last executing test programs:

18.435767876s ago: executing program 4 (id=3054):
creat(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSETD(r2, 0x8910, 0x0)

18.11961422s ago: executing program 4 (id=3057):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

17.860983388s ago: executing program 4 (id=3059):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x55, 0x2}, @cond})
syz_usb_connect$cdc_ecm(0x6, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x1, 0x1, 0x5, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "d539f9"}, {0x5, 0x24, 0x0, 0x75}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x20, 0x2, 0x1}, [@obex={0x5, 0x24, 0x15, 0x324}, @mdlm_detail={0x64, 0x24, 0x13, 0xe5, "1ae77e0e41af5b7a7f7a7f71539be4e2d56116cc3ddb2fd2e9c6a9adc34a80ec86335dd01193a298efe4f7472ff1d71ce58e3112d9a3f0790e88c88789337d9cc0008bbf23d15491ffbde40bfcdc594ca926dc7cc6eb3030035e6a73527d4fda"}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x80, [0xdc0e, 0x3]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3f, 0x20, 0x3f}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x80, 0x2, 0x7, 0x8, 0x8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0xea, &(0x7f0000000240)=@string={0xea, 0x3, "3696bd100fd3673594b08412d4b6c0ffd45932d06170fdba4506b107a7e3ffd037ce4d02e3d3061d0cdeef681ab39de6c4652729951f47707d16abb6dd2d43037c4cbaef1a8d9ede4d90a9a43f05ce5a961ed0faae3f0ccb363f0a28eb0789b773218a08fd6643b9296a3044c5ebc0422a9227dfb53908fae4d958a1232f7fc943939f0aa1bb004d730611615797bbfa7a6105238b0ab24e101db228375f2d8d292d2016036c1a5dc9a734a8f8c2b7540d8066328fc4de008f9fdc35c36d2adaba5f1cf2eb87aa4e6d23117d7f5a768bc5f644929bd6d3f3f8a4fad90729dc1ab52e18f0062900a6"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}, {0x84, &(0x7f00000003c0)=@string={0x84, 0x3, "1d0924e8a6e693ad3c8ea0878523143302b052405eb0fe78b9ea3cf15a9ac2dc3bf189516c21f57bc251088609b328a039da448d9de0060fef044d1a70545a13c7f7667e818b4c1dfdd8db261f8317925419250698b358c321373e08b532f84792592fa6a62368156c58c95692a62034549cbe820a0755ac4ea1e3ae6396765cd2c0"}}, {0xed, &(0x7f0000000480)=@string={0xed, 0x3, "086fe66a555a76c96c486bce33b9143ee32b11ad4c50177acded8582b5f37c9dd0dc78d16066398437d6c75feb82e019145d8af127970fb24cad9f7cd7ea9ad4399cb1780b33b4570e176764bef6eac79abbeadc16bcdc3c4e2a081c7a5cb3c235ecd3c159860604f6560e6e2c8578b612e074ac46d5164b9db776191397ecb0026e2d34bb4b9ee29f76ed7b742ceabc9acde6243c7b8337026fe47033c80a459f386c537d5e8a68c18277916f3cc61b838d48e922a86f602970a31dcfaad1b3cb307c71b685934eb701913b9c71fae048b7c98a51008826763807c69507c3e9ee803146126feac7a8cca5"}}]})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
syz_usb_connect(0x3, 0x7d2, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x9, 0xbe, 0x8e, 0x40, 0x19d2, 0xfff9, 0x216a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c0, 0x4, 0x7, 0x3, 0x80, 0xf8, [{{0x9, 0x4, 0xf3, 0x6, 0x8, 0xff, 0xff, 0xff, 0xdd, [@uac_control={{0xa, 0x24, 0x1, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x0, 0x6, 0x20, 0x1, 0x80, 0x20}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x3, 0x9, 0x3, 0x1, 0x6c}]}], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0x4, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0x4, 0x18, 0x3ff, 0x4, 0x4, 0xdc}}, {{0x9, 0x5, 0xb209a0259b6f559b, 0x3, 0x8, 0x0, 0x6f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x88, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x7e, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x5c10}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1, 0x15, 0x1, [@generic={0x45, 0x5, "daa859cbc2886fb9bc629b5e593c9aa6cc3f9f7403fb94cd93ac172b0e97be10308ca5750f2c3a812b14f3497a2cc5336123e1ae02fc726b334da65dc91ffa94b33553"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xc3, 0x2, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x401}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3f, 0x80, [@generic={0x2b, 0x31, "a14291c7e1c31ddef776534eec9c6fe00200adc665f67c8a606231fd7ff7b5ce863a0586114994c01d"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0xa1, 0x2, 0xd, 0xff, 0x4, 0x65, 0x1, [@generic={0x45, 0x1, "0862bf924b7bfb1dd5d9c16c7f810905e9e4170a0b2538ad705a5734d5a67b9684082b1873626865ffc8894016568bd2ae21afa4fae71189dd6d7d2b510e94bbaeb32d"}], [{{0x9, 0x5, 0x6, 0x4, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x6, 0x10, 0x1, 0xff, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xb0}]}}, {{0x9, 0x5, 0x6, 0x0, 0x189d7f82c56567f9, 0x1, 0xa6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x7, 0x1f, [@generic={0xb6, 0xb, "eb1614723fb82dd03c3277bf6f3460f9c429a6533fd654c173458c38d696f40dc8a4f29b426bbca318702efa5f2fcdf875b3f99e4fd061eb0a632e9faea16c5c8034e1d5eebbd72e64a486e11a883cda2cff1c14f33a2bc6ef753703a8e190cdaa93e89a45db8c2f3fd273df87d11fc5561d3611d17212dd7446737eed0a6ceadfa715a6b8564bc4f987d4b1b7dcb3525fc78fb8dfe15fbc6de9c5dda75093d6729e3957df9e84b0254de19ca298fa0afa2e6adb"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x47, 0x4, 0x6, [@generic={0xc6, 0x7, "d390817a22ac5b59f070f28a99c893ec80444ffda205b5c72688111a7c223d1aa75097d95c6a07a3294fb9572d4ecec7e6337df119bfe4bcc2b1b856030799f0ed1a2aed13be20fc68a42ba701053b4b3efda5ee69d415ecc2972a2ca1c97d0637d88e741c202d416e1e1bfa5f2bf5f417f7fc0506254a30401d4c8e67b28745a09407cc580be19dd30d16f2fa908e612915cc40656773dc48a6b0be7306470bb048d75dc39fdc2aea8fcba76c28a7e784f0ddf8871923e04c470c156e4296621a855a82"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0x81, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x89, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2ad5}, @generic={0x68, 0x22, "843c42f66e6542761201fd1bb4edb6d764bd17a938a76dc3878928c70d8e56464f13498b4db62da969b25d78235f167906e69cf31b5f11f576469bdb1719f98c4427548dee2c65f3756d1a347e3546558f8b469482c37817537701b904a6c6796155c94f5101"}]}}, {{0x9, 0x5, 0x3, 0x18, 0x200, 0xaf, 0x5, 0x81}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x20, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0xfc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x5}, @generic={0x32, 0x3, "2fabe646eb960ec3f2631b03a0c001f1891fe1d48577c110c87e8e893c7dc8a7af3697c28ec56d941e0b38ee3da93684"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xf49e}]}}, {{0x9, 0x5, 0xd, 0x10, 0xf4c779de65aed62e, 0xfc, 0x1, 0x7, [@generic={0xba, 0x0, "d3ab68e2bca736e2370a546058bad10671f9de8d466dc22ba948b896b2e423b6c161bd84ae588c118f0f6ebf7fecac15bbc34980d536b34d11f2436bb4c8feea1a398c72d56cb966f64739456002abda3a5a514a5a81e451888670a62c9241d7c6ff86f2013a6469c3b7d1310b375e1e3157bef5e42b26a71a8842d20c8ecd95fb8d638c618288c9b97879c2ec3f66a47845add6863225f60341679560a13be4fde7213c0204e6432b7b633a0e29e5724d3f00a4e5188e26"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0xd0, 0x17}}]}}, {{0x9, 0x4, 0xb7, 0x5, 0x5, 0x5e, 0xa3, 0x33, 0x7f, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "e3"}, {0x5, 0x24, 0x0, 0x9000}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0xfffa, 0x71}, {0x6, 0x24, 0x1a, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x454, 0x2, 0xffc0}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x1f, 0x17}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x2, 0x1f, [@generic={0xae, 0x23, "3a172ff7a53b399f43dbeaf64e567788d353cace6e2254d7f6eb202e5581a7c43e5142439289201aebf2eaebc31dc61f19c13171f4b100285a33f2ee1a7ad7d121f9e30be1f3dcba975f14b062460803334400c18e6ce32cfe6e2b73bdd165b0373162172088f0ac8a5918836aa61129575bd7bfe1710f62b25041ae548583e2466677b645e074b81471e63386445c9adde499b7f1a6800294bab03c7d76279756700afa0a04ade3d2bc7201"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x4, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}, @generic={0x10, 0xb, "bc37db99de78bdafc5efbd59f7b7"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x3, 0x1f, 0xf8}}]}}, {{0x9, 0x4, 0x4, 0x7, 0x5, 0xfb, 0xa5, 0x3, 0x9c, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x3, 0xaa, 0x4, 0xd9, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x2, 0x6, 0x6}]}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x27, 0x1, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x7, 0x3f, [@generic={0x61, 0x22, "02b9fd2f907af609276548a4c782dacbc9ada801e7622e595ff1bfe8d10898d4565899d40750b26572bd7bbda50fb3c229c360bea55792f779748dc66ab9403ee8a96c67ea62249f8fc8cb2833ad1b340ec52f253ffa7a385586d2e0e85bb2"}, @generic={0x91, 0x3, "ba7e2ce8d907405084a268d7bdfbf9a3e4f552e36e98f0e20026aa2756cef82fed67a9ab02a24cb8f7600717b39eaff1c05c8f84888a64b8735777f8896d4ec6b08b6bcb81e4de16921e04fdacd01a043690f088ad7ee7f33844ffd2bd48b1d43a9960cd8f1ed3c1def627df5d9b72b1de41ce316050d37b222b72466f370dca41ee9029fb4f5ed6958879cf1462bd"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0x6e, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0xdb, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5d}, @generic={0x3a, 0x2, "f5d40215eb2863f43edbf6d3f0366c89aba35c71e27d4503397c5792b9fe69b3b83a02f5aa1b9398a2e517fe71f89f598f51b8849d47d129"}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x310, 0x0, 0x40, 0x8, 0x10, 0xea}, 0x6d, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f6d00044210040b4f79f9e6d1db7b712139a2e294747297931990f69723e247e3deeb53b6acad3c4da15aac60479e07470b93dd1054ccc065bf0b100108790009030500170710020001060014100481a6f699951eb466d9649dc4cd310353d1"], 0x4, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x13, &(0x7f0000000f40)=@string={0x13, 0x3, "c4e00f061175613c2588c8a535865f1a87"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x2009}}]})
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006a0ff5206d0423083a4b0102030109021200010000000009040000000e"], 0x0)

14.331628508s ago: executing program 1 (id=3065):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0xffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r1, 0x10001, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

13.362723765s ago: executing program 4 (id=3067):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
fcntl$setsig(r1, 0xa, 0x21)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchmod(r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$uid(0x0, 0xffffffffffffffff)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (fail_nth: 2)

13.273464116s ago: executing program 1 (id=3068):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$addseals(r5, 0x409, 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0xa75521d4, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r6 = socket(0x10, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r7, 0x0, 0x0, 0x0)
r8 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x82)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

12.382751317s ago: executing program 1 (id=3069):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000009000000000001"], 0x0}, 0x90)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000340))
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080a1}, 0x404c885)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x3)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x8b)
read$msr(r5, &(0x7f0000000080)=""/53, 0x35)
socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r9, 0x0, 0x27)

11.372259214s ago: executing program 4 (id=3070):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
close(r1)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000100)={{0x0, 0xd6}, 'port0\x00', 0x8, 0x80820, 0xffffffff, 0x83, 0xd, 0x7fffffff, 0x6, 0x0, 0x6, 0x97})

10.200887395s ago: executing program 4 (id=3074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0)
ptrace$peekuser(0x3, 0x0, 0x3ff)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)
socket(0x0, 0x80805, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000019c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000182100000f1fedf6883cfe5ccd32e9db961b187a474f70e8761a575909546fc44bdb80468d69e7e0a2d857401cb83406e92d20888f121a71c909", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0)
r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000006c0), 0x12)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x120, 0x0, 0x2, 0x4, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1875}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8044}, 0x4)

9.805187048s ago: executing program 0 (id=3075):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x0, 0x0, 0xffff, 0x0, 0x7}}}}, 0x17)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
prlimit64(r4, 0x0, 0x0, &(0x7f0000000000))
tkill(0x0, 0x33)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
getdents(r5, 0x0, 0x18)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

8.572501743s ago: executing program 0 (id=3077):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setsig(0x4203, r1, 0x3, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f615", 0xa1)
connect(r2, &(0x7f0000000200)=@nl=@unspec, 0x80)
setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}, {&(0x7f00000003c0)="519752052311a5260200000000000200e6f5ac699cd77d1088ec6de7368c4358800540db051b40ed5fba851a35b2f753f2a227ab9858d9c3958b5511ac29371c6f0000", 0x43}, {&(0x7f0000000440)="7bbd7042b0104a0d3653857731d60f1e098a83a394b4703180cdccb591ac5af9b58bb4b7c12ad747794a7be1951cec572ae2d2ad5000d9058bb35c9eed4f2e1802214ef84e516f1db75053b02a660a0ebf36e7c077b3510c04fc00e0835bc3889908a831ccee1b1a0b348ed00949b93d3b227cf6", 0x74}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20040088)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)

