last executing test programs:

47.475643017s ago: executing program 2 (id=1523):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x10000, 0x8, 0x401, 0x80, 0x0, [{0x5, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x7c, '\x00', 0x31}, {0x5, 0x3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x0, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x5}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x40, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x0, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x8}, {0x12, 0xe, 0x4, '\x00', 0x1}]}})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})

41.946770789s ago: executing program 2 (id=1537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
close_range(r2, r0, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) (async, rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfb, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0xb, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (rerun: 32)

41.39782965s ago: executing program 2 (id=1540):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4e, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

39.203800822s ago: executing program 2 (id=1545):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
syz_emit_ethernet(0x76, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = semget$private(0x0, 0x2, 0x2)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000))
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882)

37.560715381s ago: executing program 2 (id=1547):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_pts(0xffffffffffffffff, 0x1)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe})
getpid()

35.864193704s ago: executing program 2 (id=1551):
pipe(0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x580, @remote, 0x2}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040084)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x0, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010826bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001f006c1b93183b6a371d42f0500ef57c760180000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
epoll_create(0x1)

33.395489046s ago: executing program 0 (id=1557):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/86, 0x56}], 0x3, 0x5, 0x5)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)="ea8b1cb74879009e4b954b46ff711d8343bd92be97b4d9b4d10f515c66744ec630e9270667aaca332927132163042160f1fe9550a640e7c8e453c1a95ecacbae8946ebc797be958157f344af36c0abb6d7f4474065d783f276998ab7e875392d8d1559accb62701f77fd", 0x6a}, {0x0}, {0x0}, {&(0x7f0000000600)="e05dde45f184e5303fbaa2ef38ab0e4ded2a0dfa3bac07703161a7c5d30948a655c6992ffc4ae21131cfbefcbeab6e474974960d39ebe4bdfd3d7d7cc4de7862ec82b46eaf848ee97dacea7cf1ea3a8a49af5fe74b8d2d07edd9f080e115c17da20f0bbabaadda52d6f5b83101b75f831cafc528345df6199256571c09d9a72e44709c9fe49488ebd5da590a56fe7abec780cad7d95d482aea6a1c313f7cdfeb9eb1943caa2889fbeaf3ec59e6e76947dae0da8dc682f0fc668e7158ba296a01", 0xc0}, {&(0x7f00000006c0)="7937ab803520e9f0df90ef878c0395ceb588448db9b51bf5cc755f9777b17e49fe49e3f62ce6e1b66c116aeab93ffb506010f91de7275501a8faa4ed14ffcc94cc470730c3e2d3", 0x47}, {&(0x7f0000000740)="699f25cb96b87044f1bdef2b94f77597fe8e061ca46f83c61186c702b2ec8f4b791680ebed3fd708f3660403a7bd60886e0e16934dc1b1f9dcc1066682416272fc55377eeea72c26e4d3b2f26fd0d600e6ec82c86fda1d9f6b125c73a88e955e11bc6d7d8e544bdee1ac256e85d401cd80a30bdd7d2961c744d19fc8522c95ea6564e7e115f8f89a957eb67c844dc0590ee54d357ec15a4f79ddc1db514e6898117c962ed1b50d42863bb43e05520d1dad1ebfd80e571e7a58c3d77ccfa326cddba2013beb85270f6f12401a9a", 0xcd}], 0x6, &(0x7f0000001940)}, 0x4084024)
socket$vsock_stream(0x28, 0x1, 0x0)

19.020098732s ago: executing program 32 (id=1551):
pipe(0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x580, @remote, 0x2}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040084)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x0, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010826bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001f006c1b93183b6a371d42f0500ef57c760180000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
epoll_create(0x1)

18.906760402s ago: executing program 0 (id=1562):
sched_setscheduler(0x0, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="3a0004000000a7212277"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18.905007964s ago: executing program 4 (id=1563):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010102030109022b0001000000440904bd0002"], 0x0)

16.985470044s ago: executing program 1 (id=1565):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
syz_emit_ethernet(0x76, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = semget$private(0x0, 0x2, 0x2)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000))
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882)

16.138425883s ago: executing program 4 (id=1567):
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0)
syz_open_dev$loop(0x0, 0x3, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = gettid()
sched_getparam(r0, &(0x7f0000000240))
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0xc0045401, &(0x7f0000001280))
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000100)=@multiplanar_fd={0x1, 0x2, 0x4, 0x40, 0x80, {0x0, 0xea60}, {0x3, 0x8, 0x7, 0x2, 0x1a, 0xdf, "5fd0eb67"}, 0x5, 0x4, {&(0x7f0000000080)=[{0x5, 0x4a, {}, 0xe8}, {0xa, 0xed72, {}, 0x5}]}, 0x4, 0x0, r2})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r5, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

16.03821674s ago: executing program 0 (id=1568):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x7a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa54200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

15.839905146s ago: executing program 3 (id=1569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x110)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
clock_adjtime(0x17, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
r6 = getpid()
syz_pidfd_open(r6, 0x0)

14.159942718s ago: executing program 1 (id=1570):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x400, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xffffffff, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0xfffffffd, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x9, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0xfffffff8, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x29509faf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x3, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x30, 0x2d, 0x32, 0x7, 0x8, 0xcb, 0x5, 0x14d, 0x1}})
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4, 0x3, 0x0, 0x3}}, 0x2e)
setresgid(0xee00, 0xee01, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000028c0), r8)
sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000002ac0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x28, r9, 0x11, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080)
r10 = syz_open_procfs(r7, &(0x7f0000000040)='syscall\x00')
pread64(r10, &(0x7f0000000500)=""/19, 0x13, 0x40000000007)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

13.786778999s ago: executing program 4 (id=1571):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x7a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa54200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

12.154885415s ago: executing program 0 (id=1572):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
socket(0x28, 0x1, 0x0)
r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r2)
r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000088c000/0x4000)=nil, 0x4000}})
syz_open_dev$ttys(0xc, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f020})
r6 = epoll_create1(0x0)
r7 = inotify_init1(0x0)
r8 = dup(r7)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000140)={0x40002013})
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x44814)
gettid()
madvise(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x9)

11.66684001s ago: executing program 1 (id=1573):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_pts(0xffffffffffffffff, 0x1)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="fb82087a5cfdb924fc00af10b4cc1d9c94a489b70e6111c7aa7c1913dd46ee00000000000000078232b25768d2c59273c626519d7b5fe0c9a297020d856cb34c5b9e356803f5b4073983b29da3b9a3c7fcd25b6f71d05c22e45ac61a9b5e140a48bb43082ebd771f17b86b35de0d96aa2e1e5bd3790f3b858a553cbbf75206bfd2b7eebec06f7ec0fefe7244ac000810a92cd683da39f77fe81ab51af9056e301097ed7b589d0bac29957aae7dc1c89657d365bd78ce7c5535ae43960b88eeb62d16507a660b3d7010c2b9c3ff734f9b197f932adee5cdc437fd4fe766bb6bd675a8746338c23cfcccfa4056a86ad2a074ffa22e8a2fed3a9447d0a2e1e3"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe})
getpid()

10.553607722s ago: executing program 4 (id=1574):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x7a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa54200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

10.550172863s ago: executing program 0 (id=1575):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close(r1)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000040000"], 0x50)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000190c0))
request_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))

9.060101178s ago: executing program 1 (id=1576):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

7.902347125s ago: executing program 1 (id=1577):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1f, 0x4, @mcast1, 0x8}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000ffffaaaaaaaaaaaa86dd61fbddf000083aff00000000000000000000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, &(0x7f00000000c0), &(0x7f0000000000)='syzkaller\x00', 0x7fd7, 0x0, 0x0, 0x41000, 0xc0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xa, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x4, 0x5, 0x13, 0x5}], 0x10, 0xfffffffa}, 0x94)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@generic={0x8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x8880)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x75de0fa8, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "da8de478ebda05b730872f52ae68f14f07907a776278493e24c788b4b967338035dc0bc4e70e6b2d951eba456df861a2865ed8399c74a422b50d9e5f4a19d3d8296680acd68364ed9d521aa43ff7c4d336c127e0bbde540e2bb1a126384249debd2eca7e3d4f27841ce692ff2044c193bdf372d50eca80e3682973af13cac8773a4330ada37b4877912aebfc7fab50703da26e2156a1f2e9d5a7a2a0b4aa23ad53525ed9707721d639f8285412f1be711c38b05a6899d307c9871567839c4026217c17572227dbce5111baf9ef2cb2db3a8571da9198260b971a5186b298be17b703fdf9585036e12db2b86bd36162ed28bb9b159a5c039c4665208c272980ac"}]}}]}, 0x170}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e2f6465762f62728bbb2382cd9e0c7f29ca53cd75a1c4a7cce870436f5d7e"])
syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x4, 0xa100489, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x3fc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.713706552s ago: executing program 3 (id=1578):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

5.086066126s ago: executing program 3 (id=1579):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200), 0x0)
setreuid(0xee01, 0xee01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
close(0x3)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/159, 0x9f}], 0x1, 0xffffffff, 0xfff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000780)={0x8, {"90a915123a2da4e0ad52ea166adb2e9de55815b69ef9a52e8c7297bf82d49de2f9f4e1565f2706a42e94967c55fb4c5d659161ab42cf1bcfcf86ad1cd892b45aade1a5d48acd1fbf488f79927a062072fe26ac813205c5cdb76654d5d2a5f76014f75c52346bac80e350cde24b4bd75643deb5e31f4c5a38ecfee1ef7e0f8b14f5fa976735dcebce6ba4db374ae788f3cd6642b343017e37fde6c4d54221ded44c21248e1270a3bc2737401c15c976fe23a81f6bed2003ec0b86d8f59c40e53ce2ec3d90b623a6b3f01d6cf234efad8f068f8788e78d925bc5cb2b856cd7a8fdcaebb6250edde04b993b3efb3323aa0255ba99216ef1b161109ee3633fd91a99b1f32ddd5e9a212db0dcf5bbe25683cbea801044fa8de4cdee1de8439198c107f293f115d3ca639321646c8dae28c5d7827c0b452246b2fc333268d204751bf1b26ab38b00d603e19467c41305472084eab92f0b961e9ebd48ab6fe3a91058aeee4a3c03306be9769d54e74611395e6d95f35622fd4be734c1bed28ceb08ecf0165c9adf605b0dba6641b98689315b5d9521337bb98f2eedf44a984888d57f03168660b43f62e3972ccdb0d995e8ec24b6f63e6c23729284385b36b24a0985a9cc13776d5b02a2b31084e69fd07fae1fbaa667a76ca571be830a50ea1d3a377752e38b1aac3cc4306f290ca42e2f39276b31674ef67246ac84c9a51ce736d1d3e017cccd0311ef5500f3757fbb87ad74f02dc589e411cf34676d00ee7f1b63cd325114222dad8a622bd17f21d0d1883dae5077174838aa86861f64dd5e1ee72780209589ac0e098e8a059baf184bc5c83a6742e927607c5b7502de54e5fba6b02effcb6a393bff4b1033c2dabfd8ad3d060301dafcd59976e835136a1aae1c58617749b64a03ef15c8583b2787386552827808dcaf7b2bdc40135e91183d8b083f3af6bd49d84f767d6ddd124ea9487d2ac30893b905309bfe81a3827e8c48001c134873d7cff376d4053e81fe215fc98782f797bab63a8fb1f27365af5b94a419520e9d845774dc625e429bd1a52d04de9597ce1c2a73c21633ff4ec60d04864890c079bf9a2f6de4c4e5bbe65d35f47bff83b9ed07fefbdcd8e812bfa1c490612ebd7cad8ac4c052d35f35dd2cab6a5cb9dafbafbf094f2e5756ecf979cf5329647586f5288444c2c51a970009213de21941047b5e70192c6d68db8932e476bc6844a084488e2c376abdc0ab69c791303e44c5f71e09ee68f976537280e0a0d1f719d4a46068bada54c3c292df859ed46dbc6cfdfd002347312a3f9da32a18bc350408b3b25dc043042663d938c275c26e468cdce7969722ed518723a65736c867c638fea37bcdefe6c7b4bbddfadef3733646bebf03b435a7922a8aeb127626226257f3c770a0d06b78fc960ab929c64ccec72db2456827faa6cb7150a8438b3f49d631ffc1a090c70d9436b231bb7c87fde3ec521e67c91a772fc46c070208f36cdfbb8fba0e7fc278b9916ec07e36c9d529221f4947cba2bd7c6f14a4fe4de7d4863774f078793afb851b32a03b8490b36cf83bd5080d67e102ced2dc0154aee645156bb4710da2ec246236a7d5a382f229b2547df59a38583cdc0e36f9e245607173818134bfe81b4625fbbe8ef0480f610d4fe6efd93f3221e07a0706be69f7697b068b8a28e3e0428a626c6480ff1e2b69300dd2c221580c5e80e9f0758ed87fc8db32a7cae4c8105fd1e35e3ac941c20e971963020350e163d7355c553d298149aed4cc0c70cf1a63ef3d94ef2eff12d31fa4b0b32efd91392112f863bd0917a07c29c3d6040df474b9ced30693d203dc619bbf2133498c207fb24ecfc4fad5b2dfc8f36c089c765124358f84008b2795f61f6c01f22827152513d9d044665a8196fcaba60e3e8f229c198293e5b6f0b0ab3607ac7889c19220b8e9cc440a730627a9b9cdf222c85f04c75800d868d34d1366904af6b4acc526c6090361fe9fb47614cfc8f96d3668887892b3bc4110317cd0af8b16d415c0f54ee7f365cf058a9293a9b4f4d6332a01b7ea1f006d72c7eb20b8f891bf69756fd828cdc5a0a274f75d453d80e2047525111a2eb954d09dd1ca9ba140383b903f71b556539ee6227751f4b8c5c5e3c1e9760ac911aa267e4ad21cfd37b06cbd8d08fac9f337b2c430dfe8b5da91d6c9fc97d567a94ae5fe36144cb0278c309bcbf0963acdccd0a6572e8aa5e9e8056a1b5da6c1050bb994b693fd9afe322662649b5bb1e7577eef0596f0d779efbe31ce4ed9269e0c930cc7ff24a64dd9afdfcbe0a4c2ddbbe7f0714bc6ceb90cc073c4db3570c928f6c6248f73d44522e7346707d04b6db723630821e653c2af461a86a4fdd2d98b21bffdbee0728676dc4b0d86c57a8742798421f54ae9879bf0486030d378a6d1c7405f9aa01196f6a50507030c98054683de7b5c2d5ae5b621a01c457caabfee52f6f2ecf77d95bcbf12ab1ff35f8f2bc7511e058a83bc875e364ece61fe66b4ac3509662a33eae7a65dc9ef3474c07a252d0ad4fb00dd7a3acf29f288f9e81ea0e3d203a20a0ee7f056b3ec0d63402912c131dedf317937eb017e292a607c8fda68c0ba318df6cb4cdd9f77b3e3eb8755676982a06e6a1896159ff98a8ab0f92b9e93b64a1fd40b29e044c7b29730b6ac10368ad529b3414d68ad9ee73894e098488b316dfa18462d3f2612aafa6b9edad68e17fb7b70bb740c69f78cd0d7944d1a837423d97beac46b2d60754239340db7bca865eeb015997964901aaa3178f324bb29a1c273492e100149fc18831ad7efe9196893335e56aacc5f03e501d99396450ca6230f917b48672549dea95fa2c90bc2b4f1ebcc25478a3ed2b0a1a05c4422ce91a058d247538536c1c7cd6b3e3ec9b21a1f0a1d11a715b30f35e13342104ec2cc8cbf47efaaa851bf4d9a8a929740184022ed125c1668ce1ac7b710c7e38ccd7f206ab4c72a7234807dff63b251b9b473f652d98d3653aa41c48d11059f39867fd71ed6d6231d9ac37dc163be5c7d7c6b25b0abd52578192e5ce116b5e324823bfcb5e4dc195844d9b4056587ef7715d656e21db0489dccd4b0052433916a8cb2faae961dd8a7c5a87328568353b0734c9dc8391b93ba0786144ecc40d4b7e04eb2c85ff564590952f7661968656f81f75bce33bdf2ec36bac5407ae0fc7e5deeadb51b92bdb19dab709c243d9bb82c5f69d355ac02ed64f82269ca1e9f88eb343b68c71732cd50b959f31a257e396cb8193c491aa88458af689994ab9ed96ac3b015b02219aa224c157b6412be6d7b1db142e1e80cef24fc7e3bec8185833796d6dfac2408355b2eaaf27f62e6e916513ca7c9eb16f8d432e631ab98bcb8e4e75dddf8375625881e023fb33f0f7334865d5159a6ff15a694ab9c6246905f20867a0ca1028811857d6f86f3d8e6c104b4b433a0e55b4382a45544e0cd47aaa8a3cc222ffb50c050b0bf375a8b9c130afb1c1344acbdd13150596c53f41709fb9221a8f11a605b6d9eb7cafbdd775f8c0902f416c8a3024042e6d7ff62f396dd7b0fa1fc73e305963025641b506f137ad85e692a27fbb43d6d8205ea3ec010db05da5398c1d96262a631567782da48eddae55101417bc3e7fbead1e63ee0a7da2f2b626a591bf280703282708395b841fdf70e6b5aef78ae074def0efb58ca139f2d43be294f323803a5dddeb68d47382981a205f3af46070ccf4a4fc385b47ab7a90eef1c704dba9bff5170e9626ed203f27befa04c0935bd003681c38dd240c146a540034e50d5f32e362ffa87a9a043738c68b76a572c4c34804ed764b441241f68fbcb588fc300a3b9f63287fb1d9ff6a6af654efa01153ed13df9c52293e219f2e967ca5894af12bd2ab07293752043cd7d17927a8aca80cd7fdf02fa9b88bee6d13020e7dcf5484c5eeed9096d335e2d524411b0d947354997acbbfcc57586f58602cfc15db096d8883def335d78ce146f2b7ce1e977f5fe974b3abb97a0a34446659a8515df62043a4cae619e36fd5e1f5c4651ac46b1ac626d02f2a6efb313a0290b8d241ea3712caab384297c7282efc017b32a5b6c70fc7e3e787b749149ba38c1ff0061ffe96fcdfcf26d94f3f22998a0c9fc223494fd0fc3cc328219a29d084b6e554a3865483f3009f0f104278e4df3734c532f1bb8b47dbe3f77221fb171ecc685d63fb4e334c07a057dcbe85311c42dc2a9314f51b2ea6ce37b7defdd058bd7190354f1104c6cf9a9f1337299e87d70ed404b7403bb10921aef2ce4cf062817f7f95073a566a006ae4fbc5fcc2d73a38c3239281aa69982ac3a568d28a3056260987e8fd534c0c5f7e189cba144d40011b71de9cda046eac67e21c02ecf86e980a041f0db0fabc6c49994b90dea68dbc7fcb761662de28bddaed8fad20261dd82d1abccfdd2807ccb0558dd3b9cde48faa6238eb0edbb8e8904d00b44c9237a5a5bb2e3f3d6c62c5361c5928a35fba9fbeb33e6285074d72198f65d4c448a213a2ea4a51892c705c92a9185fc8d81fa75a2394760a00a44a81d35c251dd7f2b76f2310dd145fbb6e8c01a281360b8f4d254218e7768e93b31ae8cbb05c45e7ec9c1fba239b421bc70d5f66c8f2a0ec0941939d6b59d1eadbbef967475e73952641b767a6e8a65b0d58d7b959b3a5d55642c799e4a091ae22acdb8b72b24bc37a430eb305aa1a1b621a2e105f3779e06779f69bb899a5753a710d472336b9c69b02374489a3f33bb0a094b9ed7c04910b3006dc1cfdd09464f837f65ea2ed244d10f481550403750bf3bdb2a3fe3b23b24b81b4278b8ce46f251fadfe00a5d3cf9907faccba021180757183f36c0aa0cf14f594a2f2d925eccf6a50cf825bb10885def6d32d6b1130d1ff715ba92963668ebdb07131a856ef47d3d32ae081aa519191465f1132433c11b9f24836891a987e3632d8b0fbd772b7a09d460d560b855d23e915b745a56cf25a1b553a68d5ba1fe56f8b1fc80533f89789475db99640acd7e8215e6a60f9ebf1724c1685b86a693372e2eec49a428f8ad2c068800e22ca3e05cd30b841f5ff6b50cc9f0527fe0d67f3de3450e85329e92be0b7e4eb70acc917a08f6940044db826e5bb0dc89a9fb977704aad24dab37ed1aa500d7400a0474122770e4b7960be34b925dd25f770a3862bbe9c3e48b15c904cd444513d3a348f177387dc5287b1d9c23b40b6ff3167a4c4c118be7962817460ebdaa2aac33403559dbf456f760b0b3f66000820c3fbf569b15628fc1e519c9171c70190813b7d8d9949750744d5a78ce8c51154c3ca7c553ada2ae389126e4eda7e2eb053ac75704523b11d8f00c940a5b7f5ba389b866e1d04b7befc582eefaddc7c78945a36e8b79014a7ed00e7422f6d50f064315df221f2a4f2cd48168024094d279d7a0087329a331644220c18dbf7cd3374d3257c5bc47b5ceecb2bbd1286e1b41db78b8f104027e5b280b22e9193fe3d144a2461827a34ff0db4ff855950340a520750602695ba7db26cc895502553c6d84a2be1c42520e854fc30e704f94768f623b93045da0e4876c1bbc7c6b4bbcb23d5ed18bce8c25d6fdee5008c01ebb92675f148c80cd96f0e2c7ef0658ce5e2b1af40f13622143da77c69ae1c9a5d19255550f97d26522ca9d1058adca5794d123553090a8da89a26e2c3a832cc84aa6cce9736574c5a90650d05da498b3d33b5f84f78596b008087efd05b9c56c08b992f6ea3d93e3599ae7db3d8190142fb3644db78810e8f6c7bb02bd7c3c9cee291b", 0x1000}}, 0x1006)
preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r6}, 0x14)
syz_emit_ethernet(0xe73, &(0x7f0000001180)=ANY=[], 0x0)
syz_extract_tcp_res(0x0, 0x10000, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

