last executing test programs:

5m52.690234681s ago: executing program 1 (id=1079):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700003dbdf25310000000500330003000000050036000100000005003400230000000a0001007770616e30000000050035"], 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB="53bb694dbcb1f1e7ca82261743427b3f9e12efbbc667fa840d61609d83f04236f37d823dfefe395fb6a988503a60d48bf081f9300433f93c64979921346f"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
write$binfmt_misc(r9, &(0x7f0000000040), 0xe09)

5m50.186575721s ago: executing program 1 (id=1081):
socket(0x27, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40030788170007003d7da32915"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000480)="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", 0x10e}], 0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x4, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x79, [@dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x0, 0x1, 0x7ff, 0x5, 0xb})
ptrace$poke(0x4, r0, &(0x7f0000000280), 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8900, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
modify_ldt$write(0x1, &(0x7f00000002c0)={0x1, 0x20000800, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x10})
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14, 0x0, 0x0, 0x80000006}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r8, 0x80)

5m45.342657937s ago: executing program 1 (id=1093):
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe4, 0xf9}}]}}]}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000003c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
socket$netlink(0x10, 0x3, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x21, 0x10001, 0x8, 0x6, 0x13df, 0x7]}, &(0x7f0000000280)=0x78)

5m41.569499498s ago: executing program 1 (id=1103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)

5m40.224491483s ago: executing program 1 (id=1108):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)={0xfd4, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0xfc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'ctr(aes-aesni)\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf1d, 0x5, "03d8d20c86b944d230971ea1512dcfa96c4995102c061dd8b9d48c615ab7266ab7b0cbd4f6e66c19b1e7bd44b197fb2e99753fc185e20ed5abbf665625a756fb335c25377f17b860f55c1b4622f12142335e5415befb1ff8612f2ad2eb6b0b758be00af40dddf37a435ec538c27871a2008a5053d7c58fe381f44308d51266ed54d2d13b139c36723034b3375b465d2eb216267fa64c87c844eb927a32cdd5d19b84e28b8ef30622c54b5e82b7c3985738bb0306d546db7ed2e584fcafe775348b5f667628f02dd631ead2356af2fc13fb582f6340115db4c73581d9f5ef7bc64923cfa7528d211a5dfcd4ac30640ab84838c4f49f06f882ea45092669193a00afd4bd7f7dcdb29eeb1877f1f5d168be91163f55f59f8ffd4afeafbcabc432270e8bc22c6da92f0818363f45d3f0eb10ecc832ea6be4b5736dd18e5628bfbbcfe9a71ff952e52c80de77562c204e4127141c7ee36d8f599a585be2b549a3a8edd540a3b6454373734d2224ec317a09d479f66eddaafea382cd246f0cc778525764ebedbbaf40ccc2938b37e4b921a4d447dbdb3c76e06027e65296c35343393d74f38122f74586e345910d899f91a7b4ed2dfcb014545628b2460b238b64ef218b67ed0c09b2696ccbfe682844424e0014d2ab95de961ee5e12f2b237cc738445c450ba69dc304799909b1f1a3216cfa8bc36d0b6178ef3d23dc4f8b1793a47247486976b58e6f1ed6259de5be23cc1c825677cca748a2d5720a0b491956fe63e22bc583e20befbad34a8259a6de6ee277e32ec52b5767ce3375eaebc1273c9ad1bcef26bd26bea8e578d055c94ee10de6b85a219501a0c43df55a347d06f745ffe728049cb1618a3177fc34e3194d14376a51cfbd621b2c47da837ea357e4c18445cb65c3171855698a6821a3c3a6eccda3ad729ebe157882fae25d8b0f1dd8306d125b542e4156830198b8b574866c9bc9083f1e163de7126f64f8f4ab063394f721098e07ce9a86777ece9bfd07efabdcbbc5d19996ea610f063e3aaa2fa3d2e60ebe3114094f199467876adaf5eb5b82c4b1f3248b48642c83e3be79f2087e6d4efbfe679bb589815e064eb0eadd2d4a4e3ebc910c42035b224ccd3458577be9cc9fbcd41ed3c0443f763b156afabc128e05953fc0b7ef5424774922a5b805478a81534c71c4ca07221a4fcce085d296b18e2cb6a9a8eeee9e3a6f034e91e2a437d7ef48a08bddb5e64f06e5c5895b3e3c1ea32baeab88e133a8f915405b9ffa97be79ec6b3463871f576e8f68d089b72f3749798a8527f8e190e05f939093ec9d0058ca3ff4efd82703accd3732f4ae507feaadc999b166b7e25c5e625cac3e804d8391898a0a365c9673fe80802a03d4cc0732899bbff6844646ee546bda99986b059d5b2a7699f4c05fde7e777eae23849f923befa1b058bacba3176adedca5bbf67908d1d971b62374662ddf357b1d6250558f4dfb94a5ea6a3dd176441b5657f126fed8416c83668f1c356c2a277eaa36dbba0003ec68bc3d745ac63fc8b92cc899b85ac0a146c798b51c317b7352ecfa438a95a11a9339adf43f27cd3c0c661d9cd47fce8bd45d5d3b20d1e75970de20911e1395e9feffa50449a8b420c21e2993e681f60b3ada8667f8b83ecebfc215e0ba9eaa4d73e17eab29398d79deec5e082170fdf74daadfc16d7948ed0e3201f88f7ce9490ca409a41236191db3ed314c37fa10ae9a9afba9729ac6fd0e3db09fbed1648eb500ed57bf05c5f56898e31f87f32628172709edda210f880c36291b15dd2458f77fcf7db7afe5910977b3e0e8bff139690e2f510fb333e71cc4d234611a403e6aaacf7b99c2d65684ac6a1ff016c57a6241e7722d7d5200e127f088105fe847aabd11bebf085338e5b0be402ad3946a73d296325fb6490379ac5154e11d86448405418bbd9b9ec96f515495f81316ff20e1ea98d16c721b7bc8f729ded8dbf1d8a291b5929cbab3f92db33e65df57d55f3a150ffe06ba4226575eea4ad6d61b8284fc2c1ffeffc94f130e87a585a6cc68c3ad5f30fccf3e070aa207b1105f9b31bcae2e524f1e7fc5fd7aa2846d32d098138ace2d6e75563b5619dff7c0dc435693af3c0512945ebc872a1bd3215883e5248f562849bdf52cb1116ea5aeeb08b9f8879c7d6e0eac886401680f04b64c5ba34d07afab5d3611f3247c799a25a81cc56c91aebcf1b4349f565bbe6c519dd4dda94ffbc3c5ab238cdef4bbaf0c4ac0a92f3cdd0816eb6be6c54cb287f9dc070a9c90363eb676bd8542fa2fcb84ed243f75ae9c3d92efbf70265926bb8f3d67f96b6e6af216bc2cbfa7e4e3f4a8bcea8b1fbc0e1688c9726ceff6011f455e5767bec622bdc3385d30086d3e68cbc0929cae70d63ece736eeff017440a771de31b39185d9b7152b64a56991c469f390615b7ec86fe39dba524a677877f9b34f98ff8ceff3aa98e5ee68e99b51a5631d03e17d377e18f377465e9ff61eecb171dddfba7f444e05420d268e5b97d6ecb6564d0b98fb5c29be18aba33dea2a539b298baf416c55c1ddf895c90e5f94dc3f065475f3ec8c91024423f5c778a48c042186fdf2c74bafff1e53e142d23fa079dc2356955c0b92d4306ab65e7e1d72371ca960a5eed9023219501da2ad7e0f05cd788533f1ccfc0ed71652aba2105edfc54918561d024aeb391a4877367f9fae83674053040499a6996df97faa86e0bfdd1fd4d39611769f163f4ff56ea67ef1b69267ece75f5a9e81c703341d3d23f9229ce0d262042481fbf44d134cb4efb2224a6f7b3fc64e0a40adf4eac3346c01af0ad8959f919b4a49d4e854f627074d68a458b6bb9eda2bc1224f4780cf0b56be64e16da3124b58ed34f34d6380a4e9b1a0a1ba6f40e30672f5a0d6a604ad78e12c301b65ff4caa684926b433d3ed7f661c60d433445221a5a2be1fe18c9e6d67a3475ceb31e05673d21371c53cd9f54f25475f1c1d377871b00123686a7df2b2d185db312b5e6de55755014d3ea901cf86614786d99188723fe11dfe0233b94a9de37ff9d52e1b412eddfc5e0c922b269e63f425384594d0aed63f3c504ced791866fc8f6ec6c26478a9a4606f22eb52d0edb55504c824fb6afa7874fc66ffab7fa5dbc85ebb32e2b17a0ffc5c1f77e08d76b4bb90f01b946186a8cc308b6f58e9211eac9b990a04beec24255f0304c3aacbca0e1c28c21939350a594c0c8dc955167482ff24bd2c580635c43cc825119572555a9a593a47fea943f4d55ed69d53268b61747c47abdc876540a9950ec46ff4afff03b99ef4cfc1aeadf713767ee30c547ecc3a408a9f3e0fb54499a25ee4eab565deb936b513d8326e76aeb7d4f9a49b9d215f349ef01ba90a5520c44fbe7a81376ad9771998853f3ba0d9d29d6ed7ddad58a78a2e4b4e30a2da314a1dc091d00c8ae7623f46f64690ea00b3a224812b4fd53753f8c1e1b86eecca1900dfbdb3082233073d2ad727c1e2a64f84b386cc8e6736e185190d97e67402246820b3a798c46d9249456d1c104b2bd4b0f8e393b7067c2935dce8cd186bdf0ed6994c352336422267fe2e96bb161ed024a87e61db74bb3ef1693e93a0c84dc32031420dd3ed8db6743f8c1372e835fac20277d4597f1c552e9501e5f8e49781110cce5641bf7eccf5a0c75aa9acab4419ad0594319a4e0363ed24b7c5b5348c2ac799b7f348f80b62d9d6bedec09b480730529dc7b127966bb8513bb31350605876b403ec8037d22a3fc6b1ada7ce11e07fc9d080740531c0304cc91329203feefe330b220f7a4d3cec5b2fbd4137a8fd551d7d01fcd16b4452c8bb837adf5fe8e973ad38774da913f9e54a12dcdf7cea96baeede6680285e823c14566af465d5f60b0d962fffb9116626fb9a2a3d4cb25ba0ad7cc6dfaeb12731bb28a266526314fd08cbfcab5cc81c1c151d654958273d85db93ea08b69b11929ef5ee0161b1025dd376a3a9b699fbd1b39017b7f942c60d0a5c8f107077fe3f887f8260167848c73375499aa0b6b53dde267443e07a421b6af1eac9737be1c4fcb9acb16eeed57703b06a5c573ca8e77e03d2430dd1314c2ca727f62453790f9afba6e5bced7985ad2810eb7f8514fc460101e9fdb38ef2257868c7e3beb1a5175b42b68281e52fc8d43a030a0181eefab0269f9f22eb52a1d76c4ff4ec6afc106456e3968dd80a834bcb33867f2c8527323232a4598d8510de97abec992fa2ef9f43911f3b5527e249b7ed99b0e3c167c5303d81d4adc3a8663dba1df45f96d9c5db644b0d442bbd2864391ee5a76dc29529661886f4403cddf350941eb9c47b01d77e5a27d4e09dfdd6e145e172395471ac2d862537deec3aad952ecfa783c827923c2029f66da5deba1169c5d50a5fc3ab57111f5bdc7e39e172c08d9f825639f5831a79b6873e91440d3171aa787002c88ce6076d4752886b995db07b3c983651a5633f134f100a34ee7a63ef8c82832191b7cf655ddf1c34761a0496fae52aa8830b0a71e543d4f725cd84760c5eb40686c03f87796153224d76e72649a4aff4a2ca66cc9355fadf67b2dec329cad10f9efac6e075d2346361af3ed058383a92929b1b0d8161911669d62c6fe150976d55819f0535a8565ef9add9fdbcd480e5701c8017b8f5a7d08ae70a5f8f541b0d8461902ac13dba09cf7d71ae62f13d74795f01fa9178a42b9c749e0403e757d15468f0e2b3cef48dff4fd81d969fcf6612038c2045650c2a56a694f6a32de264defe8bdaa3ea6cbe68d280f79022f23a0dba360c64987ad53e4aec99b4afbb835daa580f822b28a9faa84304396e5e042a4df86530bdf632123359922edcaffe4ae8394c2dabaf2ab5566893680c04e34819f08698c328a6e52cdf426511697e88fd5d25dcd72e9e7aa1af4972c60b75657595a69b29cbbf798a1fde945d86f30283fbb2e94a7df0f3cb2bee5e1571c6bc8c645c8d9df32fe2e6b43b26694a2490561a1d2309ca68fa2897c1774c934defd776cede19e26958fb3fc8e86cfb20849307e2c98051f7d56741f67fe3ab0e941249aaae0cf8fd904e99f6d5a5337018c2dc870b7010500825a430e3a33af8f09fce18c4fd76d227a02399755bc00cf7e6a15fd8aba2c6485b063bd0790956afec42b787dc4e95dd5e89feca255c685284ae7639329bdb795cf4b114b68739dd857f389d7ff209efdc1a7c68ab1a8b9a5f75c7516b5b9b60e1eadd5a566edc1e64eea6e20c65c0847b2b72e33bb76c046775cd04d2b49b7772bc61a89f16ec9902b3d4647e1b3bcfec4c17c9758e985b7cd2ecf92395650d39f55c66daaf2c6631a74ad2e38f5c6b57aab860e147037e8be1c23ba9c26939f78dbf105101dd3f9ad7ff610800f0267eaea4203b431a0e2f6ef020214c2fe04021896d9861adeafb6fab38b45fb9aab42a7bc140e34a096af2bf8ce2705a9cdf1ef23f1037d60"}]}]}, 0xfd4}, 0x1, 0x0, 0x0, 0x14}, 0x0)

5m39.200968859s ago: executing program 1 (id=1111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x5}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4}]}, 0x24}}, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"})
r9 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r10, 0xf507, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x2b, 0x1, 0x70bd27, 0x25dfdbfb, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)

5m23.397690073s ago: executing program 32 (id=1111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x5}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4}]}, 0x24}}, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"})
r9 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r10, 0xf507, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x2b, 0x1, 0x70bd27, 0x25dfdbfb, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)

40.838017491s ago: executing program 4 (id=1968):
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
fanotify_init(0x20, 0x800)
inotify_init1(0x0)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000200))
write$sndseq(0xffffffffffffffff, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x10000009}, {0x3}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x4}}], 0x38)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0)
r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)

39.290625539s ago: executing program 4 (id=1977):
socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x1a3b5000)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xfd7f0000})

36.218773823s ago: executing program 4 (id=1986):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00')
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(r4, 0x0, 0x0, 0x800)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0)
rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)

35.733421947s ago: executing program 4 (id=1988):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0)

35.323928469s ago: executing program 4 (id=1992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00')
read$FUSE(r5, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040108000000000000000012000006019082a79718a9ffdc8a3671695eb0abdf952b8406a816060000002cd74e1f92d2716f41bd435ee4de5329871fe1ba670973f3c1cf30fb5454bb1bedc8a173a763a9"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x9, 0x3, 0x1, [], [0xfffffff9, 0x3, 0x0, 0x4], [0x0, 0x80000002, 0x2], [0xffffffffffffffff, 0x2, 0x1, 0x1]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000200)=0x6, 0x4)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0xc048aeca, &(0x7f0000003680)={{0x2, 0x0, 0x80, {0xeeef0000, 0x2000, 0x3}}, "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", "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"})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
gettid()

32.399443835s ago: executing program 4 (id=1996):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$radio(0x0, 0x0, 0x2)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="704002010189"], 0x6)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x9a, 0x400)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0x37}, {0x45, 0xde0f, 0x5, 0x1, 0x56}}}}, 0xf)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040))

31.392092941s ago: executing program 3 (id=1998):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='rpc_xdr_overflow\x00', r3}, 0x18)
getrandom(0x0, 0x0, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x30000081)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r9, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x40}}, 0x0)
getpid()

30.180550047s ago: executing program 3 (id=2002):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0)

29.52863202s ago: executing program 3 (id=2003):
userfaultfd(0x801)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x20002)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)

28.959194664s ago: executing program 2 (id=2006):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x9f, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x3, 0x4, 0xb, 0xd}], 0x10, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='contention_end\x00', r0, 0x0, 0x7}, 0x18)
r1 = syz_open_dev$media(&(0x7f0000000080), 0xa, 0x941)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x2aaab32, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)

28.22217237s ago: executing program 0 (id=2007):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
connect$ax25(r0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev, @in=@dev}}, {{@in=@private}, 0x0, @in=@multicast2}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, <r7=>0x0], &(0x7f0000000440), 0x3, r6, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[r6], &(0x7f0000000180), &(0x7f0000000380)=[r7], &(0x7f0000000280)})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x10)
recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