8.103069299s ago: executing program 1 (id=3078):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x55, 0x2}, @cond})
syz_usb_connect$cdc_ecm(0x6, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x1, 0x1, 0x5, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "d539f9"}, {0x5, 0x24, 0x0, 0x75}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x20, 0x2, 0x1}, [@obex={0x5, 0x24, 0x15, 0x324}, @mdlm_detail={0x64, 0x24, 0x13, 0xe5, "1ae77e0e41af5b7a7f7a7f71539be4e2d56116cc3ddb2fd2e9c6a9adc34a80ec86335dd01193a298efe4f7472ff1d71ce58e3112d9a3f0790e88c88789337d9cc0008bbf23d15491ffbde40bfcdc594ca926dc7cc6eb3030035e6a73527d4fda"}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x80, [0xdc0e, 0x3]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3f, 0x20, 0x3f}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x80, 0x2, 0x7, 0x8, 0x8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0xea, &(0x7f0000000240)=@string={0xea, 0x3, "3696bd100fd3673594b08412d4b6c0ffd45932d06170fdba4506b107a7e3ffd037ce4d02e3d3061d0cdeef681ab39de6c4652729951f47707d16abb6dd2d43037c4cbaef1a8d9ede4d90a9a43f05ce5a961ed0faae3f0ccb363f0a28eb0789b773218a08fd6643b9296a3044c5ebc0422a9227dfb53908fae4d958a1232f7fc943939f0aa1bb004d730611615797bbfa7a6105238b0ab24e101db228375f2d8d292d2016036c1a5dc9a734a8f8c2b7540d8066328fc4de008f9fdc35c36d2adaba5f1cf2eb87aa4e6d23117d7f5a768bc5f644929bd6d3f3f8a4fad90729dc1ab52e18f0062900a6"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}, {0x84, &(0x7f00000003c0)=@string={0x84, 0x3, "1d0924e8a6e693ad3c8ea0878523143302b052405eb0fe78b9ea3cf15a9ac2dc3bf189516c21f57bc251088609b328a039da448d9de0060fef044d1a70545a13c7f7667e818b4c1dfdd8db261f8317925419250698b358c321373e08b532f84792592fa6a62368156c58c95692a62034549cbe820a0755ac4ea1e3ae6396765cd2c0"}}, {0xed, &(0x7f0000000480)=@string={0xed, 0x3, "086fe66a555a76c96c486bce33b9143ee32b11ad4c50177acded8582b5f37c9dd0dc78d16066398437d6c75feb82e019145d8af127970fb24cad9f7cd7ea9ad4399cb1780b33b4570e176764bef6eac79abbeadc16bcdc3c4e2a081c7a5cb3c235ecd3c159860604f6560e6e2c8578b612e074ac46d5164b9db776191397ecb0026e2d34bb4b9ee29f76ed7b742ceabc9acde6243c7b8337026fe47033c80a459f386c537d5e8a68c18277916f3cc61b838d48e922a86f602970a31dcfaad1b3cb307c71b685934eb701913b9c71fae048b7c98a51008826763807c69507c3e9ee803146126feac7a8cca5"}}]})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
syz_usb_connect(0x3, 0x7d2, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x9, 0xbe, 0x8e, 0x40, 0x19d2, 0xfff9, 0x216a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c0, 0x4, 0x7, 0x3, 0x80, 0xf8, [{{0x9, 0x4, 0xf3, 0x6, 0x8, 0xff, 0xff, 0xff, 0xdd, [@uac_control={{0xa, 0x24, 0x1, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x0, 0x6, 0x20, 0x1, 0x80, 0x20}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x3, 0x9, 0x3, 0x1, 0x6c}]}], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0x4, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0x4, 0x18, 0x3ff, 0x4, 0x4, 0xdc}}, {{0x9, 0x5, 0xb209a0259b6f559b, 0x3, 0x8, 0x0, 0x6f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x88, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x7e, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x5c10}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1, 0x15, 0x1, [@generic={0x45, 0x5, "daa859cbc2886fb9bc629b5e593c9aa6cc3f9f7403fb94cd93ac172b0e97be10308ca5750f2c3a812b14f3497a2cc5336123e1ae02fc726b334da65dc91ffa94b33553"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xc3, 0x2, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x401}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3f, 0x80, [@generic={0x2b, 0x31, "a14291c7e1c31ddef776534eec9c6fe00200adc665f67c8a606231fd7ff7b5ce863a0586114994c01d"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0xa1, 0x2, 0xd, 0xff, 0x4, 0x65, 0x1, [@generic={0x45, 0x1, "0862bf924b7bfb1dd5d9c16c7f810905e9e4170a0b2538ad705a5734d5a67b9684082b1873626865ffc8894016568bd2ae21afa4fae71189dd6d7d2b510e94bbaeb32d"}], [{{0x9, 0x5, 0x6, 0x4, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x6, 0x10, 0x1, 0xff, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xb0}]}}, {{0x9, 0x5, 0x6, 0x0, 0x189d7f82c56567f9, 0x1, 0xa6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x7, 0x1f, [@generic={0xb6, 0xb, "eb1614723fb82dd03c3277bf6f3460f9c429a6533fd654c173458c38d696f40dc8a4f29b426bbca318702efa5f2fcdf875b3f99e4fd061eb0a632e9faea16c5c8034e1d5eebbd72e64a486e11a883cda2cff1c14f33a2bc6ef753703a8e190cdaa93e89a45db8c2f3fd273df87d11fc5561d3611d17212dd7446737eed0a6ceadfa715a6b8564bc4f987d4b1b7dcb3525fc78fb8dfe15fbc6de9c5dda75093d6729e3957df9e84b0254de19ca298fa0afa2e6adb"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x47, 0x4, 0x6, [@generic={0xc6, 0x7, "d390817a22ac5b59f070f28a99c893ec80444ffda205b5c72688111a7c223d1aa75097d95c6a07a3294fb9572d4ecec7e6337df119bfe4bcc2b1b856030799f0ed1a2aed13be20fc68a42ba701053b4b3efda5ee69d415ecc2972a2ca1c97d0637d88e741c202d416e1e1bfa5f2bf5f417f7fc0506254a30401d4c8e67b28745a09407cc580be19dd30d16f2fa908e612915cc40656773dc48a6b0be7306470bb048d75dc39fdc2aea8fcba76c28a7e784f0ddf8871923e04c470c156e4296621a855a82"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0x81, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x89, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2ad5}, @generic={0x68, 0x22, "843c42f66e6542761201fd1bb4edb6d764bd17a938a76dc3878928c70d8e56464f13498b4db62da969b25d78235f167906e69cf31b5f11f576469bdb1719f98c4427548dee2c65f3756d1a347e3546558f8b469482c37817537701b904a6c6796155c94f5101"}]}}, {{0x9, 0x5, 0x3, 0x18, 0x200, 0xaf, 0x5, 0x81}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x20, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0xfc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x5}, @generic={0x32, 0x3, "2fabe646eb960ec3f2631b03a0c001f1891fe1d48577c110c87e8e893c7dc8a7af3697c28ec56d941e0b38ee3da93684"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xf49e}]}}, {{0x9, 0x5, 0xd, 0x10, 0xf4c779de65aed62e, 0xfc, 0x1, 0x7, [@generic={0xba, 0x0, "d3ab68e2bca736e2370a546058bad10671f9de8d466dc22ba948b896b2e423b6c161bd84ae588c118f0f6ebf7fecac15bbc34980d536b34d11f2436bb4c8feea1a398c72d56cb966f64739456002abda3a5a514a5a81e451888670a62c9241d7c6ff86f2013a6469c3b7d1310b375e1e3157bef5e42b26a71a8842d20c8ecd95fb8d638c618288c9b97879c2ec3f66a47845add6863225f60341679560a13be4fde7213c0204e6432b7b633a0e29e5724d3f00a4e5188e26"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0xd0, 0x17}}]}}, {{0x9, 0x4, 0xb7, 0x5, 0x5, 0x5e, 0xa3, 0x33, 0x7f, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "e3"}, {0x5, 0x24, 0x0, 0x9000}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0xfffa, 0x71}, {0x6, 0x24, 0x1a, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x454, 0x2, 0xffc0}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x1f, 0x17}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x2, 0x1f, [@generic={0xae, 0x23, "3a172ff7a53b399f43dbeaf64e567788d353cace6e2254d7f6eb202e5581a7c43e5142439289201aebf2eaebc31dc61f19c13171f4b100285a33f2ee1a7ad7d121f9e30be1f3dcba975f14b062460803334400c18e6ce32cfe6e2b73bdd165b0373162172088f0ac8a5918836aa61129575bd7bfe1710f62b25041ae548583e2466677b645e074b81471e63386445c9adde499b7f1a6800294bab03c7d76279756700afa0a04ade3d2bc7201"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x4, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}, @generic={0x10, 0xb, "bc37db99de78bdafc5efbd59f7b7"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x3, 0x1f, 0xf8}}]}}, {{0x9, 0x4, 0x4, 0x7, 0x5, 0xfb, 0xa5, 0x3, 0x9c, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x3, 0xaa, 0x4, 0xd9, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x2, 0x6, 0x6}]}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x27, 0x1, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x7, 0x3f, [@generic={0x61, 0x22, "02b9fd2f907af609276548a4c782dacbc9ada801e7622e595ff1bfe8d10898d4565899d40750b26572bd7bbda50fb3c229c360bea55792f779748dc66ab9403ee8a96c67ea62249f8fc8cb2833ad1b340ec52f253ffa7a385586d2e0e85bb2"}, @generic={0x91, 0x3, "ba7e2ce8d907405084a268d7bdfbf9a3e4f552e36e98f0e20026aa2756cef82fed67a9ab02a24cb8f7600717b39eaff1c05c8f84888a64b8735777f8896d4ec6b08b6bcb81e4de16921e04fdacd01a043690f088ad7ee7f33844ffd2bd48b1d43a9960cd8f1ed3c1def627df5d9b72b1de41ce316050d37b222b72466f370dca41ee9029fb4f5ed6958879cf1462bd"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0x6e, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0xdb, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5d}, @generic={0x3a, 0x2, "f5d40215eb2863f43edbf6d3f0366c89aba35c71e27d4503397c5792b9fe69b3b83a02f5aa1b9398a2e517fe71f89f598f51b8849d47d129"}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x310, 0x0, 0x40, 0x8, 0x10, 0xea}, 0x6d, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f6d00044210040b4f79f9e6d1db7b712139a2e294747297931990f69723e247e3deeb53b6acad3c4da15aac60479e07470b93dd1054ccc065bf0b100108790009030500170710020001060014100481a6f699951eb466d9649dc4cd310353d1"], 0x4, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x13, &(0x7f0000000f40)=@string={0x13, 0x3, "c4e00f061175613c2588c8a535865f1a87"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x2009}}]})
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006a0ff5206d0423083a4b0102030109021200010000000009040000000e"], 0x0)

7.390196658s ago: executing program 0 (id=3079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$addseals(r5, 0x409, 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0xa75521d4, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r6 = socket(0x10, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r7, 0x0, 0x0, 0x0)
r8 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x82)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

7.207613795s ago: executing program 2 (id=3080):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x820, 0x0) (fail_nth: 8)

6.425123109s ago: executing program 0 (id=3082):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x0, 0x2}})
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10)
r3 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600), &(0x7f0000000100))
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000480)={0xccb, "5de4ee31c3f639fc6810ed8ef4c6ae08ded2030f392dfabc7bdd480229405fb1", 0x800, 0x60, 0x2, 0x8, 0x1})
sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="96", 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/193, 0xc1}], 0x1}}], 0x1, 0x0, 0x0)
shutdown(r4, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

6.223532551s ago: executing program 3 (id=3083):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x3c}}, 0x0)

5.797561534s ago: executing program 2 (id=3084):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0)

4.987219086s ago: executing program 3 (id=3085):
execve(0x0, 0x0, &(0x7f0000000080)=[0x0])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
syz_io_uring_setup(0x24f9, &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0x192a, &(0x7f00000002c0), &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r2, r1, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0xffffffffffffff80, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$tipc(0x1e, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xab8, 0x898, 0x43, 0xa0, 0x0, 0x98, 0xa20, 0x178, 0x178, 0xa20, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x878, 0x898, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {[], [], 0xc}], 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x158, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv4, [], @ipv4, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb18)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r7 = dup3(r5, r6, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)

4.752124739s ago: executing program 3 (id=3086):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x1a, r4, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)='L', 0x1})
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0xa8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3ff, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x701, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2038)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ptrace$setopts(0xffffffffffffffff, r8, 0x4, 0x71)

4.595744745s ago: executing program 2 (id=3087):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x0, 0x0, 0xffff, 0x0, 0x7}}}}, 0x17)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
prlimit64(r4, 0x0, 0x0, &(0x7f0000000000))
tkill(0x0, 0x33)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
getdents(r5, 0x0, 0x18)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

3.755196851s ago: executing program 3 (id=3088):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000140)={0x3c, 0xfff, 0x3})
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f615", 0xa1)
connect(r2, &(0x7f0000000200)=@nl=@unspec, 0x80)
setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}, {&(0x7f00000003c0)="519752052311a5260200000000000200e6f5ac699cd77d1088ec6de7368c4358800540db051b40ed5fba851a35b2f753f2a227ab9858d9c3958b5511ac29371c6f0000", 0x43}, {&(0x7f0000000440)="7bbd7042b0104a0d3653857731d60f1e098a83a394b4703180cdccb591ac5af9b58bb4b7c12ad747794a7be1951cec572ae2d2ad5000d9058bb35c9eed4f2e1802214ef84e516f1db75053b02a660a0ebf36e7c077b3510c04fc00e0835bc3889908a831ccee1b1a0b348ed00949b93d3b227cf6", 0x74}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20040088)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x0, 0x0, 0x0)

3.599101606s ago: executing program 1 (id=3089):
syz_open_procfs(0x0, &(0x7f0000000b80)='net/sockstat\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/sockstat\x00')
r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0)
poll(&(0x7f0000000040), 0x55, 0x0)
r4 = dup3(r0, r1, 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x200000000000000, 0x0) (async)
rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x200000000000000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x16}, 0x0) (async)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x16}, 0x0)
getpid() (async)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x16f, 0x3}}, 0x20, 0x1, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x22c000, 0x0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x22c000, 0x0)
gettid() (async)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1}, 0x48)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) (async)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, '\x00', "e20000000000000010000000002000", '\x00', "ec5134428d5d00"}, 0x28)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f00000003c0)="d8a8b046ade9c779d43d52d94fe7870ab53859608ca92923f76929213beaf5ba6fa35ffba5d66c2aa6d37d3a9dd1df0c164578bda0f6a46f033906afa1e1e603fe1056ce18b337ec89cfc32a6f97ec1dac583a8d58e695b151d5bf4e", 0x0}, 0x20)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

2.631525302s ago: executing program 2 (id=3090):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, &(0x7f0000000280), r1, 0x0, 0x800, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000100)=""/23, 0x17}, {0x0}, {&(0x7f0000032640)=""/208, 0xd0}], 0x5, 0x4, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r4}, 0x90)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a004000008a47e6c71f"], 0xd)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2], 0x3b)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x20, 0x2, 0x4})
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000005c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "147cedad"}, 0x1})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40084, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)

2.14014659s ago: executing program 2 (id=3091):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
ioperm(0x0, 0x0, 0x3ff)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0xc5, &(0x7f0000000680)=""/197}]})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b041000e0ff0300020047", 0xb, 0x0, &(0x7f0000000140), 0x14)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_usbip_server_init(0x5)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40a401, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@empty}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
fsopen(0x0, 0x0)

2.118814955s ago: executing program 1 (id=3092):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r1}, 0x10)
getpid()
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d01020301090212000100000000090400000076dfdb00a5da88f4307a6df108a6b81ec224913b45b2423a9b415b1858a821749a07cbcc52de9de38b0e7277de99acc42e04"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = eventfd(0x4)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000001a00)={0x1, r6})
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0xc000, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000a00)={0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000a40)={&(0x7f00000009c0)=[0x0, 0x0], 0x2, r8})
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f00000010c0)={0xffffffffffffff05, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000010000000853a6e1d127e5d5292f3b9e67925d96d34b70244f25560e8a01161d39c2fd200ad0f9fe1a4903b6bdad0aca2777873287cad6c24404fe323db091f3913431ce0858a5ecc0bc481c4d31ac1cb548f19d5596e87dc3f3cec115a8c7d16540fbbfd3e5c2b33fe0a15100bb12af65c34ee94a0e5c8e5397f0f1918586431d448d026e43d8bd62c3cf2894a636ed227598a49d1f3fb7285dd678417f26cf74501fc312ec277ab56c915765169c1eb07285aac055fe513f76a98170f0a384fde61aea5b185ef2459b9173477fc9a2fb2a8b90b9", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0800000002000000000000000000000056acdd233d67b283ca17bd6865a9c041c8d5c3d98677fc6911660b1a3faf312d61008d5737b6cd40a60ecb48e77aa3cb097af2cae04742fa8bf1d6070c"], 0x10}, 0x2}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ppoll(&(0x7f0000000540)=[{r11}], 0x1, &(0x7f00000005c0), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000040), 0x1ff, 0x100)
syz_usb_control_io(r9, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f0000000140))

1.491667879s ago: executing program 0 (id=3093):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
writev(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x5451, &(0x7f0000000100))

1.221453806s ago: executing program 0 (id=3094):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3})
write(r4, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.180790958s ago: executing program 2 (id=3095):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}}, 0x0)

787.548651ms ago: executing program 3 (id=3096):
execve(0x0, 0x0, &(0x7f0000000080)=[0x0])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
syz_io_uring_setup(0x24f9, &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0x192a, &(0x7f00000002c0), &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r2, r1, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0xffffffffffffff80, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$tipc(0x1e, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xab8, 0x898, 0x43, 0xa0, 0x0, 0x98, 0xa20, 0x178, 0x178, 0xa20, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x878, 0x898, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {[], [], 0xc}], 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x158, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv4, [], @ipv4, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb18)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r7 = dup3(r5, r6, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)

0s ago: executing program 3 (id=3097):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x3f00, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000700)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x90049}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

21] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1489.871349][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1489.871375][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1489.874754][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1489.966825][T15863] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 1489.973397][T15863] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1489.989203][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1489.997753][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1490.005411][T15863] vhci_hcd vhci_hcd.0: Device attached
[ 1490.021698][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1490.038587][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1490.048561][T15621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1490.090931][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1490.102107][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1490.111962][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1490.117744][T15621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1490.127696][   T25] gspca_vc032x: Unknown sensor...
[ 1490.145567][   T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1490.158432][T15621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1490.203830][T15621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1490.234660][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'.
[ 1490.318979][   T45] usb 12-1: SetAddress Request (6) to port 0
[ 1490.344369][T15865] vhci_hcd: connection closed
[ 1490.345592][T12847] vhci_hcd: stop threads
[ 1490.372865][T12847] vhci_hcd: release socket
[ 1490.378376][   T45] usb 12-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 1490.390359][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[ 1490.391432][T12847] vhci_hcd: disconnect device
[ 1490.408490][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[ 1490.478234][   T45] usb 12-1: enqueue for inactive port 0
[ 1490.884971][  T956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1490.919792][  T956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1490.925865][   T45] usb usb12-port1: attempt power cycle
[ 1491.139077][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1491.221877][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1491.654342][   T45] usb usb12-port1: unable to enumerate USB device
[ 1491.877446][T15667] usb 3-1: USB disconnect, device number 38
[ 1491.977578][T15057] Bluetooth: hci3: unexpected event 0x30 length: 56 > 3
[ 1492.173681][T15057] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3
[ 1492.203598][T15057] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3
[ 1492.446106][T15890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1492.459643][T15890] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1492.509977][T15890] vhci_hcd vhci_hcd.0: Device attached
[ 1492.539630][T15892] vhci_hcd: connection closed
[ 1492.540195][   T61] vhci_hcd: stop threads
[ 1492.558062][   T61] vhci_hcd: release socket
[ 1492.563165][   T61] vhci_hcd: disconnect device
[ 1493.131393][   T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1493.181173][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1493.187784][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1493.207645][T15905] vhci_hcd vhci_hcd.0: Device attached
[ 1493.218053][T15906] vhci_hcd: unknown pdu 1
[ 1493.299240][T13573] vhci_hcd: stop threads
[ 1493.336014][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1493.355961][T13573] vhci_hcd: release socket
[ 1493.361771][   T45] usb 1-1: device descriptor read/64, error -71
[ 1493.384773][T13573] vhci_hcd: disconnect device
[ 1493.390753][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'.
[ 1493.572847][T15916] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1493.579424][T15916] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1493.627707][T15916] vhci_hcd vhci_hcd.0: Device attached
[ 1493.657202][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1493.689113][   T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1493.787431][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'.
[ 1493.833838][T15918] vhci_hcd: connection closed
[ 1493.834078][   T35] vhci_hcd: stop threads
[ 1493.852022][   T35] vhci_hcd: release socket
[ 1493.857950][   T35] vhci_hcd: disconnect device
[ 1493.879983][   T45] usb 1-1: device descriptor read/64, error -71
[ 1493.978983][T15057] Bluetooth: hci3: command tx timeout
[ 1494.015522][   T45] usb usb1-port1: attempt power cycle
[ 1494.200148][ T5075] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1494.439097][ T5075] usb 5-1: Using ep0 maxpacket: 32
[ 1494.489858][   T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1494.517609][ T5075] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1494.534173][ T5075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.561290][   T45] usb 1-1: device descriptor read/8, error -71
[ 1494.630143][ T5075] usb 5-1: config 0 descriptor??
[ 1494.672451][ T5075] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1494.866336][ T5075] gspca_vc032x: reg_r err -32
[ 1494.878955][   T45] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1494.903854][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1494.917188][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1494.933474][   T45] usb 1-1: device descriptor read/8, error -71
[ 1494.945576][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1494.968463][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1494.980761][T15936] ALSA: seq fatal error: cannot create timer (-22)
[ 1494.997717][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1494.998132][T15057] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3
[ 1495.013922][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.108726][   T45] usb usb1-port1: unable to enumerate USB device
[ 1495.132256][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.146609][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.169001][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.175095][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.197905][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.215197][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.239483][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.252950][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.261893][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.277583][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.308919][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.335095][ T5075] gspca_vc032x: I2c Bus Busy Wait 00
[ 1495.356839][ T5075] gspca_vc032x: Unknown sensor...
[ 1495.368726][ T5075] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[ 1495.763390][T15946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1495.769958][T15946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1495.904532][T15946] vhci_hcd vhci_hcd.0: Device attached
[ 1495.932365][T15948] vhci_hcd: connection closed
[ 1495.935210][   T61] vhci_hcd: stop threads
[ 1495.964615][   T61] vhci_hcd: release socket
[ 1496.001185][   T61] vhci_hcd: disconnect device
[ 1496.026840][T15953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1496.033421][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1496.044729][T15953] vhci_hcd vhci_hcd.0: Device attached
[ 1496.063276][T15954] vhci_hcd: unknown pdu 1
[ 1496.075148][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1496.100146][   T61] vhci_hcd: stop threads
[ 1496.104541][   T61] vhci_hcd: release socket
[ 1496.117157][   T61] vhci_hcd: disconnect device
[ 1496.126191][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'.
[ 1497.006121][ T5148] usb 5-1: USB disconnect, device number 37
[ 1497.577524][T15118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1497.592951][T15118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1497.604775][T15118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1497.657354][T15118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1497.666788][T15118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1497.683467][T15118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1499.059725][T15118] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3
[ 1499.331432][ T6341] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1499.402939][T15999] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1499.409526][T15999] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1499.429256][T15999] vhci_hcd vhci_hcd.0: Device attached
[ 1499.497131][T16001] vhci_hcd: connection closed
[ 1499.498568][   T35] vhci_hcd: stop threads
[ 1499.513170][   T35] vhci_hcd: release socket
[ 1499.517645][   T35] vhci_hcd: disconnect device
[ 1499.560513][ T6341] usb 3-1: device descriptor read/64, error -71
[ 1499.643902][T16005] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1499.650508][T16005] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1499.672222][T16005] vhci_hcd vhci_hcd.0: Device attached
[ 1499.685785][T16006] vhci_hcd: unknown pdu 1
[ 1499.689998][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1499.698683][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1499.715492][T13921] vhci_hcd: stop threads
[ 1499.726919][T13921] vhci_hcd: release socket
[ 1499.737405][T13921] vhci_hcd: disconnect device
[ 1499.748416][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'.
[ 1499.778561][T15976] chnl_net:caif_netlink_parms(): no params data found
[ 1499.831497][T15118] Bluetooth: hci6: command tx timeout
[ 1499.860829][ T6341] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1499.883759][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1500.041219][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1500.049105][ T6341] usb 3-1: device descriptor read/64, error -71
[ 1500.179525][ T6341] usb usb3-port1: attempt power cycle
[ 1500.213354][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1500.225355][ T5148] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1500.347284][T15976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1500.387895][T15976] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1500.410770][T15976] bridge_slave_0: entered allmulticast mode
[ 1500.427247][ T5148] usb 4-1: Using ep0 maxpacket: 32
[ 1500.436821][T15976] bridge_slave_0: entered promiscuous mode
[ 1500.456084][ T5148] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1500.469925][T15976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1500.477183][T15976] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1500.484704][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.504228][T15976] bridge_slave_1: entered allmulticast mode
[ 1500.512138][ T5148] usb 4-1: config 0 descriptor??
[ 1500.528176][T15976] bridge_slave_1: entered promiscuous mode
[ 1500.538399][ T5148] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1500.593568][ T6341] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1500.675070][ T6341] usb 3-1: device descriptor read/8, error -71
[ 1500.758364][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1500.767937][ T5148] gspca_vc032x: reg_r err -32
[ 1500.798922][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1500.834607][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1500.857432][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1500.864092][T16019] ALSA: seq fatal error: cannot create timer (-22)
[ 1500.910153][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1500.949626][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1500.969442][ T6341] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1500.977287][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1500.999075][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.005093][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.053679][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.060203][ T6341] usb 3-1: device descriptor read/8, error -71
[ 1501.067636][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.084782][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.104084][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.124043][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.131154][T15976] team0: Port device team_slave_0 added
[ 1501.159436][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.176603][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.197769][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.199752][ T6341] usb usb3-port1: unable to enumerate USB device
[ 1501.229443][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.242676][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.248182][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1501.277031][ T5148] gspca_vc032x: Unknown sensor...
[ 1501.278224][T15976] team0: Port device team_slave_1 added
[ 1501.309831][ T5148] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[ 1501.635307][   T35] bridge_slave_1: left allmulticast mode
[ 1501.671096][   T35] bridge_slave_1: left promiscuous mode
[ 1501.678693][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1501.802898][   T35] bridge_slave_0: left allmulticast mode
[ 1501.815176][   T35] bridge_slave_0: left promiscuous mode
[ 1501.823161][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1502.187207][T15118] Bluetooth: hci6: command tx timeout
[ 1503.485171][   T45] usb 4-1: USB disconnect, device number 46
[ 1503.732283][T16044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1503.738881][T16044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1503.758922][T16045] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 1503.765538][T16045] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1503.799107][T16044] vhci_hcd vhci_hcd.0: Device attached
[ 1503.804849][T16045] vhci_hcd vhci_hcd.0: Device attached
[ 1503.901487][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1504.029038][ T5140] vhci_hcd: vhci_device speed not set
[ 1504.096318][T16049] vhci_hcd: connection closed
[ 1504.096774][  T956] vhci_hcd: stop threads
[ 1504.119669][   T45] usb 12-1: SetAddress Request (10) to port 0
[ 1504.133046][ T5140] usb 15-1: new full-speed USB device number 6 using vhci_hcd
[ 1504.135314][   T45] usb 12-1: new SuperSpeed USB device number 10 using vhci_hcd
[ 1504.157580][  T956] vhci_hcd: release socket
[ 1504.173400][  T956] vhci_hcd: disconnect device
[ 1504.220990][T15118] Bluetooth: hci6: command tx timeout
[ 1504.504806][T16047] vhci_hcd: connection reset by peer
[ 1504.514696][T13921] vhci_hcd: stop threads
[ 1504.538241][T13921] vhci_hcd: release socket
[ 1504.588520][T13921] vhci_hcd: disconnect device
[ 1504.873114][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1504.912108][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1504.977024][   T35] bond0 (unregistering): Released all slaves
[ 1505.134377][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1505.155585][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1505.181573][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1505.206040][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1505.256451][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1505.283202][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1505.317164][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1505.355967][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'.
[ 1506.299482][T15118] Bluetooth: hci6: command tx timeout
[ 1506.581310][T15667] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1506.809117][T15667] usb 2-1: device descriptor read/64, error -71
[ 1507.198990][T15667] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1507.245394][T15976] hsr_slave_0: entered promiscuous mode
[ 1507.289681][T15976] hsr_slave_1: entered promiscuous mode
[ 1507.316282][T15976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1507.338956][T15976] Cannot create hsr debugfs directory
[ 1507.390377][T15667] usb 2-1: device descriptor read/64, error -71
[ 1507.418151][   T35] hsr_slave_0: left promiscuous mode
[ 1507.429053][T10794] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1507.440221][   T35] hsr_slave_1: left promiscuous mode
[ 1507.497214][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1507.519955][T15667] usb usb2-port1: attempt power cycle
[ 1507.528620][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1507.558667][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1507.589028][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1507.670749][T10794] usb 4-1: Using ep0 maxpacket: 32
[ 1507.681989][T10794] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1507.704506][T10794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.720268][   T35] veth1_macvtap: left promiscuous mode
[ 1507.733045][   T35] veth0_macvtap: left promiscuous mode
[ 1507.748438][   T35] veth1_vlan: left promiscuous mode
[ 1507.750943][T10794] usb 4-1: config 0 descriptor??
[ 1507.767958][   T35] veth0_vlan: left promiscuous mode
[ 1507.791637][T10794] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1507.969751][T15667] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1507.991061][T10794] gspca_vc032x: reg_r err -32
[ 1508.011538][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.039253][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.046051][T15667] usb 2-1: device descriptor read/8, error -71
[ 1508.065777][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.108884][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.122483][T16092] ALSA: seq fatal error: cannot create timer (-22)
[ 1508.131466][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.168990][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.175244][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.196560][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.213697][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.226442][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.254545][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.272015][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.280594][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.309486][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.320425][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.334560][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.359702][T15667] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1508.367549][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.380254][T10794] gspca_vc032x: I2c Bus Busy Wait 00
[ 1508.400902][T10794] gspca_vc032x: Unknown sensor...
[ 1508.409451][T10794] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[ 1508.462510][T15667] usb 2-1: device descriptor read/8, error -71
[ 1508.590289][T15667] usb usb2-port1: unable to enumerate USB device
[ 1509.181002][ T5148] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1509.261588][   T45] usb 12-1: device descriptor read/8, error -110
[ 1509.271842][ T5140] vhci_hcd: vhci_device speed not set
[ 1509.403853][ T5148] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1509.436689][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1509.478330][ T5148] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1509.543638][ T5148] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1509.626354][ T5148] usb 2-1: Manufacturer: syz
[ 1509.678561][ T5142] usb 4-1: USB disconnect, device number 47
[ 1509.691746][   T45] usb usb12-port1: attempt power cycle
[ 1509.702147][ T5148] usb 2-1: config 0 descriptor??
[ 1509.832466][T16104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1509.839071][T16104] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1509.868001][T16104] vhci_hcd vhci_hcd.0: Device attached
[ 1509.880649][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1509.892864][   T29] audit: type=1400 audit(1720305540.776:523): avc:  denied  { ioctl } for  pid=16100 comm="syz.4.2614" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1509.928148][ T5148] rc_core: IR keymap rc-hauppauge not found
[ 1509.938134][ T5148] Registered IR keymap rc-empty
[ 1510.180873][ T5148] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1510.195598][ T5148] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[ 1510.280459][T16110] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2613'.
[ 1510.336929][T15667] usb 16-1: SetAddress Request (19) to port 0