4.036024374s ago: executing program 3 (id=1580):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_pts(0xffffffffffffffff, 0x1)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe})
getpid()

2.811237304s ago: executing program 3 (id=1581):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1)
syz_open_dev$sndmidi(&(0x7f0000000180), 0x3, 0x4003)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$incfs_id(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')

2.499308311s ago: executing program 3 (id=1582):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010107f748be08f41515002b6f0102030109021200010902200b0904c6a9009b7dd103a41c7c6794a88b01c5443e51443705b7f4e68f4b41a00512fd8fda75fdddda0194d606896b1ba3fb42e32c67b74f23744a9784826f879ccab8849e05d9234c2604ba3d3c6198d0ad352de4b60ba73956704f56cd9a2a3c40900256278dc96232859ec7db461800f9d00c249446b48f938d1af485bbd4e0f887c29457f3dffcb80b90d76353ff6a33e842371dca1456c929ae405145222c432be8c75a8e57f77ac6180343130a009868d764d5d8eb8e0e8100000000000000"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
gettid()
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/63, 0x3f}], 0x1, &(0x7f0000002540)=[{&(0x7f00000007c0)=""/238, 0xee}], 0x1, 0x0)
sched_setaffinity(r0, 0xfffffffffffffdd2, &(0x7f0000000200)=0x100000a2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {0xe, 0xf}, {0xfff2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x37, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r4}, 0x10)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
r7 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x4003, 0x0, 0x0, r6}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
socket$inet_tcp(0x2, 0x1, 0x0)

1.841351852s ago: executing program 4 (id=1583):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_pts(0xffffffffffffffff, 0x1)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe})
getpid()

1.657903638s ago: executing program 1 (id=1584):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r1}, 0x10)
r2 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pimreg1\x00'})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
clock_nanosleep(0xc, 0x0, 0x0, 0xfffffffffffffffe)
syz_usb_disconnect(r0)
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_setup(0x7d31, &(0x7f0000000100)={0x0, 0xcd13, 0x602c, 0x0, 0x1e8})
syz_open_dev$vim2m(&(0x7f0000000240), 0x80000001, 0x2)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x6, 0x0)

112.753428ms ago: executing program 4 (id=1585):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000200)='befs\x00', 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
poll(&(0x7f0000000140), 0x0, 0x8040)
syz_open_dev$MSR(&(0x7f0000000140), 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x24}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf}, 0x28)

0s ago: executing program 0 (id=1586):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="62fdbdda9000000000003e088343247f9e552715b59a4bef9bde9903337733d21f9cbc7ad86a8b9a4dd2d1083269120aa063cfeee25661f23f2462876732d74bc8f2a2ebe4730838f1c245570e7a553ae273ea4623f64963c71704d3141eaa47a36c03f2a23e8da528beb647f6217a889a00"], 0x8c4}}, 0x4010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r1)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
close(0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2000000008, 0x248}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