28.149620472s ago: executing program 2 (id=2009):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000025c0)=""/4114, 0x1012}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000004c00)=""/4105, 0x1009}], 0x1}}], 0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x1c}}, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008ae3cfaeeb7e07bac22a900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="040000000000000000000000fabeb2ea96baf84a77a4", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

28.080639988s ago: executing program 3 (id=2010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x3ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x6, 0xdb, &(0x7f0000000340)=""/219, 0x41100, 0x2d, '\x00', r2, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xa, 0x2, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x2, 0x10, 0xa}, {0x5, 0x4, 0x7, 0x8}, {0x2, 0x3, 0x0, 0x7}, {0x5, 0x2, 0x4, 0x9}, {0x2, 0x4, 0x2, 0xd}], 0x10, 0x7, @void, @value}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r2, {0x2, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xee, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x3, 0xffff, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x244efee455dd96c4}]}}]}, 0x64}}, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0x409, 0x70bd29, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0x10}, {0xffe0, 0x8}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0x0, 0x7, 0x1, 0x2, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0xc000]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd5}, 0x4000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller1\x00'})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x2c)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001940)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r4, 0x301, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4)

25.80783008s ago: executing program 0 (id=2011):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x2100040, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_delete(r3)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000580)="b5b5f73ed7bf09a9d11775bf290f6c6f5a60ba5cdf0d4acb3f3c46d74cef8814a5e4d356ee5f19a82c97f2944d0e68adf85087d9c1b8cefeb5f529de3309e78c5fbc68657d7904597671c2be3906d70de206073b31bb46efaf2e109ddcb5634f", &(0x7f0000000600)="3c37673ae90b58eacc6f891315f49b3284d41555515e87f43c2c8e21560a614e16ee02b955b4ee3b1bae42f57ae0ca135d13e58142b98e8b8c72866c39f2f665486c7f1a575c486adbb4b413c90c557ee6414c28074773e1abcad94ed446efb465dd370f9ba11b23dfee0e03b19fef78f1a3b7493c480368ce20706f4747b672e1f30559943652e27ef96daee61458b44ba859d881ee766b2c4a6ef9943226fb908325448dcc8a7d618627232d54e8528057d55923c772880d4b3469c1c7f8a6151c2513c031cbb06af09c555d73f41602a9ab2063834bb72b898c5fdcc78701785296f5"}}, &(0x7f0000000240))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x600c1}, 0x20000804)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140))
fcntl$getownex(r1, 0x10, &(0x7f0000000180))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sendmmsg(r5, &(0x7f0000006540)=[{{&(0x7f0000000800)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000880)="03e4", 0x2}], 0x1}}], 0x1, 0x20004884)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
rename(0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fj,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000580))
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000)

25.721804998s ago: executing program 3 (id=2012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x154, 0x0, 0x424, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x2b, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84)

25.383145435s ago: executing program 2 (id=2014):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

25.269565965s ago: executing program 3 (id=2015):
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$nci(r1, 0x0, 0xfffffeea)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xfe, &(0x7f00000059c0)="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"}], 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

24.720848299s ago: executing program 2 (id=2017):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1c)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYRES64], 0x0, 0x2a, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28)
socket(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="67069998c3f87fb1d7b909a7b7fed8ec7338294b4f266a4e6eeefa7b08ce1b5dece6c112ac841240e15b4f2200e18e991ee9e141eaa81d48145d5e035aaa134a0d82905d5900bbfaffdbbd88aeab82c673b02b144ea2e5e4df8f75fe1877aa17286bb16187a8000000000000000000", 0x6f}, {&(0x7f0000000380)="ac66e4e5b8564100747aac174c4c3ff46d733d9e0e44f448dbc90bd791d8fe44866094b3f63533c2da2d9f11830bc23aa4e1ce1b32f6d46b6a8ecf62a74d937ce0ec256d8504f35ec037098e539f6eee737c646d51e0ef6df9", 0x59}], 0x2)
pidfd_getfd(r6, r4, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x30, 0x258, 0x1e0, 0x360, 0x32, 0x1, 0x0, 0x0, {}, {0x8000000}, {}, {}, 0x0, 0x0, 0x200003fc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0)

24.589814419s ago: executing program 0 (id=2018):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0xd79, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89d0080b8785d96000100", "2809e8dbe108598948224ad54afac11d8751972de2143200b420a1a9ff0100005f819e01177d3d61ac00", "90be89d4aeafde8cf90000000000a2a30c000000000000000000000000000400", [0x6, 0x8003]}}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0xb7, 0xb5, 0xd9, 0x8, 0x54c, 0x66, 0xbab6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x9, 0x20, 0x5, [{{0x9, 0x4, 0xf7, 0x7, 0x0, 0xa1, 0x35, 0xd5, 0x2}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r4) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
inotify_init1(0x800) (async)
setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f00000000c0)=0x8, 0x4) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r2, 0x3fd5000)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x1f00)
syz_usb_connect$cdc_ecm(0x2, 0x64, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0x40, 0xf3, [{{0x9, 0x4, 0x0, 0x61, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xc, 0x1, 0x7}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x15fe, [0x3, 0x7ff, 0x3, 0x200, 0x401, 0xffa7]}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x66, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0xbd, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2a, 0x9, 0xd}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xf8, &(0x7f00000001c0)=@string={0xf8, 0x3, "8e0f9ca1f0dbb438aa82840995e3ddfba0c18cb57ef7ca4d76cdc39555ab9d44db18d38344c704ea33bb759d7c700323615795bddc4600df1687df8f9bdfbb99f450e86f31e6b1c81dd4657ea65ca1a76af492074fe5f40f8c237b407ebb9c78b863f74349fdd74dd1fa91441cddc7cabe730438a91eb4bb151d2162c24138e603cc56d9cbdf88636c7c7d265780dde85e6b58f217c3237a57965d77987fe952b277f37bbd9e750e48a80b4d031462afcdcd69c4b0957f34dcaeba0cfd60512f6307dc3fecadb5646c8ee26507ad20f9cfd1159389e7b77b9562de2998dfc6221289cda2f5dc76774c2672804def5079e0fba74b6fa7"}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "22beac61383251baf2e74968b5d0fb9b2fe25df1caf18cbaece6b97d7057793a720600f8ae5a3ca609fb0fb3fa0fd57f27396da17806bacf0516897d03fe784e85d16d77fc7340172375f07d897746ab8cbd5f6e6278"}}]})
syz_usb_connect$cdc_ncm(0x4, 0xe1, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x2, 0x1, 0x5, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ce"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xff}, @mdlm_detail={0x49, 0x24, 0x13, 0x80, "8e64ce1270fd54d627b113961e6576b46d896075b74cb94cba0f35b702eb7d04e31bfc721404c7402c9117943825796e038bb3f3c7c830dcfc0f8fe1b6f9c5474c823f3836"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0x40, 0x2, 0x0, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x18, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x18, 0x6, 0x4}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x7, 0x8, 0x80, 0x10, 0x5}, 0x112, &(0x7f00000006c0)={0x5, 0xf, 0x112, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x9, 0x1ef00, 0x3, [0xff3f30, 0xf, 0xff0000, 0x6000]}, @generic={0xe6, 0x10, 0xb, "15a5bbb230aa3302b56fe0305231cedaf5ad0d882c01ea81be9de991ceaa2c7a66b2e6f099d0c3408ff71e6460dd3233e9c488fa073bc68e308c83437c59d9e9b96f06bef5dd5af57e4473c47db79391a60494df098ff020cd8ea21d58dd2c96f4f737e848551cb5bd8caaf67e840596aa6269fd3a6669a0d603cb395214334a86381d9a5f7a2e1d9622a252e0d2e796586c205a4b3eba842c1a017cdae4a03b267058379ceca14ad5db34864f25d84a3abc835e0324585b4f2dbda222a8b66b97c9e1eec131137a599c0d2c6eabeb6d2cb6263343ec290aec111abb5a41440597912e"}, @wireless={0xb, 0x10, 0x1, 0x5e55cd3eabec756e, 0x50, 0x0, 0xa6, 0x2, 0x4d}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1410}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x814}}, {0x5d, &(0x7f00000008c0)=@string={0x5d, 0x3, "318efb9ee33422c95e0041172595b57a42d54ad3527c0ca892c198b7d6f9f75c12ee3f4422a1a8f20e46731ae4be0baf2a1405b4fb75b0fabc76aca377a8e4d1d01db2e523da42d24b3022a8eafeb0783118c44d6d61f044cc5119"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x340a}}, {0xe1, &(0x7f0000000a00)=@string={0xe1, 0x3, "41ce56a6dd0417d77f637be91914f3cd27120a88b2d59e4bd3139f37732d8d5382dfc56637fb06c8228f911a0168e91ddda86c1a510a36fe440964e8c81e800066fc1168640a00a061c360ebd065e7862d827b754c7e6ceb22a234a41ee18c7a3840fc137fec8b5aaeae0d520d3a3bf6fc24e9d7d5a093c79bf54684c2b70bb9a2de7f8695d109e05fd9ec1ba33af879cf297e8b65fb6dcfea764a1a4062bc9b2213e7188adc26fe9fedac18ad0ae108a94ba3d9f61a5165e76f372b5fa03d205a02e097c8dd8091b5645780e7e88146e2cd1623ec2ecc15693eb1df84e5e4"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc04}}, {0x24, &(0x7f0000000b00)=@string={0x24, 0x3, "528ebb9b76f2856f4db1e2089984cf74b9c10fe3b2ce3f2377b615a2e4a2db75cd49"}}]})

23.621954248s ago: executing program 2 (id=2021):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x110)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d)
write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
migrate_pages(r1, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0x7}, {0x6, 0xf7}}}}, 0x8)

22.737470034s ago: executing program 0 (id=2022):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x93cf6e6e1ef147b0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x36)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))

22.531009532s ago: executing program 5 (id=2023):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
connect$ax25(r0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, <r7=>0x0], &(0x7f0000000440), 0x3, r6, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[r6], &(0x7f0000000180), &(0x7f0000000380)=[r7], &(0x7f0000000280)})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x10)
recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

22.290009811s ago: executing program 2 (id=2024):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000025c0)=""/4114, 0x1012}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000004c00)=""/4105, 0x1009}], 0x1}}], 0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x1c}}, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008ae3cfaeeb7e07bac22a900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="040000000000000000000000fabeb2ea96baf84a77a4", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

21.258753058s ago: executing program 5 (id=2025):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)

21.214885781s ago: executing program 0 (id=2026):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

21.068433782s ago: executing program 0 (id=2027):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xfb8, 0x1109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8d}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000300)=0x40005)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x7}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc000)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

19.854602047s ago: executing program 5 (id=2028):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000ff7fffff850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010010008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000710c0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioperm(0x0, 0x8, 0x8000000000004)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffdd4, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0)
read$msr(r2, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10000000)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x800, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = syz_io_uring_setup(0x90e, &(0x7f0000000380)={0x0, 0x3316, 0x400, 0x801, 0x34e}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd_index=0x1, 0x7, 0x0, 0xfffffff3, 0x2})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c71040000000000140003006e657464657673696d30000000000000180016801400018010000600040000000900000801"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)

18.369576384s ago: executing program 5 (id=2029):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0x108, 0x5, 0x9, 0x163, 0x286, 0x9742, 0x128, 0x8}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000230000/0x2000)=nil, 0x2000, 0x3000002, 0x30, r1, 0xcc59e000) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) (async)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) (async)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 64)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ocfs2\x00', 0x10, 0x0) (async, rerun: 64)
r6 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r7=>0x0}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="427ad5db49755cbd38a4c406c5f0e8ca95674586", 0x14, 0x0, &(0x7f0000000240)={0x6, 0x0, r7}, 0x14) (async)
chroot(&(0x7f0000000180)='./file0\x00') (async, rerun: 32)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (rerun: 32)

17.325126771s ago: executing program 33 (id=1996):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$radio(0x0, 0x0, 0x2)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="704002010189"], 0x6)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x9a, 0x400)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0x37}, {0x45, 0xde0f, 0x5, 0x1, 0x56}}}}, 0xf)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040))

16.921995768s ago: executing program 5 (id=2031):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1c)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYRES64], 0x0, 0x2a, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28)
socket(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="67069998c3f87fb1d7b909a7b7fed8ec7338294b4f266a4e6eeefa7b08ce1b5dece6c112ac841240e15b4f2200e18e991ee9e141eaa81d48145d5e035aaa134a0d82905d5900bbfaffdbbd88aeab82c673b02b144ea2e5e4df8f75fe1877aa17286bb16187a8000000000000000000", 0x6f}, {&(0x7f0000000380)="ac66e4e5b8564100747aac174c4c3ff46d733d9e0e44f448dbc90bd791d8fe44866094b3f63533c2da2d9f11830bc23aa4e1ce1b32f6d46b6a8ecf62a74d937ce0ec256d8504f35ec037098e539f6eee737c646d51e0ef6df9", 0x59}], 0x2)
pidfd_getfd(r5, r3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x30, 0x258, 0x1e0, 0x360, 0x32, 0x1, 0x0, 0x0, {}, {0x8000000}, {}, {}, 0x0, 0x0, 0x200003fc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0)

15.698529707s ago: executing program 5 (id=2032):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000030100c0"])

9.501122577s ago: executing program 34 (id=2015):
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$nci(r1, 0x0, 0xfffffeea)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xfe, &(0x7f00000059c0)="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"}], 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

7.011830936s ago: executing program 35 (id=2024):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000025c0)=""/4114, 0x1012}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000004c00)=""/4105, 0x1009}], 0x1}}], 0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x1c}}, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008ae3cfaeeb7e07bac22a900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="040000000000000000000000fabeb2ea96baf84a77a4", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

6.012869864s ago: executing program 36 (id=2027):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xfb8, 0x1109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8d}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000300)=0x40005)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x7}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc000)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

0s ago: executing program 37 (id=2032):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000030100c0"])

kernel console output (not intermixed with test programs):