[ 1510.353324][T15667] usb 16-1: new SuperSpeed USB device number 19 using vhci_hcd
[ 1510.380181][   T29] audit: type=1400 audit(1720305541.156:524): avc:  denied  { getopt } for  pid=16096 comm="syz.1.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1513.872179][   T45] usb usb12-port1: unable to enumerate USB device
[ 1514.043285][T16105] vhci_hcd: connection reset by peer
[ 1514.075080][T13573] vhci_hcd: stop threads
[ 1514.104876][T13573] vhci_hcd: release socket
[ 1514.129180][T13573] vhci_hcd: disconnect device
[ 1514.466357][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1514.580585][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1516.282666][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[ 1516.359093][T16086] veth7: entered allmulticast mode
[ 1516.641711][   T45] usb 2-1: USB disconnect, device number 39
[ 1517.790395][T15118] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 1518.888953][T14581] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1519.019041][T15667] usb 16-1: device descriptor read/8, error -110
[ 1519.051962][T14581] usb 2-1: device descriptor read/64, error -71
[ 1519.086017][T15976] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1519.116866][T15976] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1519.131714][T15976] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1519.155963][T15976] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1519.271263][ T5142] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1519.349332][T14581] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1519.470503][T15667] usb usb16-port1: attempt power cycle
[ 1519.489196][ T5142] usb 3-1: Using ep0 maxpacket: 32
[ 1519.501656][T15976] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1519.511735][T16141] 9pnet_fd: Insufficient options for proto=fd
[ 1519.529248][ T5142] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1519.539048][T14581] usb 2-1: device descriptor read/64, error -71
[ 1519.546041][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.576309][T15976] 8021q: adding VLAN 0 to HW filter on device team0
[ 1519.582307][ T5142] usb 3-1: config 0 descriptor??
[ 1519.601407][ T5142] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1519.624017][T16145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1519.630618][T16145] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1519.655346][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1519.662739][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1519.674662][T16145] vhci_hcd vhci_hcd.0: Device attached
[ 1519.687497][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1519.689861][T14581] usb usb2-port1: attempt power cycle
[ 1519.694801][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1519.715377][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1519.773832][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'.
[ 1519.797478][ T5142] gspca_vc032x: reg_r err -32
[ 1519.806304][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.812181][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.829971][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.858518][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.915232][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.923523][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.938398][T16146] vhci_hcd: connection closed
[ 1519.939631][T15667] usb 16-1: SetAddress Request (21) to port 0
[ 1519.939871][T13921] vhci_hcd: stop threads
[ 1519.964466][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.969399][T15667] usb 16-1: new SuperSpeed USB device number 21 using vhci_hcd
[ 1519.985009][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1519.991610][T13921] vhci_hcd: release socket
[ 1520.001833][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.011701][T13921] vhci_hcd: disconnect device
[ 1520.021464][   T29] audit: type=1400 audit(1720305550.896:525): avc:  denied  { module_request } for  pid=15976 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1520.050332][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.064185][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.088300][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.116426][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.137437][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.143320][T14581] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1520.186518][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.197850][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.216837][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.224420][T14581] usb 2-1: device descriptor read/8, error -71
[ 1520.254250][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[ 1520.282456][ T5142] gspca_vc032x: Unknown sensor...
[ 1520.294549][ T5142] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1520.499125][T14581] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1520.550315][T14581] usb 2-1: device descriptor read/8, error -71
[ 1520.671995][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1520.722432][T14581] usb usb2-port1: unable to enumerate USB device
[ 1520.995359][T15976] veth0_vlan: entered promiscuous mode
[ 1521.050511][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'.
[ 1521.972861][T16168] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1522.337901][ T5140] usb 3-1: USB disconnect, device number 43
[ 1522.373542][T16165] veth11: entered allmulticast mode
[ 1522.529372][T15976] veth1_vlan: entered promiscuous mode
[ 1522.697228][T15976] veth0_macvtap: entered promiscuous mode
[ 1522.751237][T15976] veth1_macvtap: entered promiscuous mode
[ 1522.865409][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1522.880375][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.898333][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1522.923526][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.963367][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1522.978437][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.992177][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1523.007448][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.020415][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1523.059447][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.107679][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1523.203626][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.278835][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.288709][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.400203][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.451313][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.524711][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.591614][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.608697][T16192] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 1523.615276][T16192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1523.650339][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.695627][T16192] vhci_hcd vhci_hcd.0: Device attached
[ 1523.706444][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.744614][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1523.808931][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.871657][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1523.905389][T15976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.916717][T15976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.937888][T15976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.948202][T15976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.976145][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'.
[ 1523.998936][   T25] usb 12-1: SetAddress Request (14) to port 0
[ 1524.005189][   T25] usb 12-1: new SuperSpeed USB device number 14 using vhci_hcd
[ 1524.048860][T16193] vhci_hcd: connection closed
[ 1524.070372][   T61] vhci_hcd: stop threads
[ 1524.109559][   T61] vhci_hcd: release socket
[ 1524.119038][   T61] vhci_hcd: disconnect device
[ 1524.178983][   T25] usb 12-1: enqueue for inactive port 0
[ 1524.471074][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1524.508595][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.662753][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1524.718352][   T25] usb usb12-port1: attempt power cycle
[ 1524.767585][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.930288][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'.
[ 1525.109088][T15667] usb 16-1: device descriptor read/8, error -110
[ 1525.326446][T16206] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1525.521426][   T25] usb usb12-port1: unable to enumerate USB device
[ 1526.446119][T16210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1526.601137][T15667] usb usb16-port1: unable to enumerate USB device
[ 1526.797677][T16214] FAULT_INJECTION: forcing a failure.
[ 1526.797677][T16214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1526.838840][T16214] CPU: 1 PID: 16214 Comm: syz.0.2640 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1526.849165][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1526.859244][T16214] Call Trace:
[ 1526.862539][T16214]  <TASK>
[ 1526.865485][T16214]  dump_stack_lvl+0x16c/0x1f0
[ 1526.870200][T16214]  should_fail_ex+0x497/0x5b0
[ 1526.874911][T16214]  _copy_from_iter+0x2a1/0x1140
[ 1526.879792][T16214]  ? __alloc_skb+0x1fe/0x380
[ 1526.884409][T16214]  ? __pfx__copy_from_iter+0x10/0x10
[ 1526.889724][T16214]  ? __virt_addr_valid+0x5e/0x580
[ 1526.894779][T16214]  ? __phys_addr_symbol+0x30/0x80
[ 1526.899828][T16214]  ? __check_object_size+0x48e/0x720
[ 1526.905145][T16214]  netlink_sendmsg+0x813/0xd70
[ 1526.909951][T16214]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1526.915276][T16214]  ? __import_iovec+0x1fd/0x6e0
[ 1526.920179][T16214]  ____sys_sendmsg+0xab5/0xc90
[ 1526.924980][T16214]  ? copy_msghdr_from_user+0x10b/0x160
[ 1526.930479][T16214]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1526.935794][T16214]  ? find_held_lock+0x2d/0x110
[ 1526.940588][T16214]  ? __pfx___lock_acquire+0x10/0x10
[ 1526.945822][T16214]  ___sys_sendmsg+0x135/0x1e0
[ 1526.950535][T16214]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1526.955767][T16214]  ? ksys_write+0x21c/0x260
[ 1526.960312][T16214]  ? __fget_light+0x173/0x210
[ 1526.965026][T16214]  __sys_sendmsg+0x117/0x1f0
[ 1526.969660][T16214]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1526.974817][T16214]  do_syscall_64+0xcd/0x250
[ 1526.979358][T16214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.985294][T16214] RIP: 0033:0x7f2df1d75bd9
[ 1526.989737][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1527.009377][T16214] RSP: 002b:00007f2df2b52048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1527.017820][T16214] RAX: ffffffffffffffda RBX: 00007f2df1f03f60 RCX: 00007f2df1d75bd9
[ 1527.025829][T16214] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[ 1527.033829][T16214] RBP: 00007f2df2b520a0 R08: 0000000000000000 R09: 0000000000000000
[ 1527.041823][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1527.049815][T16214] R13: 000000000000000b R14: 00007f2df1f03f60 R15: 00007ffea37d0e48
[ 1527.057812][T16214]  </TASK>
[ 1527.426608][ T5148] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1527.631225][ T5148] usb 2-1: Using ep0 maxpacket: 32
[ 1527.632004][T16223] overlay: ./bus is not a directory
[ 1527.650158][ T5148] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1527.678890][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.717982][ T5148] usb 2-1: config 0 descriptor??
[ 1527.755364][ T5148] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1527.789352][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'.
[ 1527.829129][   T29] audit: type=1400 audit(1720305558.696:526): avc:  denied  { create } for  pid=16224 comm="syz.3.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1527.865977][T16227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.913183][T16228] veth9: entered allmulticast mode
[ 1527.954330][ T5148] gspca_vc032x: reg_r err -32
[ 1528.016292][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.029387][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'.
[ 1528.039667][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.045013][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.086415][T16234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1528.092976][T16234] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1528.129138][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.141701][T16234] vhci_hcd vhci_hcd.0: Device attached
[ 1528.159090][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.164616][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.184250][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1528.216050][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.245608][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.247976][T16230] bridge_slave_1: left allmulticast mode
[ 1528.271139][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.290344][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.313076][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.330282][T16230] bridge_slave_1: left promiscuous mode
[ 1528.342734][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.362713][T16230] bridge6: port 1(bridge_slave_1) entered disabled state
[ 1528.372620][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.390126][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.402668][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.408389][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.429436][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.435057][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[ 1528.441520][ T5148] gspca_vc032x: Unknown sensor...
[ 1528.467880][T15118] Bluetooth: hci4: command 0x0406 tx timeout
[ 1528.490383][ T5148] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[ 1528.509742][   T25] usb 18-1: SetAddress Request (7) to port 0
[ 1528.516047][   T25] usb 18-1: new SuperSpeed USB device number 7 using vhci_hcd
[ 1528.516804][T16230] bridge7: port 1(bridge_slave_1) entered blocking state
[ 1528.565352][ T5094] Bluetooth: hci6: unexpected event 0x30 length: 56 > 3
[ 1528.598480][T16230] bridge7: port 1(bridge_slave_1) entered disabled state
[ 1528.649199][T16230] bridge_slave_1: entered allmulticast mode
[ 1528.692687][T16230] bridge_slave_1: entered promiscuous mode
[ 1528.728910][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'.
[ 1528.822206][T16236] vhci_hcd: connection reset by peer
[ 1528.835023][ T9972] vhci_hcd: stop threads
[ 1528.847050][ T9972] vhci_hcd: release socket
[ 1528.864963][ T9972] vhci_hcd: disconnect device
[ 1529.140688][T16253] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1529.147269][T16253] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1529.176043][T16253] vhci_hcd vhci_hcd.0: Device attached
[ 1529.212757][T16255] vhci_hcd: connection closed
[ 1529.213960][  T956] vhci_hcd: stop threads
[ 1529.227180][  T956] vhci_hcd: release socket
[ 1529.238112][  T956] vhci_hcd: disconnect device
[ 1529.301680][   T29] audit: type=1400 audit(1720305560.186:527): avc:  denied  { call } for  pid=16257 comm="syz.3.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1529.326284][T16258] binder: 16257:16258 ioctl c0306201 20000100 returned -14
[ 1530.086491][T16266] ip6t_srh: unknown srh invflags 7D00
[ 1530.243312][T16266] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1530.273323][T16266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1530.394964][   T45] usb 2-1: USB disconnect, device number 44
[ 1530.549580][ T5094] Bluetooth: hci6: command tx timeout
[ 1531.791023][T16277] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1532.200532][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'.
[ 1532.351484][T16282] veth3: entered allmulticast mode
[ 1532.750034][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'.
[ 1532.853330][T16288] veth11: entered allmulticast mode
[ 1533.340939][T16296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1533.410451][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2662'.
[ 1533.491957][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1533.534610][T16296] bridge1: port 1(bridge_slave_1) entered blocking state
[ 1533.608568][T16296] bridge1: port 1(bridge_slave_1) entered disabled state
[ 1533.631747][T16296] bridge_slave_1: entered allmulticast mode
[ 1533.641261][T16296] bridge_slave_1: entered promiscuous mode
[ 1533.689111][   T25] usb 18-1: device descriptor read/8, error -110
[ 1534.169808][T16299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1534.176396][T16299] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1534.188974][   T25] usb usb18-port1: attempt power cycle
[ 1534.252662][T16299] vhci_hcd vhci_hcd.0: Device attached
[ 1534.287338][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1534.374100][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'.
[ 1534.448584][ T5094] Bluetooth: hci2: unexpected event 0x30 length: 56 > 3
[ 1534.468181][T16300] vhci_hcd: connection closed
[ 1534.493397][T12847] vhci_hcd: stop threads
[ 1534.517423][T12847] vhci_hcd: release socket
[ 1534.527703][T12847] vhci_hcd: disconnect device
[ 1534.537805][T16310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1534.544390][T16310] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1534.575451][T16310] vhci_hcd vhci_hcd.0: Device attached
[ 1534.589604][T15667] usb 16-1: enqueue for inactive port 0
[ 1534.597055][T16313] vhci_hcd: connection closed
[ 1534.597665][T13921] vhci_hcd: stop threads
[ 1534.611905][T13921] vhci_hcd: release socket
[ 1534.617275][T13921] vhci_hcd: disconnect device
[ 1534.660561][T16316] ip6t_srh: unknown srh invflags 7D00
[ 1534.697733][T16316] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1534.713196][T16316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1534.769197][ T6341] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1534.913101][   T25] usb usb18-port1: unable to enumerate USB device
[ 1534.968948][ T6341] usb 3-1: Using ep0 maxpacket: 32
[ 1534.989188][ T6341] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1535.017371][ T6341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.062109][ T6341] usb 3-1: config 0 descriptor??
[ 1535.087978][ T6341] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1535.141457][T15667] usb usb16-port1: attempt power cycle
[ 1535.206008][ T5094] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3
[ 1535.295974][ T6341] gspca_vc032x: reg_r err -32
[ 1535.314574][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.345871][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.388907][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.436868][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.463964][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.497097][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.568516][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.631732][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.654418][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.742601][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.763511][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.846425][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.860214][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.865686][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.885813][T15667] usb usb16-port1: unable to enumerate USB device
[ 1535.907482][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.949884][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1535.975969][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1536.013361][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1536.036679][ T6341] gspca_vc032x: Unknown sensor...
[ 1536.054852][ T6341] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1536.463290][ T5094] Bluetooth: hci2: command 0x0406 tx timeout
[ 1537.466593][ T5148] usb 3-1: USB disconnect, device number 44
[ 1537.625495][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1537.664277][T16353] FAULT_INJECTION: forcing a failure.
[ 1537.664277][T16353] name failslab, interval 1, probability 0, space 0, times 0