62143554.506:745): avc:  denied  { remount } for  pid=10218 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  437.269759][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'.
[  437.407647][T10232] rdma_rxe: rxe_newlink: failed to add wg2
[  437.641605][ T1206] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -110
[  437.717915][ T1206] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  437.730759][ T5919] usb 2-1: USB disconnect, device number 31
[  437.800736][ T1206] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  437.818111][   T30] audit: type=1400 audit(1762143555.026:746): avc:  denied  { write } for  pid=10236 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  438.048149][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'.
[  438.122995][T10257] netlink: 755 bytes leftover after parsing attributes in process `syz.2.1185'.
[  438.481411][ T5919] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  438.592677][ T1206] usb 5-1: USB disconnect, device number 40
[  438.681995][ T5919] usb 2-1: Using ep0 maxpacket: 16
[  438.794890][ T5919] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  438.809539][ T5919] usb 2-1: config 0 has no interface number 0
[  438.816423][ T5919] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  438.830423][ T5919] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  438.849346][ T5919] usb 2-1: config 0 interface 41 has no altsetting 0
[  438.872780][ T5919] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  438.881614][T10265] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1189'.
[  438.882480][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.899344][ T5919] usb 2-1: Product: syz
[  438.902659][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1189'.
[  438.912569][ T5919] usb 2-1: Manufacturer: syz
[  438.912650][ T5919] usb 2-1: SerialNumber: syz
[  438.914687][ T5919] usb 2-1: config 0 descriptor??
[  438.931163][T10256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  439.072100][T10256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  439.333399][T10256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  439.460173][T10256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  439.603002][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  439.875630][T10256] overlayfs: conflicting options: nfs_export=on,index=off
[  439.950712][T10273] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  440.053012][ T5919] Error reading MAC address
[  440.453617][ T5919] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71
[  440.470792][ T5919] usb 2-1: USB disconnect, device number 32
[  441.410697][ T5956] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  441.514732][T10287] rdma_rxe: rxe_newlink: failed to add wg2
[  441.706092][ T5956] usb 3-1: Using ep0 maxpacket: 16
[  441.995960][   T30] audit: type=1400 audit(1762143559.006:747): avc:  denied  { append } for  pid=10288 comm="syz.4.1196" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  442.027044][ T5956] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  442.037624][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.050403][ T5956] usb 3-1: Product: syz
[  442.054600][ T5956] usb 3-1: Manufacturer: syz
[  442.059192][ T5956] usb 3-1: SerialNumber: syz
[  442.097709][ T5956] usb 3-1: config 0 descriptor??
[  442.111148][ T5956] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  442.138659][T10296] FAULT_INJECTION: forcing a failure.
[  442.138659][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.176473][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.1.1198 Not tainted syzkaller #0 PREEMPT(full) 
[  442.176499][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  442.176509][T10296] Call Trace:
[  442.176515][T10296]  <TASK>
[  442.176522][T10296]  dump_stack_lvl+0x16c/0x1f0
[  442.176553][T10296]  should_fail_ex+0x512/0x640
[  442.176578][T10296]  _copy_from_user+0x2e/0xd0
[  442.176601][T10296]  dma_buf_ioctl+0x3c6/0x8d0
[  442.176630][T10296]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  442.176654][T10296]  ? hook_file_ioctl_common+0x145/0x410
[  442.176685][T10296]  ? selinux_file_ioctl+0x180/0x270
[  442.176704][T10296]  ? selinux_file_ioctl+0xb4/0x270
[  442.176724][T10296]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  442.176751][T10296]  __x64_sys_ioctl+0x18e/0x210
[  442.176778][T10296]  do_syscall_64+0xcd/0xfa0
[  442.176807][T10296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.176824][T10296] RIP: 0033:0x7f4c5738efc9
[  442.176838][T10296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.176855][T10296] RSP: 002b:00007f4c5817b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  442.176872][T10296] RAX: ffffffffffffffda RBX: 00007f4c575e5fa0 RCX: 00007f4c5738efc9
[  442.176883][T10296] RDX: 0000200000000140 RSI: 0000000040086200 RDI: 0000000000000005
[  442.176893][T10296] RBP: 00007f4c5817b090 R08: 0000000000000000 R09: 0000000000000000
[  442.176903][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.176913][T10296] R13: 00007f4c575e6038 R14: 00007f4c575e5fa0 R15: 00007fff5c22e548
[  442.176936][T10296]  </TASK>
[  442.380433][ T5921] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  442.437681][ T5135] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  442.570795][ T5921] usb 1-1: Using ep0 maxpacket: 32
[  442.581500][ T5921] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  442.590397][ T5921] usb 1-1: config 0 has no interface number 0
[  442.596538][ T5921] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  442.618139][ T5921] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  442.628299][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.641576][T10315] FAULT_INJECTION: forcing a failure.
[  442.641576][T10315] name failslab, interval 1, probability 0, space 0, times 0
[  442.654355][ T5921] usb 1-1: Product: syz
[  442.658553][ T5921] usb 1-1: Manufacturer: syz
[  442.663414][ T5921] usb 1-1: SerialNumber: syz
[  442.669562][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.4.1203 Not tainted syzkaller #0 PREEMPT(full) 
[  442.669584][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  442.669594][T10315] Call Trace:
[  442.669599][T10315]  <TASK>
[  442.669605][T10315]  dump_stack_lvl+0x16c/0x1f0
[  442.669635][T10315]  should_fail_ex+0x512/0x640
[  442.669657][T10315]  should_failslab+0xc2/0x120
[  442.669680][T10315]  kmem_cache_alloc_noprof+0x75/0x6e0
[  442.669704][T10315]  ? dst_alloc+0x99/0x1a0
[  442.669728][T10315]  ? dst_alloc+0x99/0x1a0
[  442.669742][T10315]  dst_alloc+0x99/0x1a0
[  442.669762][T10315]  rt_dst_alloc+0x35/0x3a0
[  442.669779][T10315]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  442.669816][T10315]  ip_route_output_key_hash+0x10f/0x2b0
[  442.669838][T10315]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  442.669867][T10315]  ? find_held_lock+0x2b/0x80
[  442.669893][T10315]  ip_route_output_flow+0x27/0x150
[  442.669916][T10315]  raw_sendmsg+0xd5b/0x38b0
[  442.669948][T10315]  ? __pfx_raw_sendmsg+0x10/0x10
[  442.669969][T10315]  ? avc_has_perm_noaudit+0x149/0x3b0
[  442.669999][T10315]  ? avc_has_perm+0x144/0x1f0
[  442.670036][T10315]  ? sock_has_perm+0x259/0x2f0
[  442.670074][T10315]  ? __import_iovec+0x1dd/0x650
[  442.670099][T10315]  ? __pfx_raw_sendmsg+0x10/0x10
[  442.670121][T10315]  inet_sendmsg+0x11c/0x140
[  442.670143][T10315]  ____sys_sendmsg+0x973/0xc70
[  442.670162][T10315]  ? copy_msghdr_from_user+0x10a/0x160
[  442.670185][T10315]  ? __pfx_____sys_sendmsg+0x10/0x10
[  442.670207][T10315]  ? __pfx__kstrtoull+0x10/0x10
[  442.670239][T10315]  ___sys_sendmsg+0x134/0x1d0
[  442.670263][T10315]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.670299][T10315]  ? find_held_lock+0x2b/0x80
[  442.670331][T10315]  __sys_sendmmsg+0x200/0x420
[  442.670356][T10315]  ? __pfx___sys_sendmmsg+0x10/0x10
[  442.670388][T10315]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  442.670417][T10315]  ? fput+0x9b/0xd0
[  442.670439][T10315]  ? ksys_write+0x1ac/0x250
[  442.670455][T10315]  ? __pfx_ksys_write+0x10/0x10
[  442.670476][T10315]  __x64_sys_sendmmsg+0x9c/0x100
[  442.670498][T10315]  ? lockdep_hardirqs_on+0x7c/0x110
[  442.670524][T10315]  do_syscall_64+0xcd/0xfa0
[  442.670552][T10315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.670569][T10315] RIP: 0033:0x7fe39ed8efc9
[  442.670584][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.670600][T10315] RSP: 002b:00007fe39fb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  442.670618][T10315] RAX: ffffffffffffffda RBX: 00007fe39efe5fa0 RCX: 00007fe39ed8efc9
[  442.670629][T10315] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  442.670639][T10315] RBP: 00007fe39fb88090 R08: 0000000000000000 R09: 0000000000000000
[  442.670650][T10315] R10: 00000000200480c4 R11: 0000000000000246 R12: 0000000000000001
[  442.670660][T10315] R13: 00007fe39efe6038 R14: 00007fe39efe5fa0 R15: 00007ffc34dc5298
[  442.670686][T10315]  </TASK>
[  442.957112][    C0] vkms_vblank_simulate: vblank timer overrun
[  442.964979][ T5921] usb 1-1: config 0 descriptor??
[  442.978780][ T5921] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  442.988607][ T5921] em28xx 1-1:0.132: Video interface 132 found:
[  443.405270][ T5921] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  443.454281][ T5956] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[  443.603247][   T30] audit: type=1400 audit(1762143560.836:748): avc:  denied  { execute } for  pid=10321 comm="syz.4.1206" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  444.726061][ T5921] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  444.793146][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'.
[  444.803100][ T5817] usb 3-1: USB disconnect, device number 28
[  444.809118][   T30] audit: type=1400 audit(1762143562.026:749): avc:  denied  { read } for  pid=10339 comm="syz.1.1212" path="socket:[32835]" dev="sockfs" ino=32835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  444.833083][    C0] vkms_vblank_simulate: vblank timer overrun
[  444.846878][ T5921] em28xx 1-1:0.132: board has no eeprom
[  444.940400][ T5921] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  444.948376][ T5921] em28xx 1-1:0.132: analog set to bulk mode.
[  444.965863][ T5921] usb 1-1: USB disconnect, device number 27
[  444.973068][ T5921] em28xx 1-1:0.132: Disconnecting em28xx
[  444.978764][ T1914] em28xx 1-1:0.132: Registering V4L2 extension
[  446.047053][ T5817] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  446.199055][T10359] FAULT_INJECTION: forcing a failure.
[  446.199055][T10359] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.256052][ T5817] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  446.319993][T10360] rdma_rxe: rxe_newlink: failed to add wg2
[  446.535315][ T5920] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  446.568843][ T5817] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2
[  446.600510][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.3.1216 Not tainted syzkaller #0 PREEMPT(full) 
[  446.600537][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  446.600546][T10359] Call Trace:
[  446.600552][T10359]  <TASK>
[  446.600559][T10359]  dump_stack_lvl+0x16c/0x1f0
[  446.600591][T10359]  should_fail_ex+0x512/0x640
[  446.600615][T10359]  _copy_from_user+0x2e/0xd0
[  446.600638][T10359]  inet_ioctl+0x31c/0x3f0
[  446.600659][T10359]  ? __pfx_inet_ioctl+0x10/0x10
[  446.600691][T10359]  ? tomoyo_path_number_perm+0x18d/0x580
[  446.600727][T10359]  sock_do_ioctl+0x118/0x280
[  446.600756][T10359]  ? __pfx_sock_do_ioctl+0x10/0x10
[  446.600789][T10359]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  446.600814][T10359]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  446.600839][T10359]  sock_ioctl+0x227/0x6b0
[  446.600856][T10359]  ? __pfx_sock_ioctl+0x10/0x10
[  446.600871][T10359]  ? hook_file_ioctl_common+0x145/0x410
[  446.600901][T10359]  ? selinux_file_ioctl+0x180/0x270
[  446.600918][T10359]  ? selinux_file_ioctl+0xb4/0x270
[  446.600944][T10359]  ? __pfx_sock_ioctl+0x10/0x10
[  446.600963][T10359]  __x64_sys_ioctl+0x18e/0x210
[  446.600988][T10359]  do_syscall_64+0xcd/0xfa0
[  446.601016][T10359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.601034][T10359] RIP: 0033:0x7eff6ab8efc9
[  446.601049][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.601066][T10359] RSP: 002b:00007eff6b9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.601082][T10359] RAX: ffffffffffffffda RBX: 00007eff6ade5fa0 RCX: 00007eff6ab8efc9
[  446.601093][T10359] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000005
[  446.601103][T10359] RBP: 00007eff6b9ac090 R08: 0000000000000000 R09: 0000000000000000
[  446.601113][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.601123][T10359] R13: 00007eff6ade6038 R14: 00007eff6ade5fa0 R15: 00007ffc35066f68
[  446.601148][T10359]  </TASK>
[  446.805622][    C0] vkms_vblank_simulate: vblank timer overrun
[  447.015486][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  447.085935][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  447.094018][ T5920] usb 2-1: config 0 has no interface number 0
[  447.113819][ T1914] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  447.122021][ T1914] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  447.129130][ T1914] em28xx 1-1:0.132: No AC97 audio processor
[  447.144460][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  447.153535][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.161519][ T5920] usb 2-1: Product: syz
[  447.167212][ T5920] usb 2-1: Manufacturer: syz
[  447.171863][ T5817] usb 3-1: config 8 interface 0 has no altsetting 0
[  447.178434][ T5920] usb 2-1: SerialNumber: syz
[  447.183487][ T1914] usb 1-1: Decoder not found
[  447.188079][ T1914] em28xx 1-1:0.132: failed to create media graph
[  447.196066][ T1914] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  447.203376][ T5920] usb 2-1: config 0 descriptor??
[  447.217764][ T5817] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93
[  447.243321][ T5920] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  447.255626][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.267710][ T1914] em28xx 1-1:0.132: Remote control support is not available for this card.
[  447.280936][ T5817] usb 3-1: Product: syz
[  447.285130][ T5817] usb 3-1: Manufacturer: syz
[  447.289773][ T5920] usb 2-1: selecting invalid altsetting 1
[  447.302579][ T5921] em28xx 1-1:0.132: Closing input extension
[  447.309378][ T5920] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  447.319265][ T5817] usb 3-1: SerialNumber: syz
[  447.386025][ T5921] em28xx 1-1:0.132: Freeing device
[  447.394068][ T5920] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  447.457567][T10373] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1219'.
[  447.468179][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'.
[  447.491172][ T5920] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  447.507056][ T5920] usb 2-1: media controller created
[  447.510483][ T5919] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  447.553561][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  447.672841][ T5919] usb 5-1: Using ep0 maxpacket: 8
[  447.706642][ T5921] usb 3-1: USB disconnect, device number 29
[  447.720508][ T5920] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  447.724181][ T5919] usb 5-1: config 5 has an invalid interface number: 5 but max is 2
[  447.751319][ T5920] zl10353_read_register: readreg error (reg=127, ret==-71)
[  447.756045][ T5919] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  447.773245][ T5919] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  447.783641][ T5919] usb 5-1: config 5 has an invalid interface number: 122 but max is 2
[  447.791957][ T5919] usb 5-1: config 5 has an invalid interface number: 73 but max is 2
[  447.885017][ T5919] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  447.894338][ T5919] usb 5-1: config 5 has an invalid descriptor of length 241, skipping remainder of the config
[  447.904932][ T5919] usb 5-1: config 5 has no interface number 0
[  447.911330][ T5919] usb 5-1: config 5 has no interface number 1
[  447.917421][ T5919] usb 5-1: config 5 has no interface number 2
[  447.928458][ T5919] usb 5-1: config 5 interface 5 altsetting 15 has a duplicate endpoint with address 0xD, skipping
[  447.937379][ T5920] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  447.941881][ T5919] usb 5-1: config 5 interface 5 altsetting 15 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  447.958722][ T5919] usb 5-1: config 5 interface 5 altsetting 15 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  448.037592][T10378] netlink: 755 bytes leftover after parsing attributes in process `syz.0.1221'.
[  448.163916][ T5919] usb 5-1: config 5 interface 5 altsetting 15 has a duplicate endpoint with address 0xD, skipping
[  448.245446][ T5919] usb 5-1: config 5 interface 5 altsetting 15 has a duplicate endpoint with address 0x8, skipping
[  448.358970][ T5919] usb 5-1: config 5 interface 5 altsetting 15 has a duplicate endpoint with address 0x8, skipping
[  448.435568][ T5920] usb 2-1: USB disconnect, device number 33
[  448.441457][ T9731] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  448.449824][ T5919] usb 5-1: config 5 interface 5 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  448.461879][ T5919] usb 5-1: config 5 interface 122 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  448.473295][ T5919] usb 5-1: config 5 interface 122 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  448.486006][ T5919] usb 5-1: config 5 interface 122 altsetting 127 has a duplicate endpoint with address 0xF, skipping
[  448.497838][ T5919] usb 5-1: config 5 interface 122 altsetting 127 has a duplicate endpoint with address 0x4, skipping
[  449.462913][ T5919] usb 5-1: config 5 interface 73 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  449.499001][ T5919] usb 5-1: config 5 interface 5 has no altsetting 0
[  449.506168][ T5919] usb 5-1: config 5 interface 122 has no altsetting 0
[  449.513309][ T5919] usb 5-1: config 5 interface 73 has no altsetting 0
[  450.475900][ T5919] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=b2.ac
[  450.486244][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.494396][ T9731] usb 4-1: Using ep0 maxpacket: 16
[  450.500911][ T5919] usb 5-1: Product: 璖
[  450.505743][ T5919] usb 5-1: Manufacturer: 㠊
[  450.511195][ T5919] usb 5-1: SerialNumber: 喌ꯛ⃟砍갪욑뇌쀊↋努奣澹㶰痔Վ얀쭨읞窊魂從〛䑓䵉䆦胍泝氘퐽찗᥹᎛쉢隳窷栴榦淵귩ҳ摠焹쨜擅溒ℹ랢ጲ퉖⸆舡ꎘ䒋㩓꜐雥퓲Ѭ♿杇饀睱崝꺛꒪噻縕趧Ẕ퐒˽샩䧭廤蚵刬ᔼ
[  450.547702][T10386] netlink: 755 bytes leftover after parsing attributes in process `syz.1.1223'.
[  451.554319][ T5919] usb 5-1: can't set config #5, error -71
[  451.563189][ T9731] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  451.572535][ T9731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.713581][ T5919] usb 5-1: USB disconnect, device number 41
[  451.720379][ T9731] usb 4-1: Product: syz
[  451.729382][ T9731] usb 4-1: config 0 descriptor??
[  451.769818][ T9731] usb 4-1: can't set config #0, error -71
[  451.784000][ T9731] usb 4-1: USB disconnect, device number 40
[  452.570527][ T5817] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  452.750419][ T5817] usb 1-1: Using ep0 maxpacket: 16
[  452.750465][ T9731] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  452.757115][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.763257][ T5919] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  452.776728][ T5817] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  452.792462][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.808460][   T30] audit: type=1400 audit(1762143570.046:750): avc:  denied  { write } for  pid=10408 comm="syz.2.1231" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  452.832567][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.841621][T10414] 9pnet_fd: Insufficient options for proto=fd