51][  T979] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  571.853400][  T979] usb 1-1: Using ep0 maxpacket: 32
[  571.861674][  T979] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  571.885254][  T979] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  571.909943][  T979] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  572.029819][  T979] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  572.079868][  T979] usb 1-1: config 0 interface 0 has no altsetting 0
[  572.120844][  T979] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  572.149813][  T979] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  572.168879][  T979] usb 1-1: Product: syz
[  572.178975][  T979] usb 1-1: Manufacturer: syz
[  572.190192][  T979] usb 1-1: SerialNumber: syz
[  572.206658][  T979] usb 1-1: config 0 descriptor??
[  572.265365][  T979] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  572.422314][  T979] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  572.450752][ T5941] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  572.498673][  T979] usb 1-1: USB disconnect, device number 28
[  572.521769][  T979] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  572.547867][T11052] mkiss: ax0: crc mode is auto.
[  572.654350][ T5941] usb 4-1: Using ep0 maxpacket: 16
[  572.677402][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.702112][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  572.708000][T11060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59920 sclass=netlink_route_socket pid=11060 comm=syz.5.1316
[  572.900956][T11059] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  573.464483][   T30] audit: type=1400 audit(2000000151.720:672): avc:  denied  { read write } for  pid=11055 comm="syz.2.1315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  573.508317][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.080391][   T30] audit: type=1400 audit(2000000151.720:673): avc:  denied  { open } for  pid=11055 comm="syz.2.1315" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  574.137719][ T5941] usb 4-1: config 0 descriptor??
[  574.404242][   T30] audit: type=1400 audit(2000000152.980:674): avc:  denied  { ioctl } for  pid=11070 comm="syz.0.1320" path="socket:[28186]" dev="sockfs" ino=28186 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  575.066150][ T5835] hid-generic 0000:FFFFFFFD:0000.000D: item fetching failed at offset 0/2
[  575.146805][ T5835] hid-generic 0000:FFFFFFFD:0000.000D: probe with driver hid-generic failed with error -22
[  575.260923][ T5941] mcp2221 0003:04D8:00DD.000E: unbalanced delimiter at end of report description
[  575.292296][ T5941] mcp2221 0003:04D8:00DD.000E: can't parse reports
[  575.298987][ T5941] mcp2221 0003:04D8:00DD.000E: probe with driver mcp2221 failed with error -22
[  575.501298][T11087] mkiss: ax0: crc mode is auto.
[  575.531297][ T5941] usb 4-1: USB disconnect, device number 30
[  576.464276][T11101] FAULT_INJECTION: forcing a failure.
[  576.464276][T11101] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  576.530834][T11101] CPU: 0 UID: 0 PID: 11101 Comm: syz.5.1329 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  576.530864][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  576.530876][T11101] Call Trace:
[  576.530883][T11101]  <TASK>
[  576.530891][T11101]  dump_stack_lvl+0x16c/0x1f0
[  576.530922][T11101]  should_fail_ex+0x512/0x640
[  576.530954][T11101]  should_fail_alloc_page+0xe7/0x130
[  576.530986][T11101]  prepare_alloc_pages+0x3c2/0x610
[  576.531014][T11101]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  576.531042][T11101]  ? __pfx_workingset_update_node+0x10/0x10
[  576.531074][T11101]  ? __lock_acquire+0x622/0x1c90
[  576.531106][T11101]  ? xas_create+0x1d7/0x1460
[  576.531135][T11101]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  576.531164][T11101]  ? lock_acquire+0x179/0x350
[  576.531193][T11101]  ? rcu_is_watching+0x12/0xc0
[  576.531226][T11101]  ? __lock_acquire+0x622/0x1c90
[  576.531254][T11101]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  576.531299][T11101]  ? policy_nodemask+0xea/0x4e0
[  576.531330][T11101]  alloc_pages_mpol+0x1fb/0x550
[  576.531361][T11101]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  576.531391][T11101]  ? filemap_get_entry+0x1a7/0x3b0
[  576.531430][T11101]  folio_alloc_noprof+0x20/0x2d0
[  576.531450][T11101]  filemap_alloc_folio_noprof+0x3a1/0x470
[  576.531477][T11101]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  576.531509][T11101]  __filemap_get_folio+0x5e1/0xc30
[  576.531545][T11101]  ioctx_alloc+0x761/0x2120
[  576.531587][T11101]  ? __pfx_ioctx_alloc+0x10/0x10
[  576.531612][T11101]  ? __might_fault+0x13b/0x190
[  576.531646][T11101]  __x64_sys_io_setup+0xc9/0x210
[  576.531675][T11101]  do_syscall_64+0xcd/0x4c0
[  576.531704][T11101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.531725][T11101] RIP: 0033:0x7f615cd8e929
[  576.531741][T11101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.531759][T11101] RSP: 002b:00007f615dc5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  576.531779][T11101] RAX: ffffffffffffffda RBX: 00007f615cfb5fa0 RCX: 00007f615cd8e929
[  576.531793][T11101] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004
[  576.531806][T11101] RBP: 00007f615dc5e090 R08: 0000000000000000 R09: 0000000000000000
[  576.531818][T11101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  576.531829][T11101] R13: 0000000000000000 R14: 00007f615cfb5fa0 R15: 00007ffe54864ea8
[  576.531857][T11101]  </TASK>
[  576.782603][    C0] vkms_vblank_simulate: vblank timer overrun
[  577.115418][   T30] audit: type=1400 audit(2000000155.450:675): avc:  denied  { name_connect } for  pid=11103 comm="syz.3.1331" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  577.448629][   T30] audit: type=1400 audit(2000000156.030:676): avc:  denied  { getopt } for  pid=11103 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  578.000504][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'.
[  578.215480][T11117] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  578.569991][T11131] mkiss: ax0: crc mode is auto.
[  578.581127][  T979] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  578.762093][  T979] usb 5-1: Using ep0 maxpacket: 16
[  578.773255][  T979] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  578.800591][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  578.817404][  T979] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  578.837244][  T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.860706][  T979] usb 5-1: config 0 descriptor??
[  579.297843][  T979] hid (null): global environment stack underflow
[  579.513579][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.533172][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'.
[  579.547958][T11149] vlan2: entered promiscuous mode
[  579.553109][T11149] veth0_virt_wifi: entered promiscuous mode
[  579.622309][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.658953][   T42] usb 5-1: USB disconnect, device number 34
[  581.690691][ T5893] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  582.008873][ T5893] usb 1-1: config 0 has an invalid interface number: 116 but max is 0
[  582.083823][ T5893] usb 1-1: config 0 has no interface number 0
[  582.146187][ T5893] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  582.287955][ T5893] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=78.29
[  582.379232][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.740706][ T5893] usb 1-1: Product: syz
[  582.744904][ T5893] usb 1-1: Manufacturer: syz
[  582.909009][ T5893] usb 1-1: SerialNumber: syz
[  582.941700][ T5893] usb 1-1: config 0 descriptor??
[  582.964260][T11166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  583.058406][ T5893] mvusb_mdio 1-1:0.116: probe with driver mvusb_mdio failed with error -5
[  583.078897][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'.
[  583.169315][   T30] audit: type=1400 audit(2000000161.740:677): avc:  denied  { append } for  pid=11173 comm="syz.4.1349" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  583.547795][   T42] usb 1-1: USB disconnect, device number 29
[  583.620649][ T5935] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  583.651335][T11188] block nbd2: shutting down sockets
[  583.806947][ T5935] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  584.701008][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.709043][ T5935] usb 5-1: Product: syz
[  584.715108][ T5935] usb 5-1: Manufacturer: syz
[  584.719722][ T5935] usb 5-1: SerialNumber: syz
[  584.749723][ T5935] usb 5-1: config 0 descriptor??
[  585.241728][ T5935] usb 5-1: can't set config #0, error -71
[  585.278269][ T5935] usb 5-1: USB disconnect, device number 35
[  585.645150][T11206] netlink: 'syz.3.1358': attribute type 1 has an invalid length.
[  587.302890][   T30] audit: type=1400 audit(2000000165.800:678): avc:  denied  { relabelfrom } for  pid=11214 comm="syz.4.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  587.430917][   T30] audit: type=1400 audit(2000000165.880:679): avc:  denied  { relabelto } for  pid=11214 comm="syz.4.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  587.634410][T11219] syzkaller0: entered promiscuous mode
[  587.640007][T11219] syzkaller0: entered allmulticast mode
[  587.708505][T11223] block nbd3: shutting down sockets
[  587.756765][T11226] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  589.210818][ T5935] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  589.218881][   T30] audit: type=1400 audit(2000000167.800:680): avc:  denied  { append } for  pid=11229 comm="syz.5.1367" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  589.693745][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.123772][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short
[  590.182892][ T5935] usb 3-1: unable to read config index 0 descriptor/start: -71
[  590.220909][ T5935] usb 3-1: can't read configurations, error -71
[  590.227088][T11243] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1370'.
[  590.469669][T11250] netlink: 'syz.3.1372': attribute type 1 has an invalid length.
[  592.807424][T11274] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1379'.
[  593.203508][  T978] libceph: connect (1)[c::]:6789 error -101
[  593.424052][T11275] ceph: No mds server is up or the cluster is laggy
[  593.439249][  T978] libceph: mon0 (1)[c::]:6789 connect error
[  593.744942][T11287] FAULT_INJECTION: forcing a failure.
[  593.744942][T11287] name failslab, interval 1, probability 0, space 0, times 0
[  593.771844][ T5893] libceph: connect (1)[c::]:6789 error -101
[  593.777924][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  593.903746][T11287] CPU: 1 UID: 0 PID: 11287 Comm: syz.4.1382 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  593.903776][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  593.903786][T11287] Call Trace:
[  593.903793][T11287]  <TASK>
[  593.903802][T11287]  dump_stack_lvl+0x16c/0x1f0
[  593.903829][T11287]  should_fail_ex+0x512/0x640
[  593.903855][T11287]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  593.903882][T11287]  should_failslab+0xc2/0x120
[  593.903910][T11287]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  593.903937][T11287]  ? security_file_alloc+0x34/0x2b0
[  593.903970][T11287]  security_file_alloc+0x34/0x2b0
[  593.903996][T11287]  init_file+0x93/0x4c0
[  593.904016][T11287]  alloc_empty_file+0x73/0x1e0
[  593.904038][T11287]  alloc_file_pseudo+0x13a/0x230
[  593.904060][T11287]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  593.904089][T11287]  sock_alloc_file+0x50/0x210
[  593.904117][T11287]  do_accept+0x240/0x530
[  593.904138][T11287]  ? do_raw_spin_lock+0x12c/0x2b0
[  593.904170][T11287]  ? __pfx_do_accept+0x10/0x10
[  593.904211][T11287]  __sys_accept4+0x100/0x1c0
[  593.904233][T11287]  ? __pfx___sys_accept4+0x10/0x10
[  593.904255][T11287]  ? __pfx_ksys_write+0x10/0x10
[  593.904281][T11287]  __x64_sys_accept4+0x96/0x100
[  593.904301][T11287]  ? lockdep_hardirqs_on+0x7c/0x110
[  593.904326][T11287]  do_syscall_64+0xcd/0x4c0
[  593.904355][T11287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.904374][T11287] RIP: 0033:0x7fde2838e929
[  593.904390][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.904408][T11287] RSP: 002b:00007fde29210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  593.904429][T11287] RAX: ffffffffffffffda RBX: 00007fde285b5fa0 RCX: 00007fde2838e929
[  593.904442][T11287] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000003
[  593.904454][T11287] RBP: 00007fde29210090 R08: 0000000000000000 R09: 0000000000000000
[  593.904465][T11287] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[  593.904476][T11287] R13: 0000000000000000 R14: 00007fde285b5fa0 R15: 00007ffe969bfff8
[  593.904504][T11287]  </TASK>
[  594.636944][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  594.751346][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  596.565702][T11306] netlink: 'syz.5.1386': attribute type 1 has an invalid length.
[  597.398000][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'.
[  599.625073][T11333] block nbd3: shutting down sockets
[  600.517719][T11339] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1392'.
[  600.728136][T11344] kvm: emulating exchange as write
[  601.211030][ T5880] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  601.596209][ T5880] usb 1-1: Using ep0 maxpacket: 8
[  601.675981][T11353] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  601.759592][ T5880] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  601.894382][ T5880] usb 1-1: config 0 has no interface number 0
[  601.978618][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  602.006008][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.056219][ T5880] usb 1-1: Product: syz
[  602.076003][ T5880] usb 1-1: Manufacturer: syz
[  602.090874][ T5880] usb 1-1: SerialNumber: syz
[  602.108988][ T5880] usb 1-1: config 0 descriptor??
[  602.640652][ T5893] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  602.678952][ T5880] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  602.700874][ T5880] usb 1-1: Failed to initialize entity for entity 6
[  602.717702][ T5880] usb 1-1: Failed to register entities (-22).
[  602.800710][ T5893] usb 5-1: Using ep0 maxpacket: 8
[  602.823156][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  602.838299][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  602.862488][T11365] overlayfs: upper fs does not support file handles, falling back to index=off.
[  602.865465][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  602.904559][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  602.954316][ T5893] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  602.972995][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.002605][ T5893] usb 5-1: Product: syz
[  603.018112][ T5893] usb 5-1: Manufacturer: syz
[  603.037332][ T5893] usb 5-1: SerialNumber: syz
[  603.051841][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1405'.
[  603.069719][ T5893] usb 5-1: config 0 descriptor??
[  603.079710][T11368] tipc: Invalid UDP bearer configuration
[  603.079759][T11368] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  603.096081][T11362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  603.696166][T11376] FAULT_INJECTION: forcing a failure.
[  603.696166][T11376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.090315][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.2.1407 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  604.090346][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  604.090358][T11376] Call Trace:
[  604.090365][T11376]  <TASK>
[  604.090373][T11376]  dump_stack_lvl+0x16c/0x1f0
[  604.090404][T11376]  should_fail_ex+0x512/0x640
[  604.090438][T11376]  _copy_from_user+0x2e/0xd0
[  604.090495][T11376]  get_bitmap+0xdf/0x1a0
[  604.090521][T11376]  get_nodes+0x169/0x210
[  604.090544][T11376]  ? __pfx_get_nodes+0x10/0x10
[  604.090575][T11376]  kernel_mbind+0x139/0x1f0
[  604.090598][T11376]  ? __pfx_kernel_mbind+0x10/0x10
[  604.090620][T11376]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  604.090650][T11376]  do_syscall_64+0xcd/0x4c0
[  604.090679][T11376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.090700][T11376] RIP: 0033:0x7fe4cef8e929
[  604.090715][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.090734][T11376] RSP: 002b:00007fe4cfe29038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  604.090753][T11376] RAX: ffffffffffffffda RBX: 00007fe4cf1b6080 RCX: 00007fe4cef8e929
[  604.090767][T11376] RDX: 0000000000008000 RSI: 0000000000004000 RDI: 0000200000ff9000
[  604.090779][T11376] RBP: 00007fe4cfe29090 R08: 0000000000005459 R09: 0000000000000006
[  604.090792][T11376] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002
[  604.090804][T11376] R13: 0000000000000000 R14: 00007fe4cf1b6080 R15: 00007ffc598b9468
[  604.090832][T11376]  </TASK>
[  604.335474][ T5893] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  604.345306][ T5893] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20
[  604.576416][T11381] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1408'.
[  604.631755][   T42] usb 1-1: USB disconnect, device number 30
[  605.036629][T11385] trusted_key: encrypted_key: keyword 'ÿÿÿÿdefault' not recognized
[  605.450755][   T30] audit: type=1400 audit(2000000184.000:681): avc:  denied  { connect } for  pid=11386 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  605.911236][   T30] audit: type=1400 audit(2000000184.000:682): avc:  denied  { read } for  pid=11386 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  605.933052][   T30] audit: type=1400 audit(2000000184.060:683): avc:  denied  { write } for  pid=11386 comm="syz.0.1410" path="socket:[29817]" dev="sockfs" ino=29817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  606.148845][   T42] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  606.395334][   T42] usb 3-1: Using ep0 maxpacket: 32
[  606.623383][   T42] usb 3-1: unable to read config index 0 descriptor/start: -61
[  607.112048][T11403] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  607.489497][   T42] usb 3-1: can't read configurations, error -61
[  607.645416][    C0] powermate: config urb returned -71
[  607.645888][ T5880] usb 5-1: USB disconnect, device number 36
[  607.650729][    C0] powermate: usb_submit_urb(config) failed
[  607.650835][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  607.799845][   T42] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  608.691375][   T42] usb 3-1: Using ep0 maxpacket: 32
[  608.891549][   T42] usb 3-1: device descriptor read/all, error -71
[  608.919023][   T42] usb usb3-port1: attempt power cycle
[  610.946313][   T30] audit: type=1400 audit(2000000189.140:684): avc:  denied  { ioctl } for  pid=11420 comm="syz.4.1419" path="mnt:[4026532819]" dev="nsfs" ino=4026532819 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  612.007359][ T5894] libceph: connect (1)[c::]:6789 error -101
[  612.020959][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  612.149355][T11443] ceph: No mds server is up or the cluster is laggy
[  612.191103][ T5894] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  612.252361][T11450] netlink: 'syz.5.1425': attribute type 11 has an invalid length.
[  612.419076][ T5893] libceph: connect (1)[c::]:6789 error -101
[  612.465034][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  612.474901][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  612.488722][T11450] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1425'.
[  612.498002][ T5894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  612.548941][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.626453][ T5894] usb 1-1: config 0 descriptor??
[  612.651904][ T5894] hub 1-1:0.0: bad descriptor, ignoring hub
[  612.661086][ T5894] hub 1-1:0.0: probe with driver hub failed with error -5
[  613.151406][   T30] audit: type=1400 audit(2000000191.710:685): avc:  denied  { connect } for  pid=11439 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  613.373941][T11468] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  614.382533][   T30] audit: type=1400 audit(2000000192.970:686): avc:  denied  { ioctl } for  pid=11475 comm="syz.5.1431" path="socket:[30722]" dev="sockfs" ino=30722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  614.774778][ T5894] libceph: connect (1)[c::]:6789 error -101