[ 1537.683968][T16353] CPU: 0 PID: 16353 Comm: syz.0.2679 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1537.694205][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1537.704389][T16353] Call Trace:
[ 1537.707683][T16353]  <TASK>
[ 1537.710629][T16353]  dump_stack_lvl+0x16c/0x1f0
[ 1537.715339][T16353]  should_fail_ex+0x497/0x5b0
[ 1537.720087][T16353]  should_failslab+0x9/0x20
[ 1537.724659][T16353]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 1537.730082][T16353]  ? security_file_alloc+0x41/0x260
[ 1537.735309][T16353]  security_file_alloc+0x41/0x260
[ 1537.740443][T16353]  init_file+0x99/0x260
[ 1537.744617][T16353]  alloc_empty_file+0x91/0x1e0
[ 1537.749404][T16353]  alloc_file_pseudo+0x147/0x210
[ 1537.754365][T16353]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1537.759864][T16353]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1537.764952][T16353]  __anon_inode_getfile+0x136/0x3e0
[ 1537.770183][T16353]  ? __pfx___anon_inode_getfile+0x10/0x10
[ 1537.775945][T16353]  ? alloc_fd+0x2d7/0x6c0
[ 1537.780347][T16353]  do_eventfd+0x199/0x2f0
[ 1537.784973][T16353]  __x64_sys_eventfd2+0x53/0x80
[ 1537.789915][T16353]  do_syscall_64+0xcd/0x250
[ 1537.794472][T16353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1537.800528][T16353] RIP: 0033:0x7f2df1d75bd9
[ 1537.804957][T16353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1537.824876][T16353] RSP: 002b:00007f2df2b52048 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[ 1537.833495][T16353] RAX: ffffffffffffffda RBX: 00007f2df1f03f60 RCX: 00007f2df1d75bd9
[ 1537.841501][T16353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1537.849576][T16353] RBP: 00007f2df2b520a0 R08: 0000000000000000 R09: 0000000000000000
[ 1537.857558][T16353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1537.865647][T16353] R13: 000000000000000b R14: 00007f2df1f03f60 R15: 00007ffea37d0e48
[ 1537.873761][T16353]  </TASK>
[ 1537.877017][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1538.448986][T16360] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1538.455660][T16360] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1538.506562][T16360] vhci_hcd vhci_hcd.0: Device attached
[ 1538.551236][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1538.613455][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'.
[ 1538.735539][T16361] vhci_hcd: connection closed
[ 1538.737056][T12847] vhci_hcd: stop threads
[ 1538.756505][T12847] vhci_hcd: release socket
[ 1538.776114][T12847] vhci_hcd: disconnect device
[ 1538.808993][T10794] usb 14-1: enqueue for inactive port 0
[ 1539.360573][T10794] usb usb14-port1: attempt power cycle
[ 1539.442709][T16367] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1539.449511][T16367] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1539.496577][T16367] vhci_hcd vhci_hcd.0: Device attached
[ 1539.565476][T16371] vhci_hcd: connection closed
[ 1539.586138][   T35] vhci_hcd: stop threads
[ 1539.609823][   T35] vhci_hcd: release socket
[ 1539.623802][   T35] vhci_hcd: disconnect device
[ 1540.069843][T10794] usb usb14-port1: unable to enumerate USB device
[ 1540.785735][T16382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1540.942266][ T5094] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3
[ 1541.873873][ T6341] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1541.927863][ T5094] Bluetooth: hci1: unexpected event 0x30 length: 56 > 3
[ 1542.118992][ T6341] usb 3-1: Using ep0 maxpacket: 32
[ 1542.161427][ T6341] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1542.210792][ T6341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.321239][ T6341] usb 3-1: config 0 descriptor??
[ 1542.344862][ T6341] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1542.526782][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1542.541866][ T6341] gspca_vc032x: reg_r err -32
[ 1542.546624][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.627266][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.634239][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.701276][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.743420][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.772818][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.785125][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.819329][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.826384][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.849393][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.909196][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.916166][T16404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 1542.922745][T16404] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1542.931839][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.953019][T14581] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1542.956020][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1542.969072][T16404] vhci_hcd vhci_hcd.0: Device attached
[ 1543.014219][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1543.065493][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'.
[ 1543.068939][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1543.130038][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1543.136008][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1543.159171][T14581] usb 4-1: Using ep0 maxpacket: 32
[ 1543.169442][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1543.185353][T14581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1543.198969][T14581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1543.208858][ T6341] gspca_vc032x: I2c Bus Busy Wait 00
[ 1543.247585][T14581] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1543.257013][T14581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.266064][T14581] usb 4-1: Product: syz
[ 1543.271850][T14581] usb 4-1: Manufacturer: syz
[ 1543.277003][T14581] usb 4-1: SerialNumber: syz
[ 1543.285333][T16405] vhci_hcd: connection closed
[ 1543.285808][T12847] vhci_hcd: stop threads
[ 1543.309506][T10794] usb 10-1: SetAddress Request (8) to port 0
[ 1543.322135][T14581] usb 4-1: config 0 descriptor??
[ 1543.327362][T12847] vhci_hcd: release socket
[ 1543.339322][ T6341] gspca_vc032x: Unknown sensor...
[ 1543.339417][T10794] usb 10-1: new SuperSpeed USB device number 8 using vhci_hcd
[ 1543.344762][ T6341] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1543.365202][T12847] vhci_hcd: disconnect device
[ 1543.439057][T10794] usb 10-1: enqueue for inactive port 0
[ 1543.891245][T10794] usb usb10-port1: attempt power cycle
[ 1543.979110][ T5094] Bluetooth: hci1: command 0x0406 tx timeout
[ 1544.849484][   T25] usb 3-1: USB disconnect, device number 45
[ 1544.961343][T10794] usb usb10-port1: unable to enumerate USB device
[ 1549.130217][T14581] usb 4-1: USB disconnect, device number 48
[ 1549.443603][T16423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1549.450179][T16423] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1549.539218][T16423] vhci_hcd vhci_hcd.0: Device attached
[ 1549.762317][   T25] vhci_hcd: vhci_device speed not set
[ 1549.826312][T16425] vhci_hcd: connection closed
[ 1549.852235][   T25] usb 17-1: new full-speed USB device number 7 using vhci_hcd
[ 1549.902175][T13921] vhci_hcd: stop threads
[ 1549.906513][T13921] vhci_hcd: release socket
[ 1549.944145][T13921] vhci_hcd: disconnect device
[ 1550.101215][ T5094] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3
[ 1550.147835][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1550.337284][ T5094] Bluetooth: hci1: unexpected event 0x30 length: 56 > 3
[ 1551.734836][T16451] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1551.734870][T16451] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1551.735102][T16451] vhci_hcd vhci_hcd.0: Device attached
[ 1551.741955][T16452] vhci_hcd: unknown pdu 1
[ 1551.792212][T13921] vhci_hcd: stop threads
[ 1551.856625][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.860650][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1551.863991][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.894112][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'.
[ 1551.903120][T13921] vhci_hcd: release socket
[ 1551.915113][T13921] vhci_hcd: disconnect device
[ 1552.079065][T10794] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[ 1552.245854][T10794] usb 2-1: device descriptor read/64, error -71
[ 1552.329192][ T9799] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1552.379306][ T5094] Bluetooth: hci1: command 0x0406 tx timeout
[ 1552.539092][T10794] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[ 1552.578942][ T9799] usb 3-1: Using ep0 maxpacket: 32
[ 1552.613231][ T9799] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1552.652094][ T9799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.715898][ T9799] usb 3-1: config 0 descriptor??
[ 1552.752380][ T9799] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1552.758923][T10794] usb 2-1: device descriptor read/64, error -71
[ 1552.909914][T10794] usb usb2-port1: attempt power cycle
[ 1552.953783][ T9799] gspca_vc032x: reg_r err -32
[ 1553.186074][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.220831][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.280566][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.281545][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.322713][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.339086][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1553.351247][T16468] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1553.387489][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.406025][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.433747][ T5094] Bluetooth: hci6: Unknown advertising packet type: 0x74
[ 1553.456967][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.499220][T10794] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[ 1553.539415][T15667] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1553.553695][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.608281][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.624421][T10794] usb 2-1: device descriptor read/8, error -71
[ 1553.672123][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.726153][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.757319][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.780498][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.819134][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.824557][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.861065][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.867080][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.874402][ T9799] gspca_vc032x: I2c Bus Busy Wait 00
[ 1553.894197][ T9799] gspca_vc032x: Unknown sensor...
[ 1553.905713][ T9799] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1553.961651][T10794] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[ 1554.028061][T10794] usb 2-1: device descriptor read/8, error -71
[ 1554.164778][T10794] usb usb2-port1: unable to enumerate USB device
[ 1555.446516][T16481] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1555.708967][   T25] vhci_hcd: vhci_device speed not set
[ 1555.939772][   T45] usb 3-1: USB disconnect, device number 46
[ 1556.038979][T16487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1556.045546][T16487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1556.070115][T16487] vhci_hcd vhci_hcd.0: Device attached
[ 1556.103058][T16491] vhci_hcd: connection closed
[ 1556.118902][ T1089] vhci_hcd: stop threads
[ 1556.127978][ T1089] vhci_hcd: release socket
[ 1556.188834][ T1089] vhci_hcd: disconnect device
[ 1556.338420][T15118] Bluetooth: hci0: unexpected event 0x30 length: 56 > 3
[ 1556.491455][T16498] Bluetooth: MGMT ver 1.22
[ 1556.987243][T16503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 1556.993850][T16503] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1557.050073][T16503] vhci_hcd vhci_hcd.0: Device attached
[ 1557.111168][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1557.185254][T16500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1557.260366][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'.
[ 1557.361200][T16504] vhci_hcd: connection closed
[ 1557.365060][ T2418] vhci_hcd: stop threads
[ 1557.413016][ T2418] vhci_hcd: release socket
[ 1557.418921][ T5140] usb 12-1: SetAddress Request (18) to port 0
[ 1557.433314][ T5140] usb 12-1: new SuperSpeed USB device number 18 using vhci_hcd
[ 1557.433777][ T2418] vhci_hcd: disconnect device
[ 1557.484708][ T5140] usb 12-1: enqueue for inactive port 0
[ 1558.247510][ T5140] usb usb12-port1: attempt power cycle
[ 1558.260167][T16500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1558.381234][T15118] Bluetooth: hci0: command 0x0406 tx timeout
[ 1558.500064][T16500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1558.845511][T16500] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1558.982022][ T5140] usb usb12-port1: unable to enumerate USB device
[ 1559.797727][T16538] FAULT_INJECTION: forcing a failure.
[ 1559.797727][T16538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1559.858933][T16538] CPU: 1 PID: 16538 Comm: syz.1.2728 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1559.869182][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1559.879287][T16538] Call Trace:
[ 1559.882602][T16538]  <TASK>
[ 1559.885585][T16538]  dump_stack_lvl+0x16c/0x1f0
[ 1559.890335][T16538]  should_fail_ex+0x497/0x5b0
[ 1559.895077][T16538]  _copy_from_user+0x30/0xf0
[ 1559.899727][T16538]  semctl_main+0xf1a/0x2ac0
[ 1559.904316][T16538]  ? __pfx_semctl_main+0x10/0x10
[ 1559.909386][T16538]  ? __mutex_unlock_slowpath+0x164/0x650
[ 1559.915055][T16538]  ksys_semctl.constprop.0+0x277/0x2e0
[ 1559.920651][T16538]  ? __pfx_ksys_semctl.constprop.0+0x10/0x10
[ 1559.926696][T16538]  do_syscall_64+0xcd/0x250
[ 1559.931247][T16538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.937182][T16538] RIP: 0033:0x7f33ffd75bd9
[ 1559.941625][T16538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1559.961255][T16538] RSP: 002b:00007f3400c03048 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[ 1559.969699][T16538] RAX: ffffffffffffffda RBX: 00007f33fff04038 RCX: 00007f33ffd75bd9
[ 1559.977723][T16538] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000
[ 1559.985746][T16538] RBP: 00007f3400c030a0 R08: 0000000000000000 R09: 0000000000000000
[ 1559.993761][T16538] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[ 1560.001787][T16538] R13: 000000000000006e R14: 00007f33fff04038 R15: 00007ffd38c02558
[ 1560.009787][T16538]  </TASK>
[ 1560.559148][   T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1560.615453][T16544] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1560.621555][T16500] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.622033][T16544] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1560.656142][T16544] vhci_hcd vhci_hcd.0: Device attached
[ 1560.693598][T16500] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.748119][T16551] vhci_hcd: connection closed
[ 1560.748572][  T956] vhci_hcd: stop threads
[ 1560.764719][  T956] vhci_hcd: release socket
[ 1560.773653][T16500] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.776963][  T956] vhci_hcd: disconnect device
[ 1560.808917][   T25] usb 1-1: descriptor type invalid, skip
[ 1560.839374][   T25] usb 1-1: config 7 has an invalid interface number: 243 but max is 3
[ 1560.854126][   T25] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1560.863566][ T6341] vhci_hcd: vhci_device speed not set
[ 1560.870924][   T25] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1560.878434][T16500] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.879847][   T25] usb 1-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1560.879957][   T25] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1560.880030][   T25] usb 1-1: config 7 has no interface number 0
[ 1560.880327][   T25] usb 1-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1560.880405][   T25] usb 1-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1560.880489][   T25] usb 1-1: config 7 interface 243 has no altsetting 0
[ 1560.884695][   T25] usb 1-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1560.986530][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1560.994867][   T25] usb 1-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1561.001102][   T25] usb 1-1: Manufacturer: ᰉ
[ 1561.005873][   T25] usb 1-1: SerialNumber:  
[ 1561.291193][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1561.341437][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1561.425731][   T25] hub 1-1:7.243: bad descriptor, ignoring hub
[ 1561.426507][T16564] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1561.438422][T16564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1561.452215][   T25] hub 1-1:7.243: probe with driver hub failed with error -5
[ 1561.486529][T16564] vhci_hcd vhci_hcd.0: Device attached
[ 1561.490643][   T25] option 1-1:7.243: GSM modem (1-port) converter detected
[ 1561.552237][T16562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2736'.
[ 1561.575287][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1561.590424][   T25] usb 1-1: USB disconnect, device number 39
[ 1561.598324][   T25] option 1-1:7.243: device disconnected
[ 1561.610708][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'.
[ 1561.683942][T16565] vhci_hcd: connection closed
[ 1561.684385][T12847] vhci_hcd: stop threads
[ 1561.733025][T12847] vhci_hcd: release socket
[ 1561.758628][T12847] vhci_hcd: disconnect device
[ 1562.824924][T16579] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1563.216814][T16596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16596 comm=syz.1.2742
[ 1564.013479][T16594] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1565.319302][   T29] audit: type=1400 audit(1720305596.196:528): avc:  denied  { mount } for  pid=16608 comm="syz.3.2746" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1565.377597][T16607] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1565.384179][T16607] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1565.491108][T16607] vhci_hcd vhci_hcd.0: Device attached
[ 1565.517631][T16611] vhci_hcd: connection closed
[ 1565.518122][   T11] vhci_hcd: stop threads
[ 1565.688960][   T25] vhci_hcd: vhci_device speed not set
[ 1565.805591][   T11] vhci_hcd: release socket
[ 1566.612605][   T25] usb 9-1: new full-speed USB device number 8 using vhci_hcd
[ 1566.622727][   T29] audit: type=1400 audit(1720305596.746:529): avc:  denied  { create } for  pid=16614 comm="syz.1.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1566.643584][   T11] vhci_hcd: disconnect device
[ 1566.698974][   T25] usb 9-1: enqueue for inactive port 0
[ 1566.786149][   T29] audit: type=1400 audit(1720305596.786:530): avc:  denied  { write } for  pid=16614 comm="syz.1.2748" path="socket:[69741]" dev="sockfs" ino=69741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1566.840080][   T25] vhci_hcd: vhci_device speed not set
[ 1566.909175][   T29] audit: type=1400 audit(1720305597.666:531): avc:  denied  { unmount } for  pid=11180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1569.261363][T16639] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1570.673574][T16663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16663 comm=syz.3.2757
[ 1571.342065][T16661] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1572.962313][T16673] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1572.978093][T16673] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1572.990703][T16677] hugetlbfs: Bad value 'g' for mount option 'nr_inodes'
[ 1572.990703][T16677] 
[ 1573.003555][   T29] audit: type=1400 audit(1720305603.876:532): avc:  denied  { remount } for  pid=16675 comm="syz.4.2760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 1573.044242][T16673] vhci_hcd vhci_hcd.0: Device attached
[ 1573.166741][T16678] vhci_hcd: connection closed
[ 1573.238947][   T25] vhci_hcd: vhci_device speed not set
[ 1573.288992][ T1089] vhci_hcd: stop threads
[ 1573.348883][   T25] usb 13-1: new full-speed USB device number 6 using vhci_hcd
[ 1573.434256][ T1089] vhci_hcd: release socket
[ 1573.467160][ T1089] vhci_hcd: disconnect device
[ 1574.582086][T16700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2766'.