[  452.849173][ T5817] usb 1-1: config 0 descriptor??
[  452.857491][   T30] audit: type=1400 audit(1762143570.076:751): avc:  denied  { open } for  pid=10408 comm="syz.2.1231" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  452.881919][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.890052][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.903087][   T30] audit: type=1400 audit(1762143570.086:752): avc:  denied  { mounton } for  pid=10408 comm="syz.2.1231" path="/syzcgroup/net/syz2/cgroup.procs" dev="cgroup" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  452.950516][ T5919] usb 5-1: device descriptor read/64, error -71
[  452.971751][ T9731] usb 4-1: config 0 has an invalid interface number: 189 but max is 0
[  452.981156][ T9731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.991743][ T9731] usb 4-1: config 0 has no interface number 0
[  452.997958][ T9731] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  453.009502][ T9731] usb 4-1: config 0 interface 189 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  453.029934][T10415] /dev/nullb0: Can't open blockdev
[  453.051174][ T9731] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  453.108929][ T9731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.117314][ T9731] usb 4-1: Product: syz
[  453.121936][ T9731] usb 4-1: Manufacturer: syz
[  453.126617][ T9731] usb 4-1: SerialNumber: syz
[  453.133932][ T9731] usb 4-1: config 0 descriptor??
[  453.149415][ T9731] ums-alauda 4-1:0.189: USB Mass Storage device detected
[  453.190387][ T5919] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  453.312121][ T5817] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  453.330522][ T5919] usb 5-1: device descriptor read/64, error -71
[  453.415379][ T5921] usb 4-1: USB disconnect, device number 41
[  453.440923][ T5919] usb usb5-port1: attempt power cycle
[  453.716871][ T5921] usb 1-1: USB disconnect, device number 28
[  453.790636][ T5919] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  453.824587][ T5919] usb 5-1: device descriptor read/8, error -71
[  454.916464][ T5919] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  455.106510][T10435] netlink: 'syz.3.1237': attribute type 1 has an invalid length.
[  455.139299][ T5919] usb 5-1: device descriptor read/8, error -71
[  455.219401][T10435] bond1: entered promiscuous mode
[  455.239072][T10435] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.266667][ T5919] usb usb5-port1: unable to enumerate USB device
[  455.281097][T10436] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.300991][T10436] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  455.319993][T10436] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  455.336534][T10435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.344514][T10435] IPv6: NLM_F_CREATE should be set when creating new route
[  455.351786][T10435] IPv6: NLM_F_CREATE should be set when creating new route
[  455.364178][T10435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.384082][T10436] bond1: (slave wireguard0): making interface the new active one
[  455.391955][T10436] wireguard0: entered promiscuous mode
[  455.413379][T10436] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  455.718731][T10457] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  455.726523][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.812077][ T9731] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  456.717446][ T9731] usb 3-1: device descriptor read/64, error -71
[  457.351731][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  457.433013][ T9731] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  457.603877][T10463] hpfs: hpfs_map_sector(): read error
[  457.654341][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  457.682253][ T5921] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  457.710416][ T5921] usb 5-1: config 0 has no interface number 0
[  457.727651][ T5921] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  457.730399][ T9731] usb 3-1: device descriptor read/64, error -71
[  457.746222][ T5921] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  457.755929][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.855356][ T5921] usb 5-1: Product: syz
[  457.860807][ T5921] usb 5-1: Manufacturer: syz
[  457.867603][ T5921] usb 5-1: SerialNumber: syz
[  457.873759][ T5921] usb 5-1: config 0 descriptor??
[  457.882143][ T5921] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  457.892213][ T5921] em28xx 5-1:0.132: Video interface 132 found:
[  458.093439][ T9731] usb usb3-port1: attempt power cycle
[  458.174098][ T5921] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  458.196855][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'.
[  458.210792][T10491] FAULT_INJECTION: forcing a failure.
[  458.210792][T10491] name failslab, interval 1, probability 0, space 0, times 0
[  458.223652][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.3.1250 Not tainted syzkaller #0 PREEMPT(full) 
[  458.223675][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  458.223685][T10491] Call Trace:
[  458.223691][T10491]  <TASK>
[  458.223698][T10491]  dump_stack_lvl+0x16c/0x1f0
[  458.223727][T10491]  should_fail_ex+0x512/0x640
[  458.223747][T10491]  ? __kmalloc_noprof+0xca/0x880
[  458.223773][T10491]  should_failslab+0xc2/0x120
[  458.223793][T10491]  __kmalloc_noprof+0xdd/0x880
[  458.223816][T10491]  ? scsi_ioctl_reset+0x136/0x850
[  458.223838][T10491]  ? scsi_ioctl_reset+0x136/0x850
[  458.223854][T10491]  scsi_ioctl_reset+0x136/0x850
[  458.223875][T10491]  scsi_ioctl+0xe3d/0x18b0
[  458.223899][T10491]  ? __pfx___might_resched+0x10/0x10
[  458.223925][T10491]  ? __pfx_scsi_ioctl+0x10/0x10
[  458.223951][T10491]  ? lockdep_hardirqs_on+0x7c/0x110
[  458.223976][T10491]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[  458.224009][T10491]  ? sg_ioctl+0x194/0x2880
[  458.224041][T10491]  sg_ioctl+0xb98/0x2880
[  458.224066][T10491]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  458.224089][T10491]  ? __pfx_sg_ioctl+0x10/0x10
[  458.224114][T10491]  ? hook_file_ioctl_common+0x145/0x410
[  458.224144][T10491]  ? selinux_file_ioctl+0x180/0x270
[  458.224161][T10491]  ? selinux_file_ioctl+0xb4/0x270
[  458.224180][T10491]  ? __pfx_sg_ioctl+0x10/0x10
[  458.224204][T10491]  __x64_sys_ioctl+0x18e/0x210
[  458.224229][T10491]  do_syscall_64+0xcd/0xfa0
[  458.224256][T10491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.224273][T10491] RIP: 0033:0x7eff6ab8efc9
[  458.224287][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.224302][T10491] RSP: 002b:00007eff6b96a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.224319][T10491] RAX: ffffffffffffffda RBX: 00007eff6ade6180 RCX: 00007eff6ab8efc9
[  458.224329][T10491] RDX: 0000200000000080 RSI: 0000000000002284 RDI: 0000000000000005
[  458.224339][T10491] RBP: 00007eff6b96a090 R08: 0000000000000000 R09: 0000000000000000
[  458.224349][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.224358][T10491] R13: 00007eff6ade6218 R14: 00007eff6ade6180 R15: 00007ffc35066f68
[  458.224383][T10491]  </TASK>
[  458.491523][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  458.500238][ T5921] em28xx 5-1:0.132: board has no eeprom
[  458.551517][T10490] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  458.560593][ T5921] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  458.568424][ T5921] em28xx 5-1:0.132: analog set to bulk mode.
[  458.574925][ T1914] em28xx 5-1:0.132: Registering V4L2 extension
[  458.589576][ T5921] usb 5-1: USB disconnect, device number 46
[  458.601236][ T5921] em28xx 5-1:0.132: Disconnecting em28xx
[  458.627138][T10490] gretap2: entered allmulticast mode
[  459.039261][ T1914] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  459.085450][ T1914] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  459.092490][T10500] syzkaller1: entered promiscuous mode
[  459.099060][T10500] syzkaller1: entered allmulticast mode
[  459.118434][ T1914] em28xx 5-1:0.132: No AC97 audio processor
[  459.152197][ T1914] usb 5-1: Decoder not found
[  459.160425][ T1914] em28xx 5-1:0.132: failed to create media graph
[  459.172944][ T1914] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  459.219747][ T1914] em28xx 5-1:0.132: Remote control support is not available for this card.
[  459.231145][ T5921] em28xx 5-1:0.132: Closing input extension
[  459.244632][ T5921] em28xx 5-1:0.132: Freeing device
[  459.360724][T10507] syzkaller0: entered promiscuous mode
[  459.366267][T10507] syzkaller0: entered allmulticast mode
[  459.421628][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'.
[  459.860564][ T5921] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  459.861422][ T5891] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  460.062106][ T5921] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  460.071620][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.098773][ T5921] usb 5-1: config 0 descriptor??
[  460.695706][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  460.705672][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  460.738231][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  460.846439][ T5921] hackrf 5-1:0.0: Board ID: 00
[  460.853689][ T5921] hackrf 5-1:0.0: Firmware version: 
[  460.863263][ T5921] hackrf 5-1:0.0: Registered as swradio24
[  460.876866][ T5921] videodev: could not get a free minor
[  460.884789][ T5921] hackrf 5-1:0.0: Failed to register as video device (-23)
[  460.904382][ T5891] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  460.927776][ T5921] hackrf 5-1:0.0: probe with driver hackrf failed with error -23
[  461.201828][ T5891] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  461.239478][ T5891] usb 3-1: Product: syz
[  461.241685][ T5921] usb 5-1: USB disconnect, device number 47
[  461.252935][ T5891] usb 3-1: Manufacturer: syz
[  461.266499][ T5891] usb 3-1: SerialNumber: syz
[  461.281959][ T5891] usb 3-1: config 0 descriptor??
[  461.583134][ T5891] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  462.752820][   T62] usb 3-1: Failed to submit usb control message: -110
[  462.771337][   T62] usb 3-1: unable to send the bmi data to the device: -110
[  462.778669][   T62] usb 3-1: unable to get target info from device
[  463.483751][   T62] usb 3-1: could not get target info (-110)
[  463.532668][ T9731] usb 3-1: USB disconnect, device number 33
[  463.556744][   T62] usb 3-1: could not probe fw (-110)
[  463.566341][   T30] audit: type=1400 audit(1762143580.806:753): avc:  denied  { append } for  pid=10554 comm="syz.3.1267" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  464.758121][T10568] bridge0: port 1(team0) entered blocking state
[  464.765918][T10568] bridge0: port 1(team0) entered disabled state
[  464.773843][T10568] team0: entered allmulticast mode
[  464.779032][T10568] team_slave_0: entered allmulticast mode
[  464.784883][T10568] team_slave_1: entered allmulticast mode
[  465.006525][T10568] team0: entered promiscuous mode
[  465.012083][T10568] team_slave_0: entered promiscuous mode
[  465.061498][T10568] team_slave_1: entered promiscuous mode
[  465.645679][ T5891] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  465.747803][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  465.810421][ T5891] usb 5-1: Using ep0 maxpacket: 8
[  465.821151][ T5891] usb 5-1: config 162 has an invalid descriptor of length 121, skipping remainder of the config
[  465.855602][ T5891] usb 5-1: config 162 has 0 interfaces, different from the descriptor's value: 1
[  465.882935][ T5891] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  465.910456][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.950555][ T9731] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  465.992281][T10582] hub 1-0:1.0: USB hub found
[  465.997843][T10582] hub 1-0:1.0: 1 port detected
[  466.191150][ T5891] usb 5-1: Product: syz
[  466.205589][ T5891] usb 5-1: Manufacturer: syz
[  466.210235][ T5891] usb 5-1: SerialNumber: syz
[  466.370371][ T9731] usb 4-1: Using ep0 maxpacket: 32
[  466.388783][ T9731] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  466.402041][ T9731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.410034][ T9731] usb 4-1: Product: syz
[  466.414564][ T9731] usb 4-1: Manufacturer: syz
[  466.419158][ T9731] usb 4-1: SerialNumber: syz
[  466.425029][ T9731] usb 4-1: config 0 descriptor??
[  466.432552][ T9731] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  466.499826][T10588] netlink: 755 bytes leftover after parsing attributes in process `syz.2.1275'.
[  466.772125][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.780875][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.859723][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'.
[  466.912040][   T30] audit: type=1400 audit(1762143584.156:754): avc:  denied  { ioctl } for  pid=10590 comm="syz.0.1276" path="/dev/input/mouse0" dev="devtmpfs" ino=999 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  467.180949][T10576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10576 comm=syz.3.1270
[  468.698405][ T1914] usb 5-1: USB disconnect, device number 48
[  469.493523][T10622] fuse: Bad value for 'fd'
[  469.505467][ T9731] gspca_stk1135: reg_w 0x203 err -71
[  469.512322][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.522572][ T9731] gspca_stk1135: Sensor write failed
[  469.527978][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.540034][ T9731] gspca_stk1135: Sensor write failed
[  469.548788][T10621] fuse: Unknown parameter 'group(9d'
[  469.558586][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.570004][ T9731] gspca_stk1135: Sensor read failed
[  469.581198][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.600232][ T9731] gspca_stk1135: Sensor read failed
[  469.624988][ T9731] gspca_stk1135: Detected sensor type unknown (0x0)
[  469.645447][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.651976][ T9731] gspca_stk1135: Sensor read failed
[  469.717902][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.742408][ T9731] gspca_stk1135: Sensor read failed
[  469.751079][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.757521][ T9731] gspca_stk1135: Sensor write failed
[  469.764697][ T9731] gspca_stk1135: serial bus timeout: status=0x00
[  469.772690][ T9731] gspca_stk1135: Sensor write failed
[  469.784818][ T9731] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  469.803474][ T9731] usb 4-1: USB disconnect, device number 42
[  469.960552][ T1206] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  469.997346][T10634] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  470.005515][T10634] audit: out of memory in audit_log_start
[  470.120386][ T1206] usb 3-1: Using ep0 maxpacket: 32
[  470.129699][ T1206] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  470.137235][   T30] audit: type=1400 audit(1762143587.376:755): avc:  denied  { map } for  pid=10635 comm="syz.0.1288" path="socket:[33797]" dev="sockfs" ino=33797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  470.146805][ T1206] usb 3-1: config 0 has no interface number 0
[  470.197140][ T1206] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  470.254942][   T30] audit: type=1400 audit(1762143587.476:756): avc:  denied  { ioctl } for  pid=10638 comm="syz.3.1289" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  470.383018][ T1206] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  470.398123][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.495181][ T1206] usb 3-1: Product: syz
[  470.499381][ T1206] usb 3-1: Manufacturer: syz
[  470.504075][ T1206] usb 3-1: SerialNumber: syz
[  470.510897][ T1206] usb 3-1: config 0 descriptor??
[  470.527243][ T1206] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  470.539330][ T1206] em28xx 3-1:0.132: Video interface 132 found:
[  470.636996][T10649] netlink: 755 bytes leftover after parsing attributes in process `syz.0.1291'.
[  471.068935][   T30] audit: type=1400 audit(1762143588.306:757): avc:  denied  { append } for  pid=10650 comm="syz.1.1292" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  471.143439][ T1206] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  471.279286][ T1206] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  471.289072][ T1206] em28xx 3-1:0.132: board has no eeprom
[  471.394954][ T1206] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  471.410384][ T1206] em28xx 3-1:0.132: analog set to bulk mode.
[  471.435642][ T9731] em28xx 3-1:0.132: Registering V4L2 extension
[  471.453145][ T1206] usb 3-1: USB disconnect, device number 34
[  471.992555][ T1206] em28xx 3-1:0.132: Disconnecting em28xx
[  472.095336][ T5817] IPVS: starting estimator thread 0...
[  472.101784][   T30] audit: type=1400 audit(1762143589.336:758): avc:  denied  { create } for  pid=10667 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  472.687167][T10678] netlink: 755 bytes leftover after parsing attributes in process `syz.4.1297'.
[  473.200503][T10669] IPVS: using max 44 ests per chain, 105600 per kthread
[  473.280623][ T9731] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  473.287807][ T9731] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  473.295048][ T9731] em28xx 3-1:0.132: No AC97 audio processor
[  473.302166][ T9731] usb 3-1: Decoder not found
[  473.306793][ T9731] em28xx 3-1:0.132: failed to create media graph
[  473.313309][ T9731] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  473.321174][ T9731] em28xx 3-1:0.132: Remote control support is not available for this card.
[  473.329951][ T1206] em28xx 3-1:0.132: Closing input extension
[  473.395899][ T1206] em28xx 3-1:0.132: Freeing device
[  473.847710][T10693] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  473.855653][T10693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.735412][T10703] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  474.743235][T10703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.678695][T10709] syzkaller1: entered promiscuous mode
[  475.830616][T10709] syzkaller1: entered allmulticast mode
[  475.851333][   T30] audit: type=1400 audit(1762143593.086:759): avc:  denied  { map } for  pid=10721 comm="syz.2.1311" path="socket:[33475]" dev="sockfs" ino=33475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  476.319328][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'.
[  478.702224][T10752] KVM: debugfs: duplicate directory 10752-5
[  480.953169][T10775] netlink: 755 bytes leftover after parsing attributes in process `syz.3.1323'.
[  481.476911][T10779] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  481.490488][   T30] audit: type=1400 audit(1762143598.726:760): avc:  denied  { shutdown } for  pid=10778 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  481.556796][T10781] FAULT_INJECTION: forcing a failure.
[  481.556796][T10781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.642461][T10781] CPU: 1 UID: 0 PID: 10781 Comm: syz.4.1325 Not tainted syzkaller #0 PREEMPT(full) 
[  481.642488][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  481.642498][T10781] Call Trace:
[  481.642504][T10781]  <TASK>
[  481.642511][T10781]  dump_stack_lvl+0x16c/0x1f0
[  481.642549][T10781]  should_fail_ex+0x512/0x640
[  481.642574][T10781]  _copy_from_user+0x2e/0xd0
[  481.642597][T10781]  copy_msghdr_from_user+0x98/0x160