[  614.781014][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  615.140007][ T5894] libceph: connect (1)[c::]:6789 error -101
[  615.161737][T11483] ceph: No mds server is up or the cluster is laggy
[  615.181632][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  615.865925][ T5894] libceph: connect (1)[c::]:6789 error -101
[  615.879455][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  617.025231][ T5880] usb 1-1: USB disconnect, device number 31
[  617.326459][   T42] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  618.159261][   T30] audit: type=1400 audit(2000000196.740:687): avc:  denied  { map } for  pid=11515 comm="syz.0.1443" path="socket:[29979]" dev="sockfs" ino=29979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  618.293195][T11521] input: syz1 as /devices/virtual/input/input21
[  618.371833][   T42] usb 5-1: Using ep0 maxpacket: 32
[  618.503614][   T42] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88
[  618.634822][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.742776][   T42] usb 5-1: Product: syz
[  618.800286][   T42] usb 5-1: Manufacturer: syz
[  618.866641][   T42] usb 5-1: SerialNumber: syz
[  618.990958][   T42] usb 5-1: config 0 descriptor??
[  619.172723][   T42] as10x_usb: device has been detected
[  619.217284][   T42] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  619.226959][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'.
[  619.237948][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'.
[  619.442362][   T42] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  619.518589][   T30] audit: type=1326 audit(2000000198.100:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  619.551341][   T30] audit: type=1326 audit(2000000198.130:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  619.553765][   T42] as10x_usb: error during firmware upload part1
[  619.864191][T11540] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1449'.
[  620.310609][   T30] audit: type=1326 audit(2000000198.130:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  620.340983][   T30] audit: type=1326 audit(2000000198.130:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  620.402486][   T42] Registered device Abilis Systems DVB-Titan
[  620.409974][   T42] usb 5-1: USB disconnect, device number 37
[  620.472172][   T30] audit: type=1326 audit(2000000198.130:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  620.546720][   T42] Unregistered device Abilis Systems DVB-Titan
[  620.554931][   T30] audit: type=1326 audit(2000000198.130:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  620.561728][   T42] as10x_usb: device has been disconnected
[  620.584617][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.660656][   T30] audit: type=1326 audit(2000000198.130:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  620.805120][T11552] netlink: 'syz.3.1453': attribute type 1 has an invalid length.
[  621.518681][   T30] audit: type=1326 audit(2000000198.130:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  621.659736][   T30] audit: type=1326 audit(2000000198.130:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  621.683202][    C1] vkms_vblank_simulate: vblank timer overrun
[  621.798010][   T42] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  622.623755][   T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  622.761101][  T979] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  622.921464][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  622.939856][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  622.951075][   T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  622.966495][   T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  622.975677][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.986249][   T42] usb 5-1: config 0 descriptor??
[  623.083970][  T979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  623.109696][  T979] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  623.143361][  T979] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  623.167264][  T979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  623.181967][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.198560][  T979] usb 4-1: Product: syz
[  623.207627][  T979] usb 4-1: Manufacturer: syz
[  623.222177][  T979] usb 4-1: SerialNumber: syz
[  623.239841][  T979] hub 4-1:1.0: bad descriptor, ignoring hub
[  623.252363][  T979] hub 4-1:1.0: probe with driver hub failed with error -5
[  623.319604][T11573] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1460'.
[  623.412307][   T42] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  623.452386][  T979] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  623.461881][   T42] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  623.484617][T11576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11576 comm=syz.2.1461
[  623.551882][T11572] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1460'.
[  623.571414][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  623.761019][   T42] usb 4-1: USB disconnect, device number 31
[  623.793243][   T42] usblp1: removed
[  624.044173][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.058680][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  624.130592][T11584] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  624.151039][   T42] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  624.403711][ T5935] usb 5-1: USB disconnect, device number 38
[  624.430711][   T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  624.474526][   T42] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  624.513821][   T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  624.539107][   T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  624.580615][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.620658][   T42] usb 4-1: Product: syz
[  624.624894][   T42] usb 4-1: Manufacturer: syz
[  624.629537][   T42] usb 4-1: SerialNumber: syz
[  624.691051][   T42] hub 4-1:1.0: bad descriptor, ignoring hub
[  624.697108][   T42] hub 4-1:1.0: probe with driver hub failed with error -5
[  625.324123][T11597] netlink: 'syz.4.1466': attribute type 1 has an invalid length.
[  625.630815][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  626.285598][   T42] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  626.836469][   T42] usb 4-1: USB disconnect, device number 32
[  626.845023][   T42] usblp0: removed
[  627.142638][ T5880] libceph: connect (1)[c::]:6789 error -101
[  627.226882][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  627.334957][T11609] ceph: No mds server is up or the cluster is laggy
[  627.600798][  T978] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  627.612810][ T5880] libceph: connect (1)[c::]:6789 error -101
[  628.676281][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  628.920751][ T5894] usb 6-1: device descriptor read/64, error -110
[  628.951396][  T978] usb 5-1: Using ep0 maxpacket: 8
[  629.009981][  T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  629.369255][  T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  629.410946][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  629.430966][  T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  629.456020][  T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.504559][  T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  629.556030][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.570920][ T5894] usb 6-1: device descriptor read/64, error -32
[  629.597270][  T978] usb 5-1: can't set config #16, error -71
[  629.608664][T11633] overlay: ./file1 is not a directory
[  629.617527][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  629.617540][   T30] audit: type=1400 audit(2000000208.180:721): avc:  denied  { watch } for  pid=11632 comm="syz.4.1475" path="/298" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  629.625420][  T978] usb 5-1: USB disconnect, device number 39
[  629.701537][ T5894] usb usb6-port1: attempt power cycle
[  629.790056][   T30] audit: type=1400 audit(2000000208.180:722): avc:  denied  { watch_sb } for  pid=11632 comm="syz.4.1475" path="/298" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  630.171093][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  630.235119][T11646] Invalid logical block size (150994944)
[  630.267306][ T5894] usb 6-1: device descriptor read/8, error -32
[  630.901791][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  630.931611][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  631.187605][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  631.670973][ T5894] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  631.690855][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  631.718341][ T5894] usb 6-1: device descriptor read/8, error -32
[  632.003670][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  632.245450][ T5894] usb usb6-port1: unable to enumerate USB device
[  633.170976][   T42] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  633.532430][   T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  633.617666][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  634.012516][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  634.118116][   T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  634.133818][   T42] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  634.142982][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.155713][   T42] usb 1-1: config 0 descriptor??
[  634.194295][   T42] gspca_main: spca561-2.14.0 probing abcd:cdee
[  634.321213][T11695] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  634.977721][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.988323][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.199921][   T42] spca561 1-1:0.0: probe with driver spca561 failed with error -22
[  636.352210][ T9233] Bluetooth: hci5: command 0x0406 tx timeout
[  636.452776][   T42] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  636.459858][   T42] usb 1-1: MIDIStreaming interface descriptor not found
[  637.246650][   T42] usb 1-1: USB disconnect, device number 32
[  637.265567][T11700] mkiss: ax0: crc mode is auto.
[  638.447181][T11713] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  640.114292][   T30] audit: type=1400 audit(2000000218.700:723): avc:  denied  { ioctl } for  pid=11730 comm="syz.4.1501" path="socket:[31554]" dev="sockfs" ino=31554 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  640.876155][T11742] bond0: entered promiscuous mode
[  641.017242][T11744] serio: Serial port ttyS3
[  641.027334][T11742] bond_slave_0: entered promiscuous mode
[  641.518714][T11742] bond_slave_1: entered promiscuous mode
[  641.848903][T11756] mkiss: ax0: crc mode is auto.
[  642.203250][T11760] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  643.041297][  T978] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  644.910846][  T978] usb 3-1: unable to get BOS descriptor or descriptor too short
[  644.927252][  T978] usb 3-1: unable to read config index 0 descriptor/start: -71
[  644.948963][  T978] usb 3-1: can't read configurations, error -71
[  646.274608][ T5880] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  646.910914][ T5880] usb 1-1: Using ep0 maxpacket: 8
[  646.935031][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  647.307937][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  647.330636][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  647.360603][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  647.461039][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  647.481587][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.678489][T11794] mkiss: ax0: crc mode is auto.
[  647.713204][ T5880] usb 1-1: GET_CAPABILITIES returned 0
[  648.052801][ T5880] usbtmc 1-1:16.0: can't read capabilities
[  648.190546][ T5880] usb 1-1: USB disconnect, device number 33
[  649.194359][T11812] team0: Device gtp1 is of different type
[  649.320657][ T5880] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  649.395034][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1528'.
[  649.823531][ T5880] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  649.848291][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.922172][ T5880] usb 5-1: config 0 descriptor??
[  650.037474][T11814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11814 comm=syz.5.1528
[  650.077366][ T5880] gspca_main: spca508-2.14.0 probing 8086:0110
[  650.355373][ T5880] gspca_spca508: reg_read err -71
[  650.370973][ T5880] gspca_spca508: reg_read err -71
[  650.381219][ T5880] gspca_spca508: reg_read err -71
[  650.393771][ T5880] gspca_spca508: reg_read err -71
[  650.404988][ T5880] gspca_spca508: reg_read err -71
[  650.412434][ T5880] gspca_spca508: reg write: error -71
[  650.417931][ T5880] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  650.438429][ T5880] usb 5-1: USB disconnect, device number 40
[  652.180920][T11831] fuse: Bad value for 'group_id'
[  652.186000][T11831] fuse: Bad value for 'group_id'
[  653.914829][ T5880] libceph: connect (1)[c::]:6789 error -101
[  653.923497][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  654.630008][ T5880] libceph: connect (1)[c::]:6789 error -101
[  654.699187][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  654.991186][  T978] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  655.201639][  T978] usb 5-1: Using ep0 maxpacket: 8
[  655.261096][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  655.297464][ T5880] libceph: connect (1)[c::]:6789 error -101
[  655.308197][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  655.345951][  T978] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  655.367012][  T978] usb 5-1: config 0 has no interface number 0
[  655.883379][T11838] ceph: No mds server is up or the cluster is laggy
[  655.894311][  T978] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  655.904321][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.918075][  T978] usb 5-1: Product: syz
[  655.923009][  T978] usb 5-1: Manufacturer: syz
[  655.924006][ T5880] libceph: connect (1)[c::]:6789 error -101
[  655.927613][  T978] usb 5-1: SerialNumber: syz
[  655.941544][  T978] usb 5-1: config 0 descriptor??
[  655.952060][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  655.970736][ T5894] usb 4-1: Using ep0 maxpacket: 8
[  656.005581][ T5894] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  656.065896][T11858] ceph: No mds server is up or the cluster is laggy
[  656.200881][  T978] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  656.210569][ T5894] usb 4-1: config 0 has no interface number 0
[  656.220980][ T5835] libceph: connect (1)[c::]:6789 error -101
[  656.227084][ T5835] libceph: mon0 (1)[c::]:6789 connect error
[  656.233170][  T978] usb 5-1: Failed to initialize entity for entity 6
[  656.719336][  T978] usb 5-1: Failed to register entities (-22).
[  656.738728][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  656.738759][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.738782][ T5894] usb 4-1: Product: syz
[  656.738798][ T5894] usb 4-1: Manufacturer: syz
[  656.738816][ T5894] usb 4-1: SerialNumber: syz
[  656.956747][ T5894] usb 4-1: config 0 descriptor??
[  658.063315][ T5894] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  658.165426][ T5894] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized!
[  658.268587][  T979] usb 5-1: USB disconnect, device number 41
[  658.274993][ T5894] usb 4-1: USB disconnect, device number 33
[  658.432700][T11884] netlink: 'syz.5.1543': attribute type 1 has an invalid length.
[  659.249875][   T30] audit: type=1400 audit(2000000237.830:724): avc:  denied  { bind } for  pid=11885 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  659.331846][   T30] audit: type=1400 audit(2000000237.830:725): avc:  denied  { connect } for  pid=11885 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  659.637364][T11887] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.673276][T11887] bond0: (slave rose0): Enslaving as an active interface with an up link
[  659.810845][T11890] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  661.287151][T11883] fuse: Bad value for 'user_id'
[  661.292055][T11883] fuse: Bad value for 'user_id'
[  661.608786][T11916] FAULT_INJECTION: forcing a failure.
[  661.608786][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  661.622545][T11916] CPU: 1 UID: 0 PID: 11916 Comm: syz.0.1550 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  661.622573][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  661.622591][T11916] Call Trace:
[  661.622598][T11916]  <TASK>
[  661.622605][T11916]  dump_stack_lvl+0x16c/0x1f0
[  661.622637][T11916]  should_fail_ex+0x512/0x640
[  661.622669][T11916]  _copy_to_user+0x32/0xd0
[  661.622701][T11916]  simple_read_from_buffer+0xcb/0x170
[  661.622731][T11916]  proc_fail_nth_read+0x197/0x270
[  661.622759][T11916]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  661.622789][T11916]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  661.622814][T11916]  vfs_read+0x1e4/0xc60
[  661.622844][T11916]  ? __pfx___mutex_lock+0x10/0x10
[  661.622870][T11916]  ? __pfx_vfs_read+0x10/0x10
[  661.622904][T11916]  ? __fget_files+0x20e/0x3c0
[  661.622940][T11916]  ksys_read+0x12a/0x250
[  661.622964][T11916]  ? __pfx_ksys_read+0x10/0x10
[  661.622998][T11916]  do_syscall_64+0xcd/0x4c0
[  661.623027][T11916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.623048][T11916] RIP: 0033:0x7fecbb58d33c
[  661.623065][T11916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  661.623084][T11916] RSP: 002b:00007fecb93f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  661.623103][T11916] RAX: ffffffffffffffda RBX: 00007fecbb7b6160 RCX: 00007fecbb58d33c
[  661.623117][T11916] RDX: 000000000000000f RSI: 00007fecb93f60a0 RDI: 000000000000000a
[  661.623130][T11916] RBP: 00007fecb93f6090 R08: 0000000000000000 R09: 0000000000000010
[  661.623143][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.623155][T11916] R13: 0000000000000000 R14: 00007fecbb7b6160 R15: 00007ffff575a028
[  661.623184][T11916]  </TASK>
[  661.806567][    C1] vkms_vblank_simulate: vblank timer overrun
[  662.030641][ T5894] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  662.654958][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  662.692914][ T5894] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  662.748516][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.325174][ T5894] usb 5-1: config 0 descriptor??
[  663.373242][ T5894] gspca_main: sonixj-2.14.0 probing 0471:0327
[  664.076867][   T30] audit: type=1400 audit(2000000242.630:726): avc:  denied  { recv } for  pid=5195 comm="udevd" saddr=10.128.0.169 src=41302 daddr=10.128.0.141 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  664.101691][    C1] vkms_vblank_simulate: vblank timer overrun
[  664.760721][ T5835] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  664.780554][   T30] audit: type=1400 audit(2000000243.350:727): avc:  denied  { bind } for  pid=11908 comm="syz.4.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  664.814592][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.909929][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.965806][ T5894] gspca_sonixj: reg_w1 err -110
[  664.996900][ T5894] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  665.833002][ T5835] usb 4-1: Using ep0 maxpacket: 8
[  665.842603][ T5835] usb 4-1: config 9 has an invalid interface number: 92 but max is 0
[  665.881117][ T5835] usb 4-1: config 9 has no interface number 0
[  665.890102][ T5835] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=4d.c1
[  665.929653][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.974138][ T5835] usb 4-1: Product: syz
[  665.978375][ T5835] usb 4-1: Manufacturer: syz
[  666.120982][T11977] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  666.220930][ T5835] usb 4-1: SerialNumber: syz
[  666.250832][ T5880] usb 5-1: USB disconnect, device number 42
[  667.061773][  T978] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  667.176312][T11982] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  667.464264][ T5835] usb 4-1: USB disconnect, device number 34
[  668.817961][  T978] usb 1-1: unable to get BOS descriptor or descriptor too short
[  668.954617][  T978] usb 1-1: unable to read config index 0 descriptor/start: -71
[  669.060679][  T978] usb 1-1: can't read configurations, error -71
[  671.509136][T12019] [U] 
