last executing test programs:

17m12.629213981s ago: executing program 4 (id=2379):
io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x217})
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
memfd_create(0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x118, 0x137db)
ptrace$pokeuser(0x6, r2, 0x118, 0x6000003f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x671e, &(0x7f0000000000)={0x0, 0x32bb, 0x1000, 0x4, 0x45})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

17m11.323199727s ago: executing program 4 (id=2382):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20100010"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280))
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi4\x00', 0x80100, 0x0)
ioctl$COMEDI_DEVINFO(r4, 0x80b06401, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="3289deaf48b37ae85f5515fc89c39eb9dd288f0d86bad98b68631b3b25ba7c579c43b0ac5506a4d3d7d8a3df6f2d1fc2d8d70739dc0b2d6b3aa591a352795cbbfc208cb77262d6b71a3e3d5ddf34adbab6dba3c2852797e1d4bddc2e7386e3d8989d2163c03cb07fe4341ca81c6183073eafcfd688181cfe7b737916", @ANYRES16=r7, @ANYBLOB="000126bd7000fbdbdf2515000000e40001802c0004001400010002004e24ffffffff00000000000000001400020002004e24ac14143e000000000000000008000300000095081200010069623a76657468315f766c616e0000002c00028008000400fa000000080002000d00000008000400ffff000008000300fbffffff0800040001181745080003000400000048ff03000400000044000400200001000a004e240000000cfe880000000000000000000000000101d3020000200002000a004e23000001d7ff020000000000000000000000000001faffffff08000300040000000d00010069623a766c616e31000000007c0001802c0004001400010002004e20ffffffff00000000000000001400020002004e21e000000200000000000000001400028008000200430a000008000200020000001200010069623a73797a6b616c6c657231000000240002800800010009000000080004003e000000080004000100000008000400090000003c00038008000300f6ac000022000100010000000800020005000000080003000e00000008000100090000000800020009000000080003001f6400001c000380080003000000000008000100040000000800010006000000700004800900010073797a31000000001c000780080001001d000000080004000500000008000400b1d600001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001c000780080002000100000008000200ff07000008000400ff030000"], 0x23c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r8, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000)
socket$inet_udp(0x2, 0x2, 0x0)

17m9.855858907s ago: executing program 4 (id=2388):
syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000)
timer_create(0xfffffffd, 0x0, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x2c}}, 0x10)
syz_emit_ethernet(0x3e, 0x0, 0x0)
unshare(0x30050d00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)='v80\f\x00\x00\x00', 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x2}}, 0x2e)
getsockopt(r4, 0x111, 0x5, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000))

17m8.709254008s ago: executing program 4 (id=2394):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES16, @ANYRES8=r0], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x8, 0x3, 0xff)
syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x18af80)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="028920da66b8209aaecfe417fab221df7652050ed20d9daf8c150da38104bf28b85829e33c747e75e138ba4b01e6df1a798bc40667087d6ed8511e57c7cd00a07d1f47b18c43ae587c3528562528552ce13f061f1c0d977c8b1cf96f64be3077ef4a7980742d0dd01cf34012293c01a54b4c630217b0ef092f6e8ce99e8548aa145b3e4edb4c84502c90d5d1ae1657b76754b60c4e138816a7"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

17m5.39892101s ago: executing program 4 (id=2400):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@my=0x0, 0x401}, 0xcc, 0x3, 0x4, 0x1000})
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0xff, 0x3, 0x1000000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0xfffffffffffffff7}, 0x0, 0x0)

17m4.17130221s ago: executing program 4 (id=2403):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="cad609ce395b332a7d511f1b3bf9f663111257d3be70e364ffd0c17c94c51a05d7a7c2ba111b2b15bb8c2afb457c147dbb19f0cf7de0fb1d5f403631eaac1333d3410a72d771fca336", @ANYRESHEX=r0, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000"], 0x184}}, 0x0)

16m55.350968463s ago: executing program 3 (id=2424):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff49}, [@call={0x69, 0x0, 0x408}]}, &(0x7f0000000140)='GPL\x00', 0x2}, 0x94)
creat(&(0x7f0000000380)='./file0\x00', 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16m53.496176135s ago: executing program 3 (id=2427):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4845}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
write$dsp(r1, &(0x7f0000000280)='\x00', 0x1)
close(r1)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0)
r12 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={<r13=>0x0})
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r14)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x28, r15, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}]}, 0x28}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r12, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000080)=[r13], &(0x7f00000000c0)=[0x8, 0x3], 0x1, 0x1})

16m52.793084109s ago: executing program 3 (id=2430):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getown(r0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500050000000c0016"], 0x38}}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0})
eventfd2(0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)

16m50.132834102s ago: executing program 3 (id=2441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)

16m49.022613236s ago: executing program 32 (id=2403):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="cad609ce395b332a7d511f1b3bf9f663111257d3be70e364ffd0c17c94c51a05d7a7c2ba111b2b15bb8c2afb457c147dbb19f0cf7de0fb1d5f403631eaac1333d3410a72d771fca336", @ANYRESHEX=r0, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000"], 0x184}}, 0x0)

16m47.367170313s ago: executing program 3 (id=2447):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getown(r0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500050000000c0016"], 0x38}}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0})
eventfd2(0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)

16m42.332638531s ago: executing program 3 (id=2456):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x12}, 0x94)
syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/7, &(0x7f0000000080)=0xffffffffffffffb3)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
r3 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 'veth1_to_batadv\x00'})
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000"], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx  \x00'}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

16m27.241361544s ago: executing program 33 (id=2456):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x12}, 0x94)
syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/7, &(0x7f0000000080)=0xffffffffffffffb3)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
r3 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 'veth1_to_batadv\x00'})
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000"], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx  \x00'}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

26.831081839s ago: executing program 5 (id=5333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24008010)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xf6f}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x240188c0)

23.364756423s ago: executing program 5 (id=5348):
socket$inet6(0xa, 0x800000000000002, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x85}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r4, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r4, 0x3, {0x27fffffffffffff, 0x4}, 0x54}, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0xe, 0x8c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
getpid()
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, 0x0, 0x40094)

20.923095585s ago: executing program 5 (id=5351):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be})
r5 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000300)={&(0x7f0000000180)=""/70, 0x46})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r6, &(0x7f0000000a80), 0x12)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20)

19.322269562s ago: executing program 5 (id=5355):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x0)

18.812900486s ago: executing program 5 (id=5356):
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x7ffeedc0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0800330001"], 0x24}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)

18.387365636s ago: executing program 5 (id=5359):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7f, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = socket$inet(0x2, 0x80001, 0x84)
listen(r2, 0x3)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff6, 0x4, 0xfffbfffd, 0x2, 0x7, "0c4192088739e940000000004000000000006b", 0x4, 0x203})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x8)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070000002c00078000000000000300000000000000060004404e21000005000700080000000900020073797a31000000006b29ec2296ab903aec6bc19552d361b87b7238dd057ff7f898c7eb85157a5620fd292368f675ddea6ad29de4ba24c6b1c6e892a1df547b3a48d116d3"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000000000002800000008000300", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

13.600206278s ago: executing program 0 (id=5368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0)

13.548255532s ago: executing program 0 (id=5369):
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x4}], 0x1, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000001180)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0xfffd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9, 0x0, @opaque=' '}}}}}, 0x0)

12.91419505s ago: executing program 1 (id=5373):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008010)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xf6f}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x240188c0)

12.595998659s ago: executing program 0 (id=5374):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0xfff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x78)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
keyctl$clear(0x7, 0xfffffffffffffffb)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4)
syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

11.170198061s ago: executing program 6 (id=5375):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x7fdf, 0x2000000000, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

9.691378822s ago: executing program 6 (id=5376):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0xfff)
write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x78)
splice(r2, 0x0, r5, 0x0, 0x39000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
keyctl$clear(0x7, 0xfffffffffffffffb)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4)
syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

8.521920649s ago: executing program 0 (id=5378):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0xfff)
write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x78)
splice(r2, 0x0, r5, 0x0, 0x39000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
keyctl$clear(0x7, 0xfffffffffffffffb)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4)
syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

8.279591892s ago: executing program 1 (id=5379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) (fail_nth: 10)

7.418725269s ago: executing program 1 (id=5381):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x178cb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00073c000c00000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a)

7.120489739s ago: executing program 2 (id=5383):
r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="e326a34f13cb1afdfee1142ec08a8314449fe044a2a5c5dac3722403a087180700b6c23c11115eb12b00bf57e6735d30b243aab1f8e288d5f489ecf5dbffaf9694bdb296e688aa20a0c5056dea551532590515a96f4685197b1f2e4fad1b082bc8ff864fcc17b8904a3301eb125f20c57771ed3e3f41372e286136d19f802e75a813788e4894ed84e833723295b830fa5fc319dd7360650940319d220dda5d261c4d69adb0c337773163fdc8a88a127b6ac338e3350d5a368d0ae8a2c1d2a70c5a66430a95b7897f870c424e6048bc51f2da4dc6aa68c664180d0e8355b939", 0xdf}, {&(0x7f0000000180)="2085309b5d3de245be3e34927de77a9188593ee42427e44d6cfb9d54c298a8ee96c49fc2d74d80e162bc50c2f86ed1ba7caeb08cdd7fcff91892cdebb5397e289e7cf5fbe3343a6ec1874c409b3323eb372127e05de6e92075d64dbf36e77ede951e24ac1e7e83", 0x67}], 0x2, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x800}, 0x400c054)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getpeername(r5, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x70, 0x7d, 0x2, {{0x0, 0x54, 0x4, 0x0, {0x0, 0x0, 0x4}, 0x58d0000, 0x7, 0x6e, 0x1, 0x0, '', 0x5, 'syz1\x00', 0xe, 'hash:net,port\x00', 0xe, 'hash:net,port\x00'}, 0x7, '}(-@\xc0--', 0x0, 0x0, r6}}, 0x70)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(pcrypt(aegis256-aesni))\x00'}, 0x58)
r10 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)

6.349114854s ago: executing program 6 (id=5384):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getown(r0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYBLOB], 0x38}}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0})
eventfd2(0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)

6.163878221s ago: executing program 2 (id=5385):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010094", 0x7)

5.967477098s ago: executing program 2 (id=5386):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
close(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0e1}, 0x0)
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

4.400484813s ago: executing program 6 (id=5387):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), 0xc)
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

4.277192574s ago: executing program 6 (id=5388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x5, 0x35, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) (fail_nth: 1)

3.070840247s ago: executing program 2 (id=5389):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0)

3.002207935s ago: executing program 0 (id=5390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='nfs\x00', 0x200004, &(0x7f00000000c0)='\x01')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000040))
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.977951978s ago: executing program 1 (id=5391):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

2.811528516s ago: executing program 2 (id=5392):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0x9, 0x1000, 0x9, 0x7, 0xfffffff8, 0x62, 0x0, 0x9, 0x4, 0x0, 0x8, 0x1, 0x5, 0x2, 0xd04d, 0x2, 0xb2, 0x7, 0x9, 0x8000, 0x2, 0xff9}})
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000002000/0x1000)=nil, 0x1000}, 0x7})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES32=r0, @ANYRES32, @ANYBLOB="21bfc069f3396daef8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc42afe92b9cd22cf8b1810cbbc962bb4755d5e8ede7be"], 0x1c}}, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0)

2.767739935s ago: executing program 1 (id=5393):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0xfff)
write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x78)
splice(r2, 0x0, r5, 0x0, 0x39000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
keyctl$clear(0x7, 0xfffffffffffffffb)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4)
syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

1.737013754s ago: executing program 2 (id=5394):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9f0400000000000000000000280000002800000008000000060000000100000f030000000400000002000000020000008f54b7000000000000000f01000000400000610000005f00a46d1b3b1c26b9cfecd81e7951168da2c406bf"], 0x0, 0x48}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3882, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x302048c)
pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000300)="00214717a70700000000430601000080000000000000", 0x16}], 0x1, 0xbe42, 0x407ff)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
readv(r8, &(0x7f0000001140)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r9, 0x8)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000ffffffffffffbbbbbbbbbbbb0800451c002b00640000000690787f000001ac1e00014e234e244199b9ede951e2b10540342071fce908f48fc4a0f3bccef71d824c0c0dc52b24d1a2df8b546eca5bcfcb83adf06585eb3abbd26d8a5448", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="511000ff9078000123151b"], 0x3d)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r10 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7})

