last executing test programs:

3m43.361943033s ago: executing program 1 (id=3923):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="2e00000010"], 0x20)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)

3m41.696859768s ago: executing program 1 (id=3928):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)

3m40.492144296s ago: executing program 1 (id=3933):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)

3m36.138441575s ago: executing program 1 (id=3943):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
socket$kcm(0x2d, 0x2, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_type={'obj_type', 0x3d, '*'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_eq}, {@hash}, {@subj_user={'subj_user', 0x3d, ']{$'}}]}) (async)
lstat(0x0, &(0x7f0000000500)) (async)
recvfrom$unix(r0, &(0x7f0000000200)=""/69, 0x45, 0x10020, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) (async)
r2 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x3ff, 0x3, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x2, 0x89, 0xd615, 0x8, 0x7fffffff, 0xfffffffe, 0x8000, 0xd1, 0x0, 0x0, 0x403, 0x400000}}, {0x0, 0x13}}}, 0xa0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000177, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xff78f35f28532255, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
sendfile(r2, r2, &(0x7f0000000080)=0x400, 0x7f03)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c080) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000b2e000/0x1000)=nil, 0x1000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x9, 0xd6fe2, 0x3d3b4e})

3m35.811173558s ago: executing program 1 (id=3944):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0)
clock_nanosleep(0x3, 0xb053db4eb77bdc1a, &(0x7f0000000000), 0xfffffffffffffffe)
clock_adjtime(0x0, &(0x7f0000000040)={0x10000d4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x0, 0x2, 0x8, 0x3, 0xfffffffd, 0x0, 0x0, 0x3})
r1 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x2024, 0x800, 0x4, 0x165}, &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000300)={&(0x7f0000004000)={[{0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0}]}, 0x8, 0x1}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
setpgid(0x0, r2)
chdir(&(0x7f0000000200)='./file0\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4})

3m34.626405859s ago: executing program 1 (id=3947):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045", 0x19}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e3", 0x1f}], 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x578f3, 0xa2e14})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r4=>0x0)
capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f00000002c0)={0xe0000000, 0x52b, 0x2, 0x4, 0x8b, 0x3})

3m19.390836433s ago: executing program 32 (id=3947):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045", 0x19}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e3", 0x1f}], 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x578f3, 0xa2e14})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r4=>0x0)
capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f00000002c0)={0xe0000000, 0x52b, 0x2, 0x4, 0x8b, 0x3})

11.514375811s ago: executing program 4 (id=4619):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]})
connect$inet(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
close$binfmt(r3)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\a'])
userfaultfd(0x801)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x57e4, &(0x7f0000000640)={0x0, 0x6137, 0x3400, 0x1, 0xb8}, &(0x7f00000001c0), 0x0)
sync()
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014})
pipe2(&(0x7f0000001040)={<r7=>0xffffffffffffffff}, 0x0)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
tee(r7, r9, 0xfffffffffffffc01, 0x0)

11.280770037s ago: executing program 0 (id=4620):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000340))
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
close(r8)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x200840, 0x0)

10.413755419s ago: executing program 3 (id=4623):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7f, 0xe)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', 0x0, 0x183f, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
lseek(r4, 0x2004, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004c090)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
r6 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r6, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg$inet_nvme(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12000)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000000)={@remote, @multicast2, 0xffffffffffffffff, "5ca748c2a6a3e326a830b0c2f1623012666cd4cdcdfb180790f46452b228ba17", 0x8000, 0x1e, 0x7, 0x5}, 0x3c)

10.375485519s ago: executing program 0 (id=4624):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)

10.319376325s ago: executing program 4 (id=4625):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142800006c07010033d43afffe80"], 0x340a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000})

9.602375871s ago: executing program 0 (id=4628):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
ioctl$KDSIGACCEPT(r3, 0x80047456, 0x100000001ffffffd)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
pipe2(&(0x7f00000002c0)={<r6=>0xffffffffffffffff}, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x59e71d198213c0a3, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x10}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000400)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
landlock_create_ruleset(0x0, 0x0, 0x3)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r6, 0x4008af7c, &(0x7f0000000280)={0x0, 0x100})
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000094f969148eb9cb0f0014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

8.398104806s ago: executing program 0 (id=4632):
socket(0x1, 0xa, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x71040, 0x0)
ftruncate(r4, 0x8800000)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}]}, &(0x7f0000000100)=0x10)
r7 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89ef, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getcwd(&(0x7f0000000140)=""/115, 0x73)
r8 = syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0x383a, 0x10, 0x0, 0x380}, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x7)
r11 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

7.846460703s ago: executing program 3 (id=4636):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0)
madvise(&(0x7f0000163000/0x1000)=nil, 0x1000, 0xe)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpgrp(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)={0x44000, 0x10, 0x31}, 0x18)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x15, "5660359c3245d1c42317afad0000000000000100000000012000"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = fanotify_init(0x200, 0x0)
r5 = dup(r3)
fanotify_mark(r4, 0x1, 0x48001059, r5, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r7, 0x0, 0xc19)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)

7.435625302s ago: executing program 2 (id=4637):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="050053f3ffff"], 0xa)
r3 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000001c0)='hugetlb', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtfilter={0x37d0, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0xb}, {0xfffe, 0x8}, {0xb, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x3790, 0x2, [@TCA_CGROUP_ACT={0x234, 0x1, [@m_mpls={0x8c, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd2cf9}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0x4e, 0x6, "2efc73c13561086015169d19ac84a5e864a6268756673837b553833a7d1c53c4e294a8a9073f0c7b8a467ef278a2cb376427963d7c0f04d707ff1effefc26d19acfe307913630f9df36f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x1a4, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x159, 0x9, 0x7, 0xfffffffd, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x7, 0x0, 0x2000000, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0xd577, 0xffffffffffffffff, 0x4f92, 0x80}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0xf3a8, 0x0, 0x4, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x0, 0x8, 0x9f}, 0xf79a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x5, 0xf, 0xfffffff7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x10000000, 0x1, 0x4cb3}, 0x200}}]}, {0xae, 0x6, "27d433e07dc5f7679067dca3f04152ad4d4bd167ce8208dc6c14d2d4e5037be9742d93d955c59a5d5b8f25d0e71da1152923e0146dd3c61d059f8f5a881c4a0adeec1d134565d0767f6d951617a96e3c06917cf9fdf8cbd2d849779c369eaa3e7fcbf67525e20866f564b91e917d081b2acadeeffc833a87db0090c1e0a86f4dd26ae75cf732abed4192fea062dae9025a4ef8623067ad44c03e9251ac50ffc7d7fb7982cab169f840b7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x98, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x79}, {0xc, 0x0, 0xc43f, 0x7fffffff}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x100, 0xa, 0x2, "eae3ad8375b2b93cc4fe"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x6, 0x0, 0x4, 0x4, 0x5, 0x6adc4108fc8afc90}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbecc}}]}, @TCA_CGROUP_POLICE={0x450, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x67c1, 0x5, 0x1, 0x1cc9, 0xfffffc01, 0x9, 0x80, 0x215b, 0x8, 0x9, 0xa573, 0xe3, 0x5, 0x400, 0xf34c, 0x1, 0x8, 0x6, 0x5, 0x4, 0x7, 0x6, 0x8, 0x3, 0x7, 0x9, 0x5, 0xd, 0x100, 0xb4, 0x10001, 0x1ff, 0x3ff, 0x10001, 0x80, 0x0, 0xdc4, 0x4, 0x5, 0x4, 0x8000, 0x3, 0x2, 0x9, 0x1, 0x10000, 0xb85, 0x7, 0x4, 0x3, 0x7, 0x4, 0x6, 0x2, 0x1, 0x6, 0xb8, 0x2, 0xd, 0xa, 0x6, 0x7, 0x81, 0x3, 0xa5f4, 0xfff, 0x4, 0xa67e, 0x7fffffff, 0xece, 0x9, 0x9, 0x3, 0x3ff, 0xca3c, 0x1, 0x1, 0xc10, 0xf, 0x400, 0x7f, 0x1, 0x3, 0x2, 0x3, 0x3, 0x3, 0xb5, 0xd, 0x1, 0x62, 0xe, 0x6, 0xfffffffc, 0x401, 0x3, 0x8, 0x6, 0x2, 0x10000, 0x3, 0x8001, 0x10000, 0x4, 0x3, 0xffff754c, 0x0, 0x9, 0x40, 0x0, 0x2, 0x3, 0x4, 0x43f, 0x6, 0x4, 0x4, 0x4, 0x0, 0x1552, 0x3, 0x8, 0x7f, 0x3, 0x7, 0x3, 0xfffffffc, 0x9, 0x9, 0x80, 0xa411, 0x3, 0x7f, 0x0, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x80000000, 0xfffffff9, 0x200, 0x3, 0x80000, 0x800, 0xbc, 0x9, 0xb, 0x434, 0x7, 0x2, 0x6, 0x7, 0x44, 0x3, 0x4f1, 0x4, 0x7fffffff, 0x6, 0x7f, 0x1ff, 0x2, 0x9, 0x7, 0x4, 0x2, 0x2, 0x8001, 0x7, 0x4, 0x9a4, 0x400, 0x80000000, 0x7ff, 0xd30, 0x10001, 0x8adf, 0x4, 0xffffffff, 0x400, 0xff, 0xbf90, 0x6, 0x8, 0x101, 0x3, 0x8, 0x7fffffff, 0x1f, 0x7f, 0x9, 0xd, 0x2, 0xffffffff, 0x0, 0x1, 0x81, 0x9, 0x3, 0x1, 0xffffffff, 0x100, 0x987, 0x4, 0x55, 0x8, 0x1, 0x4, 0x8, 0x4, 0x4, 0x4, 0xfffffffa, 0x67, 0xf, 0x6, 0x17a, 0x8, 0x5, 0x1, 0x5f4, 0x2, 0x6, 0x6, 0x7, 0x0, 0x80, 0x3, 0x8, 0x9, 0x401, 0xfffffffc, 0x80000001, 0x1, 0x4, 0x5, 0x3, 0x1, 0x7fffffff, 0x8000, 0x0, 0x0, 0xc, 0x0, 0x10000, 0x4, 0x74, 0x911, 0x2, 0x5, 0x7, 0x4, 0x6, 0xf9, 0xffffffb6, 0xf]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_CGROUP_ACT={0x1494, 0x1, [@m_nat={0x114, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x0, 0x8000}, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x1b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7fff, 0x10000000, 0x1, 0x5}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x21}, 0xff}}]}, {0x99, 0x6, "4aaa5f561cf17a9cf9c8bebc2fbc5d94a7c09a5f5b99399106b7e0e0d4188df4acdca4a822881230f04ba8f7fa2e2047e8ddc83ae9f3e1a41ebd7f31d67e7f6643d52fa8e06bdf3d34e6181abe2ef360ffee8401c640f5c82dcbe24ea98288c91480cfe16b67ea1f9864b7bb362c1faf9130a231baee93f7b0d1e1c780d12d4e4fe58dfadd8839128b2a2dc320fdfee6bfc3f44d35"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x138, 0x14, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf4a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3e1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x8001, 0x0, 0x3ff, 0x35e3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x394daf7f, 0x5, 0x1, 0x0, 0xfffffff5}, 0x3}}]}, {0xac, 0x6, "16aebbd62f448754cac6b6ed8a69e5182d1f30d68575749e065176c743cc41de7b7e77ca8815e2fbf408cf9cedf70e14d6980745e6f0615eb424d2bb23f436897e3c98f7d66ccfed65cc2cb49da32e91033506daa053ec8f3a3c4de8c4686cdca721af2348193b1d0a96fe8d732aa5d3708bb2f0ac585f6ff45fec345dc7c12b01896ee27778c987a8d4732da2b7c0d1a096a619a8fabfb36d259b03f4c6000f578915a414206114"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xe0, 0x1f, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0xaa, 0x6, "fead76cadf69e23fd92d1564c934660448c6ab56e563d91c8718307a6a01441e47858d33d93d2f764c0d0ba8b26405e006bef8fbd9d1fe2a1cd2de0405dee1ebdb5f93e20a1b5ea0b0d1617d5e47965c5e4be3150a8ed799b1f124ff27fe5f7e90017307384a3b7c5ebbae04995547fe6d6f7656d212c295740c1f7de062771c4fc40894b4eb7ebf3d1428b93099a8897059a6d0e2509eda786af55d493d372746e81ccb08f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}, @m_sample={0x1078, 0x1e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1e1b, 0x8, 0x18000008, 0xffffffff, 0x10}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe765}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x2, 0xfffffffb, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0xec, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x765}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2f, 0x7f, 0x10000000, 0x1, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xeb, 0x3, 0x2, 0x9e04}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x6e, 0x6, "0f29ede40fdd745bdc3998475372fb01a5391ac6f8607504c80a8fecc68d741c96f497aa9307b43dde23e5d0baefb1b037165dec4cfcadf5e7b1d3adafc36edf56a4dfc72fbdc1150d7acc8375ffc9d51323e7518ad289860310ecf8fc1903721fe3a45861191c18a90f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x12a4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11f8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x84d}, {{0x4, 0x1, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPT={0x160, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x62, 0x5, "da91d587c7f52f44120f3db7eec7cf35c65b6bae671912251d4589e7b3a1e76806ec2d0c809854b2e22241f1c2f9fd5a7597739744d21769d207504997bd19c06c0903a3a29d5d894200b7545ad3bc0d93f7445979dfb9be3e439ea2c77b"}, @TCA_EM_IPT_MATCH_DATA={0xda, 0x5, "f2c21b1440f054364e1d960e1a4ef462a720e71151b6293ad21b44c9bcabb9707d48c437ed6d388248b1666550142dfda95c13e34fe95cdcb6dafce89ed14aced2e24732756538b60a9bb5ac56d112b258eb884379fe65181a56d38efb8663ce85404bec42e2cbce892fd548b5c5ef6486d685cf0d66ff3ce651bf65a9479f5d6e10384fabe427159c54854132e76b722d20c3b280f6e7cf6ffcf9d0f492e543d980d3c7683f5b4956bf44d00d72eb936f8fba4cd7d83ec37382ab2b40ade7487929668ed757af10cfb30a9c2033df8414665ce150e6"}]}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0xa448, 0x4, 0xd9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x2}, {0x6, 0xe1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1, 0x2}, {0xc, 0xb, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xd1, 0x1}, {0x7fff, 0xfb, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="6cae928e", @TCF_META_TYPE_VAR="82bf707799", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="55a9b09b118ab34a"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="01326168dd69c582a5cb", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x489f}, "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"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xfffa}, {0x4, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff, 0x3, 0x9}, {0x6, 0x1ff, 0x6, 0x2}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x70}, {0x3, 0x6, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x9d}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa2}, {{0x3, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x6, 0x2}, {0x6, 0x5, 0x2}}}]}}]}]}, @TCA_CGROUP_EMATCHES={0x51c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x100}, {0x100, 0xff, 0x7, 0x4, 0xf, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x7}, {0x8, 0x0, 0x400, 0x1, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0x104, 0x1, 0x0, 0x0, {{0x7fff, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xc7, 0x5, "bf19699e1ffcc22704389c023468834b7a6f58d25b75a85e5bb82346ba7427a7a99e928cdb25c273aa2e900e54787d3fe8df9959c2663873a3922f52e4dfdef336a385308a368b14760c966791f4c1cfdf53e3f316e4e8c5c87738de0f7e0b0102013ea92c75ba4ebef3567759aec71dc3cf094b04398638598d117e46e1d1c0abf643571fdda38acdd863a5af2cdb94316c4b7d945238e5fc41c2353ffefe1485de76875e20e4d7aceb7580ebb8b4eb0790f00499a2e3486ae32a9c35ee98160b4156"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x24c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x4}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x752}, {0x2, 0x6ef1, 0x5, 0x133f}}}, @TCF_EM_IPT={0x124, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xc2f}, [@TCA_EM_IPT_MATCH_DATA={0x102, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xfff}, "4a1c67a98a7eb7bc5d3b4899e7b9deee76f14d5cd9b151be16094a11e91ea2d237f78272b5f2f3b2f11543364099ae9baf36f59589e00b9bd769b3101dda92c1463f7b1c"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe0c, 0x8, 0x1}, {0x800, 0x6, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x4}, {0x200, 0x400, 0xb11, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x8000}, "866a4f78c7418cc5f741d02e9434eb3f31e0c68383308353acf8d94783f647107c00b94bc10cbc849ee0de8687a03aa99f8bbb7c457fa0b85c82aa9955d44d8103316622ce9158f8c0cfa2ad00eb5fb4afeae17826837485615416d8f98095f3aab7a8aca17ea1839aaab6636b"}}]}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8001, 0x7, 0xfca}, {{}, {0x3, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x5}, {0xc47, 0xa, 0x1, "39f1f5ae400e799763d3"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5}, {0x5a30, 0x6, 0x2, "0979175d22b6"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x1ff}, {0x8, 0x5, 0x0, "cba6484ebc"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa6b, 0x8, 0xff}, {0xffffffffffffffff, 0x2, 0x3}}}, @TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x101}, "7b9cd234ba17a2549c868063dbc369c92614a4f272b037703dc982d10f073a9cd88499377a1d14a3bf01014ed81a266feb9b307a7fbf01d1e16a944a2583fb8b5e9e36a5d163db212e3bd3c34886ca2ecb3c9d37dd08afa2609a1b0a24c25eb3df5a19e9b596ab49136dfd48007df7496fa6106098aed7c20ea492e0236181154a3d18a7d24e3ef1a89db73b992f49dd9425fb87fdeb634b1c28906c058f08a45a810f09d72f13572f2127a08c"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x6}, {0x10001, 0xffffffff, 0x1, 0x1, 0x6, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa, 0x8, 0x1}, {0x4, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8178}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x0, 0x1729df2a, 0x80000001, 0x8, 0x257, 0xffffffff, 0x3, 0x32, 0x0, 0x14480b29, 0x2, 0x8, 0x8, 0x1, 0x8, 0x8, 0x6, 0x3, 0x6, 0x6, 0x4, 0xdef8, 0x6b0, 0x1, 0x80, 0x9, 0x2, 0xd8c, 0x1, 0xf, 0x7, 0x0, 0x0, 0x10000, 0x4, 0x6c100000, 0x2, 0x80, 0x6a5, 0x6006, 0x6, 0x1, 0x7, 0x1, 0x9, 0x1, 0x8, 0x101, 0x40, 0x6, 0x3, 0x8, 0xd01, 0xffffe14c, 0x10000, 0x9, 0x0, 0x674, 0x1, 0x4, 0x1, 0x8000, 0x426f, 0x5, 0x640, 0x4, 0x4, 0x5, 0x4, 0xd, 0x0, 0x3, 0xffffffff, 0x81, 0xffff8001, 0x6, 0x40, 0x4, 0x3, 0xec, 0x80000001, 0x9, 0x200, 0x1000, 0x5, 0x36a, 0x80, 0x3fe0000, 0x8, 0x0, 0x6a5f, 0xff, 0x6558, 0x4, 0x0, 0x0, 0x3, 0x9, 0x2, 0x0, 0x7, 0x80000001, 0x2, 0x6, 0xf790, 0x8, 0x0, 0xffffffff, 0xffff, 0x1, 0x8, 0x7079, 0x5, 0x9, 0x33d50a39, 0x200, 0x80000000, 0x5, 0x9f, 0x1, 0x6, 0x0, 0x100, 0x50, 0x6, 0x7, 0xfff, 0x9, 0x1, 0x10, 0xfffffff9, 0xfffffffc, 0x6, 0x282, 0xa, 0xffff, 0x6, 0x7ff, 0x2, 0x7, 0x0, 0x81, 0x2, 0x0, 0x1, 0x9, 0x0, 0x800, 0xc293, 0x2, 0x2, 0x9, 0x3, 0xfffffd38, 0x57a0, 0x5, 0x9, 0x8, 0x9, 0x7ff8000, 0x7d1, 0x0, 0x5, 0x5, 0xc00, 0x2, 0x200, 0x5, 0x3, 0x6, 0xe56, 0x200, 0x0, 0x9, 0x9, 0xff, 0x6, 0xf7, 0x7ff, 0x10000000, 0x101, 0x3, 0x3, 0x7fff, 0x80, 0x9, 0x3, 0x6, 0x0, 0x3, 0x0, 0x60, 0x84, 0xffffffff, 0x4, 0x0, 0x7, 0x3, 0x10000, 0x4, 0x4, 0x7, 0x1, 0x1ff, 0x815, 0x7, 0xd, 0x1, 0x10000, 0x1000, 0x8, 0x5, 0x20000, 0x2, 0x0, 0x0, 0x5, 0x9, 0x7fff, 0x400, 0x5, 0xffff, 0x7, 0x0, 0x10, 0xb70b, 0x3, 0x3, 0x9, 0x8, 0x1ff, 0xb4c2, 0x2, 0x4f80, 0x2, 0x8, 0x5, 0x3, 0x5ba1, 0x7, 0xa, 0xc0b, 0xfffffffe, 0x6, 0x3, 0x3, 0x1572, 0x6, 0x9, 0xf1, 0x6, 0x9, 0x9, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x37d0}}, 0x8d0)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10)
pipe(&(0x7f0000000140))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400))