[  481.642621][T10781]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  481.642648][T10781]  ? kfree+0x252/0x6d0
[  481.642670][T10781]  ? __lock_acquire+0x622/0x1c90
[  481.642702][T10781]  ___sys_recvmsg+0xdb/0x1a0
[  481.642725][T10781]  ? __pfx____sys_recvmsg+0x10/0x10
[  481.642762][T10781]  ? __pfx___might_resched+0x10/0x10
[  481.642790][T10781]  do_recvmmsg+0x2fe/0x750
[  481.642817][T10781]  ? __pfx_do_recvmmsg+0x10/0x10
[  481.642846][T10781]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  481.642871][T10781]  ? __fget_files+0x20e/0x3c0
[  481.642895][T10781]  __x64_sys_recvmmsg+0x22a/0x280
[  481.642924][T10781]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  481.642955][T10781]  do_syscall_64+0xcd/0xfa0
[  481.642983][T10781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.643001][T10781] RIP: 0033:0x7fe39ed8efc9
[  481.643015][T10781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.643033][T10781] RSP: 002b:00007fe39fb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  481.643050][T10781] RAX: ffffffffffffffda RBX: 00007fe39efe6090 RCX: 00007fe39ed8efc9
[  481.643061][T10781] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  481.643071][T10781] RBP: 00007fe39fb67090 R08: 0000000000000000 R09: 0000000000000000
[  481.643081][T10781] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  481.643091][T10781] R13: 00007fe39efe6128 R14: 00007fe39efe6090 R15: 00007ffc34dc5298
[  481.643116][T10781]  </TASK>
[  482.023952][T10754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.140945][T10790] netlink: 755 bytes leftover after parsing attributes in process `syz.3.1328'.
[  482.610466][ T9731] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  482.790477][ T9731] usb 1-1: Using ep0 maxpacket: 8
[  482.815263][ T9731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  482.986720][ T9731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.033621][ T9731] usb 1-1: Product: syz
[  483.549180][ T9731] usb 1-1: Manufacturer: syz
[  483.592782][ T9731] usb 1-1: SerialNumber: syz
[  483.833127][ T9731] usb 1-1: config 0 descriptor??
[  483.843556][ T9731] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  483.858775][ T9731] dvb-usb: bulk message failed: -22 (2/0)
[  483.864755][ T9731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  483.876458][ T9731] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  483.886595][ T9731] usb 1-1: media controller created
[  483.926416][T10815] netlink: 755 bytes leftover after parsing attributes in process `syz.4.1336'.
[  484.396924][ T9731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  484.415549][ T9731] dvb-usb: bulk message failed: -22 (1/0)
[  484.426689][ T9731] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  484.440864][ T9731] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25
[  484.460038][ T9731] dvb-usb: schedule remote query interval to 50 msecs.
[  484.491383][ T9731] dvb-usb: bulk message failed: -22 (2/0)
[  484.510727][ T9731] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  484.525617][T10819] FAULT_INJECTION: forcing a failure.
[  484.525617][T10819] name failslab, interval 1, probability 0, space 0, times 0
[  484.559213][ T5919] dvb-usb: bulk message failed: -22 (1/0)
[  484.613952][ T5919] dvb-usb: error while querying for an remote control event.
[  484.625606][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.2.1337 Not tainted syzkaller #0 PREEMPT(full) 
[  484.625632][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  484.625643][T10819] Call Trace:
[  484.625648][T10819]  <TASK>
[  484.625655][T10819]  dump_stack_lvl+0x16c/0x1f0
[  484.625685][T10819]  should_fail_ex+0x512/0x640
[  484.625704][T10819]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  484.625732][T10819]  should_failslab+0xc2/0x120
[  484.625753][T10819]  kmem_cache_alloc_noprof+0x75/0x6e0
[  484.625779][T10819]  ? vm_area_dup+0x27/0x8d0
[  484.625807][T10819]  ? vm_area_dup+0x27/0x8d0
[  484.625829][T10819]  vm_area_dup+0x27/0x8d0
[  484.625854][T10819]  __split_vma+0x18e/0x1070
[  484.625879][T10819]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  484.625906][T10819]  ? __pfx___split_vma+0x10/0x10
[  484.625927][T10819]  ? kernel_text_address+0x8d/0x100
[  484.625962][T10819]  vma_modify+0xee1/0x2030
[  484.625990][T10819]  ? _kstrtoull+0x145/0x200
[  484.626016][T10819]  ? __pfx_vma_modify+0x10/0x10
[  484.626048][T10819]  vma_modify_flags+0x212/0x2d0
[  484.626074][T10819]  ? __pfx_vma_modify_flags+0x10/0x10
[  484.626109][T10819]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  484.626142][T10819]  mlock_fixup+0x27c/0xe50
[  484.626167][T10819]  ? mas_find+0x156/0x6d0
[  484.626185][T10819]  apply_vma_lock_flags+0x254/0x370
[  484.626214][T10819]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  484.626240][T10819]  ? __pfx___might_resched+0x10/0x10
[  484.626270][T10819]  ? __pfx_down_write_killable+0x10/0x10
[  484.626289][T10819]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  484.626311][T10819]  do_mlock+0x2a5/0x800
[  484.626337][T10819]  ? __fget_files+0x20e/0x3c0
[  484.626354][T10819]  ? __pfx_do_mlock+0x10/0x10
[  484.626380][T10819]  ? fput+0x9b/0xd0
[  484.626403][T10819]  ? ksys_write+0x1ac/0x250
[  484.626419][T10819]  ? __pfx_ksys_write+0x10/0x10
[  484.626440][T10819]  __x64_sys_mlock+0x59/0x80
[  484.626466][T10819]  do_syscall_64+0xcd/0xfa0
[  484.626495][T10819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.626512][T10819] RIP: 0033:0x7f189df8efc9
[  484.626527][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.626548][T10819] RSP: 002b:00007f189edbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  484.626567][T10819] RAX: ffffffffffffffda RBX: 00007f189e1e5fa0 RCX: 00007f189df8efc9
[  484.626578][T10819] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  484.626593][T10819] RBP: 00007f189edbd090 R08: 0000000000000000 R09: 0000000000000000
[  484.626603][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.626614][T10819] R13: 00007f189e1e6038 R14: 00007f189e1e5fa0 R15: 00007ffc3ce19518
[  484.626641][T10819]  </TASK>
[  484.896657][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.017991][ T5919] dvb-usb: bulk message failed: -22 (1/0)
[  485.023803][ T5919] dvb-usb: error while querying for an remote control event.
[  485.053676][   T30] audit: type=1400 audit(1762143602.296:761): avc:  denied  { append } for  pid=10824 comm="syz.2.1339" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  485.076809][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.090374][ T9731] dvb-usb: bulk message failed: -22 (1/0)
[  485.096161][ T9731] dvb-usb: error while querying for an remote control event.
[  485.160371][ T9731] dvb-usb: bulk message failed: -22 (1/0)
[  485.166166][ T9731] dvb-usb: error while querying for an remote control event.
[  485.230547][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  485.237245][ T5865] dvb-usb: error while querying for an remote control event.
[  485.300596][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  485.344353][ T5865] dvb-usb: error while querying for an remote control event.
[  485.460567][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  485.514654][ T5865] dvb-usb: error while querying for an remote control event.
[  485.530848][ T9731] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  485.651872][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  485.694167][ T5865] dvb-usb: error while querying for an remote control event.
[  485.790473][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  485.806195][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.818151][ T5865] dvb-usb: error while querying for an remote control event.
[  485.830119][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.843658][ T9731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  485.954361][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  486.065269][T10839] blktrace: Concurrent blktraces are not allowed on loop3
[  486.074420][ T5865] dvb-usb: error while querying for an remote control event.
[  486.428561][ T9731] usb 4-1: string descriptor 0 read error: -71
[  486.435069][ T9731] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00
[  486.445490][ T9731] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  486.465489][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  486.473690][ T5865] dvb-usb: error while querying for an remote control event.
[  486.532762][ T9731] usb 4-1: config 0 descriptor??
[  486.542150][ T9731] usb 4-1: can't set config #0, error -71
[  486.550192][ T9731] usb 4-1: USB disconnect, device number 43
[  486.681055][ T1914] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  486.682174][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[  486.720440][ T5919] usb 1-1: USB disconnect, device number 29
[  486.745548][ T5865] dvb-usb: error while querying for an remote control event.
[  486.890424][ T1914] usb 2-1: Using ep0 maxpacket: 32
[  486.909133][T10848] netlink: 'syz.4.1344': attribute type 21 has an invalid length.
[  487.150886][ T1914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  487.173391][ T1914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  487.208621][ T1914] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  487.229934][ T1914] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  487.249454][ T1914] usb 2-1: Product: syz
[  487.266166][ T1914] usb 2-1: Manufacturer: syz
[  487.544062][ T1914] usb 2-1: SerialNumber: syz
[  487.568857][ T1914] usb 2-1: config 0 descriptor??
[  487.625424][ T1914] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  487.649716][ T5919] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  487.808990][T10839] pim6reg: entered allmulticast mode
[  487.903868][   T30] audit: type=1326 audit(1762143605.146:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  487.944746][   T30] audit: type=1326 audit(1762143605.146:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  487.979174][   T30] audit: type=1326 audit(1762143605.166:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.020544][   T30] audit: type=1326 audit(1762143605.166:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.046165][   T30] audit: type=1326 audit(1762143605.166:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.098393][   T30] audit: type=1326 audit(1762143605.176:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.200955][   T30] audit: type=1326 audit(1762143605.186:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.227851][   T30] audit: type=1326 audit(1762143605.186:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.331703][   T30] audit: type=1326 audit(1762143605.206:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.372905][   T30] audit: type=1326 audit(1762143605.206:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6ab8efc9 code=0x7ffc0000
[  488.460768][ T1914] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  488.661876][  T203] usb 2-1: Failed to submit usb control message: -110
[  488.725891][  T203] usb 2-1: unable to send the bmi data to the device: -110
[  488.751481][ T1914] usb 3-1: Using ep0 maxpacket: 32
[  488.776926][  T203] usb 2-1: unable to get target info from device
[  488.785904][ T1914] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  488.794309][ T1914] usb 3-1: config 0 has no interface number 0
[  488.804256][  T203] usb 2-1: could not get target info (-110)
[  488.818065][ T1914] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  488.830346][  T203] usb 2-1: could not probe fw (-110)
[  488.848211][ T1914] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  488.860181][ T1914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.868525][ T1914] usb 3-1: Product: syz
[  488.872766][ T1914] usb 3-1: Manufacturer: syz
[  488.877750][ T1914] usb 3-1: SerialNumber: syz
[  488.892732][ T1914] usb 3-1: config 0 descriptor??
[  488.902613][ T5919] usb 2-1: USB disconnect, device number 34
[  488.906822][ T1914] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  488.919188][ T1914] em28xx 3-1:0.132: Video interface 132 found:
[  489.601058][ T1914] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  490.020592][T10909] netlink: 755 bytes leftover after parsing attributes in process `syz.0.1359'.
[  490.831151][T10897] hpfs: hpfs_map_sector(): read error
[  490.972939][ T1914] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  491.070463][ T1914] em28xx 3-1:0.132: board has no eeprom
[  491.170349][ T1914] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  491.180687][ T1914] em28xx 3-1:0.132: analog set to bulk mode.
[  491.203905][ T5817] em28xx 3-1:0.132: Registering V4L2 extension
[  491.213789][ T1914] usb 3-1: USB disconnect, device number 35
[  491.225638][ T1914] em28xx 3-1:0.132: Disconnecting em28xx
[  491.620381][ T5920] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  491.638496][ T5817] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  491.646709][ T5817] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  491.682531][ T5817] em28xx 3-1:0.132: No AC97 audio processor
[  491.764919][ T5817] usb 3-1: Decoder not found
[  491.782649][ T5817] em28xx 3-1:0.132: failed to create media graph
[  491.795970][ T5817] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  491.808498][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  491.819622][ T5920] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  491.872260][ T5817] em28xx 3-1:0.132: Remote control support is not available for this card.
[  491.893985][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  492.006426][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.084327][ T1914] em28xx 3-1:0.132: Closing input extension
[  492.192749][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  492.201849][ T5920] usb 4-1: invalid MIDI out EP 0
[  492.208170][ T1914] em28xx 3-1:0.132: Freeing device
[  492.295785][ T5920] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  492.382506][T10930] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  492.484075][T10939] FAULT_INJECTION: forcing a failure.
[  492.484075][T10939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.491727][T10930] infiniband syq1: RDMA CMA: cma_listen_on_dev, error -98
[  492.504029][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.4.1367 Not tainted syzkaller #0 PREEMPT(full) 
[  492.504051][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  492.504060][T10939] Call Trace:
[  492.504068][T10939]  <TASK>
[  492.504075][T10939]  dump_stack_lvl+0x16c/0x1f0
[  492.504104][T10939]  should_fail_ex+0x512/0x640
[  492.504126][T10939]  _copy_from_user+0x2e/0xd0
[  492.504153][T10939]  __tun_chr_ioctl+0x1de/0x4880
[  492.504175][T10939]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  492.504200][T10939]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  492.504223][T10939]  ? hook_file_ioctl_common+0x145/0x410
[  492.504250][T10939]  ? selinux_file_ioctl+0x180/0x270
[  492.504266][T10939]  ? selinux_file_ioctl+0xb4/0x270
[  492.504283][T10939]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  492.504304][T10939]  __x64_sys_ioctl+0x18e/0x210
[  492.504326][T10939]  do_syscall_64+0xcd/0xfa0
[  492.504351][T10939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.504368][T10939] RIP: 0033:0x7fe39ed8efc9
[  492.504381][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.504396][T10939] RSP: 002b:00007fe39fb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.504411][T10939] RAX: ffffffffffffffda RBX: 00007fe39efe5fa0 RCX: 00007fe39ed8efc9
[  492.504421][T10939] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004
[  492.504431][T10939] RBP: 00007fe39fb88090 R08: 0000000000000000 R09: 0000000000000000
[  492.504440][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.504449][T10939] R13: 00007fe39efe6038 R14: 00007fe39efe5fa0 R15: 00007ffc34dc5298
[  492.504471][T10939]  </TASK>
[  493.797467][T10953] fuse: Bad value for 'fd'
[  494.208483][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  494.208497][   T30] audit: type=1326 audit(1762143611.446:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.248450][   T30] audit: type=1326 audit(1762143611.446:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.256200][T10962] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  494.282401][   T30] audit: type=1326 audit(1762143611.486:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.318001][T10962] audit: out of memory in audit_log_start
[  494.318260][ T5919] usb 4-1: USB disconnect, device number 44
[  494.360443][   T30] audit: type=1326 audit(1762143611.486:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.414729][T10964] (syz.4.1376,10964,0):ocfs2_get_sector:1714 ERROR: status = -5
[  494.414738][   T30] audit: type=1326 audit(1762143611.486:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.430397][   T30] audit: type=1326 audit(1762143611.486:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.446508][    C0] vkms_vblank_simulate: vblank timer overrun
[  494.496701][T10964] (syz.4.1376,10964,0):ocfs2_sb_probe:753 ERROR: status = -5
[  494.504413][T10964] (syz.4.1376,10964,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  494.513294][T10964] (syz.4.1376,10964,0):ocfs2_fill_super:1177 ERROR: status = -5
[  494.634245][T10971] efs: device does not support 512 byte blocks
[  494.640840][T10971] device does not support 512 byte blocks
[  494.640840][T10971] 
[  494.649483][   T30] audit: type=1326 audit(1762143611.486:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.675466][T10970] netlink: 'syz.0.1378': attribute type 1 has an invalid length.
[  494.764922][   T30] audit: type=1326 audit(1762143611.486:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f1b8efc9 code=0x7ffc0000
[  494.906361][ T5919] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  495.093996][ T5919] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  495.127019][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.207672][ T5919] usb 4-1: Product: syz
[  495.212039][ T5919] usb 4-1: Manufacturer: syz
[  495.228958][ T5919] usb 4-1: SerialNumber: syz
[  495.256631][ T5919] usb 4-1: config 0 descriptor??
[  495.820628][ T9731] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  495.907013][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.922798][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.980688][ T9731] usb 2-1: Using ep0 maxpacket: 32
[  496.002473][ T9731] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  496.013290][ T9731] usb 2-1: config 0 has no interface number 0
[  496.019425][ T9731] usb 2-1: config 0 interface 184 has no altsetting 0
[  496.029698][ T9731] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  496.038814][ T9731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.047567][ T9731] usb 2-1: Product: syz
[  496.061105][ T9731] usb 2-1: Manufacturer: syz
[  496.066300][ T9731] usb 2-1: SerialNumber: syz
[  496.071419][ T5919] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  496.106552][ T9731] usb 2-1: config 0 descriptor??
[  496.134765][ T9731] smsc75xx v1.0.0
[  496.138775][ T9731] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  496.151347][ T9731] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  496.660468][ T9731] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  496.820468][ T9731] usb 5-1: Using ep0 maxpacket: 8
[  496.835529][ T9731] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  496.856137][ T9731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.915708][ T9731] usb 5-1: Product: syz
[  496.919957][ T9731] usb 5-1: Manufacturer: syz
[  496.930385][ T9731] usb 5-1: SerialNumber: syz