1.123035214s ago: executing program 6 (id=5395):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={<r4=>r1, &(0x7f0000000ac0)='\x00v\xf6\xed\xd8F\xdcV\xa5\xdf2p\xa2O\xf6\xf8\xc3A\xf9\x84\x1c\xd6\xabt\xc7\x7fj\x8b\xf9 \x9c~\xebt^\xf1\xca\xe6r?GD\xbc\xf6\"\xf3\xd3\x0eV4K\xaa\x85\xd6k4\x12?\x9c\x7f\xc2\xe4}|[\xf7 \x9f\x8aO\xec\xa9\xb7I\xb5\x90\xbd\x8a\xcd\xa80\xab@\xddN\xcfvb\xbc\xc99\xaf\xab^\xe4\x11\xa5z1f?\x8b\xe3\xcb\xb2\x99\xde\xf0@\xde\xb6\x97\x1f\xf3\xaa\xae\xff\xe0\xcb\xf1\xdd>\xd9\x8d\x02{x\x88F-\xcd\xc7\xcbm7\x01\x84\xd8\x9d\xc5\x8f11\xf6\xf5\xc1\xd9\xb3M\xc0\x9c?f\xe8e\xc4f/x\xfd\xb8\x10Q\a\xd8\xd8\xd5\x1d\x9cONn\x85\x04\x1c\xd5\x80`', 0x442000, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x1df7]}, {0x9, 0xe47f, 0x82, 0x3}}, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x6})
getpid()
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x101, @broadcast, 'bond_slave_0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'macvlan0\x00'}})
sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="000000450630dd18477c308b197c96d07b5fed6bd575b530454661c52d93ada79b648654a00bf6e84ee50a2775216b83a855c763866a68204611aa7f23aa08001a00", @ANYRES32=r3, @ANYRESDEC=r3], 0x27c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004081)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000001000)=@qipcrtr, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000f40)=""/167, 0xa7}], 0x1}, 0x1}], 0x1, 0x40010160, 0x0)
setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000a40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffffbffff0180c20000030800460000240066000000199078000000000000200044048d00000148df0a5f5950edfb95a8124e20000c90780100000c0c600975d439923b7b73f0"], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = io_uring_setup(0x7bb1, &(0x7f00000003c0)={0x0, 0x2961, 0x200, 0x3, 0x26e})
io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x14, &(0x7f0000001280)=[{0x4, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/39, 0x27}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/32, 0x20}], &(0x7f0000000780)=[0x875a, 0x2, 0x8000000000000001, 0xdbab, 0xe9a, 0x4, 0x10001, 0xffffefffffff8000, 0xc, 0x20000000000009]}, {0x5, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)=""/197, 0xc5}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000d80)=""/241, 0xf1}, {&(0x7f0000000e80)=""/137, 0x89}, {&(0x7f0000000800)=""/36, 0x24}], &(0x7f00000006c0)}, {0x0, 0x0, 0x0, &(0x7f0000002400), &(0x7f0000001240)=[0x2]}], 0x3)

669.776609ms ago: executing program 0 (id=5396):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xfe514000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0xfff, 0x4)
open(0x0, 0x402, 0x1ac)
r4 = io_uring_setup(0x1fb8, 0x0)
io_uring_register$IORING_REGISTER_FILES(r4, 0x23, &(0x7f0000000000), 0x0)
socket$netlink(0x10, 0x3, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)

0s ago: executing program 1 (id=5397):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getown(r0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYBLOB], 0x38}}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0})
eventfd2(0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)

kernel console output (not intermixed with test programs):