7.198268043s ago: executing program 4 (id=4638):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406"], 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
fanotify_init(0x200, 0x0)
dup(r2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100))
socket$inet(0x2, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
pipe2$9p(&(0x7f0000000000), 0x800)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)

5.755230924s ago: executing program 3 (id=4641):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

5.69175867s ago: executing program 2 (id=4642):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
syz_clone(0x4600c91, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8a441, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000003, 0x13e})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, 0x0, 0x1)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
write$binfmt_misc(r3, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

5.602167532s ago: executing program 0 (id=4643):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x14305, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwritev2(r2, 0x0, 0x0, 0x800be6b, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f00000000c0)=0x80000000, 0x4)
socket$inet6(0xa, 0x5, 0x10000)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "da18999ed500a508", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "ac6e5073", "8bb12f4b0800"}, 0x38)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYRESDEC=0x0], 0x110}, 0x1, 0x0, 0x0, 0xc810}, 0x24000000)
set_robust_list(0x0, 0x0)
close(r4)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000fe80000000000000000000000000001a2703000000000000020000000000000000000000000000000000000000000000ff0f000000000000fcffffffffffffff0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000040000000000029bd7000000000000a0004010000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000380)={0x8, {"9f92f838632dd90ef328ca876c08dba979ecbcc7032e218265748944eec9bdbf3b72d84833ae854f8d9f4e552f5f87d653ad7d68ee7fcae92ca1807f625bb45134524543cf5f129c3485547a718290dc336f4e468d4d6c9e7e7e411e3d22ad65eaa84da786138dfe0b850a917543473d8c36f1f87cb76e833400a97eda2d0985d98dde1bc790d61db05ed4be3142ec839ecf501a1d22c9da977e17dfb0437166749673f75c501a1eb58a734bc45d070c1dd738289a6a4ae6fd4b16ed9cca7ff32fdee3e7bcedafc49f43132fba790592b784285d295bf38db31568c21447f8a6de7430439e01cca86c6fc8aa569153bdbd1e6cba388afc6951b4666ce8bb946778a1a37f4c1b647c46f7d285b7a6a2586b821bbec37f75f74a5d896f27fbd876fcdad2c7b2bfd2a71805de5969d64fb56280c4411ac07abd6b53ef0ad8c40e423d12a06b50f3d65c6d50d87e4c82c3b17eec3d602a1cbb452d4df92552c323e10af275457a26cc1617b1cf4c9245dd6cc80fb238c0c00959abc2dd0db65f6c24134a5b9337fc356346b667a89e6ddcfeed981cfaf5fa1bbfe046757cd3959d1eed0a805468121684b810b152f348e1834584c5b7a6def839af0098bb9d65f1ad2b8a8ab10eae92ac6d49f0ab1bceea0220db38baabddc523aecac940b7fc3af9e13ddc97909868e8c6c744a6117ed4107de7b99b1febd6b23aa5d0aa3fc1b264d16a928e94b85f98dc0076765068dd62a459452e226dd871e381f0498ab3a26604f5aa507a6a0f0dd821766eb941a45f5bcf33653ed9768559d53b082bb190e270a1cc34b0d559d965723db55b2bc943ec12a1bae18cb93064863b1806730662447725a08e032bae6df8d5652d2d6d9ccec7ba78749ba8328aa1f5be154f0518dfa057e6e6451096f8fa170c6c3d35c0d191b24a1201e66104c636ca0453be105133dceb590896504435c1e6fe6372d08d3b500da1d5b19502f92fef75a1aecb2b932c4cca34dc04bfba910dfee5a37de31c8207697c32c7ac17c8cad82453c38ffef7004b81fa75818388fb82a480d9c93258faba5a72ff66dda7f4e982e549a7f1de15eb390a8b3caef1940746cdd03c0a932df9de9e5de3f3ed1240d05c0d418740021cd13178b4f6b1aac3904559ea2c53d4ab6df8c32341e38ab5b1e783d48b13d2670b81e2f4227f919a7f6e4d00dd5b05bfac3fab8dccde2670ef9341e59091eed545090027370cf3bea9cc71e56035e92004fb760bf668fc6106a36a76a08f6c384643c13769fa5e9464046799a3e272a761027ce9e804efd07b8072d372fd023ee85e53b1dd45834dc8043cfd8e940608154dc49e3e5a13aa21457dc30281cb346eebc847d145c134520e77dbddcbec0dd48d88c79cc7476d6b09b7c83fafba049ee0797e14c06737b423415cacf8ecfa6641dbbcf6ff5c911fc26de34987c10cd1de2b1017309a3dca062bcd6da885f3e473ba8bd4698ef9f9f3f85ac6bca2db8b8b0ca6d49e09e02bd27ce87942ebdfe1f5e0437e3768a7fd892797c7c4e36c1355be8a68e7f5098ac2656a8d2732be3ebdbc88c4ccbe534ce340b8926cefbd1e451bab04432e8e4e52379b2abfb35baeb6ec82178096a76110d0668fb0af533011d3978264213e0666ff3aaa06cd46afcc9c96727125102547750966d89248003a68ee279d601a9abe6c84752cde8ff718c2daedf54cf6532b49b3222f220a33c3babc73a4884118be13447d7bf566dda076693c905b10396bed1732c3b2311d6b8682dea83385a22cdb487b89c2bceaffe540b4dfc4baf6c47574389752f491b785107eddfec004f04fa834572897bd67e0253f06a53bec9631befaba73b9cfe933741de268749d77d715ddce251f0e5337236f9e772e34ee627be07a8d6dda577663cc7ab90d27d6535af0c17f3dde13bb9c325cd077eed3695649a2136cc8cafa6a7958d404201c204a4cbf65ce5c7b280f991783feea5c94bedb2ddb858d276be334c24326ecbbfbfdba635b1d4cf335147b0d1ad226893b8b4d7c6dd9c791c1bf15040ba57e724752656b973f87abc834cc4d0e50addba3fd1663022498f840f9e7e1b4f6c2c410a9e90c4f2605a9cfb12570058fe58234b3d4eab43caa9ed8df639a25c014a10491faa56a133499556e87ce79ae0515ff4e457ec7aa1a3eb1c285372c8dbf32c103083f9f67425555c36b91881f0581b3522aff8b968386aeb26a003af74963710f89e6c8474658b0cf3b644fd47e543f16c597d2c4ff87d14ce3d6d62b52754b0e73cc74f4aeb5146d62280bd9cf94ba9ce1b2ce511c0a23d2cccc9a9b7e19a1d7ffcf95f7e08356cfd40752cdf81977e706ee9bf15a6822fcaea2f8afd167450e00c70cbd7a6e6aea1a9c6941b01453c2c29dd06f730b7e9dfb7016a4948bf4c8b27f3bab968419858cd4575889be2bd9bf5428b584a356cc78fbdc5da3e576cebcc9bfb0db857b587a7d881506932ba05999608038d941521546ae0cf6e4bcdfb9a130630846354b5189aa4a078aaa6a698ced6b4e9d887c0ce7e9136d7299747a240dbfc3dc199fb8d22e7fb808e6e4322b4ad32afc12c967f4d3a0dd18c631ce20666837f9efea42c6117462377ba4d23b18e6b2cdda8f776fe9f2005a9dbaa08753bdc4e4c7852ba890ccf0c7ea83a6c6c105ab34c6924b61e810ca1f3deef409498cb8fc2f63d972088731afd79c91728865e113f773b13c7cf044d02f54b52c0da944918c919b25d02c9d34e225888e35e715f1d13664d4a99018036e438342dbaf822ea7b0facce80578fee23e6bc5ec037591ef93de60d97874a909779925238431adb3f0e4fcf9c7b938a352fb984e4cd74668af1abea474d10191e503b5b6ac736deebd5f2f19d496316f0a5c277af8f5c9064b4f5c2f29bc4edd0fd500cb751617d254ca1b3897ef116fafd87c48a6b803d600806cc8f144c8b1cff082524f7dfaad373a6d84b82312cc9a1c825c10070fd953856886251566c875493d4f4d80073c615ef11def0700a8e23967326dfc75a74dbd57354fffb2caf3c3462d045b01f83124d380ee917e7167ee80a0cd1267af9a63146952eaa3be61825ab9cfbd91e233d70111fa4484e7f4eb88f00d3016de6f68725122a2e94256f2fc82e49d295e345e70ae7925d3a04ff65293f7b9a601747d9467661e1ad6e10d01bccc86cc60c39b312dd292eb90106634167ded53aa6192dcabcb2efe46a41a0855c9ba4130824b84ff558924c45383d32429b7f20ae92e76d4ae608afa218997d3117c0f4f921fa6b4b8e8e8289c64feb650186de44a4fa779dc7c65df2c79972d232b335b507d0882ce8470680b6850038a29bf4cc37ee9797a9de0f1863b4de664573c5a2add30b28dafc0d1320237a99deb0884494947058b61a07422064627f64a15145f1febd7ed58e696fd1e0d1958016dca5f26f8745e0657af408754e9d7c60252f2607488cc8a6647919c9b406b9c98215aa2c1f31154e13f877c3f45b4f1f89b0a18f83f41ea8d6ce81cb4022d1863bcaa954780789862c1955940de4cf4e809dbe7861c9916f6b6685396679edf7e3f1200172172a2c140463c73de5b0f79e54687630949ff1023ce324fef6aba8c789557f5151859f76748955f82a7585fa204b6167b4dac42c965e7769a49a26ba22ef3f91f2962f15fc2c18883e7fdcb5dc846496e321420b7dbc4c8e4056a94e2760e227d53d015556cc01ffd76f8177cacf397be0fac0dea4dadb645dc2e5d87a9870c596fdb8dd0a632ceacbfb4bd5c4f6582dff49cd1504c9f4feddff9201595cce7dd1cb60ab58780715d9752afa505cdaab19771d3f1ccc3e365f0e79f55d85ae69a9e3352dc91cfebe9c073d9f97f4cc0b0fa11fcc478efafad412a994659614d483ff4b480302f49b85e2f1095e17e163511f60ac9b015fa0df1b3a4836def50d8063cd55839c20c652530c1b21713111266f68ab62bce2d800f71eee84db8d886ab32426616cbb5338d9419c1d605056f3aebf9475e9a28573c4e5ad420991d7d9a688324d766a4422115032f3d5f20cbb114f301c5f7d806703ba72defa4f2149c315ac4d2e41a919e479b172efb0e7706779569d940e549b4680201aa22c8451e9aa62f74e480c8c2eb7df0a7503bc54257042935a5e91ec52c9908acf6de5e5c597cfecae4cd7219125571939d4fb6628c1f151ed883fb86569f7224ee46254f7863592d19a948bc2d41ca33080c734a5e0485dec97889d4c8f82243c7514b119b861fcbbf16a5f7573ff86645393ba1258bb29f3e48a1b9ccf970bbd9f2753c69a64a5105fed1d3f30696e3e1781d636d8466f4d5027801bd511c54d8062366473511336b14e272080df80146f81a70389f2b83cacee34cf051c3571d867e079cad8fa09e78754b255736bba6b5b694911feb776dcd42219f54152f5581936e7354393e39d53316e921edb453ad3b14ad5529f721d4854c2bbf306e241026d0fedfddfe38c38ca2130b07b7c19e16f261640b16ea7fc96b2e8eace3a070652733b6c6ebbd28d11c9189614ff66410737c1157c392c8d2dcadf5cc7fb51ba38777e28cd63dd5faf49ed24b66bbac56d15c62b106e45f85771ab5eb513f627b4fd72fabb7ac76383e92254787c5a745e8e3ebd3bf1aacf59f186cd4c44e2255f2abdb1232109be0f46871ff3d658b8ae70f5a720d356aefb97349def0ca7c1650b5491636e0bec3ecdbb7d16815890134630cae00e218550d0b4e665a4f8f370e25b9cf5acc822c125d8532416e53987511665da49aab6a28f0a8c5250c7fbcf369e958ad84d2f372e3516b284167e78af82980076cbae4a504d26fa68dc9596d56146bf4ac55611965ec963574934b11ca453e782790ffdafde82ca1d53f387e75863b72ba2ca1de6e5dcc0b046b217a1a357cbdc3c4980dc4be7905410a0142ce40e33bdd24671a77c423c88d2d211b1ce1bbccbb878963f79f7d6e2e01cbf0778cd69687ac2171f50a5c3c8d05a4d354016450a1cb3b65d79bd13d6524039f64e1b6b78c8cc508f5890072140584e111bb86000000000000da96ed848bda034a68888cb77e271cfa3d7ce6fd3dc675543b28dfaf6a928be4fdfa99b9619b9cba83d76d17880fad4d04b4ac938a305c9ad7580ea36e3bf80ccd410c34e38f011b5cb763a26c7f5d2f868ba69d29e22a77d0de2db0fdd4b0c4ffa6442f64ce2fc0095dec1c4f2cedb2fcd3b59ea74a910c819735c38fa1516a2844b3bcf29ae7be59e6dcf19cdc243233a3d2568bd3ca9e61fda940fd4d4133848d218d97da94ce5374b593f7da822eb173cdb37c1fae97f738050f627092d9a83247d8b4fe1ffafadff48f48299d6efe573f0c45f42c5483a2c01550184f00a1edfdacf22cd88a1bec227972e7cdee39eac7a276977fb1bba4487f5f6972fdc208b68db78cfcc49d9737c0b000c109e041519ada5c3665fc6f6ceb3df541d1e68ebc49798d9ea400f3d455e7a925b12c84c040fe497e888e42f11a0c27281921c903cfe97ddb37ac0a69a98363a46a0b0ba797bfcb9e5c8e69eccd9126f2a60d775523b47998738d06beec73eaaf689667bccd3099313b6e0a3f04725d383b19562245d5b66f4bdcdb63b8efa2fed79d6ab2075468ac4d1cfe80885bc5ccccf758b051137e3db3f70e827c336f31939facce887522d2be4f5be06f789ddf549e5800a60cea75c202ece45a707cd57f6fdea7db23c5c965397207848f2226869aa02c7e45c36ab290f65dedb62f87adccadf269cd6c470d06d9", 0x1000}}, 0x1006)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)

