610][T30235]  ? __lock_acquire+0xb97/0x1ce0
[ 2031.555628][T30235]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 2031.555649][T30235]  ? __lock_acquire+0x62e/0x1ce0
[ 2031.555670][T30235]  do_raw_spin_lock+0x20e/0x2b0
[ 2031.555690][T30235]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2031.555709][T30235]  ? rcu_qs+0x2b/0xe0
[ 2031.555730][T30235]  ? rcu_note_context_switch+0x192/0x1e00
[ 2031.555754][T30235]  raw_spin_rq_lock_nested+0x7e/0x130
[ 2031.555776][T30235]  ? preempt_schedule_irq+0x51/0x90
[ 2031.555793][T30235]  __schedule+0x307/0x5de0
[ 2031.555809][T30235]  ? get_pid_task+0x106/0x250
[ 2031.555827][T30235]  ? proc_fail_nth_write+0x9f/0x220
[ 2031.555847][T30235]  ? find_held_lock+0x2b/0x80
[ 2031.555871][T30235]  ? find_held_lock+0x2b/0x80
[ 2031.555893][T30235]  ? __pfx___schedule+0x10/0x10
[ 2031.555913][T30235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2031.555938][T30235]  preempt_schedule_irq+0x51/0x90
[ 2031.555956][T30235]  irqentry_exit+0x36/0x90
[ 2031.555975][T30235]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2031.555992][T30235] RIP: 0010:exit_to_user_mode_loop+0x64/0x130
[ 2031.556012][T30235] Code: 85 92 00 00 00 e8 7c 66 a9 09 65 48 8b 05 8c 43 d6 11 48 8b 18 f7 c3 37 03 00 00 0f 84 80 00 00 00 e8 40 ba 1e 00 fb f6 c3 30 <74> be e8 65 80 aa 09 f6 c7 01 74 b9 4c 89 e7 e8 b8 e4 4c 00 f6 c3
[ 2031.556029][T30235] RSP: 0018:ffffc9000c4e7f08 EFLAGS: 00000202
[ 2031.556042][T30235] RAX: 0000000000000f59 RBX: 0000000000000010 RCX: ffffffff81c305df
[ 2031.556054][T30235] RDX: 0000000000000000 RSI: ffffffff8d826483 RDI: ffffffff8bd045c0
[ 2031.556065][T30235] RBP: ffff8880247c0000 R08: 0000000000000001 R09: 0000000000000001
[ 2031.556076][T30235] R10: ffffffff905f9797 R11: 0000000000000000 R12: ffffc9000c4e7f58
[ 2031.556087][T30235] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 2031.556101][T30235]  ? trace_irq_enable.constprop.0+0x2f/0x120
[ 2031.556128][T30235]  ? exit_to_user_mode_loop+0x60/0x130
[ 2031.556148][T30235]  do_syscall_64+0x419/0x4e0
[ 2031.556169][T30235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2031.556185][T30235] RIP: 0033:0x7f355ff8d97f
[ 2031.556197][T30235] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 2031.556213][T30235] RSP: 002b:00007f3560d52030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2031.556228][T30235] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00007f355ff8d97f
[ 2031.556239][T30235] RDX: 0000000000000001 RSI: 00007f3560d52090 RDI: 0000000000000005
[ 2031.556249][T30235] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 00007f3560d51df7
[ 2031.556260][T30235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2031.556271][T30235] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 2031.556286][T30235]  </TASK>
[ 2032.836669][T30235] CPU: 0 UID: 0 PID: 30235 Comm: syz.4.6796 Not tainted syzkaller #0 PREEMPT(full) 
[ 2032.836690][T30235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2032.836699][T30235] Call Trace:
[ 2032.836704][T30235]  <TASK>
[ 2032.836710][T30235]  dump_stack_lvl+0x116/0x1f0
[ 2032.836732][T30235]  should_fail_ex+0x512/0x640
[ 2032.836749][T30235]  ? __pfx_check_buffer+0x10/0x10
[ 2032.836765][T30235]  strncpy_from_user+0x3b/0x2e0
[ 2032.836781][T30235]  strncpy_from_user_nofault+0x7f/0x180
[ 2032.836798][T30235]  bpf_bprintf_prepare+0xe90/0x13f0
[ 2032.836817][T30235]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 2032.836836][T30235]  ? bpf_trace_run2+0x3e1/0x590
[ 2032.836854][T30235]  bpf_trace_printk+0xda/0x190
[ 2032.836870][T30235]  ? __pfx_bpf_trace_printk+0x10/0x10
[ 2032.836889][T30235]  ? bpf_trace_run2+0x3e1/0x590
[ 2032.836909][T30235]  bpf_prog_930ede9872f2967c+0x3e/0x44
[ 2032.836921][T30235]  bpf_trace_run2+0x236/0x590