alNumber: syz
[ 1582.756179][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'.
[ 1583.049990][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1583.079855][T23918] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1583.090053][ T5817] usb 6-1: Product: syz
[ 1583.098908][ T5817] usb 6-1: Manufacturer: syz
[ 1583.121740][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1583.140387][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1583.156174][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1583.172127][ T5817] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1583.184255][T23918] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1583.290826][T23918] ldm_validate_partition_table(): Disk read failed.
[ 1583.337745][T23918] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1583.545132][T23918] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1583.717465][ T5812] usb 3-1: can't set first interface for hiFace device.
[ 1583.728852][ T5812] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1583.828448][T23918] Dev loop6: unable to read RDB block 0
[ 1583.836482][ T5812] usb 3-1: can't set first interface for hiFace device.
[ 1583.850025][ T5812] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1583.877168][ T5812] usb 3-1: USB disconnect, device number 71
[ 1583.898087][T23918]  loop6: unable to read partition table
[ 1584.009341][T23918] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1585.525208][T23956] overlayfs: missing 'lowerdir'
[ 1585.751109][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1585.759557][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1585.971947][   T24] usb 6-1: USB disconnect, device number 56
[ 1586.290503][ T5812] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[ 1586.355362][T23991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'.
[ 1586.416599][T23992] overlayfs: failed to resolve './file7': -2
[ 1586.492625][T23996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4918'.
[ 1586.713918][T23994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'.
[ 1587.124065][ T5812] usb 3-1: device descriptor read/all, error -71
[ 1587.298667][T24004] overlayfs: missing 'lowerdir'
[ 1587.515178][T24003] overlayfs: missing 'lowerdir'
[ 1587.667887][T19799] usb 1-1: new full-speed USB device number 99 using dummy_hcd
[ 1587.762137][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1588.040578][T11732] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 1588.226721][T19799] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1588.911298][T19799] usb 1-1: not running at top speed; connect to a high speed hub
[ 1589.062417][T19799] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1589.075838][T19799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.084377][T19799] usb 1-1: Product: syz
[ 1589.088571][T19799] usb 1-1: Manufacturer: syz
[ 1589.105131][T19799] usb 1-1: SerialNumber: syz
[ 1589.140931][T11732] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1589.156549][T11732] usb 7-1: not running at top speed; connect to a high speed hub
[ 1589.299344][T11732] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1589.308621][T11732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.851497][T24018] syz.2.4923 (24018): drop_caches: 2
[ 1590.563188][T11732] usb 7-1: Product: syz
[ 1590.563214][T14422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1590.567623][T11732] usb 7-1: Manufacturer: syz
[ 1590.636261][T11732] usb 7-1: SerialNumber: syz
[ 1590.677018][T11732] usb 7-1: can't set config #1, error -71
[ 1590.730954][T11732] usb 7-1: USB disconnect, device number 32
[ 1590.860974][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1590.871916][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1590.891698][T19799] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1591.021846][T24027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4927'.
[ 1591.110545][ T5817] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1591.306853][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1591.324646][T19799] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1591.371625][T19799] usb 1-1: USB disconnect, device number 99
[ 1591.462515][ T5817] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1592.021707][T24030] syz.6.4931 (24030): drop_caches: 2
[ 1592.658840][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1592.667527][ T5817] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1592.710513][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1592.719516][ T5817] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1592.832202][ T5817] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1592.850844][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1592.858854][ T5817] usb 6-1: Product: syz
[ 1592.886366][ T5817] usb 6-1: Manufacturer: syz
[ 1592.907485][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1592.920599][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1592.925824][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[ 1592.950837][ T5817] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1593.422056][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1594.365729][ T5817] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1594.491862][T24060] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4936'.
[ 1594.524387][ T5817] usb 3-1: Using ep0 maxpacket: 16
[ 1594.534337][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1594.561407][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1594.589250][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1594.621398][ T5817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1594.647865][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1594.722271][ T5817] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1594.733169][ T5817] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1594.789587][ T5817] usb 3-1: Manufacturer: syz
[ 1594.833977][ T5817] usb 3-1: config 0 descriptor??
[ 1595.197049][T24071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4939'.
[ 1596.190872][ T5817] rc_core: IR keymap rc-hauppauge not found
[ 1596.196910][ T5817] Registered IR keymap rc-empty
[ 1596.212578][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.333524][   T24] usb 6-1: USB disconnect, device number 57
[ 1596.342977][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.433587][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1596.445533][T14422] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1596.621040][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1596.809577][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input73
[ 1596.849745][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.872468][T24081] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4941'.
[ 1596.901384][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.914692][T14422] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1596.924680][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.931974][T14422] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1596.948612][T14422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.957005][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1596.983546][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4942'.
[ 1596.988112][T14422] usb 7-1: config 0 descriptor??
[ 1596.998619][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.031444][T14422] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1597.038823][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.080593][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.100672][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.157679][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.214418][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1597.244001][ T5817] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1597.257209][ T5817] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1597.291599][ T5817] usb 3-1: USB disconnect, device number 74
[ 1598.408768][T24121] overlayfs: missing 'lowerdir'
[ 1598.510630][T11732] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1598.550100][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1598.803183][T11732] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1598.824311][T11732] usb 1-1: config 1 descriptor has 1 excess byte, ignoring
[ 1598.833828][T11732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1598.843180][T11732] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1598.858821][T11732] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1598.868710][T11732] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1598.876984][T11732] usb 1-1: Product: syz
[ 1598.882789][T14908] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[ 1599.179359][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4952'.
[ 1599.432172][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1599.443111][T11732] usb 1-1: Manufacturer: syz
[ 1599.581430][ T5812] usb 7-1: USB disconnect, device number 33
[ 1599.624699][T11732] cdc_wdm 1-1:1.0: skipping garbage
[ 1599.632533][T11732] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1599.720163][T14908] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1599.728251][T14908] usb 2-1: not running at top speed; connect to a high speed hub
[ 1599.822351][T14422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1599.833772][T14908] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1599.896244][T14908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.945524][T14908] usb 2-1: Product: syz
[ 1599.975993][T14908] usb 2-1: Manufacturer: syz
[ 1600.005571][T14908] usb 2-1: SerialNumber: syz
[ 1601.232415][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1601.259806][T14908] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1601.405391][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1601.419351][T14908] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1601.517601][T14908] usb 2-1: USB disconnect, device number 84
[ 1601.794737][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1601.801387][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1602.390358][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1602.598513][T14908] usb 1-1: USB disconnect, device number 100
[ 1603.130516][T24154] syz.1.4955 (24154): drop_caches: 2
[ 1603.918270][T24160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'.
[ 1603.936143][T24157] tipc: Started in network mode
[ 1603.954732][T24157] tipc: Node identity aaf66e9aa135, cluster identity 4711
[ 1604.361729][T24157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1604.478161][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1604.519139][T24160] syz_tun (unregistering): left allmulticast mode
[ 1604.608852][T24161] syzkaller0: entered promiscuous mode
[ 1604.630571][T24161] syzkaller0: entered allmulticast mode
[ 1604.641264][T24161] tipc: Resetting bearer <eth:syzkaller0>
[ 1604.750577][T24156] tipc: Resetting bearer <eth:syzkaller0>
[ 1604.791491][T24169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4963'.
[ 1604.920997][T14908] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1604.940962][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1605.040629][ T5812] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1605.141798][T14908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1605.153350][T14908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1605.163824][T14908] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1605.188539][T14908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.204674][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1605.215016][ T5812] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1605.230563][T14908] usb 1-1: config 0 descriptor??
[ 1605.237159][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.268815][ T5812] usb 6-1: config 0 descriptor??
[ 1605.294317][ T5812] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1605.752060][T14908] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[ 1605.760618][T14908] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[ 1605.773343][T14908] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0023/input/input74
[ 1605.828514][T14908] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[ 1605.958174][T14908] usb 1-1: USB disconnect, device number 101
[ 1606.580002][T24185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4967'.
[ 1607.444111][T24198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4969'.
[ 1607.504201][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1607.513256][T24199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4969'.
[ 1607.533856][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4969'.
[ 1607.543975][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4969'.
[ 1607.832491][T14908] usb 6-1: USB disconnect, device number 58
[ 1609.477946][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1610.061453][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1610.375189][T24156] tipc: Disabling bearer <eth:syzkaller0>
[ 1610.385180][ T5817] tipc: Node number set to 197357210
[ 1610.583409][T24220] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4975'.
[ 1610.677400][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4974'.
[ 1610.705108][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.124423][T24239] netlink: 'syz.5.4980': attribute type 51 has an invalid length.
[ 1612.623515][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.650501][T14422] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1612.830726][T14422] usb 6-1: Using ep0 maxpacket: 32
[ 1612.845292][T14422] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1612.855152][T14422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.931048][T14422] usb 6-1: config 0 descriptor??
[ 1612.978587][T14422] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1613.544077][T24261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4986'.
[ 1613.671076][T24257] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4986'.
[ 1613.681876][T24263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4987'.
[ 1613.833578][T14422] gspca_sq930x: reg_r 001f failed -32
[ 1614.755121][T14422] sq930x 6-1:0.0: probe with driver sq930x failed with error -32
[ 1615.046752][T14908] usb 6-1: USB disconnect, device number 59
[ 1615.341797][T24267] overlayfs: missing 'lowerdir'
[ 1615.473088][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4989'.
[ 1615.630763][T14908] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[ 1615.821344][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1615.915902][T14908] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1615.948949][T14908] usb 7-1: not running at top speed; connect to a high speed hub
[ 1616.140627][T14908] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1616.177766][T14908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.217660][T14908] usb 7-1: Product: syz
[ 1616.227765][T14908] usb 7-1: Manufacturer: syz
[ 1616.234831][T14908] usb 7-1: SerialNumber: syz
[ 1616.461706][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1616.563018][T24287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4990'.
[ 1616.614217][T14908] usb 7-1: can't set first interface for hiFace device.
[ 1616.638920][T14908] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1616.740719][T14908] usb 7-1: can't set first interface for hiFace device.
[ 1617.272882][T24298] syz.1.4993 (24298): drop_caches: 2
[ 1617.688174][T14908] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1617.700020][T14908] usb 7-1: USB disconnect, device number 34
[ 1618.392080][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1619.022636][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1619.391218][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4999'.
[ 1619.442108][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4999'.
[ 1619.650360][T24311] syzkaller0: entered promiscuous mode
[ 1619.900777][ T5812] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1619.964664][T24311] syzkaller0: entered allmulticast mode
[ 1620.142055][ T5812] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1620.150892][ T5812] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1620.188219][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1620.214717][ T5812] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1620.246720][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7
[ 1620.266256][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024
[ 1620.284769][ T5812] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1620.295821][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1620.305333][ T5812] usb 3-1: Product: syz
[ 1620.315400][ T5812] usb 3-1: Manufacturer: syz
[ 1620.329009][ T5812] cdc_wdm 3-1:1.0: skipping garbage
[ 1620.339460][ T5812] cdc_wdm 3-1:1.0: skipping garbage
[ 1620.348206][ T5812] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1620.948468][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1621.644894][T19799] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1622.223770][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1622.322637][T19799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1622.342794][T19799] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1622.399802][T19799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1622.449340][T19799] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1622.525504][T19799] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1622.575434][T19799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.603267][T19799] usb 6-1: Product: syz
[ 1622.624098][T19799] usb 6-1: Manufacturer: syz
[ 1622.639286][T19799] usb 6-1: SerialNumber: syz
[ 1622.658934][T19799] usb 6-1: config 0 descriptor??
[ 1622.683383][T19799] ums-isd200 6-1:0.0: USB Mass Storage device detected
[ 1622.854410][T19799] scsi host1: usb-storage 6-1:0.0
[ 1622.877072][T19799] usb 6-1: USB disconnect, device number 60
[ 1623.039399][ T5812] usb 3-1: USB disconnect, device number 75
[ 1624.785616][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1624.935502][T24361] overlayfs: missing 'lowerdir'
[ 1625.414932][T19799] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[ 1625.641229][T19799] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1625.692929][T19799] usb 3-1: not running at top speed; connect to a high speed hub
[ 1625.708643][T19799] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1625.718881][T19799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.727179][T19799] usb 3-1: Product: syz
[ 1625.735163][T19799] usb 3-1: Manufacturer: syz
[ 1625.740992][T19799] usb 3-1: SerialNumber: syz
[ 1626.090792][ T5817] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1626.244557][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1626.257662][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1626.268670][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1626.305589][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1626.344449][ T5817] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1626.353790][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.376471][ T5817] usb 2-1: Product: syz