5.593000932s ago: executing program 3 (id=4644):
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={<r4=>0xffffffffffffffff}, 0x111, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48)

4.719206368s ago: executing program 2 (id=4645):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2e00000010"], 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)

4.410280386s ago: executing program 3 (id=4646):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
cachestat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020, 0x0, <r8=>0x0}, 0x2020)
r9 = getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2000)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000001500)={0xa0, 0xfffffffffffffff5, r8, {{0x1, 0x0, 0xe, 0x7c, 0x8872, 0xfffffacd, {0x5, 0x854, 0xb, 0x7b1, 0x80000000, 0x8, 0x7, 0x6, 0x8, 0x1000, 0x9, r9, r10, 0x9, 0x3}}, {0x0, 0x7}}}, 0xa0)
write$6lowpan_control(r6, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r11 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="059900f3ffffff11"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

4.364920354s ago: executing program 5 (id=4647):
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')
r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r2, 0x2007ffc)
write$binfmt_register(r2, &(0x7f0000000380)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/dev/sequencer\x00', 0x3a, 'tmpfs\x00', 0x3a, './file0'}, 0x3c)
sendfile(r2, r2, 0x0, 0x800000009)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000160a0102000000000000200003000002140000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)

4.282662778s ago: executing program 2 (id=4648):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xf4}, {&(0x7f0000000480)=""/154, 0x9a}], 0x2}, 0x81)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newchain={0x90, 0x64, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xa, 0xcf0cb0de83c21c32}, {0xf, 0x6}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x40, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x90}}, 0x4080000)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
unshare(0x2040400)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3.78604943s ago: executing program 4 (id=4649):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000380)=0x4, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000c000000000000ff07000000000000000000000000000003aca6c0e10afc48d444129e304a2a7983ed04c43b9d859838fabbeddde5fbe3f84d24874e2717ac5f285bf3975ce5fc8a8353cd392b3f5f209dbfbd234fd8bf38198a7f85ab4a909ae18eb837f9e7a5a66dce4da6ac802977fb026d73140c1253b7e1243d3ea64371735a1460a50a6869ed7bc2e6aa00"/162, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r3}, &(0x7f0000000500), &(0x7f00000001c0))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1709bf0000000000000101000000080009000200000014001f00000000000000000000000000000000011400201000000000000000000000ffffac1414bb050007000000000008000a0004000000a006924b5bedfa06"], 0x54}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECUREBITS(0x1c, 0x2d)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}})
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})

3.385265396s ago: executing program 5 (id=4650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x6, 0x4, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xd1bd}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xe3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102000000000000000002f700000900020073797a31000000000500010007000000280007800c00018008e40140a2c568019d0de39f8400000006404e2200001a2f0500007132fd1e0151553d970a4c4eb76592bc7b6980"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
dup2(r0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

3.190226031s ago: executing program 2 (id=4651):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_clone3(&(0x7f0000000600)={0x200000000, 0x0, 0x0, &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/202, 0xca, &(0x7f00000004c0)=""/250, &(0x7f00000005c0), 0x0, {r2}}, 0x58)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0xffc0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c400943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf45b665d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad7", 0xb8}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2ba}], 0x4}}], 0x2, 0x4048884)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xb337b000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0x9)
fcntl$addseals(r5, 0x409, 0xc)

2.121547956s ago: executing program 5 (id=4652):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000004780)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000380)=""/10, 0xa}], 0x2, &(0x7f0000000600)=""/210, 0xd2}}, {{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000000500)=""/55, 0x37}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000700)=""/43, 0x2b}], 0x4, &(0x7f0000000780)=""/41, 0x29}, 0x2}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/105, 0x69}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/119, 0x77}, {&(0x7f0000000a40)=""/235, 0xeb}], 0x4, &(0x7f0000000b80)=""/221, 0xdd}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000c80)=""/13, 0xd}, {&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000000d80)=""/71, 0x47}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/207, 0xcf}, {&(0x7f0000002040)=""/185, 0xb9}, {&(0x7f0000002100)=""/231, 0xe7}], 0x9, &(0x7f00000022c0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/179, 0xb3}, {&(0x7f0000003380)=""/40, 0x28}], 0x2, &(0x7f0000003400)=""/175, 0xaf}, 0x2}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000034c0)=""/234, 0xea}, {&(0x7f00000035c0)=""/34, 0x22}, {&(0x7f0000003600)=""/132, 0x84}, {&(0x7f00000036c0)=""/109, 0x6d}, {&(0x7f0000003740)=""/109, 0x6d}], 0x5, &(0x7f0000003840)=""/221, 0xdd}, 0x5}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003940)=""/215, 0xd7}, {&(0x7f0000003a40)=""/103, 0x67}], 0x2, &(0x7f0000003b00)=""/165, 0xa5}, 0x9}, {{&(0x7f0000003bc0)=@can, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c40)=""/205, 0xcd}, {&(0x7f0000003d40)=""/153, 0x99}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/2, 0x2}, {&(0x7f0000003e80)=""/24, 0x18}], 0x5, &(0x7f0000003f40)=""/97, 0x61}, 0x6}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003fc0)=""/141, 0x8d}, {&(0x7f0000004080)=""/141, 0x8d}, {&(0x7f0000004140)=""/24, 0x18}, {&(0x7f0000004180)=""/87, 0x57}, {&(0x7f0000004200)=""/78, 0x4e}, {&(0x7f0000004280)=""/228, 0xe4}, {&(0x7f0000004380)=""/187, 0xbb}], 0x7, &(0x7f00000044c0)=""/78, 0x4e}, 0x4}, {{&(0x7f0000004540)=@qipcrtr, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/78, 0x4e}, {&(0x7f0000004640)=""/57, 0x39}, {&(0x7f0000004680)=""/34, 0x22}], 0x3, &(0x7f0000004700)=""/94, 0x5e}, 0xc}], 0xa, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
r3 = io_uring_setup(0x2c93, &(0x7f0000000100)={0x0, 0x20f0ce, 0x1, 0xfffffffc, 0x14})
io_uring_enter(r3, 0x0, 0xcb, 0xf, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
syz_open_dev$sndmidi(&(0x7f0000000100), 0x9, 0x4002)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)

1.708429478s ago: executing program 4 (id=4653):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
creat(0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r7, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0)

958.263174ms ago: executing program 5 (id=4654):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

848.304744ms ago: executing program 5 (id=4655):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6)
rename(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x287}}, @cpuid={0x14, 0x18, {0x80e, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0xc}}, @wr_crn={0x46, 0x20, {0x3}}, @code={0xa, 0x55, {"460f01ca66baa000b800000000ef66460f2844d0838f2978d14970b9800000c00f3235000100000f300f001f0f22620f3543d9e966baf80cb824cb9189ef66bafc0c66ed"}}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x67, {"c463dd7bda00b950030000b84c000000ba000000000f30f246f436440f01c9400f4a84ba688a0000460f01c5410f01c9460f01c3c74424005d000000c7442402092df399c7442406000000000f011424660f3881432c"}}, @wr_crn={0x46, 0x20, {0x0, 0x6472}}, @cpuid={0x14, 0x18, {0x6, 0x93b1}}, @code={0xa, 0x44, {"470f01ca0fae0cff470f01c9420f0766ba4300b80d000000ef66440f11ae0000ffff0f08b8010000000f01d9420f01cf0f2317"}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x879, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9a1, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @wrmsr={0x1e, 0x20, {0xbfd}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xac9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x4b, {"c4c3dd79a83e0a0000c9410f005a0066ba200066b8d81266ef2e67440fc72ceb66b837000f00d8430f2012400f01c8650f01c80f01c8640f01cf"}}, @code={0xa, 0x62, {"66ba4000ec0fa3da48b800380000000000000f23d00f21f835000000050f23f8c7442400fd000000c7442402f0270000ff1c2466b814000f00d00fc79e00000000f4c4411012ed660f3835c126400f01da"}}, @wr_crn={0x46, 0x20, {0x0, 0x4d}}, @uexit={0x0, 0x18, 0xb24}, @wrmsr={0x1e, 0x20, {0x8f8, 0xfffffffffffffffc}}, @code={0xa, 0x72, {"2e0f79ff2e0f2286b9800000c00f3235008000000f3048b887978b48000000000f23c00f21f835010005000f23f844f69b0a00000066ba410066b8943a66eff047f71ab9a1080000b80f000000ba000000000f300f20e035000001000f22e00f30"}}, @code={0xa, 0x6f, {"f20f01df66bad10466edb91b0b0000b87b00c0feba000000000f30b9800000c00f3235002000000f30b8010000000f01d966baf80cb80cdceb8eef66bafc0cedde2eb8010000000f01c166baa00066b82a0066ef66ba420066b8760066ef"}}], 0x496})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="2e00000010"], 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)

644.161854ms ago: executing program 4 (id=4656):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000340))
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
close(r8)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1)
mount(&(0x7f0000000280)=@filename='./file0\x00', 0x0, &(0x7f0000000080)='ubifs\x00', 0x200840, 0x0)

237.633668ms ago: executing program 3 (id=4657):
creat(&(0x7f0000000400)='./bus\x00', 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000008c0)="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", 0x21c}, {&(0x7f00000005c0)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xeb}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71", 0x7c}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec", 0x43}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000380)="23c8f8e7bb8d0ba65b2d53e0b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f213803b86fb8199b61a03a809c262c343c62df5856dc1d3c7dd7eeb196d", 0x4a}], 0x6, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)

196.727106ms ago: executing program 5 (id=4658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
creat(0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r10=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r8, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r3, 0x0, 0x0, 0x10062, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

126.396329ms ago: executing program 2 (id=4659):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406"], 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
fanotify_init(0x200, 0x0)
dup(r2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100))
socket$inet(0x2, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
pipe2$9p(&(0x7f0000000000), 0x800)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)

0s ago: executing program 0 (id=4660):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1}, &(0x7f0000000240)=0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0xf)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r3, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20018080}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5}, 0x50)

kernel console output (not intermixed with test programs):