[ 1574.898670][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2767'.
[ 1578.063304][T16733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1578.069868][T16733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1578.884448][T16733] vhci_hcd vhci_hcd.0: Device attached
[ 1578.958923][   T25] vhci_hcd: vhci_device speed not set
[ 1579.081389][   T45] vhci_hcd: vhci_device speed not set
[ 1579.116440][T16739] vhci_hcd: connection closed
[ 1579.117023][T13921] vhci_hcd: stop threads
[ 1579.126676][T13921] vhci_hcd: release socket
[ 1579.159689][T13921] vhci_hcd: disconnect device
[ 1579.168835][   T45] usb 9-1: new full-speed USB device number 9 using vhci_hcd
[ 1579.258948][T15118] Bluetooth: hci1: command 0x0406 tx timeout
[ 1579.299198][T16746] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1579.319810][T16749] FAULT_INJECTION: forcing a failure.
[ 1579.319810][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1579.360505][T16749] CPU: 1 PID: 16749 Comm: syz.3.2780 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1579.370748][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1579.380830][T16749] Call Trace:
[ 1579.384125][T16749]  <TASK>
[ 1579.387086][T16749]  dump_stack_lvl+0x16c/0x1f0
[ 1579.391793][T16749]  should_fail_ex+0x497/0x5b0
[ 1579.396662][T16749]  strncpy_from_user+0x38/0x300
[ 1579.401528][T16749]  getname_flags.part.0+0x93/0x4f0
[ 1579.406661][T16749]  ? __pfx_ksys_write+0x10/0x10
[ 1579.411540][T16749]  getname_flags+0x9b/0xf0
[ 1579.415983][T16749]  __x64_sys_rename+0x5a/0xa0
[ 1579.420696][T16749]  do_syscall_64+0xcd/0x250
[ 1579.425229][T16749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1579.431179][T16749] RIP: 0033:0x7fe88ef75bd9
[ 1579.435631][T16749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1579.455264][T16749] RSP: 002b:00007fe88fd0d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 1579.463722][T16749] RAX: ffffffffffffffda RBX: 00007fe88f103f60 RCX: 00007fe88ef75bd9
[ 1579.471728][T16749] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000200001c0
[ 1579.479836][T16749] RBP: 00007fe88fd0d0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1579.487821][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1579.495821][T16749] R13: 000000000000000b R14: 00007fe88f103f60 R15: 00007ffc718f2018
[ 1579.503814][T16749]  </TASK>
[ 1579.506968][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1584.299277][   T45] vhci_hcd: vhci_device speed not set
[ 1584.858914][T15118] Bluetooth: hci1: command 0x0406 tx timeout
[ 1584.943522][T16794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1584.950187][T16794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1584.990730][T16794] vhci_hcd vhci_hcd.0: Device attached
[ 1585.032605][T16796] vhci_hcd: connection closed
[ 1585.037876][ T1089] vhci_hcd: stop threads
[ 1585.050285][ T1089] vhci_hcd: release socket
[ 1585.054751][ T1089] vhci_hcd: disconnect device
[ 1585.079419][T16802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2796'.
[ 1585.411395][T16805] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1585.659123][   T29] audit: type=1400 audit(1720305616.536:533): avc:  denied  { create } for  pid=16798 comm="syz.0.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1585.768052][   T29] audit: type=1400 audit(1720305616.646:534): avc:  denied  { ioctl } for  pid=16798 comm="syz.0.2796" path="socket:[70061]" dev="sockfs" ino=70061 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1585.792972][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1587.366855][T16823] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1588.328890][ T6341] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1588.541356][ T6341] usb 4-1: descriptor type invalid, skip
[ 1588.583044][ T6341] usb 4-1: config 7 has an invalid interface number: 243 but max is 3
[ 1588.632211][ T6341] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1588.653760][ T6341] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1588.672469][ T6341] usb 4-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1588.683372][ T6341] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1588.696467][ T6341] usb 4-1: config 7 has no interface number 0
[ 1588.738540][ T6341] usb 4-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1588.772316][ T6341] usb 4-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1588.816695][ T6341] usb 4-1: config 7 interface 243 has no altsetting 0
[ 1589.080573][ T6341] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1589.099280][ T6341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.915882][ T6341] usb 4-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1589.953022][ T6341] usb 4-1: Manufacturer: ᰉ
[ 1589.960286][ T6341] usb 4-1: SerialNumber:  
[ 1590.052395][   T29] audit: type=1400 audit(1720305620.936:535): avc:  denied  { bind } for  pid=16828 comm="syz.0.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1590.071869][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1590.179672][T16839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1590.186300][T16839] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1590.248899][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1590.258891][T16839] vhci_hcd vhci_hcd.0: Device attached
[ 1590.275486][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1590.323181][ T6341] hub 4-1:7.243: bad descriptor, ignoring hub
[ 1590.337064][ T6341] hub 4-1:7.243: probe with driver hub failed with error -5
[ 1590.369723][ T6341] option 4-1:7.243: GSM modem (1-port) converter detected
[ 1590.380143][T16841] vhci_hcd: connection closed
[ 1590.387042][ T1089] vhci_hcd: stop threads
[ 1590.396328][ T1089] vhci_hcd: release socket
[ 1590.413444][ T1089] vhci_hcd: disconnect device
[ 1590.432448][ T6341] usb 4-1: USB disconnect, device number 49
[ 1590.440643][ T6341] option 4-1:7.243: device disconnected
[ 1590.448454][   T25] vhci_hcd: vhci_device speed not set
[ 1592.292728][T15118] Bluetooth: hci0: unexpected event 0x30 length: 56 > 3
[ 1592.377923][T16863] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1593.161128][T16870] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1593.172012][T16870] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1593.263839][T16870] vhci_hcd vhci_hcd.0: Device attached
[ 1593.409377][T16874] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1593.499736][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'.
[ 1593.589560][ T6341] usb 16-1: SetAddress Request (27) to port 0
[ 1593.595853][ T6341] usb 16-1: new SuperSpeed USB device number 27 using vhci_hcd
[ 1593.629071][   T45] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1593.831898][   T45] usb 1-1: descriptor type invalid, skip
[ 1593.845289][   T45] usb 1-1: config 7 has an invalid interface number: 243 but max is 3
[ 1593.854496][   T45] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1593.906335][   T45] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1593.942647][T16872] vhci_hcd: connection reset by peer
[ 1593.943810][   T45] usb 1-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1593.976408][   T45] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1593.987167][  T956] vhci_hcd: stop threads
[ 1593.994786][  T956] vhci_hcd: release socket
[ 1593.999812][  T956] vhci_hcd: disconnect device
[ 1594.016385][   T45] usb 1-1: config 7 has no interface number 0
[ 1594.109071][   T45] usb 1-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1594.130826][   T45] usb 1-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1594.146007][   T45] usb 1-1: config 7 interface 243 has no altsetting 0
[ 1594.167473][   T45] usb 1-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1594.176806][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.209243][   T45] usb 1-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1594.215232][   T45] usb 1-1: Manufacturer: ᰉ
[ 1594.223252][   T45] usb 1-1: SerialNumber:  
[ 1594.309017][T15118] Bluetooth: hci0: command 0x0406 tx timeout
[ 1594.433458][T16887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1594.440151][T16887] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1594.470108][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1594.493525][T16887] vhci_hcd vhci_hcd.0: Device attached
[ 1594.524986][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1594.553358][T16889] vhci_hcd: connection closed
[ 1594.554429][ T1089] vhci_hcd: stop threads
[ 1594.588876][ T1089] vhci_hcd: release socket
[ 1594.596601][ T1089] vhci_hcd: disconnect device
[ 1594.603112][   T45] hub 1-1:7.243: bad descriptor, ignoring hub
[ 1594.642569][   T45] hub 1-1:7.243: probe with driver hub failed with error -5
[ 1594.700997][   T45] option 1-1:7.243: GSM modem (1-port) converter detected
[ 1594.774918][   T45] usb 1-1: USB disconnect, device number 40
[ 1594.805448][   T45] option 1-1:7.243: device disconnected
[ 1596.308059][T15118] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 1597.724435][T15118] Bluetooth: hci0: unexpected event 0x30 length: 56 > 3
[ 1598.338066][T16935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1598.351600][T16935] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1598.379048][T16935] vhci_hcd vhci_hcd.0: Device attached
[ 1598.441283][T16937] vhci_hcd: connection closed
[ 1598.441633][T12847] vhci_hcd: stop threads
[ 1598.477895][T12847] vhci_hcd: release socket
[ 1598.514540][T12847] vhci_hcd: disconnect device
[ 1598.699877][ T6341] usb 16-1: device descriptor read/8, error -110
[ 1599.151067][ T6341] usb usb16-port1: attempt power cycle
[ 1599.465783][ T5142] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1599.738917][T15118] Bluetooth: hci0: command 0x0406 tx timeout
[ 1599.817845][ T6341] usb usb16-port1: unable to enumerate USB device
[ 1600.446513][ T5142] usb 2-1: descriptor type invalid, skip
[ 1600.481415][ T5142] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[ 1600.528237][ T5142] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1600.566188][T16964] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1600.578876][ T5142] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1600.587739][ T5142] usb 2-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1600.661333][ T5142] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1600.711067][ T5142] usb 2-1: config 7 has no interface number 0
[ 1600.711128][T15118] Bluetooth: hci0: unexpected event 0x30 length: 56 > 3
[ 1600.738628][ T5142] usb 2-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1600.841100][ T5142] usb 2-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1600.901570][ T5142] usb 2-1: config 7 interface 243 has no altsetting 0
[ 1600.935265][ T5142] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1600.958763][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.967311][T16973] ALSA: seq fatal error: cannot create timer (-22)
[ 1600.990907][ T5142] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1601.003177][ T5142] usb 2-1: Manufacturer: ᰉ
[ 1601.022989][ T5142] usb 2-1: SerialNumber:  
[ 1601.250274][T16942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1601.296869][T16942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1601.320089][ T5142] hub 2-1:7.243: bad descriptor, ignoring hub
[ 1601.382584][ T5142] hub 2-1:7.243: probe with driver hub failed with error -5
[ 1601.523638][ T5142] option 2-1:7.243: GSM modem (1-port) converter detected
[ 1601.600129][ T5142] usb 2-1: USB disconnect, device number 49
[ 1601.623001][ T5142] option 2-1:7.243: device disconnected
[ 1601.947927][T16982] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1601.954530][T16982] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1601.994521][T16982] vhci_hcd vhci_hcd.0: Device attached
[ 1602.018265][T16984] vhci_hcd: connection closed
[ 1602.019005][T12847] vhci_hcd: stop threads
[ 1602.046548][T12847] vhci_hcd: release socket
[ 1602.046717][T15118] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1602.056658][T12847] vhci_hcd: disconnect device
[ 1602.778883][T15118] Bluetooth: hci0: command 0x0406 tx timeout
[ 1603.541478][T16997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1603.751185][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2856'.
[ 1603.903380][T16997] bridge_slave_1: left allmulticast mode
[ 1603.920058][T16997] bridge_slave_1: left promiscuous mode
[ 1603.957155][T16997] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1604.037841][T16997] bridge1: port 1(bridge_slave_1) entered blocking state
[ 1604.478925][   T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1605.047494][T16997] bridge1: port 1(bridge_slave_1) entered disabled state
[ 1605.070775][T16997] bridge_slave_1: entered allmulticast mode
[ 1605.133273][T16997] bridge_slave_1: entered promiscuous mode
[ 1605.379414][   T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1605.388648][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.433787][   T25] usb 3-1: config 0 descriptor??
[ 1605.603711][T15118] Bluetooth: hci1: unexpected event 0x30 length: 56 > 3
[ 1605.808578][T17021] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1606.067165][   T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1606.130956][   T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1606.175562][   T25] [drm:udl_init] *ERROR* Selecting channel failed
[ 1606.357015][   T25] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1606.404709][   T25] [drm] Initialized udl on minor 2
[ 1606.426771][   T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1606.440481][   T29] audit: type=1400 audit(1720305637.326:536): avc:  denied  { create } for  pid=17031 comm="syz.3.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[ 1606.552548][   T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1606.612165][T15667] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1606.622406][   T25] usb 3-1: USB disconnect, device number 47
[ 1606.641719][T15667] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1607.284895][T17036] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1607.504786][T17039] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1607.511372][T17039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1607.591867][T17039] vhci_hcd vhci_hcd.0: Device attached
[ 1607.606094][T17041] vhci_hcd: connection closed
[ 1607.646309][ T1089] vhci_hcd: stop threads
[ 1607.658884][T15118] Bluetooth: hci1: command 0x0406 tx timeout
[ 1607.694890][ T1089] vhci_hcd: release socket
[ 1607.706648][ T1089] vhci_hcd: disconnect device
[ 1609.411758][T14581] kernel read not supported for file /dsp (pid: 14581 comm: kworker/0:2)
[ 1610.661249][T15118] Bluetooth: hci2: unexpected event 0x30 length: 56 > 3
[ 1611.327517][T17083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1611.341113][T17083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1611.406191][T17083] vhci_hcd vhci_hcd.0: Device attached
[ 1611.448328][T17085] vhci_hcd: connection closed
[ 1611.450215][ T1089] vhci_hcd: stop threads
[ 1611.511500][ T1089] vhci_hcd: release socket
[ 1611.518886][ T5095] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1611.538892][   T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1611.548766][ T1089] vhci_hcd: disconnect device
[ 1611.782447][   T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1611.798367][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.818903][ T5095] usb 2-1: descriptor type invalid, skip
[ 1611.829347][ T5095] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[ 1611.839033][ T5095] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1611.862546][   T25] usb 4-1: config 0 descriptor??
[ 1611.876563][ T5095] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1611.917920][ T5095] usb 2-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1611.992423][ T5095] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1612.053993][ T5095] usb 2-1: config 7 has no interface number 0
[ 1612.066854][ T5095] usb 2-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1612.079510][ T5095] usb 2-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1612.093195][ T5095] usb 2-1: config 7 interface 243 has no altsetting 0
[ 1612.175197][ T5095] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1612.215254][ T5095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1612.255441][ T5095] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1612.292056][ T5095] usb 2-1: Manufacturer: ᰉ
[ 1612.304444][ T5095] usb 2-1: SerialNumber:  
[ 1612.549210][T17080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1612.609344][T17080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1612.619570][T15118] Bluetooth: hci2: command 0x0406 tx timeout
[ 1612.738504][T17093] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1612.757006][ T5095] hub 2-1:7.243: bad descriptor, ignoring hub
[ 1612.806174][ T5095] hub 2-1:7.243: probe with driver hub failed with error -5
[ 1612.860143][ T5095] option 2-1:7.243: GSM modem (1-port) converter detected
[ 1612.945182][ T5095] usb 2-1: USB disconnect, device number 50
[ 1612.974893][ T5095] option 2-1:7.243: device disconnected
[ 1613.066093][   T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1613.126161][   T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1613.549075][   T25] [drm:udl_init] *ERROR* Selecting channel failed
[ 1613.707147][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.716095][   T25] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 1613.723782][   T25] [drm] Initialized udl on minor 2
[ 1613.725481][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.739435][   T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1613.754146][   T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1613.770112][ T5095] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1613.866491][   T25] usb 4-1: USB disconnect, device number 50
[ 1613.884357][ T5095] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1613.907560][ T5095] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1614.656425][T17111] FAULT_INJECTION: forcing a failure.
[ 1614.656425][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1614.699011][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'.
[ 1614.703170][T17111] CPU: 1 PID: 17111 Comm: syz.4.2885 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1614.718170][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1614.728244][T17111] Call Trace:
[ 1614.731537][T17111]  <TASK>
[ 1614.734476][T17111]  dump_stack_lvl+0x16c/0x1f0
[ 1614.739179][T17111]  should_fail_ex+0x497/0x5b0
[ 1614.743880][T17111]  _copy_from_iter+0x2a1/0x1140
[ 1614.748767][T17111]  ? __alloc_skb+0x1fe/0x380
[ 1614.753414][T17111]  ? __pfx__copy_from_iter+0x10/0x10
[ 1614.758751][T17111]  ? __virt_addr_valid+0x5e/0x580
[ 1614.763828][T17111]  ? __phys_addr_symbol+0x30/0x80
[ 1614.768867][T17111]  ? __check_object_size+0x48e/0x720
[ 1614.774168][T17111]  netlink_sendmsg+0x813/0xd70
[ 1614.779132][T17111]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1614.784470][T17111]  ? __import_iovec+0x1fd/0x6e0
[ 1614.789349][T17111]  ____sys_sendmsg+0xab5/0xc90
[ 1614.794126][T17111]  ? copy_msghdr_from_user+0x10b/0x160
[ 1614.799606][T17111]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1614.804902][T17111]  ? find_held_lock+0x2d/0x110
[ 1614.809684][T17111]  ? __pfx___lock_acquire+0x10/0x10
[ 1614.815088][T17111]  ___sys_sendmsg+0x135/0x1e0
[ 1614.819967][T17111]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1614.825191][T17111]  ? ksys_write+0x21c/0x260
[ 1614.829718][T17111]  ? __fget_light+0x173/0x210
[ 1614.834440][T17111]  __sys_sendmsg+0x117/0x1f0
[ 1614.839059][T17111]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1614.844204][T17111]  do_syscall_64+0xcd/0x250
[ 1614.848742][T17111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1614.854688][T17111] RIP: 0033:0x7f0a8d775bd9
[ 1614.859125][T17111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1614.878802][T17111] RSP: 002b:00007f0a8e5c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1614.887262][T17111] RAX: ffffffffffffffda RBX: 00007f0a8d903f60 RCX: 00007f0a8d775bd9
[ 1614.895257][T17111] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[ 1614.903256][T17111] RBP: 00007f0a8e5c70a0 R08: 0000000000000000 R09: 0000000000000000