[ 1626.392931][ T5817] usb 2-1: Manufacturer: syz
[ 1626.397542][ T5817] usb 2-1: SerialNumber: syz
[ 1626.462583][ T5817] usb 2-1: config 0 descriptor??
[ 1626.490151][ T5817] ums-isd200 2-1:0.0: USB Mass Storage device detected
[ 1626.701380][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1626.795149][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5011'.
[ 1626.828232][T24369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'.
[ 1627.585270][ T5817] scsi host1: usb-storage 2-1:0.0
[ 1627.697870][ T5817] usb 2-1: USB disconnect, device number 85
[ 1627.700504][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1627.722898][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5011'.
[ 1627.742676][T19799] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1627.754958][T24369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'.
[ 1627.778042][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1627.794836][T19799] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1627.828065][T19799] usb 3-1: USB disconnect, device number 76
[ 1627.889369][T24378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5015'.
[ 1627.983616][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1628.012858][T24378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5015'.
[ 1628.621360][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1630.440825][T24389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5012'.
[ 1630.711879][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1632.133223][T24421] syzkaller0: entered promiscuous mode
[ 1632.150805][T24421] syzkaller0: entered allmulticast mode
[ 1632.165679][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'.
[ 1632.174582][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'.
[ 1632.201451][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1632.201544][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'.
[ 1632.254234][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1632.276015][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'.
[ 1632.605807][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1632.810529][T11732] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1633.044708][T24431] overlayfs: missing 'lowerdir'
[ 1633.156327][T11732] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1633.176534][T11732] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1633.202277][T11732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1633.218875][T11732] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1633.350621][T11732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7
[ 1633.366063][T11732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024
[ 1633.385495][T11732] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1633.510539][T19799] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[ 1633.519763][T11732] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1633.550016][T11732] usb 3-1: Product: syz
[ 1633.554669][T11732] usb 3-1: Manufacturer: syz
[ 1633.626690][T11732] cdc_wdm 3-1:1.0: skipping garbage
[ 1633.655544][T11732] cdc_wdm 3-1:1.0: skipping garbage
[ 1633.661835][T11732] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1633.683504][T19799] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1633.701983][T19799] usb 1-1: not running at top speed; connect to a high speed hub
[ 1633.734513][T19799] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1633.751347][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1633.794492][T19799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.812371][T19799] usb 1-1: Product: syz
[ 1633.816686][T19799] usb 1-1: Manufacturer: syz
[ 1633.898990][T19799] usb 1-1: SerialNumber: syz
[ 1634.034416][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1634.181125][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1635.493870][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1635.501472][T19799] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1635.541274][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1635.713919][T19799] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1635.787370][T19799] usb 1-1: USB disconnect, device number 102
[ 1635.865753][T24451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5032'.
[ 1635.914786][T24436] overlayfs: missing 'lowerdir'
[ 1635.926439][T24449] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5031'.
[ 1636.300782][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1636.900708][T14422] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 1637.225568][T14422] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1637.254908][T14422] usb 6-1: not running at top speed; connect to a high speed hub
[ 1637.305095][T14422] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1637.321899][T14422] usb 6-1: can't read configurations, error -71
[ 1637.758476][ T5812] usb 3-1: USB disconnect, device number 77
[ 1637.827035][T24464] syzkaller0: entered promiscuous mode
[ 1637.886819][T24464] syzkaller0: entered allmulticast mode
[ 1638.290912][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1638.365266][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1638.661439][T24475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5035'.
[ 1639.570831][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1642.091831][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1643.992068][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1644.115587][T24516] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5044'.
[ 1644.674540][T24519] overlayfs: missing 'lowerdir'
[ 1645.120679][   T29] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[ 1645.262501][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1645.282798][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1645.292376][   T29] usb 1-1: not running at top speed; connect to a high speed hub
[ 1645.313494][   T29] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1645.322609][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.340453][   T29] usb 1-1: Product: syz
[ 1645.350766][   T29] usb 1-1: Manufacturer: syz
[ 1645.355343][   T29] usb 1-1: SerialNumber: syz
[ 1646.543778][   T29] usb 1-1: can't set first interface for hiFace device.
[ 1646.557149][T24526] tipc: Started in network mode
[ 1646.560460][   T29] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1646.565229][T24526] tipc: Node identity d6e528902748, cluster identity 4711
[ 1646.583264][   T29] usb 1-1: can't set first interface for hiFace device.
[ 1646.592080][T24526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1646.603395][   T29] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1646.632104][T24530] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5048'.
[ 1646.642623][   T29] usb 1-1: USB disconnect, device number 103
[ 1646.675583][T24526] syzkaller0: entered promiscuous mode
[ 1646.683762][T24534] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5048'.
[ 1646.701480][T24526] syzkaller0: entered allmulticast mode
[ 1646.708534][T24522] udevd[24522]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1646.731505][T24526] tipc: Resetting bearer <eth:syzkaller0>
[ 1646.780756][ T5812] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1646.793931][T24525] tipc: Resetting bearer <eth:syzkaller0>
[ 1646.947855][ T5812] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1646.958085][ T5812] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1646.968554][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1646.977655][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1646.988961][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1647.002095][ T5812] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1647.011505][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1647.023853][ T5812] usb 3-1: Product: syz
[ 1647.031569][ T5812] usb 3-1: Manufacturer: syz
[ 1647.039798][T24540] netlink: 'syz.6.5049': attribute type 2 has an invalid length.
[ 1647.047677][T24540] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5049'.
[ 1647.068700][ T5812] cdc_wdm 3-1:1.0: skipping garbage
[ 1647.074130][ T5812] cdc_wdm 3-1:1.0: skipping garbage
[ 1647.087316][ T5812] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1647.101359][ T5812] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1647.832887][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.865976][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1649.639427][ T5812] usb 3-1: USB disconnect, device number 78
[ 1649.741446][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1649.890684][   T24] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1650.070849][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1650.088567][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1650.108605][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1650.168112][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1650.225460][   T24] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1650.240577][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.257874][   T24] usb 1-1: Product: syz
[ 1650.270089][   T24] usb 1-1: Manufacturer: syz
[ 1650.278507][   T24] usb 1-1: SerialNumber: syz
[ 1650.297858][   T24] usb 1-1: config 0 descriptor??
[ 1650.321679][   T24] ums-isd200 1-1:0.0: USB Mass Storage device detected
[ 1651.092286][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1651.828581][   T24] scsi host1: usb-storage 1-1:0.0
[ 1651.863636][   T24] usb 1-1: USB disconnect, device number 104
[ 1652.012244][T24570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5056'.
[ 1652.362554][T24525] tipc: Disabling bearer <eth:syzkaller0>
[ 1652.374002][   T29] tipc: Node number set to 4054657168
[ 1652.531541][T24585] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5060'.
[ 1652.541339][T24585] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5060'.
[ 1652.941144][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1653.373234][T24595] syzkaller0: entered promiscuous mode
[ 1653.378855][T24595] syzkaller0: entered allmulticast mode
[ 1653.581269][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1653.750727][T24606] overlayfs: missing 'lowerdir'
[ 1653.991580][T24608] overlayfs: missing 'lowerdir'
[ 1654.570528][T14908] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[ 1654.674348][T19799] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[ 1654.948211][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1654.980886][T19799] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1654.991471][T19799] usb 6-1: not running at top speed; connect to a high speed hub
[ 1655.042334][T19799] usb 6-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1655.055040][T19799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.064442][T19799] usb 6-1: Product: syz
[ 1655.071040][T19799] usb 6-1: Manufacturer: syz
[ 1655.075661][T19799] usb 6-1: SerialNumber: syz
[ 1655.271234][T14908] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1655.279515][T14908] usb 2-1: not running at top speed; connect to a high speed hub
[ 1655.362124][T14908] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1655.406259][T14908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.438291][T14908] usb 2-1: Product: syz
[ 1655.462918][T14908] usb 2-1: Manufacturer: syz
[ 1655.472596][T14908] usb 2-1: SerialNumber: syz
[ 1655.490676][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5067'.
[ 1655.892448][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1655.913145][T14908] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1655.952611][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1655.979135][T14908] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1656.006675][T14908] usb 2-1: USB disconnect, device number 86
[ 1656.783777][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1657.004699][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5071'.
[ 1657.421040][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1658.335373][T24642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5072'.
[ 1658.386440][T24642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5072'.
[ 1658.420656][T19799] usb 6-1: can't set first interface for hiFace device.
[ 1658.437901][T19799] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1658.460140][T19799] usb 6-1: can't set first interface for hiFace device.
[ 1658.480471][T19799] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1658.611957][T19799] usb 6-1: USB disconnect, device number 63
[ 1658.701137][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1658.714528][T24522] udevd[24522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1659.021508][T24667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5078'.
[ 1659.851219][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5079'.
[ 1660.372020][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5081'.
[ 1660.397561][  T139] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.406177][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5081'.
[ 1660.422199][  T139] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.523813][  T139] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.548161][  T139] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.726318][T24691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5082'.
[ 1661.163533][T24697] syzkaller0: entered promiscuous mode
[ 1661.172264][T24697] syzkaller0: entered allmulticast mode
[ 1661.629173][T24706] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5087'.
[ 1661.697327][T24707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5087'.
[ 1662.544389][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1662.556196][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1663.185164][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1663.191521][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1663.821986][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1665.339058][T24733] overlayfs: missing 'lowerdir'
[ 1665.695543][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1665.713488][T24769] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5100'.
[ 1665.813917][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1665.824013][T24769] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5100'.
[ 1665.911740][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1665.920634][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.729481][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5108'.
[ 1666.740986][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5108'.
[ 1667.021332][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1667.580997][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1667.977529][T24816] overlayfs: missing 'lowerdir'
[ 1668.316501][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1668.401260][T19799] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[ 1668.559441][T24827] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5116'.
[ 1668.950673][T24828] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5116'.
[ 1669.080303][T19799] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1669.088481][T19799] usb 3-1: not running at top speed; connect to a high speed hub
[ 1669.121485][T19799] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1669.130807][T19799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1669.138787][T19799] usb 3-1: Product: syz
[ 1669.177987][T19799] usb 3-1: Manufacturer: syz
[ 1669.195674][T19799] usb 3-1: SerialNumber: syz
[ 1669.581340][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.662429][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1669.670137][T19799] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1669.957779][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1669.973701][T19799] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1669.995803][T19799] usb 3-1: USB disconnect, device number 79
[ 1672.621076][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1672.826681][T24892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5130'.
[ 1674.062278][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1675.340976][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1676.160640][ T5812] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1676.340966][T24931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5140'.
[ 1676.444456][ T5812] usb 2-1: Using ep0 maxpacket: 16
[ 1676.462039][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1676.480483][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1676.500723][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1676.550521][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1676.585006][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1676.600801][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5145'.
[ 1676.630168][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1676.643305][ T5812] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1676.683201][ T5812] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1676.712383][ T5812] usb 2-1: Manufacturer: syz
[ 1676.723677][ T5812] usb 2-1: config 0 descriptor??
[ 1677.343094][ T5812] rc_core: IR keymap rc-hauppauge not found
[ 1677.355127][ T5812] Registered IR keymap rc-empty
[ 1677.375099][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.383983][T24953] netlink: 'syz.5.5144': attribute type 2 has an invalid length.
[ 1677.391736][T24953] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5144'.
[ 1677.460531][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.521244][ T5812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1677.552990][ T5812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input75
[ 1677.712145][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.740851][T22055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1677.748374][T24965] syzkaller0: entered promiscuous mode
[ 1677.781339][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.821691][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.881331][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1677.930595][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1678.064068][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1678.853347][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1678.944801][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1678.970834][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1679.047457][ T5812] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1679.461531][ T5812] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1679.471916][ T5812] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1679.483775][ T5812] usb 2-1: USB disconnect, device number 87
[ 1679.836729][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1680.542841][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1683.300822][T25012] overlayfs: failed to resolve './file7': -2
[ 1683.354294][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1683.382682][T25010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5158'.
[ 1683.775310][T25023] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5161'.
[ 1684.681501][T25028] overlayfs: missing 'lowerdir'