5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1216.644438][T15268] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[ 1216.723959][   T30] audit: type=1326 audit(1758225289.328:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1216.782871][   T30] audit: type=1326 audit(1758225289.328:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1216.873071][T15268] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1216.894105][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1217.012841][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1218.022742][   T30] audit: type=1326 audit(1758225289.328:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1218.176403][T15268] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1218.194597][   T30] audit: type=1326 audit(1758225289.328:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1218.219085][   T30] audit: type=1326 audit(1758225289.328:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1218.220029][T15268] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1218.274695][   T30] audit: type=1326 audit(1758225289.328:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1218.334567][T15268] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1218.361080][T15268] usb 3-1: Manufacturer: syz
[ 1218.374478][   T30] audit: type=1326 audit(1758225289.328:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1218.409458][T15268] usb 3-1: config 0 descriptor??
[ 1219.147419][T21580] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4109'.
[ 1219.221684][T21579] overlayfs: missing 'lowerdir'
[ 1219.254526][T15268] rc_core: IR keymap rc-hauppauge not found
[ 1219.270792][T15268] Registered IR keymap rc-empty
[ 1219.284954][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1219.305073][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1219.335263][T15268] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1219.443891][T15268] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input84
[ 1219.602419][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1219.666708][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.084872][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.373381][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.434293][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.565073][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.595269][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.625308][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.644604][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.668800][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1220.752013][T15268] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1220.769014][T21605] overlayfs: failed to resolve './file1': -2
[ 1220.929338][T21605] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4116'.
[ 1221.004288][T15268] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1221.187690][T17345] usb 3-1: USB disconnect, device number 70
[ 1222.523935][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'.
[ 1222.533510][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4125'.
[ 1223.116564][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4126'.
[ 1223.538207][T21655] qnx6: unable to read the first superblock
[ 1223.579840][T21655] lo speed is unknown, defaulting to 1000
[ 1223.585985][T21655] lo speed is unknown, defaulting to 1000
[ 1223.598486][T21655] lo speed is unknown, defaulting to 1000
[ 1223.627360][T21655] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1223.677769][T21655] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1223.782066][T21655] lo speed is unknown, defaulting to 1000
[ 1223.795263][T21655] lo speed is unknown, defaulting to 1000
[ 1223.802543][T21655] lo speed is unknown, defaulting to 1000
[ 1223.809398][T21655] lo speed is unknown, defaulting to 1000
[ 1223.832052][T21655] lo speed is unknown, defaulting to 1000
[ 1223.838531][T21655] lo speed is unknown, defaulting to 1000
[ 1223.845152][T21655] lo speed is unknown, defaulting to 1000
[ 1223.851643][T21655] lo speed is unknown, defaulting to 1000
[ 1223.858206][T21655] lo speed is unknown, defaulting to 1000
[ 1223.864632][T21655] lo speed is unknown, defaulting to 1000
[ 1226.579744][T21703] netlink: 'syz.0.4140': attribute type 4 has an invalid length.
[ 1226.622106][T21703] netlink: 'syz.0.4140': attribute type 4 has an invalid length.
[ 1226.674875][T15268] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1226.866304][T15268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1226.877452][T15268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1226.893983][T15268] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1226.903514][T15268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.921756][T15268] usb 4-1: config 0 descriptor??
[ 1227.017486][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 1227.017501][   T30] audit: type=1326 audit(1758225300.028:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.164130][   T30] audit: type=1326 audit(1758225300.068:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.189345][   T30] audit: type=1326 audit(1758225300.068:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.250061][   T30] audit: type=1326 audit(1758225300.068:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.274621][   T30] audit: type=1326 audit(1758225300.068:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.609043][   T30] audit: type=1326 audit(1758225300.088:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.699712][T21711] binder: 21705:21711 ioctl c0306201 200000000540 returned -22
[ 1227.734400][   T30] audit: type=1326 audit(1758225300.088:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.833120][T21710] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1227.841984][T21710] overlayfs: failed to set xattr on upper
[ 1227.883392][T21710] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1227.909908][   T30] audit: type=1326 audit(1758225300.088:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1227.921146][T21710] overlayfs: ...falling back to index=off.
[ 1227.943129][T21710] overlayfs: ...falling back to uuid=null.
[ 1228.054461][T21710] overlayfs: maximum fs stacking depth exceeded
[ 1228.159584][T15268] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001D/input/input85
[ 1228.187464][   T30] audit: type=1326 audit(1758225300.088:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1228.237235][T15268] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001D/input/input86
[ 1228.331825][   T30] audit: type=1326 audit(1758225300.088:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1228.355850][T21696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1228.361611][T15268] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001D/input/input87
[ 1228.380262][T21696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1228.509711][T21721] syzkaller0: entered promiscuous mode
[ 1228.527772][T21721] syzkaller0: entered allmulticast mode
[ 1228.535355][T15268] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001D/input/input88
[ 1228.639997][T15268] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[ 1228.775507][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1228.792512][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1229.503983][T21740] fuse: Bad value for 'fd'
[ 1230.085004][ T5911] usb 4-1: USB disconnect, device number 106
[ 1230.606084][T17345] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1230.970105][T17345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1230.995659][T17345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1231.025118][T17345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1231.126963][T21763] overlayfs: missing 'lowerdir'
[ 1231.160116][T17345] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1231.193175][T17345] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1231.258506][ T5911] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1231.613424][T17345] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1231.646726][T17345] usb 6-1: Manufacturer: syz
[ 1231.663316][T17345] usb 6-1: config 0 descriptor??
[ 1231.774604][ T5911] usb 3-1: Using ep0 maxpacket: 8
[ 1231.784574][ T5911] usb 3-1: too many configurations: 255, using maximum allowed: 8
[ 1231.841330][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.918577][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.935662][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.947876][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.959547][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.973074][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.993540][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.014636][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.038957][ T5911] usb 3-1: New USB device found, idVendor=22b8, idProduct=2377, bcdDevice=f2.ab
[ 1232.054236][ T5911] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255
[ 1232.067810][ T5911] usb 3-1: Product: syz
[ 1232.071964][ T5911] usb 3-1: Manufacturer: syz
[ 1232.091485][ T5911] usb 3-1: SerialNumber: syz
[ 1232.117327][ T5911] usb 3-1: config 0 descriptor??
[ 1232.124408][T17345] rc_core: IR keymap rc-hauppauge not found
[ 1232.151263][T17345] Registered IR keymap rc-empty
[ 1232.209558][   T30] kauditd_printk_skb: 132 callbacks suppressed
[ 1232.209574][   T30] audit: type=1326 audit(1758225305.218:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1232.379156][   T30] audit: type=1326 audit(1758225305.218:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1232.471058][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1232.488436][T15268] usb 3-1: USB disconnect, device number 71
[ 1232.510430][   T30] audit: type=1326 audit(1758225305.218:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9612d8e7ab code=0x7ffc0000
[ 1232.565097][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1232.605411][T17345] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1232.655700][T17345] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input89
[ 1232.910817][ T5926] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1232.925932][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1232.961292][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1232.973029][   T30] audit: type=1326 audit(1758225305.978:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9612dc1465 code=0x7ffc0000
[ 1233.004927][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.038016][T21784] netlink: 'syz.3.4162': attribute type 10 has an invalid length.
[ 1233.047371][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.054666][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1233.094416][ T5926] usb 1-1: Using ep0 maxpacket: 16
[ 1233.107183][ T5926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1233.116840][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.134153][ T5926] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1233.154713][   T30] audit: type=1400 audit(1758225306.158:3219): avc:  denied  { read append } for  pid=21783 comm="syz.3.4162" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1233.156907][T21784] team0: Port device wlan1 added
[ 1233.188871][ T5926] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1233.199130][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.229491][ T5926] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1233.243892][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.257817][   T30] audit: type=1400 audit(1758225306.158:3220): avc:  denied  { ioctl open } for  pid=21783 comm="syz.3.4162" path="/210/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1233.298077][ T5926] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1233.308104][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.342270][ T5926] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1233.384154][T21789] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1233.405895][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.413837][ T5982] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1233.432587][   T30] audit: type=1326 audit(1758225306.198:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1233.456121][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1233.462716][ T5926] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1233.474081][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.494588][T17345] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1233.515696][T17345] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1233.528539][T17345] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1233.546622][ T5926] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[ 1233.844989][   T30] audit: type=1326 audit(1758225306.198:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21744 comm="syz.5.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1233.962645][ T5926] scsi host1: usb-storage 1-1:1.0
[ 1234.161831][ T5926] usb 1-1: USB disconnect, device number 75
[ 1234.240682][ T5919] usb 6-1: USB disconnect, device number 2
[ 1235.286014][T21812] netlink: 'syz.5.4167': attribute type 4 has an invalid length.
[ 1235.301759][T21812] netlink: 'syz.5.4167': attribute type 4 has an invalid length.
[ 1235.476395][T16359] Bluetooth: hci4: command 0x1003 tx timeout
[ 1235.486911][T20138] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1236.156505][T21828] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4173'.
[ 1236.624459][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'.
[ 1237.547948][T21841] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1237.712208][T21843] SELinux: failed to load policy
[ 1238.054562][T20138] Bluetooth: hci6: link tx timeout
[ 1238.060585][T20138] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.077696][T16359] Bluetooth: hci6: link tx timeout
[ 1238.082820][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.092842][T16359] Bluetooth: hci6: link tx timeout
[ 1238.099128][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.109805][T16359] Bluetooth: hci6: link tx timeout
[ 1238.114986][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.122788][T16359] Bluetooth: hci6: link tx timeout
[ 1238.128109][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.137227][T16359] Bluetooth: hci6: link tx timeout
[ 1238.142338][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.151034][T16359] Bluetooth: hci6: link tx timeout
[ 1238.156279][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.166657][T16359] Bluetooth: hci6: link tx timeout
[ 1238.171755][T16359] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1238.445002][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.599832][T21857] netlink: 'syz.0.4182': attribute type 4 has an invalid length.
[ 1238.622282][T17345] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1238.673608][T21860] netlink: 'syz.0.4182': attribute type 4 has an invalid length.
[ 1238.898417][T17345] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1238.908021][T17345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.916640][T17345] usb 3-1: Product: syz
[ 1238.933537][T17345] usb 3-1: Manufacturer: syz
[ 1238.944817][T17345] usb 3-1: SerialNumber: syz
[ 1239.294415][T15512] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1239.305568][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 1239.315863][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 1239.325028][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 1239.334155][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 1239.624571][T15512] usb 6-1: Using ep0 maxpacket: 8
[ 1239.638628][T15512] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1239.656405][T15512] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[ 1239.674379][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1239.688695][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1239.700739][T15512] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[ 1239.715396][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1239.726086][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 17794, setting to 1024
[ 1239.740419][T15512] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[ 1239.753814][T15512] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1239.764668][T15512] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.772733][T15512] usb 6-1: Product: syz
[ 1239.778405][T15512] usb 6-1: Manufacturer: syz
[ 1239.783501][T15512] usb 6-1: SerialNumber: syz
[ 1239.789920][T15512] usb 6-1: config 0 descriptor??
[ 1239.795849][T21864] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1239.803212][T21864] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1239.813481][T15512] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1239.968387][T21875] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1240.012735][T15268] usb 6-1: USB disconnect, device number 3
[ 1240.083748][T17345] rtl8150 3-1:1.0: couldn't reset the device
[ 1240.093891][T17345] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[ 1240.122814][T16359] Bluetooth: hci6: command 0x0406 tx timeout
[ 1240.427233][ T5911] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1240.666584][ T5911] usb 4-1: Using ep0 maxpacket: 8
[ 1240.741193][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1240.754866][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1240.768545][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1240.845609][T15268] usb 3-1: USB disconnect, device number 72
[ 1240.859288][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1240.910956][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1240.942301][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.151731][T21903] FAULT_INJECTION: forcing a failure.
[ 1241.151731][T21903] name failslab, interval 1, probability 0, space 0, times 0
[ 1241.175888][T21903] CPU: 0 UID: 0 PID: 21903 Comm: syz.0.4197 Not tainted syzkaller #0 PREEMPT(full) 
[ 1241.175914][T21903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1241.175923][T21903] Call Trace:
[ 1241.175930][T21903]  <TASK>
[ 1241.175936][T21903]  dump_stack_lvl+0x16c/0x1f0
[ 1241.175961][T21903]  should_fail_ex+0x512/0x640
[ 1241.175981][T21903]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1241.176006][T21903]  should_failslab+0xc2/0x120
[ 1241.176026][T21903]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1241.176043][T21903]  ? __alloc_skb+0x2b2/0x380
[ 1241.176065][T21903]  __alloc_skb+0x2b2/0x380
[ 1241.176083][T21903]  ? __pfx___alloc_skb+0x10/0x10
[ 1241.176105][T21903]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1241.176133][T21903]  netlink_alloc_large_skb+0x69/0x130
[ 1241.176157][T21903]  netlink_sendmsg+0x6a1/0xdd0
[ 1241.176183][T21903]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1241.176215][T21903]  ____sys_sendmsg+0xa98/0xc70
[ 1241.176242][T21903]  ? copy_msghdr_from_user+0x10a/0x160
[ 1241.176269][T21903]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1241.176303][T21903]  ___sys_sendmsg+0x134/0x1d0
[ 1241.176318][T21903]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1241.176349][T21903]  __sys_sendmsg+0x16d/0x220
[ 1241.176364][T21903]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1241.176387][T21903]  do_syscall_64+0xcd/0x4e0
[ 1241.176403][T21903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1241.176415][T21903] RIP: 0033:0x7f33ae78eba9
[ 1241.176425][T21903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1241.176436][T21903] RSP: 002b:00007f33af628038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1241.176447][T21903] RAX: ffffffffffffffda RBX: 00007f33ae9d5fa0 RCX: 00007f33ae78eba9
[ 1241.176454][T21903] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[ 1241.176461][T21903] RBP: 00007f33af628090 R08: 0000000000000000 R09: 0000000000000000
[ 1241.176468][T21903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1241.176474][T21903] R13: 00007f33ae9d6038 R14: 00007f33ae9d5fa0 R15: 00007ffcd7e9c058
[ 1241.176488][T21903]  </TASK>
[ 1241.442984][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'.
[ 1241.654506][ T5911] usb 4-1: GET_CAPABILITIES returned 0
[ 1241.673771][ T5911] usbtmc 4-1:16.0: can't read capabilities
[ 1241.807423][T21877] ip6gretap0 speed is unknown, defaulting to 1000
[ 1242.021819][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1242.079291][ T5911] usb 4-1: USB disconnect, device number 107
[ 1242.099360][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4189'.
[ 1242.162908][T21905] usbtmc 4-1:16.0: Unable to send data, error -71
[ 1242.204485][T17345] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[ 1242.242713][T21915] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1242.333404][   T30] audit: type=1326 audit(1758225315.298:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.405168][T21877] lo speed is unknown, defaulting to 1000
[ 1242.426916][T17345] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1242.447682][T17345] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[ 1242.574454][T15268] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[ 1242.589177][T17345] usb 1-1: config 0 has no interface number 0