[  671.512113][T12019] [U] 
[  671.514811][T12019] [U] 
[  671.517504][T12019] [U] 
[  671.540787][T12019] [U] 
[  671.543524][T12019] [U] 
[  671.546223][T12019] [U] 
[  671.548922][T12019] [U] 
[  671.664284][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'.
[  671.677655][T12019] [U] 
[  671.680380][T12019] [U] 
[  671.683085][T12019] [U] 
[  671.685793][T12019] [U] 
[  671.820386][T12019] [U] 
[  671.823143][T12019] [U] 
[  671.825852][T12019] [U] 
[  671.828557][T12019] [U] 
[  671.853309][T12019] [U] 
[  671.856029][T12019] [U] 
[  671.858737][T12019] [U] 
[  671.861441][T12019] [U] 
[  671.880713][T12019] [U] 
[  671.883440][T12019] [U] 
[  671.886137][T12019] [U] 
[  671.888830][T12019] [U] 
[  672.032425][T12019] [U] 
[  672.035159][T12019] [U] 
[  672.037858][T12019] [U] 
[  672.040552][T12019] [U] 
[  672.328581][T12019] [U] 
[  672.331325][T12019] [U] 
[  672.334019][T12019] [U] 
[  672.336711][T12019] [U] 
[  672.677758][T12019] [U] 
[  672.680500][T12019] [U] 
[  672.683205][T12019] [U] 
[  672.685912][T12019] [U] 
[  672.688683][T12019] [U] 
[  672.691392][T12019] [U] 
[  672.694086][T12019] [U] 
[  672.696769][T12019] [U] 
[  672.700271][T12019] [U] 
[  672.702986][T12019] [U] 
[  672.705690][T12019] [U] 
[  672.708379][T12019] [U] 
[  672.711743][T12019] [U] 
[  672.714451][T12019] [U] 
[  672.717145][T12019] [U] 
[  672.719846][T12019] [U] 
[  672.722660][T12019] [U] 
[  672.725362][T12019] [U] 
[  672.728056][T12019] [U] 
[  672.730746][T12019] [U] 
[  672.733630][T12019] [U] 
[  672.736329][T12019] [U] 
[  672.739029][T12019] [U] 
[  672.741731][T12019] [U] 
[  672.745006][T12019] [U] 
[  672.747707][T12019] [U] 
[  672.750389][T12019] [U] 
[  672.753076][T12019] [U] 
[  672.756237][T12019] [U] 
[  672.758933][T12019] [U] 
[  672.761629][T12019] [U] 
[  672.764317][T12019] [U] 
[  672.767126][T12019] [U] 
[  672.769826][T12019] [U] 
[  672.772531][T12019] [U] 
[  672.775227][T12019] [U] 
[  672.779245][T12019] [U] 
[  672.781954][T12019] [U] 
[  672.784642][T12019] [U] 
[  672.787322][T12019] [U] 
[  672.860805][T12019] [U] 
[  672.863540][T12019] [U] 
[  672.866239][T12019] [U] 
[  672.868933][T12019] [U] 
[  672.968138][T12019] [U] 
[  673.526443][T12044] Invalid source name
[  673.530875][T12044] UBIFS error (pid: 12044): cannot open "ubifs", error -22
[  676.864043][   T30] audit: type=1400 audit(2000000255.450:728): avc:  denied  { map } for  pid=12091 comm="syz.0.1591" path="socket:[32195]" dev="sockfs" ino=32195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  677.107812][   T30] audit: type=1400 audit(2000000255.450:729): avc:  denied  { read } for  pid=12091 comm="syz.0.1591" path="socket:[32195]" dev="sockfs" ino=32195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  677.350611][   T30] audit: type=1400 audit(2000000255.640:730): avc:  denied  { read } for  pid=12098 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  678.201010][T12102] 9pnet_fd: Insufficient options for proto=fd
[  678.457027][T12090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  678.469153][  T978] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  679.161636][  T978] usb 1-1: Using ep0 maxpacket: 16
[  679.175476][  T978] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config
[  679.195913][  T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  679.231300][  T978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  679.293770][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.340608][  T979] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  679.354917][  T978] usb 1-1: Product: syz
[  679.359110][  T978] usb 1-1: Manufacturer: syz
[  679.380693][  T978] usb 1-1: SerialNumber: syz
[  679.585091][  T979] usb 3-1: Using ep0 maxpacket: 16
[  679.684552][  T979] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  679.804417][  T979] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.823785][   T30] audit: type=1326 audit(2000000258.400:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  679.849748][  T979] usb 3-1: config 0 interface 0 has no altsetting 0
[  679.867594][  T979] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  679.886891][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.900812][   T30] audit: type=1326 audit(2000000258.400:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  679.938818][  T979] usb 3-1: config 0 descriptor??
[  680.438374][   T30] audit: type=1326 audit(2000000258.400:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  680.486020][  T978] usb 1-1: 0:2 : does not exist
[  680.533072][  T978] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  680.535041][   T30] audit: type=1326 audit(2000000258.400:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  680.588479][  T978] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  680.604671][   T30] audit: type=1326 audit(2000000258.400:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  680.643553][  T978] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5)
[  680.656981][  T978] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  680.696435][  T978] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[  680.714824][  T979] apple 0003:05AC:026C.0011: unknown main item tag 0x2
[  680.722600][   T30] audit: type=1326 audit(2000000258.400:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  680.722647][   T30] audit: type=1326 audit(2000000258.400:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.5.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615cd8e929 code=0x7ffc0000
[  680.921802][  T978] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  680.938217][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  681.000634][  T978] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  681.240683][T12149] dummy0: entered promiscuous mode
[  681.885175][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.952547][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.988594][  T978] usb 1-1: USB disconnect, device number 36
[  682.012736][  T979] apple 0003:05AC:026C.0011: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.2-1/input0
[  682.970817][  T978] usb 3-1: USB disconnect, device number 50
[  685.377820][T12192] netlink: 'syz.0.1617': attribute type 7 has an invalid length.
[  685.514218][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.520800][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  686.231524][ T5893] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  686.442466][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  686.473552][ T5893] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024
[  686.537109][ T5893] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  687.000753][ T5893] usb 3-1: config 1 interface 0 has no altsetting 0
[  687.013306][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.036171][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.056458][ T5893] usb 3-1: Product: 䙜�欠봃䶾�ﴳ�螨�⚛⎗緤䞥诹孭뷭嗆粒ᄸ襠쯑䢑�㈈䣉쭾깙䬉챪㜢�ﻯ�橛䉼잞즗롂䈼狅汸縣腹䙿痑扮厹惑謺꯿턈�ⰳ攣뼷�ﷄ뱅贞隆᾽瓷�㠬䩥㉗��랢嬶쉆ః墿ﳣ﹯翟诗ꢱ牔䧰ꕣꎱ䋇펗�볥�掫䥼㎭赡髵栕켨欛㔋年
[  687.076508][T12229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  687.099675][ T5893] usb 3-1: Manufacturer: 阡賊齈�㳱磗뙖蕩팰亡ꙉ劽俶⩧峤츋撟⮠棖欰ఀퟕᛈ㾺ꌛ�慶탄䞯ꯉﳚ怞谶뤋呤擅ᬢ���㫙틪�鋣퓑舿枑꿀
[  687.157310][ T5893] usb 3-1: SerialNumber: Д
[  687.198629][T12206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  687.227267][T12206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  687.512324][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.541591][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.833448][ T5893] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  687.875151][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  687.875162][   T30] audit: type=1400 audit(2000000266.460:743): avc:  denied  { setopt } for  pid=12224 comm="syz.0.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  687.935218][ T5893] usb 3-1: USB disconnect, device number 51
[  688.191586][T12247] netlink: 'syz.5.1632': attribute type 1 has an invalid length.
[  689.357934][   T30] audit: type=1326 audit(2000000267.940:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.4.1633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde2838e929 code=0x0
[  690.251784][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'.
[  690.571635][   T30] audit: type=1326 audit(2000000269.150:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  691.260614][   T30] audit: type=1326 audit(2000000269.150:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  691.341426][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1641'.
[  691.421655][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1641'.
[  691.425894][   T30] audit: type=1326 audit(2000000269.150:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  691.480812][   T30] audit: type=1326 audit(2000000269.150:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  691.534036][   T30] audit: type=1326 audit(2000000269.180:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  691.551414][T12279] nfs: Unknown parameter '$'
[  691.713222][   T30] audit: type=1326 audit(2000000269.180:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  692.300196][   T30] audit: type=1326 audit(2000000269.190:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  692.324906][   T30] audit: type=1326 audit(2000000269.190:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f670038e929 code=0x7ffc0000
[  692.354604][T12279] lo speed is unknown, defaulting to 1000
[  692.381213][T12279] lo speed is unknown, defaulting to 1000
[  692.388966][T12279] lo speed is unknown, defaulting to 1000
[  692.450443][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'.
[  692.547751][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.696313][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.774615][T12279] infiniband s: RDMA CMA: cma_listen_on_dev, error -98
[  692.829057][T12279] lo speed is unknown, defaulting to 1000
[  692.848176][T12279] lo speed is unknown, defaulting to 1000
[  692.877395][T12279] lo speed is unknown, defaulting to 1000
[  692.907642][T12279] lo speed is unknown, defaulting to 1000
[  692.936461][T12279] lo speed is unknown, defaulting to 1000
[  692.946071][ T5935] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  692.976172][ T5880] libceph: connect (1)[c::]:6789 error -101
[  693.066318][T12312] ceph: No mds server is up or the cluster is laggy
[  693.096479][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  693.355448][ T5935] usb 4-1: Using ep0 maxpacket: 16
[  693.422278][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short
[  693.434110][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -71
[  693.454616][ T5935] usb 4-1: can't read configurations, error -71
[  693.661016][ T5880] libceph: connect (1)[c::]:6789 error -101
[  693.742513][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  696.634527][T12345] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1650'.
[  696.840708][ T9233] Bluetooth: hci5: command 0x0406 tx timeout
[  698.791328][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.835494][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.879111][T12357] openvswitch: netlink: Message has 2 unknown bytes.
[  698.886127][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.103977][T12380] netlink: 'syz.5.1663': attribute type 1 has an invalid length.
[  700.111769][T12380] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1663'.
[  705.126974][T12418] netlink: 'syz.4.1677': attribute type 1 has an invalid length.
[  705.135219][T12418] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1677'.
[  708.401508][T12449] Cannot find del_set index 2 as target
[  708.655488][T12452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  712.455662][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'.
[  712.499364][T12477] vlan2: entered promiscuous mode
[  713.190603][ T5893] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  713.473037][ T5893] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  713.602845][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.893548][ T5893] usb 1-1: config 0 descriptor??
[  713.911743][ T5893] cp210x 1-1:0.0: cp210x converter detected
[  713.921793][T12494] netlink: 'syz.3.1695': attribute type 23 has an invalid length.
[  715.183137][ T5893] usb 1-1: cp210x converter now attached to ttyUSB0
[  716.739356][T12522] netlink: 'syz.3.1701': attribute type 1 has an invalid length.
[  718.022422][ T5894] usb 1-1: USB disconnect, device number 37
[  718.551401][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  718.585880][ T5894] cp210x 1-1:0.0: device disconnected
[  719.261759][T12545] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  719.881543][ T5835] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  719.974273][T12551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.121772][T12551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.454458][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short
[  722.494140][ T5835] usb 3-1: unable to read config index 0 descriptor/start: -71
[  722.511663][ T5835] usb 3-1: can't read configurations, error -71
[  722.698780][T12568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1710'.
[  723.575827][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  723.587531][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  723.587563][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  723.587578][ T5826] Workqueue: hci5 hci_rx_work
[  723.587610][ T5826] Call Trace:
[  723.587617][ T5826]  <TASK>
[  723.587625][ T5826]  dump_stack_lvl+0x16c/0x1f0
[  723.587656][ T5826]  sysfs_warn_dup+0x7f/0xa0
[  723.587686][ T5826]  sysfs_create_dir_ns+0x24b/0x2b0
[  723.587715][ T5826]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  723.587742][ T5826]  ? find_held_lock+0x2b/0x80
[  723.587771][ T5826]  ? do_raw_spin_unlock+0x172/0x230
[  723.587796][ T5826]  kobject_add_internal+0x2c4/0x9b0
[  723.587832][ T5826]  kobject_add+0x16e/0x240
[  723.587862][ T5826]  ? __pfx_kobject_add+0x10/0x10
[  723.587894][ T5826]  ? do_raw_spin_unlock+0x172/0x230
[  723.587917][ T5826]  ? kobject_put+0xab/0x5a0
[  723.587955][ T5826]  device_add+0x288/0x1a70
[  723.587978][ T5826]  ? __pfx_dev_set_name+0x10/0x10
[  723.588004][ T5826]  ? __pfx_device_add+0x10/0x10
[  723.588026][ T5826]  ? mgmt_send_event_skb+0x2fb/0x460
[  723.588065][ T5826]  hci_conn_add_sysfs+0x17e/0x230
[  723.588098][ T5826]  le_conn_complete_evt+0x1075/0x1d70
[  723.588135][ T5826]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  723.588169][ T5826]  ? hci_event_packet+0x459/0x11c0
[  723.588208][ T5826]  hci_le_conn_complete_evt+0x23c/0x370
[  723.588245][ T5826]  hci_le_meta_evt+0x354/0x5e0
[  723.588276][ T5826]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  723.588310][ T5826]  hci_event_packet+0x685/0x11c0
[  723.588339][ T5826]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  723.588370][ T5826]  ? __pfx_hci_event_packet+0x10/0x10
[  723.588399][ T5826]  ? kcov_remote_start+0x3c9/0x6d0
[  723.588423][ T5826]  ? lockdep_hardirqs_on+0x7c/0x110
[  723.588456][ T5826]  hci_rx_work+0x2c5/0x16b0
[  723.588487][ T5826]  ? rcu_is_watching+0x12/0xc0
[  723.588517][ T5826]  process_one_work+0x9cf/0x1b70
[  723.588552][ T5826]  ? __pfx_process_one_work+0x10/0x10
[  723.588584][ T5826]  ? assign_work+0x1a0/0x250
[  723.588608][ T5826]  worker_thread+0x6c8/0xf10
[  723.588639][ T5826]  ? __kthread_parkme+0x19e/0x250
[  723.588675][ T5826]  ? __pfx_worker_thread+0x10/0x10
[  723.588698][ T5826]  kthread+0x3c5/0x780
[  723.588720][ T5826]  ? __pfx_kthread+0x10/0x10
[  723.588743][ T5826]  ? rcu_is_watching+0x12/0xc0
[  723.588770][ T5826]  ? __pfx_kthread+0x10/0x10
[  723.588792][ T5826]  ret_from_fork+0x5d4/0x6f0
[  723.588826][ T5826]  ? __pfx_kthread+0x10/0x10
[  723.588847][ T5826]  ret_from_fork_asm+0x1a/0x30
[  723.588887][ T5826]  </TASK>
[  723.588913][ T5826] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  723.858636][ T5826] Bluetooth: hci5: failed to register connection device
[  723.911503][  T978] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  724.740441][  T978] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  724.751515][  T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.828562][  T978] usb 4-1: config 0 descriptor??
[  724.953020][  T978] gspca_main: spca508-2.14.0 probing 8086:0110
[  725.062565][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  725.062582][   T30] audit: type=1400 audit(2000000303.650:777): avc:  denied  { setopt } for  pid=12585 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  725.275465][  T978] gspca_spca508: reg_read err -32
[  725.801995][  T978] gspca_spca508: reg_read err -110
[  725.807462][  T978] gspca_spca508: reg_read err -32
[  725.814944][  T978] gspca_spca508: reg_read err -32
[  725.835010][  T978] gspca_spca508: reg write: error -32
[  725.851906][  T978] spca508 4-1:0.0: probe with driver spca508 failed with error -32
[  725.957253][   T30] audit: type=1400 audit(2000000304.540:778): avc:  denied  { listen } for  pid=12601 comm="syz.2.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  726.781706][  T978] usb 4-1: USB disconnect, device number 37
[  726.990841][ T5835] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  727.318847][ T5835] usb 1-1: Using ep0 maxpacket: 8
[  727.427047][ T5835] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  727.444099][ T5835] usb 1-1: config 0 has no interface number 0
[  727.463834][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  727.958413][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.986760][ T5835] usb 1-1: Product: syz
[  727.996653][ T5835] usb 1-1: Manufacturer: syz
[  728.007788][ T5835] usb 1-1: SerialNumber: syz
[  728.015562][ T5835] usb 1-1: config 0 descriptor??
[  728.224195][ T5835] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  728.261689][ T5835] usb 1-1: Failed to initialize entity for entity 6
[  728.268395][ T5835] usb 1-1: Failed to register entities (-22).
[  728.310611][ T5880] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  728.851152][ T5880] usb 4-1: Using ep0 maxpacket: 8
[  729.321506][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short
[  729.353407][ T5880] usb 4-1: config 4 interface 0 has no altsetting 0
[  729.410815][ T5880] usb 4-1: string descriptor 0 read error: -22
[  729.417174][ T5880] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  729.490570][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.529837][ T5880] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  729.766991][ T5880] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  729.784463][T12640] Cannot find set identified by id 65534 to match
[  729.844990][ T5880] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  729.932937][ T5880] usb 4-1: media controller created
[  730.058160][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.187795][  T978] usb 1-1: USB disconnect, device number 38
[  730.516009][T12649] netlink: 'syz.5.1737': attribute type 16 has an invalid length.
[  730.524564][T12649] netlink: 'syz.5.1737': attribute type 17 has an invalid length.
[  730.749551][T12648] SELinux:  truncated policydb string identifier
[  730.756955][T12648] SELinux: failed to load policy
[  730.764875][   T30] audit: type=1400 audit(2000000309.330:779): avc:  denied  { load_policy } for  pid=12644 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  730.894999][ T5894] lo speed is unknown, defaulting to 1000
[  731.204501][ T5880] usb 4-1: USB disconnect, device number 38
[  735.153624][T12691] ceph: No mds server is up or the cluster is laggy
[  735.175672][  T978] libceph: connect (1)[c::]:6789 error -101
[  735.636089][  T978] libceph: mon0 (1)[c::]:6789 connect error
[  735.712212][T12703] netlink: 'syz.3.1750': attribute type 1 has an invalid length.
[  736.822923][T12716] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  736.942598][   T30] audit: type=1400 audit(2000000315.520:780): avc:  denied  { setopt } for  pid=12714 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  738.261618][ T5893] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  739.060287][ T5893] usb 3-1: device descriptor read/64, error -71
[  739.084186][T12734] Invalid logical block size (301989888)
[  739.514998][ T5893] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  740.068366][ T9233] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  740.080720][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: kworker/u9:1 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  740.080753][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  740.080768][ T9233] Workqueue: hci3 hci_rx_work