[ 1685.142780][T25059] netlink: 'syz.0.5169': attribute type 29 has an invalid length.
[ 1685.493134][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5170'.
[ 1685.667940][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1685.832487][T25060] netlink: 'syz.5.5167': attribute type 2 has an invalid length.
[ 1685.840243][T25060] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5167'.
[ 1686.160766][T25070] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5173'.
[ 1686.597363][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1686.643693][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1686.924676][T25085] FAULT_INJECTION: forcing a failure.
[ 1686.924676][T25085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1686.938075][T25085] CPU: 1 UID: 0 PID: 25085 Comm: syz.1.5176 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1686.938102][T25085] Tainted: [L]=SOFTLOCKUP
[ 1686.938108][T25085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1686.938119][T25085] Call Trace:
[ 1686.938125][T25085]  <TASK>
[ 1686.938133][T25085]  dump_stack_lvl+0x100/0x190
[ 1686.938167][T25085]  should_fail_ex.cold+0x5/0xa
[ 1686.938192][T25085]  _copy_to_user+0x32/0xd0
[ 1686.938219][T25085]  simple_read_from_buffer+0xcb/0x170
[ 1686.938241][T25085]  proc_fail_nth_read+0x1af/0x230
[ 1686.938268][T25085]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1686.938296][T25085]  ? rw_verify_area+0xce/0x6d0
[ 1686.938322][T25085]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1686.938348][T25085]  vfs_read+0x1e4/0xb30
[ 1686.938379][T25085]  ? __pfx_vfs_read+0x10/0x10
[ 1686.938406][T25085]  ? __fget_files+0x215/0x3d0
[ 1686.938432][T25085]  ? __fget_files+0x21f/0x3d0
[ 1686.938459][T25085]  ksys_read+0x12a/0x250
[ 1686.938475][T25085]  ? __pfx_ksys_read+0x10/0x10
[ 1686.938500][T25085]  do_syscall_64+0x106/0xf80
[ 1686.938526][T25085]  ? clear_bhb_loop+0x40/0x90
[ 1686.938549][T25085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.938567][T25085] RIP: 0033:0x7f9436d5cfce
[ 1686.938584][T25085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1686.938602][T25085] RSP: 002b:00007f9437c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1686.938619][T25085] RAX: ffffffffffffffda RBX: 00007f9437c0c6c0 RCX: 00007f9436d5cfce
[ 1686.938631][T25085] RDX: 000000000000000f RSI: 00007f9437c0c0a0 RDI: 0000000000000006
[ 1686.938642][T25085] RBP: 00007f9437c0c090 R08: 0000000000000000 R09: 0000000000000000
[ 1686.938653][T25085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1686.938664][T25085] R13: 00007f9437016218 R14: 00007f9437016180 R15: 00007ffd63631a68
[ 1686.938690][T25085]  </TASK>
[ 1687.394687][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'.
[ 1687.404327][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5178'.
[ 1687.553607][T25096] C: renamed from team_slave_0 (while UP)
[ 1687.610700][T25082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5171'.
[ 1687.883581][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'.
[ 1687.957197][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5178'.
[ 1688.781085][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.988298][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5182'.
[ 1689.166677][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5182'.
[ 1689.665621][T25128] syzkaller0: entered promiscuous mode
[ 1689.948010][T25124] netlink: 'syz.5.5186': attribute type 2 has an invalid length.
[ 1689.962423][T25124] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5186'.
[ 1690.244985][T25143] FAULT_INJECTION: forcing a failure.
[ 1690.244985][T25143] name failslab, interval 1, probability 0, space 0, times 0
[ 1690.329429][T25143] CPU: 1 UID: 0 PID: 25143 Comm: syz.6.5189 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1690.329457][T25143] Tainted: [L]=SOFTLOCKUP
[ 1690.329463][T25143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1690.329474][T25143] Call Trace:
[ 1690.329480][T25143]  <TASK>
[ 1690.329486][T25143]  dump_stack_lvl+0x100/0x190
[ 1690.329519][T25143]  should_fail_ex.cold+0x5/0xa
[ 1690.329541][T25143]  should_failslab+0xc2/0x120
[ 1690.329560][T25143]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1690.329586][T25143]  ? copy_process+0x48b/0x7a40
[ 1690.329608][T25143]  ? mark_held_locks+0x40/0x70
[ 1690.329628][T25143]  copy_process+0x48b/0x7a40
[ 1690.329664][T25143]  ? __pfx_copy_process+0x10/0x10
[ 1690.329691][T25143]  ? lockdep_init_map_type+0x5c/0x250
[ 1690.329712][T25143]  ? lockdep_init_map_type+0x5c/0x250
[ 1690.329732][T25143]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1690.329761][T25143]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1690.329787][T25143]  vhost_task_create+0x1db/0x370
[ 1690.329811][T25143]  ? __pfx_vhost_task_create+0x10/0x10
[ 1690.329831][T25143]  ? trace_contention_end+0x140/0x180
[ 1690.329858][T25143]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1690.329882][T25143]  ? __pfx___mutex_lock+0x10/0x10
[ 1690.329910][T25143]  ? kasan_quarantine_put+0x104/0x240
[ 1690.329936][T25143]  ? lockdep_hardirqs_on+0x78/0x100
[ 1690.329969][T25143]  kvm_mmu_post_init_vm+0x1b3/0x370
[ 1690.329993][T25143]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[ 1690.330014][T25143]  ? kvm_vcpu_ioctl+0x155c/0x1730
[ 1690.330047][T25143]  kvm_vcpu_ioctl+0x730/0x1730
[ 1690.330076][T25143]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1690.330104][T25143]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1690.330132][T25143]  ? do_vfs_ioctl+0x226/0x13e0
[ 1690.330160][T25143]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1690.330193][T25143]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1690.330230][T25143]  ? __fget_files+0x215/0x3d0
[ 1690.330248][T25143]  ? hook_file_ioctl_common+0x146/0x410
[ 1690.330275][T25143]  ? selinux_file_ioctl+0x139/0x290
[ 1690.330301][T25143]  ? selinux_file_ioctl+0xb4/0x290
[ 1690.330329][T25143]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1690.330357][T25143]  __x64_sys_ioctl+0x18e/0x210
[ 1690.330388][T25143]  do_syscall_64+0x106/0xf80
[ 1690.330413][T25143]  ? clear_bhb_loop+0x40/0x90
[ 1690.330434][T25143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.330452][T25143] RIP: 0033:0x7f1f2db9c799
[ 1690.330468][T25143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1690.330486][T25143] RSP: 002b:00007f1f2eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1690.330505][T25143] RAX: ffffffffffffffda RBX: 00007f1f2de16090 RCX: 00007f1f2db9c799
[ 1690.330517][T25143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 1690.330528][T25143] RBP: 00007f1f2eac9090 R08: 0000000000000000 R09: 0000000000000000
[ 1690.330538][T25143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1690.330549][T25143] R13: 00007f1f2de16128 R14: 00007f1f2de16090 R15: 00007ffdde6e4808
[ 1690.330575][T25143]  </TASK>
[ 1691.345136][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.447817][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'.
[ 1691.474515][T25161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'.
[ 1691.995631][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.353179][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'.
[ 1692.400593][T25161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'.
[ 1692.525384][T25169] bridge_slave_0: left allmulticast mode
[ 1692.561310][T25169] bridge_slave_0: left promiscuous mode
[ 1692.851751][T25171] syz.2.5194 (25171): drop_caches: 2
[ 1693.271054][T25169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1693.337217][T25169] bridge_slave_1: left allmulticast mode
[ 1693.517777][T25169] bridge_slave_1: left promiscuous mode
[ 1693.660473][T14908] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[ 1693.842248][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1693.906058][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1693.961398][T25169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1693.989119][T25169] bond0: (slave bond_slave_0): Releasing backup interface
[ 1694.012990][T14908] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1694.038926][T14908] usb 1-1: not running at top speed; connect to a high speed hub
[ 1694.104610][T25169] bond0: (slave bond_slave_1): Releasing backup interface
[ 1694.125498][T14908] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1694.141605][T14908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.150805][T14908] usb 1-1: Product: syz
[ 1694.154963][T14908] usb 1-1: Manufacturer: syz
[ 1694.159588][T14908] usb 1-1: SerialNumber: syz
[ 1694.182422][T25169] team0: Port device team_slave_0 removed
[ 1694.193406][T25169] team0: Port device team_slave_1 removed
[ 1694.233069][T25169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1694.643184][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1694.951268][T14908] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1694.965612][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1694.980889][T14908] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1694.992885][T14908] usb 1-1: USB disconnect, device number 105
[ 1695.246818][T25189] udevd[25189]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1695.471191][ T5812] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1695.520519][T25196] netlink: 'syz.2.5200': attribute type 2 has an invalid length.
[ 1695.582077][T25196] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5200'.
[ 1695.632620][ T5812] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1695.641851][ T5812] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1695.659070][ T5812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1695.678539][ T5812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1695.696123][ T5812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1695.714250][ T5812] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1695.728568][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1695.749721][ T5812] usb 6-1: Product: syz
[ 1695.769070][ T5812] usb 6-1: Manufacturer: syz
[ 1695.792625][ T5812] cdc_wdm 6-1:1.0: skipping garbage
[ 1695.802303][ T5812] cdc_wdm 6-1:1.0: skipping garbage
[ 1695.811639][ T5812] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1695.822857][ T5812] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1695.922708][T25210] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[ 1696.651321][T25229] syzkaller0: entered promiscuous mode
[ 1697.102216][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1698.369259][T14908] usb 6-1: USB disconnect, device number 64
[ 1698.649075][T25245] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5210'.
[ 1698.954521][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.722430][T25253] overlayfs: missing 'lowerdir'
[ 1700.140511][T19799] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[ 1700.320098][T19799] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1700.331268][T19799] usb 1-1: not running at top speed; connect to a high speed hub
[ 1700.369091][T19799] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1700.378313][T19799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.398493][T19799] usb 1-1: Product: syz
[ 1700.407218][T19799] usb 1-1: Manufacturer: syz
[ 1700.418681][T19799] usb 1-1: SerialNumber: syz
[ 1700.690965][T25263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5214'.
[ 1701.814496][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1701.821600][T19799] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1701.846548][T19799] usb 1-1: can't set first interface for hiFace device.
[ 1701.853018][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5216'.
[ 1701.864596][T19799] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1701.992691][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5216'.
[ 1702.008678][T19799] usb 1-1: USB disconnect, device number 106
[ 1702.054647][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5216'.
[ 1702.457987][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1702.504040][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5216'.
[ 1703.515305][T25290] syz.0.5222 (25290): drop_caches: 2
[ 1703.943955][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.978892][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.988658][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.079238][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.166322][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.131789][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.557183][T25325] overlayfs: failed to resolve './file7': -2
[ 1706.705418][T25331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5231'.
[ 1707.636480][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1707.920445][ T5817] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1708.544986][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1708.554868][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1708.567303][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1708.587366][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1708.633119][ T5817] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1708.644034][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.666871][ T5817] usb 2-1: Product: syz
[ 1708.682291][ T5817] usb 2-1: Manufacturer: syz
[ 1708.694564][ T5817] usb 2-1: SerialNumber: syz
[ 1708.712257][ T5817] usb 2-1: config 0 descriptor??
[ 1709.017265][ T5817] usb 2-1: can't set config #0, error -71
[ 1709.041632][ T5817] usb 2-1: USB disconnect, device number 88
[ 1709.211002][ T5812] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1709.261764][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.607782][ T5812] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1709.618235][ T5812] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1709.628643][ T5812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1709.639856][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1709.653816][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1709.971085][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.099637][T19799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.108154][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.109326][ T5812] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1710.138413][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1710.146515][ T5812] usb 1-1: Product: syz
[ 1710.151004][ T5812] usb 1-1: Manufacturer: syz
[ 1710.162106][ T5812] cdc_wdm 1-1:1.0: skipping garbage
[ 1710.167308][ T5812] cdc_wdm 1-1:1.0: skipping garbage
[ 1710.189066][ T5812] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1710.195332][ T5812] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1710.472664][T25371] overlayfs: missing 'lowerdir'
[ 1710.640511][T25377] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1711.792848][T25385] syz.6.5243 (25385): drop_caches: 2
[ 1712.163249][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1712.600664][T19799] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1712.782456][T19799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1712.800441][T19799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1712.830842][T19799] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1712.883421][T19799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1712.929959][T19799] usb 3-1: config 0 descriptor??
[ 1712.936366][ T5812] usb 1-1: USB disconnect, device number 107
[ 1713.106721][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.385724][T19799] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0
[ 1713.401099][T19799] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0
[ 1713.420697][T19799] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0024/input/input76
[ 1713.507858][T19799] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[ 1713.635690][T19799] usb 3-1: USB disconnect, device number 80
[ 1713.772238][T25396] fido_id[25396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1714.390703][ T5817] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1714.868006][T25417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5252'.
[ 1715.013124][T25423] FAULT_INJECTION: forcing a failure.
[ 1715.013124][T25423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1715.035319][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.050674][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1715.066336][T25423] CPU: 1 UID: 0 PID: 25423 Comm: syz.0.5254 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1715.066363][T25423] Tainted: [L]=SOFTLOCKUP
[ 1715.066370][T25423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1715.066380][T25423] Call Trace:
[ 1715.066387][T25423]  <TASK>
[ 1715.066394][T25423]  dump_stack_lvl+0x100/0x190
[ 1715.066427][T25423]  should_fail_ex.cold+0x5/0xa
[ 1715.066452][T25423]  _copy_from_user+0x2e/0xd0
[ 1715.066474][T25423]  copy_msghdr_from_user+0x9f/0x4f0
[ 1715.066495][T25423]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1715.066525][T25423]  ___sys_sendmsg+0x106/0x1e0
[ 1715.066545][T25423]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1715.066593][T25423]  __sys_sendmsg+0x170/0x220
[ 1715.066616][T25423]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1715.066654][T25423]  do_syscall_64+0x106/0xf80
[ 1715.066680][T25423]  ? clear_bhb_loop+0x40/0x90
[ 1715.066702][T25423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1715.066719][T25423] RIP: 0033:0x7f23f059c799
[ 1715.066735][T25423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1715.066750][T25423] RSP: 002b:00007f23f1529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1715.066768][T25423] RAX: ffffffffffffffda RBX: 00007f23f0815fa0 RCX: 00007f23f059c799
[ 1715.066779][T25423] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1715.066790][T25423] RBP: 00007f23f1529090 R08: 0000000000000000 R09: 0000000000000000
[ 1715.066800][T25423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1715.066810][T25423] R13: 00007f23f0816038 R14: 00007f23f0815fa0 R15: 00007ffe53874578
[ 1715.066832][T25423]  </TASK>
[ 1715.256055][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1715.266348][ T5817] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1715.275409][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.285639][ T5817] usb 2-1: config 0 descriptor??
[ 1715.777470][ T5817] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0
[ 1715.784839][ T5817] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0
[ 1715.802488][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5258'.
[ 1715.889045][ T5817] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0
[ 1715.900599][ T5817] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0
[ 1715.907869][ T5817] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0
[ 1715.931185][ T5817] cm6533_jd 0003:0D8C:0022.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[ 1715.991951][T25440] FAULT_INJECTION: forcing a failure.
[ 1715.991951][T25440] name failslab, interval 1, probability 0, space 0, times 0
[ 1716.004625][T25440] CPU: 1 UID: 0 PID: 25440 Comm: syz.2.5260 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1716.004651][T25440] Tainted: [L]=SOFTLOCKUP