[ 1242.595822][   T30] audit: type=1326 audit(1758225315.298:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.620222][   T30] audit: type=1326 audit(1758225315.298:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.644219][   T30] audit: type=1326 audit(1758225315.298:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.670337][   T30] audit: type=1326 audit(1758225315.298:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.672912][T17345] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1242.771918][T15268] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.791979][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1242.823905][   T30] audit: type=1326 audit(1758225315.298:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1242.891642][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1242.911088][T17345] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1242.933995][T17345] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1242.992019][T15268] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1243.074272][T21924] overlayfs: failed to resolve './file1': -2
[ 1243.095890][T21924] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4202'.
[ 1243.107065][   T30] audit: type=1326 audit(1758225315.298:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1243.327311][T15268] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1243.337979][T15268] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1243.339818][T17345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1243.346085][T15268] usb 3-1: Manufacturer: syz
[ 1243.347432][   T30] audit: type=1326 audit(1758225315.298:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1243.384145][T15268] usb 3-1: config 0 descriptor??
[ 1243.421206][   T30] audit: type=1326 audit(1758225315.298:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1243.611387][T17345] usb 1-1: config 0 descriptor??
[ 1244.490139][   T30] audit: type=1326 audit(1758225315.298:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f367c18eba9 code=0x7ffc0000
[ 1244.773317][T21909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1244.786304][T15268] rc_core: IR keymap rc-hauppauge not found
[ 1244.795413][T15268] Registered IR keymap rc-empty
[ 1244.809114][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1244.850902][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1244.872843][T21909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1244.960263][T15268] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1244.998882][T15268] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90
[ 1245.065430][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.155102][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.178463][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.194847][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.215298][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.244775][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.268749][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.290900][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.314620][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.334662][T15268] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 1245.356768][T15268] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1245.356808][T15268] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1245.443371][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1245.444042][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1245.444546][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1245.444769][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1245.831530][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4208'.
[ 1246.178654][T17345] usb 1-1: USB disconnect, device number 76
[ 1247.332056][T21958] dvmrp0: entered allmulticast mode
[ 1247.348342][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4209'.
[ 1247.389457][T21958] netlink: 'syz.4.4211': attribute type 4 has an invalid length.
[ 1247.426803][T21958] netlink: 'syz.4.4211': attribute type 4 has an invalid length.
[ 1247.601788][T15268] usb 3-1: USB disconnect, device number 73
[ 1247.603022][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'.
[ 1247.696720][T21958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1247.703994][T21958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1247.854182][T21978] overlayfs: missing 'lowerdir'
[ 1247.926166][T21979] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4217'.
[ 1248.449711][T21985] netlink: 'syz.2.4218': attribute type 10 has an invalid length.
[ 1248.552083][T21985] veth1_macvtap: left promiscuous mode
[ 1248.808641][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[ 1248.819304][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[ 1248.828622][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[ 1249.205854][T21997] ip6gretap0 speed is unknown, defaulting to 1000
[ 1249.281252][T21997] lo speed is unknown, defaulting to 1000
[ 1249.315528][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[ 1249.738941][T22013] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1249.831140][T22013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1251.036931][T22023] sp0: Synchronizing with TNC
[ 1251.815031][T22026] netlink: 'syz.3.4227': attribute type 2 has an invalid length.
[ 1252.684718][ T5926] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1253.068039][T22047] overlayfs: failed to resolve './file1': -2
[ 1253.176266][T22047] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4232'.
[ 1253.208491][ T5926] usb 4-1: too many configurations: 25, using maximum allowed: 8
[ 1253.362293][ T5926] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[ 1253.372323][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.770321][ T5926] usb 4-1: config 0 descriptor??
[ 1253.903590][ T5926] pwc: Creative Labs Webcam Pro Ex detected.
[ 1253.982143][ T5926] pwc: Warning: more than 1 configuration available.
[ 1255.150608][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'.
[ 1255.250893][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'.
[ 1256.728306][ T5926] pwc: Failed to set LED on/off time (-71)
[ 1256.764264][ T5926] pwc: send_video_command error -71
[ 1256.775036][T15268] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1256.793813][ T5926] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1256.929522][ T5926] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 1257.203401][ T5926] usb 4-1: USB disconnect, device number 108
[ 1257.220476][T15268] usb 6-1: Using ep0 maxpacket: 8
[ 1257.366355][T15268] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[ 1257.386189][T15268] usb 6-1: config 6 has no interface number 0
[ 1257.527999][T15268] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1257.539337][T22090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19220 sclass=netlink_tcpdiag_socket pid=22090 comm=syz.0.4242
[ 1257.565547][T15268] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1257.604509][   T30] kauditd_printk_skb: 49 callbacks suppressed
[ 1257.604527][   T30] audit: type=1326 audit(1758225330.598:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1257.642948][T15268] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1257.667693][   T30] audit: type=1326 audit(1758225330.598:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1257.789326][T15268] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1257.828618][T15268] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1257.847629][T15268] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1257.848178][   T30] audit: type=1326 audit(1758225330.598:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1257.856148][T15268] usb 6-1: Product: syz
[ 1257.885267][T15268] usb 6-1: Manufacturer: syz
[ 1257.898790][T15268] usb 6-1: SerialNumber: syz
[ 1257.911056][   T30] audit: type=1326 audit(1758225330.598:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1257.970404][   T30] audit: type=1326 audit(1758225330.598:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1257.994792][T15268] hso 6-1:6.2: Failed to find BULK IN ep
[ 1258.021478][   T30] audit: type=1326 audit(1758225330.598:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1258.049809][   T30] audit: type=1326 audit(1758225330.598:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1258.076839][   T30] audit: type=1326 audit(1758225330.598:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1258.104568][   T30] audit: type=1326 audit(1758225330.598:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1258.178760][T22070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1258.187338][T22070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1258.197689][   T30] audit: type=1326 audit(1758225330.598:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1258.246765][T22096] binder: 22095:22096 ioctl 4020ae46 0 returned -22
[ 1258.358801][T22099] overlayfs: failed to resolve './file1': -2
[ 1258.379757][T22099] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4245'.
[ 1258.802404][T15268] usb 6-1: USB disconnect, device number 4
[ 1259.519883][T22115] Invalid source name
[ 1259.654146][T22115] UBIFS error (pid: 22115): cannot open "./file0", error -22
[ 1259.774502][T15268] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1259.818373][T22121] mkiss: ax0: crc mode is auto.
[ 1259.925473][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'.
[ 1259.942380][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'.
[ 1259.956506][T15268] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1259.969697][T15268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1259.981856][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'.
[ 1259.993389][T15268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1260.008774][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'.
[ 1260.019309][T15268] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1260.036674][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'.
[ 1260.060574][T15268] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1260.075702][T15268] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1260.090776][T15268] usb 6-1: Manufacturer: syz
[ 1260.094740][T22125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1260.119399][T15268] usb 6-1: config 0 descriptor??
[ 1260.142217][T22125] syzkaller0: entered promiscuous mode
[ 1260.165567][T22125] syzkaller0: entered allmulticast mode
[ 1260.252180][T22125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1260.276428][T22125] syzkaller0: mtu greater than device maximum
[ 1260.295141][T22124] tipc: Resetting bearer <eth:syzkaller0>
[ 1260.376306][T22124] tipc: Disabling bearer <eth:syzkaller0>
[ 1260.466222][T15268] rc_core: IR keymap rc-hauppauge not found
[ 1260.472575][T15268] Registered IR keymap rc-empty
[ 1260.477597][ T5911] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1260.488934][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1260.524819][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1260.578607][T15268] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1260.723541][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1260.835046][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1260.849289][T15268] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input92
[ 1260.871289][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1260.873201][ T5911] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1260.920313][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.928714][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1260.965499][ T5911] usb 4-1: config 0 descriptor??
[ 1260.973910][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.014706][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.021435][T22138] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[ 1261.091515][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.224755][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.505217][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.534580][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.554830][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.574778][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.594560][T15268] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1261.615372][T15268] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1261.683933][T15268] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1262.085657][ T5911] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input93
[ 1262.201600][ T5911] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input94
[ 1262.285463][T22127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1262.294047][T22127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1262.368400][ T5926] usb 6-1: USB disconnect, device number 5
[ 1262.493276][T22148] binder: 22147:22148 ioctl 4020ae46 0 returned -22
[ 1262.526236][ T5911] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input95
[ 1262.880903][ T5911] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input96
[ 1262.914907][T16359] Bluetooth: hci4: command 0x1003 tx timeout
[ 1262.926357][T20138] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1262.979436][ T5911] uclogic 0003:256C:006D.001E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[ 1263.030225][ T5911] usb 4-1: USB disconnect, device number 109
[ 1263.223643][T22158] fido_id[22158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1263.449252][T22163] netlink: 'syz.3.4260': attribute type 4 has an invalid length.
[ 1263.617947][T22170] netlink: 'syz.3.4260': attribute type 4 has an invalid length.
[ 1264.141768][ T5926] lo speed is unknown, defaulting to 1000
[ 1264.157631][   T24] lo speed is unknown, defaulting to 1000
[ 1264.165607][T22172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1264.168906][T22175] Invalid source name
[ 1264.218062][T22175] UBIFS error (pid: 22175): cannot open "./file0", error -22
[ 1266.834539][T22200] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer.
[ 1267.910781][T22213] binder: 22212:22213 ioctl 4020ae46 0 returned -22
[ 1268.385701][T22226] sctp: [Deprecated]: syz.2.4277 (pid 22226) Use of int in max_burst socket option deprecated.
[ 1268.385701][T22226] Use struct sctp_assoc_value instead
[ 1268.461605][T22227] pim6reg: entered allmulticast mode
[ 1268.704366][    T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1268.854360][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1268.988608][    T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1268.997158][    T9] usb 1-1: config 179 has no interface number 0
[ 1269.003797][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1269.015097][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1269.026802][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[ 1269.038810][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[ 1269.050541][    T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1269.064187][    T9] usb 1-1: config 179 interface 65 has no altsetting 0
[ 1269.071864][    T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1269.081181][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1269.127011][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input97
[ 1269.174681][ T5204] input input97: unable to receive magic message: -110
[ 1269.223677][ T5204] input input97: unable to receive magic message: -32
[ 1269.249750][ T5204] input input97: unable to receive magic message: -32
[ 1269.521531][T22242] overlayfs: failed to resolve './file1': -2
[ 1269.621707][T22243] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4280'.
[ 1270.023158][T22227] input input97: unable to receive magic message: -32
[ 1272.201922][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4283'.
[ 1272.218653][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4283'.
[ 1272.228476][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4283'.
[ 1272.238317][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4283'.
[ 1272.680197][T17345] usb 1-1: USB disconnect, device number 77
[ 1272.680231][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1273.439227][T22274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1273.775882][T22267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4285'.
[ 1274.477664][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[ 1274.515564][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[ 1274.527082][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[ 1274.536596][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[ 1274.594722][T15512] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1274.747314][T15512] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1274.783371][T15512] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1274.804354][ T5919] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1274.811928][T15512] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.812000][T15512] usb 6-1: Product: syz
[ 1274.836513][T15512] usb 6-1: Manufacturer: syz
[ 1274.858575][T15512] usb 6-1: SerialNumber: syz
[ 1274.876689][T15512] usb 6-1: config 0 descriptor??
[ 1275.044513][ T5919] usb 3-1: Using ep0 maxpacket: 8
[ 1275.054746][ T5919] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1275.076284][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1275.138544][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1275.149146][ T5919] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1275.192839][ T5919] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1275.206078][T22298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.214970][T22298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.243252][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1275.430982][    T9] usb 6-1: USB disconnect, device number 6
[ 1275.533186][ T5919] usb 3-1: GET_CAPABILITIES returned 0
[ 1275.539143][ T5919] usbtmc 3-1:16.0: can't read capabilities
[ 1276.265413][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1276.446037][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1276.658647][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1276.684412][    T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1276.790881][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.076537][    T9] usb 6-1: config 0 descriptor??
[ 1277.240538][T22320] binder: 22319:22320 ioctl 4020ae46 0 returned -22
[ 1278.376668][T22329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1278.487284][T15512] usb 3-1: USB disconnect, device number 74
[ 1278.910781][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1278.911934][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001F/input/input98
[ 1278.935611][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1279.120492][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001F/input/input99
[ 1279.176970][    T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001F/input/input100
[ 1279.243675][    T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001F/input/input101
[ 1279.527634][    T9] uclogic 0003:256C:006D.001F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[ 1279.625088][    T9] usb 6-1: USB disconnect, device number 7
[ 1279.878044][T22352] overlayfs: failed to resolve './file1': -2
[ 1279.934831][T22353] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4306'.
[ 1280.191219][T22349] fido_id[22349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1280.440360][T22338] fuse: Unknown parameter '0x0000000000000008'
[ 1280.510794][T22355] syzkaller0: entered promiscuous mode
[ 1280.541942][T22355] syzkaller0: entered allmulticast mode
[ 1280.792921][T17345] libceph: connect (1)[c::]:6789 error -101
[ 1280.826971][T17345] libceph: mon0 (1)[c::]:6789 connect error
[ 1280.855266][T17345] libceph: connect (1)[b::]:6789 error -101
[ 1280.861335][T17345] libceph: mon0 (1)[b::]:6789 connect error
[ 1280.881129][T22374] netlink: 'syz.0.4310': attribute type 4 has an invalid length.
[ 1280.911564][   T30] kauditd_printk_skb: 81 callbacks suppressed
[ 1280.911580][   T30] audit: type=1326 audit(1758225353.918:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1280.945338][   T30] audit: type=1326 audit(1758225353.958:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1280.979658][T22378] netlink: 'syz.0.4310': attribute type 4 has an invalid length.
[ 1281.031773][   T30] audit: type=1326 audit(1758225353.988:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1281.055272][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1281.093066][   T30] audit: type=1326 audit(1758225353.988:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1281.096379][T17345] libceph: connect (1)[c::]:6789 error -101
[ 1281.119932][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1281.173179][   T30] audit: type=1326 audit(1758225353.988:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1281.197627][T15512] libceph: connect (1)[b::]:6789 error -101
[ 1281.301397][T22381] overlay: Bad value for 'uuid'
[ 1281.314777][T15512] libceph: mon0 (1)[b::]:6789 connect error
[ 1281.321682][T17345] libceph: mon0 (1)[c::]:6789 connect error