[  496.938643][ T9731] usb 5-1: config 0 descriptor??
[  496.950420][ T9731] gspca_main: se401-2.14.0 probing 047d:5003
[  497.151261][ T9731] gspca_se401: Bayer format not supported!
[  497.628056][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'.
[  497.805775][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.814548][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.345426][ T9731] usb 2-1: USB disconnect, device number 35
[  498.387328][T11025] syzkaller1: entered promiscuous mode
[  498.393175][T11025] syzkaller1: entered allmulticast mode
[  498.756867][ T5919] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  498.768113][ T5919] usb 4-1: USB disconnect, device number 45
[  498.860441][ T1914] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  499.010421][ T1914] usb 2-1: device descriptor read/64, error -71
[  499.122554][T11037] /dev/nullb0: Can't open blockdev
[  499.250407][ T1914] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  499.436989][ T5920] usb 5-1: USB disconnect, device number 49
[  499.444740][ T1914] usb 2-1: device descriptor read/64, error -71
[  499.586653][ T1914] usb usb2-port1: attempt power cycle
[  500.490891][ T1914] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  500.541013][ T1914] usb 2-1: device descriptor read/8, error -71
[  500.960709][ T9731] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  501.325663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.380471][ T1914] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  501.400823][ T1914] usb 2-1: device descriptor read/8, error -71
[  501.481995][ T9731] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.517757][ T1914] usb usb2-port1: unable to enumerate USB device
[  501.520310][ T9731] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  501.558439][ T9731] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  501.568797][ T9731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  501.576983][ T9731] usb 3-1: SerialNumber: syz
[  501.636446][T11070] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1408'.
[  501.645728][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1408'.
[  501.741070][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'.
[  501.932968][ T9731] usb 3-1: 0:2 : does not exist
[  501.939251][ T9731] usb 3-1: unit 5 not found!
[  501.985420][ T9731] usb 3-1: USB disconnect, device number 36
[  502.002991][ T1914] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  502.158864][T11087] FAULT_INJECTION: forcing a failure.
[  502.158864][T11087] name failslab, interval 1, probability 0, space 0, times 0
[  502.183510][ T1914] usb 5-1: Using ep0 maxpacket: 8
[  502.195900][T11088] hpfs: hpfs_map_sector(): read error
[  502.221459][ T1914] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  502.229656][T11087] CPU: 1 UID: 0 PID: 11087 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(full) 
[  502.229680][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  502.229690][T11087] Call Trace:
[  502.229698][T11087]  <TASK>
[  502.229704][T11087]  dump_stack_lvl+0x16c/0x1f0
[  502.229732][T11087]  should_fail_ex+0x512/0x640
[  502.229750][T11087]  ? fs_reclaim_acquire+0xae/0x150
[  502.229770][T11087]  should_failslab+0xc2/0x120
[  502.229788][T11087]  kmem_cache_alloc_noprof+0x75/0x6e0
[  502.229811][T11087]  ? __pfx_map_id_range_down+0x10/0x10
[  502.229831][T11087]  ? security_inode_alloc+0x3b/0x2b0
[  502.229850][T11087]  ? security_inode_alloc+0x3b/0x2b0
[  502.229864][T11087]  security_inode_alloc+0x3b/0x2b0
[  502.229880][T11087]  inode_init_always_gfp+0xce4/0x1030
[  502.229900][T11087]  alloc_inode+0x86/0x240
[  502.229921][T11087]  sock_alloc+0x40/0x280
[  502.229944][T11087]  __sock_create+0xc1/0x8d0
[  502.229963][T11087]  __sys_socket+0x14d/0x260
[  502.229979][T11087]  ? __pfx___sys_socket+0x10/0x10
[  502.229995][T11087]  ? do_user_addr_fault+0x843/0x1370
[  502.230015][T11087]  __x64_sys_socket+0x72/0xb0
[  502.230034][T11087]  ? lockdep_hardirqs_on+0x7c/0x110
[  502.230057][T11087]  do_syscall_64+0xcd/0xfa0
[  502.230081][T11087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.230096][T11087] RIP: 0033:0x7eff6ab90ee7
[  502.230110][T11087] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.230124][T11087] RSP: 002b:00007eff6b9aafa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  502.230140][T11087] RAX: ffffffffffffffda RBX: 00007eff6ade5fa0 RCX: 00007eff6ab90ee7
[  502.230150][T11087] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  502.230160][T11087] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  502.230169][T11087] R10: 00002000000003c0 R11: 0000000000000286 R12: 0000000000000001
[  502.230178][T11087] R13: 00007eff6ade6038 R14: 00007eff6ade5fa0 R15: 00007ffc35066f68
[  502.230200][T11087]  </TASK>
[  502.230229][T11087] socket: no more sockets
[  502.230859][ T1914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.722461][ T1914] pvrusb2: Hardware description: Terratec Grabster AV400
[  502.780766][ T1914] pvrusb2: **********
[  502.912676][ T1914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  502.926692][ T1914] pvrusb2: Important functionality might not be entirely working.
[  502.939757][ T1914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  503.063446][ T1914] pvrusb2: **********
[  504.120104][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  504.120148][   T30] audit: type=1400 audit(1762143621.356:823): avc:  denied  { module_load } for  pid=11101 comm="syz.0.1418" path="/277/bus" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  504.237070][T11109] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1416'.
[  504.246917][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1416'.
[  504.361325][T11110] Invalid ELF header magic: != ELF
[  504.429314][ T2335] pvrusb2: Invalid write control endpoint
[  504.464498][ T1914] usb 5-1: USB disconnect, device number 50
[  504.532050][ T2335] pvrusb2: Invalid write control endpoint
[  504.555815][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  504.606358][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  504.788202][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  505.027028][ T2335] pvrusb2: Device being rendered inoperable
[  505.030336][   T30] audit: type=1400 audit(1762143622.256:824): avc:  denied  { read } for  pid=11119 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  505.060406][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  505.078967][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  505.099127][ T2335] pvrusb2: Attached sub-driver cx25840
[  505.107690][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  505.117835][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  505.528891][T11118] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1419'.
[  505.584369][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'.
[  507.406816][T11118] syz.3.1419 (11118): drop_caches: 2
[  508.410445][   T30] audit: type=1400 audit(1762143625.646:825): avc:  denied  { connect } for  pid=11173 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  508.520502][   T30] audit: type=1400 audit(1762143625.726:826): avc:  denied  { write } for  pid=11172 comm="syz.3.1436" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  509.411509][ T5865] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  509.673473][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  509.774561][ T5865] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  509.798928][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  509.810976][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.866466][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  509.870748][ T1914] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  509.882771][ T5865] usb 2-1: invalid MIDI out EP 0
[  509.904867][ T5865] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  510.137997][ T1914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  510.160725][T11211] hpfs: hpfs_map_sector(): read error
[  510.380627][ T1914] usb 4-1: config 0 has no interface number 0
[  510.569014][ T1914] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  510.578132][ T1914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.589143][ T1914] usb 4-1: Product: syz
[  510.739667][ T1914] usb 4-1: Manufacturer: syz
[  510.967999][ T1914] usb 4-1: SerialNumber: syz
[  511.015321][ T1914] usb 4-1: config 0 descriptor??
[  511.263735][ T1914] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  511.306711][ T1914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  511.322800][ T1914] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  511.394745][ T1914] usb 4-1: media controller created
[  511.494128][ T1914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  511.842122][ T1914] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  511.889075][ T1914] usb 4-1: USB disconnect, device number 46
[  512.120387][ T5817] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  512.281032][ T5817] usb 5-1: Using ep0 maxpacket: 16
[  512.289831][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short
[  512.309387][ T5817] usb 5-1: config 0 has an invalid interface number: 130 but max is 1
[  512.317818][ T5817] usb 5-1: config 0 has an invalid interface number: 130 but max is 1
[  512.340446][ T5817] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  513.145768][ T5817] usb 5-1: config 0 has no interface number 0
[  513.155049][ T5817] usb 5-1: config 0 interface 130 has no altsetting 0
[  513.424220][ T5817] usb 5-1: New USB device found, idVendor=369d, idProduct=1a01, bcdDevice=b2.c3
[  513.562882][ T5865] usb 2-1: USB disconnect, device number 40
[  513.572272][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.610740][ T5817] usb 5-1: Product: syz
[  514.627496][ T5817] usb 5-1: Manufacturer: syz
[  514.637608][ T5817] usb 5-1: SerialNumber: syz
[  514.664793][ T5817] usb 5-1: config 0 descriptor??
[  514.894217][ T5921] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  515.301965][ T5817] usb-storage 5-1:0.130: USB Mass Storage device detected
[  515.311405][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  515.324328][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.391113][ T5817] usb 5-1: USB disconnect, device number 51
[  515.399664][ T5921] usb 1-1: config 0 descriptor??
[  515.724611][T11288] FAULT_INJECTION: forcing a failure.
[  515.724611][T11288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.737751][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.3.1463 Not tainted syzkaller #0 PREEMPT(full) 
[  515.737774][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  515.737785][T11288] Call Trace:
[  515.737791][T11288]  <TASK>
[  515.737798][T11288]  dump_stack_lvl+0x16c/0x1f0
[  515.737829][T11288]  should_fail_ex+0x512/0x640
[  515.737854][T11288]  _copy_from_user+0x2e/0xd0
[  515.737882][T11288]  kstrtouint_from_user+0xd6/0x1d0
[  515.737909][T11288]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  515.737935][T11288]  ? __lock_acquire+0xb8a/0x1c90
[  515.737974][T11288]  proc_fail_nth_write+0x83/0x220
[  515.737995][T11288]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  515.738023][T11288]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  515.738041][T11288]  vfs_write+0x2a0/0x11d0
[  515.738063][T11288]  ? __pfx___mutex_lock+0x10/0x10
[  515.738080][T11288]  ? __pfx_vfs_write+0x10/0x10
[  515.738104][T11288]  ? __fget_files+0x20e/0x3c0
[  515.738129][T11288]  ksys_write+0x12a/0x250
[  515.738146][T11288]  ? __pfx_ksys_write+0x10/0x10
[  515.738163][T11288]  ? fdget+0x187/0x210
[  515.738185][T11288]  do_syscall_64+0xcd/0xfa0
[  515.738213][T11288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.738230][T11288] RIP: 0033:0x7eff6ab8da7f
[  515.738244][T11288] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  515.738261][T11288] RSP: 002b:00007eff6b96a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  515.738279][T11288] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff6ab8da7f
[  515.738290][T11288] RDX: 0000000000000001 RSI: 00007eff6b96a0a0 RDI: 0000000000000006
[  515.738301][T11288] RBP: 00007eff6b96a090 R08: 0000000000000000 R09: 0000000000000000
[  515.738311][T11288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  515.738321][T11288] R13: 00007eff6ade6218 R14: 00007eff6ade6180 R15: 00007ffc35066f68
[  515.738348][T11288]  </TASK>
[  515.943779][ T5921] ath6kl: Unsupported hardware version: 0x0
[  515.969693][ T5921] ath6kl: Failed to init ath6kl core: -22
[  515.976019][ T5921] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22
[  516.145047][T11259] IPVS: set_ctl: invalid protocol: 57888 255.255.255.255:20004
[  516.185558][ T5865] usb 1-1: USB disconnect, device number 30
[  516.457240][T11294] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1465'.
[  516.466856][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'.
[  518.280397][ T5921] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  518.344530][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1471'.
[  518.389996][ T5817] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  518.510901][ T5921] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  518.548535][ T5921] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  518.581087][ T5921] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  518.650605][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.698763][ T5817] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  518.743916][ T5817] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  518.757164][ T5817] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  518.770031][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.777421][ T5921] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  518.801113][ T5921] usb 4-1: invalid MIDI out EP 0
[  518.930061][ T5921] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  518.999502][ T5817] usb 2-1: usb_control_msg returned -32
[  519.005491][ T5817] usbtmc 2-1:16.0: can't read capabilities
[  519.867792][ T5865] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  520.075467][ T5865] usb 1-1: device descriptor read/64, error -71
[  522.765340][ T5865] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  523.219892][ T5817] usb 2-1: USB disconnect, device number 41
[  524.224987][ T5817] usb 4-1: USB disconnect, device number 47
[  525.500388][   T30] audit: type=1400 audit(1762143642.736:827): avc:  denied  { setopt } for  pid=11349 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  525.779677][T11368] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  525.810525][ T5921] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  526.125957][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  526.961817][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  527.092000][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.147191][ T5921] usb 5-1: Product: syz
[  527.190713][ T5921] usb 5-1: Manufacturer: syz
[  527.215050][ T5921] usb 5-1: SerialNumber: syz
[  527.223036][ T5921] usb 5-1: config 0 descriptor??
[  527.237987][ T5921] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  527.300115][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  527.370731][T11387] hpfs: hpfs_map_sector(): read error
[  527.931264][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  527.947419][ T5921] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  527.968287][ T5921] usb 5-1: media controller created
[  527.990349][ T1914] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  528.094149][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  528.180862][ T1914] usb 4-1: device descriptor read/64, error -71
[  528.188733][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  528.211876][ T5921] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  528.316066][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26
[  528.350543][T10367] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  528.388572][ T5921] dvb-usb: schedule remote query interval to 50 msecs.
[  528.470375][ T1914] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  528.482394][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  528.593044][ T5921] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  528.603771][ T5956] dvb-usb: bulk message failed: -22 (1/0)
[  528.609499][ T5956] dvb-usb: error while querying for an remote control event.
[  528.616981][ T1914] usb 4-1: device descriptor read/64, error -71
[  528.791387][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  528.797329][ T5921] dvb-usb: error while querying for an remote control event.
[  528.830583][ T1914] usb usb4-port1: attempt power cycle
[  528.850329][T10367] usb 1-1: device descriptor read/64, error -71
[  528.933062][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  528.949753][ T5921] dvb-usb: error while querying for an remote control event.
[  529.093020][T10367] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  529.130417][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  529.170824][ T1914] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  529.552694][ T5921] dvb-usb: error while querying for an remote control event.
[  529.610475][ T1914] usb 4-1: device descriptor read/8, error -71
[  529.621064][ T5817] dvb-usb: bulk message failed: -22 (1/0)
[  529.627997][ T5817] dvb-usb: error while querying for an remote control event.
[  529.690418][ T5817] dvb-usb: bulk message failed: -22 (1/0)
[  529.696217][ T5817] dvb-usb: error while querying for an remote control event.
[  529.770614][ T5817] dvb-usb: bulk message failed: -22 (1/0)
[  529.782864][ T5817] dvb-usb: error while querying for an remote control event.
[  529.860908][ T5817] dvb-usb: bulk message failed: -22 (1/0)
[  529.866837][ T5817] dvb-usb: error while querying for an remote control event.
[  529.874321][ T5920] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  529.885631][ T1914] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  529.911006][ T1914] usb 4-1: device descriptor read/8, error -71
[  529.940433][T10367] usb 1-1: device descriptor read/64, error -71
[  529.950364][ T5817] dvb-usb: bulk message failed: -22 (1/0)
[  529.975658][ T5817] dvb-usb: error while querying for an remote control event.
[  530.002355][ T5817] usb 5-1: USB disconnect, device number 52
[  530.023136][ T1914] usb usb4-port1: unable to enumerate USB device
[  530.040644][T11407] hpfs: hpfs_map_sector(): read error
[  530.046295][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  530.054585][T10367] usb usb1-port1: attempt power cycle
[  530.120001][ T5920] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  530.657981][ T5920] usb 3-1: config 0 has no interface number 0
[  530.668733][ T5817] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  530.790393][ T5920] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  530.894514][ T5920] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  530.926374][ T5920] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  530.943839][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.137449][ T5920] usb 3-1: Product: syz
[  531.201385][T10367] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  531.843059][ T5920] usb 3-1: Manufacturer: syz
[  531.847811][ T5920] usb 3-1: SerialNumber: syz
[  531.950485][T10367] usb 1-1: device not accepting address 35, error -71
[  531.991484][ T5920] usb 3-1: config 0 descriptor??