[ 1716.004657][T25440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1716.004668][T25440] Call Trace:
[ 1716.004675][T25440]  <TASK>
[ 1716.004682][T25440]  dump_stack_lvl+0x100/0x190
[ 1716.004714][T25440]  should_fail_ex.cold+0x5/0xa
[ 1716.004738][T25440]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1716.004766][T25440]  should_failslab+0xc2/0x120
[ 1716.004785][T25440]  __kmalloc_noprof+0xe0/0x850
[ 1716.004817][T25440]  tomoyo_realpath_from_path+0xb6/0x690
[ 1716.004850][T25440]  tomoyo_path_number_perm+0x23c/0x580
[ 1716.004873][T25440]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1716.004897][T25440]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1716.004922][T25440]  ? finish_task_switch.isra.0+0x200/0xb80
[ 1716.004972][T25440]  ? find_held_lock+0x2b/0x80
[ 1716.004995][T25440]  ? __fget_files+0x215/0x3d0
[ 1716.005013][T25440]  ? hook_file_ioctl_common+0x146/0x410
[ 1716.005038][T25440]  ? __fget_files+0x21f/0x3d0
[ 1716.005063][T25440]  security_file_ioctl+0xd3/0x230
[ 1716.005090][T25440]  __x64_sys_ioctl+0xb7/0x210
[ 1716.005119][T25440]  do_syscall_64+0x106/0xf80
[ 1716.005150][T25440]  ? clear_bhb_loop+0x40/0x90
[ 1716.005172][T25440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1716.005191][T25440] RIP: 0033:0x7f1a1cb9c799
[ 1716.005206][T25440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1716.005224][T25440] RSP: 002b:00007f1a1d9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1716.005243][T25440] RAX: ffffffffffffffda RBX: 00007f1a1ce16180 RCX: 00007f1a1cb9c799
[ 1716.005255][T25440] RDX: 0000200000000180 RSI: 00000000c08c5336 RDI: 0000000000000003
[ 1716.005266][T25440] RBP: 00007f1a1d9a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1716.005277][T25440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1716.005288][T25440] R13: 00007f1a1ce16218 R14: 00007f1a1ce16180 R15: 00007fff287d8468
[ 1716.005314][T25440]  </TASK>
[ 1716.005336][T25440] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1716.233219][ T5817] usb 2-1: USB disconnect, device number 89
[ 1716.421448][T25442] fido_id[25442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1717.450973][T25458] overlayfs: missing 'lowerdir'
[ 1717.581117][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1718.450511][ T5812] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 1718.881290][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1718.924889][ T5812] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1718.987315][ T5812] usb 6-1: not running at top speed; connect to a high speed hub
[ 1719.102468][ T5812] usb 6-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1719.200405][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.218572][ T5812] usb 6-1: Product: syz
[ 1719.228651][ T5812] usb 6-1: Manufacturer: syz
[ 1719.233317][ T5812] usb 6-1: SerialNumber: syz
[ 1719.453987][T25474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5268'.
[ 1719.966738][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.299029][ T5812] usb 6-1: can't set first interface for hiFace device.
[ 1720.330415][ T5812] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1720.353375][ T5812] usb 6-1: can't set first interface for hiFace device.
[ 1720.410499][ T5812] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1720.461821][ T5812] usb 6-1: USB disconnect, device number 65
[ 1720.629373][T25349] udevd[25349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1720.788759][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.440453][ T5812] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[ 1721.852061][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1721.870253][ T5812] usb 7-1: not running at top speed; connect to a high speed hub
[ 1722.109169][ T5812] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1722.130440][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1722.138556][ T5812] usb 7-1: Product: syz
[ 1722.154873][ T5812] usb 7-1: Manufacturer: syz
[ 1722.196174][ T5812] usb 7-1: SerialNumber: syz
[ 1723.513928][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1724.636328][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1724.636949][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1724.652295][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1724.950781][T25512] overlayfs: missing 'lowerdir'
[ 1725.753901][T14908] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[ 1725.915706][T25515] fuse: Unknown parameter 'ÿÿ0x0000000000000006'
[ 1726.007728][T14908] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1726.027594][T14908] usb 3-1: not running at top speed; connect to a high speed hub
[ 1726.060644][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1726.114384][T14908] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1726.140752][T14908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1726.148842][T14908] usb 3-1: Product: syz
[ 1726.158294][T14908] usb 3-1: Manufacturer: syz
[ 1726.163030][T14908] usb 3-1: SerialNumber: syz
[ 1727.261487][ T5812] usb 7-1: can't set config #1, error -110
[ 1727.545595][   T24] usb 7-1: USB disconnect, device number 35
[ 1727.551303][T14908] usb 3-1: can't set first interface for hiFace device.
[ 1727.617586][T14908] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1727.668179][T14908] usb 3-1: can't set first interface for hiFace device.
[ 1727.682078][T14908] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1727.711699][T25528] FAULT_INJECTION: forcing a failure.
[ 1727.711699][T25528] name failslab, interval 1, probability 0, space 0, times 0
[ 1727.725449][T14908] usb 3-1: USB disconnect, device number 81
[ 1727.760495][T25528] CPU: 1 UID: 0 PID: 25528 Comm: syz.0.5283 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1727.760519][T25528] Tainted: [L]=SOFTLOCKUP
[ 1727.760525][T25528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1727.760534][T25528] Call Trace:
[ 1727.760539][T25528]  <TASK>
[ 1727.760545][T25528]  dump_stack_lvl+0x100/0x190
[ 1727.760574][T25528]  should_fail_ex.cold+0x5/0xa
[ 1727.760594][T25528]  ? tomoyo_encode2+0xfb/0x3c0
[ 1727.760615][T25528]  should_failslab+0xc2/0x120
[ 1727.760631][T25528]  __kmalloc_noprof+0xe0/0x850
[ 1727.760652][T25528]  ? d_absolute_path+0x136/0x1b0
[ 1727.760687][T25528]  tomoyo_encode2+0xfb/0x3c0
[ 1727.760717][T25528]  tomoyo_encode+0x29/0x50
[ 1727.760741][T25528]  tomoyo_realpath_from_path+0x18c/0x690
[ 1727.760775][T25528]  tomoyo_path_number_perm+0x23c/0x580
[ 1727.760797][T25528]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1727.760822][T25528]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1727.760871][T25528]  ? find_held_lock+0x2b/0x80
[ 1727.760895][T25528]  ? __fget_files+0x215/0x3d0
[ 1727.760914][T25528]  ? hook_file_ioctl_common+0x146/0x410
[ 1727.760939][T25528]  ? __fget_files+0x21f/0x3d0
[ 1727.760963][T25528]  security_file_ioctl+0xd3/0x230
[ 1727.760991][T25528]  __x64_sys_ioctl+0xb7/0x210
[ 1727.761021][T25528]  do_syscall_64+0x106/0xf80
[ 1727.761047][T25528]  ? clear_bhb_loop+0x40/0x90
[ 1727.761069][T25528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1727.761087][T25528] RIP: 0033:0x7f23f059c799
[ 1727.761102][T25528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1727.761119][T25528] RSP: 002b:00007f23f1529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1727.761137][T25528] RAX: ffffffffffffffda RBX: 00007f23f0815fa0 RCX: 00007f23f059c799
[ 1727.761148][T25528] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000003
[ 1727.761159][T25528] RBP: 00007f23f1529090 R08: 0000000000000000 R09: 0000000000000000
[ 1727.761170][T25528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1727.761180][T25528] R13: 00007f23f0816038 R14: 00007f23f0815fa0 R15: 00007ffe53874578
[ 1727.761206][T25528]  </TASK>
[ 1728.093461][T25528] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1728.454671][T25535] overlayfs: missing 'lowerdir'
[ 1729.100641][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.109533][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.660765][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1730.871793][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5289'.
[ 1730.931082][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5289'.
[ 1731.034477][T25549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5286'.
[ 1731.241957][T25560] overlayfs: missing 'lowerdir'
[ 1731.342605][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5292'.
[ 1731.758920][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1732.511390][T14908] usb 1-1: new full-speed USB device number 108 using dummy_hcd
[ 1732.807559][T14908] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1732.844355][T14908] usb 1-1: not running at top speed; connect to a high speed hub
[ 1732.887014][T14908] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1732.899726][T14908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1732.915172][T14908] usb 1-1: Product: syz
[ 1732.919529][T14908] usb 1-1: Manufacturer: syz
[ 1732.924528][T14908] usb 1-1: SerialNumber: syz
[ 1733.253705][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1733.280513][T14908] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1733.323226][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1733.330196][T14908] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1733.362974][T14908] usb 1-1: USB disconnect, device number 108
[ 1733.442783][T25586] udevd[25586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1733.921819][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5295'.
[ 1734.872174][T14422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1734.880897][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.463851][T14908] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1735.503321][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.632064][T14908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1735.642462][T14908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1735.663430][T14908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1735.673118][T14908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1735.718378][T14908] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1735.727543][T14908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.735667][T14908] usb 2-1: Product: syz
[ 1735.739825][T14908] usb 2-1: Manufacturer: syz
[ 1735.748956][T14908] usb 2-1: SerialNumber: syz
[ 1735.773655][T14908] usb 2-1: config 0 descriptor??
[ 1735.788659][T14908] ums-isd200 2-1:0.0: USB Mass Storage device detected
[ 1736.077881][T25589] syzkaller0: entered promiscuous mode
[ 1736.090117][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'.
[ 1736.861906][T11732] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1737.042428][T11732] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1737.051776][T11732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1737.065978][T11732] usb 7-1: config 0 descriptor??
[ 1737.093943][T14908] scsi host1: usb-storage 2-1:0.0
[ 1737.105841][T14908] usb 2-1: USB disconnect, device number 90
[ 1737.321149][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5305'.
[ 1737.438715][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.427261][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'.
[ 1738.714386][T25651] overlayfs: missing 'lowerdir'
[ 1738.932314][   T30] audit: type=1400 audit(1774832939.626:846): avc:  denied  { name_bind } for  pid=25646 comm="syz.1.5307" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1739.081659][   T30] audit: type=1400 audit(1774832939.776:847): avc:  denied  { ioctl } for  pid=25641 comm="syz.0.5306" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1739.110452][T14908] usb 1-1: new full-speed USB device number 109 using dummy_hcd
[ 1739.156957][   T30] audit: type=1400 audit(1774832939.846:848): avc:  denied  { read write } for  pid=25659 comm="syz.2.5311" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1739.180964][   T30] audit: type=1400 audit(1774832939.876:849): avc:  denied  { open } for  pid=25659 comm="syz.2.5311" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1739.560236][T11732] usb 7-1: Cannot read MAC address
[ 1739.613351][T14908] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1739.625861][   T30] audit: type=1400 audit(1774832939.896:850): avc:  denied  { execmem } for  pid=25659 comm="syz.2.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1739.645434][T14908] usb 1-1: not running at top speed; connect to a high speed hub
[ 1739.674739][T11732] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1739.688273][T14908] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1739.703454][T14908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.718158][   T30] audit: type=1400 audit(1774832940.076:851): avc:  denied  { create } for  pid=25659 comm="syz.2.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1739.746059][T14908] usb 1-1: Product: syz
[ 1739.752319][T11732] usb 7-1: USB disconnect, device number 36
[ 1739.760280][T14908] usb 1-1: Manufacturer: syz
[ 1739.773913][T14908] usb 1-1: SerialNumber: syz
[ 1739.788627][   T30] audit: type=1400 audit(1774832940.076:852): avc:  denied  { setopt } for  pid=25659 comm="syz.2.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1739.839932][   T30] audit: type=1400 audit(1774832940.076:853): avc:  denied  { create } for  pid=25659 comm="syz.2.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1739.942512][   T30] audit: type=1400 audit(1774832940.106:854): avc:  denied  { read } for  pid=25659 comm="syz.2.5311" dev="nsfs" ino=4026533769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1740.031106][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1740.051491][   T30] audit: type=1400 audit(1774832940.106:855): avc:  denied  { open } for  pid=25659 comm="syz.2.5311" path="net:[4026533769]" dev="nsfs" ino=4026533769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1740.621599][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1740.633618][T14908] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1740.687917][T14908] usb 1-1: can't set first interface for hiFace device.
[ 1740.722954][T14908] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1740.749535][T14908] usb 1-1: USB disconnect, device number 109
[ 1741.085612][T25679] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5315'.
[ 1741.116434][T25586] udevd[25586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1741.465078][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.927756][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5317'.
[ 1742.541473][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.985266][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1743.985283][   T30] audit: type=1400 audit(1774832944.676:887): avc:  denied  { mounton } for  pid=25709 comm="syz.1.5322" path="/bus" dev="ramfs" ino=104318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1744.038413][T25718] overlayfs: missing 'lowerdir'
[ 1744.038693][   T30] audit: type=1400 audit(1774832944.726:888): avc:  denied  { write } for  pid=25709 comm="syz.1.5322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1744.172266][   T30] audit: type=1400 audit(1774832944.856:889): avc:  denied  { create } for  pid=25709 comm="syz.1.5322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1744.235680][   T30] audit: type=1400 audit(1774832944.926:890): avc:  denied  { create } for  pid=25720 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1744.410443][T14908] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[ 1744.498597][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1744.562400][   T30] audit: type=1400 audit(1774832944.926:891): avc:  denied  { connect } for  pid=25720 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1744.610497][   T30] audit: type=1400 audit(1774832945.166:892): avc:  denied  { listen } for  pid=25720 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1744.738423][T25727] overlayfs: missing 'lowerdir'
[ 1744.813523][T14908] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1744.862258][T14908] usb 2-1: not running at top speed; connect to a high speed hub
[ 1745.335866][T14908] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1745.340665][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1745.360577][T14908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.368900][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1745.500228][T14908] usb 2-1: Product: syz
[ 1745.530427][T14908] usb 2-1: Manufacturer: syz
[ 1745.557858][T14908] usb 2-1: SerialNumber: syz
[ 1745.656014][T19799] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[ 1745.871018][   T30] audit: type=1400 audit(1774832946.566:893): avc:  denied  { allowed } for  pid=25715 comm="syz.0.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1745.967695][   T30] audit: type=1400 audit(1774832946.586:894): avc:  denied  { create } for  pid=25715 comm="syz.0.5324" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1746.075390][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1746.090219][T25740] overlayfs: missing 'lowerdir'
[ 1746.096440][T14908] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1746.107408][   T30] audit: type=1400 audit(1774832946.586:895): avc:  denied  { map } for  pid=25715 comm="syz.0.5324" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1746.137173][T14908] usb 2-1: can't set first interface for hiFace device.
[ 1746.272501][T14908] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1746.399216][   T30] audit: type=1400 audit(1774832946.586:896): avc:  denied  { read write } for  pid=25715 comm="syz.0.5324" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1746.429933][T14908] usb 2-1: USB disconnect, device number 91
[ 1746.436171][T19799] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1746.470570][T19799] usb 6-1: not running at top speed; connect to a high speed hub
[ 1746.497983][T25586] udevd[25586]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1746.518766][T19799] usb 6-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1746.527950][T19799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.550423][T11732] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1746.555873][ T5817] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 1746.695172][T19799] usb 6-1: Product: syz
[ 1746.725014][T19799] usb 6-1: Manufacturer: syz
[ 1746.740146][T19799] usb 6-1: SerialNumber: syz
[ 1746.804430][T19799] usb 6-1: can't set config #1, error -71
[ 1746.830239][T19799] usb 6-1: USB disconnect, device number 66
[ 1746.836548][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1747.024822][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1747.110508][ T5817] usb 7-1: not running at top speed; connect to a high speed hub
[ 1747.133012][T11732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1747.202751][T11732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1747.228066][ T5817] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1747.244691][T11732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1747.253386][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.266900][T25748] netlink: 'syz.1.5330': attribute type 1 has an invalid length.