[ 1281.347847][   T30] audit: type=1326 audit(1758225353.988:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1281.371235][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1281.487890][    T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1281.620277][T15512] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 1281.779162][T15512] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1281.789386][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1281.832355][   T30] audit: type=1326 audit(1758225354.038:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1281.855801][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1281.865376][T17345] libceph: connect (1)[b::]:6789 error -101
[ 1281.876033][T17345] libceph: mon0 (1)[b::]:6789 connect error
[ 1281.883720][T15512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1281.907379][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1281.913072][T17345] libceph: connect (1)[c::]:6789 error -101
[ 1281.934941][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1281.943089][T17345] libceph: mon0 (1)[c::]:6789 connect error
[ 1281.952474][    T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.40
[ 1281.961896][T15512] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1281.984641][   T30] audit: type=1326 audit(1758225354.038:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1282.008913][T15512] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1282.018094][T15512] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1282.026370][   T30] audit: type=1326 audit(1758225354.038:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1282.050244][T15512] usb 6-1: Manufacturer: syz
[ 1282.056591][T15512] usb 6-1: config 0 descriptor??
[ 1282.074480][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.082785][   T30] audit: type=1326 audit(1758225354.038:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9612d8eba9 code=0x7ffc0000
[ 1282.117614][    T9] usb 4-1: Product: 쿸ⵦﻚ委ᥜ抌ꪽ犆䬝띴苋莐郇⥴蛮ⶼﳪ➵䁮Ӏ늿醉䧠喊喍쪊侌덑앓癚
[ 1282.230627][    T9] usb 4-1: Manufacturer: ࠾
[ 1282.243081][    T9] usb 4-1: SerialNumber: Ц
[ 1282.435511][T15512] rc_core: IR keymap rc-hauppauge not found
[ 1282.504113][T15512] Registered IR keymap rc-empty
[ 1282.512832][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1282.550313][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1282.709675][T15512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1283.119690][T15512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input102
[ 1283.219628][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.274089][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.314724][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.344650][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.492469][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.527242][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.535158][T22357] ceph: No mds server is up or the cluster is laggy
[ 1283.555091][ T5926] libceph: connect (1)[c::]:6789 error -101
[ 1283.558773][T22368] ceph: No mds server is up or the cluster is laggy
[ 1283.572837][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[ 1283.580606][T17345] libceph: connect (1)[b::]:6789 error -101
[ 1283.587208][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.599096][T17345] libceph: mon0 (1)[b::]:6789 connect error
[ 1283.625680][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.762815][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.784611][T15512] mceusb 6-1:0.0: Error: mce write urb status = -71
[ 1283.807037][T15512] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1283.858751][    T9] usbhid 4-1:1.0: can't add hid device: -71
[ 1283.870185][T15512] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1283.888916][    T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 1283.951823][    T9] usb 4-1: USB disconnect, device number 110
[ 1284.179445][T22407] overlayfs: failed to resolve './file1': -2
[ 1284.363847][T22406] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4317'.
[ 1284.570253][    T9] usb 6-1: USB disconnect, device number 8
[ 1286.184098][T19134] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1286.651312][T22429] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1286.658326][T22431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1287.984809][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1287.984831][   T30] audit: type=1400 audit(1758225360.878:3403): avc:  denied  { create } for  pid=22442 comm="syz.5.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1288.260008][T20138] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1288.344367][T17345] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1288.551594][T17345] usb 4-1: device descriptor read/64, error -71
[ 1288.824612][T17345] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1289.034407][T17345] usb 4-1: device descriptor read/64, error -71
[ 1289.154901][T17345] usb usb4-port1: attempt power cycle
[ 1289.596643][   T30] audit: type=1400 audit(1758225362.598:3404): avc:  denied  { accept } for  pid=22466 comm="syz.0.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1289.684404][T17345] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1289.705018][T17345] usb 4-1: device descriptor read/8, error -71
[ 1289.944604][T17345] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1290.001554][T17345] usb 4-1: device descriptor read/8, error -71
[ 1290.144805][T17345] usb usb4-port1: unable to enumerate USB device
[ 1290.634542][T17345] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1290.857907][T17345] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1290.896931][T17345] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1290.936288][T17345] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1291.043066][T22488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1291.111907][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'.
[ 1291.202381][T22488] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1291.304211][T17345] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1291.322016][T17345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.331662][T17345] usb 6-1: Product: syz
[ 1291.347740][T17345] usb 6-1: Manufacturer: syz
[ 1291.360964][T17345] usb 6-1: SerialNumber: syz
[ 1291.423490][T17345] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1291.447511][T17345] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1291.670152][T22497] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1291.681851][   T49] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1292.132725][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'.
[ 1292.142407][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'.
[ 1292.151684][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'.
[ 1292.161119][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'.
[ 1292.173985][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'.
[ 1292.972187][   T30] audit: type=1800 audit(1758225365.978:3405): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4350" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1293.149982][T17345] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1293.355964][T17345] usb 6-1: reset high-speed USB device number 9 using dummy_hcd
[ 1293.424577][T17345] usb 6-1: device reset changed ep0 maxpacket size!
[ 1293.694516][T17345] usb 6-1: USB disconnect, device number 9
[ 1293.715255][T20138] Bluetooth: hci4: command 0x1003 tx timeout
[ 1293.723036][T16359] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1293.790302][T16359] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 1293.836107][T17345] usblp0: removed
[ 1294.111006][T22534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=22534 comm=syz.3.4357
[ 1294.132632][T22534] netlink: 'syz.3.4357': attribute type 2 has an invalid length.
[ 1294.215264][T17345] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1294.534849][T17345] usb 6-1: Using ep0 maxpacket: 16
[ 1294.541583][T17345] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1295.002258][T17345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.033067][T17345] usb 6-1: config 0 has no interface number 0
[ 1295.048365][T17345] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28
[ 1295.064422][T17345] usb 6-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3
[ 1295.151314][T17345] usb 6-1: Product: syz
[ 1295.334952][T17345] usb 6-1: SerialNumber: syz
[ 1295.366289][T17345] usb 6-1: config 0 descriptor??
[ 1295.373240][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'.
[ 1295.382615][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'.
[ 1295.396603][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'.
[ 1295.407862][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'.
[ 1295.430587][T17345] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[ 1295.442668][T17345] usb 6-1: No valid video chain found.
[ 1295.639870][T17345] usb 6-1: USB disconnect, device number 10
[ 1295.891017][T22556] binfmt_misc: register: failed to install interpreter file ./file0
[ 1296.235898][T19138] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1296.250142][T22561] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1296.525070][ T5995] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1296.684549][ T5995] usb 6-1: Using ep0 maxpacket: 8
[ 1296.705687][ T5995] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1296.721915][ T5995] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1296.739736][ T5995] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[ 1296.759049][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.771472][ T5995] usb 6-1: Product: syz
[ 1296.778261][ T5995] usb 6-1: Manufacturer: syz
[ 1296.783233][ T5995] usb 6-1: SerialNumber: syz
[ 1296.889105][T22571] overlay: Unknown parameter '/'
[ 1296.894146][   T30] audit: type=1400 audit(1758225369.898:3406): avc:  denied  { mounton } for  pid=22567 comm="syz.3.4367" path="/250/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1297.403195][   T30] audit: type=1800 audit(1758225370.278:3407): pid=22575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4365" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1297.643206][T22580] netlink: 'syz.3.4370': attribute type 2 has an invalid length.
[ 1297.658926][   T30] audit: type=1400 audit(1758225370.668:3408): avc:  denied  { write } for  pid=22569 comm="syz.2.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1297.679644][   T30] audit: type=1400 audit(1758225370.668:3409): avc:  denied  { bind } for  pid=22569 comm="syz.2.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1298.276344][T16359] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1298.285620][T20138] Bluetooth: hci4: command 0x1003 tx timeout
[ 1298.318285][T22587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1298.690867][   T30] audit: type=1400 audit(1758225371.678:3410): avc:  denied  { lock } for  pid=22591 comm="syz.0.4373" path="socket:[79834]" dev="sockfs" ino=79834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1299.461260][ T5995] usbhid 6-1:1.0: can't add hid device: -22
[ 1299.484497][ T5995] usbhid 6-1:1.0: probe with driver usbhid failed with error -22
[ 1299.520796][ T5995] usb 6-1: USB disconnect, device number 11
[ 1299.711987][T22613] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1299.724651][T22613] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock
[ 1299.975039][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.123882][T22613] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1300.140407][T22613] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock
[ 1300.194371][    T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1300.254835][T22617] netlink: 'syz.0.4381': attribute type 2 has an invalid length.
[ 1300.421576][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1300.436926][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1300.450759][T22624] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1300.464070][   T49] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1300.471290][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1300.483869][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1300.492525][    T9] usb 3-1: SerialNumber: syz
[ 1300.739615][    T9] usb 3-1: 0:2 : does not exist
[ 1300.769259][    T9] usb 3-1: USB disconnect, device number 75
[ 1300.864218][T22636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1300.871376][T22636] bridge0: port 2(bridge_slave_1) entered listening state
[ 1300.878729][T22636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1300.885849][T22636] bridge0: port 1(bridge_slave_0) entered listening state
[ 1301.176578][T22636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1301.235423][T19362] udevd[19362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1301.319528][T15268] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1301.681087][T15268] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1301.690947][T22644] vlan2: entered promiscuous mode
[ 1301.696266][T15268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.714716][T22644] bridge0: entered promiscuous mode
[ 1301.714722][T15268] usb 6-1: Product: syz
[ 1301.714741][T15268] usb 6-1: Manufacturer: syz
[ 1301.714756][T15268] usb 6-1: SerialNumber: syz
[ 1301.720083][T22644] vlan2: entered allmulticast mode
[ 1301.754691][T22644] bridge0: entered allmulticast mode
[ 1301.769754][T15268] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1301.969732][ T5911] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1302.204187][T22656] Invalid source name
[ 1302.208318][T22656] UBIFS error (pid: 22656): cannot open "./file0", error -22
[ 1302.316720][T15268] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1302.450133][T22667] overlayfs: missing 'lowerdir'
[ 1302.516855][T20138] Bluetooth: hci4: command 0x1003 tx timeout
[ 1302.519366][T22667] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4395'.
[ 1302.523603][T16359] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1302.745741][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1302.800264][T15268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1302.828195][T15268] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1302.908742][T15268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.952735][T15268] usb 3-1: config 0 descriptor??
[ 1303.009632][ T5911] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1303.016774][ T5911] ath9k_htc: Failed to initialize the device
[ 1303.104181][ T5911] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1304.146678][T15268] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71
[ 1304.157109][T15268] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71
[ 1304.172501][T15268] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71
[ 1304.196897][T15268] uclogic 0003:256C:006D.0020: failed probing parameters: -71
[ 1304.220821][T15268] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71
[ 1304.244946][T15268] usb 3-1: USB disconnect, device number 76
[ 1304.258290][T22685] syzkaller0: entered promiscuous mode
[ 1304.264155][T22685] syzkaller0: entered allmulticast mode
[ 1304.488859][ T5995] usb 6-1: USB disconnect, device number 12
[ 1304.675023][   T30] audit: type=1326 audit(1758225377.678:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1304.794703][   T30] audit: type=1326 audit(1758225377.688:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1304.843194][T22696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4405'.
[ 1304.890010][   T30] audit: type=1326 audit(1758225377.688:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1304.948669][   T30] audit: type=1326 audit(1758225377.688:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1304.973028][   T30] audit: type=1326 audit(1758225377.688:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.020913][T15268] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1305.021918][   T30] audit: type=1326 audit(1758225377.688:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.061395][   T30] audit: type=1326 audit(1758225377.688:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.094569][   T30] audit: type=1326 audit(1758225377.688:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.155966][ T3001] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1305.157466][   T30] audit: type=1326 audit(1758225377.688:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.187583][   T30] audit: type=1326 audit(1758225377.688:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22693 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1305.234777][T15268] usb 6-1: Using ep0 maxpacket: 16
[ 1305.245725][T22706] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1305.273425][T15268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1305.302442][T15268] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1305.396064][T15268] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1305.413720][T15268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.759027][T15268] usb 6-1: Product: syz
[ 1305.769179][T15268] usb 6-1: Manufacturer: syz
[ 1305.836230][T22713] binder_alloc: binder_alloc_mmap_handler: 22711 200000ffd000-200001000000 already mapped failed -16
[ 1305.874739][T15268] usb 6-1: SerialNumber: syz
[ 1306.165676][T15268] usb 6-1: 0:2 : does not exist
[ 1306.201406][T15268] usb 6-1: unit 0 not found!
[ 1306.501764][T15268] usb 6-1: USB disconnect, device number 13
[ 1306.726466][T22721] netlink: 'syz.2.4411': attribute type 4 has an invalid length.
[ 1306.813653][T22725] netlink: 'syz.2.4411': attribute type 4 has an invalid length.
[ 1307.316568][T20138] Bluetooth: hci4: command 0x1003 tx timeout
[ 1307.324458][T16359] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1308.629715][T22742] 
: renamed from bond_slave_0 (while UP)
[ 1309.865649][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[ 1310.316105][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[ 1310.331427][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[ 1310.387159][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[ 1310.396554][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[ 1310.590905][T22773] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1310.617214][T19138] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1310.874653][ T5911] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1311.034519][ T5911] usb 1-1: Using ep0 maxpacket: 8
[ 1311.048021][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1311.078139][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1311.098981][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1311.524425][ T5911] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[ 1311.534628][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1311.565164][ T5911] usb 1-1: config 0 descriptor??
[ 1312.371303][ T5911] elecom 0003:056E:00FE.0021: item fetching failed at offset 6/70
[ 1312.398989][ T5911] elecom 0003:056E:00FE.0021: probe with driver elecom failed with error -22
[ 1312.674988][T20138] Bluetooth: hci4: command 0x1003 tx timeout
[ 1312.684787][T16359] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1313.784618][ T5911] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1313.924380][ T5911] usb 3-1: device descriptor read/64, error -71
[ 1314.164684][ T5911] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1314.345194][ T5911] usb 3-1: device descriptor read/64, error -71
[ 1314.514648][ T5911] usb usb3-port1: attempt power cycle
[ 1314.729000][T15268] usb 1-1: USB disconnect, device number 78
[ 1315.009273][ T5911] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1315.178283][ T5911] usb 3-1: device descriptor read/8, error -71
[ 1315.444582][ T5911] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1315.475030][ T5911] usb 3-1: device descriptor read/8, error -71
[ 1315.585200][ T5911] usb usb3-port1: unable to enumerate USB device
[ 1316.464552][T15268] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1317.067330][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1317.067347][   T30] audit: type=1400 audit(1758225390.068:3427): avc:  denied  { lock } for  pid=22875 comm="syz.4.4450" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1317.072458][T22883] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1317.284363][T15268] usb 6-1: Using ep0 maxpacket: 16
[ 1317.368673][T15268] usb 6-1: config 8 has an invalid interface number: 11 but max is 0
[ 1317.368704][T15268] usb 6-1: config 8 has no interface number 0
[ 1317.368742][T15268] usb 6-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[ 1317.368765][T15268] usb 6-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9
[ 1317.368791][T15268] usb 6-1: config 8 interface 11 has no altsetting 0
[ 1317.386618][T15268] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[ 1317.386647][T15268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.386668][T15268] usb 6-1: Product: ࡡ
[ 1317.386683][T15268] usb 6-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷
[ 1317.386701][T15268] usb 6-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ
[ 1317.422138][T22882] [U] 
[ 1318.021170][T22888] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4452'.
[ 1318.531129][   T30] audit: type=1400 audit(1758225391.538:3428): avc:  denied  { bind } for  pid=22899 comm="syz.2.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1319.071360][T15268] usb-storage 6-1:8.11: USB Mass Storage device detected