[ 1614.911256][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1614.919261][T17111] R13: 000000000000000b R14: 00007f0a8d903f60 R15: 00007ffc5a194128
[ 1614.927252][T17111]  </TASK>
[ 1615.188190][T17113] dlm: no locking on control device
[ 1616.404415][T15118] Bluetooth: hci2: unexpected event 0x30 length: 56 > 3
[ 1616.859891][T17133] FAULT_INJECTION: forcing a failure.
[ 1616.859891][T17133] name failslab, interval 1, probability 0, space 0, times 0
[ 1616.939237][T17133] CPU: 0 PID: 17133 Comm: syz.3.2889 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1616.949500][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1616.959616][T17133] Call Trace:
[ 1616.962929][T17133]  <TASK>
[ 1616.965881][T17133]  dump_stack_lvl+0x16c/0x1f0
[ 1616.970599][T17133]  should_fail_ex+0x497/0x5b0
[ 1616.975337][T17133]  should_failslab+0x9/0x20
[ 1616.979926][T17133]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 1616.985428][T17133]  ? taskstats_exit+0x656/0xbe0
[ 1616.990329][T17133]  taskstats_exit+0x656/0xbe0
[ 1616.995031][T17133]  ? __pfx_taskstats_exit+0x10/0x10
[ 1617.000355][T17133]  do_exit+0x842/0x2ba0
[ 1617.004555][T17133]  ? do_group_exit+0x1c3/0x2a0
[ 1617.009364][T17133]  ? __pfx_lock_release+0x10/0x10
[ 1617.014430][T17133]  ? __pfx_do_exit+0x10/0x10
[ 1617.019059][T17133]  do_group_exit+0xd3/0x2a0
[ 1617.023629][T17133]  __x64_sys_exit_group+0x3e/0x50
[ 1617.028700][T17133]  do_syscall_64+0xcd/0x250
[ 1617.033252][T17133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1617.039217][T17133] RIP: 0033:0x7fe88ef75bd9
[ 1617.043718][T17133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1617.063365][T17133] RSP: 002b:00007fe88fca9a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1617.071902][T17133] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fe88ef75bd9
[ 1617.079922][T17133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b
[ 1617.087920][T17133] RBP: 00007fe88fcaa0a0 R08: 00007fe88fca9e07 R09: 000000000000000b
[ 1617.095913][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1617.103916][T17133] R13: 000000000000006e R14: 00007fe88f1041e8 R15: 00007ffc718f2018
[ 1617.111922][T17133]  </TASK>
[ 1617.285824][T17136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1617.292434][T17136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1617.318962][T17136] vhci_hcd vhci_hcd.0: Device attached
[ 1617.389111][T17140] vhci_hcd: connection closed
[ 1617.390163][ T1089] vhci_hcd: stop threads
[ 1617.402230][ T1089] vhci_hcd: release socket
[ 1617.406848][ T1089] vhci_hcd: disconnect device
[ 1617.500024][T10794] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1617.894692][T10794] usb 5-1: descriptor type invalid, skip
[ 1617.984900][T10794] usb 5-1: config 7 has an invalid interface number: 243 but max is 3
[ 1618.080719][T10794] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1618.139004][T10794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1618.214224][T10794] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1618.245407][T10794] usb 5-1: config 7 has no interface number 0
[ 1618.308277][T10794] usb 5-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1618.330976][T10794] usb 5-1: config 7 interface 243 has no altsetting 0
[ 1618.373133][T10794] usb 5-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1618.387436][T10794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.469355][T15118] Bluetooth: hci2: command 0x0406 tx timeout
[ 1618.548838][T10794] usb 5-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1618.605054][T10794] usb 5-1: Manufacturer: ᰉ
[ 1618.617721][T10794] usb 5-1: SerialNumber:  
[ 1618.713841][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'.
[ 1618.821253][T17157] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1619.016123][T17137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1619.029409][T17137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1619.071864][T10794] hub 5-1:7.243: bad descriptor, ignoring hub
[ 1619.095596][ T5095] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1619.110116][T10794] hub 5-1:7.243: probe with driver hub failed with error -5
[ 1619.218058][T10794] option 5-1:7.243: GSM modem (1-port) converter detected
[ 1619.370802][T10794] usb 5-1: USB disconnect, device number 38
[ 1619.467725][ T5095] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1619.500580][T10794] option 5-1:7.243: device disconnected
[ 1619.517767][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1619.656296][ T5095] usb 4-1: config 0 descriptor??
[ 1620.317491][   T29] audit: type=1400 audit(1720305651.186:537): avc:  denied  { mount } for  pid=17163 comm="syz.4.2898" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1620.329272][ T5095] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1620.371110][ T5095] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1620.442594][   T29] audit: type=1400 audit(1720305651.326:538): avc:  denied  { unmount } for  pid=14181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1620.460979][T15118] Bluetooth: hci6: command 0x0406 tx timeout
[ 1620.488122][ T5095] [drm:udl_init] *ERROR* Selecting channel failed
[ 1620.649048][ T5095] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 1620.696383][ T5095] [drm] Initialized udl on minor 2
[ 1620.709245][ T5095] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1620.729334][ T5095] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1620.739501][T17011] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1620.747719][T17011] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1620.781326][ T5095] usb 4-1: USB disconnect, device number 51
[ 1620.904975][ T5094] Bluetooth: hci0: unexpected event 0x30 length: 56 > 3
[ 1621.089264][ T5094] Bluetooth: hci4: ACL packet for unknown connection handle 0
[ 1622.181315][T17182] FAULT_INJECTION: forcing a failure.
[ 1622.181315][T17182] name failslab, interval 1, probability 0, space 0, times 0
[ 1622.307547][T17182] CPU: 1 PID: 17182 Comm: syz.3.2903 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1622.317797][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1622.327957][T17182] Call Trace:
[ 1622.331251][T17182]  <TASK>
[ 1622.334193][T17182]  dump_stack_lvl+0x16c/0x1f0
[ 1622.339074][T17182]  should_fail_ex+0x497/0x5b0
[ 1622.343785][T17182]  should_failslab+0x9/0x20
[ 1622.348323][T17182]  kmalloc_trace_noprof+0x6b/0x300
[ 1622.353479][T17182]  ? drm_atomic_state_alloc+0xb8/0x120
[ 1622.359251][T17182]  drm_atomic_state_alloc+0xb8/0x120
[ 1622.364600][T17182]  drm_mode_atomic_ioctl+0x3a3/0x2640
[ 1622.370006][T17182]  ? __pfx___lock_acquire+0x10/0x10
[ 1622.375234][T17182]  ? __pfx___lock_acquire+0x10/0x10
[ 1622.380461][T17182]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1622.386324][T17182]  ? lock_acquire+0x1b1/0x560
[ 1622.391048][T17182]  ? find_held_lock+0x2d/0x110
[ 1622.395837][T17182]  ? do_raw_spin_unlock+0x172/0x230
[ 1622.401055][T17182]  drm_ioctl_kernel+0x1ec/0x3e0
[ 1622.405929][T17182]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1622.411864][T17182]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1622.417271][T17182]  drm_ioctl+0x5dc/0xc00
[ 1622.421550][T17182]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1622.427385][T17182]  ? __pfx_drm_ioctl+0x10/0x10
[ 1622.432193][T17182]  ? selinux_file_ioctl+0xb4/0x270
[ 1622.437323][T17182]  ? __pfx_drm_ioctl+0x10/0x10
[ 1622.442124][T17182]  __x64_sys_ioctl+0x193/0x220
[ 1622.446927][T17182]  do_syscall_64+0xcd/0x250
[ 1622.451456][T17182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1622.457401][T17182] RIP: 0033:0x7fe88ef75bd9
[ 1622.461932][T17182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1622.481859][T17182] RSP: 002b:00007fe88fd0d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1622.490294][T17182] RAX: ffffffffffffffda RBX: 00007fe88f103f60 RCX: 00007fe88ef75bd9
[ 1622.498276][T17182] RDX: 0000000020000500 RSI: 00000000c03864bc RDI: 0000000000000003
[ 1622.506275][T17182] RBP: 00007fe88fd0d0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1622.514302][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1622.522327][T17182] R13: 000000000000000b R14: 00007fe88f103f60 R15: 00007ffc718f2018
[ 1622.530429][T17182]  </TASK>
[ 1623.025960][ T5094] Bluetooth: hci0: command 0x0406 tx timeout
[ 1623.340561][T17186] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1623.347162][T17186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1623.363037][T17186] vhci_hcd vhci_hcd.0: Device attached
[ 1623.420467][T17188] vhci_hcd: connection closed
[ 1623.420977][T13921] vhci_hcd: stop threads
[ 1623.437442][T13921] vhci_hcd: release socket
[ 1623.442203][T13921] vhci_hcd: disconnect device
[ 1623.495816][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1625.936292][T17211] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1626.333914][T17209] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1627.238310][T17220] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1630.078514][T17243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1631.099576][T17250] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1631.115335][T17250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1631.193194][T17250] vhci_hcd vhci_hcd.0: Device attached
[ 1631.240113][T17252] vhci_hcd: connection closed
[ 1631.249960][T12847] vhci_hcd: stop threads
[ 1631.278838][T12847] vhci_hcd: release socket
[ 1631.288929][T10794] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1631.319525][T12847] vhci_hcd: disconnect device
[ 1631.388973][T17011] vhci_hcd: vhci_device speed not set
[ 1631.692236][ T5094] Bluetooth: hci4: ACL packet for unknown connection handle 1993
[ 1632.812231][T17265] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1632.972754][T10794] usb 5-1: device descriptor read/all, error -71
[ 1633.931535][T17275] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1634.673155][   T29] audit: type=1400 audit(1720305665.556:539): avc:  denied  { write } for  pid=17286 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1634.778133][   T29] audit: type=1400 audit(1720305665.556:540): avc:  denied  { nlmsg_read } for  pid=17286 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1634.858908][   T29] audit: type=1400 audit(1720305665.696:541): avc:  denied  { write } for  pid=17286 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1635.297953][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'.
[ 1635.390825][T17284] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1636.280096][T17296] veth3: entered allmulticast mode
[ 1636.557091][T17308] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1636.563692][T17308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1636.876895][T17308] vhci_hcd vhci_hcd.0: Device attached
[ 1637.946684][T17312] vhci_hcd: connection closed
[ 1638.076903][   T25] vhci_hcd: vhci_device speed not set
[ 1638.129410][ T2418] vhci_hcd: stop threads
[ 1638.133800][ T2418] vhci_hcd: release socket
[ 1638.149376][ T2418] vhci_hcd: disconnect device
[ 1638.159318][   T25] usb 17-1: new full-speed USB device number 8 using vhci_hcd
[ 1638.186327][   T25] usb 17-1: enqueue for inactive port 0
[ 1638.288959][   T25] vhci_hcd: vhci_device speed not set
[ 1638.405055][ T5094] Bluetooth: hci1: ACL packet for unknown connection handle 1993
[ 1639.504648][T17331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1639.798066][T17324] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1639.984186][   T29] audit: type=1400 audit(1720305670.866:542): avc:  denied  { write } for  pid=17336 comm="syz.4.2939" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1640.048873][   T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1640.108053][T17337] overlayfs: failed to resolve './file2': -2
[ 1640.300858][   T45] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1640.338228][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.349141][T17339] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2939'.
[ 1640.395366][   T45] usb 3-1: config 0 descriptor??
[ 1642.088791][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1642.593631][   T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1642.671891][   T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1642.854446][   T45] [drm:udl_init] *ERROR* Selecting channel failed
[ 1643.443092][   T45] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1643.512441][   T45] [drm] Initialized udl on minor 2
[ 1643.532945][   T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1643.564203][   T45] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1643.864909][ T5095] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1643.880032][   T45] usb 3-1: USB disconnect, device number 48
[ 1644.837211][T17376] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1645.330784][ T5095] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1645.677438][T17360] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1645.684621][ T5094] Bluetooth: hci4: ACL packet for unknown connection handle 1993
[ 1645.924685][   T29] audit: type=1400 audit(1720305676.806:543): avc:  denied  { write } for  pid=17382 comm="syz.4.2949" path="socket:[72891]" dev="sockfs" ino=72891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1646.002705][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'.
[ 1646.259484][T17365] veth13: entered allmulticast mode
[ 1646.298369][T17381] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1647.018523][   T29] audit: type=1400 audit(1720305677.886:544): avc:  denied  { relabelfrom } for  pid=17390 comm="syz.1.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1647.121605][   T29] audit: type=1400 audit(1720305677.886:545): avc:  denied  { relabelto } for  pid=17390 comm="syz.1.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1647.156610][ T5095] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1647.349894][ T5095] usb 4-1: Using ep0 maxpacket: 16
[ 1647.376044][T17401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1647.380830][ T5095] usb 4-1: config 0 has an invalid interface number: 215 but max is 0
[ 1647.419754][ T5095] usb 4-1: config 0 has no interface number 0
[ 1647.426052][ T5095] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1647.455988][ T5095] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=a6.00
[ 1647.481980][ T5095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1647.511652][ T5095] usb 4-1: Product: syz
[ 1647.515909][ T5095] usb 4-1: Manufacturer: syz
[ 1647.533184][ T5095] usb 4-1: SerialNumber: syz
[ 1647.581085][ T5095] usb 4-1: config 0 descriptor??
[ 1647.619730][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'.
[ 1647.805218][T17404] bridge_slave_1: left allmulticast mode
[ 1647.836695][   T29] audit: type=1400 audit(1720305678.706:546): avc:  denied  { connect } for  pid=17385 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1648.891233][T17404] bridge_slave_1: left promiscuous mode
[ 1648.919518][T17404] bridge1: port 1(bridge_slave_1) entered disabled state
[ 1650.289026][T17404] bridge2: port 1(bridge_slave_1) entered blocking state
[ 1650.320036][T17404] bridge2: port 1(bridge_slave_1) entered disabled state
[ 1650.327662][T17404] bridge_slave_1: entered allmulticast mode
[ 1650.337558][T17404] bridge_slave_1: entered promiscuous mode
[ 1650.770033][ T5094] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 1652.248382][ T5140] usb 4-1: USB disconnect, device number 52
[ 1653.400228][T17430] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1653.754104][T17428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1653.762212][T17433] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1654.021811][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'.
[ 1654.288175][T17434] bridge_slave_1: left allmulticast mode
[ 1654.320021][T17434] bridge_slave_1: left promiscuous mode
[ 1654.399175][T17434] bridge2: port 1(bridge_slave_1) entered disabled state
[ 1654.542044][T17434] bridge3: port 1(bridge_slave_1) entered blocking state
[ 1654.628950][T17434] bridge3: port 1(bridge_slave_1) entered disabled state
[ 1654.718554][T17434] bridge_slave_1: entered allmulticast mode
[ 1654.792764][T17434] bridge_slave_1: entered promiscuous mode
[ 1662.674863][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1664.193034][ T5094] Bluetooth: hci4: unexpected event 0x30 length: 56 > 3
[ 1664.297047][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'.
[ 1664.370524][T17501] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1664.608574][T17491] bridge_slave_1: left allmulticast mode
[ 1664.738824][T17491] bridge_slave_1: left promiscuous mode
[ 1664.755776][T17491] bridge7: port 1(bridge_slave_1) entered disabled state
[ 1664.832680][T17491] bridge8: port 1(bridge_slave_1) entered blocking state
[ 1664.936522][T17491] bridge8: port 1(bridge_slave_1) entered disabled state
[ 1665.017810][T17491] bridge_slave_1: entered allmulticast mode
[ 1666.218833][ T5094] Bluetooth: hci4: command 0x0406 tx timeout
[ 1666.525464][T17491] bridge_slave_1: entered promiscuous mode
[ 1667.348371][   T29] audit: type=1400 audit(1720305698.226:547): avc:  denied  { mounton } for  pid=17515 comm="syz.0.2987" path="/proc/254/task" dev="proc" ino=72176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1668.658527][T17521] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 1669.676330][   T29] audit: type=1400 audit(1720305700.556:548): avc:  denied  { write } for  pid=17534 comm="syz.1.2991" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[ 1669.817207][ T5094] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3
[ 1669.939050][ T5094] Bluetooth: hci1: unexpected event 0x30 length: 56 > 3
[ 1670.136599][T17542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1670.221855][T17548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1670.320849][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'.
[ 1670.343057][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'.
[ 1670.524377][T17548] bridge_slave_1: left allmulticast mode
[ 1670.553915][T17548] bridge_slave_1: left promiscuous mode
[ 1670.598055][T17548] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1670.738222][T17548] bridge1: port 1(bridge_slave_1) entered blocking state
[ 1670.747202][T17548] bridge1: port 1(bridge_slave_1) entered disabled state
[ 1670.759163][T17548] bridge_slave_1: entered allmulticast mode
[ 1670.776681][T17548] bridge_slave_1: entered promiscuous mode
[ 1671.981300][ T5094] Bluetooth: hci1: command 0x0406 tx timeout
[ 1672.834092][T17570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.067947][T17570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'.
[ 1673.111972][T17573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1673.118581][T17573] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1673.180022][T17573] vhci_hcd vhci_hcd.0: Device attached
[ 1673.234487][T17570] bridge_slave_1: left allmulticast mode
[ 1673.262951][T17570] bridge_slave_1: left promiscuous mode
[ 1673.283411][T17570] bridge8: port 1(bridge_slave_1) entered disabled state
[ 1673.315066][T17570] bridge9: port 1(bridge_slave_1) entered blocking state
[ 1673.332640][T17570] bridge9: port 1(bridge_slave_1) entered disabled state
[ 1673.346391][T17570] bridge_slave_1: entered allmulticast mode
[ 1673.376742][T17570] bridge_slave_1: entered promiscuous mode
[ 1673.406442][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'.
[ 1673.519609][ T5142] usb 18-1: SetAddress Request (12) to port 0
[ 1673.536232][ T5142] usb 18-1: new SuperSpeed USB device number 12 using vhci_hcd
[ 1673.547379][T17575] vhci_hcd: connection closed
[ 1673.547884][ T2418] vhci_hcd: stop threads
[ 1673.602320][ T2418] vhci_hcd: release socket
[ 1673.626175][ T2418] vhci_hcd: disconnect device
[ 1673.727431][   T29] audit: type=1400 audit(1720305704.606:549): avc:  denied  { bind } for  pid=17583 comm="syz.2.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1674.056688][ T5140] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1674.238873][ T5094] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3
[ 1674.287440][ T5140] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1674.329303][ T5094] Bluetooth: hci2: unexpected event 0x30 length: 56 > 3
[ 1674.329924][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1674.353114][ T5140] usb 3-1: Product: syz