[  740.080801][ T9233] Call Trace:
[  740.080808][ T9233]  <TASK>
[  740.080818][ T9233]  dump_stack_lvl+0x16c/0x1f0
[  740.080847][ T9233]  sysfs_warn_dup+0x7f/0xa0
[  740.080878][ T9233]  sysfs_create_dir_ns+0x24b/0x2b0
[  740.080910][ T9233]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  740.080939][ T9233]  ? find_held_lock+0x2b/0x80
[  740.080976][ T9233]  ? do_raw_spin_unlock+0x172/0x230
[  740.081005][ T9233]  kobject_add_internal+0x2c4/0x9b0
[  740.081043][ T9233]  kobject_add+0x16e/0x240
[  740.081074][ T9233]  ? __pfx_kobject_add+0x10/0x10
[  740.081106][ T9233]  ? do_raw_spin_unlock+0x172/0x230
[  740.081131][ T9233]  ? kobject_put+0xab/0x5a0
[  740.081168][ T9233]  device_add+0x288/0x1a70
[  740.081191][ T9233]  ? __pfx_dev_set_name+0x10/0x10
[  740.081216][ T9233]  ? __pfx_device_add+0x10/0x10
[  740.081238][ T9233]  ? mgmt_send_event_skb+0x2fb/0x460
[  740.081277][ T9233]  hci_conn_add_sysfs+0x17e/0x230
[  740.081310][ T9233]  le_conn_complete_evt+0x1075/0x1d70
[  740.081346][ T9233]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  740.081376][ T9233]  ? hci_event_packet+0x459/0x11c0
[  740.081410][ T9233]  hci_le_conn_complete_evt+0x23c/0x370
[  740.081440][ T9233]  hci_le_meta_evt+0x354/0x5e0
[  740.081467][ T9233]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  740.081499][ T9233]  hci_event_packet+0x685/0x11c0
[  740.081525][ T9233]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  740.081553][ T9233]  ? __pfx_hci_event_packet+0x10/0x10
[  740.081580][ T9233]  ? kcov_remote_start+0x3c9/0x6d0
[  740.081599][ T9233]  ? lockdep_hardirqs_on+0x7c/0x110
[  740.081631][ T9233]  hci_rx_work+0x2c5/0x16b0
[  740.081658][ T9233]  ? rcu_is_watching+0x12/0xc0
[  740.081685][ T9233]  process_one_work+0x9cf/0x1b70
[  740.081716][ T9233]  ? __pfx_process_one_work+0x10/0x10
[  740.081744][ T9233]  ? assign_work+0x1a0/0x250
[  740.081762][ T9233]  worker_thread+0x6c8/0xf10
[  740.081788][ T9233]  ? __kthread_parkme+0x19e/0x250
[  740.081818][ T9233]  ? __pfx_worker_thread+0x10/0x10
[  740.081840][ T9233]  kthread+0x3c5/0x780
[  740.081860][ T9233]  ? __pfx_kthread+0x10/0x10
[  740.081879][ T9233]  ? rcu_is_watching+0x12/0xc0
[  740.081894][ T9233]  ? __pfx_kthread+0x10/0x10
[  740.081905][ T9233]  ret_from_fork+0x5d4/0x6f0
[  740.081920][ T9233]  ? __pfx_kthread+0x10/0x10
[  740.081930][ T9233]  ret_from_fork_asm+0x1a/0x30
[  740.081950][ T9233]  </TASK>
[  740.083641][T12748] netlink: 'syz.5.1767': attribute type 1 has an invalid length.
[  740.339213][T12748] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1767'.
[  740.348659][ T9233] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  740.364457][ T9233] Bluetooth: hci3: failed to register connection device
[  741.036705][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'.
[  741.321291][T12775] syzkaller0: create flow: hash 1585125839 index 1
[  741.382120][T10527] syzkaller0: tun_net_xmit 76
[  741.394163][   T30] audit: type=1400 audit(2000000319.970:781): avc:  denied  { call } for  pid=12777 comm="syz.3.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  741.426542][ T5880] syzkaller0: tun_net_xmit 76
[  741.431836][T10527] syzkaller0: tun_net_xmit 48
[  741.549973][T12782] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1779'.
[  741.664888][T12768] syzkaller0: delete flow: hash 1585125839 index 1
[  742.493585][   T42] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  742.880149][   T42] usb 1-1: Using ep0 maxpacket: 8
[  742.893472][   T42] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  742.915963][   T42] usb 1-1: config 0 has no interface number 0
[  742.943982][   T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  742.959079][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.993446][   T42] usb 1-1: Product: syz
[  743.004284][   T42] usb 1-1: Manufacturer: syz
[  743.031132][   T42] usb 1-1: SerialNumber: syz
[  743.046635][   T42] usb 1-1: config 0 descriptor??
[  743.106594][T12825] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[12825]
[  743.240602][   T30] audit: type=1400 audit(2000000321.820:782): avc:  denied  { write } for  pid=12828 comm="syz.3.1799" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  743.294602][ T5880] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  743.453725][ T5880] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  743.464593][ T5880] usb 5-1: config 0 has no interface number 0
[  743.487766][   T42] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  743.494606][ T5880] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  743.504017][   T42] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[  743.513914][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.522101][   T42] usb 1-1: Failed to initialize entity for entity 5
[  743.529201][ T5880] usb 5-1: Product: syz
[  743.533752][   T42] usb 1-1: Failed to register entities (-22).
[  743.550200][ T5880] usb 5-1: Manufacturer: syz
[  743.559458][ T5880] usb 5-1: SerialNumber: syz
[  743.575692][ T5880] usb 5-1: config 0 descriptor??
[  743.694223][  T978] usb 1-1: USB disconnect, device number 39
[  744.650870][ T5880] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  744.726910][ T5880] asix 5-1:0.239: probe with driver asix failed with error -71
[  744.893688][ T5880] usb 5-1: USB disconnect, device number 43
[  745.315684][T12840] binder: 12839:12840 ioctl c0306201 0 returned -14
[  745.361034][   T30] audit: type=1400 audit(2000000323.940:783): avc:  denied  { write } for  pid=12841 comm="syz.4.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  745.422056][   T30] audit: type=1400 audit(2000000323.940:784): avc:  denied  { read } for  pid=12841 comm="syz.4.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  745.715117][ T5880] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  745.895853][ T5880] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  745.914343][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.923057][ T5880] usb 5-1: Product: syz
[  745.936018][ T5880] usb 5-1: Manufacturer: syz
[  745.941499][ T5880] usb 5-1: SerialNumber: syz
[  745.966695][ T5880] usb 5-1: config 0 descriptor??
[  745.974423][ T5880] ch341 5-1:0.0: ch341-uart converter detected
[  746.306827][T12827] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  746.319599][T12827] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  746.961008][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  746.967405][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  747.156523][ T5880] usb 5-1: failed to send control message: -71
[  747.176066][   T30] audit: type=1400 audit(2000000324.960:785): avc:  denied  { bind } for  pid=12846 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  747.200569][ T5880] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  747.248755][ T5880] usb 5-1: USB disconnect, device number 44
[  747.270149][ T5880] ch341 5-1:0.0: device disconnected
[  747.348346][   T30] audit: type=1400 audit(2000000325.930:786): avc:  denied  { write } for  pid=12854 comm="syz.5.1809" name="file0" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  747.414956][   T30] audit: type=1400 audit(2000000325.930:787): avc:  denied  { open } for  pid=12854 comm="syz.5.1809" path="/124/file0" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  747.487566][   T30] audit: type=1400 audit(2000000325.960:788): avc:  denied  { ioctl } for  pid=12854 comm="syz.5.1809" path="/124/file0" dev="tmpfs" ino=671 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  747.594184][   T30] audit: type=1400 audit(2000000326.170:789): avc:  denied  { bind } for  pid=12859 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  747.824872][T12827] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  747.830526][T12860] lo speed is unknown, defaulting to 1000
[  747.837983][T12860] lo speed is unknown, defaulting to 1000
[  747.850183][T12827] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  747.905286][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.935623][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.988480][T12860] lo speed is unknown, defaulting to 1000
[  748.719755][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.766530][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.841473][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  748.864235][T12905] batadv_slave_0: entered promiscuous mode
[  748.883552][T12905] batadv_slave_0: entered allmulticast mode
[  749.262863][ T5880] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  749.431740][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  749.443169][ T5880] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[  749.460428][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  749.492667][ T5880] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  749.510628][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.518717][ T5880] usb 1-1: Product: syz
[  749.565040][ T5880] usb 1-1: Manufacturer: syz
[  749.570448][ T5880] usb 1-1: SerialNumber: syz
[  749.606163][ T5880] usb 1-1: config 0 descriptor??
[  749.640082][ T5880] hub 1-1:0.0: bad descriptor, ignoring hub
[  749.664754][ T5880] hub 1-1:0.0: probe with driver hub failed with error -5
[  749.689463][ T5880] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24
[  749.697840][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  749.729031][ T5880] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  749.772359][ T5880] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8
[  749.971395][ T5893] usb 1-1: USB disconnect, device number 40
[  750.151994][T12944] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  750.853592][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.659527][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.729747][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  752.793961][T12990] KVM: debugfs: duplicate directory 12990-4
[  752.811459][   T30] audit: type=1400 audit(2000000331.390:790): avc:  denied  { read } for  pid=5180 comm="acpid" name="mouse1" dev="devtmpfs" ino=3214 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  752.851032][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  752.882553][   T30] audit: type=1400 audit(2000000331.390:791): avc:  denied  { open } for  pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3214 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  752.928374][   T30] audit: type=1400 audit(2000000331.390:792): avc:  denied  { ioctl } for  pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3214 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  752.960710][ T5894] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  752.986448][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  752.993734][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  753.071612][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  753.131482][ T5894] usb 6-1: device descriptor read/64, error -32
[  753.243608][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  753.259370][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  753.342866][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  753.411556][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  753.425986][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  753.449913][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  753.503181][T13002] kvm: MONITOR instruction emulated as NOP!
[  753.526224][T13002] netlink: 'syz.3.1864': attribute type 6 has an invalid length.
[  753.541697][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  753.631951][ T5894] usb 6-1: device descriptor read/64, error -32
[  753.740859][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  753.748287][ T5894] usb usb6-port1: attempt power cycle
[  753.777151][ T5894] raw-gadget.2 gadget.5: failed to queue disconnect event
[  753.860980][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  753.941874][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  753.952812][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  754.150844][ T5893] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  754.191824][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  754.222921][    T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  754.251932][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  754.281798][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  754.289158][ T5894] usb 6-1: device descriptor read/8, error -32
[  754.313216][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  754.330502][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  754.351386][ T5893] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  754.375842][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  754.384460][    T9] usb 3-1: Using ep0 maxpacket: 8
[  754.400027][ T5893] usb 4-1: SerialNumber: syz
[  754.406281][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  754.417168][    T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  754.437578][ T5894] raw-gadget.2 gadget.5: failed to queue reset event
[  754.446215][    T9] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  754.477250][    T9] usb 3-1: config 0 has no interface number 0
[  754.499594][    T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10
[  754.534313][ T5894] raw-gadget.2 gadget.5: failed to queue resume event
[  754.542234][    T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024
[  754.563122][    T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  754.610840][    T9] usb 3-1: config 0 interface 52 has no altsetting 0
[  754.620798][ T5894] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  754.631631][    T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  754.641419][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  754.648590][ T5894] usb 6-1: device descriptor read/8, error -32
[  754.655482][    T9] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  754.689936][ T5893] usb 4-1: 0:2 : does not exist
[  754.716679][    T9] usb 3-1: Manufacturer: syz
[  754.720595][   T42] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  754.767212][ T5894] raw-gadget.2 gadget.5: failed to queue suspend event
[  754.791667][    T9] usb 3-1: config 0 descriptor??
[  754.803939][ T5893] usb 4-1: USB disconnect, device number 39
[  754.820982][ T5894] usb usb6-port1: unable to enumerate USB device
[  754.980700][   T42] usb 1-1: Using ep0 maxpacket: 16
[  754.999533][   T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  755.314153][   T42] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  755.325196][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.350512][   T42] usb 1-1: Product: syz
[  755.354743][   T42] usb 1-1: Manufacturer: syz
[  755.359404][   T42] usb 1-1: SerialNumber: syz
[  755.367312][    T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input25
[  755.401541][   T42] usb 1-1: config 0 descriptor??
[  755.422301][   T42] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  755.453031][   T42] usb 1-1: Detected FT232R
[  755.518554][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.562015][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.635572][   T42] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  755.725152][    T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  755.738533][    T9] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  755.811818][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  755.845677][   T30] audit: type=1326 audit(2000000334.430:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm="syz.4.1877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde2838e929 code=0x0
[  755.893707][   T42] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  755.990728][ T5893] usb 4-1: Using ep0 maxpacket: 8
[  756.003237][ T5893] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  756.013231][ T5893] usb 4-1: config 179 has no interface number 0
[  756.019672][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  756.031989][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  756.044879][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  756.056916][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  756.069168][ T5893] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  756.084241][ T5893] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  756.108353][    T9] usb 1-1: USB disconnect, device number 41
[  756.131988][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.176003][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  756.195626][T13023] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  756.197072][ T5935] usb 3-1: USB disconnect, device number 56
[  756.203843][    C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  756.230266][    T9] ftdi_sio 1-1:0.0: device disconnected
[  756.680738][ T5935] usb 4-1: USB disconnect, device number 40
[  756.682011][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  756.695986][    C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  757.516701][T13054] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  758.821927][ T5935] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  760.401691][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short
[  760.468636][T13074] input: syz0 as /devices/virtual/input/input26
[  760.543513][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -71
[  760.560143][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'.
[  760.613393][ T5935] usb 1-1: can't read configurations, error -71
[  761.271228][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.333881][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.728152][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.776746][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  763.419773][T13106] lo speed is unknown, defaulting to 1000
[  763.655217][T13106] lo speed is unknown, defaulting to 1000
[  764.045127][T13106] lo speed is unknown, defaulting to 1000
[  764.414434][T13122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  765.297295][T13127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.860790][   T30] audit: type=1400 audit(2000000344.260:794): avc:  denied  { shutdown } for  pid=13129 comm="syz.3.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  766.633191][T13136] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  767.006657][   T30] audit: type=1400 audit(2000000345.570:795): avc:  denied  { mount } for  pid=13139 comm="syz.5.1909" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  768.580706][T13159] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  768.779916][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  769.879691][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.090990][ T5893] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  770.197362][   T30] audit: type=1400 audit(2000000348.700:796): avc:  denied  { write } for  pid=13148 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  770.554717][   T30] audit: type=1400 audit(2000000348.930:797): avc:  denied  { read } for  pid=13148 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  770.994567][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short
[  771.051754][ T5893] usb 5-1: unable to read config index 0 descriptor/start: -71
[  771.096478][ T5893] usb 5-1: can't read configurations, error -71
[  771.349400][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'.
[  771.515243][T13179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'.
[  772.343642][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.412265][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.503748][T13183] Cannot find set identified by id 65534 to match
[  772.902067][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'.
[  775.450002][T13218] netlink: 'syz.4.1930': attribute type 1 has an invalid length.