[ 1319.083202][T15268] usb-storage 6-1:8.11: Quirks match for vid 174c pid 55aa: 400000
[ 1319.746851][T15268] usb 6-1: USB disconnect, device number 14
[ 1321.211318][T22938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1321.238152][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4462'.
[ 1324.717213][ T5926] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1324.936660][ T5926] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[ 1324.950867][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1325.430958][ T5926] usb 1-1: config 0 descriptor??
[ 1325.974460][T15268] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1326.024395][  T840] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1326.135727][T15268] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[ 1326.144007][T15268] usb 4-1: config 0 has no interface number 0
[ 1326.150390][T15268] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1326.159584][T15268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.169847][T15268] usb 4-1: config 0 descriptor??
[ 1326.180718][T15268] usb 4-1: bad CDC descriptors
[ 1326.186708][  T840] usb 3-1: Using ep0 maxpacket: 8
[ 1326.198052][  T840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1326.210074][  T840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1326.220321][  T840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1326.230683][  T840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1326.243943][  T840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1326.253174][  T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.387484][ T5995] usb 4-1: USB disconnect, device number 115
[ 1326.478168][  T840] usb 3-1: GET_CAPABILITIES returned 0
[ 1326.483762][  T840] usbtmc 3-1:16.0: can't read capabilities
[ 1326.576647][T22995] Invalid source name
[ 1326.580917][T22995] UBIFS error (pid: 22995): cannot open "./file0", error -22
[ 1326.757783][T22992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1326.774842][T22992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1327.239163][ T5926] usbhid 1-1:0.0: can't add hid device: -71
[ 1327.250136][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1327.269295][ T5926] usb 1-1: USB disconnect, device number 79
[ 1327.395568][T15268] usb 3-1: USB disconnect, device number 81
[ 1327.440694][   T30] audit: type=1326 audit(1758225400.418:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1327.529076][T23011] IPv6: Can't replace route, no match found
[ 1327.543863][   T30] audit: type=1326 audit(1758225400.418:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1327.575296][   T30] audit: type=1326 audit(1758225400.428:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1327.807788][   T30] audit: type=1326 audit(1758225400.428:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1327.831822][   T30] audit: type=1326 audit(1758225400.428:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1327.856429][   T30] audit: type=1326 audit(1758225400.428:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1328.771633][   T30] audit: type=1326 audit(1758225400.428:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1328.799101][   T30] audit: type=1326 audit(1758225400.428:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1328.899273][T23021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1328.927172][   T30] audit: type=1326 audit(1758225400.428:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1329.048684][   T30] audit: type=1326 audit(1758225400.428:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x7ffc0000
[ 1329.066422][  T840] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[ 1329.782234][  T840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1329.827090][  T840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1329.841764][  T840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1329.860046][  T840] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1329.912187][  T840] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1329.923506][  T840] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1330.115197][  T840] usb 1-1: Manufacturer: syz
[ 1330.170685][ T5995] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[ 1330.216176][  T840] usb 1-1: config 0 descriptor??
[ 1330.744580][  T840] rc_core: IR keymap rc-hauppauge not found
[ 1330.754572][  T840] Registered IR keymap rc-empty
[ 1330.774481][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1330.785751][T23049] overlayfs: missing 'lowerdir'
[ 1330.854477][T23049] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4488'.
[ 1331.043473][ T5995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.101032][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.101222][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1331.145353][  T840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1331.175969][  T840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input103
[ 1331.203530][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1331.218457][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.225803][ T5995] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1331.240126][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1331.240315][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1331.304629][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.368666][ T5995] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1331.379961][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.386810][ T5995] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1331.396400][ T5995] usb 4-1: Manufacturer: syz
[ 1331.402247][ T5995] usb 4-1: config 0 descriptor??
[ 1331.496334][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.530038][T23066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1331.549954][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'.
[ 1331.605810][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.653440][T23064] comedi comedi2: board detection failed
[ 1331.690409][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1331.904220][T23066] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1332.036178][ T5995] rc_core: IR keymap rc-hauppauge not found
[ 1332.057380][ T5995] Registered IR keymap rc-empty
[ 1332.115403][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.227844][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.244828][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1332.287112][ T5995] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1
[ 1332.304822][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1332.348428][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1332.374606][  T840] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1332.593412][T23075] Can't find a SQUASHFS superblock on nullb0
[ 1332.702843][  T840] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1332.703276][ T5995] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input104
[ 1332.724919][  T840] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1332.733748][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.763987][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.782186][   T30] kauditd_printk_skb: 134 callbacks suppressed
[ 1332.782204][   T30] audit: type=1326 audit(1758225405.788:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4671c1465 code=0x7ffc0000
[ 1332.833205][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.880305][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.880446][  T840] usb 1-1: USB disconnect, device number 80
[ 1332.924554][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.968014][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1332.998446][   T30] audit: type=1326 audit(1758225406.008:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23053 comm="syz.0.4491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33ae78eba9 code=0x0
[ 1333.021871][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1333.037917][   T30] audit: type=1326 audit(1758225406.048:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1333.066784][   T30] audit: type=1326 audit(1758225406.048:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.3.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1333.090960][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1333.114539][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1333.144778][ T5995] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1333.216951][ T5995] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1333.279519][ T5995] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1334.085297][T23089] 9pnet: Could not find request transport: f
[ 1334.177094][ T5995] Process accounting resumed
[ 1334.253580][   T30] audit: type=1400 audit(1758225407.258:3577): avc:  denied  { map } for  pid=23094 comm="syz.0.4501" path="socket:[82648]" dev="sockfs" ino=82648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1334.302732][   T30] audit: type=1400 audit(1758225407.258:3578): avc:  denied  { accept } for  pid=23094 comm="syz.0.4501" path="socket:[82648]" dev="sockfs" ino=82648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1334.484826][ T5995] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1334.694422][ T5995] usb 3-1: Using ep0 maxpacket: 8
[ 1334.741769][ T5995] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1334.794931][ T5995] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[ 1334.834433][ T5995] usb 3-1: config 0 has no interface number 0
[ 1334.846148][ T5995] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1334.884384][ T5995] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1334.928596][ T5995] usb 3-1: config 0 interface 88 has no altsetting 0
[ 1334.958371][T15512] usb 4-1: USB disconnect, device number 116
[ 1335.034459][ T5995] usb 3-1: string descriptor 0 read error: -22
[ 1335.061043][ T5995] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1335.113445][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 1335.151129][ T5995] usb 3-1: config 0 descriptor??
[ 1335.420021][ T5995] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input105
[ 1335.707132][T16359] Bluetooth: hci3: SCO packet for unknown connection handle 200
[ 1335.801061][   T30] audit: type=1400 audit(1758225408.658:3579): avc:  denied  { bind } for  pid=23110 comm="syz.3.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1335.882457][T23098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1335.895069][T23098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.944823][T19355] udevd[19355]: Error opening device "/dev/input/event4": Input/output error
[ 1335.958313][T19355] udevd[19355]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1335.976612][T19355] udevd[19355]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1336.623827][T23124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1336.685927][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'.
[ 1337.221266][ T5995] usb 3-1: USB disconnect, device number 82
[ 1338.667749][   T30] audit: type=1326 audit(1758225411.678:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.0.4520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33ae78eba9 code=0x0
[ 1339.527101][   T30] audit: type=1326 audit(1758225412.458:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1339.897128][   T30] audit: type=1326 audit(1758225412.468:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1339.931770][   T30] audit: type=1326 audit(1758225412.468:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1340.185938][   T30] audit: type=1326 audit(1758225412.468:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1340.574435][T15512] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1340.592513][   T30] audit: type=1326 audit(1758225412.468:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1340.748769][   T30] audit: type=1326 audit(1758225412.468:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1340.825565][T23185] netlink: 'syz.0.4528': attribute type 4 has an invalid length.
[ 1340.834063][T15512] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1340.879052][T15512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1340.977464][   T30] audit: type=1326 audit(1758225412.468:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1341.026727][T15512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1341.426604][T15512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1341.615133][   T30] audit: type=1326 audit(1758225412.468:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1341.648860][T15512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1341.694741][T15512] usb 4-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[ 1341.744747][T15512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1341.753507][   T30] audit: type=1326 audit(1758225412.468:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.4.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f920078eba9 code=0x7ffc0000
[ 1341.825278][T15512] usb 4-1: config 0 descriptor??
[ 1341.844852][T23176] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1342.124996][T15512] appledisplay 4-1:0.0: Error while getting initial brightness: -71
[ 1342.164680][T15512] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71
[ 1342.183504][T15512] usb 4-1: USB disconnect, device number 117
[ 1342.444643][    T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1342.616401][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1342.634967][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1342.684505][    T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1342.748329][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.297777][    T9] usb 3-1: config 0 descriptor??
[ 1343.869949][T23212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1344.154434][ T5995] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1344.171226][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4537'.
[ 1344.189153][   T30] kauditd_printk_skb: 40 callbacks suppressed
[ 1344.189171][   T30] audit: type=1400 audit(1758225417.198:3630): avc:  denied  { getopt } for  pid=23217 comm="syz.3.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1344.249378][ T5919] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1344.315945][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1344.327294][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.338090][ T5995] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1344.347616][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.364981][ T5995] usb 1-1: config 0 descriptor??
[ 1344.515444][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4539'.
[ 1344.533284][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1344.554542][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.593964][ T5919] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1344.731992][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.879473][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0022/input/input106
[ 1344.904891][ T5919] usb 6-1: config 0 descriptor??
[ 1344.962864][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0022/input/input107
[ 1345.016682][    T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0022/input/input108
[ 1345.087786][    T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0022/input/input109
[ 1345.361457][    T9] uclogic 0003:256C:006D.0022: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[ 1345.438321][ T5995] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71
[ 1345.667453][ T5995] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71
[ 1345.679154][    T9] usb 3-1: USB disconnect, device number 83
[ 1345.710810][ T5995] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71
[ 1345.743229][T23234] fido_id[23234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1345.751084][ T5995] uclogic 0003:256C:006D.0023: failed probing parameters: -71
[ 1345.831453][ T5995] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71
[ 1345.955319][ T5995] usb 1-1: USB disconnect, device number 81
[ 1346.130519][ T5919] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input110
[ 1346.196941][ T5919] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input111
[ 1346.541097][ T5919] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input112
[ 1346.685930][ T5995] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1346.814717][   T30] audit: type=1400 audit(1758225419.578:3631): avc:  denied  { write } for  pid=23247 comm="syz.4.4545" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1346.822981][ T5919] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input113
[ 1346.985566][ T5995] usb 1-1: Using ep0 maxpacket: 8
[ 1346.992845][ T5995] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1347.050604][ T5919] uclogic 0003:256C:006D.0024: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[ 1347.118104][ T5995] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1347.133814][ T5995] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1347.145288][ T5919] usb 6-1: USB disconnect, device number 15
[ 1347.191239][   T30] audit: type=1400 audit(1758225420.198:3632): avc:  denied  { write } for  pid=23259 comm="syz.3.4547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1347.265857][ T5995] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1347.305027][ T5995] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1347.332919][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.400897][T23258] fido_id[23258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1348.001543][ T5995] usb 1-1: GET_CAPABILITIES returned 0
[ 1348.015122][ T5995] usbtmc 1-1:16.0: can't read capabilities
[ 1348.056955][ T5995] usb 1-1: USB disconnect, device number 82
[ 1348.779068][T23277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1348.799343][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'.
[ 1349.095822][T23279] syzkaller0: entered promiscuous mode
[ 1349.101442][T23279] syzkaller0: entered allmulticast mode
[ 1349.735056][T23298] netlink: 'syz.5.4557': attribute type 1 has an invalid length.
[ 1349.746193][   T30] audit: type=1400 audit(1758225422.748:3633): avc:  denied  { ioctl } for  pid=23297 comm="syz.5.4557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1349.915518][T23307] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11)
[ 1349.922144][T23307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1349.932987][T23298] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1350.024407][T23304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1350.030938][T23304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1350.075539][T23307] vhci_hcd vhci_hcd.0: Device attached
[ 1350.084541][T23304] vhci_hcd vhci_hcd.0: Device attached
[ 1350.144954][T23311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1350.197094][T23308] vhci_hcd: connection closed
[ 1350.197366][T17093] vhci_hcd: stop threads
[ 1350.197763][T23305] vhci_hcd: connection closed
[ 1350.202247][T17093] vhci_hcd: release socket
[ 1350.218225][ T5919] usb 33-2: new low-speed USB device number 5 using vhci_hcd
[ 1350.252269][T17093] vhci_hcd: disconnect device
[ 1350.267789][T17093] vhci_hcd: stop threads
[ 1350.280150][T17093] vhci_hcd: release socket
[ 1350.552863][T17093] vhci_hcd: disconnect device
[ 1350.669708][T23322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1351.798372][T23331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1351.933577][T23337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1352.046127][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'.
[ 1352.217500][T23329] could not allocate digest TFM handle poly1305-neon
[ 1352.868523][T23343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1352.881190][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4566'.
[ 1353.411670][  T840] IPVS: starting estimator thread 0...
[ 1353.504520][T23354] IPVS: using max 39 ests per chain, 93600 per kthread
[ 1353.961139][T23365] fuse: Unknown parameter 'Ƥj	'
[ 1354.080097][   T30] audit: type=1400 audit(1758225427.078:3634): avc:  denied  { connect } for  pid=23363 comm="syz.4.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1354.556488][   T30] audit: type=1400 audit(1758225427.088:3635): avc:  denied  { listen } for  pid=23369 comm="syz.2.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1355.252525][T23373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1355.328763][ T5919] vhci_hcd: vhci_device speed not set
[ 1355.545962][T23392] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4578'.
[ 1357.208258][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4586'.
[ 1358.408304][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'.
[ 1358.447225][T23429] ipip0: entered promiscuous mode
[ 1358.630786][T23440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1358.670999][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'.
[ 1359.134932][T23456] ipvlan2: entered promiscuous mode
[ 1359.156954][T23456] bridge0: port 1(ipvlan2) entered blocking state
[ 1359.166687][T23456] bridge0: port 1(ipvlan2) entered disabled state
[ 1359.173682][T23456] ipvlan2: entered allmulticast mode