[ 1747.277035][T11732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1747.299642][ T5817] usb 7-1: Product: syz
[ 1747.310521][ T5817] usb 7-1: Manufacturer: syz
[ 1747.325285][T11732] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1747.340479][ T5817] usb 7-1: SerialNumber: syz
[ 1747.350692][T11732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.399275][T11732] usb 1-1: Product: syz
[ 1747.411097][T11732] usb 1-1: Manufacturer: syz
[ 1747.687084][T11732] usb 1-1: SerialNumber: syz
[ 1747.796109][T25757] overlayfs: missing 'lowerdir'
[ 1748.043577][T11732] usb 1-1: config 0 descriptor??
[ 1748.065343][T11732] usb 1-1: can't set config #0, error -71
[ 1748.118030][T11732] usb 1-1: USB disconnect, device number 110
[ 1748.183337][T19799] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[ 1748.303825][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.397153][T19799] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1748.415957][ T5817] usb 7-1: can't set first interface for hiFace device.
[ 1748.425529][T19799] usb 3-1: not running at top speed; connect to a high speed hub
[ 1748.440900][ T5817] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1748.471605][T19799] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1748.489731][ T5817] usb 7-1: can't set first interface for hiFace device.
[ 1748.490240][T25763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5332'.
[ 1748.500651][ T5817] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1748.510391][T19799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1748.530395][T19799] usb 3-1: Product: syz
[ 1748.550395][T19799] usb 3-1: Manufacturer: syz
[ 1748.570674][ T5817] usb 7-1: USB disconnect, device number 37
[ 1748.571144][T19799] usb 3-1: SerialNumber: syz
[ 1748.627013][T25586] udevd[25586]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1749.064843][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1749.071961][T19799] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1749.098743][T19799] usb 3-1: can't set first interface for hiFace device.
[ 1749.110164][T19799] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1749.161503][T19799] usb 3-1: USB disconnect, device number 82
[ 1749.949452][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1749.949468][   T30] audit: type=1400 audit(1774832950.636:908): avc:  denied  { map_create } for  pid=25778 comm="syz.6.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1749.993139][   T30] audit: type=1400 audit(1774832950.666:909): avc:  denied  { map_read map_write } for  pid=25778 comm="syz.6.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1750.470611][T22197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1750.977456][   T30] audit: type=1400 audit(1774832951.666:910): avc:  denied  { create } for  pid=25797 comm="syz.6.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1751.000828][   T30] audit: type=1400 audit(1774832951.676:911): avc:  denied  { write } for  pid=25798 comm="syz.0.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1751.020714][   T30] audit: type=1400 audit(1774832951.686:912): avc:  denied  { ioctl } for  pid=25797 comm="syz.6.5342" path="socket:[105499]" dev="sockfs" ino=105499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1751.115994][   T30] audit: type=1400 audit(1774832951.806:913): avc:  denied  { ioctl } for  pid=25797 comm="syz.6.5342" path="socket:[105498]" dev="sockfs" ino=105498 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1751.674805][   T30] audit: type=1400 audit(1774832952.366:914): avc:  denied  { create } for  pid=25812 comm="syz.0.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1752.034168][   T30] audit: type=1400 audit(1774832952.636:915): avc:  denied  { connect } for  pid=25812 comm="syz.0.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1752.342108][   T30] audit: type=1400 audit(1774832952.636:916): avc:  denied  { ioctl } for  pid=25812 comm="syz.0.5346" path="socket:[105464]" dev="sockfs" ino=105464 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1752.429805][   T30] audit: type=1400 audit(1774832952.636:917): avc:  denied  { create } for  pid=25812 comm="syz.0.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1752.983809][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1753.640493][T14422] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1753.850468][T14422] usb 2-1: Using ep0 maxpacket: 32
[ 1753.931978][T14422] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1754.001307][T14422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1754.022265][T14422] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1754.047541][T14422] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1754.061314][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.080222][T14422] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1754.089584][T14422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.117572][T14422] usb 2-1: Product: syz
[ 1754.130184][T14422] usb 2-1: Manufacturer: syz
[ 1754.147068][T14422] usb 2-1: SerialNumber: syz
[ 1754.702070][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.996873][T25837] overlayfs: missing 'lowerdir'
[ 1755.280450][ T5817] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[ 1755.419666][T14422] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1755.507557][T14422] usb 2-1: MIDIStreaming interface descriptor not found
[ 1755.750876][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1755.767954][ T5817] usb 1-1: not running at top speed; connect to a high speed hub
[ 1755.819834][ T5817] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1755.882289][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1755.930149][ T5817] usb 1-1: Product: syz
[ 1755.950009][T14422] usb 2-1: USB disconnect, device number 92
[ 1755.963268][ T5817] usb 1-1: Manufacturer: syz
[ 1755.980799][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.996568][ T5817] usb 1-1: SerialNumber: syz
[ 1756.274406][T25869] udevd[25869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1756.552428][T25872] syzkaller0: entered promiscuous mode
[ 1756.725853][ T5817] usb 1-1: can't set first interface for hiFace device.
[ 1756.740652][ T5817] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1756.890721][ T5817] usb 1-1: can't set first interface for hiFace device.
[ 1756.900413][ T5817] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1756.922200][ T5817] usb 1-1: USB disconnect, device number 111
[ 1757.082573][T25887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5361'.
[ 1757.113186][T25867] udevd[25867]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1757.154219][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1757.154234][   T30] audit: type=1400 audit(1774832957.846:930): avc:  denied  { read write } for  pid=25888 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1757.225566][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1757.235567][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1757.250616][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1757.258233][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1757.266707][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1757.327071][T17231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1757.334553][   T30] audit: type=1400 audit(1774832957.876:931): avc:  denied  { open } for  pid=25888 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1757.363971][T17231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1757.376950][T17231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1757.421422][   T30] audit: type=1400 audit(1774832957.886:932): avc:  denied  { ioctl } for  pid=25888 comm="syz-executor" path="socket:[106568]" dev="sockfs" ino=106568 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1757.488249][T17231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1757.496068][T17231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1757.518701][   T30] audit: type=1400 audit(1774832958.056:933): avc:  denied  { create } for  pid=25891 comm="syz.6.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1757.984115][   T30] audit: type=1400 audit(1774832958.196:934): avc:  denied  { mounton } for  pid=25888 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1758.005686][   T30] audit: type=1400 audit(1774832958.326:935): avc:  denied  { create } for  pid=25891 comm="syz.6.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1758.056031][   T30] audit: type=1400 audit(1774832958.336:936): avc:  denied  { bind } for  pid=25891 comm="syz.6.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1758.077969][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1758.106443][   T30] audit: type=1400 audit(1774832958.406:937): avc:  denied  { listen } for  pid=25891 comm="syz.6.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1759.011276][T19799] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1759.180797][T14713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.221163][T19799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1759.235111][T19799] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1759.261806][T19799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1759.275970][T19799] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1759.312840][T19799] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1759.323061][T19799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.331414][T19799] usb 1-1: Product: syz
[ 1759.335648][T19799] usb 1-1: Manufacturer: syz
[ 1759.340259][T19799] usb 1-1: SerialNumber: syz
[ 1759.360769][T19799] usb 1-1: config 0 descriptor??
[ 1759.374285][T19799] ums-isd200 1-1:0.0: USB Mass Storage device detected
[ 1759.590941][T17231] Bluetooth: hci3: command tx timeout
[ 1759.608401][   T30] audit: type=1400 audit(1774832960.266:938): avc:  denied  { create } for  pid=25898 comm="syz.0.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1760.200016][T25905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5364'.
[ 1760.584338][T25910] FAULT_INJECTION: forcing a failure.
[ 1760.584338][T25910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1760.597746][T25910] CPU: 1 UID: 0 PID: 25910 Comm: syz.6.5365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1760.597773][T25910] Tainted: [L]=SOFTLOCKUP
[ 1760.597779][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1760.597791][T25910] Call Trace:
[ 1760.597797][T25910]  <TASK>
[ 1760.597805][T25910]  dump_stack_lvl+0x100/0x190
[ 1760.597838][T25910]  should_fail_ex.cold+0x5/0xa
[ 1760.597861][T25910]  _copy_to_user+0x32/0xd0
[ 1760.597884][T25910]  simple_read_from_buffer+0xcb/0x170
[ 1760.597906][T25910]  proc_fail_nth_read+0x1af/0x230
[ 1760.597933][T25910]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1760.597960][T25910]  ? rw_verify_area+0xce/0x6d0
[ 1760.597985][T25910]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1760.598009][T25910]  vfs_read+0x1e4/0xb30
[ 1760.598041][T25910]  ? __pfx_vfs_read+0x10/0x10
[ 1760.598067][T25910]  ? __fget_files+0x215/0x3d0
[ 1760.598092][T25910]  ? __fget_files+0x21f/0x3d0
[ 1760.598118][T25910]  ksys_read+0x12a/0x250
[ 1760.598135][T25910]  ? __pfx_ksys_read+0x10/0x10
[ 1760.598159][T25910]  do_syscall_64+0x106/0xf80
[ 1760.598185][T25910]  ? clear_bhb_loop+0x40/0x90
[ 1760.598208][T25910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1760.598227][T25910] RIP: 0033:0x7f1f2db5cfce
[ 1760.598242][T25910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1760.598258][T25910] RSP: 002b:00007f1f2eaa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1760.598275][T25910] RAX: ffffffffffffffda RBX: 00007f1f2eaa86c0 RCX: 00007f1f2db5cfce
[ 1760.598287][T25910] RDX: 000000000000000f RSI: 00007f1f2eaa80a0 RDI: 0000000000000006
[ 1760.598297][T25910] RBP: 00007f1f2eaa8090 R08: 0000000000000000 R09: 0000000000000000
[ 1760.598318][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1760.598328][T25910] R13: 00007f1f2de16218 R14: 00007f1f2de16180 R15: 00007ffdde6e4808
[ 1760.598353][T25910]  </TASK>
[ 1761.250636][T19799] scsi host1: usb-storage 1-1:0.0
[ 1761.266123][T19799] usb 1-1: USB disconnect, device number 112
[ 1761.458691][T25923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5368'.
[ 1761.664376][T17231] Bluetooth: hci3: command tx timeout
[ 1761.744253][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.970658][T17028] syz_tun (unregistering): left allmulticast mode
[ 1762.126589][   T30] audit: type=1400 audit(1774832962.816:939): avc:  denied  { mounton } for  pid=25931 comm="syz.2.5372" path="/426/file0" dev="tmpfs" ino=2278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1762.173485][T25933] CUSE: unknown device info ""
[ 1762.199934][T25937] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1762.209917][T25933] CUSE: unknown device info ""
[ 1762.215126][T25933] CUSE: unknown device info ""
[ 1762.220072][T25933] CUSE: unknown device info ""
[ 1762.226309][T25933] CUSE: unknown device info "ÿ"
[ 1762.232281][T25933] CUSE: unknown device info ""
[ 1762.238266][T25933] CUSE: unknown device info ""
[ 1762.244674][T25933] CUSE: unknown device info "ÿ"
[ 1762.277683][T25939] ipt_rpfilter: unknown options
[ 1762.280486][   T30] audit: type=1400 audit(1774832962.816:940): avc:  denied  { mount } for  pid=25931 comm="syz.2.5372" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1762.325535][T25933] CUSE: DEVNAME unspecified
[ 1762.374569][   T30] audit: type=1400 audit(1774832963.016:941): avc:  denied  { ioctl } for  pid=25927 comm="syz.6.5371" path="socket:[105730]" dev="sockfs" ino=105730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1762.402602][   T30] audit: type=1400 audit(1774832963.016:942): avc:  denied  { shutdown } for  pid=25927 comm="syz.6.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1762.431603][T25933] fuse: Bad value for 'fd'
[ 1762.448884][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1762.464730][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.485283][   T30] audit: type=1400 audit(1774832963.126:943): avc:  denied  { mounton } for  pid=25931 comm="syz.2.5372" path="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1762.527954][   T30] audit: type=1400 audit(1774832963.206:944): avc:  denied  { unmount } for  pid=25931 comm="syz.2.5372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1762.755606][T25945] overlayfs: missing 'lowerdir'
[ 1763.290442][ T5812] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[ 1763.507877][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1763.569420][ T5812] usb 1-1: not running at top speed; connect to a high speed hub
[ 1763.626055][ T5812] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1763.635355][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.645474][ T5812] usb 1-1: Product: syz
[ 1763.649633][ T5812] usb 1-1: Manufacturer: syz
[ 1763.655377][ T5812] usb 1-1: SerialNumber: syz
[ 1763.745079][T17231] Bluetooth: hci3: command tx timeout
[ 1764.321577][   T30] audit: type=1400 audit(1774832964.716:945): avc:  denied  { sqpoll } for  pid=25949 comm="syz.6.5375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1764.388248][   T30] audit: type=1400 audit(1774832964.726:946): avc:  denied  { append } for  pid=25949 comm="syz.6.5375" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1764.469474][   T30] audit: type=1400 audit(1774832964.726:947): avc:  denied  { read } for  pid=25949 comm="syz.6.5375" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1764.573504][   T30] audit: type=1400 audit(1774832964.726:948): avc:  denied  { open } for  pid=25949 comm="syz.6.5375" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1764.659644][   T30] audit: type=1400 audit(1774832964.846:949): avc:  denied  { read write } for  pid=25949 comm="syz.6.5375" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1765.444992][T25960] overlayfs: missing 'lowerdir'
[ 1765.780700][T14422] usb 7-1: new full-speed USB device number 38 using dummy_hcd
[ 1765.831928][T17231] Bluetooth: hci3: command tx timeout
[ 1765.985655][T14422] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1765.995326][T14422] usb 7-1: not running at top speed; connect to a high speed hub
[ 1766.179477][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1766.195030][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.532384][T14422] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1766.541815][T14422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1766.549801][T14422] usb 7-1: Product: syz
[ 1766.670022][ T5812] usb 1-1: can't set first interface for hiFace device.
[ 1766.677088][ T5812] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1766.698224][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1766.720744][T14422] usb 7-1: Manufacturer: syz
[ 1766.726125][T14422] usb 7-1: SerialNumber: syz
[ 1766.728499][ T5812] usb 1-1: can't set first interface for hiFace device.
[ 1766.740872][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.762732][ T5812] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1767.093771][ T5812] usb 1-1: USB disconnect, device number 113
[ 1767.136765][T25968] FAULT_INJECTION: forcing a failure.
[ 1767.136765][T25968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1767.160507][T25968] CPU: 0 UID: 0 PID: 25968 Comm: syz.1.5379 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1767.160532][T25968] Tainted: [L]=SOFTLOCKUP
[ 1767.160538][T25968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1767.160548][T25968] Call Trace:
[ 1767.160554][T25968]  <TASK>
[ 1767.160560][T25968]  dump_stack_lvl+0x100/0x190
[ 1767.160591][T25968]  should_fail_ex.cold+0x5/0xa
[ 1767.160614][T25968]  _copy_from_user+0x2e/0xd0
[ 1767.160633][T25968]  kstrtouint_from_user+0xd6/0x1d0
[ 1767.160655][T25968]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1767.160671][T25968]  ? __lock_acquire+0x4a5/0x2630
[ 1767.160684][T25968]  ? lock_acquire+0x1cf/0x380
[ 1767.160697][T25968]  proc_fail_nth_write+0x83/0x220
[ 1767.160713][T25968]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1767.160741][T25968]  vfs_write+0x2aa/0x1070
[ 1767.160758][T25968]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1767.160783][T25968]  ? __pfx_vfs_write+0x10/0x10
[ 1767.160797][T25968]  ? __fget_files+0x215/0x3d0
[ 1767.160814][T25968]  ? __fget_files+0x21f/0x3d0
[ 1767.160830][T25968]  ksys_write+0x12a/0x250
[ 1767.160840][T25968]  ? __pfx_ksys_write+0x10/0x10
[ 1767.160854][T25968]  do_syscall_64+0x106/0xf80
[ 1767.160872][T25968]  ? clear_bhb_loop+0x40/0x90
[ 1767.160893][T25968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1767.160910][T25968] RIP: 0033:0x7f9436d5cfce
[ 1767.160924][T25968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1767.160939][T25968] RSP: 002b:00007f9437c2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1767.160952][T25968] RAX: ffffffffffffffda RBX: 00007f9437c2d6c0 RCX: 00007f9436d5cfce
[ 1767.160959][T25968] RDX: 0000000000000001 RSI: 00007f9437c2d0a0 RDI: 0000000000000006
[ 1767.160965][T25968] RBP: 00007f9437c2d090 R08: 0000000000000000 R09: 0000000000000000