[  777.017921][   T30] audit: type=1400 audit(2000000355.570:798): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.141 dest=45880 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  777.048636][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.060844][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.113719][   T30] audit: type=1400 audit(2000000355.600:799): avc:  denied  { create } for  pid=13224 comm="syz.4.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  777.247113][   T30] audit: type=1400 audit(2000000355.600:800): avc:  denied  { ioctl } for  pid=13224 comm="syz.4.1934" path="socket:[36841]" dev="sockfs" ino=36841 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  777.301193][   T30] audit: type=1400 audit(2000000355.630:801): avc:  denied  { prog_load } for  pid=13223 comm="syz.5.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  777.804478][   T30] audit: type=1400 audit(2000000355.630:802): avc:  denied  { bpf } for  pid=13223 comm="syz.5.1932" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  777.825677][   T30] audit: type=1400 audit(2000000355.630:803): avc:  denied  { perfmon } for  pid=13223 comm="syz.5.1932" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  777.858445][   T30] audit: type=1400 audit(2000000355.630:804): avc:  denied  { read write } for  pid=13223 comm="syz.5.1932" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  778.747080][   T30] audit: type=1400 audit(2000000355.630:805): avc:  denied  { open } for  pid=13223 comm="syz.5.1932" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  778.774482][   T30] audit: type=1400 audit(2000000355.630:806): avc:  denied  { ioctl } for  pid=13223 comm="syz.5.1932" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  778.799549][   T30] audit: type=1400 audit(2000000355.670:807): avc:  denied  { read write } for  pid=5831 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  778.850389][T13241] bond0: option mode: unable to set because the bond device has slaves
[  779.930735][ T5893] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  780.172873][ T5893] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  780.283478][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.542293][T13264] syz.2.1944: attempt to access beyond end of device
[  780.542293][T13264] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[  780.589942][ T5893] gspca_main: mars-2.14.0 probing 093a:050f
[  780.635286][T13264] syz.2.1944: attempt to access beyond end of device
[  780.635286][T13264] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[  780.648978][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  780.659099][T13264] syz.2.1944: attempt to access beyond end of device
[  780.659099][T13264] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[  780.676338][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  780.805022][T13264] syz.2.1944: attempt to access beyond end of device
[  780.805022][T13264] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  780.887926][T13264] syz.2.1944: attempt to access beyond end of device
[  780.887926][T13264] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  781.080939][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'.
[  781.539412][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  781.645044][T13264] syz.2.1944: attempt to access beyond end of device
[  781.645044][T13264] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  781.752556][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  781.761906][T13276] netlink: 'syz.5.1947': attribute type 83 has an invalid length.
[  781.784384][T13264] syz.2.1944: attempt to access beyond end of device
[  781.784384][T13264] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  781.801785][T13264] syz.2.1944: attempt to access beyond end of device
[  781.801785][T13264] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  781.815557][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  781.825889][T13264] syz.2.1944: attempt to access beyond end of device
[  781.825889][T13264] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  781.839261][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  781.858936][T13264] syz.2.1944: attempt to access beyond end of device
[  781.858936][T13264] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  781.879141][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  781.890501][T13264] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  781.900128][T13264] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  782.285925][  T979] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  782.335506][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  782.335521][   T30] audit: type=1400 audit(2000000360.920:848): avc:  denied  { setopt } for  pid=13263 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  782.394893][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  782.422773][   T30] audit: type=1400 audit(2000000360.960:849): avc:  denied  { create } for  pid=13263 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  782.433651][T13266] cgroup: Unknown subsys name 'smackfshat'
[  782.471329][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  782.479804][  T979] usb 4-1: Using ep0 maxpacket: 8
[  782.573465][T13283] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  782.640674][  T979] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  782.685321][  T979] usb 4-1: config 0 has no interface number 0
[  782.720077][   T30] audit: type=1400 audit(2000000360.960:850): avc:  denied  { module_request } for  pid=13263 comm="syz.2.1944" kmod="net-pf-16-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  782.744772][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  782.827406][   T42] usb 1-1: USB disconnect, device number 44
[  782.851210][  T979] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  782.870841][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  782.895419][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  782.938904][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.001848][  T979] usb 4-1: Product: syz
[  783.032951][  T979] usb 4-1: Manufacturer: syz
[  783.037770][   T30] audit: type=1400 audit(2000000360.980:851): avc:  denied  { write } for  pid=13279 comm="syz.4.1948" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  783.068777][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  783.114284][  T979] usb 4-1: SerialNumber: syz
[  783.161031][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.174093][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.225453][ T5893] usb 6-1: device descriptor read/64, error -32
[  783.274114][  T979] usb 4-1: config 0 descriptor??
[  783.377681][   T30] audit: type=1400 audit(2000000361.000:852): avc:  denied  { create } for  pid=13281 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  783.410898][ T5893] raw-gadget.2 gadget.5: failed to queue suspend event
[  783.485396][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  783.774042][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  784.502694][   T30] audit: type=1400 audit(2000000361.010:853): avc:  denied  { write } for  pid=13281 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  784.504671][  T979] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  784.563939][   T30] audit: type=1400 audit(2000000361.010:854): avc:  denied  { create } for  pid=13263 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  784.598308][  T979] usb 4-1: Failed to initialize entity for entity 6
[  784.610589][   T30] audit: type=1400 audit(2000000361.010:855): avc:  denied  { write } for  pid=13263 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  784.630689][ T5893] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  784.630923][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  784.638442][   T30] audit: type=1400 audit(2000000361.010:856): avc:  denied  { nlmsg_write } for  pid=13263 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  784.645585][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  784.666155][   T30] audit: type=1400 audit(2000000361.240:857): avc:  denied  { read write } for  pid=13281 comm="syz.5.1949" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  784.701483][  T979] usb 4-1: Failed to register entities (-22).
[  785.080597][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  785.181705][ T5893] usb 6-1: device descriptor read/64, error -32
[  785.310994][ T5893] raw-gadget.2 gadget.5: failed to queue suspend event
[  785.583264][ T5893] usb usb6-port1: attempt power cycle
[  785.598882][ T5893] raw-gadget.2 gadget.5: failed to queue disconnect event
[  785.630019][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  785.730793][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  785.767508][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  786.000916][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  786.081706][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  786.115391][    T9] usb 4-1: USB disconnect, device number 41
[  786.126884][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  786.144905][ T5893] usb 6-1: device descriptor read/8, error -32
[  786.271149][ T5893] raw-gadget.2 gadget.5: failed to queue suspend event
[  786.296601][ T5893] raw-gadget.2 gadget.5: failed to queue reset event
[  786.390906][ T5893] raw-gadget.2 gadget.5: failed to queue resume event
[  786.480894][ T5893] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  786.541726][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  787.062554][ T5893] usb 6-1: device descriptor read/8, error -32
[  787.309811][ T5893] raw-gadget.2 gadget.5: failed to queue suspend event
[  787.318565][ T5893] usb usb6-port1: unable to enumerate USB device
[  787.889917][T13336] netlink: 'syz.0.1963': attribute type 1 has an invalid length.
[  788.384564][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  788.384582][   T30] audit: type=1400 audit(2000000366.970:883): avc:  denied  { write } for  pid=13327 comm="syz.4.1961" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  788.414422][    C1] vkms_vblank_simulate: vblank timer overrun
[  789.409844][T13340] netlink: 'syz.3.1964': attribute type 1 has an invalid length.
[  789.417672][T13340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1964'.
[  789.836487][T13345] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1966'.
[  789.846019][   T30] audit: type=1400 audit(2000000368.420:884): avc:  denied  { mounton } for  pid=13343 comm="syz.4.1966" path="/401" dev="tmpfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  789.868069][    C1] vkms_vblank_simulate: vblank timer overrun
[  790.175323][   T30] audit: type=1400 audit(2000000368.420:885): avc:  denied  { mount } for  pid=13343 comm="syz.4.1966" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  790.197102][    C1] vkms_vblank_simulate: vblank timer overrun
[  790.277440][   T30] audit: type=1400 audit(2000000368.760:886): avc:  denied  { unmount } for  pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  790.297187][    C1] vkms_vblank_simulate: vblank timer overrun
[  790.485572][T13347] openvswitch: netlink: Message has 2 unknown bytes.
[  790.492328][T13347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  790.519523][   T30] audit: type=1400 audit(2000000368.970:887): avc:  denied  { bind } for  pid=13346 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  790.600622][   T30] audit: type=1400 audit(2000000368.980:888): avc:  denied  { name_bind } for  pid=13346 comm="syz.0.1967" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  790.687631][   T30] audit: type=1400 audit(2000000368.990:889): avc:  denied  { node_bind } for  pid=13346 comm="syz.0.1967" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  790.738046][T13347] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.792686][   T30] audit: type=1400 audit(2000000369.090:890): avc:  denied  { ioctl } for  pid=13352 comm="syz.3.1969" path="socket:[38161]" dev="sockfs" ino=38161 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  790.869107][   T30] audit: type=1400 audit(2000000369.090:891): avc:  denied  { create } for  pid=13352 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  790.928138][   T30] audit: type=1400 audit(2000000369.320:892): avc:  denied  { remount } for  pid=13361 comm="syz.3.1971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  791.320548][ T5893] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  791.531777][ T5893] usb 4-1: not running at top speed; connect to a high speed hub
[  791.553276][ T5893] usb 4-1: config 1 interface 0 has no altsetting 0
[  791.562519][T13373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  791.572956][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40
[  791.592802][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.603427][T13373] batadv_slave_0: entered promiscuous mode
[  791.609247][T13373] batadv_slave_0: entered allmulticast mode
[  791.690882][ T5893] usb 4-1: Product: syz
[  791.695072][ T5893] usb 4-1: Manufacturer: syz
[  791.699667][ T5893] usb 4-1: SerialNumber: syz
[  791.862157][T13380] set match dimension is over the limit!
[  792.078779][T13385] Cannot find set identified by id 65534 to match
[  792.338150][ T5893] usbhid 4-1:1.0: can't add hid device: -71
[  792.352454][ T5893] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  792.413779][ T5893] usb 4-1: USB disconnect, device number 42
[  792.423695][T13388] netlink: 'syz.2.1979': attribute type 1 has an invalid length.
[  792.431478][T13388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1979'.
[  794.211067][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  794.211085][   T30] audit: type=1400 audit(2000000371.870:894): avc:  denied  { setopt } for  pid=13394 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  794.394609][T13403] FAULT_INJECTION: forcing a failure.
[  794.394609][T13403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  794.430841][   T30] audit: type=1400 audit(2000000372.840:895): avc:  denied  { write } for  pid=13394 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  794.483628][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.3.1982 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  794.483657][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  794.483669][T13403] Call Trace:
[  794.483675][T13403]  <TASK>
[  794.483683][T13403]  dump_stack_lvl+0x16c/0x1f0
[  794.483713][T13403]  should_fail_ex+0x512/0x640
[  794.483743][T13403]  _copy_from_user+0x2e/0xd0
[  794.483770][T13403]  ucma_write+0x128/0x330
[  794.483796][T13403]  ? __pfx_ucma_write+0x10/0x10
[  794.483827][T13403]  ? bpf_lsm_file_permission+0x9/0x10
[  794.483846][T13403]  ? security_file_permission+0x71/0x210
[  794.483876][T13403]  ? rw_verify_area+0xcf/0x680
[  794.483900][T13403]  ? __pfx_ucma_write+0x10/0x10
[  794.483922][T13403]  vfs_write+0x29d/0x1150
[  794.483952][T13403]  ? __pfx_vfs_write+0x10/0x10
[  794.483974][T13403]  ? find_held_lock+0x2b/0x80
[  794.483998][T13403]  ? __fget_files+0x204/0x3c0
[  794.484028][T13403]  ? __fget_files+0x20e/0x3c0
[  794.484059][T13403]  ksys_write+0x1f8/0x250
[  794.484081][T13403]  ? __pfx_ksys_write+0x10/0x10
[  794.484113][T13403]  do_syscall_64+0xcd/0x4c0
[  794.484141][T13403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.484160][T13403] RIP: 0033:0x7f670038e929
[  794.484175][T13403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  794.484192][T13403] RSP: 002b:00007f670119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  794.484209][T13403] RAX: ffffffffffffffda RBX: 00007f67005b5fa0 RCX: 00007f670038e929
[  794.484221][T13403] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000003
[  794.484231][T13403] RBP: 00007f670119a090 R08: 0000000000000000 R09: 0000000000000000
[  794.484242][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.484251][T13403] R13: 0000000000000000 R14: 00007f67005b5fa0 R15: 00007ffdb78593d8
[  794.484276][T13403]  </TASK>
[  794.875153][   T30] audit: type=1400 audit(2000000372.840:896): avc:  denied  { read } for  pid=13394 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  794.882863][T13409] input: syz1 as /devices/virtual/input/input27
[  795.350918][   T30] audit: type=1400 audit(2000000372.960:897): avc:  denied  { read write } for  pid=13402 comm="syz.3.1982" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  795.441196][   T30] audit: type=1400 audit(2000000372.960:898): avc:  denied  { open } for  pid=13402 comm="syz.3.1982" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  795.506074][T13418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=13418 comm=syz.3.1989
[  795.531562][T13420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=13420 comm=syz.3.1989
[  795.551250][   T30] audit: type=1400 audit(2000000373.460:899): avc:  denied  { read } for  pid=13405 comm="syz.0.1984" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  795.621941][   T30] audit: type=1400 audit(2000000373.460:900): avc:  denied  { open } for  pid=13405 comm="syz.0.1984" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  795.726536][   T30] audit: type=1400 audit(2000000373.460:901): avc:  denied  { write } for  pid=13405 comm="syz.0.1984" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  795.881679][   T30] audit: type=1400 audit(2000000373.460:902): avc:  denied  { ioctl } for  pid=13405 comm="syz.0.1984" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  795.988617][   T30] audit: type=1400 audit(2000000373.490:903): avc:  denied  { create } for  pid=13411 comm="syz.4.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  796.663728][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'.
[  801.284101][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  801.284136][   T30] audit: type=1400 audit(2000000379.830:915): avc:  denied  { setattr } for  pid=13463 comm="syz.2.2000" name="tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  801.669608][T13464] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  801.779539][   T30] audit: type=1400 audit(2000000380.360:916): avc:  denied  { create } for  pid=13474 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  802.078247][   T30] audit: type=1400 audit(2000000380.660:917): avc:  denied  { setcurrent } for  pid=13477 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  802.173197][   T30] audit: type=1400 audit(2000000380.660:918): avc:  denied  { read write } for  pid=13477 comm="syz.0.2004" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  802.675936][   T30] audit: type=1400 audit(2000000380.660:919): avc:  denied  { open } for  pid=13477 comm="syz.0.2004" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  802.803667][   T30] audit: type=1400 audit(2000000380.690:920): avc:  denied  { ioctl } for  pid=13477 comm="syz.0.2004" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  805.162545][   T30] audit: type=1400 audit(2000000383.160:921): avc:  denied  { write } for  pid=13488 comm="syz.0.2007" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  805.694517][   T30] audit: type=1400 audit(2000000384.280:922): avc:  denied  { read } for  pid=13506 comm="syz.0.2011" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  805.805304][   T30] audit: type=1400 audit(2000000384.280:923): avc:  denied  { open } for  pid=13506 comm="syz.0.2011" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  805.829435][    C1] vkms_vblank_simulate: vblank timer overrun
[  805.854690][T13507] 9pnet: Could not find request transport: fj
[  805.944792][   T30] audit: type=1400 audit(2000000384.280:924): avc:  denied  { ioctl } for  pid=13506 comm="syz.0.2011" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  806.262185][ T5935] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  806.322998][   T30] audit: type=1400 audit(2000000384.900:925): avc:  denied  { create } for  pid=13520 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  806.353852][   T42] libceph: connect (1)[c::]:6789 error -101
[  806.360014][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  806.442447][ T5935] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[  806.465879][ T5935] usb 4-1: config 0 has no interface number 0
[  806.489110][T13522] ceph: No mds server is up or the cluster is laggy
[  806.491545][ T5935] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  806.512154][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.526234][ T5935] usb 4-1: Product: syz
[  806.532188][ T5935] usb 4-1: Manufacturer: syz
[  806.537225][ T5935] usb 4-1: SerialNumber: syz
[  806.557927][   T30] audit: type=1400 audit(2000000385.130:926): avc:  denied  { sqpoll } for  pid=13520 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  806.599358][   T30] audit: type=1400 audit(2000000385.180:927): avc:  denied  { create } for  pid=13520 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  806.601718][ T5935] usb 4-1: config 0 descriptor??
[  807.034027][ T5935] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  807.064300][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  807.083454][ T5935] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  807.122176][ T5935] usb 4-1: media controller created