[  532.023281][T11400] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  532.069509][T11400] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  532.244064][   T30] audit: type=1400 audit(1762143649.486:828): avc:  denied  { setopt } for  pid=11428 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  532.378171][T11400] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  532.403905][T11400] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  533.167144][T11442] Invalid logical block size (8193)
[  534.603827][   T30] audit: type=1400 audit(1762143651.846:829): avc:  denied  { execute_no_trans } for  pid=11441 comm="syz.3.1505" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=37499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  536.033286][ T5920] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  536.274955][ T5920] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  536.355005][ T5920] asix 3-1:0.251: probe with driver asix failed with error -71
[  536.434817][ T5920] usb 3-1: USB disconnect, device number 37
[  536.706602][T10367] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  538.041856][T10367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.070435][T10367] usb 5-1: config 0 has no interfaces?
[  538.124926][T10367] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  538.180472][T10367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.226888][T10367] usb 5-1: Product: syz
[  538.256661][T10367] usb 5-1: Manufacturer: syz
[  538.340330][T10367] usb 5-1: SerialNumber: syz
[  538.368919][T10367] usb 5-1: config 0 descriptor??
[  538.595755][T10367] usb 5-1: USB disconnect, device number 53
[  538.745493][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'.
[  541.651443][T10367] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  542.162951][T11490] hpfs: hpfs_map_sector(): read error
[  542.530329][T10367] usb 5-1: Using ep0 maxpacket: 16
[  542.721544][T10367] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  542.790035][T10367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.830376][T10367] usb 5-1: Product: syz
[  542.834593][T10367] usb 5-1: Manufacturer: syz
[  542.869269][T10367] usb 5-1: SerialNumber: syz
[  542.883466][T10367] usb 5-1: config 0 descriptor??
[  543.769940][T10367] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  544.755528][T10367] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  545.415972][   T30] audit: type=1400 audit(1762143662.656:830): avc:  denied  { setopt } for  pid=11509 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  546.583902][ T5921] usb 5-1: USB disconnect, device number 54
[  546.773129][T10367] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  546.967695][T10367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.996963][T10367] usb 1-1: config 0 has no interfaces?
[  547.014592][T10367] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  547.039587][T10367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.058197][T10367] usb 1-1: Product: syz
[  547.068044][T10367] usb 1-1: Manufacturer: syz
[  547.078152][T10367] usb 1-1: SerialNumber: syz
[  547.090083][T10367] usb 1-1: config 0 descriptor??
[  547.095290][ T5920] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  547.261959][ T5920] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  547.278800][ T5920] usb 2-1: config 0 has no interface number 0
[  547.294376][ T5920] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  547.320515][ T5921] usb 1-1: USB disconnect, device number 37
[  547.333068][ T5920] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  547.355682][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.527211][ T5920] usb 2-1: Product: syz
[  547.543216][ T5920] usb 2-1: Manufacturer: syz
[  547.558474][ T5920] usb 2-1: SerialNumber: syz
[  547.575404][ T5920] usb 2-1: config 0 descriptor??
[  547.993851][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.018271][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.134882][T11551] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1535'.
[  548.161303][ T5921] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  548.181609][T11551] =======================================================
[  548.181609][T11551] WARNING: The mand mount option has been deprecated and
[  548.181609][T11551]          and is ignored by this kernel. Remove the mand
[  548.181609][T11551]          option from the mount to silence this warning.
[  548.181609][T11551] =======================================================
[  548.216549][    C0] vkms_vblank_simulate: vblank timer overrun
[  548.385910][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  548.395703][ T5920] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  548.413937][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short
[  548.431249][ T5920] keyspan 2-1:0.133: unsupported endpoint type 0
[  548.438059][ T5921] usb 4-1: config index 0 descriptor too short (expected 51, got 18)
[  548.450492][ T5921] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  548.489000][ T5921] usb 4-1: config 4 has no interface number 0
[  548.497113][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  548.520743][ T5921] usb 4-1: config 4 interface 30 has no altsetting 0
[  548.533131][ T5921] usb 4-1: string descriptor 0 read error: -22
[  548.547004][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  548.555066][ T5921] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  548.580517][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  548.589948][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.609708][ T5920] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  548.622090][T10367] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  548.661667][ T5921] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  548.668700][ T5921] dw2102: su3000_power_ctrl: 1, initialized 0
[  548.680817][ T5920] usb 2-1: USB disconnect, device number 42
[  548.698221][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  548.704980][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  548.734621][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  548.750612][ T5920] keyspan 2-1:0.133: device disconnected
[  548.762329][ T5921] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  548.783467][ T5921] usb 4-1: media controller created
[  548.788751][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  548.806284][ T5921] dw2102: i2c transfer failed.
[  548.816433][T10367] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  548.825720][T10367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.854040][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  548.871017][ T5921] dw2102: i2c transfer failed.
[  548.876699][T10367] usb 1-1: config 0 descriptor??
[  548.891548][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  548.906020][T10367] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27
[  548.922984][ T5921] dw2102: i2c transfer failed.
[  548.928076][T11543] Illegal XDP return value 3437000894 on prog  (id 236) dev N/A, expect packet loss!
[  548.943409][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  548.968876][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.977669][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.038333][ T5921] dw2102: i2c transfer failed.
[  549.043652][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  549.057458][ T5921] dw2102: i2c transfer failed.
[  549.066844][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  549.082479][ T5921] dw2102: i2c transfer failed.
[  549.091760][ T5921] dvb-usb: MAC address: 02:02:02:02:02:02
[  549.127391][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  549.170641][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  549.183089][ T5921] dw2102: command 0x0e transfer failed.
[  549.196239][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  549.210324][ T5921] dw2102: command 0x0e transfer failed.
[  549.641538][T10367] usb 1-1: USB disconnect, device number 38
[  549.850585][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  549.860697][ T5921] dw2102: command 0x0e transfer failed.
[  549.879622][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  549.896609][ T5921] dw2102: command 0x0e transfer failed.
[  549.906722][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  549.919470][ T5921] dw2102: command 0x51 transfer failed.
[  549.935442][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  549.945537][ T5921] dw2102: i2c probe for address 0x68 failed.
[  549.966118][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  549.976268][ T5921] dw2102: i2c probe for address 0x69 failed.
[  549.993379][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  550.004273][ T5921] dw2102: i2c probe for address 0x6a failed.
[  550.014091][T11543] dvb-usb: bulk message failed: -22 (4/0)
[  550.020515][T11543] dw2102: i2c transfer failed.
[  550.025875][ T5921] dw2102: probing for demodulator failed. Is the external power switched on?
[  550.099034][ T5921] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  550.220309][ T5921] rc_core: IR keymap rc-tt-1500 not found
[  550.226234][ T5921] Registered IR keymap rc-empty
[  550.249661][ T5921] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  550.263395][ T5921] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28
[  550.290594][ T5921] dvb-usb: schedule remote query interval to 250 msecs.
[  550.297936][ T5921] dw2102: su3000_power_ctrl: 0, initialized 1
[  550.373611][ T5921] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  550.446947][ T5921] usb 4-1: USB disconnect, device number 52
[  550.518921][   T30] audit: type=1326 audit(1762143667.756:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  551.709675][   T30] audit: type=1326 audit(1762143667.756:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  552.361405][ T5921] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  552.414936][   T30] audit: type=1326 audit(1762143667.876:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  552.703870][   T30] audit: type=1326 audit(1762143667.876:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  552.727284][    C0] vkms_vblank_simulate: vblank timer overrun
[  553.160892][   T30] audit: type=1326 audit(1762143667.876:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  553.184439][   T30] audit: type=1326 audit(1762143667.876:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  553.224461][T11586] SELinux:  Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped).
[  553.477056][   T30] audit: type=1326 audit(1762143667.896:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  553.501290][   T30] audit: type=1326 audit(1762143667.896:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  553.524646][    C0] vkms_vblank_simulate: vblank timer overrun
[  553.910290][   T30] audit: type=1326 audit(1762143667.896:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  553.950456][ T5920] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  553.958362][ T5921] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  554.004581][   T30] audit: type=1326 audit(1762143667.896:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  554.204791][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.220366][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.231045][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  554.247623][ T5921] usb 1-1: config 0 has no interfaces?
[  554.297719][ T5920] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  554.313459][ T5921] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  554.344197][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.353061][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.374088][ T5921] usb 1-1: Product: syz
[  554.388330][ T5921] usb 1-1: Manufacturer: syz
[  554.397955][ T5920] usb 4-1: config 0 descriptor??
[  554.402989][ T5921] usb 1-1: SerialNumber: syz
[  554.414806][ T5921] usb 1-1: config 0 descriptor??
[  554.605868][T11609] hpfs: hpfs_map_sector(): read error
[  555.461180][ T5920] usbhid 4-1:0.0: can't add hid device: -71
[  555.467173][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  555.532703][ T5920] usb 4-1: USB disconnect, device number 53
[  555.590517][ T5921] usb 1-1: USB disconnect, device number 39
[  556.632674][T11628] No control pipe specified
[  557.307293][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  557.307304][   T30] audit: type=1326 audit(1762143674.546:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.337090][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.402484][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'.
[  557.567719][   T30] audit: type=1326 audit(1762143674.546:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.591129][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.633024][   T30] audit: type=1326 audit(1762143674.616:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.656347][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.700326][   T30] audit: type=1326 audit(1762143674.616:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.723741][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.730846][ T5921] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  557.750340][ T5920] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  557.781182][   T30] audit: type=1326 audit(1762143674.616:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.804612][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.810964][T10367] usb 4-1: new low-speed USB device number 54 using dummy_hcd
[  557.854368][   T30] audit: type=1326 audit(1762143674.616:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.900333][ T5921] usb 3-1: Using ep0 maxpacket: 8
[  557.910799][ T5920] usb 2-1: Using ep0 maxpacket: 16
[  557.921007][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  557.930435][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  557.943045][   T30] audit: type=1326 audit(1762143674.616:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  557.977163][ T5920] usb 2-1: config 0 has no interface number 0
[  557.988866][T10367] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  558.010560][ T5921] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  558.019943][T10367] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8
[  558.032571][ T5920] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  558.050298][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.058563][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.067395][T10367] usb 4-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  558.083925][   T30] audit: type=1326 audit(1762143674.616:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  558.107321][    C0] vkms_vblank_simulate: vblank timer overrun
[  558.122785][ T5920] usb 2-1: Product: syz
[  558.137478][ T5921] usb 3-1: config 0 descriptor??
[  558.142745][ T5920] usb 2-1: Manufacturer: syz
[  558.148333][T10367] usb 4-1: config 0 interface 0 has no altsetting 0
[  558.157152][ T5920] usb 2-1: SerialNumber: syz
[  558.175657][T10367] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00
[  558.186126][ T5920] usb 2-1: config 0 descriptor??
[  558.209932][ T5920] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  558.218780][T10367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.229986][   T30] audit: type=1326 audit(1762143674.696:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  558.253270][    C0] vkms_vblank_simulate: vblank timer overrun
[  558.293800][T10367] usb 4-1: config 0 descriptor??
[  558.317536][T11634] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  558.422035][   T30] audit: type=1326 audit(1762143674.696:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189df8efc9 code=0x7ffc0000
[  558.546709][ T5921] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  560.230529][ T5920] gspca_spca1528: reg_w err -110
[  560.235592][ T5920] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[  560.371035][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'.
[  564.640776][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  565.113449][ T5817] usb 2-1: USB disconnect, device number 43
[  565.466622][    C1] sched: DL replenish lagged too much
[  568.960490][T10367] usbhid 4-1:0.0: can't add hid device: -32
[  569.040387][T10367] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  569.533237][T10367] usb 4-1: USB disconnect, device number 54
[  573.072668][ T1206] usb 3-1: USB disconnect, device number 38
[  573.748126][ T5817] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  573.820336][ T1914] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  573.910360][ T5817] usb 1-1: Using ep0 maxpacket: 16
[  573.926741][ T5817] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  573.960347][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.991743][ T1914] usb 5-1: config 0 has an invalid interface number: 189 but max is 0
[  574.004196][ T5817] usb 1-1: Product: syz
[  574.030276][ T5817] usb 1-1: Manufacturer: syz
[  574.035088][ T1914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.060327][ T5817] usb 1-1: SerialNumber: syz
[  574.086956][ T1914] usb 5-1: config 0 has no interface number 0
[  574.110610][ T5817] r8152-cfgselector 1-1: Unknown version 0x0000
[  574.121951][ T1914] usb 5-1: config 0 interface 189 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  574.145036][T11661] trusted_key: syz.3.1559 sent an empty control message without MSG_MORE.
[  574.160358][ T5817] r8152-cfgselector 1-1: config 0 descriptor??
[  574.188213][T11661] FAULT_INJECTION: forcing a failure.
[  574.188213][T11661] name failslab, interval 1, probability 0, space 0, times 0
[  574.247570][ T1914] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  574.270282][T11661] CPU: 0 UID: 0 PID: 11661 Comm: syz.3.1559 Not tainted syzkaller #0 PREEMPT(full) 
[  574.270308][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  574.270319][T11661] Call Trace:
[  574.270328][T11661]  <TASK>
[  574.270336][T11661]  dump_stack_lvl+0x16c/0x1f0
[  574.270367][T11661]  should_fail_ex+0x512/0x640
[  574.270388][T11661]  ? __kmalloc_noprof+0xca/0x880
[  574.270415][T11661]  should_failslab+0xc2/0x120
[  574.270436][T11661]  __kmalloc_noprof+0xdd/0x880
[  574.270460][T11661]  ? sock_kmalloc+0x111/0x170
[  574.270492][T11661]  ? sock_kmalloc+0x111/0x170
[  574.270516][T11661]  sock_kmalloc+0x111/0x170
[  574.270546][T11661]  af_alg_alloc_areq+0xbc/0x2e0
[  574.270576][T11661]  aead_recvmsg+0x3fd/0x16a0
[  574.270611][T11661]  ? __pfx_aead_recvmsg+0x10/0x10
[  574.270639][T11661]  sock_recvmsg+0x1f9/0x250
[  574.270670][T11661]  ____sys_recvmsg+0x218/0x6b0
[  574.270692][T11661]  ? __pfx_____sys_recvmsg+0x10/0x10
[  574.270721][T11661]  ? __lock_acquire+0x622/0x1c90
[  574.270753][T11661]  ___sys_recvmsg+0x114/0x1a0
[  574.270778][T11661]  ? __pfx____sys_recvmsg+0x10/0x10
[  574.270805][T11661]  ? find_held_lock+0x2b/0x80
[  574.270844][T11661]  do_recvmmsg+0x2fe/0x750
[  574.270872][T11661]  ? __pfx_do_recvmmsg+0x10/0x10
[  574.270893][T11661]  ? find_held_lock+0x2b/0x80
[  574.270913][T11661]  ? __might_fault+0xe3/0x190
[  574.270939][T11661]  ? __might_fault+0x13b/0x190
[  574.270977][T11661]  ? __pfx_get_timespec64+0x10/0x10
[  574.271002][T11661]  ? __fget_files+0x20e/0x3c0
[  574.271028][T11661]  __x64_sys_recvmmsg+0x199/0x280
[  574.271054][T11661]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  574.271087][T11661]  do_syscall_64+0xcd/0xfa0
[  574.271115][T11661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.271133][T11661] RIP: 0033:0x7eff6ab8efc9
[  574.271149][T11661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.271165][T11661] RSP: 002b:00007eff6b9ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  574.271187][T11661] RAX: ffffffffffffffda RBX: 00007eff6ade5fa0 RCX: 00007eff6ab8efc9