[ 1359.204422][   T30] audit: type=1400 audit(1758225432.208:3636): avc:  denied  { getopt } for  pid=23446 comm="syz.0.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1359.224322][T23456] bridge0: entered allmulticast mode
[ 1359.230608][T23456] ipvlan2: left allmulticast mode
[ 1359.264369][T23456] bridge0: left allmulticast mode
[ 1359.670318][T23455] ipvlan2: entered promiscuous mode
[ 1359.714883][T23455] bridge0: port 1(ipvlan2) entered blocking state
[ 1359.740453][T23455] bridge0: port 1(ipvlan2) entered disabled state
[ 1359.772478][T23455] ipvlan2: entered allmulticast mode
[ 1359.848661][T23470] FAULT_INJECTION: forcing a failure.
[ 1359.848661][T23470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1359.854459][T23455] bridge0: entered allmulticast mode
[ 1359.867952][T23470] CPU: 0 UID: 0 PID: 23470 Comm: syz.3.4603 Not tainted syzkaller #0 PREEMPT(full) 
[ 1359.867975][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1359.867986][T23470] Call Trace:
[ 1359.867992][T23470]  <TASK>
[ 1359.867999][T23470]  dump_stack_lvl+0x16c/0x1f0
[ 1359.868027][T23470]  should_fail_ex+0x512/0x640
[ 1359.868054][T23470]  _copy_to_user+0x32/0xd0
[ 1359.868081][T23470]  simple_read_from_buffer+0xcb/0x170
[ 1359.868103][T23470]  proc_fail_nth_read+0x197/0x240
[ 1359.868125][T23470]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1359.868148][T23470]  ? rw_verify_area+0xcf/0x6c0
[ 1359.868174][T23470]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1359.868194][T23470]  vfs_read+0x1e1/0xcf0
[ 1359.868215][T23470]  ? __pfx___mutex_lock+0x10/0x10
[ 1359.868239][T23470]  ? __pfx_vfs_read+0x10/0x10
[ 1359.868264][T23470]  ? __fget_files+0x20e/0x3c0
[ 1359.868291][T23470]  ksys_read+0x12a/0x250
[ 1359.868309][T23470]  ? __pfx_ksys_read+0x10/0x10
[ 1359.868334][T23470]  do_syscall_64+0xcd/0x4e0
[ 1359.868359][T23470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1359.868376][T23470] RIP: 0033:0x7fa46718d5bc
[ 1359.868391][T23470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1359.868408][T23470] RSP: 002b:00007fa468061030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1359.868424][T23470] RAX: ffffffffffffffda RBX: 00007fa4673d6090 RCX: 00007fa46718d5bc
[ 1359.868437][T23470] RDX: 000000000000000f RSI: 00007fa4680610a0 RDI: 0000000000000005
[ 1359.868448][T23470] RBP: 00007fa468061090 R08: 0000000000000000 R09: 0000000000000000
[ 1359.868459][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1359.868469][T23470] R13: 00007fa4673d6128 R14: 00007fa4673d6090 R15: 00007ffd11c42818
[ 1359.868495][T23470]  </TASK>
[ 1359.875601][T23455] ipvlan2: left allmulticast mode
[ 1360.117401][T23455] bridge0: left allmulticast mode
[ 1360.502745][T23474] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4605'.
[ 1361.319464][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1361.326732][    C1] bridge0: topology change detected, propagating
[ 1361.333286][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1361.340523][    C1] bridge0: topology change detected, propagating
[ 1361.404735][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.336520][T23500] netlink: 'syz.3.4611': attribute type 4 has an invalid length.
[ 1363.593940][T23513] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1363.802606][T23515] tmpfs: Bad value for 'nr_inodes'
[ 1363.828308][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'.
[ 1363.854385][  T840] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1363.894602][T23517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1364.021323][T23517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1364.096778][  T840] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1364.108630][  T840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1364.143498][  T840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1364.164416][T15512] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1364.194379][  T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1364.232695][  T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1364.259920][  T840] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1364.292718][  T840] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1364.311537][T23520] could not allocate digest TFM handle poly1305-neon
[ 1364.324418][T15512] usb 3-1: Using ep0 maxpacket: 8
[ 1364.324647][  T840] usb 6-1: Product: syz
[ 1364.333724][  T840] usb 6-1: Manufacturer: syz
[ 1364.351583][  T840] cdc_wdm 6-1:1.0: skipping garbage
[ 1364.364824][T15512] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1364.370538][  T840] cdc_wdm 6-1:1.0: skipping garbage
[ 1364.383002][T15512] usb 3-1: config 1 has an invalid interface number: 150 but max is 1
[ 1364.396766][  T840] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1364.439404][T15512] usb 3-1: config 1 has an invalid interface number: 10 but max is 1
[ 1364.439497][  T840] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1364.468376][T15512] usb 3-1: config 1 has no interface number 0
[ 1364.487180][T15512] usb 3-1: config 1 has no interface number 1
[ 1364.493372][T15512] usb 3-1: config 1 interface 150 has no altsetting 0
[ 1364.506821][T15512] usb 3-1: config 1 interface 10 has no altsetting 0
[ 1364.520365][T15512] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=d7.36
[ 1364.532847][T15512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.553931][T15512] usb 3-1: Product: syz
[ 1364.560992][T15512] usb 3-1: Manufacturer: syz
[ 1364.577550][T23511] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[ 1364.586504][ T5995] usb 6-1: USB disconnect, device number 16
[ 1364.606258][   T30] audit: type=1400 audit(1758225437.588:3637): avc:  denied  { read write } for  pid=23510 comm="syz.5.4614" name="cdc-wdm0" dev="devtmpfs" ino=4223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1364.612814][T15512] usb 3-1: SerialNumber: syz
[ 1364.630278][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1364.659900][   T30] audit: type=1400 audit(1758225437.588:3638): avc:  denied  { open } for  pid=23510 comm="syz.5.4614" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1364.683804][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1364.698384][T23534] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4620'.
[ 1364.710853][T23532] No source specified
[ 1364.949369][T15512] qmi_wwan 3-1:1.150: probe with driver qmi_wwan failed with error -22
[ 1365.039029][T15512] usb 3-1: USB disconnect, device number 84
[ 1365.832498][   T30] audit: type=1400 audit(1758225438.838:3639): avc:  denied  { remount } for  pid=23540 comm="syz.3.4623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1366.074535][T23558] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1366.360310][T23564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4628'.
[ 1368.245336][T23596] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4635'.
[ 1368.258881][T23592] No source specified
[ 1368.285801][T23584] netlink: 'syz.0.4632': attribute type 10 has an invalid length.
[ 1368.560961][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4637'.
[ 1368.746309][   T30] audit: type=1400 audit(1758225441.748:3640): avc:  denied  { name_bind 0x1000000 } for  pid=23587 comm="syz.3.4636" path="socket:[86339]" dev="sockfs" ino=86339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[ 1369.786434][T23587] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1370.083101][ T5995] Process accounting resumed
[ 1371.432942][   T30] audit: type=1400 audit(1758225444.438:3641): avc:  granted  { setsecparam } for  pid=23621 comm="syz.0.4643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1371.884771][  T840] usb 1-1: new low-speed USB device number 83 using dummy_hcd
[ 1371.957561][   T30] audit: type=1326 audit(1758225444.858:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.123763][   T30] audit: type=1326 audit(1758225444.858:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.147285][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1372.157082][   T30] audit: type=1326 audit(1758225444.858:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.180559][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1372.194208][  T840] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1372.204475][ T5911] usb 4-1: new full-speed USB device number 118 using dummy_hcd
[ 1372.215664][  T840] usb 1-1: config 0 has no interface number 0
[ 1372.222357][  T840] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1372.234824][   T30] audit: type=1326 audit(1758225444.858:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.261171][  T840] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1372.272675][  T840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1372.284341][   T30] audit: type=1326 audit(1758225444.858:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.312642][  T840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.327039][  T840] usb 1-1: config 0 descriptor??
[ 1372.338064][T23632] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1372.406836][  T840] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1372.435811][   T30] audit: type=1326 audit(1758225444.858:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.505440][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.519904][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1372.554437][T23650] netlink: 'syz.5.4650': attribute type 4 has an invalid length.
[ 1372.562716][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1372.604710][T23653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4649'.
[ 1372.685843][T23653] 
: renamed from bridge_slave_0 (while UP)
[ 1372.701388][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1372.714582][   T30] audit: type=1326 audit(1758225444.858:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.738778][   T30] audit: type=1326 audit(1758225444.858:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.762258][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1372.814190][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1372.844730][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1372.864438][ T5911] usb 4-1: Manufacturer: syz
[ 1372.887687][ T5911] usb 4-1: config 0 descriptor??
[ 1372.909982][   T30] audit: type=1326 audit(1758225444.858:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23633 comm="syz.3.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa46718eba9 code=0x7ffc0000
[ 1372.933479][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1373.704479][ T5911] rc_core: IR keymap rc-hauppauge not found
[ 1373.710406][ T5911] Registered IR keymap rc-empty
[ 1373.716050][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.734912][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.756406][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1373.809012][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input114
[ 1373.851427][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.887606][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.914522][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.954665][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1373.974598][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.034618][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.055980][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.074697][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.107877][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.297797][ T5911] mceusb 4-1:0.0: Error: mce write urb status = -71
[ 1374.810741][ T5911] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1374.828600][ T5911] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1374.860707][ T5911] Process accounting resumed
[ 1375.369690][T23679] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4656'.
[ 1375.474932][  T840] usb 4-1: USB disconnect, device number 118
[ 1375.721318][ T5995] usb 1-1: USB disconnect, device number 83
[ 1376.240088][T23692] ------------[ cut here ]------------
[ 1376.245566][T23692] DEBUG_LOCKS_WARN_ON(1)
[ 1376.245622][T23692] WARNING: CPU: 0 PID: 23692 at kernel/locking/lockdep.c:238 hlock_class+0x64/0x70
[ 1376.259192][T23692] Modules linked in:
[ 1376.263063][T23692] CPU: 0 UID: 0 PID: 23692 Comm: syz.0.4660 Not tainted syzkaller #0 PREEMPT(full) 
[ 1376.272409][T23692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1376.282447][T23692] RIP: 0010:hlock_class+0x64/0x70
[ 1376.287717][T23692] Code: cc 90 e8 6f 65 49 03 85 c0 74 23 8b 05 c5 40 14 0f 85 c0 75 19 90 48 c7 c6 0c da e2 8d 48 c7 c7 c4 85 e1 8d e8 4d db e2 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90
[ 1376.307306][T23692] RSP: 0018:ffffc9000c5c77f0 EFLAGS: 00010086
[ 1376.313363][T23692] RAX: 0000000000000000 RBX: ffff888028172f30 RCX: ffffc90011116000
[ 1376.321313][T23692] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001
[ 1376.329262][T23692] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1376.337211][T23692] R10: 0000000000000000 R11: 000000000002a470 R12: ffff888028172f80
[ 1376.345161][T23692] R13: ffff888028172440 R14: 0000000000000000 R15: ffffffff8b5133e8
[ 1376.353113][T23692] FS:  00007f33af6076c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000
[ 1376.362021][T23692] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1376.368584][T23692] CR2: 00002000000012c0 CR3: 000000002ad55000 CR4: 00000000003526f0
[ 1376.376541][T23692] Call Trace:
[ 1376.379798][T23692]  <TASK>
[ 1376.382707][T23692]  __lock_acquire+0x218/0x1ce0
[ 1376.387469][T23692]  ? dns_resolver_match_preparse+0x48/0x70
[ 1376.393272][T23692]  lock_acquire+0x179/0x350
[ 1376.397753][T23692]  ? kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.403364][T23692]  ? __pfx___might_resched+0x10/0x10
[ 1376.408634][T23692]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1376.414440][T23692]  ? net_ctl_permissions+0x118/0x130
[ 1376.419732][T23692]  down_write+0x92/0x200
[ 1376.423970][T23692]  ? kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.429589][T23692]  ? __pfx_down_write+0x10/0x10
[ 1376.434433][T23692]  ? __rcu_read_unlock+0x2bc/0x550
[ 1376.439522][T23692]  ? __pfx_net_ctl_permissions+0x10/0x10
[ 1376.445142][T23692]  ? net_ctl_permissions+0x118/0x130
[ 1376.450411][T23692]  kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.455860][T23692]  driver_remove_file+0x4a/0x60
[ 1376.460696][T23692]  bus_remove_driver+0x224/0x2c0
[ 1376.465612][T23692]  driver_unregister+0x76/0xb0
[ 1376.470359][T23692]  comedi_device_detach_locked+0x12f/0xa50
[ 1376.476151][T23692]  do_devconfig_ioctl+0x555/0x710
[ 1376.481160][T23692]  ? __mutex_lock+0x344/0x1060
[ 1376.485914][T23692]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1376.491450][T23692]  ? comedi_unlocked_ioctl+0x167/0x2f00
[ 1376.496976][T23692]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1376.502422][T23692]  ? rcu_is_watching+0x12/0xc0
[ 1376.507169][T23692]  ? irqentry_exit+0x3b/0x90
[ 1376.511739][T23692]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1376.516922][T23692]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1376.522706][T23692]  ? do_vfs_ioctl+0xdf6/0x14f0
[ 1376.527455][T23692]  ? do_vfs_ioctl+0x1234/0x14f0
[ 1376.532288][T23692]  ? do_vfs_ioctl+0x128/0x14f0
[ 1376.537034][T23692]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1376.542041][T23692]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1376.548880][T23692]  ? selinux_file_ioctl+0x180/0x270
[ 1376.554062][T23692]  ? selinux_file_ioctl+0xb4/0x270
[ 1376.559160][T23692]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1376.564945][T23692]  __x64_sys_ioctl+0x18e/0x210
[ 1376.569693][T23692]  do_syscall_64+0xcd/0x4e0
[ 1376.574177][T23692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1376.580045][T23692] RIP: 0033:0x7f33ae78eba9
[ 1376.584437][T23692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1376.604023][T23692] RSP: 002b:00007f33af607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1376.612414][T23692] RAX: ffffffffffffffda RBX: 00007f33ae9d6090 RCX: 00007f33ae78eba9
[ 1376.620370][T23692] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[ 1376.628320][T23692] RBP: 00007f33ae811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1376.636267][T23692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1376.644215][T23692] R13: 00007f33ae9d6128 R14: 00007f33ae9d6090 R15: 00007ffcd7e9c058
[ 1376.652265][T23692]  </TASK>
[ 1376.655265][T23692] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1376.662520][T23692] CPU: 0 UID: 0 PID: 23692 Comm: syz.0.4660 Not tainted syzkaller #0 PREEMPT(full) 
[ 1376.671958][T23692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1376.681995][T23692] Call Trace:
[ 1376.685250][T23692]  <TASK>
[ 1376.688161][T23692]  dump_stack_lvl+0x3d/0x1f0
[ 1376.692736][T23692]  vpanic+0x6e8/0x7a0
[ 1376.696698][T23692]  ? __pfx_vpanic+0x10/0x10
[ 1376.701192][T23692]  ? hlock_class+0x64/0x70
[ 1376.705591][T23692]  panic+0xca/0xd0
[ 1376.709293][T23692]  ? __pfx_panic+0x10/0x10
[ 1376.713688][T23692]  check_panic_on_warn+0xab/0xb0
[ 1376.718603][T23692]  __warn+0xf6/0x3c0
[ 1376.722473][T23692]  ? __pfx_vprintk_emit+0x10/0x10
[ 1376.727481][T23692]  ? hlock_class+0x64/0x70
[ 1376.731879][T23692]  report_bug+0x3c3/0x580
[ 1376.736191][T23692]  ? hlock_class+0x64/0x70
[ 1376.740585][T23692]  handle_bug+0x184/0x210
[ 1376.744897][T23692]  exc_invalid_op+0x17/0x50
[ 1376.749384][T23692]  asm_exc_invalid_op+0x1a/0x20
[ 1376.754214][T23692] RIP: 0010:hlock_class+0x64/0x70
[ 1376.759220][T23692] Code: cc 90 e8 6f 65 49 03 85 c0 74 23 8b 05 c5 40 14 0f 85 c0 75 19 90 48 c7 c6 0c da e2 8d 48 c7 c7 c4 85 e1 8d e8 4d db e2 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90
[ 1376.778807][T23692] RSP: 0018:ffffc9000c5c77f0 EFLAGS: 00010086
[ 1376.784855][T23692] RAX: 0000000000000000 RBX: ffff888028172f30 RCX: ffffc90011116000
[ 1376.792809][T23692] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001
[ 1376.800759][T23692] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1376.808707][T23692] R10: 0000000000000000 R11: 000000000002a470 R12: ffff888028172f80
[ 1376.816655][T23692] R13: ffff888028172440 R14: 0000000000000000 R15: ffffffff8b5133e8
[ 1376.824605][T23692]  ? dns_resolver_match_preparse+0x48/0x70
[ 1376.830400][T23692]  ? __warn_printk+0x1a5/0x350
[ 1376.835152][T23692]  __lock_acquire+0x218/0x1ce0
[ 1376.839904][T23692]  ? dns_resolver_match_preparse+0x48/0x70
[ 1376.845693][T23692]  lock_acquire+0x179/0x350
[ 1376.850179][T23692]  ? kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.855790][T23692]  ? __pfx___might_resched+0x10/0x10
[ 1376.861058][T23692]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1376.866849][T23692]  ? net_ctl_permissions+0x118/0x130
[ 1376.872116][T23692]  down_write+0x92/0x200
[ 1376.876342][T23692]  ? kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.881952][T23692]  ? __pfx_down_write+0x10/0x10
[ 1376.886786][T23692]  ? __rcu_read_unlock+0x2bc/0x550
[ 1376.891873][T23692]  ? __pfx_net_ctl_permissions+0x10/0x10
[ 1376.897515][T23692]  ? net_ctl_permissions+0x118/0x130
[ 1376.902792][T23692]  kernfs_remove_by_name_ns+0x3d/0x110
[ 1376.908227][T23692]  driver_remove_file+0x4a/0x60
[ 1376.913069][T23692]  bus_remove_driver+0x224/0x2c0
[ 1376.917986][T23692]  driver_unregister+0x76/0xb0
[ 1376.922730][T23692]  comedi_device_detach_locked+0x12f/0xa50
[ 1376.928520][T23692]  do_devconfig_ioctl+0x555/0x710
[ 1376.933592][T23692]  ? __mutex_lock+0x344/0x1060
[ 1376.938337][T23692]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1376.943875][T23692]  ? comedi_unlocked_ioctl+0x167/0x2f00
[ 1376.949402][T23692]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1376.954851][T23692]  ? rcu_is_watching+0x12/0xc0
[ 1376.959599][T23692]  ? irqentry_exit+0x3b/0x90
[ 1376.964171][T23692]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1376.969350][T23692]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1376.975137][T23692]  ? do_vfs_ioctl+0xdf6/0x14f0
[ 1376.979888][T23692]  ? do_vfs_ioctl+0x1234/0x14f0
[ 1376.984726][T23692]  ? do_vfs_ioctl+0x128/0x14f0
[ 1376.989485][T23692]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1376.994492][T23692]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1377.001333][T23692]  ? selinux_file_ioctl+0x180/0x270
[ 1377.006519][T23692]  ? selinux_file_ioctl+0xb4/0x270
[ 1377.011613][T23692]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1377.017400][T23692]  __x64_sys_ioctl+0x18e/0x210
[ 1377.022149][T23692]  do_syscall_64+0xcd/0x4e0
[ 1377.026634][T23692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.032507][T23692] RIP: 0033:0x7f33ae78eba9
[ 1377.036897][T23692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1377.056486][T23692] RSP: 002b:00007f33af607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1377.064890][T23692] RAX: ffffffffffffffda RBX: 00007f33ae9d6090 RCX: 00007f33ae78eba9
[ 1377.072862][T23692] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[ 1377.080823][T23692] RBP: 00007f33ae811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1377.088776][T23692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1377.096724][T23692] R13: 00007f33ae9d6128 R14: 00007f33ae9d6090 R15: 00007ffcd7e9c058
[ 1377.104683][T23692]  </TASK>
[ 1377.107910][T23692] Kernel Offset: disabled
[ 1377.112213][T23692] Rebooting in 86400 seconds..