[ 1674.359174][ T5140] usb 3-1: Manufacturer: syz
[ 1674.366636][ T5140] usb 3-1: SerialNumber: syz
[ 1674.400529][ T5140] usb 3-1: config 0 descriptor??
[ 1674.420003][ T5140] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 049
[ 1674.709477][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.716202][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.882323][T17594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1674.925405][T17594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1676.408846][ T5094] Bluetooth: hci2: command 0x0406 tx timeout
[ 1676.708894][ T5140]  (null): failure setting delay to 10us
[ 1676.714681][ T5140] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[ 1676.754309][ T5140] usb 3-1: USB disconnect, device number 49
[ 1678.699051][ T5142] usb 18-1: device descriptor read/8, error -110
[ 1679.528333][T17620] 9pnet_fd: Insufficient options for proto=fd
[ 1679.741209][ T5142] usb usb18-port1: attempt power cycle
[ 1679.939530][ T5094] Bluetooth: hci6: unexpected event 0x30 length: 56 > 3
[ 1680.028985][   T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1680.321388][   T45] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1680.342250][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.370301][   T45] usb 3-1: config 0 descriptor??
[ 1680.416207][ T5094] Bluetooth: hci1: unexpected event 0x30 length: 56 > 3
[ 1680.601331][ T5142] usb usb18-port1: unable to enumerate USB device
[ 1681.218107][ T5094] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3
[ 1681.479619][   T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1681.900202][ T5094] Bluetooth: hci6: command 0x0406 tx timeout
[ 1682.148891][   T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1682.157580][   T45] [drm:udl_init] *ERROR* Selecting channel failed
[ 1682.192656][   T45] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1682.220191][   T45] [drm] Initialized udl on minor 2
[ 1682.271531][   T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1682.305579][ T5095] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1682.318913][   T45] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1682.361326][ T5094] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1682.374817][ T5095] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1682.399444][   T45] usb 3-1: USB disconnect, device number 50
[ 1682.433891][ T5095] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1682.478899][ T5094] Bluetooth: hci1: command 0x0406 tx timeout
[ 1686.617535][T17659] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1686.635663][T17659] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1688.762880][ T5094] Bluetooth: hci4: unexpected event 0x30 length: 56 > 3
[ 1688.884669][T17659] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1688.934048][T17659] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1689.129407][T17659] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1689.150128][T17659] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1689.183145][T17659] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1689.206963][T17659] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1689.599713][T17659] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1689.605704][T17659] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1689.823754][T17659] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1689.844336][T17659] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1691.548124][T14581] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1691.555677][T17732] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[ 1691.573789][T17732] SELinux:  Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped).
[ 1691.594774][   T29] audit: type=1400 audit(1720305722.446:550): avc:  denied  { relabelto } for  pid=17731 comm="syz.3.3040" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0"
[ 1691.703479][T17734] overlayfs: workdir and upperdir must be separate subtrees
[ 1691.756068][   T29] audit: type=1400 audit(1720305722.446:551): avc:  denied  { associate } for  pid=17731 comm="syz.3.3040" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0"
[ 1691.878274][   T29] audit: type=1400 audit(1720305722.536:552): avc:  denied  { relabelto } for  pid=17731 comm="syz.3.3040" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_object_t:s0"
[ 1691.944810][   T29] audit: type=1400 audit(1720305722.536:553): avc:  denied  { associate } for  pid=17731 comm="syz.3.3040" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0"
[ 1691.964954][T14581] usb 1-1: descriptor type invalid, skip
[ 1691.991181][T14581] usb 1-1: config 7 has an invalid interface number: 243 but max is 3
[ 1692.017441][T14581] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1692.048732][T14581] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1692.098751][T14581] usb 1-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1692.153114][T14581] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1692.173448][T14581] usb 1-1: config 7 has no interface number 0
[ 1692.195879][T14581] usb 1-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1692.253881][T14581] usb 1-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1692.841003][T14581] usb 1-1: config 7 interface 243 has no altsetting 0
[ 1693.066084][T14581] usb 1-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1693.092139][T14581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1693.133991][T14581] usb 1-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1693.289155][T14581] usb 1-1: Manufacturer: ᰉ
[ 1693.324854][T14581] usb 1-1: SerialNumber:  
[ 1693.586595][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1693.635895][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1693.686338][T14581] hub 1-1:7.243: bad descriptor, ignoring hub
[ 1693.720600][T14581] hub 1-1:7.243: probe with driver hub failed with error -5
[ 1693.760355][T14581] option 1-1:7.243: GSM modem (1-port) converter detected
[ 1693.850897][T14581] usb 1-1: USB disconnect, device number 41
[ 1693.869852][T14581] option 1-1:7.243: device disconnected
[ 1697.061242][T17802] netlink: 632 bytes leftover after parsing attributes in process `syz.3.3056'.
[ 1697.126119][   T29] audit: type=1326 audit(1720305728.006:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.163036][   T29] audit: type=1326 audit(1720305728.026:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.237445][   T29] audit: type=1326 audit(1720305728.036:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.356292][   T29] audit: type=1326 audit(1720305728.036:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.458847][   T29] audit: type=1326 audit(1720305728.076:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.568870][   T29] audit: type=1326 audit(1720305728.076:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.718890][   T29] audit: type=1326 audit(1720305728.076:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1697.928868][T15667] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1699.049595][T17819] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1699.085795][T15667] usb 5-1: descriptor type invalid, skip
[ 1699.437709][T15667] usb 5-1: config 7 has an invalid interface number: 243 but max is 3
[ 1699.446199][   T29] audit: type=1326 audit(1720305728.086:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1699.504854][T15667] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1699.548378][   T29] audit: type=1326 audit(1720305728.086:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1699.577806][T15667] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1699.599383][T15667] usb 5-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1699.611397][T15667] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1699.620531][T15667] usb 5-1: config 7 has no interface number 0
[ 1699.627582][T15667] usb 5-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1699.641753][T15667] usb 5-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1699.655399][T15667] usb 5-1: config 7 interface 243 has no altsetting 0
[ 1699.674205][T15667] usb 5-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1699.684531][T15667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.693112][T15667] usb 5-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1699.700965][T15667] usb 5-1: Manufacturer: ᰉ
[ 1699.707081][T15667] usb 5-1: SerialNumber:  
[ 1699.825199][   T29] audit: type=1326 audit(1720305728.086:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17800 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88ef75bd9 code=0x7ffc0000
[ 1700.845743][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1701.019359][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1701.093015][T15667] hub 5-1:7.243: bad descriptor, ignoring hub
[ 1701.138634][T15667] hub 5-1:7.243: probe with driver hub failed with error -5
[ 1701.221979][T15667] option 5-1:7.243: GSM modem (1-port) converter detected
[ 1701.310226][T15667] usb 5-1: USB disconnect, device number 41
[ 1701.342444][T15667] option 5-1:7.243: device disconnected
[ 1705.073471][   T29] kauditd_printk_skb: 42 callbacks suppressed
[ 1705.073637][   T29] audit: type=1400 audit(1720305735.946:606): avc:  denied  { map } for  pid=17884 comm="syz.3.3072" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1705.499128][   T29] audit: type=1400 audit(1720305736.366:607): avc:  denied  { write } for  pid=17884 comm="syz.3.3072" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1705.621034][   T29] audit: type=1400 audit(1720305736.426:608): avc:  denied  { ioctl } for  pid=17884 comm="syz.3.3072" path="/dev/input/mice" dev="devtmpfs" ino=832 ioctlcmd=0x64be scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1708.258829][T15667] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1708.772652][T17927] 9pnet_fd: Insufficient options for proto=fd
[ 1708.851842][   T29] audit: type=1400 audit(1720305739.726:609): avc:  denied  { remount } for  pid=17925 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1708.960339][T15667] usb 2-1: descriptor type invalid, skip
[ 1708.980584][T15667] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[ 1709.007268][T15667] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1709.044631][T15667] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1709.065097][T15667] usb 2-1: config 7 has an invalid descriptor of length 209, skipping remainder of the config
[ 1709.114034][T15667] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1709.169356][T15667] usb 2-1: config 7 has no interface number 0
[ 1709.190778][T15667] usb 2-1: config 7 interface 243 altsetting 6 has an invalid endpoint descriptor of length 4, skipping
[ 1709.234235][T15667] usb 2-1: config 7 interface 243 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1709.286983][T15667] usb 2-1: config 7 interface 243 has no altsetting 0
[ 1709.309444][T15667] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1709.342485][T15667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1709.435061][T15667] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1709.458493][T15667] usb 2-1: Manufacturer: ᰉ
[ 1709.473420][T15667] usb 2-1: SerialNumber:  
[ 1709.876319][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1709.896749][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1710.197024][T15667] hub 2-1:7.243: bad descriptor, ignoring hub
[ 1710.216322][T15667] hub 2-1:7.243: probe with driver hub failed with error -5
[ 1710.237050][T15667] option 2-1:7.243: GSM modem (1-port) converter detected
[ 1710.584818][T15667] usb 2-1: USB disconnect, device number 51
[ 1710.601276][T15667] option 2-1:7.243: device disconnected
[ 1713.289461][T17982] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[ 1713.296073][T17982] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1713.393979][T17982] vhci_hcd vhci_hcd.0: Device attached
[ 1713.433534][T17987] vhci_hcd: connection closed
[ 1713.433993][T13572] vhci_hcd: stop threads
[ 1713.457794][T13572] vhci_hcd: release socket
[ 1713.469697][T13572] vhci_hcd: disconnect device
[ 1713.504180][T17669] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1713.709217][T17669] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1713.731759][T17669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.743401][T17669] usb 2-1: Product: syz
[ 1713.750911][T17669] usb 2-1: Manufacturer: syz
[ 1713.765655][T17669] usb 2-1: SerialNumber: syz
[ 1713.802091][T17669] usb 2-1: config 0 descriptor??
[ 1713.819487][T17669] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 052
[ 1714.155144][T17994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1714.166193][T17994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1714.397252][T17669]  (null): failure setting delay to 10us
[ 1714.407365][T17669] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[ 1714.442267][T17669] usb 2-1: USB disconnect, device number 52
[ 1715.317718][T18003] ------------[ cut here ]------------
[ 1715.324665][T18003] WARNING: CPU: 1 PID: 18003 at net/kcm/kcmsock.c:630 kcm_write_msgs+0x83e/0x16f0
[ 1715.334567][T18003] Modules linked in:
[ 1715.338528][T18003] CPU: 1 PID: 18003 Comm: syz.0.3094 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1715.349173][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1715.359452][T18003] RIP: 0010:kcm_write_msgs+0x83e/0x16f0
[ 1715.365093][T18003] Code: 07 48 c1 ea 03 0f b6 04 02 38 c8 7f 08 84 c0 0f 85 47 0e 00 00 41 c6 46 34 01 4c 89 74 24 20 e9 c6 f9 ff ff e8 73 1c 81 f7 90 <0f> 0b 90 41 bd ea ff ff ff e8 64 1c 81 f7 e8 5f 1c 81 f7 48 8b 44
[ 1715.384981][T18003] RSP: 0018:ffffc9000319f900 EFLAGS: 00010246
[ 1715.391289][T18003] RAX: 0000000000040000 RBX: ffff88823bdcaec0 RCX: ffffc90012b78000
[ 1715.399542][T18003] RDX: 0000000000040000 RSI: ffffffff8a0cc81d RDI: 0000000000000001
[ 1715.407584][T18003] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1715.415683][T18003] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 1715.423813][T18003] R13: 0000000000011000 R14: ffff88802c8cd280 R15: ffff888078a4e100
[ 1715.431908][T18003] FS:  00007f2df2b106c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1715.440997][T18003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1715.447827][T18003] CR2: 00007f165bdd0000 CR3: 000000005a75c000 CR4: 00000000003526f0
[ 1715.456021][T18003] Call Trace:
[ 1715.459502][T18003]  <TASK>
[ 1715.462484][T18003]  ? show_regs+0x8c/0xa0
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[ 1715.466810][T18003]  ? __warn+0xe5/0x3c0
[ 1715.471070][T18003]  ? kcm_write_msgs+0x83e/0x16f0
[ 1715.476102][T18003]  ? report_bug+0x3c0/0x580
[ 1715.480732][T18003]  ? handle_bug+0x3d/0x70
[ 1715.485142][T18003]  ? exc_invalid_op+0x17/0x50
[ 1715.489991][T18003]  ? asm_exc_invalid_op+0x1a/0x20
[ 1715.495111][T18003]  ? kcm_write_msgs+0x83d/0x16f0
[ 1715.500261][T18003]  ? kcm_write_msgs+0x83e/0x16f0
[ 1715.505291][T18003]  ? __pfx_kcm_write_msgs+0x10/0x10
[ 1715.510742][T18003]  ? mark_held_locks+0x9f/0xe0
[ 1715.515599][T18003]  ? kcm_sendmsg+0x1cd/0x2920
[ 1715.520409][T18003]  ? __local_bh_enable_ip+0xa4/0x120
[ 1715.525779][T18003]  kcm_sendmsg+0x22b9/0x2920
[ 1715.530512][T18003]  ? __pfx_sock_has_perm+0x10/0x10
[ 1715.535709][T18003]  ? __pfx_kcm_sendmsg+0x10/0x10
[ 1715.540857][T18003]  ? inode_has_perm+0x16f/0x1d0
[ 1715.545804][T18003]  sock_write_iter+0x50a/0x5c0
[ 1715.550684][T18003]  ? __pfx_sock_write_iter+0x10/0x10
[ 1715.556049][T18003]  ? security_file_permission+0x98/0xc0
[ 1715.561810][T18003]  vfs_write+0x6b6/0x1140
[ 1715.566233][T18003]  ? __pfx_sock_write_iter+0x10/0x10
[ 1715.571676][T18003]  ? __pfx_vfs_write+0x10/0x10
[ 1715.576529][T18003]  ? do_futex+0x123/0x350
[ 1715.581350][T18003]  ? __fget_files+0x256/0x400
[ 1715.586124][T18003]  ? __fget_light+0x173/0x210
[ 1715.590952][T18003]  ksys_write+0x1f8/0x260
[ 1715.595581][T18003]  ? __pfx_ksys_write+0x10/0x10
[ 1715.600603][T18003]  do_syscall_64+0xcd/0x250
[ 1715.605192][T18003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1715.611427][T18003] RIP: 0033:0x7f2df1d75bd9
[ 1715.615917][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1715.635794][T18003] RSP: 002b:00007f2df2b10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1715.644448][T18003] RAX: ffffffffffffffda RBX: 00007f2df1f04110 RCX: 00007f2df1d75bd9
[ 1715.652622][T18003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 1715.661072][T18003] RBP: 00007f2df1de4aa1 R08: 0000000000000000 R09: 0000000000000000
[ 1715.669157][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1715.677206][T18003] R13: 000000000000006e R14: 00007f2df1f04110 R15: 00007ffea37d0e48
[ 1715.685339][T18003]  </TASK>
[ 1715.688416][T18003] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1715.695747][T18003] CPU: 1 PID: 18003 Comm: syz.0.3094 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1715.706050][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1715.716206][T18003] Call Trace:
[ 1715.719525][T18003]  <TASK>
[ 1715.722508][T18003]  dump_stack_lvl+0x3d/0x1f0
[ 1715.727131][T18003]  panic+0x6f5/0x7a0
[ 1715.731157][T18003]  ? __pfx_panic+0x10/0x10
[ 1715.735641][T18003]  ? show_trace_log_lvl+0x363/0x500
[ 1715.740917][T18003]  ? kcm_write_msgs+0x83e/0x16f0
[ 1715.745938][T18003]  check_panic_on_warn+0xab/0xb0
[ 1715.750943][T18003]  __warn+0xf1/0x3c0
[ 1715.754893][T18003]  ? kcm_write_msgs+0x83e/0x16f0
[ 1715.759880][T18003]  report_bug+0x3c0/0x580
[ 1715.764252][T18003]  handle_bug+0x3d/0x70
[ 1715.768455][T18003]  exc_invalid_op+0x17/0x50
[ 1715.773021][T18003]  asm_exc_invalid_op+0x1a/0x20
[ 1715.777921][T18003] RIP: 0010:kcm_write_msgs+0x83e/0x16f0
[ 1715.783536][T18003] Code: 07 48 c1 ea 03 0f b6 04 02 38 c8 7f 08 84 c0 0f 85 47 0e 00 00 41 c6 46 34 01 4c 89 74 24 20 e9 c6 f9 ff ff e8 73 1c 81 f7 90 <0f> 0b 90 41 bd ea ff ff ff e8 64 1c 81 f7 e8 5f 1c 81 f7 48 8b 44
[ 1715.803195][T18003] RSP: 0018:ffffc9000319f900 EFLAGS: 00010246
[ 1715.809305][T18003] RAX: 0000000000040000 RBX: ffff88823bdcaec0 RCX: ffffc90012b78000
[ 1715.817305][T18003] RDX: 0000000000040000 RSI: ffffffff8a0cc81d RDI: 0000000000000001
[ 1715.825322][T18003] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1715.833368][T18003] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 1715.841379][T18003] R13: 0000000000011000 R14: ffff88802c8cd280 R15: ffff888078a4e100
[ 1715.849414][T18003]  ? kcm_write_msgs+0x83d/0x16f0
[ 1715.854465][T18003]  ? __pfx_kcm_write_msgs+0x10/0x10
[ 1715.859989][T18003]  ? mark_held_locks+0x9f/0xe0
[ 1715.864811][T18003]  ? kcm_sendmsg+0x1cd/0x2920
[ 1715.869569][T18003]  ? __local_bh_enable_ip+0xa4/0x120
[ 1715.874893][T18003]  kcm_sendmsg+0x22b9/0x2920
[ 1715.879535][T18003]  ? __pfx_sock_has_perm+0x10/0x10
[ 1715.884692][T18003]  ? __pfx_kcm_sendmsg+0x10/0x10
[ 1715.889676][T18003]  ? inode_has_perm+0x16f/0x1d0
[ 1715.894569][T18003]  sock_write_iter+0x50a/0x5c0
[ 1715.899366][T18003]  ? __pfx_sock_write_iter+0x10/0x10
[ 1715.904685][T18003]  ? security_file_permission+0x98/0xc0
[ 1715.910268][T18003]  vfs_write+0x6b6/0x1140
[ 1715.914652][T18003]  ? __pfx_sock_write_iter+0x10/0x10
[ 1715.919967][T18003]  ? __pfx_vfs_write+0x10/0x10
[ 1715.924778][T18003]  ? do_futex+0x123/0x350
[ 1715.929152][T18003]  ? __fget_files+0x256/0x400
[ 1715.933870][T18003]  ? __fget_light+0x173/0x210
[ 1715.938585][T18003]  ksys_write+0x1f8/0x260
[ 1715.942964][T18003]  ? __pfx_ksys_write+0x10/0x10
[ 1715.947908][T18003]  do_syscall_64+0xcd/0x250
[ 1715.952465][T18003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1715.958408][T18003] RIP: 0033:0x7f2df1d75bd9
[ 1715.962851][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1715.982769][T18003] RSP: 002b:00007f2df2b10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1715.991233][T18003] RAX: ffffffffffffffda RBX: 00007f2df1f04110 RCX: 00007f2df1d75bd9
[ 1715.999236][T18003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 1716.007258][T18003] RBP: 00007f2df1de4aa1 R08: 0000000000000000 R09: 0000000000000000
[ 1716.015285][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1716.023284][T18003] R13: 000000000000006e R14: 00007f2df1f04110 R15: 00007ffea37d0e48
[ 1716.031305][T18003]  </TASK>
[ 1716.034701][T18003] Kernel Offset: disabled
[ 1716.039198][T18003] Rebooting in 86400 seconds..