[ 2032.836939][T30235]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 2032.836957][T30235]  ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260
[ 2032.836976][T30235]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[ 2032.836998][T30235]  __bpf_trace_contention_begin+0xc9/0x110
[ 2032.837015][T30235]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[ 2032.837032][T30235]  ? _parse_integer_limit+0x17f/0x1d0
[ 2032.837056][T30235]  trace_contention_begin.constprop.0+0xde/0x160
[ 2032.837075][T30235]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[ 2032.837095][T30235]  ? __lock_acquire+0xb97/0x1ce0
[ 2032.837109][T30235]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 2032.837128][T30235]  ? __lock_acquire+0x62e/0x1ce0
[ 2032.837145][T30235]  do_raw_spin_lock+0x20e/0x2b0
[ 2032.837162][T30235]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2032.837179][T30235]  ? rcu_qs+0x2b/0xe0
[ 2032.837198][T30235]  ? rcu_note_context_switch+0x192/0x1e00
[ 2032.837224][T30235]  raw_spin_rq_lock_nested+0x7e/0x130
[ 2032.837246][T30235]  ? preempt_schedule_irq+0x51/0x90
[ 2032.837262][T30235]  __schedule+0x307/0x5de0
[ 2032.837276][T30235]  ? get_pid_task+0x106/0x250
[ 2032.837290][T30235]  ? proc_fail_nth_write+0x9f/0x220
[ 2032.837309][T30235]  ? find_held_lock+0x2b/0x80
[ 2032.837330][T30235]  ? find_held_lock+0x2b/0x80
[ 2032.837349][T30235]  ? __pfx___schedule+0x10/0x10
[ 2032.837366][T30235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2032.837386][T30235]  preempt_schedule_irq+0x51/0x90
[ 2032.837401][T30235]  irqentry_exit+0x36/0x90
[ 2032.837418][T30235]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2032.837433][T30235] RIP: 0010:exit_to_user_mode_loop+0x64/0x130
[ 2032.837453][T30235] Code: 85 92 00 00 00 e8 7c 66 a9 09 65 48 8b 05 8c 43 d6 11 48 8b 18 f7 c3 37 03 00 00 0f 84 80 00 00 00 e8 40 ba 1e 00 fb f6 c3 30 <74> be e8 65 80 aa 09 f6 c7 01 74 b9 4c 89 e7 e8 b8 e4 4c 00 f6 c3
[ 2032.837467][T30235] RSP: 0018:ffffc9000c4e7f08 EFLAGS: 00000202
[ 2032.837480][T30235] RAX: 0000000000000f59 RBX: 0000000000000010 RCX: ffffffff81c305df
[ 2032.837489][T30235] RDX: 0000000000000000 RSI: ffffffff8d826483 RDI: ffffffff8bd045c0
[ 2032.837499][T30235] RBP: ffff8880247c0000 R08: 0000000000000001 R09: 0000000000000001
[ 2032.837508][T30235] R10: ffffffff905f9797 R11: 0000000000000000 R12: ffffc9000c4e7f58
[ 2032.837517][T30235] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 2032.837527][T30235]  ? trace_irq_enable.constprop.0+0x2f/0x120
[ 2032.837550][T30235]  ? exit_to_user_mode_loop+0x60/0x130
[ 2032.837568][T30235]  do_syscall_64+0x419/0x4e0
[ 2032.837586][T30235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2032.837600][T30235] RIP: 0033:0x7f355ff8d97f
[ 2032.837611][T30235] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 2032.837624][T30235] RSP: 002b:00007f3560d52030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2032.837637][T30235] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00007f355ff8d97f
[ 2032.837645][T30235] RDX: 0000000000000001 RSI: 00007f3560d52090 RDI: 0000000000000005
[ 2032.837654][T30235] RBP: 00007f3560d52090 R08: 0000000000000000 R09: 00007f3560d51df7
[ 2032.837662][T30235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2032.837671][T30235] R13: 00007f35601e6038 R14: 00007f35601e5fa0 R15: 00007ffc35273dc8
[ 2032.837689][T30235]  </TASK>
[ 2033.549412][T12559] usbhid 4-1:0.0: can't add hid device: -71
[ 2033.555463][T12559] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2033.565255][T12559] usb 4-1: USB disconnect, device number 60
[ 2034.265630][T30235] usb 5-1: string descriptor 0 read error: -71
[ 2035.035752][T27963] usb 5-1: USB disconnect, device number 50
[ 2037.216615][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.222935][ T1295] ieee802154 phy1 wpan1: encryption failed: -22