[  574.271200][T11661] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000004
[  574.271210][T11661] RBP: 00007eff6b9ac090 R08: 0000200000008000 R09: 0000000000000000
[  574.271221][T11661] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001
[  574.271232][T11661] R13: 00007eff6ade6038 R14: 00007eff6ade5fa0 R15: 00007ffc35066f68
[  574.271258][T11661]  </TASK>
[  574.520576][    C0] vkms_vblank_simulate: vblank timer overrun
[  574.633319][ T1914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.641493][ T1914] usb 5-1: Product: syz
[  574.645684][ T1914] usb 5-1: Manufacturer: syz
[  574.650357][ T1914] usb 5-1: SerialNumber: syz
[  574.752687][ T1914] usb 5-1: config 0 descriptor??
[  574.762381][ T1914] ums-alauda 5-1:0.189: USB Mass Storage device detected
[  574.805884][T11678] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  574.974541][T11678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  574.983022][T11678] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  575.000771][T11678] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  575.011462][T11678] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  575.023745][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  575.023760][   T30] audit: type=1400 audit(1762143692.266:897): avc:  denied  { mounton } for  pid=11674 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  575.078635][T10367] r8152-cfgselector 1-1: USB disconnect, device number 40
[  575.136447][T11674] wg2 speed is unknown, defaulting to 1000
[  575.159573][ T1914] usb 5-1: USB disconnect, device number 55
[  575.444842][   T55] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  575.480351][   T55] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.677570][   T55] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  575.758746][   T55] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.120410][ T5135] Bluetooth: hci3: command tx timeout
[  577.463993][T10367] wg2 speed is unknown, defaulting to 1000
[  577.594263][T10367] syz0: Port: 1 Link DOWN
[  577.616356][T10367] wg2 speed is unknown, defaulting to 1000
[  577.952340][   T55] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.020879][   T55] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.275360][T11696] kvm: pic: non byte write
[  578.316486][   T55] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.415610][   T55] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.214415][ T5135] Bluetooth: hci3: command tx timeout
[  580.279914][   T55] team0: left allmulticast mode
[  580.306682][   T55] team_slave_0: left allmulticast mode
[  580.320588][   T55] team_slave_1: left allmulticast mode
[  580.332068][   T55] team0: left promiscuous mode
[  580.341701][   T55] team_slave_0: left promiscuous mode
[  580.350537][   T55] team_slave_1: left promiscuous mode
[  580.365580][   T55] bridge0: port 1(team0) entered disabled state
[  581.280329][ T5135] Bluetooth: hci3: command tx timeout
[  581.551470][T11719] hpfs: hpfs_map_sector(): read error
[  582.750832][   T55] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  583.079092][   T55] ip6gretap1 (unregistering): left allmulticast mode
[  583.360366][ T5135] Bluetooth: hci3: command tx timeout
[  583.432418][T11737] No control pipe specified
[  583.973263][   T30] audit: type=1400 audit(1762143701.216:898): avc:  denied  { connect } for  pid=11739 comm="syz.1.1577" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  584.730748][T10367] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  586.200343][T10367] usb 2-1: Using ep0 maxpacket: 16
[  586.212663][T10367] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  586.222394][T10367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.230488][T10367] usb 2-1: Product: syz
[  586.234725][T10367] usb 2-1: Manufacturer: syz
[  586.239309][T10367] usb 2-1: SerialNumber: syz
[  586.927888][   T30] audit: type=1400 audit(1762143704.166:899): avc:  denied  { read } for  pid=11747 comm="syz.3.1579" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  587.044295][   T30] audit: type=1400 audit(1762143704.166:900): avc:  denied  { open } for  pid=11747 comm="syz.3.1579" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  587.596078][   T30] audit: type=1400 audit(1762143704.316:901): avc:  denied  { prog_load } for  pid=11747 comm="syz.3.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  587.655216][   T30] audit: type=1400 audit(1762143704.316:902): avc:  denied  { create } for  pid=11747 comm="syz.3.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  587.746038][   T30] audit: type=1400 audit(1762143704.946:903): avc:  denied  { read write } for  pid=5807 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  587.778666][   T30] audit: type=1400 audit(1762143704.946:904): avc:  denied  { open } for  pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  587.822501][   T30] audit: type=1400 audit(1762143704.946:905): avc:  denied  { ioctl } for  pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  587.872116][   T30] audit: type=1400 audit(1762143704.986:906): avc:  denied  { read write } for  pid=11751 comm="syz.3.1580" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  587.910589][   T30] audit: type=1400 audit(1762143704.986:907): avc:  denied  { open } for  pid=11751 comm="syz.3.1580" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  588.103151][T11760] hpfs: hpfs_map_sector(): read error
[  588.828161][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.851128][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.958192][   T55] bond0 (unregistering): Released all slaves
[  589.012673][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  589.012710][   T30] audit: type=1400 audit(1762143706.256:918): avc:  denied  { mounton } for  pid=11763 comm="syz.3.1581" path="/323/bus" dev="tmpfs" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  589.120557][   T30] audit: type=1400 audit(1762143706.286:919): avc:  denied  { unlink } for  pid=11763 comm="syz.3.1581" name="#9" dev="tmpfs" ino=1723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  589.210662][   T30] audit: type=1400 audit(1762143706.316:920): avc:  denied  { mount } for  pid=11763 comm="syz.3.1581" name="/" dev="overlay" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  589.254846][   T30] audit: type=1400 audit(1762143706.346:921): avc:  denied  { bpf } for  pid=11763 comm="syz.3.1581" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  589.277539][   T30] audit: type=1400 audit(1762143706.346:922): avc:  denied  { perfmon } for  pid=11763 comm="syz.3.1581" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  589.404437][   T30] audit: type=1400 audit(1762143706.386:923): avc:  denied  { prog_run } for  pid=11763 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  589.441115][   T55] bond1 (unregistering): Released all slaves
[  589.459680][   T30] audit: type=1400 audit(1762143706.436:924): avc:  denied  { create } for  pid=11763 comm="syz.3.1581" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  589.486823][   T30] audit: type=1400 audit(1762143706.436:925): avc:  denied  { link } for  pid=11763 comm="syz.3.1581" name="#b" dev="tmpfs" ino=1726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  589.516133][T11674] chnl_net:caif_netlink_parms(): no params data found
[  589.781399][   T30] audit: type=1400 audit(1762143706.436:926): avc:  denied  { rename } for  pid=11763 comm="syz.3.1581" name="#c" dev="tmpfs" ino=1726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  589.967443][   T30] audit: type=1400 audit(1762143706.496:927): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  590.065151][T10367] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  590.072380][ T1914] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  590.270584][T11655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.360312][ T1914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  590.451250][T11778] hpfs: hpfs_map_sector(): read error
[  590.624208][T10367] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71
[  590.651205][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.686553][ T1914] usb 4-1: not running at top speed; connect to a high speed hub
[  591.020427][ T1914] usb 4-1: config 9 has an invalid interface number: 198 but max is 0
[  591.039600][ T1914] usb 4-1: config 9 has no interface number 0
[  591.046322][T10367] usb 2-1: USB disconnect, device number 44
[  591.055304][ T1914] usb 4-1: config 9 interface 198 has no altsetting 0
[  591.085976][ T1914] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b
[  591.100313][ T1914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.108454][ T1914] usb 4-1: Product: syz
[  591.115293][ T1914] usb 4-1: Manufacturer: syz
[  591.123663][ T1914] usb 4-1: SerialNumber: syz
[  591.303015][T11655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.360406][T10367] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  591.438277][T11674] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.517902][T11674] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.580341][T10367] usb 2-1: Using ep0 maxpacket: 8
[  591.634489][T11674] bridge_slave_0: entered allmulticast mode
[  591.661988][T10367] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  591.739538][T11674] bridge_slave_0: entered promiscuous mode
[  591.765826][T10367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.801715][T11674] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.815302][T10367] usb 2-1: Product: syz
[  591.819523][T10367] usb 2-1: Manufacturer: syz
[  591.836322][T11674] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.880263][T10367] usb 2-1: SerialNumber: syz
[  591.885671][T11674] bridge_slave_1: entered allmulticast mode
[  591.908481][T11674] bridge_slave_1: entered promiscuous mode
[  593.156037][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.995767][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.413567][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.495290][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.243043][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.921894][T10366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.355881][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.784021][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.024207][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.445982][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.031941][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  624.154651][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.345652][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.241946][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.472483][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  707.840156][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  707.847117][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P11800/1:b..l
[  707.855568][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=46429, q=276 ncpus=2)
[  707.863276][    C1] task:modprobe        state:R  running task     stack:25912 pid:11800 tgid:11800 ppid:36     task_flags:0x400000 flags:0x00080000
[  707.877794][    C1] Call Trace:
[  707.881082][    C1]  <TASK>
[  707.884012][    C1]  __schedule+0x1190/0x5de0
[  707.888528][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  707.893737][    C1]  ? __pfx___schedule+0x10/0x10
[  707.898588][    C1]  ? __print_lock_name+0x20/0xe0
[  707.903532][    C1]  ? mark_held_locks+0x49/0x80
[  707.908297][    C1]  preempt_schedule_irq+0x51/0x90
[  707.913318][    C1]  irqentry_exit+0x36/0x90
[  707.917739][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  707.923713][    C1] RIP: 0010:lock_acquire+0x62/0x350
[  707.928901][    C1] Code: 94 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 18 e9 0e 0f 82 74 02 00 00 8b 35 8a 48 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 94 08 12 0f 85 c7 02 00 00 48 83 c4
[  707.948502][    C1] RSP: 0018:ffffc90004527198 EFLAGS: 00000206
[  707.954571][    C1] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 00000000d0966bf2
[  707.962537][    C1] RDX: 0000000000000000 RSI: ffffffff8da056e0 RDI: ffffffff8bf07040
[  707.970498][    C1] RBP: 0000000000000002 R08: b7ed7a481f54e669 R09: 0000000000000000
[  707.978456][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  707.986415][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  707.994394][    C1]  ? unwind_next_frame+0x3f4/0x20a0
[  707.999589][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  708.005741][    C1]  unwind_next_frame+0xd1/0x20a0
[  708.010673][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  708.015776][    C1]  ? kasan_quarantine_reduce+0x195/0x1e0
[  708.021402][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  708.027554][    C1]  arch_stack_walk+0x94/0x100
[  708.032229][    C1]  ? kasan_quarantine_reduce+0x195/0x1e0
[  708.037857][    C1]  stack_trace_save+0x8e/0xc0
[  708.042531][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  708.047901][    C1]  ? __lock_acquire+0x622/0x1c90
[  708.052843][    C1]  save_stack+0x160/0x1f0
[  708.057175][    C1]  ? __pfx_save_stack+0x10/0x10
[  708.062023][    C1]  ? __free_frozen_pages+0x7df/0x1160
[  708.067389][    C1]  ? __put_partials+0x130/0x170
[  708.072237][    C1]  ? qlist_free_all+0x4d/0x120
[  708.076994][    C1]  ? kasan_quarantine_reduce+0x195/0x1e0
[  708.082626][    C1]  ? page_ext_put+0x3e/0xd0
[  708.087136][    C1]  __reset_page_owner+0x84/0x1a0
[  708.092067][    C1]  __free_frozen_pages+0x7df/0x1160
[  708.097270][    C1]  __put_partials+0x130/0x170
[  708.101953][    C1]  qlist_free_all+0x4d/0x120
[  708.106537][    C1]  kasan_quarantine_reduce+0x195/0x1e0
[  708.111992][    C1]  __kasan_slab_alloc+0x69/0x90
[  708.116839][    C1]  kmem_cache_alloc_noprof+0x250/0x6e0
[  708.122374][    C1]  ? mas_preallocate+0xe6a/0x11f0
[  708.127395][    C1]  ? mas_preallocate+0xe6a/0x11f0
[  708.132422][    C1]  mas_preallocate+0xe6a/0x11f0
[  708.137270][    C1]  ? __pfx_mas_preallocate+0x10/0x10
[  708.142551][    C1]  ? vm_area_alloc+0x1f/0x160
[  708.147230][    C1]  ? lockdep_init_map_type+0x5c/0x280
[  708.152600][    C1]  __mmap_region+0x117f/0x27a0
[  708.157370][    C1]  ? __pfx___mmap_region+0x10/0x10
[  708.162488][    C1]  ? __pfx_mas_prev+0x10/0x10
[  708.167166][    C1]  ? unmapped_area_topdown+0x46a/0x590
[  708.172757][    C1]  ? mm_get_unmapped_area_vmflags+0x97/0xe0
[  708.178661][    C1]  mmap_region+0x1ab/0x3f0
[  708.183077][    C1]  ? __get_unmapped_area+0x267/0x440
[  708.188359][    C1]  do_mmap+0xa3e/0x1210
[  708.192514][    C1]  ? __pfx_do_mmap+0x10/0x10
[  708.197096][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  708.202730][    C1]  vm_mmap_pgoff+0x29e/0x470
[  708.207320][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  708.212430][    C1]  ? __fget_files+0x20e/0x3c0
[  708.217107][    C1]  ksys_mmap_pgoff+0x32c/0x5c0
[  708.221864][    C1]  ? __pfx_ksys_read+0x10/0x10
[  708.226620][    C1]  __x64_sys_mmap+0x125/0x190
[  708.231292][    C1]  do_syscall_64+0xcd/0xfa0
[  708.235798][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.241683][    C1] RIP: 0033:0x7f98fff3c242
[  708.246087][    C1] RSP: 002b:00007ffdf61fef38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  708.254490][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f98fff3c242
[  708.262449][    C1] RDX: 0000000000000001 RSI: 0000000000010888 RDI: 0000000000000000
[  708.270407][    C1] RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000
[  708.278368][    C1] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000
[  708.286329][    C1] R13: 00007f98fff11580 R14: 00007ffdf61ff3b0 R15: 00000fffbec3fdea
[  708.294305][    C1]  </TASK>
[  708.297316][    C1] rcu: rcu_preempt kthread starved for 9973 jiffies! g46429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  708.308414][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  708.318370][    C1] rcu: RCU grace-period kthread stack dump:
[  708.324368][    C1] task:rcu_preempt     state:R  running task     stack:28080 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  708.337856][    C1] Call Trace:
[  708.341126][    C1]  <TASK>
[  708.344055][    C1]  __schedule+0x1190/0x5de0
[  708.348577][    C1]  ? __pfx___schedule+0x10/0x10
[  708.353433][    C1]  ? find_held_lock+0x2b/0x80
[  708.358106][    C1]  ? schedule+0x2d7/0x3a0
[  708.362438][    C1]  schedule+0xe7/0x3a0
[  708.366506][    C1]  schedule_timeout+0x123/0x290
[  708.371353][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  708.376724][    C1]  ? __pfx_process_timeout+0x10/0x10
[  708.382033][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  708.387841][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  708.393303][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  708.398077][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  708.403353][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  708.408555][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  708.413498][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  708.418344][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  708.424154][    C1]  rcu_gp_kthread+0x26d/0x380
[  708.428827][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  708.434015][    C1]  ? rcu_is_watching+0x12/0xc0
[  708.438779][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  708.443982][    C1]  ? __kthread_parkme+0x19e/0x250
[  708.449009][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  708.454198][    C1]  kthread+0x3c5/0x780
[  708.458261][    C1]  ? __pfx_kthread+0x10/0x10
[  708.462850][    C1]  ? rcu_is_watching+0x12/0xc0
[  708.467607][    C1]  ? __pfx_kthread+0x10/0x10
[  708.472192][    C1]  ret_from_fork+0x675/0x7d0
[  708.476771][    C1]  ? __pfx_kthread+0x10/0x10
[  708.481353][    C1]  ret_from_fork_asm+0x1a/0x30
[  708.486127][    C1]  </TASK>
[  708.489136][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  708.495445][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  708.504454][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  708.514499][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  708.520135][    C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  708.539756][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  708.545814][    C1] RAX: 000000000498ec8d RBX: 0000000000000001 RCX: ffffffff8b6082a9
[  708.553785][    C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040
[  708.561753][    C1] RBP: ffffed1003ad2490 R08: 0000000000000001 R09: ffffed10170a6655
[  708.569719][    C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001
[  708.577683][    C1] R13: ffff88801d692480 R14: ffffffff908203d0 R15: 0000000000000000
[  708.585646][    C1] FS:  0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  708.594566][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  708.601144][    C1] CR2: 00007ff8fb381d58 CR3: 000000007ee36000 CR4: 00000000003526f0
[  708.609110][    C1] Call Trace:
[  708.612378][    C1]  <TASK>
[  708.615300][    C1]  default_idle+0x13/0x20
[  708.619623][    C1]  default_idle_call+0x6c/0xb0
[  708.624378][    C1]  do_idle+0x38d/0x500
[  708.628444][    C1]  ? __pfx_do_idle+0x10/0x10
[  708.633032][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  708.638228][    C1]  cpu_startup_entry+0x4f/0x60
[  708.642990][    C1]  start_secondary+0x21d/0x2b0
[  708.647753][    C1]  ? __pfx_start_secondary+0x10/0x10
[  708.653062][    C1]  common_startup_64+0x13e/0x148
[  708.658006][    C1]  </TASK>
[  713.005840][T10366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.122393][ T5824] Bluetooth: hci3: command 0x0406 tx timeout