[  807.131666][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  807.151092][ T5894] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  807.294643][ T5935] DVB: Unable to find symbol dib7000p_attach()
[  807.310885][ T5894] usb 1-1: Using ep0 maxpacket: 8
[  807.313398][ T5935] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  807.319419][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short
[  807.336681][ T5894] usb 1-1: config 13 has an invalid interface number: 247 but max is 0
[  807.346636][ T5894] usb 1-1: config 13 has no interface number 0
[  807.353003][ T5894] usb 1-1: config 13 interface 247 has no altsetting 0
[  807.363118][ T5894] usb 1-1: New USB device found, idVendor=054c, idProduct=0066, bcdDevice=ba.b6
[  807.369233][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  807.374451][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.396743][ T5935] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  807.409296][ T5894] usb 1-1: Product: syz
[  807.418885][ T5894] usb 1-1: Manufacturer: syz
[  807.421025][ T5880] libceph: connect (1)[c::]:6789 error -101
[  807.430950][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  807.437000][ T5935] usb 4-1: media controller created
[  807.445441][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  807.464599][ T5935] dib0700: the master dib7090 has to be initialized first
[  807.488978][ T5935] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  807.488998][ T5894] usb 1-1: SerialNumber: syz
[  807.601548][T13542] ceph: No mds server is up or the cluster is laggy
[  807.727703][ T5880] libceph: connect (1)[c::]:6789 error -101
[  807.750051][   T30] audit: type=1400 audit(2000000386.320:928): avc:  denied  { write } for  pid=13529 comm="syz.0.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  807.782877][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  808.173403][T13547] 9pnet_virtio: no channels available for device syz
[  808.268756][ T5894] usb 1-1: active config #13 != 1 ??
[  808.317058][ T5894] usb 1-1: USB disconnect, device number 45
[  808.354301][ T5935] rc_core: IR keymap rc-dib0700-rc5 not found
[  808.355711][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  808.366816][ T5935] Registered IR keymap rc-empty
[  808.373132][ T5935] dvb-usb: could not initialize remote control.
[  808.375222][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  808.385980][ T5935] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  808.400308][   T30] audit: type=1400 audit(2000000386.980:929): avc:  denied  { shutdown } for  pid=13555 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  808.425095][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.480033][   T30] audit: type=1400 audit(2000000387.010:930): avc:  denied  { ioctl } for  pid=13555 comm="syz.0.2022" path="socket:[39115]" dev="sockfs" ino=39115 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  808.566967][   T30] audit: type=1400 audit(2000000387.020:931): avc:  denied  { bind } for  pid=13555 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  810.280813][   T30] audit: type=1400 audit(2000000388.820:932): avc:  denied  { read write } for  pid=13568 comm="syz.5.2025" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  810.666024][T13576] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  810.702073][   T30] audit: type=1400 audit(2000000388.820:933): avc:  denied  { open } for  pid=13568 comm="syz.5.2025" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  811.180772][   T30] audit: type=1400 audit(2000000388.830:934): avc:  denied  { ioctl } for  pid=13568 comm="syz.5.2025" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  812.102184][T13579] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  831.158051][T11575] raw-gadget.2 gadget.5: failed to queue disconnect event
[  869.802848][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  869.809177][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  931.234306][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.250534][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  944.670578][   T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  944.678077][   T31]       Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0
[  944.691901][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  944.704354][   T31] task:kworker/0:0     state:D stack:23144 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  944.718191][   T31] Workqueue: events rfkill_sync_work
[  944.745744][   T30] audit: type=1400 audit(2000000523.310:935): avc:  denied  { write } for  pid=5813 comm="syz-executor" path="pipe:[4392]" dev="pipefs" ino=4392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  944.769033][   T31] Call Trace:
[  944.772475][   T31]  <TASK>
[  944.775415][   T31]  __schedule+0x116a/0x5de0
[  944.779936][   T31]  ? lockdep_unlock+0x51/0xe0
[  944.798271][   T31]  ? __lock_acquire+0x1053/0x1c90
[  944.850476][   T31]  ? __pfx___schedule+0x10/0x10
[  944.855376][   T31]  ? find_held_lock+0x2b/0x80
[  944.860074][   T31]  ? schedule+0x2d7/0x3a0
[  944.864526][   T30] audit: type=1400 audit(2000000523.310:936): avc:  denied  { recv } for  pid=5812 comm="sshd-session" saddr=10.128.0.169 src=41302 daddr=10.128.0.141 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  944.897745][   T31]  schedule+0xe7/0x3a0
[  944.901918][   T31]  schedule_preempt_disabled+0x13/0x30
[  944.907387][   T31]  __mutex_lock+0x6c7/0xb90
[  944.917120][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  944.922762][   T31]  ? nfc_dev_down+0x2d/0x2e0
[  944.927376][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  944.932862][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  944.937913][   T31]  ? nfc_dev_down+0x2d/0x2e0
[  944.943303][   T31]  ? mark_held_locks+0x49/0x80
[  944.948089][   T31]  nfc_dev_down+0x2d/0x2e0
[  944.953359][   T31]  nfc_rfkill_set_block+0x39/0xe0
[  944.958406][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  944.964576][   T31]  rfkill_set_block+0x1fb/0x550
[  944.969449][   T31]  rfkill_sync+0x10a/0x1c0
[  944.974713][   T31]  rfkill_sync_work+0x27/0x40
[  944.979404][   T31]  process_one_work+0x9cf/0x1b70
[  944.985361][   T31]  ? __pfx_process_one_work+0x10/0x10
[  944.991016][   T31]  ? assign_work+0x1a0/0x250
[  944.995625][   T31]  worker_thread+0x6c8/0xf10
[  945.000235][   T31]  ? __pfx_worker_thread+0x10/0x10
[  945.006317][   T31]  kthread+0x3c5/0x780
[  945.011143][   T31]  ? __pfx_kthread+0x10/0x10
[  945.015749][   T31]  ? rcu_is_watching+0x12/0xc0
[  945.021017][   T31]  ? __pfx_kthread+0x10/0x10
[  945.025629][   T31]  ret_from_fork+0x5d4/0x6f0
[  945.030231][   T31]  ? __pfx_kthread+0x10/0x10
[  945.035769][   T31]  ret_from_fork_asm+0x1a/0x30
[  945.041293][   T31]  </TASK>
[  945.044363][   T31] INFO: task kworker/0:4:979 blocked for more than 143 seconds.
[  945.052394][   T31]       Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0
[  945.059683][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  945.069128][   T31] task:kworker/0:4     state:D stack:22536 pid:979   tgid:979   ppid:2      task_flags:0x4208060 flags:0x00004000
[  945.083013][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  945.089730][   T31] Call Trace:
[  945.098537][   T31]  <TASK>
[  945.101751][   T31]  __schedule+0x116a/0x5de0
[  945.106277][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  945.117069][   T31]  ? __pfx___schedule+0x10/0x10
[  945.123402][   T31]  ? find_held_lock+0x2b/0x80
[  945.128103][   T31]  ? schedule+0x2d7/0x3a0
[  945.137772][   T31]  schedule+0xe7/0x3a0
[  945.143929][   T31]  schedule_preempt_disabled+0x13/0x30
[  945.149409][   T31]  __mutex_lock+0x6c7/0xb90
[  945.154944][   T31]  ? rfkill_global_led_trigger_worker+0x1b/0x160
[  945.161844][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  945.166889][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  945.173486][   T31]  ? finish_task_switch.isra.0+0x221/0xc10
[  945.179328][   T31]  ? rfkill_global_led_trigger_worker+0x1b/0x160
[  945.186652][   T31]  rfkill_global_led_trigger_worker+0x1b/0x160
[  945.193028][   T31]  process_one_work+0x9cf/0x1b70
[  945.197997][   T31]  ? __pfx_process_one_work+0x10/0x10
[  945.204304][   T31]  ? assign_work+0x1a0/0x250
[  945.208911][   T31]  worker_thread+0x6c8/0xf10
[  945.214279][   T31]  ? __kthread_parkme+0x19e/0x250
[  945.219328][   T31]  ? __pfx_worker_thread+0x10/0x10
[  945.224809][   T31]  kthread+0x3c5/0x780
[  945.228890][   T31]  ? __pfx_kthread+0x10/0x10
[  945.234278][   T31]  ? rcu_is_watching+0x12/0xc0
[  945.239064][   T31]  ? __pfx_kthread+0x10/0x10
[  945.244720][   T31]  ret_from_fork+0x5d4/0x6f0
[  945.249334][   T31]  ? __pfx_kthread+0x10/0x10
[  945.255031][   T31]  ret_from_fork_asm+0x1a/0x30
[  945.259826][   T31]  </TASK>
[  945.263880][   T31] INFO: task syz.4.1996:13442 blocked for more than 143 seconds.
[  945.278730][   T31]       Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0
[  945.288638][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  945.300337][   T31] task:syz.4.1996      state:D stack:26312 pid:13442 tgid:13442 ppid:5834   task_flags:0x400040 flags:0x00004004
[  945.315417][   T31] Call Trace:
[  945.318700][   T31]  <TASK>
[  945.323187][   T31]  __schedule+0x116a/0x5de0
[  945.327727][   T31]  ? __lock_acquire+0x622/0x1c90
[  945.333466][   T31]  ? __pfx___schedule+0x10/0x10
[  945.338354][   T31]  ? find_held_lock+0x2b/0x80
[  945.343411][   T31]  ? schedule+0x2d7/0x3a0
[  945.347762][   T31]  schedule+0xe7/0x3a0
[  945.352771][   T31]  schedule_timeout+0x257/0x290
[  945.357639][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  945.363938][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  945.369155][   T31]  __wait_for_common+0x2fc/0x4e0
[  945.374407][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  945.379796][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  945.386084][   T31]  ? find_held_lock+0x2b/0x80
[  945.391432][   T31]  ? __flush_work+0x938/0xcc0
[  945.396125][   T31]  ? __flush_work+0x4d0/0xcc0
[  945.401215][   T31]  __flush_work+0x7d7/0xcc0
[  945.405739][   T31]  ? __pfx___flush_work+0x10/0x10
[  945.411531][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  945.416852][   T31]  ? __pfx___might_resched+0x10/0x10
[  945.422976][   T31]  __cancel_work_sync+0x10c/0x130
[  945.428028][   T31]  rfkill_unregister+0x95/0x2c0
[  945.433218][   T31]  nfc_unregister_device+0x94/0x330
[  945.438440][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  945.445064][   T31]  virtual_ncidev_close+0x4b/0xa0
[  945.450113][   T31]  __fput+0x402/0xb70
[  945.454875][   T31]  task_work_run+0x14d/0x240
[  945.459482][   T31]  ? __pfx_task_work_run+0x10/0x10
[  945.465127][   T31]  ? __pfx___do_sys_close_range+0x10/0x10
[  945.476243][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  945.488354][   T31]  do_syscall_64+0x3f6/0x4c0
[  945.498153][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  945.504774][   T31] RIP: 0033:0x7fde2838e929
[  945.509197][   T31] RSP: 002b:00007ffe969c0158 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  945.523420][   T31] RAX: 0000000000000000 RBX: 00007fde285b7ba0 RCX: 00007fde2838e929
[  945.533222][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  945.545501][   T31] RBP: 00007fde285b7ba0 R08: 0000000000000110 R09: 0000000e969c044f
[  945.555604][   T31] R10: 00000000003ffccc R11: 0000000000000246 R12: 00000000000c331f
[  945.569987][   T31] R13: 00007fde285b6080 R14: ffffffffffffffff R15: 00007ffe969c0270
[  945.580018][   T31]  </TASK>
[  945.586917][   T31] 
[  945.586917][   T31] Showing all locks held in the system:
[  945.625527][   T31] 4 locks held by kworker/0:0/9:
[  945.632397][   T31]  #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  945.647322][   T31]  #1: ffffc900000e7d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  945.665694][   T31]  #2: ffffffff907ecda8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40
[  945.676480][   T31]  #3: ffff888028e62100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0
[  945.691675][   T31] 1 lock held by ksoftirqd/1/23:
[  945.696621][   T31] 1 lock held by khungtaskd/31:
[  945.705955][   T31]  #0: ffffffff8e5c4cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  945.717455][   T31] 3 locks held by kworker/0:4/979:
[  945.729628][   T31]  #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  945.746360][   T31]  #1: ffffc90003ab7d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  945.759909][   T31]  #2: ffffffff907ecda8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160
[  945.777569][   T31] 1 lock held by udevd/5195:
[  945.782844][   T31] 2 locks held by getty/5592:
[  945.787521][   T31]  #0: ffff888032db70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  945.808548][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  945.824406][   T31] 1 lock held by syz-executor/5827:
[  945.829803][   T31]  #0: ffffffff907ecda8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0
[  945.848408][   T31] 1 lock held by syz.4.1996/13442:
[  945.854670][   T31]  #0: ffff888028e62100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330
[  945.869543][   T31] 3 locks held by syz.3.2015/13517:
[  945.876299][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  945.890480][   T31]  #1: ffff888028b9f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0
[  945.900101][   T31]  #2: ffffffff907ecda8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40
[  945.915545][   T31] 1 lock held by syz.2.2024/13566:
[  945.920808][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  945.929285][   T31] 1 lock held by syz.0.2027/13576:
[  945.939532][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  945.948964][   T31] 1 lock held by syz-executor/13589:
[  945.966929][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  945.976471][   T31] 1 lock held by syz.5.2032/13593:
[  945.986365][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  945.995608][   T31] 1 lock held by syz-executor/13596:
[  946.006575][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.015174][   T31] 1 lock held by syz-executor/13599:
[  946.025615][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.035238][   T31] 1 lock held by syz-executor/13601:
[  946.045658][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.054275][   T31] 1 lock held by syz-executor/13605:
[  946.059562][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.070593][   T31] 1 lock held by syz-executor/13607:
[  946.075893][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.089096][   T31] 1 lock held by syz-executor/13609:
[  946.095406][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.108745][   T31] 1 lock held by syz-executor/13611:
[  946.114949][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.129415][   T31] 1 lock held by syz-executor/13613:
[  946.135207][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.149386][   T31] 1 lock held by syz-executor/13618:
[  946.156145][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.169482][   T31] 1 lock held by syz-executor/13620:
[  946.174901][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.189052][   T31] 1 lock held by syz-executor/13622:
[  946.195824][   T31]  #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  946.207637][   T31] 
[  946.209964][   T31] =============================================
[  946.209964][   T31] 
[  946.219618][   T31] NMI backtrace for cpu 0
[  946.219632][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  946.219657][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  946.219669][   T31] Call Trace:
[  946.219675][   T31]  <TASK>
[  946.219683][   T31]  dump_stack_lvl+0x116/0x1f0
[  946.219712][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  946.219735][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  946.219763][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  946.219787][   T31]  watchdog+0xf70/0x12c0
[  946.219815][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.219835][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  946.219862][   T31]  ? __kthread_parkme+0x19e/0x250
[  946.219890][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.219912][   T31]  kthread+0x3c5/0x780
[  946.219931][   T31]  ? __pfx_kthread+0x10/0x10
[  946.219951][   T31]  ? rcu_is_watching+0x12/0xc0
[  946.219976][   T31]  ? __pfx_kthread+0x10/0x10
[  946.219996][   T31]  ret_from_fork+0x5d4/0x6f0
[  946.220027][   T31]  ? __pfx_kthread+0x10/0x10
[  946.220046][   T31]  ret_from_fork_asm+0x1a/0x30
[  946.220081][   T31]  </TASK>
[  946.220088][   T31] Sending NMI from CPU 0 to CPUs 1:
[  946.341664][    C1] NMI backtrace for cpu 1
[  946.341678][    C1] CPU: 1 UID: 0 PID: 6507 Comm: kworker/u8:25 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  946.341703][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  946.341715][    C1] Workqueue: bat_events batadv_nc_worker
[  946.341740][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  946.341763][    C1] Code: a6 30 56 00 48 89 df 5b e9 5d b6 5b 00 be 03 00 00 00 5b e9 b2 ab 1f 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 49 10 12 65 8b 05 c9 49 10
[  946.341781][    C1] RSP: 0018:ffffc9000c0afc10 EFLAGS: 00000046
[  946.341795][    C1] RAX: ffff88801b898060 RBX: 0000000000000000 RCX: ffffffff81828401
[  946.341807][    C1] RDX: 1ffff1100371300c RSI: ffffffff818281ba RDI: 0000000000000005
[  946.341819][    C1] RBP: ffff88801b898060 R08: 0000000000000005 R09: 0000000000000000
[  946.341831][    C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880358fad00
[  946.341842][    C1] R13: ffff88801b89804c R14: ffffffff90a83244 R15: ffff888066cb17f0
[  946.341855][    C1] FS:  0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000
[  946.341872][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  946.341884][    C1] CR2: 00007ffe61703f6c CR3: 000000000e382000 CR4: 00000000003526f0
[  946.341897][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  946.341908][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  946.341919][    C1] Call Trace:
[  946.341925][    C1]  <TASK>
[  946.341931][    C1]  kick_pool+0x2ae/0x7a0
[  946.341957][    C1]  process_one_work+0x6da/0x1b70
[  946.341981][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  946.342006][    C1]  ? __pfx_process_one_work+0x10/0x10
[  946.342028][    C1]  ? assign_work+0x1a0/0x250
[  946.342046][    C1]  worker_thread+0x6c8/0xf10
[  946.342070][    C1]  ? __pfx_worker_thread+0x10/0x10
[  946.342089][    C1]  kthread+0x3c5/0x780
[  946.342105][    C1]  ? __pfx_kthread+0x10/0x10
[  946.342123][    C1]  ? rcu_is_watching+0x12/0xc0
[  946.342145][    C1]  ? __pfx_kthread+0x10/0x10
[  946.342162][    C1]  ret_from_fork+0x5d4/0x6f0
[  946.342186][    C1]  ? __pfx_kthread+0x10/0x10
[  946.342203][    C1]  ret_from_fork_asm+0x1a/0x30
[  946.342229][    C1]  </TASK>
[  946.342779][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  946.567581][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  946.579032][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  946.589076][   T31] Call Trace:
[  946.592345][   T31]  <TASK>
[  946.595266][   T31]  dump_stack_lvl+0x3d/0x1f0
[  946.599860][   T31]  panic+0x71c/0x800
[  946.603753][   T31]  ? __pfx_panic+0x10/0x10
[  946.608167][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  946.613541][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  946.619517][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  946.624888][   T31]  ? watchdog+0xdda/0x12c0
[  946.629299][   T31]  ? watchdog+0xdcd/0x12c0
[  946.633716][   T31]  watchdog+0xdeb/0x12c0
[  946.637955][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.642621][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  946.647815][   T31]  ? __kthread_parkme+0x19e/0x250
[  946.652840][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.657507][   T31]  kthread+0x3c5/0x780
[  946.661570][   T31]  ? __pfx_kthread+0x10/0x10
[  946.666150][   T31]  ? rcu_is_watching+0x12/0xc0
[  946.670912][   T31]  ? __pfx_kthread+0x10/0x10
[  946.675492][   T31]  ret_from_fork+0x5d4/0x6f0
[  946.680079][   T31]  ? __pfx_kthread+0x10/0x10
[  946.684664][   T31]  ret_from_fork_asm+0x1a/0x30
[  946.689430][   T31]  </TASK>
[  946.692630][   T31] Kernel Offset: disabled
[  946.696935][   T31] Rebooting in 86400 seconds..