[ 1767.160971][T25968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1767.160977][T25968] R13: 00007f9437016128 R14: 00007f9437016090 R15: 00007ffd63631a68
[ 1767.160991][T25968]  </TASK>
[ 1767.489321][T14422] usb 7-1: can't set first interface for hiFace device.
[ 1767.519786][T14422] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1767.549763][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.560248][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.560895][T14422] usb 7-1: can't set first interface for hiFace device.
[ 1767.605978][T25888] chnl_net:caif_netlink_parms(): no params data found
[ 1767.621260][T14422] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1767.676703][T14422] usb 7-1: USB disconnect, device number 38
[ 1767.778514][T25867] udevd[25867]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1767.789969][T25981] syzkaller0: entered promiscuous mode
[ 1767.835014][T25888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1767.865563][T25888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.875866][T25888] bridge_slave_0: entered allmulticast mode
[ 1767.914973][T25888] bridge_slave_0: entered promiscuous mode
[ 1767.926050][T25888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1767.938948][T25888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.948680][T25888] bridge_slave_1: entered allmulticast mode
[ 1767.958245][T25888] bridge_slave_1: entered promiscuous mode
[ 1767.971695][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1767.971708][   T30] audit: type=1400 audit(1774832968.666:951): avc:  denied  { wake_alarm } for  pid=25987 comm="syz.2.5383" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1768.584134][   T30] audit: type=1400 audit(1774832968.986:952): avc:  denied  { create } for  pid=25987 comm="syz.2.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1768.611110][   T30] audit: type=1400 audit(1774832968.986:953): avc:  denied  { bind } for  pid=25987 comm="syz.2.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1768.647005][   T30] audit: type=1400 audit(1774832969.066:954): avc:  denied  { setopt } for  pid=25987 comm="syz.2.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1768.918588][   T30] audit: type=1400 audit(1774832969.606:955): avc:  denied  { bind } for  pid=26004 comm="syz.2.5385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1768.949765][T26005] Bluetooth: MGMT ver 1.23
[ 1768.989691][   T30] audit: type=1400 audit(1774832969.636:956): avc:  denied  { write } for  pid=26004 comm="syz.2.5385" path="socket:[105903]" dev="sockfs" ino=105903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1768.995307][T25994] overlayfs: missing 'lowerdir'
[ 1769.441261][T11732] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[ 1769.639424][T11732] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1769.651618][T11732] usb 1-1: not running at top speed; connect to a high speed hub
[ 1769.691210][T11732] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1769.706758][T11732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1769.715599][T11732] usb 1-1: Product: syz
[ 1769.719807][T11732] usb 1-1: Manufacturer: syz
[ 1769.724792][T11732] usb 1-1: SerialNumber: syz
[ 1770.277164][   T30] audit: type=1400 audit(1774832970.966:957): avc:  denied  { read } for  pid=26013 comm="syz.6.5384" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1770.318457][T26014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5384'.
[ 1770.332608][   T30] audit: type=1400 audit(1774832970.996:958): avc:  denied  { open } for  pid=26013 comm="syz.6.5384" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1770.384071][   T30] audit: type=1400 audit(1774832971.076:959): avc:  denied  { ioctl } for  pid=26013 comm="syz.6.5384" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1771.027760][T26022] FAULT_INJECTION: forcing a failure.
[ 1771.027760][T26022] name failslab, interval 1, probability 0, space 0, times 0
[ 1771.040625][T26022] CPU: 0 UID: 0 PID: 26022 Comm: syz.6.5388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1771.040652][T26022] Tainted: [L]=SOFTLOCKUP
[ 1771.040659][T26022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1771.040670][T26022] Call Trace:
[ 1771.040677][T26022]  <TASK>
[ 1771.040684][T26022]  dump_stack_lvl+0x100/0x190
[ 1771.040721][T26022]  should_fail_ex.cold+0x5/0xa
[ 1771.040745][T26022]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1771.040772][T26022]  should_failslab+0xc2/0x120
[ 1771.040792][T26022]  __kmalloc_noprof+0xe0/0x850
[ 1771.040824][T26022]  tomoyo_realpath_from_path+0xb6/0x690
[ 1771.040858][T26022]  tomoyo_path_number_perm+0x23c/0x580
[ 1771.040880][T26022]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1771.040905][T26022]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1771.040930][T26022]  ? finish_task_switch.isra.0+0x200/0xb80
[ 1771.040980][T26022]  ? find_held_lock+0x2b/0x80
[ 1771.041003][T26022]  ? __fget_files+0x215/0x3d0
[ 1771.041022][T26022]  ? hook_file_ioctl_common+0x146/0x410
[ 1771.041046][T26022]  ? __fget_files+0x21f/0x3d0
[ 1771.041070][T26022]  security_file_ioctl+0xd3/0x230
[ 1771.041097][T26022]  __x64_sys_ioctl+0xb7/0x210
[ 1771.041126][T26022]  do_syscall_64+0x106/0xf80
[ 1771.041152][T26022]  ? clear_bhb_loop+0x40/0x90
[ 1771.041175][T26022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1771.041193][T26022] RIP: 0033:0x7f1f2db9c799
[ 1771.041208][T26022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1771.041225][T26022] RSP: 002b:00007f1f2eaa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1771.041243][T26022] RAX: ffffffffffffffda RBX: 00007f1f2de16180 RCX: 00007f1f2db9c799
[ 1771.041254][T26022] RDX: 0000000000000000 RSI: 0000000000002284 RDI: 0000000000000005
[ 1771.041265][T26022] RBP: 00007f1f2eaa8090 R08: 0000000000000000 R09: 0000000000000000
[ 1771.041276][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1771.041286][T26022] R13: 00007f1f2de16218 R14: 00007f1f2de16180 R15: 00007ffdde6e4808
[ 1771.041312][T26022]  </TASK>
[ 1771.041352][T26022] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1771.253588][   T30] audit: type=1400 audit(1774832971.716:960): avc:  denied  { read } for  pid=26019 comm="syz.6.5388" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1772.067154][T26024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5389'.
[ 1772.079339][T25888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1772.140570][T11732] usb 1-1: can't set first interface for hiFace device.
[ 1772.157116][T25888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1772.178129][T11732] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1772.230513][T11732] usb 1-1: can't set first interface for hiFace device.
[ 1772.237476][T11732] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1772.284966][T11732] usb 1-1: USB disconnect, device number 114
[ 1772.359625][T25888] team0: Port device team_slave_0 added
[ 1772.396656][T25888] team0: Port device team_slave_1 added
[ 1772.638099][T26034] overlayfs: missing 'lowerdir'
[ 1773.240504][T11732] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[ 1773.498501][T11732] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1773.528451][T11732] usb 2-1: not running at top speed; connect to a high speed hub
[ 1773.568079][T11732] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40
[ 1773.599641][T11732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1773.637519][T11732] usb 2-1: Product: syz
[ 1773.643453][T11732] usb 2-1: Manufacturer: syz
[ 1773.648052][T11732] usb 2-1: SerialNumber: syz
[ 1773.736843][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 1773.736858][   T30] audit: type=1400 audit(1774832974.426:976): avc:  denied  { add_name } for  pid=26035 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1773.860497][   T30] audit: type=1400 audit(1774832974.426:977): avc:  denied  { create } for  pid=26035 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1773.887761][   T30] audit: type=1400 audit(1774832974.426:978): avc:  denied  { write } for  pid=26035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=14604 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1773.975928][   T30] audit: type=1400 audit(1774832974.426:979): avc:  denied  { append } for  pid=26035 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=14604 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1774.050626][   T30] audit: type=1400 audit(1774832974.736:980): avc:  denied  { remove_name } for  pid=26056 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=14604 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1774.124994][   T30] audit: type=1400 audit(1774832974.736:981): avc:  denied  { unlink } for  pid=26056 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=14604 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1774.216317][   T13] bond0 (unregistering): Released all slaves
[ 1774.245358][   T13] bond1 (unregistering): Released all slaves
[ 1774.320644][T19799] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1774.343567][T25888] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1774.396736][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1774.424677][T25888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1774.458090][   T30] audit: type=1400 audit(1774832975.146:982): avc:  denied  { bind } for  pid=26060 comm="syz.0.5396" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1774.458716][T25888] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1774.478991][T19799] usb 7-1: device descriptor read/64, error -71
[ 1774.492768][T11732] usb 2-1: can't set first interface for hiFace device.
[ 1774.499714][T11732] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1774.554959][   T30] audit: type=1400 audit(1774832975.146:983): avc:  denied  { name_bind } for  pid=26060 comm="syz.0.5396" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 1774.560627][T14422] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1774.579310][T11732] usb 2-1: can't set first interface for hiFace device.
[ 1774.600892][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1774.631129][T11732] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1774.640255][   T30] audit: type=1400 audit(1774832975.146:984): avc:  denied  { node_bind } for  pid=26060 comm="syz.0.5396" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1774.669230][T11732] usb 2-1: USB disconnect, device number 93
[ 1774.709091][   T30] audit: type=1400 audit(1774832975.186:985): avc:  denied  { read } for  pid=26060 comm="syz.0.5396" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1774.790818][T19799] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1774.798427][T25888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1774.851233][T14422] usb 3-1: Using ep0 maxpacket: 32
[ 1774.859022][T14422] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1774.884087][T14422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.950443][T19799] usb 7-1: device descriptor read/64, error -71
[ 1775.012818][T14422] usb 3-1: config 0 descriptor??
[ 1775.108925][T14422] as10x_usb: device has been detected
[ 1775.115257][T19799] usb usb7-port1: attempt power cycle
[ 1775.126441][T25888] hsr_slave_0: entered promiscuous mode
[ 1775.149619][T14422] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1775.173327][T25888] hsr_slave_1: entered promiscuous mode
[ 1775.200653][T25888] debugfs: 'hsr0' already exists in 'hsr'
[ 1775.225129][T26044] ------------[ cut here ]------------
[ 1775.230612][T26044] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[ 1775.230620][T26044] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x93d/0x1b90, CPU#1: syz.2.5394/26044
[ 1775.246499][T26044] Modules linked in:
[ 1775.250645][T26044] CPU: 1 UID: 0 PID: 26044 Comm: syz.2.5394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1775.261601][T26044] Tainted: [L]=SOFTLOCKUP
[ 1775.266278][T26044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1775.276374][T26044] RIP: 0010:__mutex_lock+0x944/0x1b90
[ 1775.281965][T26044] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 5e 44 47 05 85 f6 75 13 48 8d 3d d3 60 4a 05 48 c7 c6 a0 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 05 63 51
[ 1775.301618][T26044] RSP: 0018:ffffc9000642fa40 EFLAGS: 00010246
[ 1775.307656][T26044] RAX: 0000000000000003 RBX: ffff88804a0d8b60 RCX: 1ffffffff21b3ee0
[ 1775.315867][T26044] RDX: 0000000000000000 RSI: ffffffff8bafb1a0 RDI: ffffffff90dd1380
[ 1775.323853][T26044] RBP: ffffc9000642fbc0 R08: 0000000000000001 R09: 0000000000000000
[ 1775.331821][T26044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1775.339762][T26044] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 1775.347953][T26044] FS:  00007f1a1d9ea6c0(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000
[ 1775.356871][T26044] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1775.363445][T26044] CR2: 0000001b2f006ff8 CR3: 0000000043904000 CR4: 00000000003526f0
[ 1775.371584][T26044] Call Trace:
[ 1775.374834][T26044]  <TASK>
[ 1775.377744][T26044]  ? trace_contention_end+0x140/0x180
[ 1775.383127][T26044]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.388733][T26044]  ? find_held_lock+0x2b/0x80
[ 1775.393466][T26044]  ? __pfx___mutex_lock+0x10/0x10
[ 1775.398480][T26044]  ? __pfx___mutex_lock+0x10/0x10
[ 1775.403796][T26044]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.409432][T26044]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.415007][T26044]  dmx_section_feed_start_filtering+0x3a8/0x660
[ 1775.421338][T26044]  dvb_dmxdev_filter_start+0x767/0xdd0
[ 1775.426798][T26044]  dvb_demux_do_ioctl+0xe64/0x1200
[ 1775.432198][T26044]  dvb_usercopy+0x167/0x340
[ 1775.436711][T26044]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1775.442291][T26044]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1775.447339][T26044]  ? selinux_file_ioctl+0x139/0x290
[ 1775.452574][T26044]  ? selinux_file_ioctl+0xb4/0x290
[ 1775.457691][T26044]  dvb_demux_ioctl+0x29/0x40
[ 1775.462594][T26044]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1775.467885][T26044]  __x64_sys_ioctl+0x18e/0x210
[ 1775.472686][T26044]  do_syscall_64+0x106/0xf80
[ 1775.477278][T26044]  ? clear_bhb_loop+0x40/0x90
[ 1775.481990][T26044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1775.487883][T26044] RIP: 0033:0x7f1a1cb9c799
[ 1775.490410][T19799] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1775.492548][T26044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1775.519523][T26044] RSP: 002b:00007f1a1d9ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1775.528228][T26044] RAX: ffffffffffffffda RBX: 00007f1a1ce15fa0 RCX: 00007f1a1cb9c799
[ 1775.536215][T26044] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 000000000000000a
[ 1775.544191][T26044] RBP: 00007f1a1cc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1775.552421][T26044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1775.560398][T26044] R13: 00007f1a1ce16038 R14: 00007f1a1ce15fa0 R15: 00007fff287d8468
[ 1775.568380][T26044]  </TASK>
[ 1775.571417][T26044] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1775.578684][T26044] CPU: 1 UID: 0 PID: 26044 Comm: syz.2.5394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1775.589605][T26044] Tainted: [L]=SOFTLOCKUP
[ 1775.593907][T26044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1775.603935][T26044] Call Trace:
[ 1775.607204][T26044]  <TASK>
[ 1775.610117][T26044]  dump_stack_lvl+0x100/0x190
[ 1775.614785][T26044]  vpanic+0x552/0x970
[ 1775.618753][T26044]  ? __pfx_vpanic+0x10/0x10
[ 1775.623233][T26044]  ? lock_release+0x263/0x320
[ 1775.627884][T26044]  panic+0xd1/0xe0
[ 1775.631582][T26044]  ? __pfx_panic+0x10/0x10
[ 1775.635989][T26044]  check_panic_on_warn.cold+0x19/0x34
[ 1775.641336][T26044]  ? __mutex_lock+0x93d/0x1b90
[ 1775.646085][T26044]  __warn.cold+0x191/0x348
[ 1775.650485][T26044]  __report_bug+0x296/0x3d0
[ 1775.654969][T26044]  ? __mutex_lock+0x93d/0x1b90
[ 1775.659719][T26044]  ? __pfx___report_bug+0x10/0x10
[ 1775.664740][T26044]  ? register_lock_class+0x40/0x560
[ 1775.669915][T26044]  report_bug_entry+0xe1/0x290
[ 1775.674659][T26044]  ? __mutex_lock+0x944/0x1b90
[ 1775.679414][T26044]  handle_bug+0x1cd/0x2a0
[ 1775.683725][T26044]  exc_invalid_op+0x17/0x50
[ 1775.688202][T26044]  asm_exc_invalid_op+0x1a/0x20
[ 1775.693027][T26044] RIP: 0010:__mutex_lock+0x944/0x1b90
[ 1775.698391][T26044] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 5e 44 47 05 85 f6 75 13 48 8d 3d d3 60 4a 05 48 c7 c6 a0 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 05 63 51
[ 1775.717983][T26044] RSP: 0018:ffffc9000642fa40 EFLAGS: 00010246
[ 1775.724036][T26044] RAX: 0000000000000003 RBX: ffff88804a0d8b60 RCX: 1ffffffff21b3ee0
[ 1775.731991][T26044] RDX: 0000000000000000 RSI: ffffffff8bafb1a0 RDI: ffffffff90dd1380
[ 1775.739944][T26044] RBP: ffffc9000642fbc0 R08: 0000000000000001 R09: 0000000000000000
[ 1775.747888][T26044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1775.755838][T26044] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 1775.763791][T26044]  ? trace_contention_end+0x140/0x180
[ 1775.769155][T26044]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.774769][T26044]  ? find_held_lock+0x2b/0x80
[ 1775.779437][T26044]  ? __pfx___mutex_lock+0x10/0x10
[ 1775.784447][T26044]  ? __pfx___mutex_lock+0x10/0x10
[ 1775.789464][T26044]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.795084][T26044]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[ 1775.800529][T26044]  dmx_section_feed_start_filtering+0x3a8/0x660
[ 1775.806764][T26044]  dvb_dmxdev_filter_start+0x767/0xdd0
[ 1775.812212][T26044]  dvb_demux_do_ioctl+0xe64/0x1200
[ 1775.817313][T26044]  dvb_usercopy+0x167/0x340
[ 1775.821802][T26044]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1775.827320][T26044]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1775.832333][T26044]  ? selinux_file_ioctl+0x139/0x290
[ 1775.837516][T26044]  ? selinux_file_ioctl+0xb4/0x290
[ 1775.842611][T26044]  dvb_demux_ioctl+0x29/0x40
[ 1775.847182][T26044]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1775.852453][T26044]  __x64_sys_ioctl+0x18e/0x210
[ 1775.857194][T26044]  do_syscall_64+0x106/0xf80
[ 1775.861759][T26044]  ? clear_bhb_loop+0x40/0x90
[ 1775.866411][T26044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1775.872275][T26044] RIP: 0033:0x7f1a1cb9c799
[ 1775.876658][T26044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1775.896236][T26044] RSP: 002b:00007f1a1d9ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1775.904621][T26044] RAX: ffffffffffffffda RBX: 00007f1a1ce15fa0 RCX: 00007f1a1cb9c799
[ 1775.912564][T26044] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 000000000000000a
[ 1775.920509][T26044] RBP: 00007f1a1cc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1775.928462][T26044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1775.936407][T26044] R13: 00007f1a1ce16038 R14: 00007f1a1ce15fa0 R15: 00007fff287d8468
[ 1775.944353][T26044]  </TASK>
[ 1775.947448][T26044] Kernel Offset: disabled
[ 1775.951754][T26044] Rebooting in 86400 seconds..